last executing test programs: 43.389603988s ago: executing program 4 (id=628): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000200)=@phonet, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000440)=""/176, 0xb0}, {&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f00000005c0)=""/74, 0x4a}, {&(0x7f0000000640)=""/186, 0xba}, {&(0x7f0000000700)=""/118, 0x76}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000780)=""/254, 0xfe}, {&(0x7f0000000880)=""/89, 0x59}], 0xa, &(0x7f00000009c0)=""/215, 0xd7}, 0x10000}, {{&(0x7f0000000ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/218, 0xda}, {&(0x7f0000000d00)=""/125, 0x7d}, {&(0x7f0000000d80)=""/199, 0xc7}, {&(0x7f0000000e80)=""/197, 0xc5}, {&(0x7f0000000f80)=""/111, 0x6f}, {&(0x7f0000001000)=""/136, 0x88}, {&(0x7f00000010c0)=""/145, 0x91}], 0x9, &(0x7f0000001240)=""/112, 0x70}, 0x401}, {{&(0x7f00000012c0)=@isdn, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000001340)=""/71, 0x47}, 0x6}, {{&(0x7f00000013c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/249, 0xf9}], 0x3}, 0x7}, {{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001780)=""/223, 0xdf}, {&(0x7f0000001880)=""/97, 0x61}, {&(0x7f0000001900)=""/193, 0xc1}], 0x3, &(0x7f0000001a40)=""/180, 0xb4}, 0x5}, {{&(0x7f0000001b00)=@nfc_llcp, 0x80, &(0x7f0000002140)=[{&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)=""/250, 0xfa}, {&(0x7f0000001d40)=""/165, 0xa5}, {&(0x7f0000001e00)=""/23, 0x17}, {&(0x7f0000001e40)=""/76, 0x4c}, {&(0x7f0000001ec0)=""/134, 0x86}, {&(0x7f0000001f80)=""/103, 0x67}, {&(0x7f0000002000)=""/59, 0x3b}, {&(0x7f0000002040)=""/204, 0xcc}], 0x9, &(0x7f0000002200)=""/105, 0x69}, 0x10001}, {{&(0x7f0000002280)=@ax25={{0x3, @bcast}, [@remote, @bcast, @rose, @remote, @null, @remote, @null]}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002300)=""/220, 0xdc}, {&(0x7f0000002400)=""/104, 0x68}, {&(0x7f0000002480)=""/162, 0xa2}], 0x3, &(0x7f0000002580)=""/2, 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000025c0)=""/56, 0x38}], 0x1}, 0x1104}, {{&(0x7f0000002640)=@nfc, 0x80, &(0x7f0000003a80)=[{&(0x7f00000026c0)=""/217, 0xd9}, {&(0x7f00000027c0)=""/74, 0x4a}, {&(0x7f0000002840)=""/231, 0xe7}, {&(0x7f0000002940)=""/75, 0x4b}, {&(0x7f00000029c0)=""/132, 0x84}, {&(0x7f0000002a80)=""/4096, 0x1000}], 0x6, &(0x7f0000003b00)=""/125, 0x7d}, 0xe}, {{&(0x7f0000003b80)=@generic, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003c00)=""/8, 0x8}, {&(0x7f0000003c40)=""/22, 0x16}, {&(0x7f0000003c80)=""/217, 0xd9}], 0x3, &(0x7f0000003dc0)=""/85, 0x55}, 0xfff}], 0xa, 0x40000003, 0x0) shutdown(r3, 0x0) 21.485017529s ago: executing program 4 (id=642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3a}, 0x20) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="034886dd010000000000140036cb6cc46000000003"], 0xfdef) 20.389951698s ago: executing program 4 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xf100}, 0x80) 20.17962682s ago: executing program 4 (id=659): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x840, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0xfff4, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x4a2, 0x8, 0xf, 0x100, 0xa78523e0, 0x1, 0x9, 0x2, 0x4, 0x7, 0xc, 0x7, 0x0, 0x9, 0x4, 0x3, 0xbb4, 0x0, 0x7, 0x8, 0x9, 0x3, 0x2, 0x2000, 0xd0b, 0x383b, 0x4, 0xffffffff, 0x10, 0x80, 0x2, 0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffb, 0x7, 0x4, 0x5, 0x7fffffff, 0xe, 0x2, 0x7, 0x7237, 0xffff0001, 0x8000, 0x10000, 0x7, 0x6, 0x22f6, 0x3, 0x3319, 0x67d1, 0xc, 0x6, 0xffff, 0x8, 0x81, 0x9, 0x1, 0x8, 0x3, 0x8, 0x6, 0x4, 0x0, 0x2, 0x91ac, 0x7, 0x3, 0x2, 0x2, 0x7ff, 0x76, 0xa, 0x0, 0x34, 0x3, 0x4, 0x9, 0x1ff, 0x0, 0x8, 0xffff, 0x8, 0x1, 0x100, 0x0, 0x9, 0x7fffffff, 0x2, 0x40, 0x8, 0x401, 0x69, 0xa, 0x5, 0x4a, 0x4, 0x5, 0x6, 0xfe3, 0xdbe3, 0xc, 0x5, 0x1, 0xb, 0x4f81, 0x4, 0x0, 0x9, 0xffff, 0x9, 0x545b, 0x3, 0xc3, 0x6, 0x80, 0x6, 0x7, 0x7cf, 0x77bb, 0x8, 0x5, 0x1, 0x8, 0x8001, 0x6, 0xff, 0x10000, 0xff, 0x4, 0x9, 0x1ff, 0x3ff, 0x842, 0x881, 0xf2, 0x5, 0x6, 0xb9, 0x3, 0xee93, 0x40, 0x298, 0xad, 0x1, 0xb94d, 0x1, 0x0, 0x401, 0x5, 0xffffffec, 0x121d, 0x83b8, 0x7, 0xa0, 0x0, 0x7fffffff, 0x6, 0x7, 0x7, 0x400, 0x5, 0xfb, 0x2, 0xfc, 0x7, 0x4e0, 0xffff, 0x80000001, 0xffff0001, 0xff, 0x3, 0xfffffff7, 0x9, 0xe4, 0x9, 0x6792, 0x6, 0x3e56, 0xf8, 0x5, 0xe, 0x9, 0x66, 0x7fffffff, 0x1, 0x1, 0x1, 0x100, 0xbf1, 0x7ff, 0xb, 0x2c, 0x1, 0x2, 0x3, 0xf79, 0x1, 0x7ed472b1, 0x5, 0x1, 0xffffffee, 0x5c, 0x6000, 0x8b, 0x1, 0x7, 0x7d58, 0x5, 0x3, 0xc8a, 0x200, 0x8, 0x7, 0x18000, 0x2, 0x80000000, 0xffff2ee4, 0x101, 0x8000, 0xec, 0xf, 0x5, 0x4a968c79, 0x8, 0x1, 0x8, 0xc1b0, 0x1, 0xfffffffa, 0x2, 0x7, 0x2, 0x3ff, 0x8, 0x4, 0xb343, 0x438, 0x1879, 0x3, 0x2, 0x6, 0x3ff, 0x10001, 0x6, 0x800, 0x131441c6, 0x9, 0x1, 0x0, 0x7630, 0xf4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x4, 0x5, 0xfffffffc, 0x1, 0x9, 0x4, 0x4, 0x3, 0x3, 0x200, 0x0, 0x6, 0x3, 0x7, 0x0, 0x5ef, 0x9, 0x6, 0xfffffff8, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5, 0x9, 0x0, 0x42, 0x8, 0x9, 0xe09, 0x800, 0x4, 0x1, 0x7ff, 0x0, 0x6, 0x10001, 0x0, 0x423e573a, 0x9, 0x7, 0x2, 0x1, 0x6, 0x6, 0x9, 0x2, 0xfff, 0x40, 0xffff7fff, 0x2, 0x6dc, 0x9f, 0x7fffffff, 0xa, 0xb, 0xe0000000, 0x3, 0x6, 0xf, 0x3, 0x10, 0x4000000, 0x0, 0x10000, 0x8001, 0x9, 0x3, 0x1, 0x1ff, 0x8d14, 0x401, 0xffff, 0x10000, 0x6, 0x50cc, 0x8, 0x8, 0x1f1, 0xffff7fff, 0x8, 0x81, 0x40400, 0x0, 0x2, 0x150, 0x7, 0x9, 0x8, 0x9, 0x9fa0, 0x3, 0xd97c, 0xf, 0x4, 0xd7, 0x2, 0x4, 0x6, 0x7f, 0x6, 0xa, 0x2, 0x97, 0xfffffff8, 0x1, 0x3, 0xa, 0xffffffb5, 0x8, 0xfffffff1, 0x7, 0x10, 0x0, 0x990, 0x3, 0xff, 0x400, 0x6, 0x7, 0xfff, 0x400, 0x1, 0x7, 0xc9f, 0x7, 0x0, 0x2, 0x569, 0x9, 0xffffff59, 0x95, 0x2, 0x8, 0x1f0, 0x5, 0x4, 0x7, 0x163025b1, 0xffff, 0x3498, 0x7, 0x5, 0x4d3, 0xffffff0f, 0x8, 0x81c, 0x3, 0x1, 0x7, 0x401, 0xfffffffc, 0x7, 0x6a7, 0x1, 0x8, 0xb, 0x7fffffff, 0x3, 0x7502, 0x0, 0x40, 0x7fffffff, 0x10, 0xde, 0x0, 0x697f, 0xc, 0x2, 0x0, 0x40, 0x3, 0x8, 0xaed, 0x7, 0x12, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x80000000, 0xffffff98, 0x200, 0x4, 0x6, 0xfffffde1, 0x1, 0xc0c, 0x81, 0x7fffffff, 0x8, 0x9f0, 0x80000001, 0x5, 0xa, 0x8, 0x81, 0x9, 0x1, 0x10001, 0x1, 0xa, 0x80000000, 0xffffac00, 0xb, 0xd31, 0x4, 0x4, 0xaa8b, 0x6, 0x7fff, 0x3bc, 0x10000, 0x3d7b, 0x3c, 0xfffffffc, 0x1b, 0xffffffb3, 0xf, 0x3, 0x2, 0x0, 0x7f, 0x8000, 0x4dd4, 0x2, 0x800, 0x6, 0x1ff, 0x50, 0x109d, 0x10001, 0xe11, 0x1000000, 0x20d, 0xa88, 0x1ff, 0x24f, 0xc, 0x1, 0x100, 0x2, 0x5, 0xbc3d, 0x2, 0xfffffffa, 0x4, 0x2, 0x9, 0x5, 0x1, 0x101]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) 20.061885281s ago: executing program 4 (id=662): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) (async) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="4fd4136cf813c39448fc5fca39223fd1d4498265eb0811eac565238dcaf3d33062953807c53ba144ec2194b22fdb153e7691fd6a103771ea7598caa572d2ddb23cbc02917c6a0f0b57553ca85c767ce8618f3685a1aedfc883e3c638b7b5eea1b9962f51633d3c132ca2c58fe9853b635c0e9221d8065c19fd0d2b4d4e8d1258b3b59abffce9e4726d80549ed57e9f5344338090cae1fa48e49e54770feee403e4aca814388708978fa2cf99c3a3bebe8e885ef810b48d39274c708120", 0xbd}], 0x1, &(0x7f0000000000)=ANY=[], 0x18, 0x8001}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 19.278636083s ago: executing program 3 (id=670): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f00000002c0)="aa69c2eb87", 0x5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) close(r0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x300, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) 19.177344118s ago: executing program 3 (id=672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000000c001400", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="5c295038193c127cbf3f64ee2e95436238f77f5f5978d1aa7286dc8ef0bbcc7a8e55c14f05b1bebf0a0000000000000004de0b2d41fe1ce6640532bc8808b89482ecc1445a550c0f8774f474cf9c51ca"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000023000100800000000000000000000000050021"], 0x1c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x290, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x224, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xc5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x17c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c9ad4b638184ba5875f043813b72fd46af98cba0e12747b8d057f660bd40985"}, @WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5, 0x3, 0x9}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xe02900, @empty, 0xc}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e53f2844b34d62e012cc6ea951e9231e3c87f2786e1fc95c7d7a6a9f1fb06ec9"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000811}, 0x20000000) socket$kcm(0x29, 0x7, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @random="7c4030d57d7d"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900300003003003e80060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 19.072867827s ago: executing program 4 (id=674): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000040)="b22f0173999a32462d150da6aa50e9ad61bdaf861546549298d740c15a604d31a6fa02905005b6e6e62ee66064701d4704ad562b452bfee068a24bef54b8a73cbf52") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r8, 0x800, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r13 = socket(0x15, 0x5, 0x0) getsockopt(r13, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x814) 17.817690672s ago: executing program 0 (id=680): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x0, 0xb, 0xf5, &(0x7f0000000000)="b30fc2ab87fb68e46d19ec", &(0x7f0000000040)=""/245, 0x0, 0x0, 0x33, 0x1000, &(0x7f0000000140)="6215c756a851c7df656b8bd569be315af97eafc976613f18a1a635c8bfac96b9991bf0719b07c46f39294f9da79427b592605a", &(0x7f00000001c0)="f86957058abe1214ad4b6193ed1a066eb9792379ed413d8d7a0f20cda4f86662616ef53ba09b1fd98971be7c9e0fdebd6850e3831617a334835c22cd75b0c67e23d848c6ffaccb3b3cdea76e3efa9bf310f2c7c4f37f4d659986e955715ad80c1ccd8110959fff5057fe28683d067841262a2bac80d20ecb6822d506b0b7713f1d3af9c37a9256e76d7554cf4f975a02b62d4ac3059695f475617cd2aa66e5aeab01e394c903a6960a7073372d96e839358801da383bfe150525ea8cbff80c82a969d86f0e462d83c0f5c633ecc5dc70ce00b87fcb41a26abc9dd86d8deb1d5ebf788896d575b955744b2582ca17406afc3ac4b2f47bc11029da32866052d56b741a387e7f22ce6b1965ec46fc3c34c52e8aa205413da9a61ddc78a0967d72e686b60c72636f3069609b840a8c81b5773cd3bd8cf7c823d8d745dcbd745af719da61af9cc0fc49058df43ee8c998da4004437971575f54d463ff76c11094c32e1ef6e61fdc6bf559732c9e529ed1063877752174148319d9b4a56775b2de23e8b03813c9d98fad8af3a16bd7746621bdb3d2a3ee795fe070d2452444059aebe2d56fc65d302924194faa248057098f7f0db4255158a584ca5a672b122aca0f95e4225b911d8d8e3a9bf4bb3d32106b95c4c92ffd7efe929e3e3a1f4d4648794c9bc1ca38aa060d5d8a0af65f074918cd21c726e85cfc3d37df23908900f3d49dc34d9331bae33694478997ea83dec620424f9244318ee47af214cdd0b41629738a245f68091063cfd97ff240f63fcf3ac5eb229847cd2d61c45a1a33d303e3f590de7af355b674ba927160cc2e0f62bc88138afe39689171ba1f5598580cd1d2a95b4803306a73011fc49364dc16037ca8416fd46119f9706994fa424a043368a76cb0c20f335ca24b73210584909c8b3993bc2ae17dc331e6166fe1873be54495fc98a29a459a1d4e79b3623ea08efcd49c33b9dc7d8fbd9f380095db2f16ab4c8ec4bbf157f6dcc983d06818a30b35bf10cfdc642c58f65d70fb6bf4a34f88cfbd8da990d4e5ff13920a6fe5a04a2f7ae684d0ce40fb82be07dda0c6ecf8c4ce045bf0ec029347a8535abd20e82c0926c428cb6cb8f93bb9321557e390616f891abea18b5f12a470b948b9969186f77442a32aa9ab7b206cb2ed7f2b139e8eb34d82f70d0022a2ace9dce44b136ddf2f54906e6e16c79e94c5f8c01f037bd6d6c1920a2108d4abd6a66652d58dd2005d4b618a40d91191de98652ae24ffc8a33b5b3d2439283590bee9e86c4007c703c64f9a78a330c34e8283096607caa76ede92f7d272b83502625fe387a627be9880e6ef001ee19fe1dc53bc4f702cfadf2bbbb0f24d2d702ea3e8a9e66e1688d216e03d83e0a31aa8231f882473c8bbb6ed3daa96b11b64c98c94770d21661035b72ab06097044b74537d70f09d082209e4043b4faf3594a2de38734a9556c0578f456b49570cdedafd3658588307d112c82564659faf3942f746f47674e262538b8183d9f1efd51df90068e020fdd22b93e7b4e31b608062b6212f4c944e0bf55d936def44b3802c63d73ddd71fb1302dc3864b52a5ab0f272cb07c9fe523bd266906c4980583c7bfa3771a68fe015c24bcb36a9aa4a9ea11d0d95b69b18ac276554efba071f348b325217189a8f50d4eb6584e5effee9fa648f45ea6c238328a77e868e5b89c3d707bbe57444c342445d1129e5b75f039c3b02917dafb7f78ee628f1d291e424197e481d5a29a490ff9d130130c9bad7d1da3367d12e3c7c54e2bfebb262e439c6207abcfabb75bf6fff315464ba48e9331f99a16af98cd57bcd2fa203289b0f9822e796364bf01b8943caf470b8b4c96717f3c7e2893663d21fb5eba72b2f151042be063ebb7d7f5e3c661a911851e10e4eaffeb2e4d3e58083d0e498f2c39c70d0803d8e1c108afc4b1ca22e08793e05620fb94c50428d7f5558ff2034be064413d83930c0054add8e40b9223abaaf380085d0dabeff6759fc8e75c1616c4159dfe50046f083f3d10f84d5cfcc214a032900a6c85f7872562df25c765269d83649e09146221990ef41c810971ba6372e4d6cd93e4174c9170a75b53786c07ced128da0c66d785b22da235d3afad774d2f356b46d51f0a8573f279bb4619d095a54d3a96f9bc59b4ae7da825e6aa7f69c26040253127a1e3056ee4163465a2ab596cbd91187f45bf1278e21ff20a8c9b380ccce044cc4c22269715ee513d36cec76a0283bab44fd411fba4c9cc28fe891a4b9bb2794cba32688fcd6b1a563d6348bcf909bcb16ddd994bf2083ce87667ab953cad2e4dc681a31a655f93ad7442b4bba684c44315545a4b9be8edf7df10d9b185ebe232268d65f021aab020fc8a8387965f1d8911afb41a1718131f1cef78aff319494fc7951746d741a734c5dadea66de18c3628b5e8e82a786c1036c5af141aa8f986debf78fbe01a0ef48123165cf13691e574704e2412f6f82157189faa8344bdf19afb087c9ed545a3f62b7351a7f5eecb2c593bcc41d8ba34b877dd9aace05931efe32c96e68edd83e8efe580b88572654ce7b5180d408c259e655b8384988d98f73422a2950c3d354b237fb9e26f7a8ddb46f457aa218afebb5372fee71566827a9eff0fb7cbf70fc46091c51b476ad443ba267dd5180fa8e96e5de2d2a9a18a0829b0936b2592ede2f99524f8a16c2f065abe536171ebe044e6c2f139cf172a803750b8050d9ade48e43bb91570a2ba280954c79a332fcf31e1748373c5ad5ce119ecc364a6454ce629f77c87d4da52ff8c46e168b8c83b151bfbda3a33e6b40e1d0a77db2ec34d75780333a827a94e33b6a4838d04c5b9e8012b746a9c25875b13393581290cbc36f416efaff24cfd2eaaf456d89a98594428bb7dbd2cec76f08e386193a6ff58b71c15e6ae0e02f240e400ada0584841f5cdc6b3149c9cbef7bc8f106b85ad93f4708d368fea70124a25d7577645b9b4837a59eaffb78f85124f386e12f13b5a9460a1ad95e0d1c037281ca8349e75767987c1d1eb4c6e0cb849280b940a7eb15342da1b74eb28e7491aa192b25e2f1e881a0662043c6db9522df2d341b3ae21ae0c50c474f48367ff9132f481d13699676230d66c8ebd5dec90982132b4896c32799d6d8c30761a397a64dfcca18ebcb492bf3429b622a0d3a3a6ab40fc663d7dcad7a15efe76fc096969a660c825a35d4e29881e8b5acfdc99a7c62e3e25c2436c89c2d4872636360f2e504e944828acafa40a09f842149245f1cb9780cf5d3322ce295f4a63152bd97663d900b7351e6731308fa894e1b1b9dfe1c8af4cc9640c29b7e9a582102f45e1a10663a604ab931a117b4ddb0a0e53a1752cbbe8b0dff7cb00e0ed82bbdf4e1c7947cc26f3d171fb4d8dee12c1a463bf033612215d665e077a565db2baf36d61364b202f1c16afc55eb30183201b6bbd379fef947a4208d3e8d27fca490046849cf5ccb26975210b37d9db76fd05ffa1eabf79e1fbf9f8284b1dd7630117130d6d3a425d73db905c70172eba7f44ea0dd0045e8e71b549b6b8d596e528fb91f6081d2cdcaa233fbb10707629f73359216fb4faa66e8898083ef9c14582d9316042f95e0d56a4b7effd8881e3074f23d293f693e12f52a42b2cdee44a42a0d9265a8460bbe5792efc095c46ff7233355151919d4d2cad219ada5838f7c897553d6ce58d6835cb908093530e2ddd24687b62ca1320ddf9c283ca04c74a0ab503a97a10c4142cd89b74892dcc63734a18b0b0204625de0fe758aa5b90e152a5a411605b7e54172a2c111b16f31baa77827ecdbbf8b3238da4e655492414ce45f3c3337d59a417f49bf3d3a06105dd9839b5978e302646ca16cea018ab9bad2622a7d58835f05a82bbca13988ce31c4a401ea278b8f3b1b5b5abd05c4015049ae67dc02f337d178bbcabbbf5434f3856ed6438bccc4d8ab774033005f4dd2989664ea340ea930ed0b86f75cdb61e3212715293f783cb40d041257b2dff9b1d82b4039f34854f95c112d954e201851de546856656ea9d39af50d05a07d34208db9cdcb11ab741ab7bd7a9b965b208d4613f1c6baa0a50aba15553541b794564ec53b9caf6133bcd8c9dcc8dc246dbdd4fa6cf41fbe022484fa7c5d4d390e28e4cc17b89b0d77c43454118e853f071920c8586d90fa848b92353e3fac198034af05824853161fd5fb7a7b561a2252f2322e769f0ee6609840ec09cd3c0231ce42cb4b2fc63b423f8b8c5635c8f2a6c3f11e625dde8a99256b88a3520704b47d68aac7669c2a7d50a607b145fd2df603170571e1cb0c4aebf205fa47d3bbf8c507fdb8a5a046e35c3acc2acdd0b7bf2e3282a500e1d22e58d06f9048d4c31b8354520df8cd554f6a6d02cb23daae87ee007908507fdc3f605df78caafeac82980afdb4fa2923295c1786b6140d031ca7562fd0b90acc025c9448316a27aab35e105c28215c9b861f4639052dbd6fe819488bfe6af5dd8428e71b8caab710d887cb6750053a1b7c69c764cb0221ad20315c49d130d27fe032a64e01b70214ab909e849f16b6777dd1349a4e73709ee7528b36bbbef98523ff6213b72b928ed2fe426cb617ab40393e1208349c9a0249666fcdc64d343899233df1170bfed707d12e42346805c3cc1bd82caa54c148cf5be590879316276cb62ae46d05e83e6aea525338b9b7554dba35b143244df409d25893472188b2bb500d97b63c488a7291905cf00d9430d7c6749d10c9c1a2f4d027663c35844c905ab5c7cfc0e7dc0ed18c68450b53b7bdb82c28a33bff23a00806e14140b6ee0bd4c367c9b6635ae5a54dbb0a04c7b40cff682b3f9e35999dd47535856799895f83136890c80da711c03498b5e1a35ad6d03a04a0cacacf62a6ec33cdc573d3ff075ec46a6b8f55cdbdeb2a14f2dc468a97e010e998123291f1b4804b59c76b7237e689cf902b04e53627b6c36b202d41fcc94eec8340004ca7f8bf50d5d5ad74be289e5581d5a83b3e328776515aac0cdd875f7f9c3b05e0389976afc5528a4f5e51165c567e518d7e5177e8dab935fd5830a64a87284b309d08d8e2379017fd8ea63f8e8f367fb25c9da3c31d6ccae236dc63cd8f2eff5e63aff2aade882d66335f17ff17de76106d8afeccd85ff1ad4662770dbcfeedef25d70e4a00079e93bfbe266086f7f7f8a7f5bf86e197aa4a3690fe259a6e22791827e2cbfbd6f60ced6ef8641451412cf226833e42ccd8e3bc95de8c6b76958512394cf935bdd2bb34c7c6af9f774d676da4912de6f89d20169e14e8777e9c0d23edbbe32fbeee932ed0217b1142c580b24decb1a7f55d8ab870fbb77cf0132e3db21611c938a456291845e9a3941898181f48c48ae142173c22e390772f05d9877803b848d13aeea32b891681a0e6967ebd389d663cd06b83e89f89ccf565b408a51d36d26fdd356f7be7c1dd05fb498309cee09d87c9560f96eadc18917fe6221a53f0f755f5fe2037e36fcc5636d08cb5e46ab0a244493e50097cc0609dd2060e0291e2ffbcb7c82adf7cf5fb69c841791fb7f1655558c961014abe7af1ca514b4cd10f9442fa57de572a6e14d0b4197527f0502caebc818a7fc235c75621545862b8b29f6d33a97455af64477567118a7e485ced7b9ae75d7af29ec317556e4ee5e1e4d50461e37e57cb4bd264414aeef7c0bad3cbde0b4a1fbfb0bad0aa05f7d3444b3144d09e1101b3b52411d362d667f7b5141f84902db910b46306cf744bdd1e385ee05966009d5f1fccfcc3c4b19d0", 0x4, 0x0, 0x8000}, 0x50) 17.731084543s ago: executing program 0 (id=681): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 17.723148803s ago: executing program 3 (id=682): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f00000002c0)="aa69c2eb87", 0x5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) close(r0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) 17.620298356s ago: executing program 2 (id=684): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) 17.610981598s ago: executing program 0 (id=685): ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000240)={{}, "f2b576c7d6d5b95470ef6a46c57dd89282dbac445b33363ea5e40c2115887fa0a4c79371605fe439b765b566067588cd9f19bd3f732d150fee354c00799f06d73034d60bfdd62e78a7893fbc3c6a3a4b3edccfaa2d8580d4f219d79b3241210a62bff8e2488257dd5eeeb0755234cfedb8835276210a25fa9e4f2f315da6e6050eb69b75e376f09ada8a874bb4ae3d53f083fcffc81ba14442d2c2d721a7bd15d73607831d544d8874d8bc0b13990d8bf27e1de76e3b6252fedd579d7a6ca1683ec46e87f4c5cdfd3953e2bdaee95faa3c61f54e0e014681827efb71846717abb8a1b1c9258c675ee9cb9c22f105920a9687cf8be32989ac7522373d71b621665363e2c063749bfa5c34afd74cb432e88e8fda6ab010a4d002d7d32c65f7137494894e98cadddc515fa5be18acc6eba3ce482d95ea36c44befd711a664545789309974922ec2817d310176351db301c4cdf180ea141876f64686508e4e7d785d55083f7532de5ff2e5704f938072735d1dd02aadf3d946d62b5aafaa2f4d6133808ae4e3dc76c763e4b6907d14b24fefebff3b510f84f3dbaf76e1849ce44f76d1381a968c09e8d5cecab506e1a209b5fe4baea96523443d3e39dd129890792b826907fe9eff24d1d9eca5ccc1d0eaca9b1267374c089d0ef5ffccf06247748a8f39dd351807f3333456dcacf6693ba1666c4dd3ce70f6f40d6b81c123d2c8904342f6bfab6ad828f3af4a8642c3e7c75344ca46843e3d73822f964aab0aeb5489aa668b9e369ad1320ed8a05b2face97a3e2f9c78bafee449afec80b5cf994663e6ea5b6ad6fd31f441511924a78155acd137f326ba38615a95cc22480699f47a43b857bfcd6ce6e6b0cc150b2610fa39014c9ba9681d05d6f292641c00131824b1418a0cd712fe3ce0c1b620b71b004c3dca5810f286b59931b7091d1b8a7f24c10b39273dfc9b65ee321eefd62f8d52a0e2471c0ddddaeea666e74703ac6b75f72df72bbd01a32cefae2f47687e31aed4df2809c4fac221081d0372a8d6f88037874bad3ca278987d4b809e9f9b640e8c38a550b94b3505f62efd53b37f13d86ef06b271cf86bcdc976945b315ebb0f612964fa0dbdd7054a4cc4f3e32b268bc2ccbf0c523c77c765ec45340ab428b57ff9748ce5b71c502e805c0772db658b2b075428df19e8b0e6d2de8647d92fce3272ce85f48373532c7fc3cf450dd5b98e919a68c1b59495096c19d67aef288354ae6967649e6fbdb9dd320d1e9ba484879a167985ba7caa950a3f2b07a4e16151472bc0d02201d64d87250a77414b9ac1d0f81a926fb7b71066d4bc1ee05871a4ac1f519d334221b57c819b67348596921615267bffc34b3d3ae75abb60ca3c9fa420d072932dfddb9ade7da99cfebc93b7bc9fd028df79b18632b6c198c1f7bc8896cfa01851ee7902e764ee156c9d2923c5af388f1a00bafc10a05c697d5e8617558f6c5937a5aadc0f25d45ce024175fc8641fdf96c3ab170e95ddaec739f3fa19c7aa60327793554f8da994446192b5117b7f18eb732cda76c6431442d2d8fed6c41ed4275331a7f5b04ed81d71c4f11d385d1c77229db2c186b70c611984d516d9a63538c42c541723c2ce78d2e9df4ca00136d17d96593861b90715e2b32312d1786a042b9716c00ec44e07c84badb102be0217432866abcc8ccded1dd1b5f6b353f3c94c8332aedb56125a9b2afb6cecbe8319f3eeca88a7ac626e86e32ebf7e4380d6b5dea256e76dd3847b7d29b1f8e370cf0ebf92ba9599a9e93b86ebc8ae2586c11030baa34e4041bc8302f5afd4cc3c7d402198f1be947c680d80713fd28d137dc166a144134cc8de748b7d4213900f862654da2478a4050ab50440698c5ee2019fe1ae89b76bd52ffec13ea7556a22f8afc213f4ef280da2d19a3805cbc7b51ee1a12a2e2a4556ecb0c24326f2bd8aa1f0cac603270e09e77e9b28eb2bf63522c26f62a5a5b1de9824e643e268161efc9db1718921d8ea84f8cb5d6c32571e8600fdf260aa3d1f9241ea084cf2eb601aeafe759c08e8f31c393a1932a685315643c3eb36f0da61867caf6c1eb869e789d2b99d0929cb7e96ae499463d08a2d41d3d020d7a64250e6f521faa74539c02b6bc01dcd5e8c4f34d6c2a9ea821ae5471d95e49c31d7e444aa0c7f065b1ddd3dd1770577c22e99b3612f22474c070f5d33bda23459f31912fb239597bbd2515fbbfb4efbff7417047e19ab4eb4a7bd0d62c03257cd14a2c19e6cc1df39b43d5bb22613644b4f2dcdeb86580e486ebc1172b2aa78e20495aacbf460e83e5be2b6d8deb2cb8a93c3b473c818d2924cf52f4ccddaebd783ee2efedd638d0b0a8df8cdd97ef8835378178b1eff0b8cc848958ff201fe32b51d4c17adddd9eb4a4391b3db74b8a3bf7ff16b3fc1cd6bc712b44c92f425ebe00565e12a585290c2fd53f3f68471edfd3c7b0b52c645c5eda1acb527d0c0cbf843517f8e963465075cabd72c088291ae58339a1933cc20af3eebc282802c91ac9317808374aca88532296f8441b129ffc40215600233594ee72ac10425e1cdd58934dd5c9b0f06d021024cfe454ae0bb61a0f629e314db3ca8073d5d523569d2f99282a8cba4322577cbccf47bc8f077fdde488a356f05c0754e8c6dca61a58c0cb1d0e1352cda84ecfd320aa3680d5e6da32a3c33327652d9a31d7a22c61752723840f10a2c63a1d31c8326f1528fdd8ea3333e46efeced0b2cd97c623563598277d8cac65575aec1f857a3e6f0273f58eee650b3a9a1a1682533dd099ffefaab2fb4ae66b38bf568037f12951b34f5c8830109168348c5e4bfc3569c2a23cb9561614e342e5ce3ea3e5d27b0f299b67c3c1cddfac98c838d5ca9ca8db3bfb1419a1ea36625b780ca29e9381e881485c9cd5299b61a32dadb76ec5aba328c8b8541b1817eba9c41d8bae35e0e4fac4b6b377e71c06c9a3311f4d26cd6ec8d31a257c2f0d1284e9b6714c75a2bb0c1b807d0552c934ebf186c9461b191ad9fd5bba8eac790908de2fd47c592e48c903e406de1f3288234eae21fbbd53ffd5b277168c7c0d4ef05c7b1949f6b76213a2f57f151ec3fbfd320ae35ddb57dbe66329e2c10f41e80a42949be53ede1ae8591276efd30d80ec332bf34ab021cc9f5bcea23e34738f10483584103e6a89333c1af1ef7cd81f8008025b5d159fd6d9e2223c6616497218ed5beb298414e1f7d9ce321806159c0f7a5797a315e25e2a8b60294eafab6e613cf1440371d8331723ea2acd9df70d1edca3416bbde5e0a6919ebaaf8aaeb46dd2f2ecf6c71cba82fc906919477c743a83ded8de1b41fda47f09deac515a62573f6dee821daef679be5643d70f5bcf1d88c872a964886bc5d55cf8853c9d83cd3f141db19a263baac64d7d008ecfaeadf750cbe4ceb74b16119731dca7c022e5256ec2e1d011f1fb8bdc76792aad5b02baeceeef2f1a0dff434c1d9991d9072e44aec7b2a587d6e356410e6b7456423401a77d52b1d4f863b9142f74f335db393af2ff23e4e6a292862601560177aae43dd2775bb26acc0e6a5f9ef0f02f9e499d39da8dbc2ab8d4a2cc65605a854830f9901982ffa77b2790013bceb46b6cf6fb99dd11e184e4c2200a5e9e49da458887cf5481e40bc812b1d6e575b4093fbc755ceb32851f992ff319decb40e2e340bc2eef125099bee74c52a68dfc8a62327927c4ab492a7b890c42dbac8c0de32a8015288b3ae8eae18dc7f82e0d71b7471a2b67162b5d09b42262222220ae40a16af672e36d4d4ef4532a5895287a7962bb72fef1d5a3a20fdcc51f28f8ae99c62644abe9bf3edac505b148a5863d3244c92c296481da16297fc0416052c6c4f8a51df4d2cbb051c44f10cfbae48d6f2053e613c6810a9e0c57bfe23ea78b5919e75ceeac87e4cc65099cb27d634067f75f472c7e03248e7ef3d974bdb4fc1cc0548097b5e598112bfe959d74b2328f9ad5858558510a8fc43a06e10edc4547a012fed49d33ae144090d2488301c8ea9dce0bef92ec7d3ef42da3c6624dd38937cec0b9f0d25be97b523f7fe514b30bc09ca7486327429198b57e6aaca39899ec9a10dada9da744f6f925817b47fa6f202bd4189a536e000edbb89596250a8083ea6b8714fc0c039b42dd01acc0d50c239447ed49f027d03b94cc33a001acb50d4184511a43c3481119ab7170736af5d92414d6c998a5b8892b599847f1554acb1d3bd59decfdaffb8678458e0dd684041cc2df9f08f76b2801cc115e8a832b56712fdad27dcc20bf93899c9a0eda708e78aa4ebebe79d048318015dd2ace4312d44e265b881113c1bb11631686bc2a617f2c333d4dbc8b777d0d0111daf476913252e8372d597e48e8697be434a78e82931222c973e6309a66923849faacbd2860455791fda88b9953cca4b681dc2d2661994e661b9b309c47b7afda6a6cf3f560b62a480a926a2199e13d2f18009f95766722bc6f8279750147b3cb459d72e6ff7055fc962b70c1e5b12e499f54c705e0c5ae0c34952bf6a51198529fa425c842735a4dd3af1f1c8e4b5a203a73df2e25163faa34bf5c4453e547fd7e668585ee4c9001a273873651238795b9b89c64e67451f0fae6a1c25da89a662c5e87fefa8fb63cdc47fbce426a5149c903f5e6c97021a0762fcbfd84b2a29538a89096c324840dfd994ee6097a25ac1a5d030c4f0da2b825ae4a8391fc81c5dd5ba4cf7f640f0efdaf80ca883cb7e59f3a14da7756196941bb55c5f8daa8236f9db165df81ceaaae404b4a37291f9b8a52940c7f9cb35ac67c278f72d87a59b29eac81a6f94f33fe2cb72f21e53c521cf9f7c98ae60e8b429a66a4288ae009746fa0b2845b04565a73c31a4749cab584302b30e2df034279d52fae65ac137c2d288c85c69ac670682e108e362506bd15ab74b26f9ad681807547c48af8f7fdc8c450694efff0dd4189b65579d5509fe7dd96b169f6e6f36fb28262fee6c9aca04a4c86d07d894e0cfe81f49f6f556b4b28721c36d7d9a664ac83909a761a62e67e01477b2a8a6573ce30d5a9063325f02e71b4bb99ee2ca3a6227a3f91c226f165181048149b8fb5d599c10bd77a9fac615fb1924ef3080668c79286a98b4278ca8085fa52289725627af95f8564a6fdd01c3a102e408d148e888cca5d063a69dd65785aa5e83b7bda4dd290e5ef0105dcf01badea368ce07994243c22f70746839b2a1c632d2bd4b0e35f0da47f24a102e243c4a714784c9b1e39bc7f93c56241689b763a7100faf57e836b0a6295584a4efe1f1500d20ba8ba5845d5ff611a09a0d56889d2e113fa96d1a5b8280ffe5869d6d061bc505fcafeb79d2da0a62d6ac48621bff37d1ee07468142d20690167402d5c7e89cde338f5371637b1f51f60e0b48f9115bd5573c901dbe4a644d6c5ac265dbac4cf24d00294caf0f3a19c85b460014b9b90903aec739db7378bdf9dca0e949a1586766797f779964da6ee24604a41487bdf4002370a0ce7e354467eb15a062bf2aeb6f16fffac022aad4f9e76df5e942c3e1663649206fff910976cd9b475fd5e1de9b66ddfdf12abcc5cbaac6f8face9242c71442c60f41896315b6e127035cc6ee72a86dc39a5c7deb26268c1c58341c2c897e54562cc1b1e17f65dd8283995377d1274e15bd5642533f4cbe5f76e48ff0ec2d7dc4d72281c6b01c32bbb6705158b8a9ebf6c95c19c6faf1aee21d4c806c422d5460167e334d648aba76535026d524e8eda1437994d818dfd16c812fee"}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x2, 0x6) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f", 0x8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x400461f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) 17.490317246s ago: executing program 3 (id=686): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x90) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) recvmmsg$unix(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000008c0)=""/89, 0x59}, {&(0x7f0000000200)=""/252, 0xfc}], 0x2}}], 0x2, 0x10000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200003900000000000000080009000d000000", 0x24) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x6, 0x9, 0x0, 0x1, [@generic="f8e6"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) 17.378519725s ago: executing program 3 (id=688): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$inet6(0xa, 0x1, 0x100) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 17.368985032s ago: executing program 2 (id=689): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (fail_nth: 3) 17.117901083s ago: executing program 2 (id=690): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r1 = socket(0x10, 0x80003, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) (async) write$ppp(r0, &(0x7f00000001c0)="38d5", 0x2) 16.811543019s ago: executing program 3 (id=691): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 16.780632585s ago: executing program 2 (id=692): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) (async) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) write$cgroup_subtree(r7, &(0x7f0000000540)=ANY=[@ANYRESDEC=r5, @ANYRES16=r7, @ANYRESHEX=r8, @ANYRES32=r7, @ANYBLOB="4fa9067f06e6b5a37806f923ed3fd731f0df529e58af215eb732c56d2edbea76dd51a005877a38f18daec89bc847c6d7a3774ff8a422d346e6f5760b9d33cb35dd2ad3d0f517f0a820b38e677cd68e21e13f74f4fc5389a570a752b58fdb3a19c96bac89cae7f82dae2af68c0eec9ff4be3b54b4af2ff0ccbc837d22aed868b7cdcc5c773369fb6195f626c896836a4fc7c148758648d7681433430739bdd3778fec6669aa29e226a4b008fe2f9f087a7104ad8aab821d8c7e32999c55aefaf8ac52557edb35d3aeb4816cfbd57a43ba9e7b3d7259ce0866bd924c795d4383455ea1"], 0x10448) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (rerun: 32) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000c104000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008003a"], 0x3c}}, 0x0) 16.654436799s ago: executing program 1 (id=693): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffa) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x40000c4) 16.473215207s ago: executing program 0 (id=694): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000001986430000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.448273135s ago: executing program 1 (id=695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) 16.301769493s ago: executing program 0 (id=696): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f00000002c0)="aa69c2eb87", 0x5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) close(r0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x300, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) 16.301564145s ago: executing program 2 (id=697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffe4}, 0x80) 16.179898094s ago: executing program 0 (id=698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xc}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r2, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170928bd7000ffdbdf25f8ff000005000700000000f6080009000189070000000a000000000006000200010f080017007317ba10d6e49b7128a7b6b936fdce5afc39e1a6d3f533bf73e117cf1cd4b8dd96eba09434a3a739da2bd77455fdc44531d6da41ca8e47d6364311d8d8d047f42a497c8d9aaf03207e7a7a9fd11a645cac452dec1240735d1b79f998c200c7abe7238ca5b71187ef1b28b41d68c619f468264b0000", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) sendmsg$nl_route_sched(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0xcdc, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xcb0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}, @TCA_FW_POLICE={0x85c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x10, 0xffff, 0xd67, 0x0, 0x4, 0xf3, 0x9, 0x7f4, 0xffffddcb, 0x1, 0x23d, 0x60c77824, 0xe, 0x10001, 0xfffffffa, 0x3, 0x6, 0x80, 0xfffffffa, 0x4, 0x10, 0x9, 0x4, 0x6, 0x8, 0xed77, 0x21, 0x1, 0x4, 0xfffffffa, 0x5, 0x10000, 0x71, 0x4, 0x3, 0x2, 0x2, 0x7, 0x2, 0x69, 0x2, 0x8, 0x7, 0x7fffffff, 0x9, 0xffff, 0x0, 0x8, 0x3, 0x6, 0x5f077613, 0x7f, 0x8, 0x101, 0x3, 0x81, 0x7fffffff, 0x8, 0x0, 0x0, 0xb, 0x1, 0x9, 0x9ff, 0x0, 0x1, 0x9, 0x2, 0x2959, 0xa, 0x200, 0xe, 0x5, 0x787e15d8, 0x1, 0x4, 0xfffffff2, 0x81, 0x7ff, 0x2, 0xfff, 0x9, 0xfe, 0x8, 0x4, 0x9, 0x6, 0x6000, 0x5f1, 0x5, 0x100, 0x66, 0x6, 0x10001, 0x8000, 0x2, 0xb0, 0x3, 0x7, 0x8, 0x3, 0x7a, 0x8df, 0x7ce3fe9a, 0x7, 0x2, 0xbc0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x7, 0x0, 0x840, 0x200, 0x5, 0x6365, 0x3, 0x8, 0xffffffff, 0x6, 0x4, 0x10, 0xc3, 0xddfd, 0x9, 0x800, 0x8, 0x4, 0xb4, 0x80000001, 0x0, 0xd764, 0x7, 0x80000000, 0x6, 0xf8000000, 0x1000, 0x3, 0x2c, 0x1ff, 0x6, 0x7, 0x9, 0x9a3, 0x0, 0x1, 0x5, 0x800, 0x4, 0x3, 0x6, 0x800, 0x0, 0x8, 0x3f4, 0x7ff, 0x25, 0x606, 0x10, 0x7, 0x10, 0x5, 0x3, 0x0, 0x8, 0x0, 0x3ff, 0x3, 0x3, 0x0, 0x0, 0x8, 0x3, 0x2, 0x2, 0x3, 0x4, 0x80000000, 0x2, 0x3, 0x2, 0x5, 0x10000, 0x1, 0x8000, 0x23, 0x1, 0x662, 0xa, 0xd501, 0x1, 0x3, 0x8750, 0x1, 0x0, 0x2, 0x200, 0x7fff, 0x9, 0x101, 0x769, 0x5, 0xf9, 0x800, 0x3, 0x0, 0xfffffff8, 0x7c, 0x1, 0x97, 0xa, 0xe7, 0x4, 0x3, 0x6, 0x7, 0x1, 0xd7f, 0x9, 0x0, 0x1, 0x6, 0x2, 0x5, 0xfffffffe, 0x7, 0xdd, 0xf0, 0x4, 0x4780, 0x4fb, 0xff, 0x7, 0x80, 0x844, 0x7, 0x4, 0x6, 0x4, 0x7fffffff, 0x6, 0xa, 0x2, 0x62f8, 0x6, 0x5, 0x2, 0x2, 0x6, 0x1, 0x9, 0x9, 0x800]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xe, 0xfffffffd, 0x9, 0x7, 0xa, 0x6, 0x9, 0x98, 0x8001, 0x5, 0xb5e, 0xc, 0x9, 0x1d98, 0x4, 0x4, 0xcf56, 0x1, 0x3, 0x6, 0x6, 0x7ff, 0x7, 0x7ff, 0x5, 0xff, 0x1, 0x5, 0x30a, 0x35c01c7c, 0x1, 0x7, 0x81, 0x7fff, 0x8, 0xffffffff, 0x30000000, 0x0, 0x7, 0x20f, 0x0, 0x7b, 0x2, 0x3, 0x80000001, 0x9, 0x2, 0x4, 0x0, 0x4, 0x6, 0x0, 0xe8, 0xe, 0x2c, 0x545, 0xff, 0xfffffff8, 0x1f, 0x0, 0x6, 0x95c, 0xbb5, 0xfffffffd, 0xf, 0x1ff, 0x4, 0xed26, 0x6, 0x9, 0x5, 0x1, 0x80000001, 0x1ab77cf7, 0xfdba, 0x4, 0x1, 0x3, 0x3, 0x20000, 0x80000000, 0x7, 0x800, 0x3, 0x5, 0x3, 0x800, 0x9, 0x8, 0xd28, 0x2, 0x80, 0x6, 0xe, 0xe3, 0x81, 0x4, 0x6, 0x5, 0xd, 0x1, 0x800, 0x4, 0x100, 0x1, 0x7, 0xd, 0x6, 0x5, 0x2, 0x4, 0x7fff, 0x3, 0xa, 0x4000, 0xe, 0x3, 0x4, 0x28bd, 0x10, 0x9, 0x3, 0x3ff, 0x35c7, 0x8, 0x8, 0x8, 0x65ce, 0xd, 0x1ff, 0x7fff, 0x4, 0x10, 0x4, 0x5, 0x0, 0x7, 0x5, 0x5, 0xfffffffe, 0x3, 0x6, 0x752, 0x400, 0x2, 0x6, 0x4, 0x7fff, 0x46, 0x6, 0x7d, 0xf, 0x4, 0x100, 0xfffffffd, 0x5, 0xffff6a52, 0x120000, 0x3, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0x3, 0x8, 0xf, 0xc165, 0xfc2, 0x33, 0x2, 0x1, 0xfff, 0xad3, 0x6, 0x7, 0x53d0, 0xfff, 0xddaf, 0xa00f, 0x5, 0x40, 0x7f4, 0x4, 0x3, 0x1786, 0x3, 0x5, 0x3, 0x11, 0x400000, 0x7, 0x7f, 0x3, 0x92, 0x4, 0x6, 0x7, 0x1, 0x8, 0x5, 0xd, 0x10001, 0x42517ac, 0x2, 0x5, 0xfffffff8, 0x1, 0x4, 0x8, 0x5, 0xa, 0xffffff39, 0xb1, 0x9, 0x8, 0x1000, 0x5, 0x7fff, 0x0, 0x3181, 0xff, 0xc, 0x85, 0x6e7c, 0x80, 0x7, 0x0, 0x800, 0x8, 0xa7, 0x5, 0x9, 0xf86, 0xffffa338, 0xd, 0xfffeffff, 0x5, 0xffffff81, 0x55, 0x3, 0x400, 0x3, 0x1, 0x3, 0xffffffff, 0x10, 0xbb32, 0xfffffffa, 0xfffffff8, 0x4, 0x1, 0x7, 0x104, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x4, 0x0, 0x7f, 0x1, {0x6, 0x1, 0x2, 0x8, 0x6e, 0x3ff}, {0x4a, 0x2, 0x9, 0x6, 0x6, 0x658}, 0x0, 0xf, 0x800}}]}, @TCA_FW_POLICE={0x414, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xdca, 0x1, 0xe2, 0x3290b519, 0x1000, 0x4, 0x2, 0x7fff, 0xa, 0x200, 0x200000, 0x38, 0xc6be934, 0x200, 0x9, 0x5, 0x7f, 0x14, 0x5, 0x4, 0x500000, 0x8, 0x2, 0x80000001, 0x0, 0x3, 0x400, 0x9, 0x2, 0x80000000, 0x8, 0x4745800, 0x3, 0x9, 0x536, 0x214, 0x8, 0xa, 0x6, 0x2, 0x0, 0x1, 0x80, 0x6, 0x0, 0x0, 0x6, 0xfffffff9, 0x10, 0x4, 0x7fffffff, 0x9, 0xf0f, 0x8, 0xf330, 0x9, 0x8, 0x0, 0x4, 0x10001, 0x8000, 0x6, 0x0, 0x6cd1, 0xcb5, 0x6, 0xfffffffc, 0x7, 0xf0000000, 0x80000001, 0x2, 0x3, 0x1000, 0x80, 0xfffffdf6, 0x9, 0x2, 0xfffffffe, 0x580, 0x7ff, 0x2, 0x1059933b, 0x0, 0x1, 0x8, 0xa9, 0x2, 0x2, 0x90000000, 0xb4, 0x10, 0x10001, 0xa, 0x6, 0x3f, 0x10001, 0x9, 0x3, 0x1, 0x1ff, 0x1, 0x2, 0x5, 0x40, 0x6448, 0x2, 0x2, 0x100, 0xd, 0x3, 0x80, 0x77, 0x5, 0x8, 0x81, 0x10001, 0x3, 0xfffff000, 0xd, 0x14, 0x3, 0xa222, 0x1, 0x8, 0xa0a, 0x9, 0xe26, 0xfffffffe, 0x8, 0xfff, 0x9, 0xfffffffe, 0xffff0001, 0x0, 0xf6, 0x361, 0x2, 0x5, 0xfffffffd, 0x5, 0xeae, 0x80000001, 0x8, 0xfffffffc, 0x2, 0x7, 0x6, 0x5, 0xc, 0x9, 0x7, 0xb, 0x0, 0x800, 0xef8e, 0x59e, 0x5, 0x7f, 0x0, 0x5, 0x8, 0x7d, 0xe, 0x5, 0x8, 0x0, 0x7, 0x3, 0x3, 0x2, 0x1, 0x0, 0xb6a9, 0x2, 0x1000, 0x7, 0x2, 0x0, 0xfa9, 0x6, 0x6, 0x4, 0x8, 0x4, 0x9, 0x4, 0x80000000, 0x6, 0x2, 0x3, 0x201d, 0x7ff, 0xb, 0xa, 0x9, 0x5, 0xe, 0x4, 0x8000, 0x1, 0x6, 0x65, 0x0, 0x200, 0x0, 0x336, 0x5d44, 0x401, 0x200, 0x1, 0x80, 0xfff, 0xb, 0x7, 0xc, 0x5, 0x1, 0x2, 0x7f, 0x7, 0x7, 0x401, 0x9, 0x2, 0x5, 0x8000, 0x1, 0x1e0c, 0xf, 0x20000, 0x5372, 0x8001, 0x78068eec, 0x7, 0x1ff, 0x5, 0x5, 0x4, 0x401, 0x800, 0x1, 0x3, 0xfffffffd, 0x1, 0x101, 0xe6, 0x2, 0x1, 0x5, 0x8, 0x8, 0xad0d, 0x0, 0xffff0000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}]}, @TCA_FW_INDEV={0x14, 0x3, 'pim6reg1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}]}}]}, 0xcdc}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000600)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @generic={0x0, 0xb, 0x9, 0x3, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x6, 0x4, 0x4a4b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r15], 0x0, 0x10, 0x7ff}, 0x94) 16.175686007s ago: executing program 2 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x1f0, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x1df, 0xf2, 0x0, 0x1, [@generic="6a37a7373d585d045ae8c3c0a43c948fde79ef8fa88cfea9b2d9c1b9cbca55934bc046af7c1726", @typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}, @generic="a2fb030f52d51e6ef26bd9b4626b498b6a728f5af0873ace5ceb1b5e054c35462d87d82b9d86be8c0faa3ccafc4c1db7197452eae011e5380f709506f892a9b01702a6d15cfcec080a4c7e587fcbc0b81b3d74bcfb7758e71e581c7a2904432ac5114008bd007357eee51bf2617abd564a32f750db87458e58f155bf3da5dccb21cf2ae275b0becb307d7097c8d1cdbad30350af9f5093c8e8c34dc13c78b0c4ed4e13cb200fbe9c2bfb41aa0c5ee667dca630d311eca6b89d1c7a4bd215e521", @typed={0xfffffffffffffd0d, 0x74, 0x0, 0x0, @u64=0x7}]}]}, 0x1f0}], 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0xffffffffffffff70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0xffffffffffffffdb, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000780)={{r4}, "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"}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000480)=0x208001, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r7, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 16.002277666s ago: executing program 1 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 15.83880752s ago: executing program 1 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close(r2) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa452}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 15.694487655s ago: executing program 1 (id=702): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x54, 0x32, 0x20, 0x70b925, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000040) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast2, @in=@local, 0x4e22, 0x5, 0x4e22, 0x10, 0x2, 0x0, 0xa0, 0x2f, r1, r3}, {0xfffffffffffffbff, 0x10001, 0x1, 0xc7, 0x2, 0x1, 0xd5, 0x9}, {0x8, 0x5, 0x4, 0x8000000000000000}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}, {{@in6=@private0, 0x4d5, 0xff}, 0x2, @in6=@mcast2, 0x3503, 0x2, 0x3, 0x2, 0xf61, 0xfffffc01, 0xfffffffa}}, 0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x7}, 0x8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x80000000, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x11108}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000280)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 15.431704641s ago: executing program 1 (id=703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r0, 0x0, &(0x7f0000000400)=""/55}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800a0001006c696d6974000000240002800c000140000000000000000908000540000000000c00024000000005000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 4.049934675s ago: executing program 32 (id=674): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000040)="b22f0173999a32462d150da6aa50e9ad61bdaf861546549298d740c15a604d31a6fa02905005b6e6e62ee66064701d4704ad562b452bfee068a24bef54b8a73cbf52") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r8, 0x800, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r13 = socket(0x15, 0x5, 0x0) getsockopt(r13, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x814) 1.550377205s ago: executing program 33 (id=691): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 1.050531824s ago: executing program 34 (id=698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xc}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r2, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170928bd7000ffdbdf25f8ff000005000700000000f6080009000189070000000a000000000006000200010f080017007317ba10d6e49b7128a7b6b936fdce5afc39e1a6d3f533bf73e117cf1cd4b8dd96eba09434a3a739da2bd77455fdc44531d6da41ca8e47d6364311d8d8d047f42a497c8d9aaf03207e7a7a9fd11a645cac452dec1240735d1b79f998c200c7abe7238ca5b71187ef1b28b41d68c619f468264b0000", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) sendmsg$nl_route_sched(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0xcdc, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xcb0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}, @TCA_FW_POLICE={0x85c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x10, 0xffff, 0xd67, 0x0, 0x4, 0xf3, 0x9, 0x7f4, 0xffffddcb, 0x1, 0x23d, 0x60c77824, 0xe, 0x10001, 0xfffffffa, 0x3, 0x6, 0x80, 0xfffffffa, 0x4, 0x10, 0x9, 0x4, 0x6, 0x8, 0xed77, 0x21, 0x1, 0x4, 0xfffffffa, 0x5, 0x10000, 0x71, 0x4, 0x3, 0x2, 0x2, 0x7, 0x2, 0x69, 0x2, 0x8, 0x7, 0x7fffffff, 0x9, 0xffff, 0x0, 0x8, 0x3, 0x6, 0x5f077613, 0x7f, 0x8, 0x101, 0x3, 0x81, 0x7fffffff, 0x8, 0x0, 0x0, 0xb, 0x1, 0x9, 0x9ff, 0x0, 0x1, 0x9, 0x2, 0x2959, 0xa, 0x200, 0xe, 0x5, 0x787e15d8, 0x1, 0x4, 0xfffffff2, 0x81, 0x7ff, 0x2, 0xfff, 0x9, 0xfe, 0x8, 0x4, 0x9, 0x6, 0x6000, 0x5f1, 0x5, 0x100, 0x66, 0x6, 0x10001, 0x8000, 0x2, 0xb0, 0x3, 0x7, 0x8, 0x3, 0x7a, 0x8df, 0x7ce3fe9a, 0x7, 0x2, 0xbc0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x7, 0x0, 0x840, 0x200, 0x5, 0x6365, 0x3, 0x8, 0xffffffff, 0x6, 0x4, 0x10, 0xc3, 0xddfd, 0x9, 0x800, 0x8, 0x4, 0xb4, 0x80000001, 0x0, 0xd764, 0x7, 0x80000000, 0x6, 0xf8000000, 0x1000, 0x3, 0x2c, 0x1ff, 0x6, 0x7, 0x9, 0x9a3, 0x0, 0x1, 0x5, 0x800, 0x4, 0x3, 0x6, 0x800, 0x0, 0x8, 0x3f4, 0x7ff, 0x25, 0x606, 0x10, 0x7, 0x10, 0x5, 0x3, 0x0, 0x8, 0x0, 0x3ff, 0x3, 0x3, 0x0, 0x0, 0x8, 0x3, 0x2, 0x2, 0x3, 0x4, 0x80000000, 0x2, 0x3, 0x2, 0x5, 0x10000, 0x1, 0x8000, 0x23, 0x1, 0x662, 0xa, 0xd501, 0x1, 0x3, 0x8750, 0x1, 0x0, 0x2, 0x200, 0x7fff, 0x9, 0x101, 0x769, 0x5, 0xf9, 0x800, 0x3, 0x0, 0xfffffff8, 0x7c, 0x1, 0x97, 0xa, 0xe7, 0x4, 0x3, 0x6, 0x7, 0x1, 0xd7f, 0x9, 0x0, 0x1, 0x6, 0x2, 0x5, 0xfffffffe, 0x7, 0xdd, 0xf0, 0x4, 0x4780, 0x4fb, 0xff, 0x7, 0x80, 0x844, 0x7, 0x4, 0x6, 0x4, 0x7fffffff, 0x6, 0xa, 0x2, 0x62f8, 0x6, 0x5, 0x2, 0x2, 0x6, 0x1, 0x9, 0x9, 0x800]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xe, 0xfffffffd, 0x9, 0x7, 0xa, 0x6, 0x9, 0x98, 0x8001, 0x5, 0xb5e, 0xc, 0x9, 0x1d98, 0x4, 0x4, 0xcf56, 0x1, 0x3, 0x6, 0x6, 0x7ff, 0x7, 0x7ff, 0x5, 0xff, 0x1, 0x5, 0x30a, 0x35c01c7c, 0x1, 0x7, 0x81, 0x7fff, 0x8, 0xffffffff, 0x30000000, 0x0, 0x7, 0x20f, 0x0, 0x7b, 0x2, 0x3, 0x80000001, 0x9, 0x2, 0x4, 0x0, 0x4, 0x6, 0x0, 0xe8, 0xe, 0x2c, 0x545, 0xff, 0xfffffff8, 0x1f, 0x0, 0x6, 0x95c, 0xbb5, 0xfffffffd, 0xf, 0x1ff, 0x4, 0xed26, 0x6, 0x9, 0x5, 0x1, 0x80000001, 0x1ab77cf7, 0xfdba, 0x4, 0x1, 0x3, 0x3, 0x20000, 0x80000000, 0x7, 0x800, 0x3, 0x5, 0x3, 0x800, 0x9, 0x8, 0xd28, 0x2, 0x80, 0x6, 0xe, 0xe3, 0x81, 0x4, 0x6, 0x5, 0xd, 0x1, 0x800, 0x4, 0x100, 0x1, 0x7, 0xd, 0x6, 0x5, 0x2, 0x4, 0x7fff, 0x3, 0xa, 0x4000, 0xe, 0x3, 0x4, 0x28bd, 0x10, 0x9, 0x3, 0x3ff, 0x35c7, 0x8, 0x8, 0x8, 0x65ce, 0xd, 0x1ff, 0x7fff, 0x4, 0x10, 0x4, 0x5, 0x0, 0x7, 0x5, 0x5, 0xfffffffe, 0x3, 0x6, 0x752, 0x400, 0x2, 0x6, 0x4, 0x7fff, 0x46, 0x6, 0x7d, 0xf, 0x4, 0x100, 0xfffffffd, 0x5, 0xffff6a52, 0x120000, 0x3, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0x3, 0x8, 0xf, 0xc165, 0xfc2, 0x33, 0x2, 0x1, 0xfff, 0xad3, 0x6, 0x7, 0x53d0, 0xfff, 0xddaf, 0xa00f, 0x5, 0x40, 0x7f4, 0x4, 0x3, 0x1786, 0x3, 0x5, 0x3, 0x11, 0x400000, 0x7, 0x7f, 0x3, 0x92, 0x4, 0x6, 0x7, 0x1, 0x8, 0x5, 0xd, 0x10001, 0x42517ac, 0x2, 0x5, 0xfffffff8, 0x1, 0x4, 0x8, 0x5, 0xa, 0xffffff39, 0xb1, 0x9, 0x8, 0x1000, 0x5, 0x7fff, 0x0, 0x3181, 0xff, 0xc, 0x85, 0x6e7c, 0x80, 0x7, 0x0, 0x800, 0x8, 0xa7, 0x5, 0x9, 0xf86, 0xffffa338, 0xd, 0xfffeffff, 0x5, 0xffffff81, 0x55, 0x3, 0x400, 0x3, 0x1, 0x3, 0xffffffff, 0x10, 0xbb32, 0xfffffffa, 0xfffffff8, 0x4, 0x1, 0x7, 0x104, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x4, 0x0, 0x7f, 0x1, {0x6, 0x1, 0x2, 0x8, 0x6e, 0x3ff}, {0x4a, 0x2, 0x9, 0x6, 0x6, 0x658}, 0x0, 0xf, 0x800}}]}, @TCA_FW_POLICE={0x414, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xdca, 0x1, 0xe2, 0x3290b519, 0x1000, 0x4, 0x2, 0x7fff, 0xa, 0x200, 0x200000, 0x38, 0xc6be934, 0x200, 0x9, 0x5, 0x7f, 0x14, 0x5, 0x4, 0x500000, 0x8, 0x2, 0x80000001, 0x0, 0x3, 0x400, 0x9, 0x2, 0x80000000, 0x8, 0x4745800, 0x3, 0x9, 0x536, 0x214, 0x8, 0xa, 0x6, 0x2, 0x0, 0x1, 0x80, 0x6, 0x0, 0x0, 0x6, 0xfffffff9, 0x10, 0x4, 0x7fffffff, 0x9, 0xf0f, 0x8, 0xf330, 0x9, 0x8, 0x0, 0x4, 0x10001, 0x8000, 0x6, 0x0, 0x6cd1, 0xcb5, 0x6, 0xfffffffc, 0x7, 0xf0000000, 0x80000001, 0x2, 0x3, 0x1000, 0x80, 0xfffffdf6, 0x9, 0x2, 0xfffffffe, 0x580, 0x7ff, 0x2, 0x1059933b, 0x0, 0x1, 0x8, 0xa9, 0x2, 0x2, 0x90000000, 0xb4, 0x10, 0x10001, 0xa, 0x6, 0x3f, 0x10001, 0x9, 0x3, 0x1, 0x1ff, 0x1, 0x2, 0x5, 0x40, 0x6448, 0x2, 0x2, 0x100, 0xd, 0x3, 0x80, 0x77, 0x5, 0x8, 0x81, 0x10001, 0x3, 0xfffff000, 0xd, 0x14, 0x3, 0xa222, 0x1, 0x8, 0xa0a, 0x9, 0xe26, 0xfffffffe, 0x8, 0xfff, 0x9, 0xfffffffe, 0xffff0001, 0x0, 0xf6, 0x361, 0x2, 0x5, 0xfffffffd, 0x5, 0xeae, 0x80000001, 0x8, 0xfffffffc, 0x2, 0x7, 0x6, 0x5, 0xc, 0x9, 0x7, 0xb, 0x0, 0x800, 0xef8e, 0x59e, 0x5, 0x7f, 0x0, 0x5, 0x8, 0x7d, 0xe, 0x5, 0x8, 0x0, 0x7, 0x3, 0x3, 0x2, 0x1, 0x0, 0xb6a9, 0x2, 0x1000, 0x7, 0x2, 0x0, 0xfa9, 0x6, 0x6, 0x4, 0x8, 0x4, 0x9, 0x4, 0x80000000, 0x6, 0x2, 0x3, 0x201d, 0x7ff, 0xb, 0xa, 0x9, 0x5, 0xe, 0x4, 0x8000, 0x1, 0x6, 0x65, 0x0, 0x200, 0x0, 0x336, 0x5d44, 0x401, 0x200, 0x1, 0x80, 0xfff, 0xb, 0x7, 0xc, 0x5, 0x1, 0x2, 0x7f, 0x7, 0x7, 0x401, 0x9, 0x2, 0x5, 0x8000, 0x1, 0x1e0c, 0xf, 0x20000, 0x5372, 0x8001, 0x78068eec, 0x7, 0x1ff, 0x5, 0x5, 0x4, 0x401, 0x800, 0x1, 0x3, 0xfffffffd, 0x1, 0x101, 0xe6, 0x2, 0x1, 0x5, 0x8, 0x8, 0xad0d, 0x0, 0xffff0000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}]}, @TCA_FW_INDEV={0x14, 0x3, 'pim6reg1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}]}}]}, 0xcdc}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000600)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @generic={0x0, 0xb, 0x9, 0x3, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x6, 0x4, 0x4a4b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r15], 0x0, 0x10, 0x7ff}, 0x94) 1.032646652s ago: executing program 35 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x1f0, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x1df, 0xf2, 0x0, 0x1, [@generic="6a37a7373d585d045ae8c3c0a43c948fde79ef8fa88cfea9b2d9c1b9cbca55934bc046af7c1726", @typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}, @generic="a2fb030f52d51e6ef26bd9b4626b498b6a728f5af0873ace5ceb1b5e054c35462d87d82b9d86be8c0faa3ccafc4c1db7197452eae011e5380f709506f892a9b01702a6d15cfcec080a4c7e587fcbc0b81b3d74bcfb7758e71e581c7a2904432ac5114008bd007357eee51bf2617abd564a32f750db87458e58f155bf3da5dccb21cf2ae275b0becb307d7097c8d1cdbad30350af9f5093c8e8c34dc13c78b0c4ed4e13cb200fbe9c2bfb41aa0c5ee667dca630d311eca6b89d1c7a4bd215e521", @typed={0xfffffffffffffd0d, 0x74, 0x0, 0x0, @u64=0x7}]}]}, 0x1f0}], 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0xffffffffffffff70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0xffffffffffffffdb, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000780)={{r4}, "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"}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000480)=0x208001, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r7, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 0s ago: executing program 36 (id=703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r0, 0x0, &(0x7f0000000400)=""/55}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800a0001006c696d6974000000240002800c000140000000000000000908000540000000000c00024000000005000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 65.373456][ T5823] cgroup: Unknown subsys name 'net' [ 65.518150][ T5823] cgroup: Unknown subsys name 'cpuset' [ 65.526839][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.881662][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.952681][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.966375][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.975585][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.984270][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.991921][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.999508][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.009443][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.017681][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.019307][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.033147][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.043798][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.051878][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.061077][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.068518][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.075731][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.084016][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.092638][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.105722][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.117728][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.125585][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.133188][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.141188][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.149073][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.157363][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.165215][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.340401][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.347496][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.771717][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 71.826688][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 71.852554][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 71.939170][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 71.996308][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 72.122935][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.130178][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.138263][ T5834] bridge_slave_0: entered allmulticast mode [ 72.145454][ T5834] bridge_slave_0: entered promiscuous mode [ 72.169118][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.176474][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.183601][ T5841] bridge_slave_0: entered allmulticast mode [ 72.190752][ T5841] bridge_slave_0: entered promiscuous mode [ 72.203374][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.210899][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.218645][ T5834] bridge_slave_1: entered allmulticast mode [ 72.226210][ T5834] bridge_slave_1: entered promiscuous mode [ 72.238219][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.245416][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.252551][ T5833] bridge_slave_0: entered allmulticast mode [ 72.259782][ T5833] bridge_slave_0: entered promiscuous mode [ 72.266884][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.274010][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.281351][ T5841] bridge_slave_1: entered allmulticast mode [ 72.288425][ T5841] bridge_slave_1: entered promiscuous mode [ 72.326260][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.333413][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.340662][ T5833] bridge_slave_1: entered allmulticast mode [ 72.347589][ T5833] bridge_slave_1: entered promiscuous mode [ 72.421697][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.444485][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.454121][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.461828][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.469324][ T5849] bridge_slave_0: entered allmulticast mode [ 72.476453][ T5849] bridge_slave_0: entered promiscuous mode [ 72.494666][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.503896][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.511050][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.518217][ T5837] bridge_slave_0: entered allmulticast mode [ 72.525423][ T5837] bridge_slave_0: entered promiscuous mode [ 72.534375][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.544577][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.552132][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.559403][ T5849] bridge_slave_1: entered allmulticast mode [ 72.566597][ T5849] bridge_slave_1: entered promiscuous mode [ 72.575623][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.595332][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.602449][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.609976][ T5837] bridge_slave_1: entered allmulticast mode [ 72.617174][ T5837] bridge_slave_1: entered promiscuous mode [ 72.653966][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.687298][ T5834] team0: Port device team_slave_0 added [ 72.713674][ T5841] team0: Port device team_slave_0 added [ 72.731701][ T5834] team0: Port device team_slave_1 added [ 72.739441][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.760812][ T5841] team0: Port device team_slave_1 added [ 72.769592][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.791350][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.802303][ T5833] team0: Port device team_slave_0 added [ 72.820651][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.851471][ T5833] team0: Port device team_slave_1 added [ 72.879513][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.886570][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.913030][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.947482][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.954443][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.981079][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.002807][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.009803][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.036628][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.050531][ T5849] team0: Port device team_slave_0 added [ 73.066775][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.073732][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.095745][ T5851] Bluetooth: hci1: command tx timeout [ 73.100497][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.117564][ T5837] team0: Port device team_slave_0 added [ 73.130419][ T5849] team0: Port device team_slave_1 added [ 73.137396][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.144339][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.170702][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.175388][ T5851] Bluetooth: hci2: command tx timeout [ 73.181504][ T5844] Bluetooth: hci0: command tx timeout [ 73.200331][ T5837] team0: Port device team_slave_1 added [ 73.217093][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.224045][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.250535][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.261153][ T5844] Bluetooth: hci3: command tx timeout [ 73.261159][ T5851] Bluetooth: hci4: command tx timeout [ 73.317527][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.324490][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.351075][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.363532][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.370644][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.396656][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.428973][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.436344][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.462772][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.485251][ T5834] hsr_slave_0: entered promiscuous mode [ 73.491627][ T5834] hsr_slave_1: entered promiscuous mode [ 73.509397][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.516873][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.543215][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.572661][ T5841] hsr_slave_0: entered promiscuous mode [ 73.578919][ T5841] hsr_slave_1: entered promiscuous mode [ 73.585375][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 73.591173][ T5841] Cannot create hsr debugfs directory [ 73.630302][ T5833] hsr_slave_0: entered promiscuous mode [ 73.636701][ T5833] hsr_slave_1: entered promiscuous mode [ 73.642694][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 73.649018][ T5833] Cannot create hsr debugfs directory [ 73.691920][ T5849] hsr_slave_0: entered promiscuous mode [ 73.698668][ T5849] hsr_slave_1: entered promiscuous mode [ 73.704668][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 73.710921][ T5849] Cannot create hsr debugfs directory [ 73.787215][ T5837] hsr_slave_0: entered promiscuous mode [ 73.793398][ T5837] hsr_slave_1: entered promiscuous mode [ 73.799819][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 73.805615][ T5837] Cannot create hsr debugfs directory [ 74.246646][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.266756][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.278156][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.297609][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.351270][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.367530][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.378879][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.396508][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.468649][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.480024][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.498420][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.510532][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.606921][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.620264][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.634598][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.658929][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.682322][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.753673][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.774610][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.792287][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.800379][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.810854][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.834555][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.863250][ T4610] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.870496][ T4610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.902926][ T4610] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.910065][ T4610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.942697][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.962005][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.969165][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.996008][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.003081][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.050292][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.127395][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.140158][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.175255][ T5844] Bluetooth: hci1: command tx timeout [ 75.187202][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.194348][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.212686][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.235737][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.242906][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.255769][ T5844] Bluetooth: hci0: command tx timeout [ 75.255804][ T5851] Bluetooth: hci2: command tx timeout [ 75.271227][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.278403][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.297328][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.304416][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.335626][ T5851] Bluetooth: hci4: command tx timeout [ 75.336023][ T5844] Bluetooth: hci3: command tx timeout [ 75.423745][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.481852][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.504035][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.553703][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.592913][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.600098][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.643598][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.650821][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.710898][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.836950][ T5834] veth0_vlan: entered promiscuous mode [ 75.886616][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.908762][ T5834] veth1_vlan: entered promiscuous mode [ 76.062191][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.099597][ T5834] veth0_macvtap: entered promiscuous mode [ 76.129457][ T5837] veth0_vlan: entered promiscuous mode [ 76.155687][ T5834] veth1_macvtap: entered promiscuous mode [ 76.197048][ T5837] veth1_vlan: entered promiscuous mode [ 76.230355][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.269930][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.286734][ T5849] veth0_vlan: entered promiscuous mode [ 76.303152][ T3979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.321076][ T3979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.331485][ T3979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.349753][ T3979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.372983][ T5841] veth0_vlan: entered promiscuous mode [ 76.383360][ T5849] veth1_vlan: entered promiscuous mode [ 76.409354][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.421113][ T5837] veth0_macvtap: entered promiscuous mode [ 76.442181][ T5841] veth1_vlan: entered promiscuous mode [ 76.450690][ T5837] veth1_macvtap: entered promiscuous mode [ 76.524254][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.537823][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.571334][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.588037][ T5849] veth0_macvtap: entered promiscuous mode [ 76.602244][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.607793][ T5849] veth1_macvtap: entered promiscuous mode [ 76.616118][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.633810][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.684305][ T3530] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.701449][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.716651][ T3979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.727418][ T5841] veth0_macvtap: entered promiscuous mode [ 76.745429][ T3979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.754454][ T3979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.767311][ T5833] veth0_vlan: entered promiscuous mode [ 76.782751][ T5841] veth1_macvtap: entered promiscuous mode [ 76.792216][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.823175][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.843102][ T5833] veth1_vlan: entered promiscuous mode [ 76.880659][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.911903][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.928521][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.942365][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.978778][ T1167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.027862][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.060839][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.086150][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.100398][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.111145][ T1167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.144557][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.163223][ T5833] veth0_macvtap: entered promiscuous mode [ 77.195929][ T5833] veth1_macvtap: entered promiscuous mode [ 77.203562][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.208551][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.255341][ T5844] Bluetooth: hci1: command tx timeout [ 77.267868][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.282685][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.313763][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.331017][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.338710][ T5844] Bluetooth: hci0: command tx timeout [ 77.345740][ T5844] Bluetooth: hci2: command tx timeout [ 77.394253][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.403009][ T3979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.416500][ T5851] Bluetooth: hci3: command tx timeout [ 77.416924][ T5844] Bluetooth: hci4: command tx timeout [ 77.428012][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.435909][ T3979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.444625][ T3979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.469292][ T3979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.542762][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.552316][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.673836][ T4610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.710719][ T4610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.838386][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.859647][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.959318][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.977431][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.089112][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.096068][ T5978] Zero length message leads to an empty skb [ 78.114145][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.121913][ T5980] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.275300][ T5986] warning: `syz.0.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.328379][ T5990] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 78.402389][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 78.416404][ T5990] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 78.497888][ T5990] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 78.554151][ T5990] pim6reg: entered allmulticast mode [ 78.585963][ T5990] pim6reg: left allmulticast mode [ 78.921375][ T6016] netlink: 68 bytes leftover after parsing attributes in process `syz.0.23'. [ 79.335035][ T5844] Bluetooth: hci1: command tx timeout [ 79.414946][ T5844] Bluetooth: hci2: command tx timeout [ 79.415865][ T5851] Bluetooth: hci0: command tx timeout [ 79.497032][ T5851] Bluetooth: hci4: command tx timeout [ 79.502503][ T5851] Bluetooth: hci3: command tx timeout [ 79.654755][ T6047] netlink: 'syz.4.31': attribute type 11 has an invalid length. [ 79.863783][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 80.039692][ T6065] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 80.321775][ T6076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 80.426508][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 80.441906][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 80.473543][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 80.723896][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 80.752425][ T6094] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 80.786745][ T6097] netlink: 'syz.4.50': attribute type 29 has an invalid length. [ 80.847471][ T6097] netlink: 'syz.4.50': attribute type 29 has an invalid length. [ 81.013366][ T6111] bridge0: entered allmulticast mode [ 81.046947][ T6108] syzkaller0: entered promiscuous mode [ 81.052847][ T6108] syzkaller0: entered allmulticast mode [ 81.138310][ T6108] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 81.724455][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 81.742304][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 82.808394][ T6163] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 82.874910][ T6167] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 82.954644][ T6163] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 83.047893][ T6170] syzkaller0: entered promiscuous mode [ 83.091667][ T6170] syzkaller0: entered allmulticast mode [ 83.178966][ T985] IPVS: starting estimator thread 0... [ 83.178988][ T6187] IPVS: ip_vs_edit_dest(): server weight less than zero [ 83.189012][ T6170] Cannot find add_set index 2 as target [ 83.226839][ T6187] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 83.308197][ T6191] IPVS: using max 30 ests per chain, 72000 per kthread [ 83.411274][ T6204] __nla_validate_parse: 8 callbacks suppressed [ 83.411291][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.78'. [ 84.069660][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 84.094979][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 84.112536][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 84.131851][ T6250] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.87'. [ 84.508391][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'. [ 84.539578][ T6271] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 84.727034][ T6279] vlan2: entered promiscuous mode [ 84.732292][ T6279] vlan2: entered allmulticast mode [ 84.760303][ T6279] hsr_slave_1: entered allmulticast mode [ 84.858397][ T6288] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 84.885930][ T6293] netlink: 'syz.0.104': attribute type 11 has an invalid length. [ 84.905924][ T6293] netlink: 'syz.0.104': attribute type 4 has an invalid length. [ 84.913595][ T6293] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.104'. [ 84.923180][ T6290] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 84.948117][ T6288] team0: Failed to send options change via netlink (err -105) [ 85.004906][ T6288] team0: Port device dummy0 added [ 85.017466][ T6290] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.089820][ T6290] team0: Failed to send options change via netlink (err -105) [ 85.104925][ T6290] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.160670][ T6290] team0: Port device dummy0 removed [ 85.190471][ T6290] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.475449][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 85.530118][ T6317] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 85.649949][ T6323] syzkaller0: entered promiscuous mode [ 85.668932][ T6323] syzkaller0: entered allmulticast mode [ 85.837492][ T6334] netlink: 'syz.0.116': attribute type 5 has an invalid length. [ 85.872302][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 85.924302][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 86.442244][ T6366] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 86.522769][ T6366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.584183][ T6373] bond1: (slave veth0_to_bond): making interface the new active one [ 86.595259][ T6373] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 86.694464][ T6369] bond1: (slave veth3): Enslaving as an active interface with a down link [ 86.709809][ T9] cfg80211: failed to load regulatory.db [ 86.800061][ T6380] syzkaller0: entered promiscuous mode [ 86.826288][ T6380] syzkaller0: entered allmulticast mode [ 86.963336][ T6392] Cannot find set identified by id 0 to match [ 87.001576][ T6392] Cannot find set identified by id 0 to match [ 87.034325][ T6398] syzkaller0: entered promiscuous mode [ 87.045762][ T6398] syzkaller0: entered allmulticast mode [ 87.216012][ T6405] sit0: entered promiscuous mode [ 87.228327][ T6405] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 87.236296][ T6407] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 87.841714][ T6442] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 87.887469][ T6444] Bluetooth: MGMT ver 1.23 [ 88.132303][ T6462] team0: Device ipvlan1 failed to register rx_handler [ 88.337047][ T6472] tipc: Enabling of bearer rejected, failed to enable media [ 88.350305][ T6472] netlink: 'syz.1.161': attribute type 63 has an invalid length. [ 88.898854][ T6502] __nla_validate_parse: 14 callbacks suppressed [ 88.898871][ T6502] netlink: 5 bytes leftover after parsing attributes in process `syz.4.177'. [ 88.962793][ T6512] geneve2: entered promiscuous mode [ 88.970853][ T6512] geneve2: entered allmulticast mode [ 88.998322][ T6502] : renamed from gretap0 (while UP) [ 89.014401][ T6517] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.180'. [ 89.020545][ T6502] A link change request failed with some changes committed already. Interface 3 may have been left with an inconsistent configuration, please check. [ 89.055823][ T6517] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.180'. [ 89.063462][ T6521] netlink: 'syz.3.181': attribute type 29 has an invalid length. [ 89.176115][ T6526] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 89.226438][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 89.241509][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 89.273439][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 89.336796][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 89.556339][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 89.681006][ T6556] netlink: 40 bytes leftover after parsing attributes in process `syz.4.190'. [ 89.710214][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 89.755619][ T6559] bond1 (unregistering): Released all slaves [ 89.912659][ T6571] netlink: 'syz.2.193': attribute type 2 has an invalid length. [ 90.027576][ T6575] : renamed from gretap0 (while UP) [ 90.058674][ T6575] : entered allmulticast mode [ 90.078366][ T6575] A link change request failed with some changes committed already. Interface 3 may have been left with an inconsistent configuration, please check. [ 90.571634][ T6613] tipc: Started in network mode [ 90.576690][ T6613] tipc: Node identity 8610f75845e1, cluster identity 4711 [ 90.585199][ T6613] tipc: Enabled bearer , priority 0 [ 90.627975][ T6613] syzkaller0: entered promiscuous mode [ 90.633484][ T6613] syzkaller0: entered allmulticast mode [ 90.691118][ T6613] tipc: Resetting bearer [ 90.698431][ T6613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.706820][ T6613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.741653][ T6611] tipc: Resetting bearer [ 90.763396][ T6611] tipc: Disabling bearer [ 91.256850][ T6646] syzkaller1: entered promiscuous mode [ 91.262734][ T6646] syzkaller1: entered allmulticast mode [ 91.533004][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.714252][ T6671] vlan2: entered promiscuous mode [ 91.747478][ T6671] bridge0: entered promiscuous mode [ 91.810786][ T6672] syzkaller0: entered promiscuous mode [ 91.824662][ T6672] syzkaller0: entered allmulticast mode [ 91.934396][ T4395] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.985018][ T4395] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.039706][ T4395] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.066655][ T4395] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.797530][ T6738] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 92.822238][ T6738] netlink: 'syz.0.240': attribute type 3 has an invalid length. [ 93.019166][ T6749] syzkaller0: entered promiscuous mode [ 93.025724][ T6749] syzkaller0: entered allmulticast mode [ 93.471128][ T6776] netlink: 'syz.0.250': attribute type 1 has an invalid length. [ 93.899403][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.908532][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.917865][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.930280][ T6794] syzkaller0: entered promiscuous mode [ 93.936496][ T6794] syzkaller0: entered allmulticast mode [ 93.944189][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.083980][ T6807] netlink: 'syz.2.259': attribute type 15 has an invalid length. [ 94.128803][ T6807] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 94.159325][ T6807] netlink: 'syz.2.259': attribute type 15 has an invalid length. [ 94.339178][ T6817] netlink: 'syz.1.263': attribute type 1 has an invalid length. [ 94.354381][ T6821] __nla_validate_parse: 22 callbacks suppressed [ 94.354399][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.264'. [ 94.380421][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.264'. [ 94.405887][ T6824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.432549][ T6827] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 94.487446][ T6821] erspan0: entered promiscuous mode [ 94.504134][ T6831] openvswitch: netlink: IP tunnel dst address not specified [ 94.522322][ T6821] : entered promiscuous mode [ 94.833038][ T6848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.981335][ T6850] syzkaller0: entered promiscuous mode [ 95.003429][ T6850] syzkaller0: entered allmulticast mode [ 95.074232][ T6856] syz_tun: entered allmulticast mode [ 95.304174][ T6868] netlink: 'syz.2.277': attribute type 25 has an invalid length. [ 95.411255][ T6855] syz_tun: left allmulticast mode [ 95.474434][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 95.521287][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 95.521287][ T4610] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.569952][ T4610] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.603097][ T4610] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.650710][ T4610] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.833900][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.286'. [ 95.876147][ T6900] netlink: 156 bytes leftover after parsing attributes in process `syz.3.287'. [ 96.057751][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 96.124083][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.292'. [ 96.138782][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.292'. [ 96.283857][ T6917] syzkaller0: entered promiscuous mode [ 96.296114][ T6917] syzkaller0: entered allmulticast mode [ 96.530507][ T6929] sctp: [Deprecated]: syz.3.297 (pid 6929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.530507][ T6929] Use struct sctp_sack_info instead [ 96.556189][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 97.098883][ T6969] nbd: must specify a size in bytes for the device [ 97.997954][ T6966] netlink: 'syz.4.304': attribute type 25 has an invalid length. [ 98.014957][ T6967] netlink: 'syz.1.306': attribute type 9 has an invalid length. [ 98.183192][ T6992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.342447][ T6998] bond2: entered promiscuous mode [ 98.348384][ T6998] bond2: entered allmulticast mode [ 98.354071][ T6998] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.428311][ T7012] batadv_slave_1: entered allmulticast mode [ 99.081299][ T7049] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 99.096596][ T7052] xt_limit: Overflow, try lower: 604147548/4200216962 [ 99.209527][ T7053] : left allmulticast mode [ 99.304484][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.312446][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.435927][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.450258][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.553209][ T7053] vlan2: left promiscuous mode [ 99.558344][ T7053] vlan2: left allmulticast mode [ 99.563653][ T7053] hsr_slave_1: left allmulticast mode [ 99.599103][ T7053] geneve2: left promiscuous mode [ 99.604077][ T7053] geneve2: left allmulticast mode [ 99.632421][ T7072] __nla_validate_parse: 8 callbacks suppressed [ 99.632439][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 99.650056][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 99.680963][ T4395] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.795810][ T4395] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.852590][ T4395] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.929487][ T4395] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.017938][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 100.135440][ T7091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.209242][ T7103] pimreg: entered allmulticast mode [ 100.231012][ T7109] trusted_key: syz.1.344 sent an empty control message without MSG_MORE. [ 100.391211][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 100.791338][ T7142] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 100.879194][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.357'. [ 100.928283][ T7142] bond3: entered promiscuous mode [ 100.933612][ T7142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.964711][ T7142] bond3: (slave bridge1): making interface the new active one [ 100.972385][ T7142] bridge1: entered promiscuous mode [ 100.978909][ T7142] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 100.988183][ T7142] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 101.319507][ T7170] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 101.952203][ T7158] syzkaller0: entered promiscuous mode [ 101.958633][ T7158] syzkaller0: entered allmulticast mode [ 102.070808][ T7176] syzkaller1: entered promiscuous mode [ 102.082768][ T7176] syzkaller1: entered allmulticast mode [ 102.091763][ T7182] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 102.221023][ T7184] netlink: 108 bytes leftover after parsing attributes in process `syz.4.365'. [ 102.243345][ T7184] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 102.285019][ T7190] netlink: 5 bytes leftover after parsing attributes in process `syz.0.368'. [ 102.326373][ T7190] : renamed from gretap0 (while UP) [ 102.362162][ T7190] A link change request failed with some changes committed already. Interface 3 may have been left with an inconsistent configuration, please check. [ 102.510452][ T7200] netlink: 'syz.2.373': attribute type 15 has an invalid length. [ 102.663312][ T7208] tipc: Started in network mode [ 102.674590][ T7208] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 102.697010][ T7208] tipc: Enabled bearer , priority 2 [ 102.705618][ T7206] syzkaller0: entered promiscuous mode [ 102.719419][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 102.725102][ T7206] syzkaller0: entered allmulticast mode [ 102.736987][ T7214] netlink: 88 bytes leftover after parsing attributes in process `syz.1.379'. [ 102.759192][ T7208] gre0: entered promiscuous mode [ 102.764333][ T7208] gre0: entered allmulticast mode [ 102.903270][ T7224] netlink: 36 bytes leftover after parsing attributes in process `syz.4.382'. [ 103.042135][ T7231] syzkaller0: entered promiscuous mode [ 103.048541][ T7231] syzkaller0: entered allmulticast mode [ 103.084893][ T30] audit: type=1800 audit(1765288366.101:2): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.383" name="memory.events" dev="tmpfs" ino=383 res=0 errno=0 [ 103.447636][ T7250] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 103.460811][ T7250] netlink: 'syz.0.391': attribute type 2 has an invalid length. [ 103.750759][ T7272] syzkaller0: entered promiscuous mode [ 103.756556][ T7272] syzkaller0: entered allmulticast mode [ 103.829097][ T1224] tipc: Node number set to 10136234 [ 104.005753][ T7281] tipc: Started in network mode [ 104.010789][ T7281] tipc: Node identity 56cabffa1b3c, cluster identity 4711 [ 104.042093][ T7281] tipc: Enabled bearer , priority 0 [ 104.051979][ T7281] syzkaller0: entered promiscuous mode [ 104.110137][ T7281] syzkaller0: entered allmulticast mode [ 104.130604][ T7281] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 104.244308][ T7281] tipc: Resetting bearer [ 104.277329][ T7280] tipc: Resetting bearer [ 104.342743][ T7280] tipc: Disabling bearer [ 104.589621][ T7314] tipc: Started in network mode [ 104.606015][ T7314] tipc: Node identity f2f352f1045d, cluster identity 4711 [ 104.627355][ T7314] tipc: Enabled bearer , priority 0 [ 104.946791][ T7332] __nla_validate_parse: 8 callbacks suppressed [ 104.946807][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.416'. [ 104.998571][ T7313] tipc: Disabling bearer [ 105.023670][ T7329] syzkaller0: entered promiscuous mode [ 105.032272][ T7329] syzkaller0: entered allmulticast mode [ 105.052157][ T7340] tipc: Enabled bearer , priority 0 [ 105.066776][ T7335] syzkaller0: entered promiscuous mode [ 105.072286][ T7335] syzkaller0: entered allmulticast mode [ 105.084649][ T7335] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 105.210746][ T7340] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 105.241940][ T7335] tipc: Resetting bearer [ 105.280091][ T7340] netlink: 224 bytes leftover after parsing attributes in process `syz.4.417'. [ 105.325803][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 105.404467][ T7361] netlink: 'syz.0.421': attribute type 4 has an invalid length. [ 105.425964][ T7334] tipc: Resetting bearer [ 105.432732][ T7360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'. [ 105.483502][ T7334] tipc: Disabling bearer [ 105.742314][ T7381] syz_tun: entered allmulticast mode [ 105.782681][ T7374] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.823345][ T7374] xt_SECMARK: invalid mode: 9 [ 105.855652][ T7383] tipc: Enabled bearer , priority 0 [ 105.873453][ T7380] syz_tun: left allmulticast mode [ 105.959029][ T7382] tipc: Disabling bearer [ 106.000002][ T7391] netlink: 5 bytes leftover after parsing attributes in process `syz.4.433'. [ 106.017675][ T7386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.431'. [ 106.029968][ T7386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.431'. [ 106.045455][ T7391] A link change request failed with some changes committed already. Interface 3 may have been left with an inconsistent configuration, please check. [ 106.117021][ T7389] syzkaller0: entered promiscuous mode [ 106.126752][ T7389] syzkaller0: entered allmulticast mode [ 106.560615][ T7416] sit1: entered promiscuous mode [ 106.582823][ T7416] sit1: entered allmulticast mode [ 106.791640][ T7432] tipc: Enabled bearer , priority 0 [ 106.830947][ T7429] tipc: Disabling bearer [ 106.870468][ T7436] netlink: 5 bytes leftover after parsing attributes in process `syz.1.446'. [ 106.891176][ T7436] A link change request failed with some changes committed already. Interface 3 may have been left with an inconsistent configuration, please check. [ 106.938948][ T7438] netlink: 'syz.3.447': attribute type 2 has an invalid length. [ 106.955481][ T7438] netlink: 'syz.3.447': attribute type 2 has an invalid length. [ 106.976462][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 107.030206][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 107.072579][ T7438] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.106180][ T7438] bridge0: entered allmulticast mode [ 107.262271][ T7457] x_tables: duplicate underflow at hook 1 [ 107.288917][ T30] audit: type=1107 audit(1765288370.311:3): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 107.559622][ T7465] team0 (unregistering): Port device team_slave_0 removed [ 107.570288][ T7465] team0 (unregistering): Port device team_slave_1 removed [ 107.626311][ T7475] tipc: Enabled bearer , priority 0 [ 107.722391][ T7474] tipc: Disabling bearer [ 107.804444][ T7477] syzkaller0: entered promiscuous mode [ 107.810230][ T7477] syzkaller0: entered allmulticast mode [ 107.957814][ T7494] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 107.978533][ T7494] netlink: 'syz.1.466': attribute type 2 has an invalid length. [ 107.995313][ T7494] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 108.308452][ T7515] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 108.409562][ T7515] bond1: entered promiscuous mode [ 108.415233][ T7515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.425954][ T7517] bond1: entered allmulticast mode [ 108.457006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 108.485498][ T7521] tap0: tun_chr_ioctl cmd 1074025676 [ 108.498987][ T7521] tap0: owner set to 0 [ 108.658174][ T7536] tipc: Enabling of bearer rejected, failed to enable media [ 109.291127][ T7571] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 109.432186][ T7571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.596072][ T7571] bond2: entered promiscuous mode [ 109.612784][ T7571] bond2: entered allmulticast mode [ 109.981720][ T5916] IPVS: starting estimator thread 0... [ 110.084944][ T7597] IPVS: using max 33 ests per chain, 79200 per kthread [ 110.194747][ T7609] tipc: Enabling of bearer rejected, failed to enable media [ 110.248690][ T7613] __nla_validate_parse: 6 callbacks suppressed [ 110.248707][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 110.270834][ T7612] netlink: 25 bytes leftover after parsing attributes in process `syz.0.498'. [ 110.291716][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.497'. [ 110.305006][ T7612] : entered allmulticast mode [ 110.325720][ T7613] netlink: 48 bytes leftover after parsing attributes in process `syz.3.497'. [ 110.350619][ T7618] tipc: Enabled bearer , priority 0 [ 110.486997][ T7621] tipc: Disabling bearer [ 110.519184][ T7624] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 110.525141][ T7627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.502'. [ 110.542008][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.502'. [ 110.552636][ T7624] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 110.756473][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 110.770612][ T7644] xt_cluster: node mask cannot exceed total number of nodes [ 110.859772][ T7640] bridge1: port 1(veth3) entered blocking state [ 110.881156][ T7640] bridge1: port 1(veth3) entered disabled state [ 110.892313][ T7640] veth3: entered allmulticast mode [ 110.900003][ T7640] veth3: entered promiscuous mode [ 110.916478][ T7647] bridge1: port 2(veth0_to_bond) entered blocking state [ 110.923883][ T7647] bridge1: port 2(veth0_to_bond) entered disabled state [ 110.936029][ T7647] veth0_to_bond: entered allmulticast mode [ 110.944183][ T7647] veth0_to_bond: entered promiscuous mode [ 111.106190][ T7657] tipc: Started in network mode [ 111.113181][ T7657] tipc: Node identity ac14140f, cluster identity 4711 [ 111.131262][ T7657] tipc: New replicast peer: 255.255.255.255 [ 111.153188][ T7657] tipc: Enabled bearer , priority 10 [ 111.278983][ T7670] tipc: Enabling of bearer rejected, failed to enable media [ 111.291413][ T7669] syzkaller0: entered promiscuous mode [ 111.313713][ T7669] syzkaller0: entered allmulticast mode [ 111.374124][ T7676] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.519'. [ 111.479618][ T7678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.492271][ T7678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.644123][ T7686] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.699183][ T7678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.710019][ T7678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.786818][ T7678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.798267][ T7678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.867137][ T7695] xt_hashlimit: max too large, truncated to 1048576 [ 111.889825][ T7678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.901588][ T7678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.998837][ T1160] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.008666][ T1160] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.025029][ T1160] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.033391][ T1160] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.050835][ T1160] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.061830][ T1160] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.087361][ T1160] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.104632][ T1160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.255028][ T917] tipc: Node number set to 2886997007 [ 112.403954][ T7713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.531'. [ 112.636909][ T7727] tipc: Enabling of bearer rejected, failed to enable media [ 112.710812][ T7729] sctp: [Deprecated]: syz.1.536 (pid 7729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.710812][ T7729] Use struct sctp_sack_info instead [ 112.768066][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 112.805928][ T7729] netlink: 'syz.1.536': attribute type 2 has an invalid length. [ 112.849482][ T7737] tipc: Enabled bearer , priority 0 [ 112.886598][ T7737] syzkaller0: entered promiscuous mode [ 112.905678][ T7737] syzkaller0: entered allmulticast mode [ 112.945426][ T7737] tipc: Resetting bearer [ 112.957393][ T7736] tipc: Resetting bearer [ 112.990436][ T7736] tipc: Disabling bearer [ 112.999750][ T7742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.032795][ T7742] bridge0: port 3(vlan3) entered blocking state [ 113.039426][ T7742] bridge0: port 3(vlan3) entered disabled state [ 113.048239][ T7742] vlan3: entered allmulticast mode [ 113.053789][ T7742] bridge0: entered allmulticast mode [ 113.066718][ T7742] vlan3: left allmulticast mode [ 113.073035][ T7742] bridge0: left allmulticast mode [ 113.345402][ T7748] vlan4: entered promiscuous mode [ 113.372677][ T7748] : entered promiscuous mode [ 113.880873][ T7782] tipc: Enabling of bearer rejected, failed to enable media [ 114.590834][ T7815] syzkaller0: entered promiscuous mode [ 114.634668][ T7815] syzkaller0: entered allmulticast mode [ 114.658869][ T7817] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 114.896129][ T7820] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 114.908930][ T7820] bond2 (unregistering): Released all slaves [ 115.075707][ T7834] tipc: Enabling of bearer rejected, failed to enable media [ 115.472446][ T7858] x_tables: duplicate underflow at hook 1 [ 115.705402][ T7867] __nla_validate_parse: 9 callbacks suppressed [ 115.705419][ T7867] netlink: 2 bytes leftover after parsing attributes in process `syz.0.581'. [ 115.732974][ T7868] netlink: 2 bytes leftover after parsing attributes in process `syz.0.581'. [ 115.762671][ T7878] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 115.777025][ T7878] syzkaller0: linktype set to 778 [ 115.795101][ T7882] netlink: 'syz.4.583': attribute type 25 has an invalid length. [ 115.909278][ T7884] syzkaller0: entered promiscuous mode [ 115.915369][ T7884] syzkaller0: entered allmulticast mode [ 115.932029][ T7884] tipc: Enabled bearer , priority 0 [ 115.943804][ T7887] netlink: 32 bytes leftover after parsing attributes in process `syz.2.586'. [ 115.958485][ T7883] tipc: Resetting bearer [ 115.964626][ T7886] netlink: 32 bytes leftover after parsing attributes in process `syz.2.586'. [ 115.986763][ T7883] tipc: Disabling bearer [ 116.287599][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.592'. [ 116.330814][ T7906] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 116.338309][ T7906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.350944][ T7906] openvswitch: netlink: IP tunnel dst address not specified [ 116.369006][ T7908] openvswitch: netlink: IP tunnel dst address not specified [ 116.506661][ T7906] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 116.549093][ T7906] bond1: option packets_per_slave: allowed values 0 - 65535 [ 116.567365][ T7906] bond1 (unregistering): Released all slaves [ 116.650063][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 116.689271][ T7924] FAULT_INJECTION: forcing a failure. [ 116.689271][ T7924] name failslab, interval 1, probability 0, space 0, times 1 [ 116.689751][ T7908] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 116.711472][ T7924] CPU: 1 UID: 0 PID: 7924 Comm: syz.4.597 Not tainted syzkaller #0 PREEMPT(full) [ 116.711495][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.711512][ T7924] Call Trace: [ 116.711522][ T7924] [ 116.711530][ T7924] dump_stack_lvl+0x189/0x250 [ 116.711557][ T7924] ? __pfx____ratelimit+0x10/0x10 [ 116.711577][ T7924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.711594][ T7924] ? __pfx__printk+0x10/0x10 [ 116.711622][ T7924] ? __pfx___might_resched+0x10/0x10 [ 116.711644][ T7924] should_fail_ex+0x414/0x560 [ 116.711668][ T7924] should_failslab+0xa8/0x100 [ 116.711694][ T7924] __kmalloc_noprof+0xcb/0x800 [ 116.711713][ T7924] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 116.711738][ T7924] tomoyo_realpath_from_path+0xe3/0x5d0 [ 116.711757][ T7924] ? tomoyo_domain+0xd8/0x130 [ 116.711788][ T7924] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 116.711811][ T7924] tomoyo_path_number_perm+0x1e8/0x5a0 [ 116.711836][ T7924] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.711876][ T7924] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 116.711917][ T7924] ? __fget_files+0x2a/0x420 [ 116.711936][ T7924] ? __fget_files+0x3a0/0x420 [ 116.711950][ T7924] ? __fget_files+0x2a/0x420 [ 116.711969][ T7924] security_file_ioctl+0xcb/0x2d0 [ 116.711992][ T7924] __se_sys_ioctl+0x47/0x170 [ 116.712012][ T7924] do_syscall_64+0xfa/0xf80 [ 116.712033][ T7924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.712049][ T7924] ? clear_bhb_loop+0x60/0xb0 [ 116.712069][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.712085][ T7924] RIP: 0033:0x7f6f5298f749 [ 116.712104][ T7924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.712118][ T7924] RSP: 002b:00007f6f537d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.712136][ T7924] RAX: ffffffffffffffda RBX: 00007f6f52be5fa0 RCX: 00007f6f5298f749 [ 116.712148][ T7924] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000003 [ 116.712158][ T7924] RBP: 00007f6f537d1090 R08: 0000000000000000 R09: 0000000000000000 [ 116.712169][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.712178][ T7924] R13: 00007f6f52be6038 R14: 00007f6f52be5fa0 R15: 00007ffc55b9fee8 [ 116.712208][ T7924] [ 116.712215][ T7924] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.946285][ T7908] bond1: option packets_per_slave: allowed values 0 - 65535 [ 116.958637][ T7908] bond1 (unregistering): Released all slaves [ 117.156179][ T7929] netlink: 'syz.0.599': attribute type 83 has an invalid length. [ 117.182528][ T7934] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 117.207895][ T7931] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 117.218740][ T7931] team0: Device macvtap1 is already an upper device of the team interface [ 117.248814][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 117.533951][ T7955] ip6t_srh: unknown srh match flags 5F28 [ 117.552506][ T7953] netlink: 27 bytes leftover after parsing attributes in process `syz.2.607'. [ 117.565762][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.607'. [ 117.666000][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 117.875749][ T7978] netlink: 'syz.0.614': attribute type 29 has an invalid length. [ 117.919670][ T7978] netlink: 'syz.0.614': attribute type 29 has an invalid length. [ 117.967682][ T7983] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 118.003931][ T7983] tipc: Enabled bearer , priority 10 [ 118.060506][ T7988] syzkaller0: entered promiscuous mode [ 118.080677][ T7988] syzkaller0: entered allmulticast mode [ 118.662198][ T8025] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 118.678022][ T8025] bond5 (unregistering): Released all slaves [ 119.115066][ T48] tipc: Node number set to 3287414616 [ 119.221914][ T8039] bridge_slave_0: left allmulticast mode [ 119.236938][ T8039] bridge_slave_0: left promiscuous mode [ 119.270312][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.297707][ T8039] bridge_slave_1: left allmulticast mode [ 119.303564][ T8039] bridge_slave_1: left promiscuous mode [ 119.309588][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.322380][ T8039] veth0_to_bond: left allmulticast mode [ 119.333340][ T8039] veth0_to_bond: left promiscuous mode [ 119.343106][ T8039] bridge1: port 2(veth0_to_bond) entered disabled state [ 119.362261][ T8039] bond0: (slave bond_slave_0): Releasing backup interface [ 119.372362][ T8039] bond0: (slave bond_slave_1): Releasing backup interface [ 119.384048][ T8039] team0: Port device team_slave_0 removed [ 119.391466][ T8039] team0: Port device team_slave_1 removed [ 119.397724][ T8039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.407901][ T8039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.417151][ T8039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.434439][ T8044] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 132.777445][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.489888][ T8057] __nla_validate_parse: 5 callbacks suppressed [ 140.489904][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'. [ 140.532346][ T8059] bridge3: entered promiscuous mode [ 140.538559][ T8059] bridge3: entered allmulticast mode [ 140.576305][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.640'. [ 140.648620][ T8057] wg1: entered promiscuous mode [ 140.653752][ T8057] wg1: entered allmulticast mode [ 140.898035][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 141.495643][ T8110] syzkaller0: entered promiscuous mode [ 141.501227][ T8110] syzkaller0: entered allmulticast mode [ 141.607294][ T8113] Bluetooth: MGMT ver 1.23 [ 141.615331][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 141.736564][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 142.011604][ T8143] FAULT_INJECTION: forcing a failure. [ 142.011604][ T8143] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.045696][ T8143] CPU: 1 UID: 0 PID: 8143 Comm: syz.3.663 Not tainted syzkaller #0 PREEMPT(full) [ 142.045720][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.045730][ T8143] Call Trace: [ 142.045737][ T8143] [ 142.045744][ T8143] dump_stack_lvl+0x189/0x250 [ 142.045769][ T8143] ? __pfx____ratelimit+0x10/0x10 [ 142.045789][ T8143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.045807][ T8143] ? __pfx__printk+0x10/0x10 [ 142.045827][ T8143] ? __might_fault+0xb0/0x130 [ 142.045856][ T8143] should_fail_ex+0x414/0x560 [ 142.045878][ T8143] _copy_from_user+0x2d/0xb0 [ 142.045900][ T8143] ___sys_sendmsg+0x158/0x2a0 [ 142.045926][ T8143] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.045954][ T8143] ? rcu_read_lock_any_held+0xb3/0x120 [ 142.046000][ T8143] ? __fget_files+0x2a/0x420 [ 142.046014][ T8143] ? __fget_files+0x3a0/0x420 [ 142.046038][ T8143] __x64_sys_sendmsg+0x19b/0x260 [ 142.046062][ T8143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.046094][ T8143] ? __pfx_ksys_write+0x10/0x10 [ 142.046118][ T8143] ? do_syscall_64+0xbe/0xf80 [ 142.046140][ T8143] do_syscall_64+0xfa/0xf80 [ 142.046159][ T8143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.046175][ T8143] ? clear_bhb_loop+0x60/0xb0 [ 142.046195][ T8143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.046210][ T8143] RIP: 0033:0x7fe8d5f8f749 [ 142.046225][ T8143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.046238][ T8143] RSP: 002b:00007fe8d6eda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.046256][ T8143] RAX: ffffffffffffffda RBX: 00007fe8d61e5fa0 RCX: 00007fe8d5f8f749 [ 142.046268][ T8143] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 142.046278][ T8143] RBP: 00007fe8d6eda090 R08: 0000000000000000 R09: 0000000000000000 [ 142.046296][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.046306][ T8143] R13: 00007fe8d61e6038 R14: 00007fe8d61e5fa0 R15: 00007ffe60f9b3d8 [ 142.046335][ T8143] [ 142.430552][ T8156] tipc: Enabling of bearer rejected, failed to enable media [ 142.451011][ T8156] netlink: 'syz.3.667': attribute type 11 has an invalid length. [ 142.503586][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 142.563574][ T8158] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 142.582145][ T8158] bond5: entered promiscuous mode [ 142.594109][ T8124] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.602500][ T8158] bond5: entered allmulticast mode [ 142.607083][ T8124] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 142.620874][ T8158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.660298][ T8124] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.716343][ T8124] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 142.817885][ T8124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.823822][ T8124] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 142.861756][ T8124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.878515][ T8124] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 142.988083][ T8124] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.998600][ T8124] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 143.007830][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'. [ 143.370767][ T8181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.385895][ T8181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.399083][ T8181] bond0 (unregistering): Released all slaves [ 143.450077][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 143.596101][ T8210] FAULT_INJECTION: forcing a failure. [ 143.596101][ T8210] name failslab, interval 1, probability 0, space 0, times 0 [ 143.624956][ T8210] CPU: 0 UID: 0 PID: 8210 Comm: syz.1.677 Not tainted syzkaller #0 PREEMPT(full) [ 143.624980][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.624990][ T8210] Call Trace: [ 143.624997][ T8210] [ 143.625004][ T8210] dump_stack_lvl+0x189/0x250 [ 143.625027][ T8210] ? __pfx____ratelimit+0x10/0x10 [ 143.625047][ T8210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.625064][ T8210] ? __pfx__printk+0x10/0x10 [ 143.625088][ T8210] ? __pfx___might_resched+0x10/0x10 [ 143.625105][ T8210] ? fs_reclaim_acquire+0x7d/0x100 [ 143.625131][ T8210] should_fail_ex+0x414/0x560 [ 143.625171][ T8210] should_failslab+0xa8/0x100 [ 143.625195][ T8210] kmem_cache_alloc_node_noprof+0x77/0x710 [ 143.625214][ T8210] ? __alloc_skb+0x255/0x430 [ 143.625234][ T8210] ? napi_skb_cache_get+0x4a5/0x780 [ 143.625254][ T8210] ? napi_skb_cache_get+0x151/0x780 [ 143.625279][ T8210] __alloc_skb+0x255/0x430 [ 143.625302][ T8210] ? __pfx___alloc_skb+0x10/0x10 [ 143.625324][ T8210] ? netlink_autobind+0xdb/0x300 [ 143.625340][ T8210] ? netlink_autobind+0x2c2/0x300 [ 143.625361][ T8210] netlink_sendmsg+0x5c6/0xb30 [ 143.625387][ T8210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.625406][ T8210] ? aa_sock_msg_perm+0xf1/0x1b0 [ 143.625422][ T8210] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.625448][ T8210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.625464][ T8210] __sock_sendmsg+0x21c/0x270 [ 143.625486][ T8210] ____sys_sendmsg+0x505/0x820 [ 143.625513][ T8210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.625544][ T8210] ? import_iovec+0x74/0xa0 [ 143.625569][ T8210] ___sys_sendmsg+0x21f/0x2a0 [ 143.625595][ T8210] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.625625][ T8210] ? rcu_read_lock_any_held+0xb3/0x120 [ 143.625672][ T8210] ? __fget_files+0x2a/0x420 [ 143.625687][ T8210] ? __fget_files+0x3a0/0x420 [ 143.625712][ T8210] __x64_sys_sendmsg+0x19b/0x260 [ 143.625739][ T8210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.625773][ T8210] ? __pfx_ksys_write+0x10/0x10 [ 143.625797][ T8210] ? do_syscall_64+0xbe/0xf80 [ 143.625822][ T8210] do_syscall_64+0xfa/0xf80 [ 143.625843][ T8210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.625859][ T8210] ? clear_bhb_loop+0x60/0xb0 [ 143.625880][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.625896][ T8210] RIP: 0033:0x7f9ed6d8f749 [ 143.625911][ T8210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.625925][ T8210] RSP: 002b:00007f9ed7cb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.625944][ T8210] RAX: ffffffffffffffda RBX: 00007f9ed6fe5fa0 RCX: 00007f9ed6d8f749 [ 143.625956][ T8210] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 143.625967][ T8210] RBP: 00007f9ed7cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 143.625977][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.625987][ T8210] R13: 00007f9ed6fe6038 R14: 00007f9ed6fe5fa0 R15: 00007ffcf64d3b08 [ 143.626018][ T8210] [ 143.968807][ T8198] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 144.657085][ T8253] FAULT_INJECTION: forcing a failure. [ 144.657085][ T8253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.676561][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 144.706507][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 144.731738][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 144.737259][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.2.689 Not tainted syzkaller #0 PREEMPT(full) [ 144.737281][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.737291][ T8253] Call Trace: [ 144.737297][ T8253] [ 144.737304][ T8253] dump_stack_lvl+0x189/0x250 [ 144.737333][ T8253] ? __pfx____ratelimit+0x10/0x10 [ 144.737353][ T8253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.737370][ T8253] ? __pfx__printk+0x10/0x10 [ 144.737391][ T8253] ? __might_fault+0xb0/0x130 [ 144.737421][ T8253] should_fail_ex+0x414/0x560 [ 144.737445][ T8253] _copy_from_iter+0x1cd/0x1630 [ 144.737469][ T8253] ? __build_skb_around+0x22d/0x3c0 [ 144.737495][ T8253] ? __pfx__copy_from_iter+0x10/0x10 [ 144.737512][ T8253] ? __alloc_skb+0x2f1/0x430 [ 144.737534][ T8253] ? __pfx___alloc_skb+0x10/0x10 [ 144.737556][ T8253] ? netlink_sendmsg+0x642/0xb30 [ 144.737571][ T8253] ? skb_put+0x11b/0x210 [ 144.737596][ T8253] netlink_sendmsg+0x6b2/0xb30 [ 144.737621][ T8253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.737641][ T8253] ? aa_sock_msg_perm+0xf1/0x1b0 [ 144.737659][ T8253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.737679][ T8253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.737700][ T8253] __sock_sendmsg+0x21c/0x270 [ 144.737722][ T8253] ____sys_sendmsg+0x505/0x820 [ 144.737749][ T8253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.737780][ T8253] ? import_iovec+0x74/0xa0 [ 144.737803][ T8253] ___sys_sendmsg+0x21f/0x2a0 [ 144.737828][ T8253] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.737857][ T8253] ? rcu_read_lock_any_held+0xb3/0x120 [ 144.737900][ T8253] ? __fget_files+0x2a/0x420 [ 144.737914][ T8253] ? __fget_files+0x3a0/0x420 [ 144.737938][ T8253] __x64_sys_sendmsg+0x19b/0x260 [ 144.737962][ T8253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.737993][ T8253] ? __pfx_ksys_write+0x10/0x10 [ 144.738016][ T8253] ? do_syscall_64+0xbe/0xf80 [ 144.738039][ T8253] do_syscall_64+0xfa/0xf80 [ 144.738058][ T8253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.738074][ T8253] ? clear_bhb_loop+0x60/0xb0 [ 144.738093][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.738108][ T8253] RIP: 0033:0x7f020218f749 [ 144.738122][ T8253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.738136][ T8253] RSP: 002b:00007f0202fa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.738152][ T8253] RAX: ffffffffffffffda RBX: 00007f02023e5fa0 RCX: 00007f020218f749 [ 144.738163][ T8253] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 144.738173][ T8253] RBP: 00007f0202fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 144.738183][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.738192][ T8253] R13: 00007f02023e6038 R14: 00007f02023e5fa0 R15: 00007fff432eef68 [ 144.738220][ T8253] [ 145.215673][ T8261] netlink: 'syz.3.691': attribute type 10 has an invalid length. [ 145.619129][ T8281] netlink: 'syz.1.695': attribute type 12 has an invalid length. [ 145.735555][ T8281] bond1: option primary_reselect: invalid value (255) [ 145.760028][ T8281] bond1 (unregistering): Released all slaves [ 145.877655][ T8295] __nla_validate_parse: 1 callbacks suppressed [ 145.877671][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 145.919331][ T8295] netlink: 'syz.2.699': attribute type 3 has an invalid length. [ 145.942761][ T8295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.699'. [ 145.985864][ T8302] syzkaller0: entered promiscuous mode [ 145.991487][ T8302] syzkaller0: entered allmulticast mode [ 146.324488][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 146.335292][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 146.348728][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 146.357867][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 194.221203][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.577266][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.657294][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.215625][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 290.223120][ T31] Not tainted syzkaller #0 [ 290.228315][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.237103][ T31] task:kworker/0:0 state:D stack:23520 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 290.249174][ T31] Workqueue: events rfkill_sync_work [ 290.254584][ T31] Call Trace: [ 290.257962][ T31] [ 290.260912][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 290.265531][ T31] ? __pfx___schedule+0x10/0x10 [ 290.270409][ T31] ? schedule+0x91/0x360 [ 290.274674][ T31] schedule+0x165/0x360 [ 290.279158][ T31] schedule_preempt_disabled+0x13/0x30 [ 290.284636][ T31] __mutex_lock+0x7e6/0x1350 [ 290.314871][ T31] ? __mutex_lock+0x5bb/0x1350 [ 290.319696][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 290.344342][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 290.350756][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 290.356640][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 290.362563][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.368936][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 290.374664][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 290.379888][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 290.385652][ T31] rfkill_set_block+0x1d2/0x440 [ 290.390516][ T31] rfkill_sync_work+0x114/0x200 [ 290.395449][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 290.401185][ T31] process_scheduled_works+0xad1/0x1770 [ 290.406802][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.412809][ T31] worker_thread+0x8a0/0xda0 [ 290.417487][ T31] kthread+0x711/0x8a0 [ 290.421591][ T31] ? __pfx_worker_thread+0x10/0x10 [ 290.426738][ T31] ? __pfx_kthread+0x10/0x10 [ 290.431330][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.436565][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 290.441763][ T31] ? __pfx_kthread+0x10/0x10 [ 290.446470][ T31] ret_from_fork+0x599/0xb30 [ 290.451072][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.456260][ T31] ? __switch_to_asm+0x39/0x70 [ 290.461023][ T31] ? __switch_to_asm+0x33/0x70 [ 290.465825][ T31] ? __pfx_kthread+0x10/0x10 [ 290.470413][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.475264][ T31] [ 290.478410][ T31] INFO: task kworker/0:6:5916 blocked for more than 143 seconds. [ 290.486155][ T31] Not tainted syzkaller #0 [ 290.491085][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.499821][ T31] task:kworker/0:6 state:D stack:22904 pid:5916 tgid:5916 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 290.511877][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 290.518616][ T31] Call Trace: [ 290.521895][ T31] [ 290.524879][ T31] __schedule+0x14bc/0x5000 [ 290.529415][ T31] ? __pfx___schedule+0x10/0x10 [ 290.534264][ T31] ? schedule+0x91/0x360 [ 290.538706][ T31] schedule+0x165/0x360 [ 290.542867][ T31] schedule_preempt_disabled+0x13/0x30 [ 290.548372][ T31] __mutex_lock+0x7e6/0x1350 [ 290.552965][ T31] ? __mutex_lock+0x5bb/0x1350 [ 290.557807][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 290.564054][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 290.569122][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 290.574923][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 290.580631][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 290.586725][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 290.592445][ T31] process_scheduled_works+0xad1/0x1770 [ 290.598050][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.604040][ T31] worker_thread+0x8a0/0xda0 [ 290.608687][ T31] kthread+0x711/0x8a0 [ 290.612756][ T31] ? __pfx_worker_thread+0x10/0x10 [ 290.618163][ T31] ? __pfx_kthread+0x10/0x10 [ 290.622760][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.628007][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 290.633211][ T31] ? __pfx_kthread+0x10/0x10 [ 290.637833][ T31] ret_from_fork+0x599/0xb30 [ 290.642432][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.647705][ T31] ? __switch_to_asm+0x39/0x70 [ 290.652496][ T31] ? __switch_to_asm+0x33/0x70 [ 290.657347][ T31] ? __pfx_kthread+0x10/0x10 [ 290.661941][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.666755][ T31] [ 290.669786][ T31] INFO: task syz.4.674:8187 blocked for more than 143 seconds. [ 290.677385][ T31] Not tainted syzkaller #0 [ 290.682311][ T31] Blocked by coredump. [ 290.686923][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.695699][ T31] task:syz.4.674 state:D stack:26248 pid:8187 tgid:8180 ppid:5841 task_flags:0x40044c flags:0x00080001 [ 290.707673][ T31] Call Trace: [ 290.710945][ T31] [ 290.713871][ T31] __schedule+0x14bc/0x5000 [ 290.718460][ T31] ? __pfx___schedule+0x10/0x10 [ 290.723321][ T31] ? schedule+0x91/0x360 [ 290.727601][ T31] schedule+0x165/0x360 [ 290.731762][ T31] schedule_timeout+0x9a/0x270 [ 290.736593][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 290.742010][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.747258][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 290.752455][ T31] ? wait_for_completion+0x267/0x5d0 [ 290.757774][ T31] wait_for_completion+0x2bf/0x5d0 [ 290.762893][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 290.768578][ T31] ? __flush_work+0xd2/0xbc0 [ 290.773177][ T31] ? __flush_work+0xd2/0xbc0 [ 290.777985][ T31] __flush_work+0x9b9/0xbc0 [ 290.782506][ T31] ? __flush_work+0xd2/0xbc0 [ 290.787156][ T31] ? __pfx___flush_work+0x10/0x10 [ 290.792185][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 290.797547][ T31] ? __pfx___cancel_work+0x10/0x10 [ 290.802663][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 290.808331][ T31] ? __cancel_work_sync+0x5c/0x110 [ 290.813442][ T31] __cancel_work_sync+0xbe/0x110 [ 290.818449][ T31] rfkill_unregister+0x92/0x220 [ 290.823302][ T31] nfc_unregister_device+0x96/0x2a0 [ 290.828541][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 290.834259][ T31] virtual_ncidev_close+0x56/0x90 [ 290.839317][ T31] __fput+0x44c/0xa70 [ 290.843306][ T31] task_work_run+0x1d4/0x260 [ 290.847925][ T31] ? __pfx_task_work_run+0x10/0x10 [ 290.853038][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 290.858702][ T31] do_exit+0x6c5/0x2310 [ 290.863015][ T31] ? do_raw_spin_lock+0x121/0x290 [ 290.868266][ T31] ? __pfx_do_exit+0x10/0x10 [ 290.872963][ T31] do_group_exit+0x21c/0x2d0 [ 290.877701][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 290.882906][ T31] get_signal+0x1285/0x1340 [ 290.887483][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 290.893041][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 290.899292][ T31] ? do_sys_openat2+0x15a/0x200 [ 290.904160][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 290.909662][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 290.914965][ T31] ? rcu_is_watching+0x15/0xb0 [ 290.919711][ T31] do_syscall_64+0x2e3/0xf80 [ 290.924279][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.930367][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.935160][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.941058][ T31] RIP: 0033:0x7f6f5298f749 [ 290.945626][ T31] RSP: 002b:00007f6f5378f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.954052][ T31] RAX: 0000000000000006 RBX: 00007f6f52be6180 RCX: 00007f6f5298f749 [ 290.962054][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 290.970057][ T31] RBP: 00007f6f52a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 290.978221][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.986233][ T31] R13: 00007f6f52be6218 R14: 00007f6f52be6180 R15: 00007ffc55b9fee8 [ 290.994213][ T31] [ 290.997299][ T31] INFO: task syz.3.691:8261 blocked for more than 144 seconds. [ 291.007321][ T31] Not tainted syzkaller #0 [ 291.012247][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.021511][ T31] task:syz.3.691 state:D stack:22016 pid:8261 tgid:8260 ppid:5837 task_flags:0x400140 flags:0x00080002 [ 291.033800][ T31] Call Trace: [ 291.037115][ T31] [ 291.040043][ T31] __schedule+0x14bc/0x5000 [ 291.044544][ T31] ? __pfx___schedule+0x10/0x10 [ 291.049429][ T31] ? schedule+0x91/0x360 [ 291.053675][ T31] schedule+0x165/0x360 [ 291.057899][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.063362][ T31] __mutex_lock+0x7e6/0x1350 [ 291.068038][ T31] ? __mutex_lock+0x5bb/0x1350 [ 291.072809][ T31] ? rfkill_unregister+0xc8/0x220 [ 291.077872][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.082902][ T31] ? __pfx_device_del+0x10/0x10 [ 291.087790][ T31] rfkill_unregister+0xc8/0x220 [ 291.092643][ T31] wiphy_unregister+0x238/0xab0 [ 291.097557][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 291.103455][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 291.108873][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 291.114076][ T31] ? ieee80211_unregister_hw+0x144/0x2c0 [ 291.119728][ T31] ? kfree+0x1c0/0x660 [ 291.123807][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 291.129341][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 291.134994][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 291.141081][ T31] hwsim_del_radio_nl+0xf46/0x1000 [ 291.146247][ T31] ? hwsim_del_radio_nl+0x53c/0x1000 [ 291.151541][ T31] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 291.157132][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 291.163467][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 291.169092][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 291.175488][ T31] ? bpf_lsm_capable+0x9/0x20 [ 291.180170][ T31] ? security_capable+0x7e/0x2e0 [ 291.185179][ T31] genl_rcv_msg+0x60e/0x790 [ 291.189688][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.194693][ T31] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 291.200287][ T31] netlink_rcv_skb+0x208/0x470 [ 291.205097][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.210132][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.215455][ T31] ? down_read+0x274/0x2e0 [ 291.219871][ T31] ? genl_rcv+0xd/0x40 [ 291.223924][ T31] genl_rcv+0x28/0x40 [ 291.227937][ T31] netlink_unicast+0x82f/0x9e0 [ 291.232762][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 291.238093][ T31] ? netlink_sendmsg+0x642/0xb30 [ 291.243042][ T31] ? skb_put+0x11b/0x210 [ 291.247336][ T31] netlink_sendmsg+0x805/0xb30 [ 291.252110][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.257443][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 291.262381][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.267728][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.273016][ T31] __sock_sendmsg+0x21c/0x270 [ 291.277725][ T31] ____sys_sendmsg+0x505/0x820 [ 291.282507][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.287873][ T31] ? import_iovec+0x74/0xa0 [ 291.292380][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 291.297093][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.302306][ T31] ? futex_wait+0x285/0x360 [ 291.306859][ T31] ? __fget_files+0x2a/0x420 [ 291.311443][ T31] ? __fget_files+0x3a0/0x420 [ 291.316149][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 291.321090][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.326604][ T31] ? fput+0xa0/0xd0 [ 291.330413][ T31] ? do_syscall_64+0xbe/0xf80 [ 291.335116][ T31] do_syscall_64+0xfa/0xf80 [ 291.339633][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.345748][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.350430][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.356334][ T31] RIP: 0033:0x7fe8d5f8f749 [ 291.360745][ T31] RSP: 002b:00007fe8d6eda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.369198][ T31] RAX: ffffffffffffffda RBX: 00007fe8d61e5fa0 RCX: 00007fe8d5f8f749 [ 291.377193][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 291.385202][ T31] RBP: 00007fe8d6013f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.393174][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.401210][ T31] R13: 00007fe8d61e6038 R14: 00007fe8d61e5fa0 R15: 00007ffe60f9b3d8 [ 291.409241][ T31] [ 291.412280][ T31] INFO: task syz.0.698:8291 blocked for more than 144 seconds. [ 291.419858][ T31] Not tainted syzkaller #0 [ 291.424835][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.435113][ T31] task:syz.0.698 state:D stack:26888 pid:8291 tgid:8290 ppid:5849 task_flags:0x400140 flags:0x00080002 [ 291.447082][ T31] Call Trace: [ 291.450351][ T31] [ 291.453271][ T31] __schedule+0x14bc/0x5000 [ 291.457892][ T31] ? __pfx___schedule+0x10/0x10 [ 291.462772][ T31] ? schedule+0x91/0x360 [ 291.467056][ T31] schedule+0x165/0x360 [ 291.471219][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.476720][ T31] __mutex_lock+0x7e6/0x1350 [ 291.481325][ T31] ? __mutex_lock+0x5bb/0x1350 [ 291.486132][ T31] ? genl_rcv_msg+0x10d/0x790 [ 291.490821][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.496428][ T31] ? stack_trace_save+0x9c/0xe0 [ 291.501308][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 291.506288][ T31] ? radix_tree_lookup+0x240/0x290 [ 291.511404][ T31] genl_rcv_msg+0x10d/0x790 [ 291.515948][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.520973][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 291.525967][ T31] netlink_rcv_skb+0x208/0x470 [ 291.530732][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.535811][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.541106][ T31] ? down_read+0x274/0x2e0 [ 291.545572][ T31] ? genl_rcv+0xd/0x40 [ 291.549648][ T31] genl_rcv+0x28/0x40 [ 291.553630][ T31] netlink_unicast+0x82f/0x9e0 [ 291.558431][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 291.563729][ T31] ? netlink_sendmsg+0x642/0xb30 [ 291.568740][ T31] ? skb_put+0x11b/0x210 [ 291.572992][ T31] netlink_sendmsg+0x805/0xb30 [ 291.577839][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.583132][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 291.588100][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.593432][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.598762][ T31] __sock_sendmsg+0x21c/0x270 [ 291.603440][ T31] __sys_sendto+0x3bd/0x520 [ 291.607988][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 291.613018][ T31] ? count_memcg_event_mm+0x21/0x260 [ 291.618368][ T31] ? exc_page_fault+0x82/0x100 [ 291.623144][ T31] __x64_sys_sendto+0xde/0x100 [ 291.627962][ T31] do_syscall_64+0xfa/0xf80 [ 291.632468][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.638552][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.643230][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.649151][ T31] RIP: 0033:0x7fbb96b915dc [ 291.653565][ T31] RSP: 002b:00007fbb97abeec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 291.662293][ T31] RAX: ffffffffffffffda RBX: 00007fbb97abefc0 RCX: 00007fbb96b915dc [ 291.670339][ T31] RDX: 0000000000000024 RSI: 00007fbb97abf010 RDI: 0000000000000004 [ 291.678345][ T31] RBP: 0000000000000000 R08: 00007fbb97abef14 R09: 000000000000000c [ 291.686373][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 291.694438][ T31] R13: 00007fbb97abef68 R14: 00007fbb97abf010 R15: 0000000000000000 [ 291.702603][ T31] [ 291.705676][ T31] INFO: task syz.0.698:8297 blocked for more than 144 seconds. [ 291.713207][ T31] Not tainted syzkaller #0 [ 291.718285][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.726982][ T31] task:syz.0.698 state:D stack:27896 pid:8297 tgid:8290 ppid:5849 task_flags:0x400040 flags:0x00080002 [ 291.738914][ T31] Call Trace: [ 291.742192][ T31] [ 291.745170][ T31] __schedule+0x14bc/0x5000 [ 291.749725][ T31] ? __pfx___schedule+0x10/0x10 [ 291.754568][ T31] ? schedule+0x91/0x360 [ 291.758833][ T31] schedule+0x165/0x360 [ 291.762993][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.768486][ T31] __mutex_lock+0x7e6/0x1350 [ 291.773081][ T31] ? __mutex_lock+0x5bb/0x1350 [ 291.777880][ T31] ? genl_rcv_msg+0x10d/0x790 [ 291.782561][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.787623][ T31] ? stack_trace_save+0x9c/0xe0 [ 291.792482][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 291.797446][ T31] ? radix_tree_lookup+0x240/0x290 [ 291.802557][ T31] genl_rcv_msg+0x10d/0x790 [ 291.807102][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.812138][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 291.817315][ T31] netlink_rcv_skb+0x208/0x470 [ 291.822201][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.827301][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.832606][ T31] ? down_read+0x274/0x2e0 [ 291.837088][ T31] ? genl_rcv+0xd/0x40 [ 291.841179][ T31] genl_rcv+0x28/0x40 [ 291.845204][ T31] netlink_unicast+0x82f/0x9e0 [ 291.850413][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 291.855724][ T31] ? netlink_sendmsg+0x642/0xb30 [ 291.860658][ T31] ? skb_put+0x11b/0x210 [ 291.864948][ T31] netlink_sendmsg+0x805/0xb30 [ 291.869717][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.875024][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 291.879963][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.885323][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.890606][ T31] __sock_sendmsg+0x21c/0x270 [ 291.895421][ T31] __sys_sendto+0x3bd/0x520 [ 291.899938][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 291.905000][ T31] ? count_memcg_event_mm+0x21/0x260 [ 291.910287][ T31] ? exc_page_fault+0x82/0x100 [ 291.915108][ T31] __x64_sys_sendto+0xde/0x100 [ 291.919876][ T31] do_syscall_64+0xfa/0xf80 [ 291.924364][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.930461][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.935196][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.941101][ T31] RIP: 0033:0x7fbb96b915dc [ 291.945557][ T31] RSP: 002b:00007fbb97a9dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 291.953977][ T31] RAX: ffffffffffffffda RBX: 00007fbb97a9dfc0 RCX: 00007fbb96b915dc [ 291.961991][ T31] RDX: 0000000000000024 RSI: 00007fbb97a9e010 RDI: 0000000000000004 [ 291.970018][ T31] RBP: 0000000000000000 R08: 00007fbb97a9df14 R09: 000000000000000c [ 291.978249][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 291.986275][ T31] R13: 00007fbb97a9df68 R14: 00007fbb97a9e010 R15: 0000000000000000 [ 291.994253][ T31] [ 291.997315][ T31] INFO: task syz.0.698:8299 blocked for more than 145 seconds. [ 292.005033][ T31] Not tainted syzkaller #0 [ 292.009963][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.018643][ T31] task:syz.0.698 state:D stack:28280 pid:8299 tgid:8290 ppid:5849 task_flags:0x400040 flags:0x00080002 [ 292.030662][ T31] Call Trace: [ 292.033928][ T31] [ 292.036876][ T31] __schedule+0x14bc/0x5000 [ 292.041399][ T31] ? __pfx___schedule+0x10/0x10 [ 292.046293][ T31] ? schedule+0x91/0x360 [ 292.050542][ T31] schedule+0x165/0x360 [ 292.054680][ T31] schedule_preempt_disabled+0x13/0x30 [ 292.060931][ T31] __mutex_lock+0x7e6/0x1350 [ 292.065602][ T31] ? __mutex_lock+0x5bb/0x1350 [ 292.070372][ T31] ? genl_rcv_msg+0x10d/0x790 [ 292.075089][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 292.080131][ T31] ? radix_tree_lookup+0x240/0x290 [ 292.085353][ T31] genl_rcv_msg+0x10d/0x790 [ 292.089875][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.094937][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 292.099885][ T31] netlink_rcv_skb+0x208/0x470 [ 292.104632][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.109686][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.115029][ T31] ? down_read+0x274/0x2e0 [ 292.119457][ T31] ? genl_rcv+0xd/0x40 [ 292.123512][ T31] genl_rcv+0x28/0x40 [ 292.127530][ T31] netlink_unicast+0x82f/0x9e0 [ 292.132310][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 292.137737][ T31] ? netlink_sendmsg+0x642/0xb30 [ 292.142682][ T31] ? skb_put+0x11b/0x210 [ 292.147061][ T31] netlink_sendmsg+0x805/0xb30 [ 292.151861][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.157196][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.162144][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.167471][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.172759][ T31] __sock_sendmsg+0x21c/0x270 [ 292.177471][ T31] __sys_sendto+0x3bd/0x520 [ 292.181983][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 292.187069][ T31] ? fd_install+0x95/0x3d0 [ 292.191491][ T31] ? fd_install+0x307/0x3d0 [ 292.196058][ T31] __x64_sys_sendto+0xde/0x100 [ 292.200865][ T31] do_syscall_64+0xfa/0xf80 [ 292.205421][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.211495][ T31] ? clear_bhb_loop+0x60/0xb0 [ 292.216587][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.222491][ T31] RIP: 0033:0x7fbb96b915dc [ 292.226945][ T31] RSP: 002b:00007fbb97a7cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 292.235380][ T31] RAX: ffffffffffffffda RBX: 00007fbb97a7cfc0 RCX: 00007fbb96b915dc [ 292.243336][ T31] RDX: 0000000000000020 RSI: 00007fbb97a7d010 RDI: 0000000000000006 [ 292.251339][ T31] RBP: 0000000000000000 R08: 00007fbb97a7cf14 R09: 000000000000000c [ 292.259363][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 292.267383][ T31] R13: 00007fbb97a7cf68 R14: 00007fbb97a7d010 R15: 0000000000000000 [ 292.277045][ T31] [ 292.280069][ T31] INFO: task syz.2.699:8294 blocked for more than 145 seconds. [ 292.287664][ T31] Not tainted syzkaller #0 [ 292.292615][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.301318][ T31] task:syz.2.699 state:D stack:27976 pid:8294 tgid:8293 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 292.313292][ T31] Call Trace: [ 292.316643][ T31] [ 292.319580][ T31] __schedule+0x14bc/0x5000 [ 292.324123][ T31] ? __pfx___schedule+0x10/0x10 [ 292.329045][ T31] ? schedule+0x91/0x360 [ 292.333297][ T31] schedule+0x165/0x360 [ 292.337494][ T31] schedule_preempt_disabled+0x13/0x30 [ 292.342983][ T31] __mutex_lock+0x7e6/0x1350 [ 292.347614][ T31] ? __mutex_lock+0x5bb/0x1350 [ 292.352381][ T31] ? genl_rcv_msg+0x10d/0x790 [ 292.357080][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 292.362107][ T31] ? stack_trace_save+0x9c/0xe0 [ 292.367017][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 292.371955][ T31] ? radix_tree_lookup+0x240/0x290 [ 292.377098][ T31] genl_rcv_msg+0x10d/0x790 [ 292.381610][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.386669][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 292.391615][ T31] netlink_rcv_skb+0x208/0x470 [ 292.396403][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.401427][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.406771][ T31] ? down_read+0x274/0x2e0 [ 292.411189][ T31] ? genl_rcv+0xd/0x40 [ 292.415304][ T31] genl_rcv+0x28/0x40 [ 292.419290][ T31] netlink_unicast+0x82f/0x9e0 [ 292.424045][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 292.429369][ T31] ? netlink_sendmsg+0x642/0xb30 [ 292.434299][ T31] ? skb_put+0x11b/0x210 [ 292.438577][ T31] netlink_sendmsg+0x805/0xb30 [ 292.443357][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.448715][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.453659][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.458993][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.464284][ T31] __sock_sendmsg+0x21c/0x270 [ 292.469025][ T31] ____sys_sendmsg+0x505/0x820 [ 292.473799][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.479108][ T31] ? import_iovec+0x74/0xa0 [ 292.483612][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 292.488341][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.493546][ T31] ? futex_wait+0x285/0x360 [ 292.498127][ T31] ? __fget_files+0x2a/0x420 [ 292.502716][ T31] ? __fget_files+0x3a0/0x420 [ 292.507442][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 292.512389][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.517879][ T31] ? do_syscall_64+0xbe/0xf80 [ 292.522563][ T31] do_syscall_64+0xfa/0xf80 [ 292.527103][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.533170][ T31] ? clear_bhb_loop+0x60/0xb0 [ 292.537892][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.543789][ T31] RIP: 0033:0x7f020218f749 [ 292.548259][ T31] RSP: 002b:00007f0202fa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.556707][ T31] RAX: ffffffffffffffda RBX: 00007f02023e5fa0 RCX: 00007f020218f749 [ 292.564682][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 292.572711][ T31] RBP: 00007f0202213f91 R08: 0000000000000000 R09: 0000000000000000 [ 292.580704][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.588710][ T31] R13: 00007f02023e6038 R14: 00007f02023e5fa0 R15: 00007fff432eef68 [ 292.596778][ T31] [ 292.599804][ T31] INFO: task syz.1.703:8325 blocked for more than 145 seconds. [ 292.607450][ T31] Not tainted syzkaller #0 [ 292.612375][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.621056][ T31] task:syz.1.703 state:D stack:24168 pid:8325 tgid:8324 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 292.633015][ T31] Call Trace: [ 292.636333][ T31] [ 292.639262][ T31] __schedule+0x14bc/0x5000 [ 292.643760][ T31] ? __pfx___schedule+0x10/0x10 [ 292.648656][ T31] ? schedule+0x91/0x360 [ 292.652902][ T31] schedule+0x165/0x360 [ 292.657076][ T31] schedule_preempt_disabled+0x13/0x30 [ 292.662534][ T31] __mutex_lock+0x7e6/0x1350 [ 292.667181][ T31] ? __mutex_lock+0x5bb/0x1350 [ 292.671950][ T31] ? genl_rcv_msg+0x10d/0x790 [ 292.676684][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 292.681704][ T31] ? stack_trace_save+0x9c/0xe0 [ 292.686619][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 292.691555][ T31] ? radix_tree_lookup+0x240/0x290 [ 292.696836][ T31] genl_rcv_msg+0x10d/0x790 [ 292.701350][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.706436][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 292.711381][ T31] netlink_rcv_skb+0x208/0x470 [ 292.716203][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.721239][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.726605][ T31] ? down_read+0x274/0x2e0 [ 292.731035][ T31] ? genl_rcv+0xd/0x40 [ 292.735147][ T31] genl_rcv+0x28/0x40 [ 292.739129][ T31] netlink_unicast+0x82f/0x9e0 [ 292.743898][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 292.749231][ T31] ? netlink_sendmsg+0x642/0xb30 [ 292.754167][ T31] ? skb_put+0x11b/0x210 [ 292.758444][ T31] netlink_sendmsg+0x805/0xb30 [ 292.763213][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.768541][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.773481][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.778874][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.784162][ T31] __sock_sendmsg+0x21c/0x270 [ 292.788928][ T31] __sys_sendto+0x3bd/0x520 [ 292.793436][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 292.798490][ T31] ? count_memcg_event_mm+0x21/0x260 [ 292.803788][ T31] ? exc_page_fault+0x82/0x100 [ 292.808727][ T31] __x64_sys_sendto+0xde/0x100 [ 292.813499][ T31] do_syscall_64+0xfa/0xf80 [ 292.818034][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.824095][ T31] ? clear_bhb_loop+0x60/0xb0 [ 292.828814][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.834702][ T31] RIP: 0033:0x7f9ed6d915dc [ 292.839145][ T31] RSP: 002b:00007f9ed7cb1e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 292.847607][ T31] RAX: ffffffffffffffda RBX: 00007f9ed7cb1fa0 RCX: 00007f9ed6d915dc [ 292.855726][ T31] RDX: 0000000000000028 RSI: 00007f9ed7cb1ff0 RDI: 0000000000000008 [ 292.863708][ T31] RBP: 0000000000000000 R08: 00007f9ed7cb1ee4 R09: 000000000000000c [ 292.871749][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 292.879769][ T31] R13: 00007f9ed7cb1f38 R14: 00007f9ed7cb1ff0 R15: 0000000000000000 [ 292.887821][ T31] [ 292.890847][ T31] INFO: task syz.1.703:8330 blocked for more than 146 seconds. [ 292.898434][ T31] Not tainted syzkaller #0 [ 292.903360][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.912098][ T31] task:syz.1.703 state:D stack:28728 pid:8330 tgid:8324 ppid:5833 task_flags:0x400040 flags:0x00080002 [ 292.924053][ T31] Call Trace: [ 292.927410][ T31] [ 292.930353][ T31] __schedule+0x14bc/0x5000 [ 292.934925][ T31] ? __pfx___schedule+0x10/0x10 [ 292.939794][ T31] ? schedule+0x91/0x360 [ 292.944041][ T31] schedule+0x165/0x360 [ 292.948268][ T31] schedule_preempt_disabled+0x13/0x30 [ 292.953728][ T31] __mutex_lock+0x7e6/0x1350 [ 292.958356][ T31] ? __mutex_lock+0x5bb/0x1350 [ 292.963122][ T31] ? genl_rcv_msg+0x10d/0x790 [ 292.967850][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 292.972871][ T31] ? stack_trace_save+0x9c/0xe0 [ 292.977758][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 292.982694][ T31] ? radix_tree_lookup+0x240/0x290 [ 292.987860][ T31] genl_rcv_msg+0x10d/0x790 [ 292.992367][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.997426][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 293.002389][ T31] netlink_rcv_skb+0x208/0x470 [ 293.007197][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.012222][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.017593][ T31] ? down_read+0x274/0x2e0 [ 293.022023][ T31] ? genl_rcv+0xd/0x40 [ 293.026162][ T31] genl_rcv+0x28/0x40 [ 293.030146][ T31] netlink_unicast+0x82f/0x9e0 [ 293.034954][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 293.040255][ T31] ? netlink_sendmsg+0x642/0xb30 [ 293.045262][ T31] ? skb_put+0x11b/0x210 [ 293.049507][ T31] netlink_sendmsg+0x805/0xb30 [ 293.054260][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.059689][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 293.064631][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.069970][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.075280][ T31] __sock_sendmsg+0x21c/0x270 [ 293.079943][ T31] __sys_sendto+0x3bd/0x520 [ 293.084430][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 293.089529][ T31] ? fd_install+0x95/0x3d0 [ 293.093945][ T31] ? fd_install+0x307/0x3d0 [ 293.099236][ T31] __x64_sys_sendto+0xde/0x100 [ 293.104020][ T31] do_syscall_64+0xfa/0xf80 [ 293.108654][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.114728][ T31] ? clear_bhb_loop+0x60/0xb0 [ 293.119473][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.125429][ T31] RIP: 0033:0x7f9ed6d915dc [ 293.129838][ T31] RSP: 002b:00007f9ed7c90e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 293.138281][ T31] RAX: ffffffffffffffda RBX: 00007f9ed7c90fa0 RCX: 00007f9ed6d915dc [ 293.146286][ T31] RDX: 0000000000000028 RSI: 00007f9ed7c90ff0 RDI: 0000000000000009 [ 293.154237][ T31] RBP: 0000000000000000 R08: 00007f9ed7c90ee4 R09: 000000000000000c [ 293.162249][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 293.170276][ T31] R13: 00007f9ed7c90f38 R14: 00007f9ed7c90ff0 R15: 0000000000000000 [ 293.178324][ T31] [ 293.181342][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 293.190435][ T31] [ 293.190435][ T31] Showing all locks held in the system: [ 293.198234][ T31] 4 locks held by kworker/0:0/9: [ 293.203163][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 293.214181][ T31] #1: ffffc900000e7b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 293.226596][ T31] #2: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 293.236658][ T31] #3: ffff888027a37100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 293.246384][ T31] 1 lock held by khungtaskd/31: [ 293.251219][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 293.261160][ T31] 2 locks held by kworker/0:2/185: [ 293.266790][ T31] 2 locks held by getty/5599: [ 293.271465][ T31] #0: ffff88802f7510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 293.281247][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 293.291402][ T31] 1 lock held by syz-executor/5841: [ 293.296605][ T31] #0: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 293.306756][ T31] 3 locks held by kworker/0:6/5916: [ 293.311930][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 293.322940][ T31] #1: ffffc9000457fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 293.336501][ T31] #2: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 293.347892][ T31] 1 lock held by syz.4.674/8187: [ 293.352825][ T31] #0: ffff888027a37100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 293.362822][ T31] 3 locks held by syz.3.691/8261: [ 293.367864][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 293.376065][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 293.385060][ T31] #2: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 293.395203][ T31] 2 locks held by syz.0.698/8291: [ 293.400220][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 293.408447][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 293.417539][ T31] 2 locks held by syz.0.698/8297: [ 293.422555][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 293.430771][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 293.439793][ T31] 2 locks held by syz.0.698/8299: [ 293.444849][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 293.453041][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 293.462057][ T31] 2 locks held by syz.2.699/8294: [ 293.467132][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 293.475389][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 293.484371][ T31] 2 locks held by syz.1.703/8325: [ 293.489444][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 293.497769][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 293.506771][ T31] 2 locks held by syz.1.703/8330: [ 293.511787][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 293.520022][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 293.529033][ T31] 2 locks held by syz-executor/8381: [ 293.534292][ T31] #0: ffff88807aa3f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.544330][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.554303][ T31] 2 locks held by syz-executor/8384: [ 293.559624][ T31] #0: ffff888028c36918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.569677][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.579680][ T31] 2 locks held by syz-executor/8387: [ 293.584984][ T31] #0: ffff888056c10118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.595036][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.605006][ T31] 2 locks held by syz-executor/8388: [ 293.610284][ T31] #0: ffff8880767b0118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.620406][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.630378][ T31] 2 locks held by syz-executor/8390: [ 293.635695][ T31] #0: ffff8880334e3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.645778][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.655826][ T31] 2 locks held by syz-executor/8396: [ 293.661101][ T31] #0: ffff88807abd3118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.671132][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.681109][ T31] 2 locks held by syz-executor/8401: [ 293.686411][ T31] #0: ffff888031566918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.696474][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.706416][ T31] 2 locks held by syz-executor/8403: [ 293.711689][ T31] #0: ffff888056fdc918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.721731][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.731838][ T31] 2 locks held by syz-executor/8404: [ 293.737349][ T31] #0: ffff888028c30918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.747453][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.757466][ T31] 2 locks held by syz-executor/8406: [ 293.762749][ T31] #0: ffff88807d89a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.772844][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.782887][ T31] 2 locks held by syz-executor/8412: [ 293.788363][ T31] #0: ffff88807ea87118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.798439][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.808492][ T31] 2 locks held by syz-executor/8416: [ 293.813776][ T31] #0: ffff888055d21918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.823927][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.833953][ T31] 2 locks held by syz-executor/8417: [ 293.839283][ T31] #0: ffff888055d24918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.849340][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.859306][ T31] 2 locks held by syz-executor/8419: [ 293.864581][ T31] #0: ffff88807a643118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.874627][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.884613][ T31] 2 locks held by syz-executor/8421: [ 293.889940][ T31] #0: ffff888056e98118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 293.900076][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 293.910072][ T31] [ 293.912400][ T31] ============================================= [ 293.912400][ T31] [ 293.920884][ T31] NMI backtrace for cpu 1 [ 293.920906][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 293.920922][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.920931][ T31] Call Trace: [ 293.920938][ T31] [ 293.920944][ T31] dump_stack_lvl+0x189/0x250 [ 293.920969][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.920985][ T31] ? __pfx__printk+0x10/0x10 [ 293.921010][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 293.921026][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 293.921040][ T31] ? __pfx__printk+0x10/0x10 [ 293.921059][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 293.921078][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 293.921093][ T31] watchdog+0xf3c/0xf80 [ 293.921113][ T31] ? watchdog+0x1e2/0xf80 [ 293.921131][ T31] kthread+0x711/0x8a0 [ 293.921149][ T31] ? __pfx_watchdog+0x10/0x10 [ 293.921163][ T31] ? __pfx_kthread+0x10/0x10 [ 293.921178][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.921192][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 293.921206][ T31] ? __pfx_kthread+0x10/0x10 [ 293.921221][ T31] ret_from_fork+0x599/0xb30 [ 293.921241][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 293.921265][ T31] ? __switch_to_asm+0x39/0x70 [ 293.921278][ T31] ? __switch_to_asm+0x33/0x70 [ 293.921291][ T31] ? __pfx_kthread+0x10/0x10 [ 293.921306][ T31] ret_from_fork_asm+0x1a/0x30 [ 293.921331][ T31] [ 293.921339][ T31] Sending NMI from CPU 1 to CPUs 0: [ 294.066410][ C0] NMI backtrace for cpu 0 [ 294.066426][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 294.066444][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.066454][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 294.066478][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 294.066491][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 294.066506][ C0] RAX: b17d1796d7ad1700 RBX: ffffffff8197438a RCX: b17d1796d7ad1700 [ 294.066518][ C0] RDX: 0000000000000001 RSI: ffffffff8d76bd90 RDI: ffffffff8bbfc660 [ 294.066529][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 294.066541][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 294.066552][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 294.066562][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 294.066575][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.066586][ C0] CR2: 00005633e8859000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 294.066600][ C0] Call Trace: [ 294.066606][ C0] [ 294.066612][ C0] default_idle+0x13/0x20 [ 294.066634][ C0] default_idle_call+0x73/0xb0 [ 294.066656][ C0] do_idle+0x1ea/0x520 [ 294.066671][ C0] ? irqentry_exit+0x5ba/0x660 [ 294.066693][ C0] ? __pfx_do_idle+0x10/0x10 [ 294.066716][ C0] cpu_startup_entry+0x44/0x60 [ 294.066732][ C0] rest_init+0x2de/0x300 [ 294.066747][ C0] start_kernel+0x3ae/0x410 [ 294.066763][ C0] x86_64_start_reservations+0x24/0x30 [ 294.066782][ C0] x86_64_start_kernel+0x143/0x1c0 [ 294.066801][ C0] common_startup_64+0x13e/0x147 [ 294.066828][ C0]