last executing test programs: 19.96460041s ago: executing program 2 (id=335): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) (async) r1 = socket$netlink(0x10, 0x3, 0x14) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000005c0)={{r2, 0x401, 0x8, 0x8, 0x8000000000000000, 0x1, 0x3559807, 0x8, 0x4, 0x4, 0x9, 0x8000, 0x4, 0x0, 0x8}}) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xff}]}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0xd, 0x1, {{0x40000, 0x4, 0xffffffffffffffff, 0xf}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8040) epoll_create(0x0) (async) close(r0) 18.828098064s ago: executing program 2 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xffff3b31}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) 18.241435676s ago: executing program 3 (id=343): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25GETINFO(r0, 0x89ed, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r2}, 0x38) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) 18.124290443s ago: executing program 3 (id=344): getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000a80)={0xfd92, 0x10a, 0x5, 0xedc2, 0x0}, &(0x7f0000000ac0)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000b00)={r0, @in6={{0xa, 0x4e22, 0x3, @mcast1, 0x3}}, 0x81, 0x8, 0x6, 0x7, 0x5}, &(0x7f0000000bc0)=0x98) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[], 0x48) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x82011, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) unshare(0x6020480) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000280)) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44014) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000340)=""/73, 0x49}, {&(0x7f0000000740)=""/219, 0xdb}], 0x2) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r10 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4381fce3e68a89471b686115c9db3a4d0971eb033654eb6242c93c5b804c7cd1835f1e0eef3c0825bf6fe56ba75583b158530c58557306b0d781b8978db201b6b5b64d6525ef713098f262704b2eaaa01d0070cf513be8d8ffdb5f42077736cfaaf9921ba34b00f312c064f8d0a63f646391ea6b6626beb9076dc1c6d19052eacc329d89c90b18a69608773a04ceb687f4bad9259ec5232b", @ANYRES16=r9, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r10, @ANYBLOB="393dca6ce6b428db056bc06726c728a273d0b9ab6be67420c65f4f2a9133df23614f019d8ac109481ac4f4c759f7123309ea1f29a2c9e20d6f7e4df8a50531ba535b94e3fe2a4acbf8074ddd465f117e4f194b3d0b88b325d2478e9b2527b6a30b75170f5236318c356fa657aaa5d3483b9475efdfb35d7223aefef8d6b241b348ddc04242048c7ab8c7a360cdd121119a75b5977b4192779a6e99a1da31f51754534cc407eaa72b6889a452936f622b513707dd3de6de06321ab1e4bc9c5801d158e26ceb97b9e46c4f"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="0300000000002a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20) openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000640)={r3, 0x1, 0x5c2c, 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000010000000095001600000000de0100a2ed101f0a0178f1b91af425d237ed1e87c9"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r6}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000300)={0x9, 0x20, '\x00', 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=r12, @ANYRES16=r5, @ANYRES16=r1], 0x80}}, 0x8000) 17.753429719s ago: executing program 2 (id=347): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000900)='\b\x00', 0x2}, {&(0x7f0000000940)="1edd90fbc857", 0x6}], 0x2, &(0x7f0000000000)=ANY=[], 0x40}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb0}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000051e6850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000a3afb00000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r4, 0x0, 0x100000}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x100}, 0x0) close(r6) 17.668511452s ago: executing program 2 (id=349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket(0x8000000010, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r3, 0x29, 0x12, 0x0, &(0x7f0000000040)=0xfffffffffffffe44) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0023000000000000000000000000000000000000ff7a5a0a951760032d3b691330579bb1031ddc58fc140882d12b78d7decdc4f17450fe885a4fd3d45b89e191d23372b1e46b9b80bcd53e59c773313f6abe576e10154589181468e1267ada3f5fa407e44b9fc8876b965d1779d0037623b225b45b70169624192b09deda1fe5b0dd43586975dd0b96fc4993997ea8c40a827222d08e482f1c50d51d7e79bb0a8dabca1139daf87a10bcb5c99f28f3a38990e5d01dc952d15dbd0bf749f384e99fd22b", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES8=r3, @ANYRES32, @ANYRESHEX=r2], 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) syz_emit_ethernet(0x20f, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r8}, 0x10) ppoll(&(0x7f00000001c0)=[{r5}], 0x10, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000000300), 0x0, 0xf00) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) 17.391705596s ago: executing program 4 (id=353): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="020a00000200"], 0x10}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0xfffffffffffffea6}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66"}, {&(0x7f0000002c40)="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"}], 0x1, 0xa) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "412ce191d7"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "632bdf03303f32891dcfa0424b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1947624e39"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ed13e2981a835f00bea3e5982f"}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x40001) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r5) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="24002d00040001"], 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000080), 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17.288611585s ago: executing program 4 (id=354): syz_init_net_socket$ax25(0x3, 0x2, 0xca) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0xc1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000140)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x4020000, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0xd257]}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r7, 0x180000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17.165492348s ago: executing program 4 (id=355): socket$netlink(0x10, 0x3, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYBLOB="dd91a3dba305ff48f2fd1924b580b29c1f229fe21076110dee03609097da066f16cb78b9ce27fb0fd39e28a68c516c9c29db6b648ecba04c62bb5a875167c55757f8cd7ad669c255cbe281139dba98637502aeb89f20562ef3ff568465666b697171dd26ce10e71475ae0d8dabb304386ecf6f126c067af155cea4bd09", @ANYRES16, @ANYRESHEX=r4, @ANYBLOB="3f112d1238158296c243a3b16424ad662e13f9e8c648bf778ec5dd1d59b0c9c1a1dee7c10227317485c93d6ec3027be28c6da685af8353e90b6392a588fe5523aa7715abfad9a6191d94ddd91461bac9c28b3983e115cc8a29e317c6c9", @ANYRESOCT=r4], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000000000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x6c00}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000173362c000800"/18, @ANYRES32=r12, @ANYBLOB="0500530001000000080005000c00000005005300000000000a00180003030303030300000a00180003030303030300000800050002000000"], 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r13 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r13, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket(0x10, 0x803, 0x0) r14 = socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r14], 0xc4}}, 0x0) 17.164853074s ago: executing program 3 (id=356): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x6) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xb) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 17.076285873s ago: executing program 1 (id=357): sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040) getsockname$ax25(r0, &(0x7f0000000240)={{0x3, @null}, [@rose, @rose, @rose, @remote, @null, @rose, @remote, @null]}, &(0x7f00000002c0)=0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x14, 0x1, ')]\xc3,}(+-^f!(/,{\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\\-&:\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x18, 0x40, 0xc, 0x3, 0x8100, r0, 0x6, '\x00', 0x0, r0, 0x2}, 0x50) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040081}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000700)={@val={0x0, 0x1c}, @val={0x1, 0x2, 0x4, 0x8, 0x9, 0x3}, @ipv4=@generic={{0x18, 0x4, 0x1, 0x36, 0x118, 0x64, 0x0, 0x4, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x5d, [@local, @multicast2, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x17, 0xac, [@private=0xa010101, @local, @empty, @local, @broadcast]}, @ra={0x94, 0x4}, @generic={0x89, 0xe, "a7c6498a2d36879ff59d8e44"}, @noop]}}, "32d3c124fbe0327e5a80691e3446be3fda5888855f677c8c05049a73601dd2a6a41d771df4a9f3980a3e091735311e9ef1bbf4a2830f01b961198e184fd8a5bf10bdb7b70c08df0901b6c1a6e8680be80f4876ca047c1468e831be5ba57ca2c4b9c6e633c8643d11c11b3d696a3f02eb755042799c4284233adaefc418df4800da1902609d7c708e26b8497a78ff47fff2c948420ea16b56988f6eb4a50b73b7925afa05cfbd3999a978ebc7d595bda5dba8f605c212c716"}}, 0x126) syz_emit_ethernet(0x374, &(0x7f0000000840)={@empty, @empty, @val={@void, {0x8100, 0x7, 0x1}}, {@ipv4={0x800, @gre={{0x32, 0x4, 0x2, 0x3, 0x362, 0x65, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0x4c, 0xd, 0x1, 0x0, [{@loopback, 0x7}, {@broadcast, 0x1}, {@broadcast, 0x200}, {@private=0x339d, 0x47b}, {@private=0xa010102, 0x5}, {@remote, 0x2}, {@broadcast, 0x4}, {@multicast1, 0x80}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0xc7, 0x1, 0x1, [{@loopback, 0xffffffff}, {@broadcast, 0xa}, {@remote, 0x7fff}, {@private=0xa010100, 0x1}, {@broadcast, 0x9}]}, @timestamp_addr={0x44, 0x2c, 0xc3, 0x1, 0x9, [{@broadcast, 0x7}, {@remote, 0x3}, {@multicast2}, {@local, 0x10}, {@rand_addr=0x64010101, 0x7}]}, @ssrr={0x89, 0xf, 0xfb, [@rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x97, 0x1, [], "dbc96223e3efb03ceb7a07496249e95b01c55d53e5736935cd39f9995574a3e0118d4be6900abaab13ffddc031804d18fa9a315e9e3c05ee89c5b534d8d2bcc06ac7b58ce7ef0f352eb1aed2cc11024e107be30dac999a28d8c0657e89b4250782f8a5219e5ab483110dba02b76409875a6c9ec351e0dd3578ddac5befb103a2d5b08d12b89465384643dc989393142b1fd248f76e37df"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xf7], "168dc119cbad50af716260a474d9075eab307604edc4c036d8eda3717f11c2f9224ff1043b13b5eb5a3bb24323a790c77d6894bfcc8dafa2776314a9b7c9e9dbd49b3b20f4ac3b00f5eaad25e2d74403a1b108b3dc7144ff17d8740dec3efe63935eb15f20c9bf97a741ae8dcf602be96c11428985b54dc0e5a760fe243bab5a1f6fe036e308cb7bec7c7c26f48e7b8be5b90c073d7f3cc5b81e2fbb51fc0985f0a44dc706e4c824754cc7ff9c07efba47c3504c7dd6219a012760b6aca7d3c7bcfe27"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x9, 0x16], "49427e89367a9f381a504a90a12d19d3c608ead1c61542c81f07450dcceb3e3b06157f835a3a8f855ed63190c1fa6d92d31f505a432db541c25073e26aae1b7088f43685e9850b929df95534c9963928c14a5e2992853c4f9cb9411099989261961c388baebb3a2b7c2dc31ed1b4855b00615aa6d35c1d4a1e4410c519d429fd09ba4c63fdd9241a740eca23e4ea5896d99fbce181ada7e132e2bdeecf644d96d05e0e2a503713ef9bc147c5cd1d401c8d7f1ab4741a70f4fed268c178ee8d22c7b9e19b0f"}, {0x8, 0x88be, 0x1, {{0x2, 0x1, 0x1a, 0x2, 0x1, 0x0, 0x0, 0x3}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x80, 0x1, 0x1, 0x1, 0x1, 0x8}, 0x2, {0x51c, 0x819, 0x3, 0x6, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "8d695fe969822030823d3312a32e6541917807bbb87f00578a614164e207d4eeb286345e759f26aeb1091736bcc2bef74b"}}}}}}, &(0x7f0000000bc0)={0x1, 0x3, [0xfa6, 0x80c, 0x19e, 0xb60]}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$xdp(0x2c, 0x3, 0x0) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r0) getsockname$packet(r0, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000cc0)=0x14) getpeername$packet(r0, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d40)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x6, 0x1ff, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x700, 0x8000, 0x6, 0x775e7664}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000f40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xb4, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x814}, 0x40010) connect$inet(r0, &(0x7f0000000f80)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$cgroup_devices(r0, &(0x7f0000000fc0)={'b', ' *:* ', 'rw\x00'}, 0x9) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001000)={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8, 0xb, 0x7, 0x0, 0x5, 0x2410044, r6}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001080), &(0x7f00000010c0)=0x4) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r9, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbab}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x30}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040810}, 0x20000800) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ppoll(&(0x7f0000001280)=[{r10, 0x8000}, {r11, 0x7502}, {r4, 0x2038}, {r4, 0x4000}, {0xffffffffffffffff, 0x4}, {r3, 0x9}, {r4, 0x100}], 0x7, &(0x7f00000012c0), &(0x7f0000001300)={[0x5]}, 0x8) 17.001751583s ago: executing program 3 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x400c1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001800310800000000000000001d01000005000d0000000000"], 0x1c}}, 0x800) socket$packet(0x11, 0x3, 0x300) unshare(0x20000400) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x11, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010001fff0000000080000000000000008706d9012dd6ae86aeca9d7d06c96b83fcd26bef27cce192e35bc29b60ccbdf1d2ca93b2ff6ca87afa6b843c745db35d553a", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r10, @ANYBLOB], 0x50}}, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01"], 0x3c}}, 0x20000040) r13 = socket$alg(0x26, 0x5, 0x0) unshare(0x600) bind$alg(r13, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x700, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) 16.889457027s ago: executing program 4 (id=359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000190001002dbd7000fcdbdf250aec1300934207dec6cb4b4408001e000a0000000c0009"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x44000) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="7e010000000000b7"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32, @ANYBLOB="04001900080015"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/104, 0x68}, {&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, &(0x7f0000000280)=""/226, 0xe2}, 0x0) 16.847626669s ago: executing program 3 (id=360): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000640)={0x28, r3, 0x109, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700200003f0007010000000000000000017c00000400fe805802018051024e80e100d08072f34e19826432337c2a07d469337eafae724b848795c7eb365fe42ce4889a4698ac387d9d26babbe8a62804"], 0x270}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80801584}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xc}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200040c0}, 0x80) 16.805144978s ago: executing program 4 (id=361): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/229, 0xe5, 0x12140, &(0x7f0000000200)={0xa, 0x4e24, 0x3, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)={0x3b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xd}, @generic={0x3, 0x3, "80f7e3"}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8011, 0x8, 0x2, 0x6, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x67, 0x0, 0xc6, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x9, [{@remote, 0xff}]}]}}}}}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@mcast1, r1}, 0x14) 16.653613591s ago: executing program 2 (id=362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="ea614454", 0x4}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async, rerun: 64) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x17c}}, 0x0) 16.653067918s ago: executing program 1 (id=363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x800000000006}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r1, 0x5, 0x8001, 0x9}) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=r9, @ANYRESHEX=r9, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES16=r2], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.628663286s ago: executing program 0 (id=364): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000054}, 0x806c050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000054}, 0x806c050) (async) 16.530632558s ago: executing program 3 (id=365): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x180000) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000"], 0x38}, 0x0) recvmsg(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x160) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46900204}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000400", @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf251300000008000100", @ANYRES32=r3, @ANYBLOB="240013802000008004000100080001006e666300080001006e666300080001006e666300"], 0x40}}, 0x800) close(0x3) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 16.429397266s ago: executing program 0 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000fcffffff950000008614b5d9"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x4}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000004c0)=@framed={{}, [@printk={@lu}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) socket(0x40000000015, 0x5, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e22, 0x3, 'ovf\x00', 0x0, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x1, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac"], 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40500000000007910be0000000000150800000000000095000000800007005f8669e52adfd67711553835a7a3415665790ea671ebef7fbbe0a9f0011f7374f28abc39b843b93a08491d41c94c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYRESOCT=r0], 0x34}}, 0x8040) 16.401493031s ago: executing program 1 (id=367): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000001c0)=@nfc_llcp={0x27, r1, 0x0, 0x1, 0x2, 0xd7, "cacb804ce19175ba2b7a35083a5fbdd6a0a68b876fef787d1e23fa19739bf7db299de5e03761b1309d37cb60b71810dfecdf2c4bce89f2560582a4b5483f86", 0x29}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="36c0e28112eb536786475cd8c46d8e7d54924b1e65e5945c9c171a0cfccd6e3397cc685ebbecbe2d9d46901deba92646aad3aea76f77365c795a32063f221fab6fb89e63a55fbdfca8da8f3a2a623077949297413d5353a073dc96c0b5516103", 0x60}, {&(0x7f00000002c0)="bce7d26fa1577b02f26a23c7958c6c58e292d992b74904bc34a2ef4a0e0bf9ee10cdaccb8a346ce7d9796aa5a20bd5011dc1cac392c21bbfafee667f456428bfb943b39edb10b3bdb604a61ba308ebbb7a09d9bda9ccc1420a316aa916", 0x5d}, {&(0x7f0000000340)="bf164c9ebaa1df28236bd9d8cfe594a5358c566cdc7fbd108fbfacb53c3aaa777328f696f459b28b735f31b8cbbb2e42b47c04aace3e6a75ad78f36832fd42850c294dbc2cf6a924f47cfde4334afb4956d0a5a54cc5f2c81a26d42ce14ed6f562b748cef50e1c11ce2808795ee8ed3380fab327483488a0440039f67def276835e82f86b827ba6c831f6319904a43d8470fb5af7e9f66a30dd6f714e44c85d1a878805a8e6408c62729a62cebc0f306d5fbecbc2c14bf36eff07eb1adaf79b1c54500a273dbf02b17a5bd6dd75a17275dae40fba3bd610bf114f40dae1eb91603c6388da2b6170a", 0xe8}, {&(0x7f0000000500)="d50f6d275228060707f1f7aa1c619f0d6ead1b165a5bdc0570eba9c355741eef4700227d761bd2162bf24114c32fd58e8eec71237782f8d959cbd6eb944e0529c39100c68eed3bf456b689ce3fb9f8062b6fd4e37f02bb7f60", 0x59}, {&(0x7f0000000580)="3926c5d98190", 0x6}, {&(0x7f00000005c0)="50d7a9", 0x3}, {&(0x7f0000000600)="6b644f6fb1051e9208d2eafc5c2c153c3e6fe63e21ed9f7c46b11f009d290556bf4daf05f3693176f9cd1f5f26fff6d126dea6c6a4ee3fbc76661d3bd89d481afdb9662404c450512cc5ea32621d35c5fc3e687b6475687798a3378d0cddf6a57e15c2f497dac4b72952c1c1ba195973a5dd229917c45c805e20213c7c5c1ccd0ef66b3ac568dc90f97bccbc6b3ca37d4d9b3553446ca140b6fb54561ad8007e4cd7c073ee5da8dbcae339fa76a95f6dfa9d878466a3fb1a73f8ed356ebc", 0xbe}, {&(0x7f00000006c0)="f7f86369fe53f9108d43c79da15f5e29ed3d9a7b3199c17241384dbb6b1ce7959a82b5856e27b9bf80d1a0dad0676a4784435f14a9335b905d88dc79292c837b116a916ef0eeab16fb1a9c76643b7ee68ecf294881eab3373e5e406938acd34ccd2f93f35d", 0x65}], 0x8, &(0x7f00000007c0)=[{0xc0, 0x1, 0x4, "e1bdbe2460b8ad492409f53d6046d457992fd6eb8142838f6af80593f23ff2366309380f4b9a829590d8afe2288e16653ca745c43f6dfa5a805b02eb13b74c3dca6ef6c2b2eaa94c75e9024de213e9dd5b8f94b483e8940851c23583d63a9115ce5355b22069408b826beadc0a205a712c6729b926125e74d5b1a83d09457401679fda1d9be1a0df25b7a3be1ea4ea8e0536145375cb393eedd7e298aa1a7c9cb5d040586b216e3c83c3405fc0"}, {0x20, 0x95, 0x8, "e787d9a8cbc71187a82451"}, {0x78, 0x88, 0x4, "d2efd9f02f5ad86f126b2132cd30c869a54f4215645db734f20d2bba36389a340f97679bd35856845eeed9e2f5cf6c4d1b51f79b2cb30c2d9308e0bb69c984cb2d449a6d99301bc0052784925a390496c3ff568f61e86827ca171e857ff1bdeeeb219775"}], 0x158}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f00000000c0)=""/222}, 0x94) 16.334748681s ago: executing program 4 (id=368): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600843b00004c150280481519800304"], 0x1570}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) socket$kcm(0x2, 0xa, 0x73) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d000000000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x2000800) 16.177488616s ago: executing program 0 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x12}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x8c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0xfffffff8, &(0x7f0000000700)=""/23, 0x17}, 0x8000b}], 0x16c, 0x10002, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x18c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_USERDATA={0xfa, 0xd, 0x1, 0x0, "e41d97c7845681b33501f99f3d6dd71d21bc5643610cc26bd2764b493703784f6b937808a6806b9bd1b8b07e5957772bb8333a4d497479ad2ce1909a20c7998e932b4638d46cc71e269b10734db0c3defdee1fc7c245ddb093415eebe10759a1c5fd167f5873155b9b2049cd68aceefd5b4fa195d742089b5b13d488ea8d257c7e60b8bc3227ae0511942f8db6e189ec7468b925c1df7501b0c636654a7af89e41695a68db76db760c9a440627655d1d876caba3d0d5c70d722683953a0dbcbfbd94a04d4cd8730cc87d4f4f992cf9fb99eebed22d05a3cfadaef3b75d0858dfbe9e46dfd41811f11bb6fa1d8e9ab42a7131aaad4e8d"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x38}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x43}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 16.177010259s ago: executing program 1 (id=370): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x6, 0x3ff, {{0x1b, 0x4, 0x1, 0x19, 0x6c, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@end, @timestamp_prespec={0x44, 0x1c, 0xf5, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x7}, {@multicast1, 0x7f}, {@multicast2, 0x6848fa2b}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x9f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_addr={0x44, 0x2c, 0xf6, 0x1, 0x7, [{@empty, 0x47}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x40}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x3}, {@remote, 0xa}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @union={0xe, 0x4, 0x0, 0x5, 0x1, 0x99e, [{0x2, 0x4, 0xb95c}, {0x4, 0x6, 0xffe}, {0x4, 0x5, 0xffffff16}, {0x6, 0x5, 0x10000}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x6f, 0x0]}}, &(0x7f0000000440)=""/186, 0x70, 0xba, 0x1}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xe, &(0x7f0000000580)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x6e}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7fff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf75}, @ringbuf_query, @exit], &(0x7f0000000600)='syzkaller\x00', 0x7, 0x62, &(0x7f0000000640)=""/98, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x10, 0x5, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000740)=[{0x3, 0x1, 0x5}, {0x1, 0x1, 0xe, 0x9}, {0x5, 0x2, 0x3, 0xc}, {0x5, 0x4, 0x2, 0x1}], 0x10, 0xd8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x26, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xcdcd, 0x7d, &(0x7f0000000240)=""/125, 0x41100, 0x20, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0xb, 0x1, 0x6}, 0x10, 0xf2e1, r3, 0x6, 0x0, &(0x7f0000000840)=[{0x0, 0x1, 0x1}, {0x0, 0x2, 0xc, 0x8}, {0x4, 0x3, 0x5, 0x8}, {0x3, 0x5, 0xd, 0x7}, {0x4, 0x5, 0x1, 0x7}, {0x5, 0x2, 0xf, 0xc}], 0x10, 0x5}, 0x94) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc7) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000980)={0x7, 0x7, 0x1}, &(0x7f00000009c0)=0x28) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000a00)={{0x0, @loopback, 0x4e21, 0x3, 'none\x00', 0x1, 0x5, 0x1f}, {@remote, 0x4e21, 0x4, 0x3, 0xfff, 0x11cf}}, 0x44) socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000a80)={r6, 0x30000000000000, 0x68}) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xffff0001, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4004802) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r7, &(0x7f0000000c00)="4cce225c5f029fca3ee3bb2b4f04c42f1162be2860641be708a8a44825a278c5cca6ab9cc2335348ca22c528c6f859480aa13719eff709d2d03350899ce7fe53117c4f9dbf89ed6723a33d14487d733a61ae4c3fb9151af3c0e50e594b3a5f11df59fb950777b76a3bcb2666a7dbd6e9a879d0c25f616d39c28530404cd433c743a8a935c18f2c", 0x87, 0x10000, &(0x7f0000000cc0)={0xa, 0x4e22, 0x2, @mcast2, 0x8}, 0x1c) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000d40)={0x4, &(0x7f0000000d00)=[{0x401, 0x5, 0x3, 0x9ca0}, {0x2, 0x3, 0x6, 0x6}, {0x5, 0x8, 0x4, 0x3}, {0x9, 0x62, 0x2, 0xc}]}, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), r7) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r9, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @remote}}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x1, 0x7, 0xe0b, 0xb3, 0x100, r0, 0x80, '\x00', r1, r2, 0x3, 0x0, 0x4}, 0x50) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), r7) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'syztnl0\x00', r1, 0x29, 0x3a, 0x4, 0x7f, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7800, 0x8, 0x4, 0x1}}) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000011c0), r7) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xb8, r12, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x96}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44054}, 0x8080) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000001340)={'pimreg\x00'}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f00000013c0), r8) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x24, r14, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000014c0)={r7, r7, 0x2}, 0x14) 16.052173434s ago: executing program 0 (id=371): unshare(0x22020600) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000001100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1, 0x0, @dev, @local}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x1000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4024}, 0x0) 15.989881663s ago: executing program 1 (id=372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="44ed36bdae1769eb45c0d322d295f13647b584719757dbe30ea41a055ebe7a212e34e34d2f49d59a14715ea618d8c901dbc9c121f90ba25f5b58c020ddd7266230c4117c61dc11dbdc7fc8658b57b89a40a9ea391478922ddac36e53ab703b047dc302907b050e1671a13a6d5e6f23a4b407d0d25ec1b1a6f4f3ae2ecb"], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="44ed36bdae1769eb45c0d322d295f13647b584719757dbe30ea41a055ebe7a212e34e34d2f49d59a14715ea618d8c901dbc9c121f90ba25f5b58c020ddd7266230c4117c61dc11dbdc7fc8658b57b89a40a9ea391478922ddac36e53ab703b047dc302907b050e1671a13a6d5e6f23a4b407d0d25ec1b1a6f4f3ae2ecb"], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) 15.849451055s ago: executing program 0 (id=373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, 0x0, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r9 = socket(0x2, 0x2, 0x2) sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, 0x0, 0x0) (async) getpid() (async) r11 = socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000540)=""/88, 0x58}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/152, 0x98}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000cb0000007b1af8ff00000000bfa700000000000007010000f8ffffffb702000008000000b703000000000040850000006200000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 15.847280175s ago: executing program 1 (id=374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r6, 0x1, 0x6}, 0x10) close(0x3) close(r4) (async) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7fffffe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x587, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.760426519s ago: executing program 0 (id=375): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000280)=0xd, 0x12) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r5, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x20000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000000) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) bind$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r8, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r12, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmmsg$inet(r8, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r8, &(0x7f0000000c40)="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", 0xffe3, 0x0, 0x0, 0x5a) 15.677004473s ago: executing program 2 (id=376): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = getpid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) (async) r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r1, r2, r3}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x713}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xffff8001}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xede8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8f16}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_ZONE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, r3) (async) ioctl$TUNSETGROUP(r6, 0x400454ce, r3) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 32) r8 = gettid() r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r7, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, r7, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x4000) (async) r12 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000680)) connect$netrom(r12, &(0x7f00000006c0)={{0x3, @default, 0x7}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r11) (rerun: 32) sendmsg$GTP_CMD_DELPDP(r13, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r14, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048008}, 0x40004) (async) sendto$netrom(r12, &(0x7f0000000880)="dd9c67863c1ba00949e3160c066a6d5738eefd0404a4292e8fef1d2fa4f33bc4c48571520a", 0x25, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETGROUP(r6, 0x400454ce, r3) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r12, 0x84, 0x21, &(0x7f00000008c0), &(0x7f0000000900)=0x4) (async) getgid() (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @val={0x8, 0x3, r15}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x80) 1.123787531s ago: executing program 32 (id=365): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x180000) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000"], 0x38}, 0x0) recvmsg(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x160) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46900204}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000400", @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf251300000008000100", @ANYRES32=r3, @ANYBLOB="240013802000008004000100080001006e666300080001006e666300080001006e666300"], 0x40}}, 0x800) close(0x3) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 1.077558518s ago: executing program 33 (id=368): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600843b00004c150280481519800304"], 0x1570}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) socket$kcm(0x2, 0xa, 0x73) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d000000000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x2000800) 69.657085ms ago: executing program 34 (id=375): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000280)=0xd, 0x12) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r5, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x20000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000000) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) bind$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r8, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r12, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmmsg$inet(r8, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r8, &(0x7f0000000c40)="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", 0xffe3, 0x0, 0x0, 0x5a) 42.031944ms ago: executing program 35 (id=374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r6, 0x1, 0x6}, 0x10) close(0x3) close(r4) (async) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7fffffe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x587, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 36 (id=376): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = getpid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) (async) r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r1, r2, r3}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x713}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xffff8001}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xede8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8f16}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_ZONE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, r3) (async) ioctl$TUNSETGROUP(r6, 0x400454ce, r3) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 32) r8 = gettid() r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r7, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, r7, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x4000) (async) r12 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000680)) connect$netrom(r12, &(0x7f00000006c0)={{0x3, @default, 0x7}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r11) (rerun: 32) sendmsg$GTP_CMD_DELPDP(r13, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r14, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048008}, 0x40004) (async) sendto$netrom(r12, &(0x7f0000000880)="dd9c67863c1ba00949e3160c066a6d5738eefd0404a4292e8fef1d2fa4f33bc4c48571520a", 0x25, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETGROUP(r6, 0x400454ce, r3) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r12, 0x84, 0x21, &(0x7f00000008c0), &(0x7f0000000900)=0x4) (async) getgid() (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @val={0x8, 0x3, r15}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 68.135539][ T5851] cgroup: Unknown subsys name 'net' [ 68.288100][ T5851] cgroup: Unknown subsys name 'cpuset' [ 68.296482][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.707497][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.338693][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.345183][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.234578][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.257315][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.266279][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.278106][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.285499][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.286661][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.293305][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.325835][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.335115][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.342800][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.351231][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.356072][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.358825][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.368070][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.373955][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.380175][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.393566][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.403147][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.417397][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.424961][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.433520][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.440672][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.448549][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.456991][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.458781][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.000229][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 73.193308][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 73.270763][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 73.327050][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.334794][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.342262][ T5861] bridge_slave_0: entered allmulticast mode [ 73.350164][ T5861] bridge_slave_0: entered promiscuous mode [ 73.363626][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.370875][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.378073][ T5861] bridge_slave_1: entered allmulticast mode [ 73.385020][ T5861] bridge_slave_1: entered promiscuous mode [ 73.411227][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 73.441486][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 73.456624][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.488348][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.594340][ T5861] team0: Port device team_slave_0 added [ 73.635180][ T5861] team0: Port device team_slave_1 added [ 73.641199][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.648699][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.656386][ T5877] bridge_slave_0: entered allmulticast mode [ 73.663460][ T5877] bridge_slave_0: entered promiscuous mode [ 73.671018][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.678147][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.685409][ T5873] bridge_slave_0: entered allmulticast mode [ 73.692300][ T5873] bridge_slave_0: entered promiscuous mode [ 73.730378][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.737608][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.744745][ T5877] bridge_slave_1: entered allmulticast mode [ 73.751943][ T5877] bridge_slave_1: entered promiscuous mode [ 73.759394][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.767326][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.774538][ T5873] bridge_slave_1: entered allmulticast mode [ 73.781668][ T5873] bridge_slave_1: entered promiscuous mode [ 73.809305][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.816491][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.842591][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.904066][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.911135][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.937447][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.973523][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.981052][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.988333][ T5862] bridge_slave_0: entered allmulticast mode [ 73.995860][ T5862] bridge_slave_0: entered promiscuous mode [ 74.003122][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.011137][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.018407][ T5865] bridge_slave_0: entered allmulticast mode [ 74.025725][ T5865] bridge_slave_0: entered promiscuous mode [ 74.042056][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.054152][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.064203][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.072285][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.079770][ T5862] bridge_slave_1: entered allmulticast mode [ 74.086899][ T5862] bridge_slave_1: entered promiscuous mode [ 74.093571][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.100793][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.108138][ T5865] bridge_slave_1: entered allmulticast mode [ 74.115220][ T5865] bridge_slave_1: entered promiscuous mode [ 74.134743][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.160427][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.221055][ T5877] team0: Port device team_slave_0 added [ 74.276811][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.288213][ T5877] team0: Port device team_slave_1 added [ 74.295615][ T5873] team0: Port device team_slave_0 added [ 74.303908][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.318067][ T5861] hsr_slave_0: entered promiscuous mode [ 74.324468][ T5861] hsr_slave_1: entered promiscuous mode [ 74.334060][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.369432][ T5873] team0: Port device team_slave_1 added [ 74.377146][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.446750][ T5865] team0: Port device team_slave_0 added [ 74.454679][ T5862] team0: Port device team_slave_0 added [ 74.461249][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.466414][ T5880] Bluetooth: hci1: command tx timeout [ 74.468874][ T51] Bluetooth: hci0: command tx timeout [ 74.474164][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.506282][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.535075][ T51] Bluetooth: hci3: command tx timeout [ 74.535096][ T5880] Bluetooth: hci4: command tx timeout [ 74.535379][ T5880] Bluetooth: hci2: command tx timeout [ 74.554578][ T5865] team0: Port device team_slave_1 added [ 74.562500][ T5862] team0: Port device team_slave_1 added [ 74.569380][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.576568][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.602618][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.614238][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.621464][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.647568][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.695715][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.702679][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.728760][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.789591][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.796969][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.823441][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.835297][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.842243][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.868594][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.881034][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.888039][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.914003][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.948436][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.955519][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.982358][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.058021][ T5873] hsr_slave_0: entered promiscuous mode [ 75.064570][ T5873] hsr_slave_1: entered promiscuous mode [ 75.071122][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 75.076991][ T5873] Cannot create hsr debugfs directory [ 75.102122][ T5877] hsr_slave_0: entered promiscuous mode [ 75.108345][ T5877] hsr_slave_1: entered promiscuous mode [ 75.114374][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 75.120426][ T5877] Cannot create hsr debugfs directory [ 75.143117][ T5862] hsr_slave_0: entered promiscuous mode [ 75.149454][ T5862] hsr_slave_1: entered promiscuous mode [ 75.155929][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 75.161679][ T5862] Cannot create hsr debugfs directory [ 75.277133][ T5865] hsr_slave_0: entered promiscuous mode [ 75.284842][ T5865] hsr_slave_1: entered promiscuous mode [ 75.291192][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 75.296961][ T5865] Cannot create hsr debugfs directory [ 75.574370][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.619661][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.661052][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.708149][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.791125][ T5877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.804192][ T5877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.814832][ T5877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.826333][ T5877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.917735][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.937021][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.948687][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.970288][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.040574][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.053905][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.064705][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.084457][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.123388][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.146715][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.215065][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.222326][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.232209][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.239351][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.269201][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.281343][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.294510][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.320654][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.331331][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.386630][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.423059][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.430220][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.440860][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.447971][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.535428][ T5880] Bluetooth: hci0: command tx timeout [ 76.535435][ T5875] Bluetooth: hci1: command tx timeout [ 76.560305][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.589662][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.620744][ T5880] Bluetooth: hci3: command tx timeout [ 76.623320][ T5875] Bluetooth: hci4: command tx timeout [ 76.626299][ T5880] Bluetooth: hci2: command tx timeout [ 76.694519][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.712475][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.751903][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.759164][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.779156][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.823854][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.831006][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.841600][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.848717][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.860560][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.867668][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.934398][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.958798][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.992729][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.999915][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.028129][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.035240][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.140595][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.177667][ T5861] veth0_vlan: entered promiscuous mode [ 77.230146][ T5861] veth1_vlan: entered promiscuous mode [ 77.309540][ T5877] veth0_vlan: entered promiscuous mode [ 77.355764][ T5877] veth1_vlan: entered promiscuous mode [ 77.433357][ T5861] veth0_macvtap: entered promiscuous mode [ 77.471641][ T5877] veth0_macvtap: entered promiscuous mode [ 77.490953][ T5861] veth1_macvtap: entered promiscuous mode [ 77.530808][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.547333][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.583890][ T5877] veth1_macvtap: entered promiscuous mode [ 77.601702][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.629511][ T1097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.649926][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.658150][ T1097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.667386][ T1097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.697218][ T1097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.711503][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.738568][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.756410][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.783778][ T3544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.811102][ T3544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.820469][ T3544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.848080][ T3544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.900302][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.909559][ T5873] veth0_vlan: entered promiscuous mode [ 77.922248][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.948603][ T5873] veth1_vlan: entered promiscuous mode [ 78.061304][ T5865] veth0_vlan: entered promiscuous mode [ 78.080081][ T5873] veth0_macvtap: entered promiscuous mode [ 78.112395][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.115378][ T5873] veth1_macvtap: entered promiscuous mode [ 78.126486][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.152578][ T5865] veth1_vlan: entered promiscuous mode [ 78.166738][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.174614][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.200313][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.239095][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.267337][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.276328][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.299001][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.321272][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.330703][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.354598][ T5865] veth0_macvtap: entered promiscuous mode [ 78.368008][ T3544] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.391823][ T3544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.432922][ T5862] veth0_vlan: entered promiscuous mode [ 78.467404][ T5865] veth1_macvtap: entered promiscuous mode [ 78.503799][ T5862] veth1_vlan: entered promiscuous mode [ 78.604199][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.615692][ T51] Bluetooth: hci1: command tx timeout [ 78.621200][ T5875] Bluetooth: hci0: command tx timeout [ 78.629753][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.671958][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.687416][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.701629][ T5875] Bluetooth: hci4: command tx timeout [ 78.707175][ T5875] Bluetooth: hci2: command tx timeout [ 78.710975][ T51] Bluetooth: hci3: command tx timeout [ 78.745576][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.754303][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.768055][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.780934][ T5862] veth0_macvtap: entered promiscuous mode [ 78.844545][ T5984] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 78.885705][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.966479][ T5862] veth1_macvtap: entered promiscuous mode [ 79.018092][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.040235][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.190460][ T5994] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 79.485690][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.758708][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.790215][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.809720][ T1092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.845122][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.872300][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.954824][ T6003] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.010926][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.042532][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.056300][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.200787][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.250900][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.362556][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.410518][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.568306][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.593510][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.695653][ T5880] Bluetooth: hci0: command tx timeout [ 80.700715][ T6019] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 80.701083][ T5880] Bluetooth: hci1: command tx timeout [ 80.775845][ T51] Bluetooth: hci2: command tx timeout [ 80.776547][ T5875] Bluetooth: hci4: command tx timeout [ 80.781287][ T5880] Bluetooth: hci3: command tx timeout [ 80.790079][ T6017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.219041][ T6028] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14'. [ 81.374332][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 81.573762][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16'. [ 81.938145][ T6050] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 82.359826][ T6028] Zero length message leads to an empty skb [ 82.453181][ T6059] batman_adv: batadv0: Adding interface: dummy0 [ 82.488252][ T6059] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.531498][ T6044] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 82.564032][ T6059] batman_adv: batadv0: Interface activated: dummy0 [ 82.858322][ T5880] Bluetooth: hci4: command tx timeout [ 83.275257][ T6095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.27'. [ 83.293408][ T6095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.27'. [ 83.358921][ T6098] netlink: 64 bytes leftover after parsing attributes in process `syz.1.32'. [ 83.538601][ T6071] netlink: 'syz.3.23': attribute type 21 has an invalid length. [ 83.621923][ T6071] netlink: 156 bytes leftover after parsing attributes in process `syz.3.23'. [ 84.055678][ T5880] Bluetooth: hci0: command 0x080f tx timeout [ 84.383469][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 84.400125][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.428654][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.467472][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 84.479616][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.488327][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.500300][ T6152] netlink: 'syz.2.44': attribute type 10 has an invalid length. [ 84.528840][ T6152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.542892][ T6152] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.696662][ T6161] netlink: zone id is out of range [ 84.719251][ T6161] netlink: get zone limit has 8 unknown bytes [ 85.077756][ T6170] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 85.087895][ T6170] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 85.622747][ T6202] __nla_validate_parse: 1 callbacks suppressed [ 85.622764][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 85.681988][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 85.753044][ T6210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.60'. [ 85.798445][ T6208] bridge0: entered allmulticast mode [ 85.832647][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 85.861345][ T6211] pim6reg: entered allmulticast mode [ 85.973446][ T6208] bridge_slave_1: left allmulticast mode [ 85.997003][ T6208] bridge_slave_1: left promiscuous mode [ 86.003547][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.102960][ T6208] bridge_slave_0: left allmulticast mode [ 86.118657][ T6208] bridge_slave_0: left promiscuous mode [ 86.126660][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.139270][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.65'. [ 86.159206][ T6208] bridge0 (unregistering): left allmulticast mode [ 86.395905][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'. [ 86.430251][ T6244] netlink: 'syz.4.66': attribute type 2 has an invalid length. [ 86.720808][ T919] cfg80211: failed to load regulatory.db [ 87.449449][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 87.461777][ T6287] tipc: Started in network mode [ 87.468668][ T6287] tipc: Node identity , cluster identity 4711 [ 87.474759][ T6287] tipc: Failed to obtain node identity [ 87.484763][ T6287] tipc: Enabling of bearer rejected, failed to enable media [ 87.541460][ T6287] syzkaller0: entered promiscuous mode [ 87.558886][ T6287] syzkaller0: entered allmulticast mode [ 88.100460][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 88.775070][ T6325] bridge_slave_1: left allmulticast mode [ 88.786664][ T6325] bridge_slave_1: left promiscuous mode [ 88.792546][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.843318][ T6325] bridge_slave_0: left allmulticast mode [ 88.851357][ T6325] bridge_slave_0: left promiscuous mode [ 88.864673][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.914069][ T6330] netlink: 256 bytes leftover after parsing attributes in process `syz.3.89'. [ 88.924090][ T6330] netlink: 48 bytes leftover after parsing attributes in process `syz.3.89'. [ 89.424589][ T6336] syzkaller0: entered promiscuous mode [ 89.433442][ T6336] syzkaller0: entered allmulticast mode [ 89.640592][ T6355] netlink: 'syz.3.97': attribute type 5 has an invalid length. [ 89.708137][ T6357] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.086663][ T6369] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 91.561210][ T6389] __nla_validate_parse: 3 callbacks suppressed [ 91.561227][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 91.781387][ T6396] netlink: set zone limit has 8 unknown bytes [ 91.834545][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 91.882066][ T6400] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 91.927358][ T6405] vxcan1: tx address claim with dlc 0 [ 92.294810][ T6412] tipc: Started in network mode [ 92.302822][ T6412] tipc: Node identity 080211, cluster identity 4711 [ 92.335461][ T6412] tipc: Enabled bearer , priority 0 [ 92.369368][ T6412] syzkaller1: entered promiscuous mode [ 92.384678][ T6412] syzkaller1: entered allmulticast mode [ 92.677555][ T6412] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 92.719233][ T6412] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 92.792219][ T6428] tipc: Resetting bearer [ 93.210766][ T6439] !: renamed from dummy0 (while UP) [ 93.366448][ T9] tipc: Node number set to 134353152 [ 93.462444][ T6451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.122'. [ 93.471798][ T6451] netlink: 43 bytes leftover after parsing attributes in process `syz.0.122'. [ 93.483903][ T6451] netlink: 'syz.0.122': attribute type 5 has an invalid length. [ 93.492896][ T6451] netlink: 43 bytes leftover after parsing attributes in process `syz.0.122'. [ 93.545572][ T6421] netlink: 'syz.4.113': attribute type 2 has an invalid length. [ 94.064554][ T6472] syzkaller0: entered promiscuous mode [ 94.076097][ T6468] netlink: 'syz.3.127': attribute type 4 has an invalid length. [ 94.092743][ T6472] syzkaller0: entered allmulticast mode [ 94.112728][ T6471] tipc: Started in network mode [ 94.117139][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 94.118922][ T6471] tipc: Node identity da423f235e57, cluster identity 4711 [ 94.133804][ T6471] tipc: Enabled bearer , priority 0 [ 94.160021][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.129'. [ 94.175409][ T6475] netlink: 'syz.3.127': attribute type 4 has an invalid length. [ 94.275660][ T6471] tipc: Resetting bearer [ 94.393899][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 94.406545][ T6471] tipc: Disabling bearer [ 94.434678][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 94.664566][ T6496] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.133'. [ 94.693823][ T6499] netlink: 'syz.2.132': attribute type 10 has an invalid length. [ 94.721345][ T6499] !: entered promiscuous mode [ 94.755463][ T6499] bridge0: port 3(0!) entered blocking state [ 94.761838][ T6499] bridge0: port 3(0!) entered disabled state [ 94.768784][ T6499] !: entered allmulticast mode [ 94.797106][ T6499] bridge0: port 3(0!) entered blocking state [ 94.803455][ T6499] bridge0: port 3(0!) entered forwarding state [ 94.813604][ T6496] wg1 speed is unknown, defaulting to 1000 [ 94.822677][ T6496] wg1 speed is unknown, defaulting to 1000 [ 94.868702][ T6496] wg1 speed is unknown, defaulting to 1000 [ 94.898096][ T6496] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.937465][ T6496] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 95.126693][ T6496] wg1 speed is unknown, defaulting to 1000 [ 95.196761][ T6496] wg1 speed is unknown, defaulting to 1000 [ 95.256571][ T6496] wg1 speed is unknown, defaulting to 1000 [ 95.264325][ T6496] wg1 speed is unknown, defaulting to 1000 [ 95.402770][ T6496] wg1 speed is unknown, defaulting to 1000 [ 95.445814][ T6531] syz_tun: entered allmulticast mode [ 95.525608][ T6536] netlink: 'syz.3.143': attribute type 10 has an invalid length. [ 95.747727][ T6553] sctp: [Deprecated]: syz.2.148 (pid 6553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.747727][ T6553] Use struct sctp_sack_info instead [ 96.493617][ T6578] sctp: [Deprecated]: syz.2.157 (pid 6578) Use of int in max_burst socket option. [ 96.493617][ T6578] Use struct sctp_assoc_value instead [ 96.837335][ T6589] __nla_validate_parse: 7 callbacks suppressed [ 96.837353][ T6589] netlink: 60 bytes leftover after parsing attributes in process `syz.3.160'. [ 97.729918][ T6631] dvmrp8: entered allmulticast mode [ 97.738666][ T6630] dvmrp8: left allmulticast mode [ 97.894517][ T6629] wg1 speed is unknown, defaulting to 1000 [ 98.044977][ T6636] Unknown options in mask b7f2 [ 98.047665][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 98.105023][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 98.160909][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 98.220293][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 98.606210][ T6657] netlink: 'syz.1.182': attribute type 8 has an invalid length. [ 98.636349][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 98.760592][ T6668] vlan2: entered promiscuous mode [ 98.772462][ T6662] netlink: 'syz.3.183': attribute type 3 has an invalid length. [ 98.784610][ T6668] vlan2: entered allmulticast mode [ 98.802829][ T6668] hsr_slave_1: entered allmulticast mode [ 99.272116][ T6693] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 99.291077][ T6694] syz_tun: entered allmulticast mode [ 99.304110][ T6694] dvmrp8: entered allmulticast mode [ 99.367276][ T6693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.479745][ T6706] netlink: 'syz.4.188': attribute type 23 has an invalid length. [ 99.567325][ T6694] wg1 speed is unknown, defaulting to 1000 [ 99.732771][ T6721] Bluetooth: MGMT ver 1.23 [ 100.129420][ T6740] netlink: 'syz.1.201': attribute type 12 has an invalid length. [ 100.149704][ T6740] batman_adv: batadv0: Adding interface: ip6gretap1 [ 100.156464][ T6740] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.188764][ T6740] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 100.408579][ T6747] sch_tbf: burst 2050 is lower than device lo mtu (65550) ! [ 100.466101][ T6748] sch_tbf: burst 2050 is lower than device lo mtu (65550) ! [ 100.490820][ T6748] sch_tbf: burst 2050 is lower than device lo mtu (65550) ! [ 100.570213][ T6754] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.830018][ T6778] Bluetooth: MGMT ver 1.23 [ 101.229893][ T6781] netlink: 32 bytes leftover after parsing attributes in process `syz.2.210'. [ 101.384350][ T6766] wg1 speed is unknown, defaulting to 1000 [ 101.542096][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.207'. [ 101.760854][ T6812] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 101.815060][ T5880] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 101.816606][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 102.221605][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 102.489762][ T6827] netlink: 'syz.1.218': attribute type 5 has an invalid length. [ 102.595888][ T6829] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 102.645941][ T6814] wg1 speed is unknown, defaulting to 1000 [ 102.689394][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 102.864238][ T6859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.224'. [ 102.935638][ T5875] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 102.940022][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 102.948823][ T6863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 103.257632][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 103.288637][ T6880] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 103.323978][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 103.357647][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.227'. [ 103.463965][ T6890] tipc: Started in network mode [ 103.475915][ T6890] tipc: Node identity 1a9225d88fd5, cluster identity 4711 [ 103.506312][ T6890] tipc: Enabled bearer , priority 0 [ 103.545242][ T6892] warning: `syz.1.231' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.560575][ T6879] tipc: Resetting bearer [ 103.603346][ T6893] syzkaller0: entered promiscuous mode [ 103.627296][ T6893] syzkaller0: entered allmulticast mode [ 103.706099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.714373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.725646][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 103.845323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.853478][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.862340][ T6875] tipc: Resetting bearer [ 103.945233][ T6875] tipc: Disabling bearer [ 104.599489][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 104.738208][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 104.824716][ T6958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.034937][ T6984] tipc: Enabling of bearer rejected, failed to enable media [ 105.598261][ T7014] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 105.798825][ T7012] syz.0.252 (7012) used greatest stack depth: 17864 bytes left [ 106.296097][ T7050] block nbd0: server does not support multiple connections per device. [ 106.306854][ T7050] block nbd0: shutting down sockets [ 106.334647][ T7056] syzkaller1: entered promiscuous mode [ 106.344299][ T7056] syzkaller1: entered allmulticast mode [ 106.526095][ T7064] syzkaller0: entered promiscuous mode [ 106.531604][ T7064] syzkaller0: entered allmulticast mode [ 106.604753][ T7069] netlink: 'syz.1.266': attribute type 11 has an invalid length. [ 106.632169][ T7069] netlink: 'syz.1.266': attribute type 11 has an invalid length. [ 106.635096][ T1117] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.685518][ T1117] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.725156][ T1117] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.774596][ T1117] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.353080][ T7102] __nla_validate_parse: 13 callbacks suppressed [ 107.353099][ T7102] netlink: 200 bytes leftover after parsing attributes in process `syz.1.274'. [ 107.400409][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 107.767909][ T7121] netlink: 'syz.4.280': attribute type 3 has an invalid length. [ 107.829638][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 107.847222][ T7121] netlink: 'syz.4.280': attribute type 3 has an invalid length. [ 107.855702][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 107.877478][ T7129] netlink: 40 bytes leftover after parsing attributes in process `syz.3.283'. [ 107.898338][ T7129] nbd: must specify at least one socket [ 107.913432][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.097775][ T7145] xt_policy: too many policy elements [ 108.103761][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 108.133895][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.287'. [ 108.608988][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.296'. [ 108.621667][ T7158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.623911][ T7167] wg1 speed is unknown, defaulting to 1000 [ 108.642681][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 108.756426][ T7158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.876656][ T7200] wg1 speed is unknown, defaulting to 1000 [ 108.916818][ T7205] netlink: 104 bytes leftover after parsing attributes in process `syz.2.300'. [ 108.955640][ T7197] block nbd0: server does not support multiple connections per device. [ 108.982469][ T7197] block nbd0: shutting down sockets [ 109.037487][ T7158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.331759][ T7229] netlink: 'syz.0.307': attribute type 13 has an invalid length. [ 109.365678][ T7229] netlink: 'syz.0.307': attribute type 17 has an invalid length. [ 109.382139][ T7225] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 109.413514][ T7238] netlink: 'syz.0.307': attribute type 13 has an invalid length. [ 109.464527][ T7238] netlink: 'syz.0.307': attribute type 17 has an invalid length. [ 109.793943][ T7249] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 110.610824][ T7303] IPv6: sit1: Disabled Multicast RS [ 110.631680][ T7303] sit1: entered allmulticast mode [ 110.987262][ T7312] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 111.012242][ T7312] macvtap1: entered allmulticast mode [ 111.026476][ T7312] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 111.039045][ T7312] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 111.048214][ T7312] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 111.073391][ T7308] wg1 speed is unknown, defaulting to 1000 [ 111.159946][ T7318] syzkaller0: entered promiscuous mode [ 111.181393][ T7318] syzkaller0: entered allmulticast mode [ 112.536725][ T7364] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 112.546288][ T7364] bridge2: entered allmulticast mode [ 112.569547][ T7364] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 112.583087][ T7364] bridge3: entered allmulticast mode [ 112.611872][ T7364] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 112.628241][ T7364] bridge4: entered allmulticast mode [ 112.657700][ T7364] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 112.666351][ T7364] bridge5: entered allmulticast mode [ 112.680902][ T7364] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 112.691946][ T7364] bridge6: entered allmulticast mode [ 112.698681][ T7367] wg1 speed is unknown, defaulting to 1000 [ 112.726526][ T7364] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 112.735219][ T7364] bridge7: entered allmulticast mode [ 112.779651][ T7364] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 112.797359][ T7364] bridge8: entered allmulticast mode [ 112.839889][ T7364] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 112.848812][ T7364] bridge9: entered allmulticast mode [ 112.871144][ T7364] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 112.880022][ T7364] bridge10: entered allmulticast mode [ 112.972985][ T7364] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 112.986563][ T7364] bridge11: entered allmulticast mode [ 113.005711][ T7364] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 113.014659][ T7364] bridge12: entered allmulticast mode [ 113.287865][ T7364] bridge13: the hash_elasticity option has been deprecated and is always 16 [ 113.296892][ T7364] bridge13: entered allmulticast mode [ 113.406507][ T7393] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 113.423006][ T7364] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 113.429641][ T7393] netdevsim netdevsim1: Falling back to sysfs fallback for: þ [ 113.438379][ T7364] bridge14: entered allmulticast mode [ 113.764399][ T7409] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 113.793442][ T7409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.803304][ T7409] __nla_validate_parse: 10 callbacks suppressed [ 113.803320][ T7409] netlink: 32 bytes leftover after parsing attributes in process `syz.4.351'. [ 113.813911][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 113.823325][ T7415] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 113.944273][ T7418] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 114.347174][ T7434] netlink: 'syz.3.358': attribute type 1 has an invalid length. [ 114.357387][ T7434] netlink: 48 bytes leftover after parsing attributes in process `syz.3.358'. [ 114.369430][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 114.511511][ T7440] netlink: zone id is out of range [ 114.518174][ T7440] netlink: zone id is out of range [ 114.523360][ T7440] netlink: zone id is out of range [ 114.529025][ T7440] netlink: zone id is out of range [ 114.561593][ T7440] netlink: zone id is out of range [ 114.589096][ T7440] netlink: set zone limit has 8 unknown bytes [ 114.715528][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 114.868537][ T919] IPVS: starting estimator thread 0... [ 115.009632][ T7466] IPVS: using max 27 ests per chain, 64800 per kthread [ 115.078673][ T7473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.151841][ T7476] nftables ruleset with unbound set [ 115.194997][ T7478] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 132.777696][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.784019][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.223284][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.229873][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.294919][ T5869] Bluetooth: hci2: command 0x0401 tx timeout [ 196.301156][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 196.302254][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 196.308205][ T5183] Bluetooth: hci0: command 0x080f tx timeout [ 221.895466][ T5880] Bluetooth: hci4: command 0x0406 tx timeout [ 255.657805][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.664112][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.935053][ T31] INFO: task kworker/0:6:5976 blocked for more than 143 seconds. [ 272.942805][ T31] Not tainted syzkaller #0 [ 272.947813][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.957755][ T31] task:kworker/0:6 state:D stack:23400 pid:5976 tgid:5976 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 272.969865][ T31] Workqueue: events rfkill_sync_work [ 272.975197][ T31] Call Trace: [ 272.978460][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 272.981376][ T31] __schedule+0x1798/0x4cc0 [ 272.986265][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 272.991651][ T31] ? __pfx___schedule+0x10/0x10 [ 272.996742][ T31] ? schedule+0x91/0x360 [ 273.001019][ T31] schedule+0x165/0x360 [ 273.005275][ T31] schedule_preempt_disabled+0x13/0x30 [ 273.011027][ T31] __mutex_lock+0x7e6/0x1350 [ 273.015950][ T31] ? __mutex_lock+0x5bb/0x1350 [ 273.020765][ T31] ? rfkill_sync_work+0x2e/0x200 [ 273.025763][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 273.034864][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 273.040621][ T31] rfkill_sync_work+0x2e/0x200 [ 273.076350][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 273.082116][ T31] process_scheduled_works+0xae1/0x17b0 [ 273.095823][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.101880][ T31] worker_thread+0x8a0/0xda0 [ 273.107515][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 273.113878][ T31] ? __kthread_parkme+0x7b/0x200 [ 273.119271][ T31] kthread+0x70e/0x8a0 [ 273.123362][ T31] ? __pfx_worker_thread+0x10/0x10 [ 273.128520][ T31] ? __pfx_kthread+0x10/0x10 [ 273.133119][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.138339][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.143543][ T31] ? __pfx_kthread+0x10/0x10 [ 273.148165][ T31] ret_from_fork+0x439/0x7d0 [ 273.152757][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 273.158985][ T31] ? __switch_to_asm+0x39/0x70 [ 273.163777][ T31] ? __switch_to_asm+0x33/0x70 [ 273.169050][ T31] ? __pfx_kthread+0x10/0x10 [ 273.173669][ T31] ret_from_fork_asm+0x1a/0x30 [ 273.178591][ T31] [ 273.181766][ T31] INFO: task syz.3.365:7457 blocked for more than 143 seconds. [ 273.189493][ T31] Not tainted syzkaller #0 [ 273.194430][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.203144][ T31] task:syz.3.365 state:D stack:25096 pid:7457 tgid:7457 ppid:5877 task_flags:0x400040 flags:0x00004004 [ 273.215250][ T31] Call Trace: [ 273.218534][ T31] [ 273.221472][ T31] __schedule+0x1798/0x4cc0 [ 273.226085][ T31] ? validate_chain+0x897/0x2140 [ 273.231030][ T31] ? __lock_acquire+0xab9/0xd20 [ 273.235915][ T31] ? __pfx___schedule+0x10/0x10 [ 273.240787][ T31] ? schedule+0x91/0x360 [ 273.245078][ T31] schedule+0x165/0x360 [ 273.249241][ T31] schedule_timeout+0x9a/0x270 [ 273.253986][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 273.259448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.265451][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.270666][ T31] ? wait_for_completion+0x267/0x5d0 [ 273.276106][ T31] wait_for_completion+0x2bf/0x5d0 [ 273.281235][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 273.286956][ T31] ? __flush_work+0xd2/0xbc0 [ 273.291557][ T31] ? __flush_work+0xd2/0xbc0 [ 273.296188][ T31] __flush_work+0x9b9/0xbc0 [ 273.300703][ T31] ? __flush_work+0xd2/0xbc0 [ 273.305340][ T31] ? __pfx___flush_work+0x10/0x10 [ 273.310371][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 273.315742][ T31] ? __pfx___cancel_work+0x10/0x10 [ 273.320855][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 273.326534][ T31] __cancel_work_sync+0xbe/0x110 [ 273.331472][ T31] rfkill_unregister+0x92/0x220 [ 273.336617][ T31] nfc_unregister_device+0x96/0x2a0 [ 273.341824][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 273.347627][ T31] virtual_ncidev_close+0x56/0x90 [ 273.352660][ T31] __fput+0x44c/0xa70 [ 273.356681][ T31] task_work_run+0x1d1/0x260 [ 273.361278][ T31] ? __pfx_task_work_run+0x10/0x10 [ 273.366958][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 273.372432][ T31] exit_to_user_mode_loop+0xec/0x110 [ 273.377763][ T31] do_syscall_64+0x2bd/0x3b0 [ 273.382350][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.387608][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.393671][ T31] ? clear_bhb_loop+0x60/0xb0 [ 273.398417][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.404329][ T31] RIP: 0033:0x7fa34718eec9 [ 273.408764][ T31] RSP: 002b:00007ffda6339918 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 273.417219][ T31] RAX: 0000000000000000 RBX: 00007fa3473e7da0 RCX: 00007fa34718eec9 [ 273.425214][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 273.433188][ T31] RBP: 00007fa3473e7da0 R08: 0000000000000118 R09: 0000000fa6339c0f [ 273.441263][ T31] R10: 00000000003ffcc4 R11: 0000000000000246 R12: 000000000001c3b0 [ 273.449287][ T31] R13: 00007fa3473e6090 R14: ffffffffffffffff R15: 00007ffda6339a30 [ 273.457303][ T31] [ 273.460317][ T31] INFO: task syz.4.368:7471 blocked for more than 143 seconds. [ 273.468654][ T31] Not tainted syzkaller #0 [ 273.473588][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.482271][ T31] task:syz.4.368 state:D stack:28264 pid:7471 tgid:7470 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 273.494267][ T31] Call Trace: [ 273.497715][ T31] [ 273.500650][ T31] __schedule+0x1798/0x4cc0 [ 273.505217][ T31] ? __lock_acquire+0xab9/0xd20 [ 273.510080][ T31] ? __lock_acquire+0xab9/0xd20 [ 273.515036][ T31] ? __pfx___schedule+0x10/0x10 [ 273.519905][ T31] ? schedule+0x91/0x360 [ 273.524133][ T31] schedule+0x165/0x360 [ 273.528323][ T31] schedule_preempt_disabled+0x13/0x30 [ 273.533786][ T31] __mutex_lock+0x7e6/0x1350 [ 273.538400][ T31] ? __mutex_lock+0x5bb/0x1350 [ 273.543163][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 273.548470][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 273.553495][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.558781][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 273.564686][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 273.571660][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 273.580366][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 273.585583][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 273.591309][ T31] rfkill_set_block+0x1d2/0x440 [ 273.596211][ T31] rfkill_fop_open+0x28f/0x820 [ 273.600984][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 273.606319][ T31] misc_open+0x2b9/0x330 [ 273.610570][ T31] chrdev_open+0x4c9/0x5e0 [ 273.615060][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 273.620007][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 273.626396][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 273.631345][ T31] do_dentry_open+0x950/0x13f0 [ 273.636139][ T31] vfs_open+0x3b/0x340 [ 273.640203][ T31] ? path_openat+0x2ecd/0x3830 [ 273.645004][ T31] path_openat+0x2ee5/0x3830 [ 273.649597][ T31] ? arch_stack_walk+0xfc/0x150 [ 273.654439][ T31] ? stack_depot_save_flags+0x40/0x860 [ 273.659954][ T31] ? __pfx_path_openat+0x10/0x10 [ 273.664924][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.671646][ T31] do_filp_open+0x1fa/0x410 [ 273.676213][ T31] ? __lock_acquire+0xab9/0xd20 [ 273.681071][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 273.686149][ T31] ? _raw_spin_unlock+0x28/0x50 [ 273.691013][ T31] ? alloc_fd+0x64c/0x6c0 [ 273.695425][ T31] do_sys_openat2+0x121/0x1c0 [ 273.700112][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.705348][ T31] ? exc_page_fault+0x76/0xf0 [ 273.710038][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 273.715369][ T31] __x64_sys_openat+0x138/0x170 [ 273.720228][ T31] do_syscall_64+0xfa/0x3b0 [ 273.724708][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.729955][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.736151][ T31] ? clear_bhb_loop+0x60/0xb0 [ 273.740835][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.746760][ T31] RIP: 0033:0x7f29bff8eec9 [ 273.751171][ T31] RSP: 002b:00007f29c0ee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 273.759617][ T31] RAX: ffffffffffffffda RBX: 00007f29c01e5fa0 RCX: 00007f29bff8eec9 [ 273.767610][ T31] RDX: 000000000006ad01 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 273.776139][ T31] RBP: 00007f29c0011f91 R08: 0000000000000000 R09: 0000000000000000 [ 273.784117][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.792100][ T31] R13: 00007f29c01e6038 R14: 00007f29c01e5fa0 R15: 00007ffd764e8788 [ 273.800115][ T31] [ 273.803126][ T31] INFO: task syz.1.374:7488 blocked for more than 144 seconds. [ 273.815920][ T31] Not tainted syzkaller #0 [ 273.820868][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.829814][ T31] task:syz.1.374 state:D stack:28328 pid:7488 tgid:7487 ppid:5873 task_flags:0x400040 flags:0x00004004 [ 273.841905][ T31] Call Trace: [ 273.845256][ T31] [ 273.848186][ T31] __schedule+0x1798/0x4cc0 [ 273.852682][ T31] ? __lock_acquire+0xab9/0xd20 [ 273.857807][ T31] ? __lock_acquire+0xab9/0xd20 [ 273.862668][ T31] ? __pfx___schedule+0x10/0x10 [ 273.867594][ T31] ? schedule+0x91/0x360 [ 273.871856][ T31] schedule+0x165/0x360 [ 273.876914][ T31] schedule_preempt_disabled+0x13/0x30 [ 273.882389][ T31] __mutex_lock+0x7e6/0x1350 [ 273.887383][ T31] ? __mutex_lock+0x5bb/0x1350 [ 273.892138][ T31] ? misc_open+0x51/0x330 [ 273.896564][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 273.901617][ T31] misc_open+0x51/0x330 [ 273.905855][ T31] chrdev_open+0x4c9/0x5e0 [ 273.910385][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 273.915754][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 273.922176][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 273.927253][ T31] do_dentry_open+0x950/0x13f0 [ 273.932039][ T31] vfs_open+0x3b/0x340 [ 273.936169][ T31] ? path_openat+0x2ecd/0x3830 [ 273.940941][ T31] path_openat+0x2ee5/0x3830 [ 273.945829][ T31] ? arch_stack_walk+0xfc/0x150 [ 273.950694][ T31] ? stack_depot_save_flags+0x40/0x860 [ 273.956192][ T31] ? __pfx_path_openat+0x10/0x10 [ 273.961130][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.967367][ T31] do_filp_open+0x1fa/0x410 [ 273.972296][ T31] ? __lock_acquire+0xab9/0xd20 [ 273.978519][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 273.983572][ T31] ? _raw_spin_unlock+0x28/0x50 [ 273.988781][ T31] ? alloc_fd+0x64c/0x6c0 [ 273.993129][ T31] do_sys_openat2+0x121/0x1c0 [ 273.998014][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.003218][ T31] ? exc_page_fault+0x76/0xf0 [ 274.008148][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 274.013426][ T31] __x64_sys_openat+0x138/0x170 [ 274.018302][ T31] do_syscall_64+0xfa/0x3b0 [ 274.022831][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.028121][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.034190][ T31] ? clear_bhb_loop+0x60/0xb0 [ 274.039130][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.045060][ T31] RIP: 0033:0x7f9c5af8eec9 [ 274.049476][ T31] RSP: 002b:00007f9c5bf00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.057937][ T31] RAX: ffffffffffffffda RBX: 00007f9c5b1e5fa0 RCX: 00007f9c5af8eec9 [ 274.066194][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 274.074166][ T31] RBP: 00007f9c5b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.083245][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.091276][ T31] R13: 00007f9c5b1e6038 R14: 00007f9c5b1e5fa0 R15: 00007ffc558d4208 [ 274.099422][ T31] [ 274.102434][ T31] INFO: task syz.1.374:7491 blocked for more than 144 seconds. [ 274.110436][ T31] Not tainted syzkaller #0 [ 274.115418][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.124074][ T31] task:syz.1.374 state:D stack:28328 pid:7491 tgid:7487 ppid:5873 task_flags:0x400040 flags:0x00004004 [ 274.136367][ T31] Call Trace: [ 274.139832][ T31] [ 274.142747][ T31] __schedule+0x1798/0x4cc0 [ 274.147282][ T31] ? kasan_save_free_info+0x46/0x50 [ 274.152491][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.157379][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.162237][ T31] ? __pfx___schedule+0x10/0x10 [ 274.167352][ T31] ? schedule+0x91/0x360 [ 274.171585][ T31] schedule+0x165/0x360 [ 274.175821][ T31] schedule_preempt_disabled+0x13/0x30 [ 274.181290][ T31] __mutex_lock+0x7e6/0x1350 [ 274.187019][ T31] ? __mutex_lock+0x5bb/0x1350 [ 274.191805][ T31] ? misc_open+0x51/0x330 [ 274.196430][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 274.201452][ T31] misc_open+0x51/0x330 [ 274.205628][ T31] chrdev_open+0x4c9/0x5e0 [ 274.210054][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 274.215257][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 274.221605][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 274.226794][ T31] do_dentry_open+0x950/0x13f0 [ 274.231553][ T31] vfs_open+0x3b/0x340 [ 274.235692][ T31] ? path_openat+0x2ecd/0x3830 [ 274.240472][ T31] path_openat+0x2ee5/0x3830 [ 274.245082][ T31] ? arch_stack_walk+0xfc/0x150 [ 274.249942][ T31] ? stack_depot_save_flags+0x40/0x860 [ 274.255658][ T31] ? __pfx_path_openat+0x10/0x10 [ 274.260584][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.266686][ T31] do_filp_open+0x1fa/0x410 [ 274.271190][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.276070][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 274.281111][ T31] ? _raw_spin_unlock+0x28/0x50 [ 274.287102][ T31] ? alloc_fd+0x64c/0x6c0 [ 274.291455][ T31] do_sys_openat2+0x121/0x1c0 [ 274.296174][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.301379][ T31] ? exc_page_fault+0x76/0xf0 [ 274.306111][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 274.311409][ T31] __x64_sys_openat+0x138/0x170 [ 274.316434][ T31] do_syscall_64+0xfa/0x3b0 [ 274.320918][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.326344][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.332414][ T31] ? clear_bhb_loop+0x60/0xb0 [ 274.337138][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.343027][ T31] RIP: 0033:0x7f9c5af8eec9 [ 274.347683][ T31] RSP: 002b:00007f9c5bebe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.356136][ T31] RAX: ffffffffffffffda RBX: 00007f9c5b1e6180 RCX: 00007f9c5af8eec9 [ 274.364111][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 274.372096][ T31] RBP: 00007f9c5b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.380555][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.389673][ T31] R13: 00007f9c5b1e6218 R14: 00007f9c5b1e6180 R15: 00007ffc558d4208 [ 274.397722][ T31] [ 274.400749][ T31] INFO: task syz.0.375:7493 blocked for more than 144 seconds. [ 274.408544][ T31] Not tainted syzkaller #0 [ 274.413461][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.422156][ T31] task:syz.0.375 state:D stack:25120 pid:7493 tgid:7492 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 274.434113][ T31] Call Trace: [ 274.437829][ T31] [ 274.440774][ T31] __schedule+0x1798/0x4cc0 [ 274.445633][ T31] ? kasan_save_free_info+0x46/0x50 [ 274.450840][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.456531][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.461397][ T31] ? __pfx___schedule+0x10/0x10 [ 274.466507][ T31] ? schedule+0x91/0x360 [ 274.470747][ T31] schedule+0x165/0x360 [ 274.474933][ T31] schedule_preempt_disabled+0x13/0x30 [ 274.480397][ T31] __mutex_lock+0x7e6/0x1350 [ 274.485007][ T31] ? __mutex_lock+0x5bb/0x1350 [ 274.490721][ T31] ? misc_open+0x51/0x330 [ 274.495382][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 274.500422][ T31] misc_open+0x51/0x330 [ 274.504562][ T31] chrdev_open+0x4c9/0x5e0 [ 274.508996][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 274.513941][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 274.520316][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 274.525415][ T31] do_dentry_open+0x950/0x13f0 [ 274.530168][ T31] vfs_open+0x3b/0x340 [ 274.534211][ T31] ? path_openat+0x2ecd/0x3830 [ 274.539052][ T31] path_openat+0x2ee5/0x3830 [ 274.543646][ T31] ? arch_stack_walk+0xfc/0x150 [ 274.548725][ T31] ? stack_depot_save_flags+0x40/0x860 [ 274.554217][ T31] ? __pfx_path_openat+0x10/0x10 [ 274.559452][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.565571][ T31] do_filp_open+0x1fa/0x410 [ 274.570098][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.574985][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 274.580022][ T31] ? _raw_spin_unlock+0x28/0x50 [ 274.585122][ T31] ? alloc_fd+0x64c/0x6c0 [ 274.589444][ T31] do_sys_openat2+0x121/0x1c0 [ 274.594972][ T31] ? __se_sys_futex+0x36f/0x400 [ 274.599837][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.605062][ T31] ? rcu_is_watching+0x15/0xb0 [ 274.609831][ T31] __x64_sys_openat+0x138/0x170 [ 274.614690][ T31] do_syscall_64+0xfa/0x3b0 [ 274.619867][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.625125][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.631189][ T31] ? clear_bhb_loop+0x60/0xb0 [ 274.635890][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.641782][ T31] RIP: 0033:0x7f81f418eec9 [ 274.646442][ T31] RSP: 002b:00007f81f5091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.655066][ T31] RAX: ffffffffffffffda RBX: 00007f81f43e5fa0 RCX: 00007f81f418eec9 [ 274.663037][ T31] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 274.671426][ T31] RBP: 00007f81f4211f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.679884][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.688104][ T31] R13: 00007f81f43e6038 R14: 00007f81f43e5fa0 R15: 00007fffa365df58 [ 274.697374][ T31] [ 274.700413][ T31] INFO: task syz.2.376:7498 blocked for more than 145 seconds. [ 274.708566][ T31] Not tainted syzkaller #0 [ 274.713482][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.722229][ T31] task:syz.2.376 state:D stack:25896 pid:7498 tgid:7496 ppid:5865 task_flags:0x400140 flags:0x00004004 [ 274.734187][ T31] Call Trace: [ 274.737716][ T31] [ 274.740650][ T31] __schedule+0x1798/0x4cc0 [ 274.745227][ T31] ? kasan_save_free_info+0x46/0x50 [ 274.750439][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.755351][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.760204][ T31] ? __pfx___schedule+0x10/0x10 [ 274.765391][ T31] ? schedule+0x91/0x360 [ 274.769626][ T31] schedule+0x165/0x360 [ 274.773761][ T31] schedule_preempt_disabled+0x13/0x30 [ 274.779477][ T31] __mutex_lock+0x7e6/0x1350 [ 274.784079][ T31] ? __mutex_lock+0x5bb/0x1350 [ 274.788863][ T31] ? misc_open+0x51/0x330 [ 274.793201][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 274.799660][ T31] misc_open+0x51/0x330 [ 274.803844][ T31] chrdev_open+0x4c9/0x5e0 [ 274.808334][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 274.813294][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 274.819678][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 274.824620][ T31] do_dentry_open+0x950/0x13f0 [ 274.829632][ T31] vfs_open+0x3b/0x340 [ 274.833684][ T31] ? path_openat+0x2ecd/0x3830 [ 274.838478][ T31] path_openat+0x2ee5/0x3830 [ 274.843068][ T31] ? arch_stack_walk+0xfc/0x150 [ 274.847949][ T31] ? stack_depot_save_flags+0x40/0x860 [ 274.853419][ T31] ? __pfx_path_openat+0x10/0x10 [ 274.859121][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.865435][ T31] do_filp_open+0x1fa/0x410 [ 274.870057][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.875050][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 274.880088][ T31] ? _raw_spin_unlock+0x28/0x50 [ 274.885307][ T31] ? alloc_fd+0x64c/0x6c0 [ 274.889634][ T31] do_sys_openat2+0x121/0x1c0 [ 274.894287][ T31] ? __se_sys_futex+0x36f/0x400 [ 274.900300][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.905545][ T31] ? rcu_is_watching+0x15/0xb0 [ 274.910311][ T31] __x64_sys_openat+0x138/0x170 [ 274.915455][ T31] do_syscall_64+0xfa/0x3b0 [ 274.919966][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.925212][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.931289][ T31] ? clear_bhb_loop+0x60/0xb0 [ 274.936009][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.941904][ T31] RIP: 0033:0x7f9b02d8eec9 [ 274.946568][ T31] RSP: 002b:00007f9b03caa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.955004][ T31] RAX: ffffffffffffffda RBX: 00007f9b02fe6090 RCX: 00007f9b02d8eec9 [ 274.962997][ T31] RDX: 0000000000000040 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 274.970994][ T31] RBP: 00007f9b02e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.979110][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.987099][ T31] R13: 00007f9b02fe6128 R14: 00007f9b02fe6090 R15: 00007ffd31fab768 [ 274.995222][ T31] [ 274.998264][ T31] [ 274.998264][ T31] Showing all locks held in the system: [ 275.007386][ T31] 1 lock held by khungtaskd/31: [ 275.012242][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 275.022136][ T31] 2 locks held by getty/5625: [ 275.026819][ T31] #0: ffff88814c9910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 275.036839][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 275.047042][ T31] 3 locks held by kworker/0:6/5976: [ 275.052236][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 275.063261][ T31] #1: ffffc90004fd7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 275.075786][ T31] #2: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 275.085800][ T31] 1 lock held by syz.3.365/7457: [ 275.090726][ T31] #0: ffff8880242ac100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 275.100547][ T31] 3 locks held by syz.4.368/7471: [ 275.106596][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.115142][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 275.125225][ T31] #2: ffff8880242ac100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 275.135177][ T31] 1 lock held by syz.1.374/7488: [ 275.140099][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.148549][ T31] 1 lock held by syz.1.374/7491: [ 275.153476][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.161970][ T31] 1 lock held by syz.0.375/7493: [ 275.167172][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.175948][ T31] 1 lock held by syz.2.376/7498: [ 275.180889][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.189383][ T31] 1 lock held by syz-executor/7503: [ 275.194569][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.203262][ T31] 1 lock held by syz-executor/7504: [ 275.209370][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.218071][ T31] 1 lock held by syz-executor/7508: [ 275.223261][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.231962][ T31] 1 lock held by syz-executor/7509: [ 275.237180][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.245636][ T31] 1 lock held by syz-executor/7510: [ 275.250823][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.259528][ T31] 1 lock held by syz-executor/7518: [ 275.264718][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.273193][ T31] 1 lock held by syz-executor/7519: [ 275.278411][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.287138][ T31] 1 lock held by syz-executor/7521: [ 275.292333][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.300826][ T31] 1 lock held by syz-executor/7524: [ 275.306035][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.315362][ T31] 1 lock held by syz-executor/7525: [ 275.320561][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.329421][ T31] 1 lock held by syz-executor/7536: [ 275.334599][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.343059][ T31] 1 lock held by syz-executor/7537: [ 275.348284][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.357034][ T31] 1 lock held by syz-executor/7539: [ 275.362214][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.370683][ T31] 1 lock held by syz-executor/7542: [ 275.375892][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.384310][ T31] 1 lock held by syz-executor/7543: [ 275.389760][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 275.398301][ T31] [ 275.400624][ T31] ============================================= [ 275.400624][ T31] [ 275.409079][ T31] NMI backtrace for cpu 1 [ 275.409099][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 275.409118][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.409128][ T31] Call Trace: [ 275.409135][ T31] [ 275.409142][ T31] dump_stack_lvl+0x189/0x250 [ 275.409167][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.409187][ T31] ? __pfx__printk+0x10/0x10 [ 275.409228][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 275.409255][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 275.409281][ T31] ? __pfx__printk+0x10/0x10 [ 275.409310][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 275.409340][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 275.409366][ T31] watchdog+0xf93/0xfe0 [ 275.409396][ T31] ? watchdog+0x1de/0xfe0 [ 275.409420][ T31] kthread+0x70e/0x8a0 [ 275.409441][ T31] ? __pfx_watchdog+0x10/0x10 [ 275.409459][ T31] ? __pfx_kthread+0x10/0x10 [ 275.409479][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.409501][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.409523][ T31] ? __pfx_kthread+0x10/0x10 [ 275.409542][ T31] ret_from_fork+0x439/0x7d0 [ 275.409558][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 275.409577][ T31] ? __switch_to_asm+0x39/0x70 [ 275.409595][ T31] ? __switch_to_asm+0x33/0x70 [ 275.409612][ T31] ? __pfx_kthread+0x10/0x10 [ 275.409630][ T31] ret_from_fork_asm+0x1a/0x30 [ 275.409661][ T31] [ 275.409670][ T31] Sending NMI from CPU 1 to CPUs 0: [ 275.556944][ C0] NMI backtrace for cpu 0 [ 275.556960][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 275.556978][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.556987][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 275.557016][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 09 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 275.557030][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 275.557045][ C0] RAX: 9e22955a03d14d00 RBX: ffffffff81968528 RCX: 9e22955a03d14d00 [ 275.557057][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b09bc RDI: ffffffff8be33f80 [ 275.557069][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 275.557080][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa2f230 [ 275.557093][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 275.557103][ C0] FS: 0000000000000000(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000 [ 275.557116][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.557127][ C0] CR2: 00005619a2d2e000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 275.557141][ C0] Call Trace: [ 275.557147][ C0] [ 275.557153][ C0] default_idle+0x13/0x20 [ 275.557170][ C0] default_idle_call+0x74/0xb0 [ 275.557188][ C0] do_idle+0x1e8/0x510 [ 275.557215][ C0] ? __pfx_do_idle+0x10/0x10 [ 275.557246][ C0] cpu_startup_entry+0x44/0x60 [ 275.557269][ C0] rest_init+0x2de/0x300 [ 275.557288][ C0] start_kernel+0x3a9/0x410 [ 275.557308][ C0] x86_64_start_reservations+0x24/0x30 [ 275.557330][ C0] x86_64_start_kernel+0x143/0x1c0 [ 275.557352][ C0] common_startup_64+0x13e/0x147 [ 275.557379][ C0] [ 275.557975][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 275.737935][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 275.747017][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.757046][ T31] Call Trace: [ 275.760302][ T31] [ 275.763232][ T31] dump_stack_lvl+0x99/0x250 [ 275.767803][ T31] ? __asan_memcpy+0x40/0x70 [ 275.772371][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.777543][ T31] ? __pfx__printk+0x10/0x10 [ 275.782115][ T31] vpanic+0x281/0x750 [ 275.786071][ T31] ? __pfx_vpanic+0x10/0x10 [ 275.790544][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 275.796064][ T31] ? preempt_schedule+0xae/0xc0 [ 275.800892][ T31] ? preempt_schedule_common+0x83/0xd0 [ 275.806335][ T31] panic+0xb9/0xc0 [ 275.810049][ T31] ? __pfx_panic+0x10/0x10 [ 275.814440][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 275.819793][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 275.825932][ T31] watchdog+0xfd2/0xfe0 [ 275.830076][ T31] ? watchdog+0x1de/0xfe0 [ 275.834387][ T31] kthread+0x70e/0x8a0 [ 275.838436][ T31] ? __pfx_watchdog+0x10/0x10 [ 275.843088][ T31] ? __pfx_kthread+0x10/0x10 [ 275.847656][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.852833][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.858010][ T31] ? __pfx_kthread+0x10/0x10 [ 275.862576][ T31] ret_from_fork+0x439/0x7d0 [ 275.867143][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 275.872242][ T31] ? __switch_to_asm+0x39/0x70 [ 275.876981][ T31] ? __switch_to_asm+0x33/0x70 [ 275.881718][ T31] ? __pfx_kthread+0x10/0x10 [ 275.886284][ T31] ret_from_fork_asm+0x1a/0x30 [ 275.891028][ T31] [ 275.894336][ T31] Kernel Offset: disabled [ 275.898661][ T31] Rebooting in 86400 seconds..