last executing test programs: 22.175907513s ago: executing program 2 (id=1007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @sk_skb}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) (async, rerun: 64) r4 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r5, 0x0, 0x0, 0x800, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000a5f4bf8123e386de8660aa3905a6f101c8be784c7c76d00bb20e6dfcb496fd9e0a01080000000000e1ffff0200000509000114de5c64d08faf27881707ba0bb97f65d6112e7646cc51b6d91be42a1d72161cfb947f168a7064b8a1d86f1d0676786760916b09be1c81e1cedaf635153727dc761ef7617348d8a13f2d473495cf06af732a987139dd723509be6a8d67de80715e4c40f2bcd296"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x20004004) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4048000}, 0xc000) 21.867165093s ago: executing program 2 (id=1012): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e25, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r4], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0100000006100000200012800800010067747000140002800500050000000000080004000000000008000a00", @ANYRES32=r4, @ANYBLOB="d1606f2ae9aa7b2021d16775b0fa91adc104f8d1541b0b64a39d6eca5744b4413901dbf76fdb2da88b0677599c7e6531f58183b40cd4ad67108d3e46ddc618f7ff8a79f51066bff30c46337921291318a7836b72dd1d77661bc70ba7e9d617c56434ea774d394f0247c59ea0ba2190212f802c7c0a771acaa059548f68c7e0d6555a6f6aa4c005069f0177ec7b784cc43d6c2e1b8a9718dff8b12946f8218752d0ffe4b53f83bfc5b639098c294c20aac091cd478bb2c080df8f80"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000280)={@broadcast, @dev, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x10, 0xfffffffc, 0x4, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x68, 0x0, 0x82, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @generic={0x7, 0xb, "ec40768da254c566d1"}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040040) r8 = accept(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) recvfrom(r2, &(0x7f00000003c0)=""/69, 0x45, 0x4100, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0x1, &(0x7f00000000c0), 0x31, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) 20.988639763s ago: executing program 0 (id=1027): r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x800) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'macsec0\x00', &(0x7f0000000100)=@ethtool_cmd={0x26, 0x4, 0x2, 0x6, 0x8, 0x4, 0x1, 0xc, 0xb, 0x40, 0x3, 0x10, 0x6, 0x6, 0x0, 0x4, [0x4, 0x4]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000010000000000000000000000071100a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 20.967996914s ago: executing program 2 (id=1028): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) shutdown(r0, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x80000041, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES64=r0, @ANYRES64=r2], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 20.783297481s ago: executing program 0 (id=1031): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr=0x64010102, @multicast2}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x40010) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf250400000006000a006b983800080001"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x48090) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000400)='GPL\x00'}, 0x90) 20.61093735s ago: executing program 0 (id=1035): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="98010000100013070000000000000000fe8000000000000000000000000000aafe80000000000000000000000000001500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/336], 0x198}}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "89c3940b480bf0b3b4fa8df6c04eb7b4"}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x1, 0x1, {{0x7, 0x4, 0x2, 0x9, 0x1c, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp={0x44, 0x8, 0x54, 0x0, 0x8, [0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x3f, 0x7, {{0x11, 0x4, 0x3, 0x36, 0x44, 0x66, 0x0, 0x1, 0x29, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x23, 0x3a, [@rand_addr=0x64010101, @multicast1, @multicast2, @rand_addr=0x64010101, @local, @private=0xa010101, @multicast2, @broadcast]}, @rr={0x7, 0xb, 0xb8, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x4, 0x9, 0xa, @remote, @local, 0x10, 0x80, 0x4, 0x8}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r11}, @IFLA_HSR_SLAVE1={0x8, 0x1, r13}]}}}]}, 0x40}}, 0x44) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x10, 0xdc, 0x24, @dev={0xfe, 0x80, '\x00', 0x29}, @ipv4={'\x00', '\xff\xff', @remote}, 0x20, 0x40, 0x4, 0x6}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_macvtap\x00', 0x0}) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r18 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r19 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r20 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r18, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r19, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r20, r17, 0x25, 0x2, @void}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x144, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000040) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) 20.111088618s ago: executing program 0 (id=1041): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) (async) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000840) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f5ff00"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f5ff00"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x4) sendmsg$netlink(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x20090) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) 19.085801035s ago: executing program 4 (id=1053): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x944, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x8fc, 0x2, [@TCA_BPF_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x725, 0x37, 0x7ff, 0x80000000, 0x7fffffff, 0x8b5, 0xd598, 0xe93, 0x9, 0x0, 0x55aa, 0x3, 0x58e, 0x1, 0x40, 0x1, 0x1, 0x4, 0x1, 0x10000, 0xf, 0x4, 0x6, 0x98c9, 0x7e, 0x7, 0x5, 0x6, 0x60, 0x4, 0x0, 0xfffffe01, 0x80000000, 0x9, 0x9, 0x101, 0x37d, 0x3, 0x8001, 0xffffffff, 0x9, 0x1, 0x6, 0xa, 0x7, 0x6, 0x0, 0x101, 0xa225, 0x6507bd90, 0x2, 0x7, 0xffff, 0x3, 0x4, 0x81, 0x1ff, 0x4, 0x5db, 0x9ab6, 0x9, 0x3, 0x40, 0x5, 0x4, 0x1, 0x1, 0x1ff, 0x8, 0xffff, 0x64, 0x7, 0xe4c2, 0x1, 0x6, 0xf, 0xffffff7a, 0x6, 0x7, 0x5, 0xcf, 0x5, 0xc349, 0x800, 0xd, 0x8, 0x10, 0x5, 0x5f, 0x20000000, 0x7, 0x9, 0x9, 0x3d2f9586, 0x6, 0x7, 0xabc9, 0xb, 0x3, 0x2a, 0x10000, 0x1, 0x0, 0x0, 0xff, 0xfff, 0x40, 0x2, 0x7, 0x1ff, 0x5, 0x5, 0x8, 0x3, 0x5e2, 0xfffffffb, 0x3, 0x7, 0x1, 0x3, 0x1, 0x8, 0x2, 0x9, 0x37a, 0x7, 0x80000000, 0x8ea, 0x9, 0xf, 0x2, 0x8, 0x80000001, 0x2, 0x22000000, 0xb, 0x2, 0xff, 0x1, 0x4, 0xfffff001, 0x200, 0x9, 0x17, 0x4, 0x3, 0x6, 0xba, 0x0, 0x2, 0xd3, 0xfffffffd, 0x0, 0x2, 0x81, 0x3ff, 0x1ff, 0xa89b, 0xb, 0x7, 0x0, 0x0, 0xffffff2d, 0x4, 0x6a5, 0xd, 0xc00, 0xc, 0x1980000, 0x2, 0x7, 0x3ef5, 0xa, 0x5, 0x1, 0x4, 0x8, 0x8000, 0x400, 0xe8, 0x400, 0xfffffffb, 0x1000, 0x5, 0x8, 0x81, 0x2, 0x5, 0xff, 0x5, 0x81, 0x2, 0x2, 0x0, 0x1, 0xfffffff7, 0x6, 0xfffffffd, 0x3, 0x8, 0x6, 0x5, 0x112d, 0x0, 0x7, 0x3, 0xffffffff, 0x10, 0x200, 0x1c, 0x4, 0x7, 0x885, 0x8b08, 0x9, 0xa, 0xffff, 0x2, 0x800, 0x6, 0x8, 0x1b46, 0x2, 0x81, 0x400, 0x9, 0x3, 0xfffff7f3, 0x800, 0x8, 0x80000001, 0x7, 0xb890, 0x10000, 0x6, 0x400, 0xfffffff7, 0x7, 0x400, 0x7f, 0x8, 0xfffffffc, 0x40, 0x8, 0x8, 0x5, 0x2, 0x2897, 0x50, 0x8, 0x0, 0x0, 0x6, 0x5, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7, 0x9, 0x4, 0xfa5, 0x7, 0xffff0000, 0x1, 0xfffffffc, 0x39, 0x7, 0x2, 0x2, 0x80, 0xfff, 0x7, 0x43, 0x2, 0x9, 0x8, 0x3, 0x7, 0x6, 0x968b, 0x800, 0x2, 0x8, 0xffff, 0x8, 0x9, 0x406, 0xc, 0x2, 0xd, 0x877, 0x1, 0x13, 0xf6, 0x9, 0x7fffffff, 0x3, 0x31, 0x6, 0x2, 0x122, 0x2, 0x4, 0x8001, 0xffff, 0x5, 0x9c48, 0x9, 0x7, 0x206, 0x1ed, 0x9, 0x6, 0x4, 0x3c6d, 0x9, 0xd2, 0x4, 0x7, 0x8, 0x4, 0x1ff, 0x7, 0xd, 0x233, 0x7d4, 0xe, 0x2, 0x8, 0x1ff, 0x400, 0x9, 0x10a6, 0x481, 0xecac, 0x2, 0x3ff, 0x1, 0x5, 0x1000, 0x9, 0x9, 0x3, 0x73e9, 0xffff, 0xffffffff, 0x5, 0x4, 0x2, 0x6, 0xfffeffff, 0x2, 0x2, 0xeb2, 0x8, 0x1, 0x80000001, 0x1, 0xfffffffc, 0x20, 0x7, 0x9, 0x7, 0xb, 0x9, 0x6, 0x7, 0x6, 0x9, 0x0, 0x7, 0x5, 0xfffffff8, 0xfffff800, 0x2, 0x80000, 0x1, 0x3, 0x8, 0x9, 0xffffffa9, 0x2, 0x401, 0x3, 0x1fc0, 0x4, 0x3, 0x400, 0x3, 0x10, 0x2, 0x8, 0x3, 0x14c1, 0x5, 0x7fff, 0x40000, 0x0, 0x80000000, 0xffff, 0x80000000, 0xc, 0x5, 0x9, 0x6, 0x7, 0x9, 0x0, 0x6e, 0x9, 0x7fffffff, 0x1ff, 0x9, 0x84c8, 0x80, 0x6, 0x6, 0xffffff85, 0xa4ea, 0x3, 0x39, 0xfa, 0xb4b, 0xfffffffb, 0xfff, 0x1000, 0x401, 0x6, 0x2, 0x7, 0x1, 0x3, 0x2, 0x1, 0xffffffff, 0x7, 0xffe, 0x200, 0x8001, 0x0, 0x200, 0x9, 0xe8, 0x3, 0x98, 0x800, 0x5, 0x9, 0x8, 0x100, 0x0, 0x1b, 0x7, 0x1, 0x7, 0x401, 0x10000, 0x7, 0x3, 0x8, 0x8, 0x7, 0x8, 0x3, 0x2, 0xd, 0x7f, 0x7ff, 0x8f8, 0x6, 0x6, 0x9, 0x2, 0x236c80, 0x4, 0xe07, 0xd, 0x8001, 0xfe0c, 0x0, 0x3ff, 0xb, 0x101, 0x4, 0x7, 0xdb4, 0x7, 0xfffffff9, 0xff2, 0x3, 0x0, 0xfffffffb, 0xffffe42b, 0x0, 0x3, 0x7, 0x90, 0x9, 0x7, 0x9, 0x8001, 0x7, 0x10001, 0x10001, 0x6, 0x0, 0x4, 0x2, 0x3, 0x4, 0x8, 0x2]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe0, 0x1, [@m_mpls={0x40, 0xb, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8809}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3534a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x9c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x6d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x944}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r6, 0x25, 0x4, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400b93e636c83bb09fd47ae0f2efd43571367000000", @ANYRES32=r9, @ANYBLOB="0c0001800800010062000200"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) r10 = socket$inet6(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="03050400ff079c000000450f00400068000001069078ac1414aa640101020000000000000d00000000000000000400004e2800004e230000000000000003000000030000000300000001"], 0x4a) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r14, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="06e0fffe007ebabec41177fb86dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 18.981321266s ago: executing program 0 (id=1055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0xfff3, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xfff8}}}]}, 0x38}}, 0x4) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000061656769733132382d67656e6572696300"], 0xe0}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'macvlan1\x00', 0x0}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r9, r7, 0x0, 0xf2) sendto$packet(r2, &(0x7f0000000240)='D', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000100001"], 0xe8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = getpid() syz_open_procfs$namespace(r11, &(0x7f0000000040)='ns/time_for_children\x00') sendmsg$IPSET_CMD_HEADER(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000000c0601040000000000000000000000050900020073797a3200000000051b010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x9}, 0x20000080) socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 18.921708727s ago: executing program 2 (id=1057): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket(0x23, 0x2, 0x0) (async) r2 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x10, &(0x7f0000000100)={0x0, 0x64}, 0x2}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r5, 0x200}, &(0x7f00000002c0)=0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="680400006c00010028bd7000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB], 0x468}, 0x1, 0x0, 0x0, 0x2004c012}, 0x32044010) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@delqdisc={0x24, 0x25, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xd}, {0x5, 0xfff3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x5) 18.527441774s ago: executing program 4 (id=1062): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000200)={0x0, 0xb, 0x6, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001802000060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 18.418971724s ago: executing program 4 (id=1066): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b36aa89aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab40c4ce63bfba9bc4bca883dcc8495f3ad3176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbefc538369959f773a4cddf9e90aa9b73270280d0cab060cfbd99bb790cc95042ba7605f8fa201a80ce6c236a9fa14000bb8fbaddbfe180c573c325977484f45c73b2572663dde"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000107010200000000feff00000200000a0c0002440000000000000468080005400000000009000100730000007f"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x14) (async, rerun: 32) socketpair(0x2c, 0x3, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0xfffffffe, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r9}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x40020}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000200)={'veth1_virt_wifi\x00', {0x2, 0x8, @local}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x2402c001) (async, rerun: 32) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (rerun: 32) 18.35185474s ago: executing program 4 (id=1067): listen(0xffffffffffffffff, 0x101) 17.85435067s ago: executing program 4 (id=1070): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) r0 = socket$kcm(0x2, 0x5, 0x84) (async) r1 = getpid() (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 17.599629456s ago: executing program 4 (id=1073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c00), 0x8}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r5 = getuid() r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcac, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000082}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) sendmsg$nl_xfrm(r3, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e4030000150000072abd7000fcdbdf25ff020000000000000000000000000001ff0200000000000000000000000000014e24080000080008020020803a000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="b06b6e0001b75d9e3800070000000000000000000000000000000000ac1414aa0000000000000000000000004e23fffb000910000a00002084000000", @ANYRES32=r8, @ANYRES32=0xee00, @ANYBLOB="2c6600000000000001fcffffffffffff0a00000000000000a500000000000000fcffffffffffffff0500000000000000010000000000000004000000000000000300000000000000e600000000000000f7ffffffffffffff9aa400000000000009000000b26b6e0000010101000000005c000400fcff4e214e2400007f000001000000ecff0000000000000008001800d30c0000e5000800e100080001e1d900e8d26e903c0a2e03b643cb07e9edc83d9ea90210950ac65a83809b72d40d05f4eb9f039670ccfb67062f2ba0629b36b45d63e9b58ec984c6ce11fdd131525c9c8e51ac263d78e5fd87421aade947071d799b6c2a7c9854653914bc4e666cf1002cea44280f8cf1438f527e59308f2dd14f12014f11e61c84962bd50218fbc68afa0b7742105fa62a5b0c72d345c8fc3b096f5ccdd8c6ec8bad2062ab57c11924aef9f128ef0bd1f9b3a029d2c2a2c3b4f7cc8c1d471d7e00cd426467aa2665ee3f133d5e14e28af24fba5c392b68fc6f3af2d1663b76198ce3000000ac000700ac1414aa000000000000000000000000fc0000fa000000000000000000000000000700044e2000090a0020802b0000005463ae", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="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"], 0x3e4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r14, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r15 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r15, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) sendto$inet(r15, &(0x7f0000000440)='!', 0x1, 0x4048845, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x20, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400, 0x140}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r16, 0x89e0, &(0x7f0000000180)={r2, r0}) 17.595433652s ago: executing program 0 (id=1074): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x34bf9b113ab956ad, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01014d0000005e1affd50200000009006815cf4efa6ce6d90000080002400000032cc2750000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32bec6fbc2aad6ccccb6a94a33e400000000140000", @ANYRESHEX=r5, @ANYRESDEC=r3], 0x7c}}, 0x840) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) unshare(0x22020400) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r6, 0x800442d4, &(0x7f0000000180)=0x5) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000c05ebafed5b25f38b3bcdbc3c77e0fdf00000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) syz_emit_ethernet(0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c220080200000000000022f02f7a9df7550c329d963a5adf95ed9a05687a417d52709736282a656f4fd57d66c68775fb538e050758e262cd8b29f6acd57d88104f6c311a22b2f1523570e303ca"], 0x0) close(r1) 17.590933788s ago: executing program 2 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0xe, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)=r5) 17.588852437s ago: executing program 2 (id=1080): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) close(0x4) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) writev(r5, &(0x7f0000001a80)=[{&(0x7f0000000180)="bf", 0x1}], 0x1) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x39ee1000) connect$rose(r8, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x5, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r6}, 0x20) recvfrom$l2tp6(r6, &(0x7f0000000240), 0x0, 0x40000000, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x20) recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 17.523948904s ago: executing program 1 (id=1084): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133}], 0x9}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c) 17.36527059s ago: executing program 1 (id=1085): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="4d9d36b15b4ed40d053554e77099b649cb03ff4093a9d6690a252b239690ef5e75965d9cb9a95b596182e75d6705c216c59910a8ef71a2873a047d6c28267e11538f66af7b51f01d4467e36a103a676bc0c438fd631538ef7eef9e921991c18e0c3e9697973fc178eb81f64baba9bed7103e1447e5aecd49d968f20df783ea985e359dbd581811f69c1e7cdaafee98b41d6a195b053898fc91af4ce0f05bddeff2f24bcffacbc8ce32a76fc6ca9328278d1b1fc28a07bd05523bf08107", 0xbd) 17.203219311s ago: executing program 1 (id=1088): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x400c4) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="480000001000370429bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c043d072c1e00280012800b000100697036746e6c000018000280140000000000000000e3"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) 17.102550205s ago: executing program 1 (id=1089): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50005}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x20, 0x0, [{@remote}, {@loopback}]}}) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 17.045874478s ago: executing program 1 (id=1091): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) socket$inet(0x2, 0x3, 0x7f) (async) r3 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.750402197s ago: executing program 1 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000a10ff02000000000000000000000000000189"], 0x340a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffd94, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r3], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 15.355523188s ago: executing program 3 (id=1105): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x13) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x64}}, 0x4000080) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) 15.354824206s ago: executing program 3 (id=1106): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xac, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x21, '\x00', r0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000002800018014000400ff01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}}, 0x0) (async, rerun: 64) r5 = socket$kcm(0x11, 0x2, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) (async) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async, rerun: 64) r7 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async, rerun: 64) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async, rerun: 64) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r9 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r8, &(0x7f0000002780)=ANY=[], 0xfb5) (async) r10 = accept4$ax25(r6, &(0x7f0000000000)={{}, [@netrom, @bcast, @bcast, @default, @null, @bcast, @default, @bcast]}, &(0x7f0000000080)=0x48, 0x800) ioctl$SIOCAX25CTLCON(r10, 0x89e8, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x81d, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) (async) accept(r6, 0x0, 0x0) 15.26239041s ago: executing program 3 (id=1107): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) (async) shutdown(r1, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000040)={r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@enum64={0x5, 0x4, 0x0, 0x13, 0x1, 0x0, [{0xc, 0x1fe0, 0x5}, {0x7, 0x2, 0x8}, {0xe, 0x4, 0x9}, {0xe, 0x7f, 0x6}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000340)=""/203, 0x58, 0xcb, 0x1, 0x4, 0x10000, @value=r3}, 0x28) 15.229506939s ago: executing program 3 (id=1108): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="81108200000000819500000000020000"], &(0x7f0000000280)='GPL\x00'}, 0x90) 15.126876335s ago: executing program 3 (id=1109): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x29c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xe7, 0x6, "8115980bce92cafb6cdd0673f6e8d865c3426f3f76e2e596ad4bcc66c3117ce59850998980bcf751883b88c175a327d4f5c3265e06c450ddd2b37836ea433329738c3ff1dd118af36c7d4a0a7773620cb5dda2b44fb963bd8d1f2bfa6c46f2df08ffe8c0ecaa00e467bc42e786216a0afbec52d7eb271e009ce47d9d1dc433a0f800f961bfdf163cc3bcca6c74e870b5a5ded2c393826cd90e4eca1d7fb533cf6a37a56d9d41325c010e05e520119dd716947106ec8dcf9e07aca906fa4e2a8d24c05e018d4e716e3a39e57604db20a7736ece34cd738f31a22fa2246301373a54b7fe"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xab, 0x6, "be241712bb9e6326da3aa992f54eb91d103d03661d740d4f655d01dfc42f958dcbde827d965611b617ebfe39580b2da6c9e7fd0ad3fe9ad1a064628257477347d970358159f4e785845fbe7ec5ff1b0f84e2e212e528d40dd70578a1bc10a94ac850b3f8c8593a8403d401f2778f6e9c859ee97d33ff06e6cd2da2c86361ae83a9a4f37a55697143fc14a55dbb4745f90be02139d42d4294cfc37d94385ceaa2dfd58889456f00"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x738841e86ccf47d8}, @NFTA_TABLE_USERDATA={0x97, 0x6, "51c94a5780201e7e0b17bdedf9f8d17a9fa25d4ac95b09a4b5f241f7799bd014e7094dace1d92a5c5b760f712c01d2c0fe75b8d672b74e9bb870d8233da7b69beb06b53d52d57f4d58401e36ee32374af4852452754dd5e048371063b6dafa2f3811e708f1646d8f315200e8acfc44675a17c2af5d99a139678598e46f9bc4730834ccdde8bfc65a2336f1e1da74e95f68d35f"}, @NFTA_TABLE_USERDATA={0x2b, 0x6, "9319fa098b74de931bf93d7cfa1160c3cc379d66d35e6e1aefcf067f3f987e2066833bb47f7b90"}]}, @NFT_MSG_DELRULE={0x11c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xd0, 0x7, 0x1, 0x0, "ef2e0c3b0774d86bccb505b8155efa804f720217bf2e434d836696e0984445f75f637195da38b0deee155bff608e86b62046dcd9076e282a44b4a0eae4260cb7167887ad6e0c94ef37f94bd712f350fc5fbce1b1be1fe21ee8c6b82cf97dbc1b33fc21eb8c99793573449c0c26ab1208b4ab92bb937a240c87a2f3dd8ae24ed8129539812edadb513ce53bedb635a6fc5e84d013f735ff1aad02d1b60c8daa7ba14bfd846a55c5157a0eae89cde299c433cb5a01d4124e5b7f15d8113a21ef1b3280160631bb5cd2e0288ee6"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x1e0, 0x0, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x9b, 0x6, "da2fbc4d1474afc03a235d15a5035084665b05df44d69b1520fb428b5b2cd01ace7e5f9ff487f2185d49f02a42154f5b3ddc0c701508b9cb5c8caa5e5f8d734002c89536609b7025ceb15c6867d6125fe3fc1dfd5b06eafb442a06ae0a9b77db47aa8d34dbdf79a3375ae19b2d2eaeae42cd726bd961a317d845095d47c67dbaac4e6249733d41c77c6415c61f61f020407aceb660b711"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xf2, 0x6, "8910a3c0f5b5e927a23497cdcf87fac9c00631a25a6a83260f993e3a947ae96bcc5d92364c882b38f6d7ccdea32b5e12f89b159552314b7f3eeb0448bcf4b5ef306faadde9e54dd296ea14ecc76b2b9a04d3eaf2a6cebcba2fc99232967559aa4d6129e0c53aa079560a5b848b84bf754d8562b0d2706885a41fa38de709fc8a9aa668605ee4134ea940a110d0aaafdf2330434c064fc3228af6a3d26a9f663a2a11994b4e13e30c5bc9f65cc97f29d9f604ca2e143ff9cbf09330a72ff2bf323ba3e87469db30a6b9ad217faa0efeae232af843c1009ffd3657c58299eda86f4dd50cb7763bc10022edcb73f9d4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0x314, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2f8, 0x3, 0x0, 0x1, [{0x2f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x62, 0x1, "6aa5680b4168da46d092c928006c4d3a5265ac9a5cb44e9ec159857171f9b15e197bc32585091dcd9fdf4f0f8284261d634b76ad515f26c39500d2b3cb5be9cefd7cbc871a6fc32ce3c4a04dabfd5dc3cb05856183dfd0e845328627972a"}, @NFTA_DATA_VALUE={0xfa, 0x1, "f1e9689133d51f48f375d84571d6c6f4afeb67dd1c193e2f4f2a10ddd6aae0b188c13ff6245e7b20ac1602a42c7ced96d41c6b8c6d24721deb3f5210ce9d197997fba424b2d5056c990c1c7aa207dd4c52201144ae871c0ef5ca9f5daba4cb7a8fcec54fa869b141a8f9640048dd279cf392213a9a2b2658b8866b9ec084eb41fa06df03dc107b70db04192132763e564f0c2240af1d9b53bc09a2fa1b9e836b518b49c45c3bb501f1b025ab4a311194a5453bc539766186e23036df6de8da0645a915787f869426ebc7040de3a4ff829ad28f807d724fb89526a4caaa4b557238ec068e24f3e4e502759b8adecd276c663e9f0778ea"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x26, 0x1, "447effd0c3cd39430518f9ec2a94d851c3874b83f5acf1a3f29bfb8fba21e0244f0c"}, @NFTA_DATA_VALUE={0x8a, 0x1, "a82641904ffa9442bd7e3053019f8a6764e777be4c318567a84fe46ddc1974253511dd2c4ceacc693678b21651f52d23cb8ef4feacc81ffe73bdc0b5bc0c31592b334bed5be2afae3d0c810e08d85743b52550c4771488b64fd96bc429a168411bd720dce21409c5ec5aea84af1a6f8bf9855960adb04c516b585fd812fe2099d3053047d968"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x14}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}]}, @NFT_MSG_DELSET={0x2d8, 0xb, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_DESC={0x2ac, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xbc, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbef6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7e}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38000000}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}]}, @NFTA_SET_DESC_CONCAT={0xe8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdd3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xebe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5db}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x58}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}]}], {0x14}}, 0xc08}, 0x1, 0x0, 0x0, 0x2404c804}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 15.125949865s ago: executing program 3 (id=1110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x56ad) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a00000000000061115c0000000000850000000200080095000000000000fbf1c74133a06565c2c78d"], &(0x7f0000000000)='GPL\x00'}, 0x80) 3.098100995s ago: executing program 32 (id=1073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c00), 0x8}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r5 = getuid() r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcac, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000082}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) sendmsg$nl_xfrm(r3, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e4030000150000072abd7000fcdbdf25ff020000000000000000000000000001ff0200000000000000000000000000014e24080000080008020020803a000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="b06b6e0001b75d9e3800070000000000000000000000000000000000ac1414aa0000000000000000000000004e23fffb000910000a00002084000000", @ANYRES32=r8, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="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"], 0x3e4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r14, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r15 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r15, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) sendto$inet(r15, &(0x7f0000000440)='!', 0x1, 0x4048845, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x20, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400, 0x140}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r16, 0x89e0, &(0x7f0000000180)={r2, r0}) 2.071647996s ago: executing program 33 (id=1074): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x34bf9b113ab956ad, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01014d0000005e1affd50200000009006815cf4efa6ce6d90000080002400000032cc2750000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32bec6fbc2aad6ccccb6a94a33e400000000140000", @ANYRESHEX=r5, @ANYRESDEC=r3], 0x7c}}, 0x840) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) unshare(0x22020400) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r6, 0x800442d4, &(0x7f0000000180)=0x5) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000c05ebafed5b25f38b3bcdbc3c77e0fdf00000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) syz_emit_ethernet(0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c220080200000000000022f02f7a9df7550c329d963a5adf95ed9a05687a417d52709736282a656f4fd57d66c68775fb538e050758e262cd8b29f6acd57d88104f6c311a22b2f1523570e303ca"], 0x0) close(r1) 2.043896948s ago: executing program 34 (id=1080): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) close(0x4) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) writev(r5, &(0x7f0000001a80)=[{&(0x7f0000000180)="bf", 0x1}], 0x1) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x39ee1000) connect$rose(r8, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x5, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r6}, 0x20) recvfrom$l2tp6(r6, &(0x7f0000000240), 0x0, 0x40000000, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x20) recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.017939721s ago: executing program 35 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000a10ff02000000000000000000000000000189"], 0x340a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffd94, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r3], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 0s ago: executing program 36 (id=1110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x56ad) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a00000000000061115c0000000000850000000200080095000000000000fbf1c74133a06565c2c78d"], &(0x7f0000000000)='GPL\x00'}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 69.006819][ T5811] cgroup: Unknown subsys name 'net' [ 69.152730][ T5811] cgroup: Unknown subsys name 'cpuset' [ 69.161123][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.553748][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.373018][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.379627][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.651182][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.659932][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.669473][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.678287][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.686673][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.696346][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.709610][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.729492][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.740932][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.751465][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.769481][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.773861][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.777384][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.799917][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.807641][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.815056][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.824055][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.824113][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.838869][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.847307][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.849531][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.854865][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.868606][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.889554][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.897806][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.482404][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 75.594603][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 75.673654][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 75.699182][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 75.737730][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 75.826808][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.834104][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.841865][ T5834] bridge_slave_0: entered allmulticast mode [ 75.848953][ T5834] bridge_slave_0: entered promiscuous mode [ 75.889742][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.896868][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.904145][ T5834] bridge_slave_1: entered allmulticast mode [ 75.911473][ T5834] bridge_slave_1: entered promiscuous mode [ 76.030543][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.056117][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.063314][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.070933][ T5837] bridge_slave_0: entered allmulticast mode [ 76.077833][ T5837] bridge_slave_0: entered promiscuous mode [ 76.085203][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.092744][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.100026][ T5821] bridge_slave_0: entered allmulticast mode [ 76.107162][ T5821] bridge_slave_0: entered promiscuous mode [ 76.116709][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.147739][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.155078][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.162314][ T5837] bridge_slave_1: entered allmulticast mode [ 76.169234][ T5837] bridge_slave_1: entered promiscuous mode [ 76.176360][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.183624][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.191074][ T5821] bridge_slave_1: entered allmulticast mode [ 76.198004][ T5821] bridge_slave_1: entered promiscuous mode [ 76.215648][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.222853][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.230826][ T5823] bridge_slave_0: entered allmulticast mode [ 76.237725][ T5823] bridge_slave_0: entered promiscuous mode [ 76.293076][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.300847][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.307974][ T5823] bridge_slave_1: entered allmulticast mode [ 76.315421][ T5823] bridge_slave_1: entered promiscuous mode [ 76.322287][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.329479][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.336623][ T5827] bridge_slave_0: entered allmulticast mode [ 76.343772][ T5827] bridge_slave_0: entered promiscuous mode [ 76.375061][ T5834] team0: Port device team_slave_0 added [ 76.392343][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.400127][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.407249][ T5827] bridge_slave_1: entered allmulticast mode [ 76.415571][ T5827] bridge_slave_1: entered promiscuous mode [ 76.424792][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.436767][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.449335][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.459948][ T5834] team0: Port device team_slave_1 added [ 76.491857][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.533895][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.594887][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.616945][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.628685][ T5837] team0: Port device team_slave_0 added [ 76.636406][ T5821] team0: Port device team_slave_0 added [ 76.643938][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.651032][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.677393][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.704800][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.715537][ T5837] team0: Port device team_slave_1 added [ 76.723149][ T5821] team0: Port device team_slave_1 added [ 76.743735][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.751202][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.777119][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.790071][ T5823] team0: Port device team_slave_0 added [ 76.836269][ T5823] team0: Port device team_slave_1 added [ 76.879803][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.886773][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.914239][ T5841] Bluetooth: hci3: command tx timeout [ 76.914687][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.921025][ T5841] Bluetooth: hci0: command tx timeout [ 76.930466][ T5830] Bluetooth: hci2: command tx timeout [ 76.938355][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.948671][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.969456][ T5830] Bluetooth: hci4: command tx timeout [ 76.975256][ T5841] Bluetooth: hci1: command tx timeout [ 76.980852][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.009828][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.016904][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.043125][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.056859][ T5827] team0: Port device team_slave_0 added [ 77.063436][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.070500][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.096466][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.124060][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.131303][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.157285][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.170282][ T5827] team0: Port device team_slave_1 added [ 77.182660][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.189994][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.216018][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.272227][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.279210][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.305977][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.337908][ T5834] hsr_slave_0: entered promiscuous mode [ 77.344415][ T5834] hsr_slave_1: entered promiscuous mode [ 77.364257][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.371729][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.397727][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.449605][ T5837] hsr_slave_0: entered promiscuous mode [ 77.456167][ T5837] hsr_slave_1: entered promiscuous mode [ 77.463067][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 77.468867][ T5837] Cannot create hsr debugfs directory [ 77.492644][ T5823] hsr_slave_0: entered promiscuous mode [ 77.499194][ T5823] hsr_slave_1: entered promiscuous mode [ 77.505477][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 77.511332][ T5823] Cannot create hsr debugfs directory [ 77.567633][ T5821] hsr_slave_0: entered promiscuous mode [ 77.573909][ T5821] hsr_slave_1: entered promiscuous mode [ 77.580488][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 77.586218][ T5821] Cannot create hsr debugfs directory [ 77.667058][ T5827] hsr_slave_0: entered promiscuous mode [ 77.673819][ T5827] hsr_slave_1: entered promiscuous mode [ 77.680091][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 77.685812][ T5827] Cannot create hsr debugfs directory [ 78.171730][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.185485][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.195433][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.213963][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.276066][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.287147][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.308465][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.329875][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.375982][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.392033][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.410142][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.422608][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.533609][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.544730][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.557815][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.569859][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.617788][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.712198][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.735676][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.747029][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.757867][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.768562][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.806357][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.813678][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.834464][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.841643][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.902675][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.934430][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.961044][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.969806][ T5841] Bluetooth: hci0: command tx timeout [ 78.971251][ T5830] Bluetooth: hci3: command tx timeout [ 78.975251][ T5843] Bluetooth: hci2: command tx timeout [ 79.033853][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.046752][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.050023][ T5843] Bluetooth: hci1: command tx timeout [ 79.058771][ T5841] Bluetooth: hci4: command tx timeout [ 79.093675][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.100878][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.116537][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.123736][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.146786][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.154071][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.167532][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.174767][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.195937][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.223997][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.231205][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.262578][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.269765][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.324343][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.424322][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.536440][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.565709][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.572900][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.644912][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.652126][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.694822][ T5834] veth0_vlan: entered promiscuous mode [ 79.815477][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.825934][ T5834] veth1_vlan: entered promiscuous mode [ 79.923648][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.950535][ T5834] veth0_macvtap: entered promiscuous mode [ 79.962705][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.986904][ T5834] veth1_macvtap: entered promiscuous mode [ 80.089112][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.103233][ T5821] veth0_vlan: entered promiscuous mode [ 80.122398][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.136768][ T5823] veth0_vlan: entered promiscuous mode [ 80.166401][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.196776][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.219899][ T5821] veth1_vlan: entered promiscuous mode [ 80.227727][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.247631][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.263421][ T5823] veth1_vlan: entered promiscuous mode [ 80.323190][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.407825][ T5821] veth0_macvtap: entered promiscuous mode [ 80.433243][ T5823] veth0_macvtap: entered promiscuous mode [ 80.455218][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.466558][ T5821] veth1_macvtap: entered promiscuous mode [ 80.478587][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.501690][ T5823] veth1_macvtap: entered promiscuous mode [ 80.567691][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.589287][ T5837] veth0_vlan: entered promiscuous mode [ 80.601331][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.604607][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.609207][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.622092][ T5827] veth0_vlan: entered promiscuous mode [ 80.632145][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.659086][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.682224][ T5837] veth1_vlan: entered promiscuous mode [ 80.701301][ T5827] veth1_vlan: entered promiscuous mode [ 80.724300][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.734740][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.736533][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.775709][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.785455][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.836052][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.873674][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.883230][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.918791][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.935089][ T5827] veth0_macvtap: entered promiscuous mode [ 80.969109][ T5837] veth0_macvtap: entered promiscuous mode [ 81.002843][ T5827] veth1_macvtap: entered promiscuous mode [ 81.016376][ T5837] veth1_macvtap: entered promiscuous mode [ 81.049507][ T5841] Bluetooth: hci2: command tx timeout [ 81.055004][ T5843] Bluetooth: hci0: command tx timeout [ 81.055047][ T5830] Bluetooth: hci3: command tx timeout [ 81.065092][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.080720][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.127615][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.137578][ T5830] Bluetooth: hci4: command tx timeout [ 81.137592][ T5843] Bluetooth: hci1: command tx timeout [ 81.171347][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.183271][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.198568][ T5948] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 81.206222][ T5948] syzkaller1: entered promiscuous mode [ 81.212289][ T5948] syzkaller1: entered allmulticast mode [ 81.234322][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.277050][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.285648][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.293682][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.313220][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.323283][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.335602][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.377164][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.392252][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.462140][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.477767][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.487784][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.522960][ T5954] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.535657][ T5949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.544733][ T5949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.555486][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.650895][ T5951] tipc: Started in network mode [ 81.655918][ T5951] tipc: Node identity f20c030f8c5c, cluster identity 4711 [ 81.697330][ T5951] tipc: Enabled bearer , priority 0 [ 81.713236][ T5952] syzkaller0: entered promiscuous mode [ 81.720967][ T5952] syzkaller0: entered allmulticast mode [ 81.775753][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.784243][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8'. [ 81.810310][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.851532][ T5952] tipc: Resetting bearer [ 81.949552][ T5950] tipc: Resetting bearer [ 81.976222][ T5950] tipc: Disabling bearer [ 82.074815][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.094441][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.134165][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.175932][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.298616][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.323962][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.106587][ T6012] xt_TPROXY: Can be used only with -p tcp or -p udp [ 83.131225][ T5830] Bluetooth: hci3: command tx timeout [ 83.131244][ T5843] Bluetooth: hci0: command tx timeout [ 83.136650][ T5830] Bluetooth: hci2: command tx timeout [ 83.209783][ T5843] Bluetooth: hci1: command tx timeout [ 83.219739][ T5843] Bluetooth: hci4: command tx timeout [ 83.240991][ T6020] SET target dimension over the limit! [ 83.791921][ T6042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.839799][ T6043] netlink: 'syz.4.29': attribute type 12 has an invalid length. [ 83.847628][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 83.954313][ T5949] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.958504][ T6043] netlink: 'syz.4.29': attribute type 12 has an invalid length. [ 83.978359][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 83.991183][ T5949] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.033385][ T5949] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.045974][ T6043] Zero length message leads to an empty skb [ 84.074313][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.178752][ T6060] vlan1: entered allmulticast mode [ 84.190645][ T6061] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 84.208649][ T6060] veth0_vlan: entered allmulticast mode [ 84.273477][ T6056] netlink: 56 bytes leftover after parsing attributes in process `syz.0.35'. [ 84.290767][ T6071] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 84.309204][ T6071] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 84.316914][ T6071] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 84.322820][ T6056] bond1: (slave erspan0): Device is not bonding slave [ 84.334808][ T6071] netlink: 'syz.4.39': attribute type 2 has an invalid length. [ 84.352462][ T6056] bond1: option active_slave: invalid value (erspan0) [ 84.373069][ T6071] netlink: 76 bytes leftover after parsing attributes in process `syz.4.39'. [ 84.392280][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 84.405102][ T6056] bond1 (unregistering): Released all slaves [ 84.442654][ T6061] veth3: entered promiscuous mode [ 84.471680][ T6077] netlink: 64 bytes leftover after parsing attributes in process `syz.2.40'. [ 84.655580][ T6084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.702004][ T6087] netlink: 'syz.1.41': attribute type 21 has an invalid length. [ 84.723665][ T6087] netlink: 'syz.1.41': attribute type 21 has an invalid length. [ 84.757614][ T6087] netlink: 'syz.1.41': attribute type 21 has an invalid length. [ 84.768066][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 84.824030][ T6097] netlink: 224 bytes leftover after parsing attributes in process `syz.0.47'. [ 84.847472][ T6097] netlink: 2 bytes leftover after parsing attributes in process `syz.0.47'. [ 84.887031][ T6097] team0: entered promiscuous mode [ 84.917040][ T6097] team_slave_0: entered promiscuous mode [ 84.927274][ T6099] Cannot find set identified by id 0 to match [ 84.933766][ T6097] team_slave_1: entered promiscuous mode [ 84.948463][ T6097] bridge0: port 3(team0) entered blocking state [ 84.968894][ T6097] bridge0: port 3(team0) entered disabled state [ 84.998885][ T6097] team0: entered allmulticast mode [ 85.029623][ T6097] team_slave_0: entered allmulticast mode [ 85.035419][ T6097] team_slave_1: entered allmulticast mode [ 85.070577][ T6097] bridge0: port 3(team0) entered blocking state [ 85.077133][ T6097] bridge0: port 3(team0) entered forwarding state [ 85.261721][ T6110] syzkaller0: entered promiscuous mode [ 85.267231][ T6110] syzkaller0: entered allmulticast mode [ 85.373134][ T6116] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.480250][ T6110] tipc: Started in network mode [ 85.485635][ T6110] tipc: Node identity 0685236066b1, cluster identity 4711 [ 85.508946][ T6110] tipc: Enabled bearer , priority 0 [ 85.676903][ T6109] tipc: Resetting bearer [ 85.695294][ T6109] tipc: Disabling bearer [ 85.939596][ T6153] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20004 [ 86.274387][ T6163] pimreg3: entered allmulticast mode [ 86.452838][ T6168] syzkaller1: entered promiscuous mode [ 86.487354][ T6168] syzkaller1: entered allmulticast mode [ 86.699912][ T6184] veth0_macvtap: left promiscuous mode [ 86.715926][ T6184] macvtap0: entered allmulticast mode [ 86.737447][ T6184] macvtap0: refused to change device tx_queue_len [ 86.761792][ T9] cfg80211: failed to load regulatory.db [ 86.858259][ T6188] warning: `syz.0.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.160214][ T6215] __nla_validate_parse: 15 callbacks suppressed [ 87.160231][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 87.467769][ T6233] netlink: 32 bytes leftover after parsing attributes in process `syz.4.89'. [ 87.682239][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 87.754947][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 87.878266][ T6266] netlink: 152 bytes leftover after parsing attributes in process `syz.3.98'. [ 88.202302][ T6278] xt_TCPMSS: Only works on TCP SYN packets [ 88.597153][ T6290] Cannot find add_set index 0 as target [ 89.220349][ T6267] netem: unknown loss type 0 [ 89.225056][ T6267] netem: change failed [ 89.240757][ T6281] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.100'. [ 89.278069][ T6283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.333849][ T6284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.433230][ T6299] netlink: 100 bytes leftover after parsing attributes in process `syz.1.105'. [ 89.482489][ T6306] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.107'. [ 89.555708][ T6309] syzkaller0: entered promiscuous mode [ 89.572525][ T6309] syzkaller0: entered allmulticast mode [ 89.674270][ T6309] tipc: Started in network mode [ 89.679315][ T6309] tipc: Node identity 6a88a2c6430b, cluster identity 4711 [ 89.698936][ T6309] tipc: Enabled bearer , priority 0 [ 89.724188][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 89.876854][ T6308] tipc: Resetting bearer [ 89.957818][ T6308] tipc: Disabling bearer [ 90.138844][ T6342] syz_tun: entered allmulticast mode [ 90.223073][ T6342] syz_tun: left allmulticast mode [ 90.245339][ T6353] Bluetooth: MGMT ver 1.23 [ 90.340798][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 90.422393][ T6360] delete_channel: no stack [ 90.779781][ T6379] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.941103][ T6389] validate_nla: 36 callbacks suppressed [ 90.941120][ T6389] netlink: 'syz.0.132': attribute type 10 has an invalid length. [ 90.969736][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.981781][ T6389] bridge_slave_1: left allmulticast mode [ 90.987497][ T6389] bridge_slave_1: left promiscuous mode [ 90.997891][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.025506][ T6389] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 91.169378][ T6401] tipc: New replicast peer: 10.1.1.2 [ 91.175070][ T6401] tipc: Enabled bearer , priority 10 [ 91.304026][ T6407] Bluetooth: MGMT ver 1.23 [ 91.518009][ T6420] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 91.611158][ T6419] netlink: 'syz.0.143': attribute type 14 has an invalid length. [ 91.656063][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.656184][ T6419] netlink: 'syz.0.143': attribute type 14 has an invalid length. [ 91.677739][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.717053][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.738640][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.190112][ T6456] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 92.290473][ T24] tipc: Node number set to 2119172879 [ 92.505082][ T6477] __nla_validate_parse: 6 callbacks suppressed [ 92.505101][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 92.523184][ T6477] bridge_slave_1: left allmulticast mode [ 92.524632][ T6476] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 92.528934][ T6477] bridge_slave_1: left promiscuous mode [ 92.564356][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.594299][ T6477] bridge_slave_0: left allmulticast mode [ 92.600370][ T6477] bridge_slave_0: left promiscuous mode [ 92.612046][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.688952][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 92.800231][ T6479] netlink: 'syz.4.163': attribute type 10 has an invalid length. [ 92.822631][ T6479] team0: Port device dummy0 added [ 92.839635][ T6479] netlink: 'syz.4.163': attribute type 10 has an invalid length. [ 92.860801][ T6479] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 92.892032][ T6479] team0: Failed to send options change via netlink (err -105) [ 92.904132][ T6479] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 92.915195][ T6479] team0: Port device dummy0 removed [ 92.926094][ T6479] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.985597][ T6499] netlink: 4548 bytes leftover after parsing attributes in process `syz.0.168'. [ 92.995466][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 93.014976][ T6501] veth0_macvtap: left promiscuous mode [ 93.075390][ T6503] netlink: 544 bytes leftover after parsing attributes in process `syz.4.169'. [ 93.088719][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.169'. [ 93.098381][ T6503] netlink: 80 bytes leftover after parsing attributes in process `syz.4.169'. [ 93.107632][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.169'. [ 93.201586][ T6505] netlink: 72 bytes leftover after parsing attributes in process `syz.0.170'. [ 93.224713][ T9] IPVS: starting estimator thread 0... [ 93.232905][ T6505] syzkaller0: entered promiscuous mode [ 93.238496][ T6505] syzkaller0: entered allmulticast mode [ 93.247523][ T6505] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 93.359497][ T6508] IPVS: using max 32 ests per chain, 76800 per kthread [ 93.459216][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 93.496176][ T6515] block nbd0: Unsupported socket: should be TCP or UNIX. [ 93.636912][ T6519] netlink: 'syz.0.174': attribute type 29 has an invalid length. [ 93.662580][ T6518] netlink: 'syz.0.174': attribute type 21 has an invalid length. [ 94.602579][ T6566] bridge2: entered promiscuous mode [ 94.607854][ T6566] bridge2: entered allmulticast mode [ 94.688436][ T6574] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 94.838732][ T6588] trusted_key: syz.3.192 sent an empty control message without MSG_MORE. [ 94.903983][ T6584] syzkaller1: entered promiscuous mode [ 94.914286][ T6584] syzkaller1: entered allmulticast mode [ 95.472962][ T6615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.490659][ T6618] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 95.528364][ T6618] netlink: 'syz.2.203': attribute type 10 has an invalid length. [ 95.571399][ T6618] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.113278][ T6656] nbd: socks must be embedded in a SOCK_ITEM attr [ 96.711041][ T6689] netlink: 'syz.3.223': attribute type 29 has an invalid length. [ 96.736265][ T6692] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 96.749789][ T6689] netlink: 'syz.3.223': attribute type 29 has an invalid length. [ 96.758312][ T6693] ip6_vti0 speed is unknown, defaulting to 1000 [ 96.773635][ T6689] netlink: 'syz.3.223': attribute type 1 has an invalid length. [ 96.795386][ T6692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.804600][ T6689] netlink: 'syz.3.223': attribute type 3 has an invalid length. [ 96.806236][ T6693] ip6_vti0 speed is unknown, defaulting to 1000 [ 96.841160][ T6695] bond1: (slave veth5): Enslaving as an active interface with a down link [ 96.850476][ T6693] ip6_vti0 speed is unknown, defaulting to 1000 [ 96.852595][ T6689] netlink: 'syz.3.223': attribute type 29 has an invalid length. [ 96.918126][ T6692] bond1: (slave veth0_to_bond): making interface the new active one [ 96.931598][ T6692] veth0_to_bond: entered promiscuous mode [ 96.949693][ T6692] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 97.112987][ T6711] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 97.184438][ T6711] bond2: entered promiscuous mode [ 97.190192][ T6711] bond2: entered allmulticast mode [ 97.195782][ T6711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.237238][ T6693] infiniband syz2: set active [ 97.243445][ T5987] ip6_vti0 speed is unknown, defaulting to 1000 [ 97.252523][ T6693] infiniband syz2: added ip6_vti0 [ 97.260424][ T6693] syz2: rxe_create_cq: returned err = -12 [ 97.266502][ T6693] infiniband syz2: Couldn't create ib_mad CQ [ 97.342243][ T6693] infiniband syz2: Couldn't open port 1 [ 97.435368][ T6693] RDS/IB: syz2: added [ 97.451044][ T6693] smc: adding ib device syz2 with port count 1 [ 97.470035][ T6693] smc: ib device syz2 port 1 has no pnetid [ 97.490676][ T5891] ip6_vti0 speed is unknown, defaulting to 1000 [ 97.498191][ T6693] ip6_vti0 speed is unknown, defaulting to 1000 [ 97.599944][ T6734] nftables ruleset with unbound chain [ 97.950421][ T6693] ip6_vti0 speed is unknown, defaulting to 1000 [ 98.536690][ T6693] ip6_vti0 speed is unknown, defaulting to 1000 [ 98.583329][ T6785] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 98.637154][ T6786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.644684][ T6786] IPv6: NLM_F_CREATE should be set when creating new route [ 98.718798][ T6786] IPv6: Can't replace route, no match found [ 98.831695][ T6786] bond1 (unregistering): Released all slaves [ 99.255593][ T6816] netlink: 'syz.1.262': attribute type 1 has an invalid length. [ 99.265042][ T6693] ip6_vti0 speed is unknown, defaulting to 1000 [ 99.346929][ T6816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.432850][ T6823] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.439945][ T5914] IPVS: starting estimator thread 0... [ 99.480516][ T6816] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 99.497181][ T6816] __nla_validate_parse: 13 callbacks suppressed [ 99.497198][ T6816] netlink: 44 bytes leftover after parsing attributes in process `syz.1.262'. [ 99.530027][ T6825] IPVS: using max 34 ests per chain, 81600 per kthread [ 99.538287][ T6829] SET target dimension over the limit! [ 100.221426][ T6869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.275'. [ 100.241721][ T6693] ip6_vti0 speed is unknown, defaulting to 1000 [ 100.298221][ T6869] netlink: 64 bytes leftover after parsing attributes in process `syz.1.275'. [ 100.327645][ T6869] block nbd0: not configured, cannot reconfigure [ 100.509608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.559710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.570578][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.960733][ T6906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.287'. [ 101.203747][ T6918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.290'. [ 101.459508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.612355][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.668521][ T6938] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 101.703649][ T6938] netlink: 224 bytes leftover after parsing attributes in process `syz.2.298'. [ 101.836795][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.913877][ T6942] syzkaller0: entered promiscuous mode [ 101.919594][ T6942] syzkaller0: entered allmulticast mode [ 102.121455][ T6954] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 102.185682][ T6954] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 102.207839][ T6963] team_slave_1: entered allmulticast mode [ 102.350652][ T6965] raw_sendmsg: syz.3.304 forgot to set AF_INET. Fix it! [ 102.367497][ T6968] tipc: New replicast peer: 255.255.255.255 [ 102.401446][ T6968] tipc: Enabled bearer , priority 10 [ 102.418595][ T6972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.306'. [ 102.436727][ T6971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.307'. [ 102.577515][ T6975] tipc: Enabled bearer , priority 0 [ 102.596785][ T6975] syzkaller0: entered allmulticast mode [ 102.650005][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.718324][ T6979] tipc: Resetting bearer [ 102.768388][ T6974] tipc: Resetting bearer [ 102.846200][ T6974] tipc: Disabling bearer [ 102.890126][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.893437][ T6989] ieee802154 phy1 wpan1: encryption failed: -22 [ 102.922859][ T6987] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 103.019037][ T6992] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 103.028039][ T1210] IPVS: starting estimator thread 0... [ 103.072658][ T6992] netlink: 140 bytes leftover after parsing attributes in process `syz.3.315'. [ 103.092741][ T6997] netlink: 128 bytes leftover after parsing attributes in process `syz.1.317'. [ 103.160570][ T6993] IPVS: using max 29 ests per chain, 69600 per kthread [ 103.313664][ T7012] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 103.365111][ T7012] bond2: entered promiscuous mode [ 103.376464][ T7012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.432529][ T7025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.520033][ T5914] tipc: Node number set to 1614029664 [ 103.804262][ T7044] tipc: Enabled bearer , priority 0 [ 103.914339][ T7044] syzkaller0: entered promiscuous mode [ 103.920014][ T7044] syzkaller0: entered allmulticast mode [ 103.926893][ T7044] tipc: Resetting bearer [ 103.963607][ T7043] tipc: Resetting bearer [ 104.092637][ T5843] Bluetooth: hci4: command tx timeout [ 105.004657][ T7043] tipc: Disabling bearer [ 105.039113][ T7063] veth5: entered allmulticast mode [ 105.194986][ T1210] tipc: Node number set to 696492742 [ 105.382019][ T7088] __nla_validate_parse: 6 callbacks suppressed [ 105.382108][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 105.439457][ T7091] netlink: 'syz.4.343': attribute type 2 has an invalid length. [ 105.447164][ T7091] netlink: 188 bytes leftover after parsing attributes in process `syz.4.343'. [ 105.691971][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 105.854905][ T7107] bridge2: entered promiscuous mode [ 105.890982][ T7107] bridge2: entered allmulticast mode [ 106.144781][ T7133] netlink: 'syz.4.354': attribute type 12 has an invalid length. [ 106.308125][ T7138] ip6_vti0 speed is unknown, defaulting to 1000 [ 106.432541][ T7151] netlink: 'syz.1.361': attribute type 22 has an invalid length. [ 106.454175][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 106.487963][ T7151] netlink: 'syz.1.361': attribute type 22 has an invalid length. [ 106.496258][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.519936][ T44] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.528905][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 106.548312][ T44] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.650853][ T44] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.821623][ T7158] workqueue: name exceeds WQ_NAME_LEN. Truncating to: “&˜%àï÷åQÍ0@æjÛÈÊ«–Óéôð} [ 107.072399][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 107.199510][ T7142] netlink: 14 bytes leftover after parsing attributes in process `syz.3.355'. [ 107.569303][ T9] IPVS: starting estimator thread 0... [ 107.642444][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 107.664224][ T7205] IPVS: using max 29 ests per chain, 69600 per kthread [ 107.701276][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 107.721025][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 107.822901][ T7221] syzkaller0: entered promiscuous mode [ 107.828698][ T7221] syzkaller0: entered allmulticast mode [ 108.000327][ T13] veth0_to_bond: left promiscuous mode [ 108.027940][ T7227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.695745][ T7261] veth1_to_bond: entered allmulticast mode [ 108.734403][ T7261] veth1_to_bond: left allmulticast mode [ 108.859827][ T7269] bond0: (slave bond_slave_1): Releasing backup interface [ 109.372064][ T7300] team1: entered promiscuous mode [ 109.377213][ T7300] team1: entered allmulticast mode [ 109.647731][ T7319] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 109.688260][ T7316] C: renamed from team_slave_0 (while UP) [ 109.702634][ T7316] netlink: 'syz.2.406': attribute type 1 has an invalid length. [ 109.723749][ T7316] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 109.749204][ T44] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.760892][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.772186][ T7327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.792662][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.800260][ T7327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.832554][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.844290][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.856409][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.105926][ T7337] xt_TPROXY: Can be used only with -p tcp or -p udp [ 110.328171][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 110.331055][ T7359] netlink: 'syz.3.419': attribute type 63 has an invalid length. [ 110.350541][ T7359] netlink: 'syz.3.419': attribute type 63 has an invalid length. [ 110.604156][ T7378] netlink: 'syz.3.424': attribute type 2 has an invalid length. [ 110.626129][ T7378] : entered promiscuous mode [ 111.006841][ T7389] __nla_validate_parse: 9 callbacks suppressed [ 111.006853][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 111.022270][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 111.186292][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 111.249405][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 111.312226][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 111.316026][ T7397] gre0: entered promiscuous mode [ 111.333782][ T7397] gre0: entered allmulticast mode [ 111.422602][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 111.483457][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.509881][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.549759][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.565605][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.587969][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 111.614959][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'. [ 111.874518][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 111.900898][ T7441] openvswitch: netlink: Key type 129 is out of range max 32 [ 112.056827][ T7451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.446'. [ 112.339173][ T7468] block nbd0: not configured, cannot reconfigure [ 112.518233][ T7475] veth1_to_bond: entered allmulticast mode [ 112.576473][ T7475] bond0: (slave bond_slave_1): Releasing backup interface [ 112.588014][ T7479] Cannot find add_set index 65532 as target [ 112.654797][ T7475] veth1_to_bond (unregistering): left allmulticast mode [ 112.671339][ T7487] netlink: 'syz.1.454': attribute type 4 has an invalid length. [ 113.016747][ T7503] Cannot find set identified by id 0 to match [ 113.032696][ T7508] netlink: 'syz.3.464': attribute type 10 has an invalid length. [ 113.092767][ T7508] team0: Port device geneve0 added [ 113.275193][ T7521] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 113.639981][ T7548] bridge_slave_0: default FDB implementation only supports local addresses [ 113.804845][ T7556] sctp: [Deprecated]: syz.1.481 (pid 7556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.804845][ T7556] Use struct sctp_sack_info instead [ 113.864445][ T7564] netlink: 'syz.0.485': attribute type 21 has an invalid length. [ 113.947397][ T7561] bond2: option miimon: invalid value (18446744073709551585) [ 113.956904][ T7561] bond2: option miimon: allowed values 0 - 2147483647 [ 113.968634][ T7561] bond2 (unregistering): Released all slaves [ 114.182040][ T7579] netlink: 'syz.4.490': attribute type 16 has an invalid length. [ 114.215529][ T7579] netlink: 'syz.4.490': attribute type 17 has an invalid length. [ 114.244831][ T7580] 8021q: VLANs not supported on ip6tnl0 [ 114.283410][ T7579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.325819][ T43] ip6_vti0 speed is unknown, defaulting to 1000 [ 114.961476][ T7620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.602514][ T7659] netlink: 'syz.4.510': attribute type 2 has an invalid length. [ 115.634199][ T7659] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 115.798885][ T7670] netlink: 'syz.3.514': attribute type 21 has an invalid length. [ 132.812152][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.264358][ T7700] sock: sock_timestamping_bind_phc: sock not bind to device [ 180.441545][ T7710] __nla_validate_parse: 14 callbacks suppressed [ 180.441563][ T7710] netlink: 14 bytes leftover after parsing attributes in process `syz.2.524'. [ 180.465641][ T7700] bond1: option min_links: invalid value (18446744073709551614) [ 180.483858][ T7700] bond1: option min_links: allowed values 0 - 2147483647 [ 180.560706][ T7710] nbd: must specify a device to reconfigure [ 180.617377][ T7700] bond1 (unregistering): Released all slaves [ 180.688198][ T7710] netem: unknown loss type 0 [ 180.694945][ T7710] netem: change failed [ 180.939619][ T7730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.530'. [ 181.008013][ T7729] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 181.040077][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 181.138958][ T7745] netlink: 'syz.4.536': attribute type 4 has an invalid length. [ 181.208541][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 181.329838][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'. [ 181.526636][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 181.553752][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 181.559988][ T7771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'. [ 181.576393][ T7773] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 181.585714][ T7773] netlink: 'syz.4.543': attribute type 2 has an invalid length. [ 181.589804][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 181.762467][ T7779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.546'. [ 181.976911][ T7791] netlink: 'syz.4.550': attribute type 6 has an invalid length. [ 181.985262][ T7791] nbd: couldn't find a device at index 0 [ 181.993849][ T7791] netlink: zone id is out of range [ 182.007347][ T7791] netlink: zone id is out of range [ 182.028551][ T7791] netlink: zone id is out of range [ 182.048781][ T7791] netlink: zone id is out of range [ 182.061115][ T7791] netlink: zone id is out of range [ 182.074497][ T7791] netlink: zone id is out of range [ 182.089856][ T7791] netlink: zone id is out of range [ 182.097588][ T7791] netlink: zone id is out of range [ 182.108886][ T7791] netlink: zone id is out of range [ 182.663882][ T7829] netlink: 'syz.4.563': attribute type 12 has an invalid length. [ 182.895724][ T7842] veth5: entered allmulticast mode [ 182.934554][ T7843] veth7: entered allmulticast mode [ 182.996800][ T7849] macvtap0: Device is already in use. [ 183.136447][ T7860] netlink: 'syz.2.573': attribute type 13 has an invalid length. [ 184.240510][ T7913] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 184.796992][ T7949] syzkaller0: entered promiscuous mode [ 184.839910][ T7949] syzkaller0: entered allmulticast mode [ 185.067881][ T7966] syzkaller0: entered promiscuous mode [ 185.075620][ T7966] syzkaller0: entered allmulticast mode [ 185.139960][ T7966] tipc: Started in network mode [ 185.151594][ T7966] tipc: Node identity fef71ad3957d, cluster identity 4711 [ 185.177124][ T7966] tipc: Enabled bearer , priority 0 [ 185.263823][ T7976] xt_cgroup: invalid path, errno=-2 [ 185.474815][ T7985] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 185.483236][ T7985] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 185.535188][ T7987] __nla_validate_parse: 17 callbacks suppressed [ 185.535205][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 185.663695][ T7994] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.671860][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 185.682569][ T7994] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 185.703108][ T7999] netlink: 40 bytes leftover after parsing attributes in process `syz.4.615'. [ 185.747802][ T8004] netlink: 'syz.2.616': attribute type 21 has an invalid length. [ 185.770434][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 185.784363][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 185.835578][ T7995] bond2: option xmit_hash_policy: invalid value (64) [ 185.853034][ T7995] bond2 (unregistering): Released all slaves [ 185.902692][ T7965] tipc: Resetting bearer [ 185.990855][ T7965] tipc: Disabling bearer [ 186.565956][ T8046] IPVS: set_ctl: invalid protocol: 137 172.20.20.63:20002 [ 186.652341][ T8052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.633'. [ 186.705161][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 186.968740][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 187.079891][ T8082] netlink: 196 bytes leftover after parsing attributes in process `syz.2.641'. [ 187.102213][ T8082] netlink: 196 bytes leftover after parsing attributes in process `syz.2.641'. [ 187.845671][ T8109] bond0: Caught tx_queue_len zero misconfig [ 188.126535][ T8128] netlink: 'syz.3.653': attribute type 7 has an invalid length. [ 188.153024][ T8128] netlink: 'syz.3.653': attribute type 8 has an invalid length. [ 188.221716][ T8128] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 188.271320][ T8128] netlink: 'syz.3.653': attribute type 2 has an invalid length. [ 188.308060][ T8128] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 188.504611][ T8148] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 188.592535][ T8152] net_ratelimit: 45 callbacks suppressed [ 188.592553][ T8152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.705981][ T8148] veth7: entered promiscuous mode [ 188.714725][ T8160] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 189.390199][ T8213] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 189.421354][ T8213] team0: Port device batadv1 added [ 189.820100][ T8233] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.068935][ T8249] delete_channel: no stack [ 190.110848][ T8249] nbd: couldn't find a device at index 0 [ 190.696551][ T8279] __nla_validate_parse: 13 callbacks suppressed [ 190.696568][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.695'. [ 190.713440][ T8279] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 190.959579][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 191.262489][ T8272] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 191.464424][ T8306] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 191.477819][ T8306] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 191.521114][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 191.664956][ T8317] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 191.718572][ T8317] bond1: (slave gretap1): making interface the new active one [ 191.727132][ T8317] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 191.818552][ T8327] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.946501][ T8331] netlink: 'syz.0.713': attribute type 13 has an invalid length. [ 192.124929][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 192.168455][ T8345] netlink: 1 bytes leftover after parsing attributes in process `syz.3.717'. [ 192.204858][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 192.396461][ T8349] veth0_to_bond: entered allmulticast mode [ 192.411286][ T8358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.721'. [ 192.683313][ T8378] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.728'. [ 192.788824][ T8380] netlink: 'syz.2.729': attribute type 23 has an invalid length. [ 192.834437][ T8383] netlink: 'syz.4.730': attribute type 23 has an invalid length. [ 192.857296][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 192.866832][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 193.021660][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.115022][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.174156][ T8402] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 193.182507][ T8402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.208860][ T8394] netlink: 'syz.0.734': attribute type 5 has an invalid length. [ 193.358249][ T8407] tipc: Enabled bearer , priority 0 [ 193.368551][ T8407] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 193.410444][ T8407] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 194.257217][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.763536][ T8444] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 194.778995][ T8444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.811384][ T8445] Illegal XDP return value 4294967274 on prog (id 135) dev syz_tun, expect packet loss! [ 195.277096][ T8463] bond2: Removing last arp target with arp_interval on [ 195.699936][ T8482] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 195.911703][ T8498] ip6_vti0 speed is unknown, defaulting to 1000 [ 196.114402][ T8513] netlink: 'syz.2.771': attribute type 2 has an invalid length. [ 196.147634][ T8514] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 196.153686][ T8512] netlink: 'syz.2.771': attribute type 2 has an invalid length. [ 196.261284][ T8522] openvswitch: netlink: Message has -2 unknown bytes. [ 196.297930][ T8519] bond4: (slave ip6gretap1): making interface the new active one [ 196.309139][ T8519] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 196.361207][ T8527] syz.2.775 uses old SIOCAX25GETINFO [ 196.434851][ T8519] __nla_validate_parse: 8 callbacks suppressed [ 196.434869][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.772'. [ 196.471013][ T8519] netlink: 97 bytes leftover after parsing attributes in process `syz.0.772'. [ 196.535200][ T8519] vcan0: entered allmulticast mode [ 196.774323][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 201.452140][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 201.452752][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 201.458179][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 242.543187][ T8565] tipc: Enabled bearer , priority 0 [ 242.560143][ T8565] syzkaller0: entered promiscuous mode [ 242.565642][ T8565] syzkaller0: entered allmulticast mode [ 242.670904][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.678659][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.802613][ T8570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.822525][ T8570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.870205][ T8570] macvtap0: left allmulticast mode [ 242.897660][ T8570] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 242.936317][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.948726][ T8578] tipc: Resetting bearer [ 242.954708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.954794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.972550][ T9] syz2: Port: 1 Link DOWN [ 242.977956][ T8578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.986309][ T8578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.996115][ T8205] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.008555][ T8205] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.018028][ T8205] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 243.089690][ T8205] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.098604][ T8205] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.109429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.135202][ T8589] netlink: 149904 bytes leftover after parsing attributes in process `syz.3.794'. [ 243.145629][ T8205] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 243.158025][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.170010][ T8564] tipc: Resetting bearer [ 243.193116][ T8564] tipc: Disabling bearer [ 243.221189][ T8205] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.243837][ T8205] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.259395][ T8205] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 243.275055][ T8595] netlink: 40 bytes leftover after parsing attributes in process `syz.2.793'. [ 243.387221][ T8205] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.413130][ T8205] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.431872][ T8205] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 243.501096][ T8608] netlink: 48 bytes leftover after parsing attributes in process `syz.1.799'. [ 243.573006][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 243.632094][ T8620] IPv6: sit3: Disabled Multicast RS [ 243.829147][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 243.944266][ T8633] netlink: 'syz.4.800': attribute type 1 has an invalid length. [ 243.948818][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 244.016069][ T8635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.118640][ T8635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.258553][ T8617] tipc: Resetting bearer [ 244.384870][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.812'. [ 244.780576][ T8683] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 244.788867][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 244.855431][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.875137][ T8688] netlink: 40 bytes leftover after parsing attributes in process `syz.1.818'. [ 244.982917][ T8684] bridge_slave_1 (unregistering): left allmulticast mode [ 244.994597][ T8684] bridge_slave_1 (unregistering): left promiscuous mode [ 245.013381][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.226219][ T8691] bond3: (slave veth11): Enslaving as an active interface with a down link [ 245.452856][ T8724] netlink: 228 bytes leftover after parsing attributes in process `syz.3.826'. [ 245.952245][ T8756] sctp: [Deprecated]: syz.0.833 (pid 8756) Use of int in max_burst socket option deprecated. [ 245.952245][ T8756] Use struct sctp_assoc_value instead [ 246.009579][ T8754] syzkaller0: entered promiscuous mode [ 246.016875][ T8754] syzkaller0: entered allmulticast mode [ 247.222975][ T8835] netlink: 'syz.2.853': attribute type 64 has an invalid length. [ 247.436798][ T8846] netlink: 'syz.4.854': attribute type 13 has an invalid length. [ 247.524796][ T8849] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 247.565763][ T8856] tc_dump_action: action bad kind [ 247.607604][ T8856] veth1_macvtap: left promiscuous mode [ 247.621905][ T8856] macsec0: entered promiscuous mode [ 247.630098][ T8856] macsec0: entered allmulticast mode [ 247.668246][ T8860] veth1_macvtap: entered promiscuous mode [ 247.684704][ T8860] veth1_macvtap: entered allmulticast mode [ 247.706441][ T8860] macsec0: left promiscuous mode [ 247.717132][ T8860] macsec0: left allmulticast mode [ 247.727469][ T8856] sctp: [Deprecated]: syz.3.859 (pid 8856) Use of int in maxseg socket option. [ 247.727469][ T8856] Use struct sctp_assoc_value instead [ 247.742121][ T8860] veth1_macvtap: left allmulticast mode [ 247.922652][ T8870] openvswitch: netlink: IP tunnel dst address not specified [ 248.150776][ T8886] lo: Caught tx_queue_len zero misconfig [ 248.347351][ T8894] __nla_validate_parse: 8 callbacks suppressed [ 248.347369][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.868'. [ 248.473763][ T8902] netlink: 'syz.2.870': attribute type 1 has an invalid length. [ 248.640568][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 249.341536][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 249.384521][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 249.385477][ T8954] delete_channel: no stack [ 249.432571][ T8953] netlink: 'syz.1.882': attribute type 15 has an invalid length. [ 249.522877][ T8954] tipc: Enabling of bearer rejected, failed to enable media [ 250.205255][ T9001] netlink: 96 bytes leftover after parsing attributes in process `syz.0.892'. [ 250.212658][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 250.225472][ T9008] netlink: 44 bytes leftover after parsing attributes in process `syz.3.893'. [ 250.300678][ T9012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.893'. [ 250.350822][ T9008] netlink: 44 bytes leftover after parsing attributes in process `syz.3.893'. [ 250.653564][ T9031] bond4 (unregistering): Released all slaves [ 250.753358][ T9041] x_tables: duplicate underflow at hook 2 [ 250.896628][ T9036] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 251.134514][ T9067] netlink: 'syz.3.906': attribute type 13 has an invalid length. [ 251.177158][ T9066] tipc: Enabled bearer , priority 0 [ 251.321912][ T9067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.352047][ T9074] +: renamed from syzkaller0 [ 251.364800][ T9074] tipc: Disabling bearer [ 251.372863][ T9071] tipc: Started in network mode [ 251.378457][ T9071] tipc: Node identity d21a7bbd8f0a, cluster identity 4711 [ 251.387136][ T9071] tipc: Enabled bearer , priority 0 [ 251.407678][ T9076] netlink: 'syz.2.910': attribute type 9 has an invalid length. [ 251.408295][ T9071] syzkaller0: entered promiscuous mode [ 251.421583][ T9071] syzkaller0: entered allmulticast mode [ 251.423281][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 251.435749][ T9071] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 251.485865][ T9071] tipc: Resetting bearer [ 251.505122][ T9076] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 251.518020][ T9070] tipc: Resetting bearer [ 251.604689][ T9070] tipc: Disabling bearer [ 251.640770][ T976] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.654317][ T976] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.678583][ T976] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.691230][ T976] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.864217][ T9096] veth0_to_batadv: entered promiscuous mode [ 251.870315][ T9096] veth0_to_batadv: entered allmulticast mode [ 251.913398][ T9102] bond0: Caught tx_queue_len zero misconfig [ 252.000888][ T9108] gre0: entered promiscuous mode [ 252.010827][ T9108] gre0: entered allmulticast mode [ 252.019005][ T9104] tipc: Enabling of bearer rejected, already enabled [ 252.181178][ T9116] vlan2: entered promiscuous mode [ 252.187764][ T9116] bridge0: entered promiscuous mode [ 252.327083][ T9127] tipc: New replicast peer: 255.255.255.255 [ 252.333751][ T9127] tipc: Enabled bearer , priority 10 [ 252.368358][ T9129] vlan2: entered allmulticast mode [ 252.374280][ T9129] gretap0: entered allmulticast mode [ 252.545964][ T9146] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 252.601903][ T9146] bond4: (slave ip6gretap1): making interface the new active one [ 252.620319][ T9146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.628690][ T9146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.636960][ T9146] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 252.854942][ T9160] delete_channel: no stack [ 252.912444][ T9166] netlink: 'syz.1.936': attribute type 12 has an invalid length. [ 253.073338][ T9177] syzkaller0: entered promiscuous mode [ 253.078976][ T9177] syzkaller0: entered allmulticast mode [ 253.206603][ T9178] ip6_vti0 speed is unknown, defaulting to 1000 [ 253.266910][ T9185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.276796][ T9185] netlink: 'syz.4.941': attribute type 1 has an invalid length. [ 253.430751][ T9196] team0: Caught tx_queue_len zero misconfig [ 253.519536][ T5978] tipc: Node number set to 1804212947 [ 253.593782][ T9199] netlink: 'syz.1.947': attribute type 83 has an invalid length. [ 253.986624][ T9231] __nla_validate_parse: 10 callbacks suppressed [ 253.986643][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.956'. [ 254.107424][ T9234] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.955'. [ 254.131422][ T9231] bond5 (unregistering): Released all slaves [ 254.560259][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 254.584031][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 254.915621][ T9276] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 254.925738][ T9276] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 255.115883][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 255.212747][ T9297] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.972'. [ 255.287675][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 255.298269][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 255.693808][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.756126][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 255.857142][ T30] audit: type=1800 audit(1764507374.835:2): pid=9343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.982" name="memory.events" dev="tmpfs" ino=1048 res=0 errno=0 [ 255.964941][ T9346] netlink: 104 bytes leftover after parsing attributes in process `syz.1.986'. [ 256.572569][ T9356] netlink: 'syz.4.989': attribute type 3 has an invalid length. [ 256.988773][ T9376] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 257.113004][ T9376] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.122964][ T9376] bond5: (slave bond6): making interface the new active one [ 257.132522][ T9376] bond5: (slave bond6): Enslaving as an active interface with an up link [ 257.329599][ T9397] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 257.841520][ T9437] bond3: entered promiscuous mode [ 257.847457][ T9437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.906517][ T9437] bond3: (slave gtp0): refused to change device type [ 258.781818][ T9502] xfrm1: entered promiscuous mode [ 258.786896][ T9502] xfrm1: entered allmulticast mode [ 258.818346][ T9505] ip6t_srh: unknown srh invflags 4000 [ 258.849133][ T9503] ip6_vti0 speed is unknown, defaulting to 1000 [ 258.852704][ T9502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.882385][ T9507] netlink: 'syz.0.1031': attribute type 10 has an invalid length. [ 258.983581][ T9511] netlink: 'syz.4.1032': attribute type 1 has an invalid length. [ 258.993543][ T9511] __nla_validate_parse: 16 callbacks suppressed [ 258.993559][ T9511] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1032'. [ 259.093336][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1036'. [ 259.107942][ T9521] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1035'. [ 259.261771][ T9531] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1035'. [ 259.302739][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 259.350631][ T9535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1038'. [ 259.391912][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 259.516284][ T9541] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1040'. [ 259.660461][ T9557] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000 [ 259.746093][ T9549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 259.808082][ T9564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1046'. [ 259.822203][ T9564] unsupported nlmsg_type 40 [ 259.828005][ T9564] siw: device registration error -23 [ 259.891839][ T9562] SET target dimension over the limit! [ 260.435681][ T9586] team0 (unregistering): Port device team_slave_0 removed [ 260.444724][ T9586] team0 (unregistering): Port device team_slave_1 removed [ 260.516493][ T9599] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 260.524255][ T9599] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.735533][ T9609] netlink: 'syz.4.1053': attribute type 11 has an invalid length. [ 260.735786][ T9608] netlink: 'syz.3.1056': attribute type 33 has an invalid length. [ 260.827545][ T9608] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 260.844749][ T9608] bond4 (unregistering): Released all slaves [ 260.866631][ T9620] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 260.933107][ T9620] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.942034][ T9620] bond5: (slave bond6): making interface the new active one [ 260.950531][ T9620] bond5: (slave bond6): Enslaving as an active interface with an up link [ 261.120296][ T9638] netlink: 'syz.4.1062': attribute type 2 has an invalid length. [ 261.421980][ T9661] bond7: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 261.435638][ T9661] bond7: entered promiscuous mode [ 261.441681][ T9661] bond7: entered allmulticast mode [ 261.447299][ T9661] 8021q: adding VLAN 0 to HW filter on device bond7 [ 261.475243][ T9659] dvmrp6: entered allmulticast mode [ 261.568628][ T9675] netlink: 'syz.1.1072': attribute type 3 has an invalid length. [ 261.857737][ T9696] netlink: 'syz.2.1077': attribute type 30 has an invalid length. [ 262.127919][ T9721] netlink: 'syz.3.1083': attribute type 39 has an invalid length. [ 262.318634][ T9731] bond8: ARP target 1.0.0.0 is already present [ 262.325378][ T9731] bond8: option arp_ip_target: invalid value (1) [ 262.334545][ T9731] bond8 (unregistering): Released all slaves [ 262.356065][ T9734] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 262.407226][ T9681] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 262.415612][ T9681] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 262.441008][ T9681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.455866][ T9681] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 262.472561][ T9741] tipc: Enabling of bearer rejected, already enabled [ 262.514626][ T9681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 262.535772][ T9681] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 262.556043][ T9681] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.570538][ T9681] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 262.587732][ T9681] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.593880][ T9681] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 263.920522][ T9785] netlink: 'syz.3.1100': attribute type 10 has an invalid length. [ 263.992653][ T9791] vlan3: entered allmulticast mode [ 263.997805][ T9791] bridge_slave_0: entered allmulticast mode [ 264.201578][ T9801] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 264.411320][ T9814] __nla_validate_parse: 15 callbacks suppressed [ 264.411338][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1108'. [ 317.133242][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.572658][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 416.980833][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 416.988421][ T31] Not tainted syzkaller #0 [ 416.993409][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.002408][ T31] task:kworker/1:1 state:D stack:23720 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 417.014471][ T31] Workqueue: events rfkill_sync_work [ 417.019964][ T31] Call Trace: [ 417.023254][ T31] [ 417.026196][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 417.031097][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.040231][ T31] ? __pfx___schedule+0x10/0x10 [ 417.045115][ T31] ? preempt_schedule+0xae/0xc0 [ 417.050687][ T31] ? schedule+0x91/0x360 [ 417.055256][ T31] schedule+0x165/0x360 [ 417.059769][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.065245][ T31] __mutex_lock+0x7e6/0x1350 [ 417.115842][ T31] ? __mutex_lock+0x5bb/0x1350 [ 417.127901][ T31] ? rfkill_sync_work+0x2e/0x200 [ 417.133408][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.138639][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 417.146048][ T31] rfkill_sync_work+0x2e/0x200 [ 417.151290][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 417.157028][ T31] process_scheduled_works+0xae1/0x17b0 [ 417.163135][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.169150][ T31] worker_thread+0x8a0/0xda0 [ 417.173872][ T31] kthread+0x711/0x8a0 [ 417.178078][ T31] ? __pfx_worker_thread+0x10/0x10 [ 417.183498][ T31] ? __pfx_kthread+0x10/0x10 [ 417.188094][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.193345][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.198544][ T31] ? __pfx_kthread+0x10/0x10 [ 417.203163][ T31] ret_from_fork+0x4bc/0x870 [ 417.207753][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 417.213227][ T31] ? __switch_to_asm+0x39/0x70 [ 417.217986][ T31] ? __switch_to_asm+0x33/0x70 [ 417.222803][ T31] ? __pfx_kthread+0x10/0x10 [ 417.227401][ T31] ret_from_fork_asm+0x1a/0x30 [ 417.232311][ T31] [ 417.235486][ T31] INFO: task kworker/1:3:5891 blocked for more than 143 seconds. [ 417.243626][ T31] Not tainted syzkaller #0 [ 417.248565][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.257337][ T31] task:kworker/1:3 state:D stack:21816 pid:5891 tgid:5891 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 417.269573][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 417.276401][ T31] Call Trace: [ 417.279830][ T31] [ 417.282794][ T31] __schedule+0x1798/0x4cc0 [ 417.287328][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 417.292882][ T31] ? __pfx___schedule+0x10/0x10 [ 417.297773][ T31] ? schedule+0x91/0x360 [ 417.302299][ T31] schedule+0x165/0x360 [ 417.306470][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.312116][ T31] __mutex_lock+0x7e6/0x1350 [ 417.316725][ T31] ? __mutex_lock+0x5bb/0x1350 [ 417.321525][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 417.327773][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.333071][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 417.338884][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 417.344645][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 417.350746][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 417.356469][ T31] process_scheduled_works+0xae1/0x17b0 [ 417.362351][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.368362][ T31] worker_thread+0x8a0/0xda0 [ 417.373065][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.379446][ T31] ? __kthread_parkme+0x7b/0x200 [ 417.384375][ T31] kthread+0x711/0x8a0 [ 417.388429][ T31] ? __pfx_worker_thread+0x10/0x10 [ 417.393812][ T31] ? __pfx_kthread+0x10/0x10 [ 417.398427][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.403674][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.408878][ T31] ? __pfx_kthread+0x10/0x10 [ 417.413555][ T31] ret_from_fork+0x4bc/0x870 [ 417.418158][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 417.423611][ T31] ? __switch_to_asm+0x39/0x70 [ 417.428370][ T31] ? __switch_to_asm+0x33/0x70 [ 417.433192][ T31] ? __pfx_kthread+0x10/0x10 [ 417.437789][ T31] ret_from_fork_asm+0x1a/0x30 [ 417.442625][ T31] [ 417.445682][ T31] INFO: task syz.4.1073:9681 blocked for more than 143 seconds. [ 417.454058][ T31] Not tainted syzkaller #0 [ 417.458991][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.467705][ T31] task:syz.4.1073 state:D stack:26200 pid:9681 tgid:9672 ppid:5827 task_flags:0x400140 flags:0x00080003 [ 417.479894][ T31] Call Trace: [ 417.483165][ T31] [ 417.486084][ T31] __schedule+0x1798/0x4cc0 [ 417.490658][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.495519][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.500422][ T31] ? __pfx___schedule+0x10/0x10 [ 417.505293][ T31] ? schedule+0x91/0x360 [ 417.509865][ T31] schedule+0x165/0x360 [ 417.514033][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.519533][ T31] __mutex_lock+0x7e6/0x1350 [ 417.524125][ T31] ? __mutex_lock+0x5bb/0x1350 [ 417.528873][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 417.534584][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.540033][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.545245][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 417.551207][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.557543][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 417.563308][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 417.568419][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 417.574424][ T31] rfkill_set_block+0x1d2/0x440 [ 417.579346][ T31] rfkill_fop_write+0x44b/0x570 [ 417.584207][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 417.589605][ T31] ? security_kernfs_init_security+0x230/0x290 [ 417.595762][ T31] ? rw_verify_area+0x255/0x4d0 [ 417.600892][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.605728][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 417.611222][ T31] vfs_write+0x27e/0xb30 [ 417.615487][ T31] ? __pfx_vfs_write+0x10/0x10 [ 417.620280][ T31] ? __fget_files+0x2a/0x420 [ 417.624872][ T31] ? __fget_files+0x2a/0x420 [ 417.629771][ T31] ? __fget_files+0x3a0/0x420 [ 417.634451][ T31] ? __fget_files+0x2a/0x420 [ 417.639031][ T31] ksys_write+0x145/0x250 [ 417.643433][ T31] ? __pfx_ksys_write+0x10/0x10 [ 417.648290][ T31] ? do_syscall_64+0xbe/0xfa0 [ 417.653032][ T31] do_syscall_64+0xfa/0xfa0 [ 417.657541][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.663043][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.669120][ T31] ? clear_bhb_loop+0x60/0xb0 [ 417.673870][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.679814][ T31] RIP: 0033:0x7f2ef5d8f749 [ 417.684218][ T31] RSP: 002b:00007f2ef6b79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 417.693223][ T31] RAX: ffffffffffffffda RBX: 00007f2ef5fe6090 RCX: 00007f2ef5d8f749 [ 417.701248][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000c [ 417.709286][ T31] RBP: 00007f2ef5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.717256][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.725516][ T31] R13: 00007f2ef5fe6128 R14: 00007f2ef5fe6090 R15: 00007ffdead528d8 [ 417.733553][ T31] [ 417.736572][ T31] INFO: task syz.0.1074:9676 blocked for more than 144 seconds. [ 417.748636][ T31] Not tainted syzkaller #0 [ 417.753866][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.762567][ T31] task:syz.0.1074 state:D stack:27016 pid:9676 tgid:9676 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 417.774530][ T31] Call Trace: [ 417.777794][ T31] [ 417.781010][ T31] __schedule+0x1798/0x4cc0 [ 417.785531][ T31] ? validate_chain+0x897/0x2140 [ 417.790554][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.795418][ T31] ? __pfx___schedule+0x10/0x10 [ 417.800330][ T31] ? schedule+0x91/0x360 [ 417.804580][ T31] schedule+0x165/0x360 [ 417.808730][ T31] schedule_timeout+0x9a/0x270 [ 417.813790][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 417.819176][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.824429][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.829691][ T31] ? wait_for_completion+0x267/0x5d0 [ 417.834997][ T31] wait_for_completion+0x2bf/0x5d0 [ 417.840411][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 417.846068][ T31] ? __flush_work+0xd2/0xbc0 [ 417.850863][ T31] ? __flush_work+0xd2/0xbc0 [ 417.855458][ T31] __flush_work+0x9b9/0xbc0 [ 417.860023][ T31] ? __flush_work+0xd2/0xbc0 [ 417.864625][ T31] ? __pfx___flush_work+0x10/0x10 [ 417.869932][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 417.875216][ T31] ? __pfx___cancel_work+0x10/0x10 [ 417.880346][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 417.885987][ T31] __cancel_work_sync+0xbe/0x110 [ 417.890971][ T31] rfkill_unregister+0x92/0x220 [ 417.895834][ T31] nfc_unregister_device+0x96/0x2a0 [ 417.901314][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 417.907027][ T31] virtual_ncidev_close+0x56/0x90 [ 417.912089][ T31] __fput+0x44c/0xa70 [ 417.916081][ T31] task_work_run+0x1d4/0x260 [ 417.920741][ T31] ? __pfx_task_work_run+0x10/0x10 [ 417.925868][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 417.931644][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 417.936924][ T31] do_syscall_64+0x2bd/0xfa0 [ 417.941554][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.946760][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.952879][ T31] ? clear_bhb_loop+0x60/0xb0 [ 417.957566][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.963723][ T31] RIP: 0033:0x7f67fc58f749 [ 417.968126][ T31] RSP: 002b:00007ffd67ae1588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 417.976666][ T31] RAX: 0000000000000000 RBX: 000000000003fdb5 RCX: 00007f67fc58f749 [ 417.984672][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 417.992933][ T31] RBP: 00007f67fc7e7da0 R08: 0000000000000001 R09: 0000001367ae187f [ 418.000955][ T31] R10: 0000001b2f820000 R11: 0000000000000246 R12: 00007f67fc7e5fac [ 418.008920][ T31] R13: 00007f67fc7e5fa0 R14: ffffffffffffffff R15: 00007ffd67ae16a0 [ 418.016988][ T31] [ 418.020358][ T31] INFO: task syz.2.1080:9707 blocked for more than 144 seconds. [ 418.027984][ T31] Not tainted syzkaller #0 [ 418.033024][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.041724][ T31] task:syz.2.1080 state:D stack:26344 pid:9707 tgid:9706 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 418.053947][ T31] Call Trace: [ 418.057233][ T31] [ 418.060214][ T31] __schedule+0x1798/0x4cc0 [ 418.064740][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.069687][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.074538][ T31] ? __pfx___schedule+0x10/0x10 [ 418.079690][ T31] ? schedule+0x91/0x360 [ 418.083943][ T31] schedule+0x165/0x360 [ 418.088099][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.093698][ T31] __mutex_lock+0x7e6/0x1350 [ 418.098294][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.103118][ T31] ? rfkill_register+0x37/0x8e0 [ 418.107979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.113274][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 418.118689][ T31] ? device_initialize+0x24b/0x440 [ 418.124221][ T31] rfkill_register+0x37/0x8e0 [ 418.129025][ T31] nfc_register_device+0x14a/0x320 [ 418.134422][ T31] nci_register_device+0x87f/0x9d0 [ 418.139854][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 418.145487][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 418.150831][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 418.156211][ T31] virtual_ncidev_open+0x129/0x1a0 [ 418.161388][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 418.167027][ T31] misc_open+0x2d5/0x350 [ 418.171675][ T31] chrdev_open+0x4cc/0x5e0 [ 418.176086][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 418.181051][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 418.187383][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 418.192439][ T31] do_dentry_open+0x953/0x13f0 [ 418.197250][ T31] vfs_open+0x3b/0x340 [ 418.201659][ T31] ? path_openat+0x2ecd/0x3830 [ 418.206439][ T31] path_openat+0x2ee5/0x3830 [ 418.211107][ T31] ? __pfx_path_openat+0x10/0x10 [ 418.216068][ T31] do_filp_open+0x1fa/0x410 [ 418.220635][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.225506][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 418.230844][ T31] ? _raw_spin_unlock+0x28/0x50 [ 418.235699][ T31] ? alloc_fd+0x64c/0x6c0 [ 418.240092][ T31] do_sys_openat2+0x121/0x1c0 [ 418.244792][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.250299][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.255096][ T31] __x64_sys_openat+0x138/0x170 [ 418.260267][ T31] do_syscall_64+0xfa/0xfa0 [ 418.264784][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.270029][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.276266][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.281024][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.286922][ T31] RIP: 0033:0x7f160778f749 [ 418.291609][ T31] RSP: 002b:00007f16059f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.300064][ T31] RAX: ffffffffffffffda RBX: 00007f16079e5fa0 RCX: 00007f160778f749 [ 418.308042][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 418.316062][ T31] RBP: 00007f1607813f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.324297][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.332407][ T31] R13: 00007f16079e6038 R14: 00007f16079e5fa0 R15: 00007fff3dcde518 [ 418.340451][ T31] [ 418.343503][ T31] INFO: task syz.1.1097:9774 blocked for more than 144 seconds. [ 418.351618][ T31] Not tainted syzkaller #0 [ 418.356550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.365264][ T31] task:syz.1.1097 state:D stack:26632 pid:9774 tgid:9773 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 418.377284][ T31] Call Trace: [ 418.380916][ T31] [ 418.383861][ T31] __schedule+0x1798/0x4cc0 [ 418.388369][ T31] ? security_file_open+0xb1/0x270 [ 418.393544][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.398399][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.403313][ T31] ? __pfx___schedule+0x10/0x10 [ 418.408178][ T31] ? schedule+0x91/0x360 [ 418.412752][ T31] schedule+0x165/0x360 [ 418.416920][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.422434][ T31] __mutex_lock+0x7e6/0x1350 [ 418.427029][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.431853][ T31] ? misc_open+0x51/0x350 [ 418.436214][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.441514][ T31] misc_open+0x51/0x350 [ 418.445671][ T31] chrdev_open+0x4cc/0x5e0 [ 418.450124][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 418.455149][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 418.461530][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 418.466465][ T31] do_dentry_open+0x953/0x13f0 [ 418.471536][ T31] vfs_open+0x3b/0x340 [ 418.475613][ T31] ? path_openat+0x2ecd/0x3830 [ 418.480435][ T31] path_openat+0x2ee5/0x3830 [ 418.485063][ T31] ? __pfx_path_openat+0x10/0x10 [ 418.490049][ T31] do_filp_open+0x1fa/0x410 [ 418.494556][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.499697][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 418.504755][ T31] ? _raw_spin_unlock+0x28/0x50 [ 418.509646][ T31] ? alloc_fd+0x64c/0x6c0 [ 418.514017][ T31] do_sys_openat2+0x121/0x1c0 [ 418.518681][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.523952][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.528722][ T31] __x64_sys_openat+0x138/0x170 [ 418.533841][ T31] do_syscall_64+0xfa/0xfa0 [ 418.538347][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.543606][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.549722][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.554410][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.560661][ T31] RIP: 0033:0x7f3d3d98f749 [ 418.565080][ T31] RSP: 002b:00007f3d3e899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.573833][ T31] RAX: ffffffffffffffda RBX: 00007f3d3dbe5fa0 RCX: 00007f3d3d98f749 [ 418.581907][ T31] RDX: 0000000000040241 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 418.590150][ T31] RBP: 00007f3d3da13f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.598123][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.606163][ T31] R13: 00007f3d3dbe6038 R14: 00007f3d3dbe5fa0 R15: 00007ffc7e47ebb8 [ 418.614186][ T31] [ 418.617222][ T31] INFO: task syz.3.1110:9822 blocked for more than 145 seconds. [ 418.625197][ T31] Not tainted syzkaller #0 [ 418.630315][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.638980][ T31] task:syz.3.1110 state:D stack:28296 pid:9822 tgid:9820 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 418.651188][ T31] Call Trace: [ 418.654470][ T31] [ 418.657387][ T31] __schedule+0x1798/0x4cc0 [ 418.661942][ T31] ? security_file_open+0xb1/0x270 [ 418.667063][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.671970][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.676825][ T31] ? __pfx___schedule+0x10/0x10 [ 418.681965][ T31] ? schedule+0x91/0x360 [ 418.686203][ T31] schedule+0x165/0x360 [ 418.690486][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.695949][ T31] __mutex_lock+0x7e6/0x1350 [ 418.700563][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.705414][ T31] ? misc_open+0x51/0x350 [ 418.710017][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.715043][ T31] misc_open+0x51/0x350 [ 418.719182][ T31] chrdev_open+0x4cc/0x5e0 [ 418.723619][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 418.728559][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 418.735317][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 418.740594][ T31] do_dentry_open+0x953/0x13f0 [ 418.745372][ T31] vfs_open+0x3b/0x340 [ 418.749565][ T31] ? path_openat+0x2ecd/0x3830 [ 418.754341][ T31] path_openat+0x2ee5/0x3830 [ 418.758971][ T31] ? __pfx_path_openat+0x10/0x10 [ 418.763987][ T31] do_filp_open+0x1fa/0x410 [ 418.768497][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.773645][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 418.778716][ T31] ? _raw_spin_unlock+0x28/0x50 [ 418.783734][ T31] ? alloc_fd+0x64c/0x6c0 [ 418.788104][ T31] do_sys_openat2+0x121/0x1c0 [ 418.792842][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.798046][ T31] ? rcu_is_watching+0x15/0xb0 [ 418.803083][ T31] __x64_sys_openat+0x138/0x170 [ 418.807929][ T31] do_syscall_64+0xfa/0xfa0 [ 418.812730][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.817942][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.824039][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.828721][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.834879][ T31] RIP: 0033:0x7f312798f749 [ 418.839326][ T31] RSP: 002b:00007f3128823038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.847741][ T31] RAX: ffffffffffffffda RBX: 00007f3127be6090 RCX: 00007f312798f749 [ 418.855747][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 418.863895][ T31] RBP: 00007f3127a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.871977][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.879986][ T31] R13: 00007f3127be6128 R14: 00007f3127be6090 R15: 00007ffd4baff558 [ 418.887963][ T31] [ 418.891533][ T31] [ 418.891533][ T31] Showing all locks held in the system: [ 418.899894][ T31] 1 lock held by khungtaskd/31: [ 418.904752][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 418.914692][ T31] 3 locks held by kworker/1:1/43: [ 418.920006][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 418.931023][ T31] #1: ffffc90000b37ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 418.943440][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 418.953773][ T31] 2 locks held by getty/5587: [ 418.958440][ T31] #0: ffff88802fb920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 418.968230][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 418.978393][ T31] 3 locks held by kworker/1:3/5891: [ 418.983847][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 418.994876][ T31] #1: ffffc9000446fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.008416][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 419.020055][ T31] 2 locks held by syz.4.1073/9681: [ 419.025172][ T31] #0: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 419.035319][ T31] #1: ffff88807d214100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 419.045061][ T31] 1 lock held by syz.0.1074/9676: [ 419.050397][ T31] #0: ffff88807d214100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 419.060318][ T31] 3 locks held by syz.2.1080/9707: [ 419.065424][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.073959][ T31] #1: ffff8880314ef100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 419.083789][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 419.093829][ T31] 1 lock held by syz.1.1097/9774: [ 419.098855][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.107354][ T31] 1 lock held by syz.3.1110/9822: [ 419.112535][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.121002][ T31] 1 lock held by syz-executor/9828: [ 419.126192][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.134711][ T31] 1 lock held by syz-executor/9831: [ 419.140070][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.148493][ T31] 1 lock held by syz-executor/9832: [ 419.153705][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.162207][ T31] 1 lock held by syz-executor/9834: [ 419.167381][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.176102][ T31] 1 lock held by syz-executor/9836: [ 419.181380][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.189967][ T31] 1 lock held by syz-executor/9842: [ 419.195159][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.203795][ T31] 1 lock held by syz-executor/9845: [ 419.208977][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.217477][ T31] 1 lock held by syz-executor/9846: [ 419.222700][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.231406][ T31] 1 lock held by syz-executor/9848: [ 419.236588][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.245051][ T31] 1 lock held by syz-executor/9850: [ 419.250276][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.258712][ T31] 1 lock held by syz-executor/9856: [ 419.264181][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.272695][ T31] 1 lock held by syz-executor/9859: [ 419.278004][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.286490][ T31] 1 lock held by syz-executor/9860: [ 419.291934][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.300426][ T31] 1 lock held by syz-executor/9862: [ 419.305615][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.314104][ T31] 1 lock held by syz-executor/9864: [ 419.319605][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 419.328041][ T31] [ 419.330621][ T31] ============================================= [ 419.330621][ T31] [ 419.339037][ T31] NMI backtrace for cpu 0 [ 419.339053][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 419.339064][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.339070][ T31] Call Trace: [ 419.339074][ T31] [ 419.339079][ T31] dump_stack_lvl+0x189/0x250 [ 419.339097][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.339110][ T31] ? __pfx__printk+0x10/0x10 [ 419.339126][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 419.339139][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 419.339151][ T31] ? __pfx__printk+0x10/0x10 [ 419.339162][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 419.339178][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 419.339191][ T31] watchdog+0xf60/0xfa0 [ 419.339203][ T31] ? watchdog+0x1e2/0xfa0 [ 419.339215][ T31] kthread+0x711/0x8a0 [ 419.339241][ T31] ? __pfx_watchdog+0x10/0x10 [ 419.339254][ T31] ? __pfx_kthread+0x10/0x10 [ 419.339274][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.339294][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.339312][ T31] ? __pfx_kthread+0x10/0x10 [ 419.339332][ T31] ret_from_fork+0x4bc/0x870 [ 419.339352][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.339374][ T31] ? __switch_to_asm+0x39/0x70 [ 419.339386][ T31] ? __switch_to_asm+0x33/0x70 [ 419.339399][ T31] ? __pfx_kthread+0x10/0x10 [ 419.339419][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.339445][ T31] [ 419.478647][ T31] Sending NMI from CPU 0 to CPUs 1: [ 419.483935][ C1] NMI backtrace for cpu 1 [ 419.483960][ C1] CPU: 1 UID: 0 PID: 1338 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 419.483977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.483987][ C1] Workqueue: events_unbound toggle_allocation_gate [ 419.484008][ C1] RIP: 0010:check_preemption_disabled+0x35/0x120 [ 419.484026][ C1] Code: 48 8b 05 de b4 27 07 48 89 44 24 08 65 8b 05 e6 b4 27 07 65 8b 0d db b4 27 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d bb b4 27 07 <48> 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 [ 419.484038][ C1] RSP: 0018:ffffc9000453f868 EFLAGS: 00000202 [ 419.484050][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8ffa14d145982200 [ 419.484060][ C1] RDX: ffff888026f51e40 RSI: ffffffff8bbf08c0 RDI: ffffffff8bbf0880 [ 419.484071][ C1] RBP: ffffc9000453f950 R08: 0000000000000000 R09: ffffffff81f69382 [ 419.484080][ C1] R10: dffffc0000000000 R11: fffffbfff1c0bd04 R12: 1ffff920008a7f30 [ 419.484091][ C1] R13: ffff888143788e18 R14: 1ffff920008a7f18 R15: dffffc0000000000 [ 419.484102][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 419.484113][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.484123][ C1] CR2: 00007f7dc3717d60 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 419.484137][ C1] Call Trace: [ 419.484144][ C1] [ 419.484154][ C1] rcu_lockdep_current_cpu_online+0x37/0x120 [ 419.484175][ C1] rcu_read_lock_any_held+0x74/0x120 [ 419.484192][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 419.484208][ C1] ? rcu_read_lock_any_held+0xb3/0x120 [ 419.484229][ C1] cpus_read_lock+0x69/0x160 [ 419.484243][ C1] static_key_disable+0x12/0x20 [ 419.484262][ C1] toggle_allocation_gate+0x1a1/0x240 [ 419.484276][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 419.484290][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 419.484309][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 419.484324][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 419.484339][ C1] process_scheduled_works+0xae1/0x17b0 [ 419.484368][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 419.484392][ C1] worker_thread+0x8a0/0xda0 [ 419.484409][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 419.484431][ C1] ? __kthread_parkme+0x7b/0x200 [ 419.484452][ C1] kthread+0x711/0x8a0 [ 419.484471][ C1] ? __pfx_worker_thread+0x10/0x10 [ 419.484485][ C1] ? __pfx_kthread+0x10/0x10 [ 419.484503][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.484520][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.484537][ C1] ? __pfx_kthread+0x10/0x10 [ 419.484554][ C1] ret_from_fork+0x4bc/0x870 [ 419.484571][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 419.484589][ C1] ? __switch_to_asm+0x39/0x70 [ 419.484602][ C1] ? __switch_to_asm+0x33/0x70 [ 419.484613][ C1] ? __pfx_kthread+0x10/0x10 [ 419.484645][ C1] ret_from_fork_asm+0x1a/0x30 [ 419.484666][ C1]