last executing test programs: 1m17.560450042s ago: executing program 3 (id=22): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0xffefff1f, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x9f32, 0x7}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x9f32, 0x7}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000003c0)={0x3, &(0x7f0000000200)=[{}, {@fixed}, {@fixed}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0x5, 0xffff}, {0x9, 0xffe8}}}, 0x24}}, 0x4000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0x5, 0xffff}, {0x9, 0xffe8}}}, 0x24}}, 0x4000) 1m17.459050183s ago: executing program 3 (id=27): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000000)='espintcp', 0x8) sendto$inet(r1, &(0x7f0000000080)="1234", 0x2, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) read(r0, &(0x7f0000000100)=""/41, 0x29) 1m17.344897553s ago: executing program 3 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 1m17.164346952s ago: executing program 3 (id=33): socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x4c840) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x60bd26, 0x4, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x3c}}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r5, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000001200)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6, &(0x7f0000001300), &(0x7f0000001340)}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r5, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000001200)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6, &(0x7f0000001300), &(0x7f0000001340)}, 0x2c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x0, 0xb005}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'macvtap0\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000001300)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "c7ba5cc4a01b77"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000002300)={r10, 0x45}) sendto$packet(r8, &(0x7f0000000400)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000440)={0x11, 0x0, r9}, 0x14) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000003300)=ANY=[@ANYBLOB="1c000095791ce600", @ANYRES16=r6, @ANYBLOB="00022bbd7000fbdbdf25030000000800020003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xd}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xb8a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m17.026651731s ago: executing program 0 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f00000006c0)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x200400c4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) (async) sendmsg$nl_route(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x3}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001200010a667202d00000cf21a333"], 0x26}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@delchain={0x54, 0x64, 0xf31, 0xfffdfff9, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xb, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x14, 0x18, 0x107, 0x70bd25, 0x0, {0x4b, 0x7c, 0x3f}}, 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@arena={0x21, 0x0, 0x0, 0x4, 0x400, 0xffffffffffffffff, 0x3, '\x00', r4, r1, 0x4, 0x2, 0x4}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000880)={'syztnl1\x00', &(0x7f00000007c0)={'tunl0\x00', r4, 0x0, 0x8040, 0x3, 0x5, {{0x19, 0x4, 0x1, 0x5, 0x64, 0x65, 0x0, 0xf8, 0x4, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0xf, 0x5, [@rand_addr=0x64010100, @broadcast, @private=0xa010102]}, @end, @rr={0x7, 0x13, 0x6e, [@broadcast, @broadcast, @remote, @rand_addr=0x64010102]}, @rr={0x7, 0x2b, 0x7e, [@remote, @remote, @broadcast, @empty, @empty, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x6, '\x00', r9, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r10, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10) 1m16.278257567s ago: executing program 3 (id=38): r0 = socket(0x2, 0x2, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000007c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="e54462000000009500000000000000cd0df55102d1824cd8e50fb2cbfeef2f6635b93afe64a96dca9aa28980dd0a407ab43a9a19ee5f9f635a4256355092e2602e13672367ec0b24cc870a13030096c640879ec2496410a9e92c326cd0b2d4e6baf780c998d21dfa2714e7421a9f95f0d211396d9eda208f23b46f9160c11976279d96440f2c18597b10aaf7205daa6a0c4989c11b15522bc92f924cf6b058209d122ac992f1051c633fe220bcede93b2b0b076227cf31c32abf71e7216c3f0d754a326bb9553e35b85540172370588c8917379791eec200"/231], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xa, 0x3, &(0x7f00000009c0)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x85}}, &(0x7f0000000a00)='syzkaller\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0x11, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000540)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000580)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000005c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000680)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000700)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r9) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r9, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r9, &(0x7f0000000780)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r9, 0x0) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=r11, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@ifindex=r10, r3, 0x16, 0x2038, 0x0, @void, @void, @value=r11, @void, r8}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m16.213796521s ago: executing program 0 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4f, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip,mac\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 1m15.744583109s ago: executing program 0 (id=43): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000640)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, 0xe, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x71690b2e985f511a}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000640)=0x40000000) write$tun(r4, &(0x7f00000004c0)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9391a1a9b407927fe3c008f5336ef1df51ec2e65759e4b3c0204c122d8c787f3", "4074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd76", "6b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8e", {"de79292a6bf86031c289fe0dfa18bb8c", "035e95ab1a16083a79d9e5b7c72f1813"}}}}}, 0xbe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x23, 0x4, 0x4, 0x7, 0x1, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x801}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000680)={'pimreg0\x00', 0x8000}) 1m13.132095178s ago: executing program 3 (id=51): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'vlan0\x00', {0x5}}) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xb, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3000000850000002d00000095000000000000008ecd0b9cff5452f2a1d523bba768516626766cc08a24501458ae8d97ca8c12c34deebf2561c6a8178869bb4889b512921f140d53c816cfcf0e601acac73d6ab4c708da706a3793eae25f37a43c969c86a0d61a457eb0f35eb5286ea61ed8db84327396a3bedb57980b51e594228f9786a6888361ebef499f53b342a16e1c59187104875a"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) (async) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3f, 0x2, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x1, 0x700, 0x66b6, 0x41}}) (async) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000114000029bd7000fddbdf250800010001000000080001000100000100"/48], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x408c0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000b80)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000bc0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x10, 0x7}, {0x2, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}]}]}}]}, 0x48}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000b40)={'tunl0\x00', &(0x7f0000000a80)={'gre0\x00', r4, 0x8, 0x20, 0x7fe, 0x8001, {{0x26, 0x4, 0x3, 0x2, 0x98, 0x64, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_addr={0x44, 0x14, 0x2d, 0x1, 0xe, [{@private=0xa010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9d9a}]}, @rr={0x7, 0xb, 0xeb, [@dev={0xac, 0x14, 0x14, 0x21}, @remote]}, @timestamp_addr={0x44, 0x44, 0x19, 0x1, 0xc, [{@private=0xa010102, 0x100}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x103}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x9}, {@loopback, 0x3}, {@rand_addr=0x64010101, 0x10000002}, {@loopback, 0x484}, {@multicast2, 0xfff}]}, @noop, @ssrr={0x89, 0x1f, 0xb5, [@local, @broadcast, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010100]}]}}}}}) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB="2b10f27b5b9dab7277730356df0816822e8327c314e84c63a59b74f282f50bebe10d23359a2e6399bfbb3eb6af27d6c9b358ed5e33191f64b088c3fc75e355298a5de6ba803823471f79", @ANYRES8=r10], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x810) sendmsg$NFT_BATCH(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) (async) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="4c236601a052472531a5ae0c19259bb86deb43700b99e5b11e19b420f5ceb5c95bb249334f4be6404c664e99413455bf2edbbe29b8737c58ad3e6fe73046f907efbacc927a3e29f8f139a6dbf9db4f506b8aa0408f142d1057167b3ddbe418e6cf3eeb3d0465fb258a1c6b6eefea73318ca92a39305b27bfd260267b3775947a99a7aee2c0b339fc00107fb0d2ccfe6d99b0e06336a5328974b9de5f959b129447a2d6af08d3ebfac6c268199d895b54e06c76dc7a83ee9471b3f15c773e204bced85a5c16ca0db4a8ff5712a3f20267c792383376b30c9adba645652ad3c7f8aada3fb738fb0aa0176c44f99d9db99be2c5", @ANYRES64=r8, @ANYBLOB="5defb70ff30a89d8195613e2fc26c2ecaa5a471c749c44016919ee9c69b4dea376423bbd90ea71f9441d24759aa2497ff21366eceef9ea7c2346dc7bcdee8b2dea874724a76a8c602ce9f9ff29406f755b8cabd5d85a8f480fd5e6f9abd988f054cbdeccf612e70bd9b595bfc5aa06ad2f808ac9ae7eb3f2d382247778fd317b78cd9b0c3791d03b7c22454af1a368b125ecc34847ceced789e6a4fbfb273a84b35256eede6d2c456c9451dbc53acbe1091e621ab156e2c0691c7ebff09db0fa83dfaf43329e9247d95a4579960bda7a6d31a6d44cbd9e4d96", @ANYRES16=r6, @ANYBLOB="b8261f735b6882fb19eaf5165ff78a9c59fd8142b957acc9d3e38be863ecd2296d3ad72783b04cc59065951d11573b419a3e0d777a0b68eddf02a4b3f99d7d5ee633c9d3a876405112020a8b69a637dcb5c432460bebd878fcff1d3f838a663cb29f066d40798b94", @ANYRESDEC=r9, @ANYRES8=r4, @ANYRESOCT=r7, @ANYRES16=r10, @ANYRESHEX=r1], 0x34}}, 0x20000080) (async, rerun: 32) r11 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000005c0)={'vcan0\x00'}) (async, rerun: 64) sendmsg$can_bcm(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x4) (async) close(r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000500)={&(0x7f0000000540)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x10b8}, 0x20004844) ioctl$FS_IOC_RESVSP(r12, 0x40305828, 0x0) 1m4.330180323s ago: executing program 0 (id=56): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socket$vsock_stream(0x28, 0x1, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x1, 0x3, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x21}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000a40)="480e23") recvmsg(r1, &(0x7f0000000300)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000280)=""/54, 0x36}], 0x2}, 0x10060) 1m2.761616829s ago: executing program 0 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000130005002cbd70000000000000000000cc55deaf5b1787349d39d2f8fc0e2b62eef32e7cbd630f8e9496cb6fff3005a36a68780b8969dcd829d6fb5dba092baf3fab1ab1909631d43879d40096026ff1b53e6cb1a14d93c754284c435a726a874cd81dd3b90d030c14a050f5643bf99e9bdf491366209fec017bd4304bab33a1edbe88882e8b937e0ddfb1be65cc356846e62040056ebcd1440c830000c4076ce9b19d466059dabc2f773c3c1668e3d50ce1d4fe96b428f08cc0ebb030cc06914d738146567702dc5776d131071b01be2996b1ac4abfcaa0d4369400"/234, @ANYRES32=0x0, @ANYBLOB="020100000000000014000300766c616e3000000000000000000000000a000100aaaaaaaaaa300000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}]}}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 1m1.211212224s ago: executing program 1 (id=72): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000540)={0x0, 0x4}, &(0x7f0000000580)=0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x7c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r6, 0x1, 0x2}) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) r9 = socket(0x2c, 0x6, 0x0) setsockopt$sock_int(r9, 0x1, 0x23, &(0x7f00000004c0)=0x3, 0x4) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000500)=0xfffffffa, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={r8, 0x1, 0x2, 0x1}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000640)={r10, 0xe0, 0x8, 0x100, 0x2, 0x1ff}, 0x14) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f00000001c0)=0x1, 0x4) 1m0.960426614s ago: executing program 1 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@NDA_LLADDR={0xa}, @NDA_IFINDEX={0x8}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000ba060a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000001f2, 0xfff0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x4b, 0x10, 0x400, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x11c05}, [@IFLA_PHYS_SWITCH_ID={0x5, 0x24, "f3"}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1m0.939552722s ago: executing program 4 (id=74): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001"], 0x114}], 0x1}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x150, 0x1403, 0x1, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x41}, 0x24044080) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x1}}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x6, 0x40000, 0x6}, &(0x7f0000000380)=0x10) 1m0.707714531s ago: executing program 1 (id=75): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002700cb002bbd7000ffdbdf0505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002700cb002bbd7000ffdbdf0505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000280)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000a00000109da076200010080797a310000000004000480090002"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x1002}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x1002}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x0) write(r4, &(0x7f00000005c0)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m0.488141525s ago: executing program 2 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000800)=0x10000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000009c0)={'syzkaller1\x00', 0xc201}) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000a00)={&(0x7f0000000a40)=[{0x7fff, 0x401, 0x9, 0xfffffffffffffff6}], 0x1, 0x20, 0x8001, 0x14d2}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000b80)={0x1, 0xffffffffffffffff}, &(0x7f0000000bc0)=0xc) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000880)={'rose0\x00', 0x112}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000940)={'rose0\x00', 0x112}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x6, 0x5}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000580)={r7, 0x6b, "c697b979d237ffd6a4432d79f8da32d2cb797b447b36f3f5f44a5c62c3851f3601cb570ce66123d6531fc9695d1a25b8f7cf47e753d756e94706b4cd1a93cda29e7650a04a024729481c8ba8c895f771db777498d320c069f63445734ace1d66e11fd454fe139cc4db6a00"}, &(0x7f0000000680)=0x73) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="b400002c8760ef3510c50800000089af58943e0000000000dd0a00000000000073013e00000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xa, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000440), 0xb5, 0x10, &(0x7f0000000480), 0x7}, 0x48) setsockopt$inet_tcp_int(r8, 0x6, 0x25, &(0x7f0000000140)=0x7a, 0x4) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r10, 0x114, 0xa, &(0x7f0000000100)=ANY=[], 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x25, 0x1, 0x0, 0x0, "8335126e052893e2a35cb143a5f60bb0d202d9c0a04ee43553245a001fc35d54464a52fc17e835f1c12689f58fa9e79b52ea04eab7cac7f06ca2373c3bad5d9b"}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000000000000000000000000000000000051e4ea4e13000ed0c68c000000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000e40)=@deltaction={0x17c, 0x31, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x6, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc3}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3800}}, {0xc, 0x219, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4b6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 57.347565812s ago: executing program 32 (id=51): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'vlan0\x00', {0x5}}) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xb, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3000000850000002d00000095000000000000008ecd0b9cff5452f2a1d523bba768516626766cc08a24501458ae8d97ca8c12c34deebf2561c6a8178869bb4889b512921f140d53c816cfcf0e601acac73d6ab4c708da706a3793eae25f37a43c969c86a0d61a457eb0f35eb5286ea61ed8db84327396a3bedb57980b51e594228f9786a6888361ebef499f53b342a16e1c59187104875a"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) (async) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3f, 0x2, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x1, 0x700, 0x66b6, 0x41}}) (async) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000114000029bd7000fddbdf250800010001000000080001000100000100"/48], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x408c0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000b80)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000bc0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x10, 0x7}, {0x2, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}]}]}}]}, 0x48}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000b40)={'tunl0\x00', &(0x7f0000000a80)={'gre0\x00', r4, 0x8, 0x20, 0x7fe, 0x8001, {{0x26, 0x4, 0x3, 0x2, 0x98, 0x64, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_addr={0x44, 0x14, 0x2d, 0x1, 0xe, [{@private=0xa010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9d9a}]}, @rr={0x7, 0xb, 0xeb, [@dev={0xac, 0x14, 0x14, 0x21}, @remote]}, @timestamp_addr={0x44, 0x44, 0x19, 0x1, 0xc, [{@private=0xa010102, 0x100}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x103}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x9}, {@loopback, 0x3}, {@rand_addr=0x64010101, 0x10000002}, {@loopback, 0x484}, {@multicast2, 0xfff}]}, @noop, @ssrr={0x89, 0x1f, 0xb5, [@local, @broadcast, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010100]}]}}}}}) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB="2b10f27b5b9dab7277730356df0816822e8327c314e84c63a59b74f282f50bebe10d23359a2e6399bfbb3eb6af27d6c9b358ed5e33191f64b088c3fc75e355298a5de6ba803823471f79", @ANYRES8=r10], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x810) sendmsg$NFT_BATCH(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) (async) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="4c236601a052472531a5ae0c19259bb86deb43700b99e5b11e19b420f5ceb5c95bb249334f4be6404c664e99413455bf2edbbe29b8737c58ad3e6fe73046f907efbacc927a3e29f8f139a6dbf9db4f506b8aa0408f142d1057167b3ddbe418e6cf3eeb3d0465fb258a1c6b6eefea73318ca92a39305b27bfd260267b3775947a99a7aee2c0b339fc00107fb0d2ccfe6d99b0e06336a5328974b9de5f959b129447a2d6af08d3ebfac6c268199d895b54e06c76dc7a83ee9471b3f15c773e204bced85a5c16ca0db4a8ff5712a3f20267c792383376b30c9adba645652ad3c7f8aada3fb738fb0aa0176c44f99d9db99be2c5", @ANYRES64=r8, @ANYBLOB="5defb70ff30a89d8195613e2fc26c2ecaa5a471c749c44016919ee9c69b4dea376423bbd90ea71f9441d24759aa2497ff21366eceef9ea7c2346dc7bcdee8b2dea874724a76a8c602ce9f9ff29406f755b8cabd5d85a8f480fd5e6f9abd988f054cbdeccf612e70bd9b595bfc5aa06ad2f808ac9ae7eb3f2d382247778fd317b78cd9b0c3791d03b7c22454af1a368b125ecc34847ceced789e6a4fbfb273a84b35256eede6d2c456c9451dbc53acbe1091e621ab156e2c0691c7ebff09db0fa83dfaf43329e9247d95a4579960bda7a6d31a6d44cbd9e4d96", @ANYRES16=r6, @ANYBLOB="b8261f735b6882fb19eaf5165ff78a9c59fd8142b957acc9d3e38be863ecd2296d3ad72783b04cc59065951d11573b419a3e0d777a0b68eddf02a4b3f99d7d5ee633c9d3a876405112020a8b69a637dcb5c432460bebd878fcff1d3f838a663cb29f066d40798b94", @ANYRESDEC=r9, @ANYRES8=r4, @ANYRESOCT=r7, @ANYRES16=r10, @ANYRESHEX=r1], 0x34}}, 0x20000080) (async, rerun: 32) r11 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000005c0)={'vcan0\x00'}) (async, rerun: 64) sendmsg$can_bcm(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x4) (async) close(r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000500)={&(0x7f0000000540)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x10b8}, 0x20004844) ioctl$FS_IOC_RESVSP(r12, 0x40305828, 0x0) 54.170066479s ago: executing program 4 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="00000000000000040000000000000000627269646765000002800c002a00feffff7f05000000140035006272696467653000000000004a96eef20000"], 0x54}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xf0, 0x30, 0x1}, 0xf0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) 54.027629129s ago: executing program 4 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4128, 0x1020}, {&(0x7f00000013c0)=""/4105, 0x1009}, {&(0x7f0000002400)=""/245, 0xf5}, {&(0x7f0000002500)=""/180, 0xb4}, {&(0x7f00000025c0)=""/104, 0x68}], 0x5}, 0x22) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002980)={@private, @remote, 0x0}, &(0x7f00000029c0)=0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x1, 0x0, &(0x7f0000002e00)) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000002a00)={0x2c, 0x3, r4, 0x27, r6}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000002740)={0x0, 0xfffffffffffffe8e, &(0x7f0000002780)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018007000100d10300000c00a99dfab50440000000002df31ab20c0005408a7b"], 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000002f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002a40)="e22d51d9b076690cdd56e38fb545e04c67f92dc6ed28181eda2873c85ccabfa9ee39abcae42d843c28c8b44f4dac9ab8618f7523e2c31048bcd8dbf526814ac354656c1a23568153589f49fd935df9faa85aa13fa65dee8f1cb8c5469c954e9f9c7d9b383bd41c74de2cdfa9a92778766e573338f9a8d5c9c22856c68b37f04541281043adc474ef14395c3df3502ec7302d9bb4967e7b08140db8456fe97bf4002029ff06c9ce0067a528aeabcfaef07cb43616f09fdb64807db2fb42c90ac937e1246ef82f9bedf9cab3a9", 0xcc}, {&(0x7f0000002b40)="61d0e02e7588a54b42f8da2ba1f691debf6e51e513e90d2affe7ea6fbd967e781a1ed616d813b362f13b662f88cdd6c68e1545e7fe29b58b6df12efb7ca32e56da1978b2843206103db1cc9d1b90e2c0e2ee6cd1024ac15588e84bda3484ec5e0aaef3ffcac60fb6979d13a7b99057ae7e8125712c576c1757ec219540def46c755a7c0219fc490141b1353150613d1da56473ec5060", 0x96}], 0x2, &(0x7f0000002c40)=[{0x90, 0x10d, 0x0, "9c484e2758eb33eae7550765976a64a137345790bac9c3edc80cf372d4aedc7f1d152510faadbd9770c5e65e39f76d08a3b41b228d2a28a6fd66ac65bfc119d5bb432934c769a9514236c61d676dd9a7b1d51fd21a72792d41eaa0621c2b524aff84d92cc4b2686dd53b19e392b29c7b17b14845bd536b083d01bb93b26950c7"}, {0xe0, 0x116, 0x1, "b3d1ae58b9e4476c2131d003a553e55ee8e824da5a4d4b7e22f9dca12d453abc21979c8149d2313978909ece7258be68ed7e203895d47df052531d071ff4922fdaf82dfc3c0cbb8e0d40cb0a8e771a60e74ec3a221d67a8475bf8eecad62d9731c4fc04fa2ab55b3906656df9894c5e696428a849e9239d9787896d9fb1ba2bd17da7acf93d14b8175d36380b4e83a3501a11df9f9d9c519f767d876a29ee3ee8e3d3528134899416ca663524c07950423e058e1510f4749120ab2a9e3edec9afcfb055b3fb40ef61845"}], 0x170}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002e40)=ANY=[@ANYRESHEX=r6, @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf252600000008000300", @ANYRES32=r8, @ANYBLOB='\n\x004'], 0x40}}, 0xc00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 53.663835395s ago: executing program 4 (id=80): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r2, 0xe00e9c7d428f2e03, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000005c0)={0x5813}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x101}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000002400050600"/20, @ANYRES32=r11, @ANYBLOB="00000000ffffffff000000000c00010063616b655f6d71000c00020008000900e8"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 50.787140752s ago: executing program 2 (id=81): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1805000008000000c70000000700000085000000110000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000480)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x49f, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000004c0), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000500), 0x10) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r7, &(0x7f0000000c00)=ANY=[], 0xfe33) recvfrom$unix(r5, &(0x7f0000000600)=""/263, 0x107, 0x2, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000740)=0x6, 0x4) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) sendmsg$alg(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="bb5e04ceb5b6cf3d9dc8d4af5e9c76bbad8b422c1872cda7abfe10e54d0ba3cfe95e1e59cc49cec5729dec42aa486ce202088cf72cff8b6108d90511259af52ce9415b0e", 0x44}, {&(0x7f0000000800)="5826cf97a6483b60daabee31bc0b4145914ce028ce736fb9a875e0850aa9cbf698f19642b829ba7fc01a86b77753614adfaed1b8dbef7fc8a31848d85a9806ae96d13cdc9a6dd4a2e73af194c615c9509ca85986d1887c70630554532dda74cfa958a4570688e5dd9f79f6f53659ea3cb06107393bdb3f9ef4feb5b5f97e533feef65d9baa6d115cd778cf9f13265c5fd63c", 0x92}, {&(0x7f00000008c0)="a06c970b5113f1055ed7e7db07ec7f75100f5058b1114e3a4de037e3f33e041f99696acc87c2f66f689cec71148318e129d23c12debf93dc999c7737db1984ac2f166d59ba057a3e2bca4219e4e52a39046099d9dbe713c9ab478ae29744feb4fb7416ff813717e127cf94efc6c2ab39a3f4e08da02c7b1d186b9fd183ced034709c7e9c728c0290e106b31f220c874981032f30b172dec6bc", 0x99}], 0x3, &(0x7f00000009c0)=[@op={0x18}, @op={0x18}, @op={0x18}], 0x48, 0x8000}, 0x24048091) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000004000000000000aa080001"], 0x34}}, 0x2004c000) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="080017"], 0x2c}}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000d00)=ANY=[@ANYBLOB="aaaaabaac827ae1db9bb8414d546aaaaaa0011abfed3718c8a88030000000000000072a5cd64195e9c73f70903d3bab32c59fb639b2e5c3ef8538ee49a021b7227ebc98bc9a2c925624c05440a4abc3350834c69d6e083e692209c0b8b9c6bafc8637f5593512f87a3ef7e535a9a9827dabe0987458d5fa5d2dff758d4e1759df2cabe01df7f013f1e3aa4cb0bae1568ebfd785691d204ad7306"], 0x0) connect$unix(r8, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 50.724904558s ago: executing program 0 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000500)='GPL\x00', 0x5, 0x29e, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f0000000840)=[{{&(0x7f0000000880)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xc}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r9, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x29c}], 0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) 50.492323459s ago: executing program 2 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f00000004c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a8, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc0, 0x3, "f9df282008afc793ba79ef50011735bcf0fa16736ec7423cf563595d15cb0543f3fb4bf58248d0039008de6416a361043884cfad59de024a03b4c3416ad4e530f98bd8ac41cf29e370c9bec036f8e77b5d47071e1a903fe581745da538dfc5fb25396bb7284693164045da4269d7cb27015f052c5b7ebba74672a6f19900d11f68a5f27874ba9da9445f69519dc9de27aac54e6501abf7ec41301bc0186cd7b4dff53d1b4c1dde5d707383ab37d298c29ec711bacb8529d4468f236f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "78fa9475320a93cb318b57bede9a241414425937d0d1f53af5585c7cd477137d0ccf1e"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x140000}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74a}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x61f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20004841}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x21010000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x76dc) (async) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) (async) write$tun(r4, &(0x7f00000004c0)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a8, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc0, 0x3, "f9df282008afc793ba79ef50011735bcf0fa16736ec7423cf563595d15cb0543f3fb4bf58248d0039008de6416a361043884cfad59de024a03b4c3416ad4e530f98bd8ac41cf29e370c9bec036f8e77b5d47071e1a903fe581745da538dfc5fb25396bb7284693164045da4269d7cb27015f052c5b7ebba74672a6f19900d11f68a5f27874ba9da9445f69519dc9de27aac54e6501abf7ec41301bc0186cd7b4dff53d1b4c1dde5d707383ab37d298c29ec711bacb8529d4468f236f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "78fa9475320a93cb318b57bede9a241414425937d0d1f53af5585c7cd477137d0ccf1e"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x140000}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74a}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x61f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20004841}, 0x40) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x21010000) (async) 50.09120456s ago: executing program 2 (id=84): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="04000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0xffffffff, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 48.098642906s ago: executing program 1 (id=85): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000700)=0x2, 0x4) (async) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000700)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000780)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000800)="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", 0x104}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000780)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000800)="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", 0x104}], 0x1}}], 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74040000", @ANYRES16=r4, @ANYBLOB="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"], 0x474}, 0x1, 0x0, 0x0, 0x20000810}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x38, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x48004) (async) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x38, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x48004) sendmsg$sock(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a40)="c0c8974ea1b64c49d3b5cfe65bdc894e7f489fa4b0a2efe6be57498b58baa7e06991779e0896a03f6489353b9c77a276cdfdcb3e83500252c2bf6cbe5a739291fff5b5524ccde399586ff2a6d2b9be3f83549015", 0x54}, {&(0x7f0000000ac0)="09e0584ead8fa8d9ff70eb71c496d108ef9c0646b862f56a1531a1c5b8a59394c933704ae1fe43a488418594209cca5a6fa6949d7471552fc21e30e458f859e4ec00347f75c4f21c3c0dd079cfec5cb6417f382a5505b338589900e5bb967516a42941c5a41ef210e6af7746be7e66a2364e6d909b27fd427a01f6e48205b8ed7caadd807e0f4477c70d0be2c2980df7ce5ec20e8a0829fed1b7684d30d231da997ea472cb97068e93cab34ddfd5b717365493fa3a41945d0491414d79630bcc58c5bfa7852a77d8cb4e47f46f1d2e2a6e5298100a11aa47f4f87337aca3b5d1278ac389a1a6091b0a", 0xe9}, {&(0x7f0000000bc0)="b4cc2ad1e0fbdfe3efde92ca91d6acd67c4b966181f2c827f7bec86baac0e542dc1782effe92fa627421cba9da7cb75578b9f66238f050b2f7d59670e4004f25d10a05f779fc32b308a622059b102b68369aef49c1fa3329b2edf1325634af9c793681a3419afa41f76c8ada468279588f19426cf276f81f58af2674bfb6fe826fdf86f574f2abda3e69722715f44ea64d73f371e8f4d4a81aacc50451c385fcf713fbf9a9d302f545f7ab9c6ec902471a93bc0db60a7035edf5ac65e04bc012a11e53efafcd86003fc5512c296b4d3d92df87", 0xd3}, {&(0x7f0000000cc0)="1472e1934e467a17c904ce346b999694599977e3c0f0e454d53dba4be354d1359c6e1d21563bbbdfbf5dadb3f842d6ac8bcf7d5c45d00865e31c092623a74ede9ec225dac8e78a596dfb773297e03536c1ae82d34716ebf26089f27f0768ae56dc85ba2fc8ac126bf3555d0e5935c6c2268c4e6f770c3de2cb8ea8210c58ba3968f10d7b39b30491c57db5037d88a130ecd9fc6cac31b5abc5c5672c208b849ae9a8d19f45894a31f43def61", 0xac}, {&(0x7f0000000d80)="f8bdb1814e193ba6", 0x8}], 0x5, &(0x7f0000000e40)=[@mark={{0x14, 0x1, 0x24, 0xb8}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0xe5}}], 0x48}, 0xd0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x400, 0x2, 0x25dfdbfb, {{}, {}, {0x0, 0x11, 0x8b50}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x80) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000fc0)={0xffffffffffffffff}) openat$cgroup_type(r6, &(0x7f0000001040), 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xfffff342}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0x20000010) 47.960579619s ago: executing program 2 (id=86): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 47.905712126s ago: executing program 4 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00 \x00', @ANYRES16=r1, @ANYBLOB="010001000000000000000c0000001800018014000200697036677265300000000000000000000c0003800800020000000000"], 0x38}}, 0x0) syz_emit_ethernet(0x1b, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @remote, @void, {@generic={0x8917, "ded7badb97d0f8b8287f694585"}}}, 0x0) 47.675407097s ago: executing program 2 (id=88): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}, 0x1, 0x0, 0x0, 0x200400d4}, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x433) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x38}}, 0x40000) 47.572206797s ago: executing program 1 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xfd90, &(0x7f00000001c0)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="34000400420001000000000000000000030100000ffaffff1100010000090000005566778899aabb8100000004000280041a0e80"], 0x34}}, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)={[{0x6, 'rdma'}, {0x2b, 'cpu'}, {0x2b, 'rdma'}, {0x2d, 'rlimit'}, {0x2b, 'perf_event'}]}, 0x25) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x400002, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000380)=0x5101008) 47.530588601s ago: executing program 4 (id=90): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000400), &(0x7f0000000440)=@udp=r3}, 0x20) ioctl$int_in(r3, 0x5452, &(0x7f0000000480)=0x14f) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/149, 0x95}], 0x1}, 0x22) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x7a, &(0x7f0000000400)={0x0, 0x4, "179da51e"}, &(0x7f0000000600)=0xc) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x40}}, 0x0) 47.354386335s ago: executing program 1 (id=91): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000500)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback, 0xfffffff9}, 0x1c) write(r0, &(0x7f0000000580)="da", 0xffd1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x34}}, 0x88890) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) shutdown(r2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x6c, r5, 0x1, 0x170bd2b, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @empty, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000002000010026bd7000fbdbdf2502101000090000060600010008000200ac14142a08000b00060000000800010000ff0000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r3, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x2000000}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={r7}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x40}, 0x94) 0s ago: executing program 33 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000500)='GPL\x00', 0x5, 0x29e, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f0000000840)=[{{&(0x7f0000000880)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xc}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r9, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x29c}], 0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 65.828174][ T5599] cgroup: Unknown subsys name 'net' [ 65.940763][ T5599] cgroup: Unknown subsys name 'cpuset' [ 65.943448][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.252511][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.746883][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.751428][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.752339][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.757973][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.758608][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.760290][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.761412][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.762153][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.762466][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.764398][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.771833][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.772196][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.772413][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.772613][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.773515][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.774446][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.774922][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.775765][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.776295][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.781941][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.783139][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.790742][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.809430][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.832292][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.833531][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.335607][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.335678][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.691140][ T5611] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.703487][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.716604][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.732041][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.763060][ T5612] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.796568][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.901969][ T5614] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 72.071200][ T5610] infiniband rxe0: set active [ 72.072924][ T5610] infiniband rxe0: added rxe_eth0 [ 72.101475][ T5610] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 72.101501][ T5610] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 72.101519][ T5610] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 72.103109][ T5348] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.152545][ T5610] RDS/IB: rxe0: added [ 72.152839][ T5610] smc: adding ib device rxe0 with port count 1 [ 72.152917][ T5610] smc: ib device rxe0 port 1 has no pnetid [ 72.199945][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.219651][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.539065][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.669079][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.669879][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.670037][ T5611] bridge_slave_0: entered allmulticast mode [ 72.672173][ T5611] bridge_slave_0: entered promiscuous mode [ 72.676759][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.676868][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.676985][ T5611] bridge_slave_1: entered allmulticast mode [ 72.681220][ T5611] bridge_slave_1: entered promiscuous mode [ 72.847974][ T5621] Bluetooth: hci2: command tx timeout [ 72.848124][ T4932] Bluetooth: hci1: command tx timeout [ 72.848179][ T5621] Bluetooth: hci4: command tx timeout [ 72.849017][ T5619] Bluetooth: hci0: command tx timeout [ 72.849343][ T52] Bluetooth: hci3: command tx timeout [ 72.857913][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.925073][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.942246][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.087297][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.087404][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.087548][ T5612] bridge_slave_0: entered allmulticast mode [ 73.091689][ T5612] bridge_slave_0: entered promiscuous mode [ 73.098810][ T5611] team0: Port device team_slave_0 added [ 73.101642][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.103283][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.104109][ T5612] bridge_slave_1: entered allmulticast mode [ 73.105702][ T5612] bridge_slave_1: entered promiscuous mode [ 73.115455][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.115552][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.122357][ T5613] bridge_slave_0: entered allmulticast mode [ 73.129295][ T5613] bridge_slave_0: entered promiscuous mode [ 73.133015][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.134641][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.134808][ T5613] bridge_slave_1: entered allmulticast mode [ 73.138338][ T5613] bridge_slave_1: entered promiscuous mode [ 73.145005][ T5611] team0: Port device team_slave_1 added [ 73.266373][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.288076][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.289801][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.289813][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.289835][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.359321][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.385727][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.387540][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.387553][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.387573][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.479458][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.526180][ T5612] team0: Port device team_slave_0 added [ 73.540467][ T5613] team0: Port device team_slave_0 added [ 73.543581][ T5613] team0: Port device team_slave_1 added [ 73.563899][ T5612] team0: Port device team_slave_1 added [ 73.616591][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.616606][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.616634][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.660447][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.660463][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.660484][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.670496][ T5611] hsr_slave_0: entered promiscuous mode [ 73.671713][ T5611] hsr_slave_1: entered promiscuous mode [ 73.703210][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.703308][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.703430][ T5614] bridge_slave_0: entered allmulticast mode [ 73.710314][ T5614] bridge_slave_0: entered promiscuous mode [ 73.717622][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.717637][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.717657][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.733752][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.734950][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.735325][ T5614] bridge_slave_1: entered allmulticast mode [ 73.737700][ T5614] bridge_slave_1: entered promiscuous mode [ 73.739860][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.739872][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.739893][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.750855][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.952809][ T5613] hsr_slave_0: entered promiscuous mode [ 73.953828][ T5613] hsr_slave_1: entered promiscuous mode [ 73.954539][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 73.954645][ T5613] Cannot create hsr debugfs directory [ 73.969145][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.978001][ T5612] hsr_slave_0: entered promiscuous mode [ 73.978908][ T5612] hsr_slave_1: entered promiscuous mode [ 73.979623][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 73.979639][ T5612] Cannot create hsr debugfs directory [ 73.992911][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.096919][ T5614] team0: Port device team_slave_0 added [ 74.131542][ T5614] team0: Port device team_slave_1 added [ 74.237896][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.237911][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.237928][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.300519][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.300534][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.300552][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.492013][ T5614] hsr_slave_0: entered promiscuous mode [ 74.492596][ T5614] hsr_slave_1: entered promiscuous mode [ 74.493003][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 74.493014][ T5614] Cannot create hsr debugfs directory [ 74.586786][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.599232][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.630866][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.636065][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.653170][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.660120][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.660889][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.673487][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.867229][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.867369][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.867498][ T5610] bridge_slave_0: entered allmulticast mode [ 74.874324][ T5610] bridge_slave_0: entered promiscuous mode [ 74.880343][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.893390][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.893833][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.894051][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.894419][ T5610] bridge_slave_1: entered allmulticast mode [ 74.897240][ T5610] bridge_slave_1: entered promiscuous mode [ 74.917989][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.928546][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.933357][ T52] Bluetooth: hci3: command tx timeout [ 74.933389][ T52] Bluetooth: hci0: command tx timeout [ 74.933409][ T52] Bluetooth: hci4: command tx timeout [ 74.933429][ T52] Bluetooth: hci2: command tx timeout [ 74.939987][ T5619] Bluetooth: hci1: command tx timeout [ 74.946134][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.965239][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.975226][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.003278][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.013349][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.019083][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.068398][ T5610] team0: Port device team_slave_0 added [ 75.086904][ T5610] team0: Port device team_slave_1 added [ 75.138550][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.138564][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.138582][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.142123][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.145823][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.146464][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.152252][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.158518][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.158532][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.158552][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.237300][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.261944][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.290459][ T5610] hsr_slave_0: entered promiscuous mode [ 75.291077][ T5610] hsr_slave_1: entered promiscuous mode [ 75.291467][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 75.291485][ T5610] Cannot create hsr debugfs directory [ 75.291636][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.294658][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.433696][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.447418][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.452454][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.453158][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.455225][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.456336][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.461730][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.512371][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.515565][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.608524][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.644037][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.644138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.698285][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.698374][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.736495][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.741159][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.753903][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.756482][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.779167][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.782583][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.783216][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.786745][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.822100][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.867347][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.903227][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.925846][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.925907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.960982][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.965539][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.989739][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.989840][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.046223][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.046328][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.091177][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.095041][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.095141][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.154969][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.155075][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.203491][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.203562][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.335884][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.464757][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.494708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.494794][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.530600][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.530702][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.783700][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.007888][ T52] Bluetooth: hci2: command tx timeout [ 77.007907][ T5622] Bluetooth: hci4: command tx timeout [ 77.007920][ T52] Bluetooth: hci0: command tx timeout [ 77.007931][ T5622] Bluetooth: hci3: command tx timeout [ 77.008022][ T5619] Bluetooth: hci1: command tx timeout [ 77.023866][ T5611] veth0_vlan: entered promiscuous mode [ 77.073809][ T5611] veth1_vlan: entered promiscuous mode [ 77.219262][ T5611] veth0_macvtap: entered promiscuous mode [ 77.254495][ T5611] veth1_macvtap: entered promiscuous mode [ 77.370522][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.403498][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.535921][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.692694][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.692720][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.718289][ T149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.718445][ T149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.718480][ T149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.725525][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.749127][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.862980][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.863000][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.909041][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.990526][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.049630][ T5611] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.070684][ T5612] veth0_vlan: entered promiscuous mode [ 78.138037][ T5612] veth1_vlan: entered promiscuous mode [ 78.184102][ T5814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.203335][ T5614] veth0_vlan: entered promiscuous mode [ 78.235990][ T5613] veth0_vlan: entered promiscuous mode [ 78.251081][ T5610] veth0_vlan: entered promiscuous mode [ 78.252632][ T5612] veth0_macvtap: entered promiscuous mode [ 78.261816][ T5614] veth1_vlan: entered promiscuous mode [ 78.285087][ T5612] veth1_macvtap: entered promiscuous mode [ 78.301851][ T5613] veth1_vlan: entered promiscuous mode [ 78.306580][ T5610] veth1_vlan: entered promiscuous mode [ 78.349366][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.355654][ T5816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 78.386414][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.398386][ T5816] netlink: 'syz.3.6': attribute type 21 has an invalid length. [ 78.405783][ T5816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6'. [ 78.408437][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 78.425244][ T5614] veth0_macvtap: entered promiscuous mode [ 78.430960][ T5614] veth1_macvtap: entered promiscuous mode [ 78.434433][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.435633][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.435696][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.435757][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.453921][ T5613] veth0_macvtap: entered promiscuous mode [ 78.526193][ T5613] veth1_macvtap: entered promiscuous mode [ 78.564684][ T5610] veth0_macvtap: entered promiscuous mode [ 78.572749][ T5610] veth1_macvtap: entered promiscuous mode [ 78.595613][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.643261][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.656405][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.656424][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.659510][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.719881][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.723979][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.790944][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.792607][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.792624][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.827648][ T1051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.827691][ T1051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.827724][ T1051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.827756][ T1051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.827787][ T1051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.827817][ T1051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.828113][ T1051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.842239][ T5827] netlink: 'syz.3.8': attribute type 3 has an invalid length. [ 78.890299][ T1051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.907265][ T5828] netlink: 'syz.3.8': attribute type 3 has an invalid length. [ 79.087669][ T5619] Bluetooth: hci3: command tx timeout [ 79.087701][ T5619] Bluetooth: hci4: command tx timeout [ 79.087723][ T5619] Bluetooth: hci1: command tx timeout [ 79.087743][ T5619] Bluetooth: hci0: command tx timeout [ 79.087761][ T5619] Bluetooth: hci2: command tx timeout [ 79.104305][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.104323][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.183549][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.183569][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.251863][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 79.325462][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.325482][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.344177][ T5843] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 79.347340][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.347470][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.347503][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.347533][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.405632][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.405653][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.519557][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.519576][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.630405][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.630424][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.750458][ T5861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.750496][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.851584][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 79.852038][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 79.852327][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 79.852612][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 79.852889][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 79.853513][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 79.853801][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 79.854139][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 79.854433][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 79.854772][ T5870] ip_tables: iptables: counters copy to user failed while replacing table [ 79.869291][ T5867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 80.469739][ T5902] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21'. [ 80.804153][ T5922] netlink: 13 bytes leftover after parsing attributes in process `syz.4.28'. [ 80.898815][ T5927] netlink: 'syz.1.30': attribute type 32 has an invalid length. [ 80.962414][ T5934] netlink: 'syz.4.31': attribute type 7 has an invalid length. [ 81.008969][ T5940] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 81.132720][ T5940] Cannot find add_set index 4 as target [ 81.657169][ T5955] xt_IDLETIMER: label is empty or not nul-terminated [ 81.736105][ T5720] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.145320][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.784775][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.366303][ T5985] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 83.584654][ T6012] __nla_validate_parse: 41 callbacks suppressed [ 83.584676][ T6012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.47'. [ 83.622124][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 83.701280][ T6017] veth1_to_bond: entered allmulticast mode [ 83.773165][ T6016] veth1_to_bond: left allmulticast mode [ 83.791503][ T6019] netlink: 'syz.2.50': attribute type 8 has an invalid length. [ 84.377074][ C1] sched: DL replenish lagged too much [ 86.699078][ T193] cfg80211: failed to load regulatory.db [ 93.422070][ T6049] Unsupported ieee802154 address type: 0 [ 93.864402][ T6056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 93.914690][ T6056] x_tables: duplicate underflow at hook 2 [ 95.011693][ T5621] Bluetooth: hci4: command tx timeout [ 95.240001][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.58'. [ 95.480840][ T6065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.60'. [ 95.537631][ T6067] Illegal XDP return value 4294967274 on prog (id 46) dev N/A, expect packet loss! [ 95.645401][ T6065] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 95.764115][ T6065] bond1 (unregistering): Released all slaves [ 95.888503][ T6080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.63'. [ 95.890881][ T6075] netlink: 'syz.1.64': attribute type 5 has an invalid length. [ 95.935007][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.022770][ T6083] netlink: 44 bytes leftover after parsing attributes in process `syz.4.63'. [ 96.145953][ T6089] batman_adv: batadv0: Adding interface: gretap1 [ 96.145969][ T6089] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.145994][ T6089] batman_adv: batadv0: Interface activated: gretap1 [ 96.321185][ T6095] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 96.359575][ T6095] team0: Port device dummy0 added [ 96.465419][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 96.646066][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 96.905896][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 96.949103][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 97.000084][ T6111] netlink: 72 bytes leftover after parsing attributes in process `syz.4.71'. [ 97.174610][ T6117] Zero length message leads to an empty skb [ 97.628409][ T6125] batman_adv: batadv0: Adding interface: syzkaller0 [ 97.628426][ T6125] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.628451][ T6125] batman_adv: batadv0: Interface activated: syzkaller0 [ 98.921111][ T6121] infiniband syz1: set down [ 98.921184][ T6121] infiniband syz1: added ipvlan1 [ 98.924675][ T6121] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 98.930285][ T6121] infiniband syz1: Couldn't open port 1 [ 98.930528][ T6121] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 98.930556][ T6121] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 98.930590][ T6121] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 99.057555][ T6121] RDS/IB: syz1: added [ 99.057610][ T6121] smc: adding ib device syz1 with port count 1 [ 99.057627][ T6121] smc: ib device syz1 port 1 has no pnetid [ 100.359182][ T6125] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 100.733121][ T6125] batman_adv: batadv0: Removing interface: syzkaller0 [ 101.149110][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.150537][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.151100][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.153108][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.153852][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.940197][ T6133] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.247236][ T5621] Bluetooth: hci5: command tx timeout [ 104.002793][ T6149] __nla_validate_parse: 2 callbacks suppressed [ 104.002812][ T6149] netlink: 220 bytes leftover after parsing attributes in process `syz.4.78'. [ 104.113304][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.113481][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.113615][ T6133] bridge_slave_0: entered allmulticast mode [ 104.138367][ T6133] bridge_slave_0: entered promiscuous mode [ 104.150614][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.150787][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.150962][ T6133] bridge_slave_1: entered allmulticast mode [ 104.154324][ T6133] bridge_slave_1: entered promiscuous mode [ 104.192723][ T6153] netlink: 60 bytes leftover after parsing attributes in process `syz.4.79'. [ 104.228198][ T6153] netlink: 60 bytes leftover after parsing attributes in process `syz.4.79'. [ 104.263732][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.278918][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.352987][ T6133] team0: Port device team_slave_0 added [ 104.374816][ T6133] team0: Port device team_slave_1 added [ 104.501650][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.501667][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.501687][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.504745][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.504759][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.505094][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.669685][ T6133] hsr_slave_0: entered promiscuous mode [ 104.670769][ T6133] hsr_slave_1: entered promiscuous mode [ 104.671479][ T6133] debugfs: 'hsr0' already exists in 'hsr' [ 104.671496][ T6133] Cannot create hsr debugfs directory [ 105.327311][ T5621] Bluetooth: hci5: command tx timeout [ 105.742573][ T6133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.799304][ T6133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.800444][ T6133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.833219][ T6133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.834419][ T6133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.882197][ T6133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.883402][ T6133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.918589][ T6133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.038632][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.070063][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.085462][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.085571][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.113807][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.113922][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.706747][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.051770][ T6133] veth0_vlan: entered promiscuous mode [ 107.065724][ T6133] veth1_vlan: entered promiscuous mode [ 107.118679][ T6133] veth0_macvtap: entered promiscuous mode [ 107.124762][ T6133] veth1_macvtap: entered promiscuous mode [ 107.163038][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.217708][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.308196][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.309042][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.309076][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.309106][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.407224][ T5621] Bluetooth: hci5: command tx timeout [ 107.450010][ T6183] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 107.765576][ T6201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.82'. [ 108.028000][ T6204] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 109.487218][ T5621] Bluetooth: hci5: command tx timeout [ 110.762748][ T6224] netlink: 'syz.4.90': attribute type 1 has an invalid length. [ 134.504677][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.518335][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.380337][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393824][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.945501][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 197.945543][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 197.945567][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 210.209509][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.851467][ T4932] Bluetooth: hci4: command 0x0406 tx timeout [ 230.478555][ T4932] Bluetooth: hci5: command 0x0406 tx timeout [ 255.771191][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.778377][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.620827][ T32] INFO: task syz-executor:6133 blocked for more than 144 seconds. [ 271.620852][ T32] Not tainted syzkaller #0 [ 271.620862][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.620870][ T32] task:syz-executor state:D stack:22312 pid:6133 tgid:6133 ppid:6132 task_flags:0x400140 flags:0x00080000 [ 271.620947][ T32] Call Trace: [ 271.620958][ T32] [ 271.620972][ T32] __schedule+0x17db/0x58f0 [ 271.621044][ T32] ? __pfx___schedule+0x10/0x10 [ 271.621074][ T32] ? schedule+0x90/0x2b0 [ 271.621097][ T32] schedule+0x164/0x2b0 [ 271.621118][ T32] schedule_preempt_disabled+0x13/0x30 [ 271.621137][ T32] __mutex_lock+0x7c1/0x1550 [ 271.621157][ T32] ? fast_dput+0x2a4/0x690 [ 271.621192][ T32] ? __mutex_lock+0x5d4/0x1550 [ 271.621217][ T32] ? ieee80211_register_hw+0x3deb/0x4b00 [ 271.621244][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 271.621264][ T32] ? _raw_spin_unlock+0x28/0x50 [ 271.621292][ T32] ? __debugfs_create_file+0x34f/0x400 [ 271.621319][ T32] ? debugfs_create_file_full+0x3f/0x60 [ 271.621344][ T32] ieee80211_register_hw+0x3deb/0x4b00 [ 271.621378][ T32] ? ieee80211_register_hw+0x1931/0x4b00 [ 271.621424][ T32] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 271.621448][ T32] ? __asan_memset+0x22/0x50 [ 271.621468][ T32] ? __hrtimer_setup+0x1b7/0x260 [ 271.621494][ T32] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 271.621522][ T32] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 271.621579][ T32] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 271.621607][ T32] ? trace_kmalloc+0x2a/0xf0 [ 271.621635][ T32] hwsim_new_radio_nl+0xd8b/0xf90 [ 271.621678][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 271.621714][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 271.621756][ T32] ? bpf_lsm_capable+0x9/0x20 [ 271.621775][ T32] ? security_capable+0x7e/0x2c0 [ 271.621807][ T32] genl_rcv_msg+0x614/0x7a0 [ 271.621842][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.621868][ T32] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 271.621909][ T32] netlink_rcv_skb+0x226/0x4a0 [ 271.621933][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.621962][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.622000][ T32] ? down_read+0x2be/0x330 [ 271.622033][ T32] genl_rcv+0x28/0x40 [ 271.622058][ T32] netlink_unicast+0x8ef/0xa80 [ 271.622097][ T32] netlink_sendmsg+0x813/0xb40 [ 271.622130][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.622162][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 271.622190][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.622212][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 271.622240][ T32] __sys_sendto+0x408/0x5a0 [ 271.622264][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 271.622290][ T32] ? errseq_sample+0x40/0x70 [ 271.622336][ T32] ? rcu_is_watching+0x16/0xb0 [ 271.622367][ T32] __x64_sys_sendto+0xde/0x100 [ 271.622389][ T32] do_syscall_64+0x166/0x520 [ 271.622410][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.622430][ T32] ? clear_bhb_loop+0x70/0xc0 [ 271.622453][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.622472][ T32] RIP: 0033:0x7fc0c235ed8e [ 271.622498][ T32] RSP: 002b:00007ffe9a310a08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 271.622517][ T32] RAX: ffffffffffffffda RBX: 0000555567dbd500 RCX: 00007fc0c235ed8e [ 271.622530][ T32] RDX: 0000000000000024 RSI: 00007fc0c3154670 RDI: 0000000000000003 [ 271.622539][ T32] RBP: 0000000000000001 R08: 00007ffe9a310a84 R09: 000000000000000c [ 271.622549][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 271.622559][ T32] R13: 0000000000000000 R14: 00007fc0c3154670 R15: 0000000000000000 [ 271.622586][ T32] [ 271.622600][ T32] INFO: task syz.2.88:6222 blocked for more than 144 seconds. [ 271.622613][ T32] Not tainted syzkaller #0 [ 271.622621][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.622628][ T32] task:syz.2.88 state:D stack:27808 pid:6222 tgid:6216 ppid:5610 task_flags:0x400040 flags:0x00080002 [ 271.622670][ T32] Call Trace: [ 271.622676][ T32] [ 271.622686][ T32] __schedule+0x17db/0x58f0 [ 271.622734][ T32] ? __pfx___schedule+0x10/0x10 [ 271.622763][ T32] ? schedule+0x90/0x2b0 [ 271.622786][ T32] schedule+0x164/0x2b0 [ 271.622807][ T32] schedule_preempt_disabled+0x13/0x30 [ 271.622825][ T32] __mutex_lock+0x7c1/0x1550 [ 271.622851][ T32] ? __mutex_lock+0x5d4/0x1550 [ 271.622874][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 271.622901][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 271.622920][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 271.622954][ T32] ? radix_tree_lookup+0x240/0x290 [ 271.622977][ T32] genl_rcv_msg+0x10b/0x7a0 [ 271.623087][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.623128][ T32] netlink_rcv_skb+0x226/0x4a0 [ 271.623152][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.623180][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.623216][ T32] ? down_read+0x2be/0x330 [ 271.623248][ T32] genl_rcv+0x28/0x40 [ 271.623272][ T32] netlink_unicast+0x8ef/0xa80 [ 271.623310][ T32] netlink_sendmsg+0x813/0xb40 [ 271.623344][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.623375][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 271.623402][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.623424][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 271.623452][ T32] __sys_sendto+0x408/0x5a0 [ 271.623483][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 271.623540][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 271.623565][ T32] __x64_sys_sendto+0xde/0x100 [ 271.623587][ T32] do_syscall_64+0x166/0x520 [ 271.623608][ T32] ? trace_irq_disable+0x3b/0x140 [ 271.623627][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.623646][ T32] ? clear_bhb_loop+0x70/0xc0 [ 271.623669][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.623688][ T32] RIP: 0033:0x7f0e49f5ed8e [ 271.623705][ T32] RSP: 002b:00007f0e4ae8ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 271.623723][ T32] RAX: ffffffffffffffda RBX: 00007f0e4ae8e6c0 RCX: 00007f0e49f5ed8e [ 271.623736][ T32] RDX: 0000000000000020 RSI: 00007f0e4ae8d000 RDI: 0000000000000006 [ 271.623748][ T32] RBP: 0000000000000000 R08: 00007f0e4ae8cf04 R09: 000000000000000c [ 271.623759][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 271.623770][ T32] R13: 00007f0e4ae8cf58 R14: 00007f0e4ae8d000 R15: 0000000000000000 [ 271.623801][ T32] [ 271.623809][ T32] INFO: task syz.4.90:6224 blocked for more than 144 seconds. [ 271.623821][ T32] Not tainted syzkaller #0 [ 271.623830][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.623838][ T32] task:syz.4.90 state:D stack:26152 pid:6224 tgid:6219 ppid:5613 task_flags:0x400140 flags:0x00080002 [ 271.623882][ T32] Call Trace: [ 271.623888][ T32] [ 271.623900][ T32] __schedule+0x17db/0x58f0 [ 271.623934][ T32] ? __pfx__printk+0x10/0x10 [ 271.623971][ T32] ? __pfx___schedule+0x10/0x10 [ 271.624020][ T32] ? schedule+0x90/0x2b0 [ 271.624044][ T32] schedule+0x164/0x2b0 [ 271.624065][ T32] schedule_preempt_disabled+0x13/0x30 [ 271.624084][ T32] __mutex_lock+0x7c1/0x1550 [ 271.624111][ T32] ? __mutex_lock+0x5d4/0x1550 [ 271.624136][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 271.624157][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 271.624188][ T32] ? ns_capable+0x89/0xe0 [ 271.624214][ T32] ? rtnl_nets_add+0x16c/0x300 [ 271.624231][ T32] ? refcount_inc+0x46/0x70 [ 271.624259][ T32] rtnl_newlink+0xc10/0x1c30 [ 271.624286][ T32] ? netlink_unicast+0x8c1/0xa80 [ 271.624307][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 271.624323][ T32] ? do_syscall_64+0x166/0x520 [ 271.624343][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.624399][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 271.624421][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 271.624446][ T32] ? nlmon_xmit+0xb0/0x100 [ 271.624470][ T32] ? kmem_cache_free+0x182/0x650 [ 271.624503][ T32] ? __lock_acquire+0x747/0x2de0 [ 271.624534][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 271.624559][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 271.624579][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 271.624598][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 271.624631][ T32] ? lock_acquire+0x115/0x350 [ 271.624666][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 271.624683][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 271.624706][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 271.624724][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.624750][ T32] ? ref_tracker_free+0x689/0x830 [ 271.624780][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 271.624817][ T32] netlink_rcv_skb+0x226/0x4a0 [ 271.624841][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.624871][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.624907][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.624930][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.624958][ T32] netlink_unicast+0x8ef/0xa80 [ 271.624998][ T32] netlink_sendmsg+0x813/0xb40 [ 271.625037][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.625068][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 271.625095][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.625117][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 271.625144][ T32] ____sys_sendmsg+0x54e/0x850 [ 271.625170][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.625200][ T32] ? import_iovec+0x73/0xa0 [ 271.625232][ T32] ___sys_sendmsg+0x2a5/0x360 [ 271.625251][ T32] ? __lock_acquire+0x747/0x2de0 [ 271.625276][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.625300][ T32] ? futex_wait+0x2a2/0x390 [ 271.625350][ T32] ? __fget_files+0x2a/0x420 [ 271.625367][ T32] ? __fget_files+0x3a2/0x420 [ 271.625395][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 271.625418][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.625461][ T32] do_syscall_64+0x166/0x520 [ 271.625482][ T32] ? trace_irq_disable+0x3b/0x140 [ 271.625501][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.625519][ T32] ? clear_bhb_loop+0x70/0xc0 [ 271.625543][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.625561][ T32] RIP: 0033:0x7fcb4cf9e559 [ 271.625577][ T32] RSP: 002b:00007fcb4dd9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.625594][ T32] RAX: ffffffffffffffda RBX: 00007fcb4d226090 RCX: 00007fcb4cf9e559 [ 271.625607][ T32] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 271.625619][ T32] RBP: 00007fcb4d0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 271.625630][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.625641][ T32] R13: 00007fcb4d226128 R14: 00007fcb4d226090 R15: 00007ffc4f046bb8 [ 271.625672][ T32] [ 271.625691][ T32] [ 271.625691][ T32] Showing all locks held in the system: [ 271.625698][ T32] locks held by kthreadd/2: 2, last CPU#1: [ 271.625711][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 271.625758][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 271.625807][ T32] locks held by kworker/0:0/9: 3, on CPU#0: [ 271.625819][ T32] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.625869][ T32] #1: ffffc900000e7c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.625917][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 [ 271.625962][ T32] locks held by kworker/u8:0/12: 6, on CPU#1: [ 271.625974][ T32] #0: ffff88801d2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.626029][ T32] #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.626077][ T32] #2: ffffffff91247468 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 271.626118][ T32] #3: ffff888027fe4128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 271.626162][ T32] #4: ffff888027fe3258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 271.626205][ T32] #5: ffffffff8fd62b78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 271.626255][ T32] locks held by kworker/u8:1/13: 3, last CPU#1: [ 271.626268][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.626316][ T32] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.626365][ T32] #2: ffff888055900800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 271.626418][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 271.626431][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 271.626475][ T32] locks held by kworker/u8:2/43: 3, last CPU#1: [ 271.626487][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.626535][ T32] #1: ffffc90000b37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.626582][ T32] #2: ffff888055150800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 271.626633][ T32] locks held by kworker/u8:3/50: 5, last CPU#1: [ 271.626645][ T32] #0: ffff88803410e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.626693][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.626742][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 271.626793][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x203/0x1650 [ 271.626840][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 271.626891][ T32] locks held by kworker/u9:0/52: 5, on CPU#1: [ 271.626904][ T32] #0: ffff8880566a0940 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.644485][ T32] #1: ffffc90000bd7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.644539][ T32] #2: ffff888052530ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 271.644590][ T32] #3: ffff8880525300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 271.644636][ T32] #4: ffffffff913dcc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 271.644684][ T32] locks held by kworker/u8:4/59: 3, last CPU#1: [ 271.644697][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.644746][ T32] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.644795][ T32] #2: ffff888056100800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 271.644846][ T32] locks held by kworker/u8:5/81: 3, last CPU#1: [ 271.644859][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.644908][ T32] #1: ffffc900020bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.644956][ T32] #2: ffff888055850800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 271.645011][ T32] locks held by kswapd0/87: 2, last CPU#1: [ 271.645023][ T32] #0: ffffffff8fe903a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa08/0x32c0 [ 271.645072][ T32] #1: ffff8880377660e8 (&type->s_umount_key#55){.+.+}-{4:4}, at: super_cache_scan+0x94/0x4a0 [ 271.645125][ T32] locks held by kworker/u8:6/149: 3, last CPU#1: [ 271.645138][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645186][ T32] #1: ffffc90002ecfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645235][ T32] #2: ffff888055000800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 271.645285][ T32] locks held by kworker/u8:7/156: 3, last CPU#1: [ 271.645298][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645346][ T32] #1: ffffc90002f5fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645394][ T32] #2: ffff888055d60800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 271.645444][ T32] locks held by kworker/0:2/193: 2, last CPU#0: [ 271.645457][ T32] #0: ffff888036bf5d40 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645505][ T32] #1: ffffc9000304fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645569][ T32] locks held by kworker/u8:8/1051: 3, last CPU#1: [ 271.645581][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645630][ T32] #1: ffffc900050a7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645679][ T32] #2: ffff888055a20800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 271.645732][ T32] locks held by kworker/u8:9/1397: 3, on CPU#0: [ 271.645744][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645792][ T32] #1: ffffc90005c37c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645840][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 271.645904][ T32] locks held by kworker/R-bat_e/3225: 6, last CPU#0: [ 271.645920][ T32] #0: ffff888034523940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.645972][ T32] #1: ffffc9000e3f7c20 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 271.646026][ T32] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 271.646076][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 271.646122][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 271.646166][ T32] #5: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 271.646214][ T32] locks held by udevd/4982: 1, last CPU#1: [ 271.646226][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 271.646272][ T32] locks held by dhcpcd/5276: 2, last CPU#1: [ 271.646284][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 271.646328][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 271.646374][ T32] locks held by dhcpcd/5277: 5, last CPU#1: [ 271.646387][ T32] #0: ffffffff8fe36570 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 271.646434][ T32] #1: ffff88807c574080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 271.646481][ T32] #2: ffff888079958340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 271.646528][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 271.646572][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 271.646618][ T32] locks held by getty/5368: 2, on CPU#1: [ 271.646630][ T32] #0: ffff8880375f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 271.646676][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 271.646728][ T32] locks held by syz-executor/5599: 2, last CPU#1: [ 271.646741][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 271.646785][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 271.646832][ T32] locks held by syz-executor/5612: 3, last CPU#1: [ 271.646845][ T32] #0: ffffffff904f2b38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 271.646893][ T32] #1: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 273.407293][ T32] #2: ffff8880b853bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 273.407362][ T32] locks held by syz-executor/5614: 1, last CPU#1: [ 273.407375][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 273.407430][ T32] locks held by kworker/u9:2/5619: 4, on CPU#1: [ 273.407443][ T32] #0: ffff88802a958940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.407491][ T32] #1: ffffc9000446fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.407540][ T32] #2: ffff888035aa8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 273.407590][ T32] #3: ffff888035aa80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 273.407637][ T32] locks held by kworker/u9:4/5622: 7, on CPU#1: [ 273.407649][ T32] #0: ffff88807ff33140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.407697][ T32] #1: ffffc900044efc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.407746][ T32] #2: ffff8880344d8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 273.407795][ T32] #3: ffff8880344d80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 273.407840][ T32] #4: ffffffff913dcc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 273.407884][ T32] #5: ffff88807edbf2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 273.407935][ T32] #6: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 273.407987][ T32] locks held by kworker/u9:6/5625: 5, on CPU#0: [ 273.407999][ T32] #0: ffff88807ff31140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.408047][ T32] #1: ffffc9000452fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.408096][ T32] #2: ffff8880344dcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 273.408145][ T32] #3: ffff8880344dc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 273.408190][ T32] #4: ffffffff913dcc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 273.408239][ T32] locks held by kworker/0:4/5716: 2, last CPU#0: [ 273.408252][ T32] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.408300][ T32] #1: ffffc9000496fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.408348][ T32] locks held by kworker/0:5/5720: 2, last CPU#0: [ 273.408360][ T32] #0: ffff888037609940 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.408409][ T32] #1: ffffc9000499fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.408478][ T32] locks held by kworker/1:3/5740: 4, last CPU#1: [ 273.408490][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.408538][ T32] #1: ffffc90004adfc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.408587][ T32] #2: ffff888055125250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 273.408633][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 273.408681][ T32] locks held by syz-executor/6133: 3, on CPU#0: [ 273.408694][ T32] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 273.408743][ T32] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 273.408793][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3deb/0x4b00 [ 273.408840][ T32] locks held by syz.2.88/6217: 2, on CPU#1: [ 273.408852][ T32] #0: ffff88802936a0e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 273.408897][ T32] #1: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 273.408946][ T32] locks held by syz.2.88/6222: 2, on CPU#0: [ 273.408958][ T32] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 273.409006][ T32] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 273.409056][ T32] locks held by syz.4.90/6224: 2, on CPU#0: [ 273.409067][ T32] #0: ffffffff917aab40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 273.409115][ T32] #1: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 273.409156][ T32] locks held by kworker/u8:10/6230: 3, last CPU#1: [ 273.409169][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.409217][ T32] #1: ffffc90009f07c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.409266][ T32] #2: ffff888056110800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 273.409317][ T32] locks held by kworker/u8:11/6231: 3, last CPU#1: [ 273.409329][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.409377][ T32] #1: ffffc90005b07c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.409431][ T32] #2: ffff888055ec0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 273.409484][ T32] [ 273.409489][ T32] ============================================= [ 273.409489][ T32] [ 273.409513][ T32] NMI backtrace for cpu 1 [ 273.409539][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 273.409578][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.409598][ T32] Call Trace: [ 273.409613][ T32] [ 273.409630][ T32] dump_stack_lvl+0xe8/0x150 [ 273.409686][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 273.409742][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 273.409805][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 273.409869][ T32] sys_info+0x135/0x170 [ 273.409916][ T32] watchdog+0xfd7/0x1030 [ 273.409946][ T32] ? watchdog+0x1c7/0x1030 [ 273.409973][ T32] kthread+0x38b/0x480 [ 273.409992][ T32] ? __pfx_watchdog+0x10/0x10 [ 273.410009][ T32] ? __pfx_kthread+0x10/0x10 [ 273.410028][ T32] ret_from_fork+0x514/0xb70 [ 273.410050][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 273.410067][ T32] ? __switch_to+0xc89/0x1420 [ 273.410095][ T32] ? __pfx_kthread+0x10/0x10 [ 273.410114][ T32] ret_from_fork_asm+0x1a/0x30 [ 273.410147][ T32] [ 273.410154][ T32] Sending NMI from CPU 1 to CPUs 0: [ 273.410190][ C0] NMI backtrace for cpu 0 [ 273.410206][ C0] CPU: 0 UID: 0 PID: 3225 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 273.410251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.410276][ C0] Workqueue: bat_events batadv_tt_purge [ 273.410333][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x80 [ 273.410364][ C0] Code: 00 00 00 48 8b 3d e4 bf ab 0c 48 89 de 5b e9 23 5e 65 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 04 24 65 48 8b 0d 78 ff cd 12 65 48 8b 15 78 ff cd 12 f7 c2 [ 273.410379][ C0] RSP: 0018:ffffc90000006c80 EFLAGS: 00000246 [ 273.410395][ C0] RAX: ffffffff8a92bc6d RBX: ffffc900000071c0 RCX: ffffc900000071c0 [ 273.410410][ C0] RDX: ffff888034009400 RSI: ffffc90000006eb0 RDI: ffff88807e2927c0 [ 273.410423][ C0] RBP: ffffc90000006e30 R08: ffffc90000006d98 R09: 0000000000000000 [ 273.410437][ C0] R10: ffffc90000006c20 R11: fffff52000000d86 R12: ffff88807e2927c0 [ 273.410451][ C0] R13: ffff88807e293698 R14: ffff888034009400 R15: ffffc90000006eb0 [ 273.410466][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 273.410481][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.410494][ C0] CR2: 00007ffcba3aefc8 CR3: 000000007de54000 CR4: 00000000003526f0 [ 273.410511][ C0] Call Trace: [ 273.410517][ C0] [ 273.410523][ C0] trace_fib6_table_lookup+0x1b/0x1f0 [ 273.410555][ C0] fib6_table_lookup+0xa8f/0xae0 [ 273.410595][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 273.410628][ C0] ip6_pol_route+0x229/0x14d0 [ 273.410656][ C0] ? ip6_pol_route+0x163/0x14d0 [ 273.410685][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 273.410715][ C0] ? __lock_acquire+0x747/0x2de0 [ 273.410741][ C0] fib6_rule_lookup+0x21a/0x6e0 [ 273.410770][ C0] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 273.410791][ C0] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 273.410820][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 273.410846][ C0] ? nft_do_chain+0x48d/0x1b10 [ 273.410869][ C0] ? lock_acquire+0x115/0x350 [ 273.410898][ C0] ip6_route_output_flags+0x364/0x5d0 [ 273.410932][ C0] ? ip6_route_output_flags+0x2e/0x5d0 [ 273.410963][ C0] __nf_ip6_route+0x42/0xd0 [ 273.410990][ C0] synproxy_send_tcp_ipv6+0x274/0x730 [ 273.411013][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 273.411032][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 273.411060][ C0] ? synproxy_send_client_synack_ipv6+0x357/0xcd0 [ 273.411082][ C0] synproxy_send_client_synack_ipv6+0x83f/0xcd0 [ 273.411110][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 273.411131][ C0] ? nft_tproxy_eval+0x1034/0x1c80 [ 273.411149][ C0] ? synproxy_pernet+0x45/0x270 [ 273.411173][ C0] nft_synproxy_eval_v6+0x362/0x4e0 [ 273.411197][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 273.411220][ C0] ? nf_ip6_checksum+0x215/0x320 [ 273.411240][ C0] nft_synproxy_do_eval+0x3ff/0x5d0 [ 273.411264][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 273.411285][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 273.411312][ C0] ? ieee80211_rx_handlers+0xc983/0xc9f0 [ 273.411334][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 273.411359][ C0] ? ieee80211_rx_handlers+0xc983/0xc9f0 [ 273.411385][ C0] nft_do_chain+0x48d/0x1b10 [ 273.411406][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 273.411438][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 273.411480][ C0] nft_do_chain_inet+0x360/0x4b0 [ 273.411502][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 273.411521][ C0] ? nf_nat_ipv6_local_in+0x157/0x660 [ 273.411551][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 273.411577][ C0] ? lock_acquire+0x115/0x350 [ 273.411599][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 273.411620][ C0] nf_hook_slow+0xc5/0x220 [ 273.411649][ C0] NF_HOOK+0x21f/0x3c0 [ 273.411672][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 273.411694][ C0] ? NF_HOOK+0x9e/0x3c0 [ 273.411714][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 273.411736][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 273.411765][ C0] ip6_input+0x16a/0x270 [ 273.411785][ C0] ? ip6_input+0x23/0x270 [ 273.411808][ C0] NF_HOOK+0x336/0x3c0 [ 273.411829][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 273.411850][ C0] ? NF_HOOK+0x9e/0x3c0 [ 273.411870][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 273.411892][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 273.411925][ C0] process_backlog+0x795/0x18b0 [ 273.411957][ C0] ? process_backlog+0x3de/0x18b0 [ 273.411992][ C0] __napi_poll+0xaa/0x330 [ 273.412019][ C0] net_rx_action+0x61d/0xf50 [ 273.412053][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 273.412097][ C0] handle_softirqs+0x226/0x860 [ 273.412123][ C0] ? do_softirq+0x77/0xd0 [ 273.412150][ C0] ? batadv_tt_purge+0x4ae/0xa10 [ 273.412177][ C0] do_softirq+0x77/0xd0 [ 273.412201][ C0] [ 273.412207][ C0] [ 273.412213][ C0] __local_bh_enable_ip+0x100/0x140 [ 273.412239][ C0] batadv_tt_purge+0x4ae/0xa10 [ 273.412270][ C0] ? process_scheduled_works+0x97a/0x1630 [ 273.412296][ C0] process_scheduled_works+0xc3d/0x1630 [ 273.412338][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.412362][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 273.412394][ C0] ? assign_work+0x3af/0x5d0 [ 273.412421][ C0] rescuer_thread+0x7c5/0x10e0 [ 273.412452][ C0] ? rescuer_thread+0xb8/0x10e0 [ 273.412490][ C0] kthread+0x38b/0x480 [ 273.412508][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 273.412539][ C0] ? __pfx_kthread+0x10/0x10 [ 273.412558][ C0] ret_from_fork+0x514/0xb70 [ 273.412577][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 273.412595][ C0] ? __switch_to+0xc89/0x1420 [ 273.412622][ C0] ? __pfx_kthread+0x10/0x10 [ 273.412641][ C0] ret_from_fork_asm+0x1a/0x30 [ 273.412667][ C0] [ 273.413189][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 276.369190][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 276.378307][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 276.388371][ T32] Call Trace: [ 276.391657][ T32] [ 276.394593][ T32] vpanic+0x56d/0xa60 [ 276.398592][ T32] ? __pfx_vpanic+0x10/0x10 [ 276.403110][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 276.408676][ T32] panic+0xc5/0xd0 [ 276.412414][ T32] ? __pfx_panic+0x10/0x10 [ 276.416846][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 276.421882][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 276.428062][ T32] watchdog+0x1030/0x1030 [ 276.432414][ T32] ? watchdog+0x1c7/0x1030 [ 276.436847][ T32] kthread+0x38b/0x480 [ 276.440930][ T32] ? __pfx_watchdog+0x10/0x10 [ 276.445615][ T32] ? __pfx_kthread+0x10/0x10 [ 276.450214][ T32] ret_from_fork+0x514/0xb70 [ 276.454814][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 276.459963][ T32] ? __switch_to+0xc89/0x1420 [ 276.464656][ T32] ? __pfx_kthread+0x10/0x10 [ 276.469253][ T32] ret_from_fork_asm+0x1a/0x30 [ 276.474037][ T32] [ 276.477325][ T32] Kernel Offset: disabled [ 276.481674][ T32] Rebooting in 86400 seconds..