last executing test programs:

18.800690123s ago: executing program 2 (id=287):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x84, 0x30, 0x8, 0x4, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x0, 0x0, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
socket$unix(0x1, 0x2, 0x0) (async)
bind$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x84, 0x30, 0x8, 0x4, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x0, 0x0, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async)

18.796977619s ago: executing program 2 (id=289):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
close(0x3)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc9f1, 0x4, 0x10000005, 0x40, 0x7fffffff}}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000040)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
close(0x3) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4) (async)
socket(0x2a, 0x2, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x40) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc9f1, 0x4, 0x10000005, 0x40, 0x7fffffff}}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000040) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

18.715575527s ago: executing program 2 (id=292):
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0xfffffffffffffee6) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)="cf2cb88bc27d2b6ea6c8448efc1462cf58e3ff9a3a476a5e58e9da22de76dd034d3f4b4db0a8556f9300521ce461f0baf3a76899840759346d8c6eb817fc30169e9a2ec4139e4fd315cdd316e3d466bffc355b273515b6c27ed77e4b4e089f65878789eaae131fc222afbe06d8356204eb11e2f4c9609565978727f8ee808af078e7c8a837f4f2dff81ea77ae8dd979766f787f85b5fd2b0356ada367dad24581386ad031b12", 0xa6}], 0x1}, 0x400c0c5)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)={0x87, 0x2, '\x00', [@ra={0x5, 0x2, 0xbc7c}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x7f}, @pad1, @ra={0x5, 0x2, 0x4}, @pad1]}, 0x20)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4810}, 0x20008805)
unshare(0x6a040000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0xb) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1}}], 0x1, 0x2004000) (async, rerun: 64)
r5 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64)
ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000000200)) (async, rerun: 32)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@llc={0x4, {@snap={0x3, 0xaa, "63c6", "509471", 0x8906, "7532db33121fc30818f327209ff867a184d8ecb76896d421e8ec3173502426"}}}}}, &(0x7f0000000140)={0x0, 0x3, [0xc8c, 0x47a, 0xea1, 0x175]}) (rerun: 32)

18.654484381s ago: executing program 0 (id=293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x84, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x0, 0x1, 0x2b74, 0xbb9, 0x7, 0x80000001, 0x5, 0x6, 0x20000000]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x84}}, 0x20) (async, rerun: 32)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x0) (async, rerun: 32)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@deltaction={0x138, 0x31, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd7f5}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x406e}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd4c}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x138}}, 0x0)

18.651529163s ago: executing program 0 (id=294):
socket$kcm(0x29, 0x2, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$isdn_base(0x22, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2f0000001c0001000d06f6f701aecf2504009a0c", @ANYRES32=r1, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0xc, 0xfffff034}, {0x6, 0xfe}]}, 0x10) (async)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b06000000001f8d000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0)
pipe(&(0x7f0000002740))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000002c0)={0x10})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x1000)
syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0xf, [{@multicast2, 0xfff}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7ff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x5d}]}}, "040086dd0000ffff"}}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r9, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8)

18.541685114s ago: executing program 0 (id=296):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="0100"], 0x3c}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r5, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
socket(0x10, 0x803, 0x2) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="0100"], 0x3c}}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r5, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)

18.431414663s ago: executing program 0 (id=297):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@local, 0xfffd, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x67}, {0x2, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x4, 0x1}, {0x8, 0x40000000, 0xfffffffffffffffd, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x3, 0x0, 0x4d}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@local, 0xfffd, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x67}, {0x2, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x4, 0x1}, {0x8, 0x40000000, 0xfffffffffffffffd, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x3, 0x0, 0x4d}}, 0xe8)
sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x4, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0)

18.380619756s ago: executing program 0 (id=299):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x40000010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r2=>0x0, 0x29, 0x9, 0x10, 0x4, 0x40, @empty, @mcast1, 0x10, 0x1, 0x5, 0x9}})
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newchain={0x85c, 0x64, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0xc}, {0xe036439d6a40bfbb, 0x8}, {0xfff3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x7d0, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xf}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x53c, 0x2, [@m_csum={0xb8, 0x6, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x6, 0x1, 0x0, 0x4}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x6, 0x5, 0x7}, 0x5}}]}, {0x52, 0x6, "b1ab68127eefdac5716bbc5188030705e01e8972b9f0a46a36fab95e9fe7ae6b968a86840e0f24300f07582c1323c4b19e8a1be1115a08e7b3bce554d61562d376c230277206c6a0c61eeed6c350"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x108, 0x14, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0x1, 0x80000001, 0x6, 0x9}}]}, {0xa8, 0x6, "8c03485a8d4a2d9272aef5d8212be865f682697bb057090c14a22929fe29eebf8b584b2f9e1467e75815ac42cfb818af6243d8e8508e150cf43ffce8170a3dc816b124e06c514b6055cd3c42523b08657e9921184de01570dec6cba5eec37fb2ea0cca4cb8297a241cde1474fe515faa443ced988c31c4bb8dc1ba1387a21c3b15231a6eff72012484a07c3d64e763d2e2787ce988b2cd985f7f1366ec7d4dbc0f97dcac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x108, 0x20, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x0, 0x0, 0x8, 0x2}, 0x1}}]}, {0xb7, 0x6, "b0c27dc647e5260512b45fb753350f6d74f6082b71e574a9d8fa048e8f899871750e424f06c03fc2fe41fbeae3ba25fdd425132d6992443f4105e220e569543eabee1a562b370ef8e32a4797ab3a00bfc9da8c0ef3f80734e6c99182f31f7d4a220f7e859cc41856fc15ea8e690884f774e5dd62c431687b09a45ef0757294cb8a3b3395a15efbe9bba750fbb4201e6c03b94ee6d62ff196d86c5a306920abda14a3747b41aecfa3b45ae68082c9a63b3f524f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x128, 0x5, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3d15, 0x5, 0x20000000, 0x622b, 0x5}, 0x2}}]}, {0xcc, 0x6, "1471b40507b9fd929d8c15be08872335ba1bcb57e42ebf7fda2e20cf0b524712e8dc19ec043de014fdc22638019748dfccc748e5a5c0d8d660315054c8318df3ca77570f9c71fe1cacc0e912eb103d4c10bdd00457a6c7ac7d4d7f7f653fc012900b170e0661ed1f270661f08d8e89da7c239fe775655a76ab4cfe80394c42352a6142b636fee16dbaac8a903b9cba6b0b2fe1e0b6cd7cb734224e7cffcd63de171a061ef412421c9922b72643fe71bd4b5a4cddb9bb5dc7ab1239b013a840987d80c2a99baff13d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x148, 0x1f, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2e5, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x1, 0x5, 0x3, 0x1d}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c77, 0xfffffffffffffff9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x20e, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1fb6, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0xffffffffffffffff, 0x280, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x157, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x200, 0x7fffffff}}]}, {0x97, 0x6, "3c47868de27f17b747835263356434c7ad9c36cfa97fcba188167c4b0256c61e44bbe99c610b634f2ac0539bbf186cd62af264be0ade7c8c45022c93ded7d71ea9ea301d05b283e262323f6e6c640295e3098e005d2530577e8c8ff18b5e9cfbaa18effce1528e356fb301c02a1eb75099ccbc9945d465c8fc6807bad712b5659d03fa05ba51cfa67e71cc2ccbf28b348611ff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x27c, 0x2, [@m_nat={0x130, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0xffffffffeffffff0, 0x4, 0x9}, @multicast1, @rand_addr=0x64010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9, 0x7, 0x10000, 0x4}, @multicast2, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf64, 0x7f, 0x1, 0x4, 0x101}, @loopback, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x80000000, 0x6, 0x2, 0x346f}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}]}, {0x67, 0x6, "8c0937f894d5e6a22f69d931cfac96da6bfc8ab7ec36a589291a8256d1d19abd32eb923428b20eb5fc61916d340efd65d182d71d62085f5519663fd4de7e6e9dc86ce815b2d35a08b3cfd8fbda950ca85040599bb4379fc6706a4ac37e2a1ef3ced222"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x148, 0x2, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1ff, 0x90, 0x7, 0x3, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff8, 0x10, 0x8, 0xffff, 0x10000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb8c, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8c4, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xf2, 0x10000000, 0x3ff, 0x10}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x8cc, 0x0, 0x7f, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb8a, 0x2}}]}, {0x98, 0x6, "94dc2b6571849d2dba1caa9ac6224e2f205d1feb9e831713202c854bbe69b4fc49293bf7c0a9ccf4b5b4879eb1be59d5c5cd00043ca931dc4411ed2d34992421dcc97de5cb80936b328eb1926483e0b878e524bf0b87f13f80604dc9759ccb518ae5da1f6529118af6767c0397cc065ebec13b09f63b2a351f3ba34890f698151d7fe3c25e9461687bdceb50b37523fb20ce6016"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x2c, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffff3e}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x85c}, 0x1, 0x0, 0x0, 0x4}, 0x8090)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)=r5}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18.216930192s ago: executing program 2 (id=301):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000081e0000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x65)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58"], 0x58}}, 0x0)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4020)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

18.042348044s ago: executing program 2 (id=304):
r0 = socket(0x10, 0x800, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x521, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80)
socket(0x10, 0x800, 0x0) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) (async)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x521, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async)

18.034458038s ago: executing program 2 (id=305):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x11, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0)
write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r9, @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r10}, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r12 = socket$kcm(0xa, 0x3, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, 0x0)
write$nci(r6, &(0x7f0000001140)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4)
listen(0xffffffffffffffff, 0x80)
recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4fb}], 0x1, 0x12020, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

17.921998223s ago: executing program 1 (id=306):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x40000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)={@multicast1=0xe0000000, @loopback, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e21, 0x9, @local, 0x6}}, [0x8, 0xfff, 0x10001, 0x2, 0x9, 0xcc, 0x4, 0x5, 0x80000000, 0xc, 0x1, 0x100000000, 0x5, 0xd56, 0x7fffffff]}, &(0x7f0000000080)=0x100)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061194c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x11c, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfd, {}, [{0x108, 0x1, [@m_gact={0x104, 0x1, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1298, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1cb2, 0x6}}, @TCA_GACT_PARMS={0x22, 0x2, {0x5, 0x9, 0x10000000, 0x8, 0xa72b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c54, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xac, 0x6, 0x9, 0x2}}, @TCA_GACT_PROB={0x0, 0x3, {0x2, 0x1db7, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd7f, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x258a, 0x8}}]}, {0x54, 0x6, "ebe8eb3dc2f34411173054f5c06413f0b0e7b144b10e4621be5f7ce180c94c3cc92de7d46ab85408150cbd69d3b8c8930c0b98fbc5f00da49b6dbeacee662d3bb153456c37e0b820ca09708256a7ad15"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

17.68221866s ago: executing program 1 (id=307):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b99cdfe10723f0f0c10400000000", 0x0, 0x80006500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x20000000}, @TCA_CT_LABELS={0x14, 0x7, "2d71dc84871c83bdc06b16dfd848cdaf"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)

17.522363343s ago: executing program 0 (id=308):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

16.815681999s ago: executing program 1 (id=309):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
shutdown(r0, 0x1)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}})
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10)
socket$netlink(0x10, 0x3, 0x8000000004)

16.732292832s ago: executing program 1 (id=310):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
r2 = socket(0x2, 0x3, 0xff)
r3 = socket$kcm(0x2, 0x1, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r3, 0xfffffffc)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10)
socket$inet6(0xa, 0x2, 0x100006)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r8, 0x6, 0x19, 0x0, &(0x7f0000000040))
r9 = accept(r6, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESHEX, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x20008855}, 0x40c0080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4854)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073"], 0x6c}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, 0x0, 0x25, 0x1b, @val=@iter={&(0x7f0000000280)=@cgroup={0x3, r4, 0x6}, 0x10}}, 0x20)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c845}, 0x44001)
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
socket(0x2, 0x5, 0x0)

16.64045338s ago: executing program 1 (id=311):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x27f8)
accept4$x25(r0, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x6}, 0x18)
r3 = socket(0x25, 0x6, 0x5)
listen(r3, 0x0)
accept4$nfc_llcp(r3, 0x0, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x8, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001000)=@newtaction={0x10b4, 0x30, 0xb, 0x5, 0x0, {}, [{0x10a0, 0x1, [@m_tunnel_key={0x109c, 0x10, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3ff, 0x9, 0x0, 0x0, 0x6c}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xfffffffffffffe48}}}]}]}, 0x10b4}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fc000000000000000000000077860c00080000001811000032936b", @ANYRES32, @ANYRESHEX=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, 0x0, 0x0)
r6 = epoll_create1(0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000280)={0x7, 'macsec0\x00', {0x6}, 0xf4})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="23001000", @ANYRES16=r8, @ANYBLOB="01002cbd7000000000000200000004006c000800270002000000050019010d000000"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x440088d0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4484}, 0x4048000)
r9 = socket(0x1, 0x80802, 0x0)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000100)={0xa000000d})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x90}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x90000025})
epoll_pwait(r10, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
close(r10)
shutdown(r9, 0x0)

15.782149517s ago: executing program 1 (id=312):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newchain={0x24, 0x66, 0x601, 0x470bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x4}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x0, 0x0, 0x6ebf}, {0x6, 0x0, 0x0, 0x1000000}]}, 0x10) (async)
sendmmsg$unix(r6, &(0x7f00000000c0), 0x3f, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xfff0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)

2.042085851s ago: executing program 32 (id=308):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1.991932495s ago: executing program 33 (id=305):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x11, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0)
write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r9, @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r10}, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r12 = socket$kcm(0xa, 0x3, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, 0x0)
write$nci(r6, &(0x7f0000001140)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4)
listen(0xffffffffffffffff, 0x80)
recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4fb}], 0x1, 0x12020, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 34 (id=312):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newchain={0x24, 0x66, 0x601, 0x470bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x4}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x0, 0x0, 0x6ebf}, {0x6, 0x0, 0x0, 0x1000000}]}, 0x10) (async)
sendmmsg$unix(r6, &(0x7f00000000c0), 0x3f, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xfff0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62186' (ED25519) to the list of known hosts.
syzkaller login: [   40.775933][ T5769] cgroup: Unknown subsys name 'net'
[   40.927848][ T5769] cgroup: Unknown subsys name 'cpuset'
[   40.934028][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.588701][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.281695][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.284703][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.292803][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.296325][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.299723][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.330721][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.334907][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.338134][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.341868][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.345910][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.381533][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.384957][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.387988][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.391110][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.394626][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.517244][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   46.590243][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.593984][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.596956][ T5841] bridge_slave_0: entered allmulticast mode
[   46.600104][ T5841] bridge_slave_0: entered promiscuous mode
[   46.607796][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.610417][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.614176][ T5841] bridge_slave_1: entered allmulticast mode
[   46.618292][ T5841] bridge_slave_1: entered promiscuous mode
[   46.651638][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.659471][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.709182][ T5841] team0: Port device team_slave_0 added
[   46.724322][ T5841] team0: Port device team_slave_1 added
[   46.765704][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.768356][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.779046][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.786666][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.789360][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.798051][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.806406][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   46.863730][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   46.876306][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.878683][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.880951][ T5846] bridge_slave_0: entered allmulticast mode
[   46.885620][ T5846] bridge_slave_0: entered promiscuous mode
[   46.904843][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.907886][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.910844][ T5846] bridge_slave_1: entered allmulticast mode
[   46.915264][ T5846] bridge_slave_1: entered promiscuous mode
[   46.927527][ T5841] hsr_slave_0: entered promiscuous mode
[   46.929820][ T5841] hsr_slave_1: entered promiscuous mode
[   46.950901][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.958775][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.010724][ T5846] team0: Port device team_slave_0 added
[   47.023082][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.025764][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.028375][ T5848] bridge_slave_0: entered allmulticast mode
[   47.031075][ T5848] bridge_slave_0: entered promiscuous mode
[   47.039660][ T5846] team0: Port device team_slave_1 added
[   47.056396][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.058691][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.060921][ T5848] bridge_slave_1: entered allmulticast mode
[   47.063869][ T5848] bridge_slave_1: entered promiscuous mode
[   47.103911][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.106818][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.118226][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.128242][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.131816][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.136358][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.146940][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.155925][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.211229][ T5848] team0: Port device team_slave_0 added
[   47.233111][ T5848] team0: Port device team_slave_1 added
[   47.255349][ T5846] hsr_slave_0: entered promiscuous mode
[   47.257546][ T5846] hsr_slave_1: entered promiscuous mode
[   47.259630][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   47.261411][ T5846] Cannot create hsr debugfs directory
[   47.285399][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.288358][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.300509][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.306591][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.309453][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.320590][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.394705][ T5848] hsr_slave_0: entered promiscuous mode
[   47.397892][ T5848] hsr_slave_1: entered promiscuous mode
[   47.400914][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   47.403855][ T5848] Cannot create hsr debugfs directory
[   47.426168][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.460248][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.479887][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.496366][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.621325][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.629093][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.636557][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.650935][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.704585][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.716447][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.724896][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.727366][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.743259][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.779744][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   47.796522][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.799569][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.819111][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.821651][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.865657][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.905875][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   47.926694][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.929601][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.959818][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.962653][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.975149][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.000144][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   48.015118][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.017522][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.044431][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.047267][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.099003][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.158284][ T5841] veth0_vlan: entered promiscuous mode
[   48.170177][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.184566][ T5841] veth1_vlan: entered promiscuous mode
[   48.197627][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.229809][ T5841] veth0_macvtap: entered promiscuous mode
[   48.247329][ T5841] veth1_macvtap: entered promiscuous mode
[   48.255650][ T5846] veth0_vlan: entered promiscuous mode
[   48.269926][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.277193][ T5846] veth1_vlan: entered promiscuous mode
[   48.284890][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.300583][ T5848] veth0_vlan: entered promiscuous mode
[   48.310537][ T5848] veth1_vlan: entered promiscuous mode
[   48.317879][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.335299][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.339453][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.349352][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.370136][ T5846] veth0_macvtap: entered promiscuous mode
[   48.373322][   T54] Bluetooth: hci1: command tx timeout
[   48.373464][ T5234] Bluetooth: hci0: command tx timeout
[   48.388081][ T5848] veth0_macvtap: entered promiscuous mode
[   48.398382][ T5848] veth1_macvtap: entered promiscuous mode
[   48.402201][ T5846] veth1_macvtap: entered promiscuous mode
[   48.428193][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.441279][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.446140][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.451619][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.455384][ T5234] Bluetooth: hci2: command tx timeout
[   48.458297][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.466884][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.476929][ T5865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.484087][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.487196][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.509235][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.514920][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.520789][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.523195][ T5865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.530408][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.534185][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.540236][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.585585][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.595569][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.601885][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.622161][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.626378][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.636160][ T5907] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.640672][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   48.651795][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.656521][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.693331][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.696783][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.714643][ T5909] lo speed is unknown, defaulting to 1000
[   48.716632][ T5909] lo speed is unknown, defaulting to 1000
[   48.720095][ T5909] lo speed is unknown, defaulting to 1000
[   48.743931][ T5909] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   48.765427][ T5909] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   48.809241][ T5909] lo speed is unknown, defaulting to 1000
[   48.814601][ T5909] lo speed is unknown, defaulting to 1000
[   48.817159][ T5909] lo speed is unknown, defaulting to 1000
[   49.169094][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14'.
[   49.172417][ T5964] netlink: 'syz.1.14': attribute type 7 has an invalid length.
[   49.188532][ T5964] netlink: 'syz.1.14': attribute type 8 has an invalid length.
[   49.195033][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'.
[   49.279491][    T9] IPVS: starting estimator thread 0...
[   49.284252][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'.
[   49.292568][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'.
[   49.362657][ T5979] IPVS: using max 80 ests per chain, 192000 per kthread
[   49.365157][ T5988] lo speed is unknown, defaulting to 1000
[   49.381060][ T5990] netlink: 'syz.0.20': attribute type 4 has an invalid length.
[   49.565949][ T6003] Zero length message leads to an empty skb
[   49.680243][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.683353][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.721409][ T6015] Bluetooth: MGMT ver 1.23
[   49.782446][ T6018] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.836785][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.899086][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.062350][ T6009] lo speed is unknown, defaulting to 1000
[   50.065708][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.069248][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.072322][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.121794][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.167388][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'.
[   50.279773][ T6044] siw: device registration error -23
[   50.407935][ T6056] warning: `syz.1.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.454120][ T5234] Bluetooth: hci1: command tx timeout
[   50.454429][   T54] Bluetooth: hci0: command tx timeout
[   50.463087][ T6062] netlink: 'syz.1.38': attribute type 3 has an invalid length.
[   50.466315][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'.
[   50.471322][ T6062] netlink: 'syz.1.38': attribute type 3 has an invalid length.
[   50.475328][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'.
[   50.532890][   T54] Bluetooth: hci2: command tx timeout
[   50.576282][ T6069] netlink: 'syz.1.39': attribute type 4 has an invalid length.
[   51.778859][ T6111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.50'.
[   51.781734][ T6111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.50'.
[   51.858387][ T6117] netlink: 'syz.1.52': attribute type 1 has an invalid length.
[   52.115066][ T6139] syzkaller0: entered promiscuous mode
[   52.117064][ T6139] syzkaller0: entered allmulticast mode
[   52.533584][   T54] Bluetooth: hci1: command tx timeout
[   52.542643][   T54] Bluetooth: hci0: command tx timeout
[   52.622652][   T54] Bluetooth: hci2: command tx timeout
[   52.937719][ T6173] tipc: Can't bind to reserved service type 2
[   52.967146][ T6172] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET)
[   53.199935][ T6181] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   53.211233][ T6181] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   53.222166][   T34] audit: type=1800 audit(1756739807.840:2): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.72" name="cgroup.controllers" dev="tmpfs" ino=150 res=0 errno=0
[   53.262938][ T6181] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   53.265049][ T6181] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   53.277671][ T6181] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   53.282225][ T6181] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   53.857594][ T6227] __nla_validate_parse: 4 callbacks suppressed
[   53.857603][ T6227] netlink: 180 bytes leftover after parsing attributes in process `syz.0.84'.
[   53.886064][ T6238] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.86'.
[   53.995464][ T6245] netlink: 'syz.0.89': attribute type 12 has an invalid length.
[   54.056120][ T6252] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.90'.
[   54.116509][ T6251] syz.1.90 (6251) used greatest stack depth: 19880 bytes left
[   54.176216][ T6261] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.92'.
[   54.254861][ T6271] lo speed is unknown, defaulting to 1000
[   54.256742][ T6271] lo speed is unknown, defaulting to 1000
[   54.258916][ T6271] lo speed is unknown, defaulting to 1000
[   54.277395][ T6246] delete_channel: no stack
[   54.284248][ T6271] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   54.286911][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'.
[   54.306973][ T6271] lo speed is unknown, defaulting to 1000
[   54.312090][ T6271] lo speed is unknown, defaulting to 1000
[   54.316376][ T6271] lo speed is unknown, defaulting to 1000
[   54.345970][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'.
[   54.349369][ T6283] netlink: 'syz.1.98': attribute type 4 has an invalid length.
[   54.386510][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[   54.390075][ T6291] netlink: 68 bytes leftover after parsing attributes in process `syz.0.100'.
[   54.394648][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[   54.398123][ T6291] netlink: 68 bytes leftover after parsing attributes in process `syz.0.100'.
[   54.464519][ T6294] syzkaller1: entered promiscuous mode
[   54.466516][ T6294] syzkaller1: entered allmulticast mode
[   54.475064][ T6298] netlink: 'syz.2.102': attribute type 12 has an invalid length.
[   54.727260][ T6325] bridge: RTM_NEWNEIGH with invalid ether address
[   54.907554][ T6351] netlink: 'syz.0.122': attribute type 4 has an invalid length.
[   54.945872][ T6355] lo speed is unknown, defaulting to 1000
[   55.507593][ T6412] lo speed is unknown, defaulting to 1000
[   55.560773][ T6414] lo speed is unknown, defaulting to 1000
[   56.006200][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.008745][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.108318][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.120781][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.282105][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.288291][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.291822][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.295613][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.465525][ T6445] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   56.496648][ T6442] lo speed is unknown, defaulting to 1000
[   56.685563][ T6461] lo speed is unknown, defaulting to 1000
[   56.696522][ T6459] lo speed is unknown, defaulting to 1000
[   57.069516][ T6470] bridge: RTM_NEWNEIGH with invalid ether address
[   57.071855][ T6469] bridge: RTM_NEWNEIGH with invalid ether address
[   57.361487][ T6475] netlink: 'syz.0.160': attribute type 12 has an invalid length.
[   57.620015][ T6500] lo speed is unknown, defaulting to 1000
[   57.710317][ T6511] netlink: 'syz.2.172': attribute type 10 has an invalid length.
[   57.715973][ T6511] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   57.975429][ T6530] tc_dump_action: action bad kind
[   58.045208][ T6532] lo speed is unknown, defaulting to 1000
[   58.128163][ T6538] lo speed is unknown, defaulting to 1000
[   58.387716][ T6554] lo speed is unknown, defaulting to 1000
[   58.419007][ T6555] netlink: 'syz.1.179': attribute type 42 has an invalid length.
[   58.455186][ T6557] netlink: 'syz.2.180': attribute type 3 has an invalid length.
[   59.301621][ T6569] __nla_validate_parse: 21 callbacks suppressed
[   59.301641][ T6569] netlink: 108 bytes leftover after parsing attributes in process `syz.0.182'.
[   59.306520][ T6570] lo speed is unknown, defaulting to 1000
[   59.347154][ T6572] netlink: 'syz.1.184': attribute type 1 has an invalid length.
[   59.537942][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'.
[   59.548037][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'.
[   59.593830][ T6589] netlink: 84 bytes leftover after parsing attributes in process `syz.1.188'.
[   59.744806][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'.
[   59.747941][ T6600] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   59.750213][ T6600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.309641][ T6615] lo speed is unknown, defaulting to 1000
[   60.682069][ T6622] lo speed is unknown, defaulting to 1000
[   60.712626][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'.
[   60.800392][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   60.828686][ T6631] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   60.837796][ T6631] netlink: 76 bytes leftover after parsing attributes in process `syz.1.200'.
[   60.840623][ T6631] netlink: 76 bytes leftover after parsing attributes in process `syz.1.200'.
[   60.954705][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'.
[   60.982102][ T6647] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   60.989152][ T6647] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   60.999968][ T6650] lo speed is unknown, defaulting to 1000
[   61.035996][ T6653] macvlan2: entered promiscuous mode
[   61.038377][ T6653] macvlan2: entered allmulticast mode
[   61.040935][ T6653] bond1: (slave macvlan2): Error -98 calling set_mac_address
[   61.128491][ T6656] geneve2: entered promiscuous mode
[   61.130382][ T6656] geneve2: entered allmulticast mode
[   61.135744][ T6658] gretap0: entered promiscuous mode
[   61.187713][ T6658] netlink: 'syz.2.206': attribute type 20 has an invalid length.
[   61.195577][ T5865] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   61.195580][ T6658] netlink: 'syz.2.206': attribute type 20 has an invalid length.
[   61.202674][ T5865] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.228944][ T5865] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.232267][ T5865] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   61.249960][ T6658] netlink: 'syz.2.206': attribute type 4 has an invalid length.
[   61.453974][ T6672] lo speed is unknown, defaulting to 1000
[   61.495592][ T6674] lo speed is unknown, defaulting to 1000
[   61.620888][ T6680] geneve3: entered promiscuous mode
[   61.622948][ T6680] geneve3: entered allmulticast mode
[   61.626504][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[   61.630585][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[   61.635213][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[   61.639107][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[   61.651321][ T6681] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   61.706034][ T6684] netlink: 'syz.2.215': attribute type 13 has an invalid length.
[   61.844576][ T6705] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[   61.867040][ T6705] lo speed is unknown, defaulting to 1000
[   61.869854][ T6701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.078271][ T6763] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   63.081773][ T6763] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   63.149249][ T6763] veth0_vlan: left promiscuous mode
[   63.152481][ T6763] veth0_vlan: entered promiscuous mode
[   63.621396][ T6723] Set syz1 is full, maxelem 65536 reached
[   63.685780][   T34] audit: type=1800 audit(1756739818.310:3): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=0
[   63.693939][   T34] audit: type=1800 audit(1756739818.310:4): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=0
[   63.701688][   T34] audit: type=1800 audit(1756739818.310:5): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=0
[   63.710547][   T34] audit: type=1800 audit(1756739818.310:6): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=0
[   63.717923][   T34] audit: type=1800 audit(1756739818.310:7): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=0
[   63.726450][   T34] audit: type=1800 audit(1756739818.310:8): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=0
[   63.734285][   T34] audit: type=1800 audit(1756739818.310:9): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=0
[   63.741261][   T34] audit: type=1800 audit(1756739818.310:10): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=0
[   63.753052][   T34] audit: type=1800 audit(1756739818.310:11): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=0
[   63.761052][   T34] audit: type=1800 audit(1756739818.310:12): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=0
[   63.900627][ T6802] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   63.907071][ T6802] syzkaller1: entered promiscuous mode
[   63.908903][ T6802] syzkaller1: entered allmulticast mode
[   64.276469][ T6807] lo speed is unknown, defaulting to 1000
[   64.507135][ T6814] __nla_validate_parse: 14 callbacks suppressed
[   64.507150][ T6814] netlink: 3 bytes leftover after parsing attributes in process `syz.2.250'.
[   64.516522][ T6814] batadv1: entered promiscuous mode
[   64.518252][ T6814] batadv1: entered allmulticast mode
[   64.738741][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'.
[   64.818566][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[   64.827629][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[   64.830593][ T6827] lo speed is unknown, defaulting to 1000
[   64.830637][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[   64.838387][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[   64.847435][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[   64.884469][ T6831] lo speed is unknown, defaulting to 1000
[   65.012406][ T6845] lo speed is unknown, defaulting to 1000
[   65.148658][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'.
[   65.151752][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'.
[   65.341778][ T6865] lo speed is unknown, defaulting to 1000
[   65.610608][ T6877] ksmbd: Unknown IPC event: 3, ignore.
[   65.690076][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'.
[   65.836229][ T6883] lo speed is unknown, defaulting to 1000
[   65.879501][ T6883] sctp: [Deprecated]: syz.1.271 (pid 6883) Use of int in max_burst socket option.
[   65.879501][ T6883] Use struct sctp_assoc_value instead
[   66.019747][ T6890] lo speed is unknown, defaulting to 1000
[   66.348965][ T6896] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   66.352210][ T5859] IPVS: starting estimator thread 0...
[   66.450075][ T6899] IPVS: using max 81 ests per chain, 194400 per kthread
[   66.550966][ T6917] xfrm0: entered promiscuous mode
[   66.553919][ T6917] xfrm0: entered allmulticast mode
[   66.609933][ T6919] syzkaller1: entered promiscuous mode
[   66.611695][ T6919] syzkaller1: entered allmulticast mode
[   66.670998][ T6925] lo speed is unknown, defaulting to 1000
[   66.742148][ T6933] lo speed is unknown, defaulting to 1000
[   66.762100][ T6929] lo speed is unknown, defaulting to 1000
[   67.160424][ T6976] geneve2: left promiscuous mode
[   67.164096][ T6976] geneve2: left allmulticast mode
[   67.170323][ T6976] geneve3: left promiscuous mode
[   67.172406][ T6976] geneve3: left allmulticast mode
[   67.177715][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0
[   67.196574][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0
[   67.199528][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0
[   67.206344][ T6960] lo speed is unknown, defaulting to 1000
[   67.206374][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0
[   67.238255][ T6987] netlink: 'syz.0.296': attribute type 1 has an invalid length.
[   67.261316][ T6987] bond2: (slave geneve4): making interface the new active one
[   67.266821][ T6987] bond2: (slave geneve4): Enslaving as an active interface with an up link
[   67.271462][ T6987] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.275579][ T6987] netlink: 'syz.0.296': attribute type 3 has an invalid length.
[   67.280168][ T6987] syz.0.296 (6987) used greatest stack depth: 18776 bytes left
[   67.299691][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   67.305454][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   67.312035][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   67.321115][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   67.382424][ T6998] lo speed is unknown, defaulting to 1000
[   67.526352][ T7012] lo speed is unknown, defaulting to 1000
[   67.606020][ T7012] netlink: 'syz.2.301': attribute type 1 has an invalid length.
[   67.848226][ T5865] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   67.879760][ T7041] syzkaller1: entered promiscuous mode
[   67.881776][ T7041] syzkaller1: entered allmulticast mode
[   68.950195][ T7065] lo speed is unknown, defaulting to 1000
[   69.029480][ T7069] lo speed is unknown, defaulting to 1000
[   70.936613][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   81.184120][  T973] cfg80211: failed to load regulatory.db
[  132.374265][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  193.815408][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  225.172757][   T35] INFO: task kworker/1:2:792 blocked for more than 143 seconds.
[  225.175417][   T35]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  225.177337][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  225.181255][   T35] task:kworker/1:2     state:D stack:22792 pid:792   tgid:792   ppid:2      task_flags:0x4208060 flags:0x00004000
[  225.186550][   T35] Workqueue: events rfkill_sync_work
[  225.188554][   T35] Call Trace:
[  225.189832][   T35]  <TASK>
[  225.190960][   T35]  __schedule+0x1798/0x4cc0
[  225.192595][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  225.194447][   T35]  ? __pfx___schedule+0x10/0x10
[  225.196224][   T35]  ? schedule+0x91/0x360
[  225.197885][   T35]  schedule+0x165/0x360
[  225.199269][   T35]  schedule_preempt_disabled+0x13/0x30
[  225.200996][   T35]  __mutex_lock+0x7e6/0x1350
[  225.202994][   T35]  ? __mutex_lock+0x5bb/0x1350
[  225.204692][   T35]  ? nfc_rfkill_set_block+0x50/0x2e0
[  225.212580][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  225.214597][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.216393][   T35]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  225.218462][   T35]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.220641][   T35]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  225.225152][   T35]  nfc_rfkill_set_block+0x50/0x2e0
[  225.226913][   T35]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  225.229068][   T35]  rfkill_set_block+0x1d2/0x440
[  225.231093][   T35]  rfkill_sync_work+0x114/0x200
[  225.232819][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  225.234890][   T35]  process_scheduled_works+0xae1/0x17b0
[  225.236960][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  225.238971][   T35]  worker_thread+0x8a0/0xda0
[  225.240493][   T35]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.242797][   T35]  ? __kthread_parkme+0x7b/0x200
[  225.244603][   T35]  kthread+0x711/0x8a0
[  225.245975][   T35]  ? __pfx_worker_thread+0x10/0x10
[  225.247635][   T35]  ? __pfx_kthread+0x10/0x10
[  225.249226][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.251026][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.253711][   T35]  ? __pfx_kthread+0x10/0x10
[  225.255358][   T35]  ret_from_fork+0x3fc/0x770
[  225.256915][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  225.258713][   T35]  ? __switch_to_asm+0x39/0x70
[  225.260318][   T35]  ? __switch_to_asm+0x33/0x70
[  225.261941][   T35]  ? __pfx_kthread+0x10/0x10
[  225.263995][   T35]  ret_from_fork_asm+0x1a/0x30
[  225.266053][   T35]  </TASK>
[  225.267454][   T35] INFO: task kworker/1:3:5849 blocked for more than 143 seconds.
[  225.270344][   T35]       Not tainted syzkaller #0
[  225.272022][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  225.275030][   T35] task:kworker/1:3     state:D stack:24840 pid:5849  tgid:5849  ppid:2      task_flags:0x4208060 flags:0x00004000
[  225.278826][   T35] Workqueue: events rfkill_global_led_trigger_worker
[  225.280944][   T35] Call Trace:
[  225.282049][   T35]  <TASK>
[  225.283438][   T35]  __schedule+0x1798/0x4cc0
[  225.284882][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  225.286800][   T35]  ? __pfx___schedule+0x10/0x10
[  225.288404][   T35]  ? schedule+0x91/0x360
[  225.289821][   T35]  schedule+0x165/0x360
[  225.291153][   T35]  schedule_preempt_disabled+0x13/0x30
[  225.293116][   T35]  __mutex_lock+0x7e6/0x1350
[  225.294603][   T35]  ? __mutex_lock+0x5bb/0x1350
[  225.296183][   T35]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  225.298211][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  225.299880][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  225.301890][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  225.304131][   T35]  rfkill_global_led_trigger_worker+0x27/0xd0
[  225.306124][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  225.307925][   T35]  process_scheduled_works+0xae1/0x17b0
[  225.309777][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  225.312018][   T35]  worker_thread+0x8a0/0xda0
[  225.314872][   T35]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.317381][   T35]  ? __kthread_parkme+0x7b/0x200
[  225.319345][   T35]  kthread+0x711/0x8a0
[  225.320994][   T35]  ? __pfx_worker_thread+0x10/0x10
[  225.323291][   T35]  ? __pfx_kthread+0x10/0x10
[  225.324904][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.326691][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.328439][   T35]  ? __pfx_kthread+0x10/0x10
[  225.330070][   T35]  ret_from_fork+0x3fc/0x770
[  225.331614][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  225.333514][   T35]  ? __switch_to_asm+0x39/0x70
[  225.335086][   T35]  ? __switch_to_asm+0x33/0x70
[  225.336688][   T35]  ? __pfx_kthread+0x10/0x10
[  225.338205][   T35]  ret_from_fork_asm+0x1a/0x30
[  225.339836][   T35]  </TASK>
[  225.340973][   T35] INFO: task syz.2.305:7032 blocked for more than 143 seconds.
[  225.344167][   T35]       Not tainted syzkaller #0
[  225.346208][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  225.349687][   T35] task:syz.2.305       state:D stack:25896 pid:7032  tgid:7031  ppid:5846   task_flags:0x400140 flags:0x00004004
[  225.354042][   T35] Call Trace:
[  225.355376][   T35]  <TASK>
[  225.356594][   T35]  __schedule+0x1798/0x4cc0
[  225.358119][   T35]  ? validate_chain+0x897/0x2140
[  225.360119][   T35]  ? __lock_acquire+0xab9/0xd20
[  225.362148][   T35]  ? __pfx___schedule+0x10/0x10
[  225.364236][   T35]  ? schedule+0x91/0x360
[  225.365972][   T35]  schedule+0x165/0x360
[  225.367588][   T35]  schedule_timeout+0x9a/0x270
[  225.369196][   T35]  ? __pfx_schedule_timeout+0x10/0x10
[  225.370993][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.372806][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.374687][   T35]  ? wait_for_completion+0x267/0x5d0
[  225.376863][   T35]  wait_for_completion+0x2bf/0x5d0
[  225.378644][   T35]  ? __pfx_wait_for_completion+0x10/0x10
[  225.380652][   T35]  ? __flush_work+0xd2/0xbc0
[  225.382299][   T35]  ? __flush_work+0xd2/0xbc0
[  225.384388][   T35]  __flush_work+0x9b9/0xbc0
[  225.385931][   T35]  ? __flush_work+0xd2/0xbc0
[  225.387640][   T35]  ? __pfx___flush_work+0x10/0x10
[  225.389301][   T35]  ? __pfx_wq_barrier_func+0x10/0x10
[  225.391124][   T35]  ? __pfx___cancel_work+0x10/0x10
[  225.393064][   T35]  ? nfc_genl_device_removed+0x23c/0x330
[  225.395169][   T35]  __cancel_work_sync+0xbe/0x110
[  225.397084][   T35]  rfkill_unregister+0x92/0x220
[  225.398820][   T35]  nfc_unregister_device+0x96/0x2a0
[  225.400598][   T35]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  225.402852][   T35]  virtual_ncidev_close+0x56/0x90
[  225.404857][   T35]  __fput+0x44c/0xa70
[  225.406438][   T35]  fput_close_sync+0x119/0x200
[  225.408350][   T35]  ? __pfx_fput_close_sync+0x10/0x10
[  225.410303][   T35]  __x64_sys_close+0x7f/0x110
[  225.412142][   T35]  do_syscall_64+0xfa/0x3b0
[  225.413936][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.415739][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.417968][   T35]  ? exc_page_fault+0x9f/0xf0
[  225.419633][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.421724][   T35] RIP: 0033:0x7effeb78ebe9
[  225.424359][   T35] RSP: 002b:00007effec551038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  225.427636][   T35] RAX: ffffffffffffffda RBX: 00007effeb9c5fa0 RCX: 00007effeb78ebe9
[  225.430545][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  225.433473][   T35] RBP: 00007effeb811e19 R08: 0000000000000000 R09: 0000000000000000
[  225.436134][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.439034][   T35] R13: 00007effeb9c6038 R14: 00007effeb9c5fa0 R15: 00007ffc1609e908
[  225.442045][   T35]  </TASK>
[  225.443411][   T35] INFO: task syz.2.305:7039 blocked for more than 143 seconds.
[  225.446430][   T35]       Not tainted syzkaller #0
[  225.448073][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  225.451220][   T35] task:syz.2.305       state:D stack:26792 pid:7039  tgid:7031  ppid:5846   task_flags:0x400040 flags:0x00004004
[  225.456053][   T35] Call Trace:
[  225.457469][   T35]  <TASK>
[  225.458774][   T35]  __schedule+0x1798/0x4cc0
[  225.460775][   T35]  ? __lock_acquire+0xab9/0xd20
[  225.462971][   T35]  ? __lock_acquire+0xab9/0xd20
[  225.465037][   T35]  ? __pfx___schedule+0x10/0x10
[  225.467102][   T35]  ? schedule+0x91/0x360
[  225.468885][   T35]  schedule+0x165/0x360
[  225.470570][   T35]  schedule_preempt_disabled+0x13/0x30
[  225.472728][   T35]  __mutex_lock+0x7e6/0x1350
[  225.474628][   T35]  ? __mutex_lock+0x5bb/0x1350
[  225.476602][   T35]  ? rfkill_register+0x37/0x8e0
[  225.478571][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  225.480579][   T35]  ? __init_waitqueue_head+0xa9/0x150
[  225.482894][   T35]  ? device_initialize+0x24b/0x440
[  225.484952][   T35]  rfkill_register+0x37/0x8e0
[  225.486843][   T35]  nfc_register_device+0x14a/0x320
[  225.488953][   T35]  nci_register_device+0x87f/0x9d0
[  225.490958][   T35]  ? __pfx_nci_register_device+0x10/0x10
[  225.493249][   T35]  ? __raw_spin_lock_init+0x45/0x100
[  225.495124][   T35]  ? __init_waitqueue_head+0xa9/0x150
[  225.497329][   T35]  virtual_ncidev_open+0x129/0x1a0
[  225.499464][   T35]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  225.501810][   T35]  misc_open+0x2bc/0x330
[  225.503626][   T35]  chrdev_open+0x4cc/0x5e0
[  225.505476][   T35]  ? __pfx_chrdev_open+0x10/0x10
[  225.507502][   T35]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  225.510045][   T35]  ? __pfx_chrdev_open+0x10/0x10
[  225.512061][   T35]  do_dentry_open+0x953/0x13f0
[  225.514201][   T35]  vfs_open+0x3b/0x340
[  225.515934][   T35]  ? path_openat+0x2ecd/0x3830
[  225.518035][   T35]  path_openat+0x2ee5/0x3830
[  225.520023][   T35]  ? arch_stack_walk+0xfc/0x150
[  225.521779][   T35]  ? stack_depot_save_flags+0x40/0x860
[  225.523706][   T35]  ? __pfx_path_openat+0x10/0x10
[  225.525326][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.527313][   T35]  do_filp_open+0x1fa/0x410
[  225.528811][   T35]  ? __lock_acquire+0xab9/0xd20
[  225.530392][   T35]  ? __pfx_do_filp_open+0x10/0x10
[  225.532062][   T35]  ? _raw_spin_unlock+0x28/0x50
[  225.534421][   T35]  ? alloc_fd+0x64c/0x6c0
[  225.535886][   T35]  do_sys_openat2+0x121/0x1c0
[  225.537434][   T35]  ? __se_sys_futex+0x36f/0x400
[  225.539038][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  225.540771][   T35]  ? rcu_is_watching+0x15/0xb0
[  225.542351][   T35]  __x64_sys_openat+0x138/0x170
[  225.544075][   T35]  do_syscall_64+0xfa/0x3b0
[  225.545572][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.547411][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.549375][   T35]  ? exc_page_fault+0x9f/0xf0
[  225.550932][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.553153][   T35] RIP: 0033:0x7effeb78ebe9
[  225.555043][   T35] RSP: 002b:00007effec530038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  225.558482][   T35] RAX: ffffffffffffffda RBX: 00007effeb9c6090 RCX: 00007effeb78ebe9
[  225.561783][   T35] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  225.565205][   T35] RBP: 00007effeb811e19 R08: 0000000000000000 R09: 0000000000000000
[  225.568390][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.571231][   T35] R13: 00007effeb9c6128 R14: 00007effeb9c6090 R15: 00007ffc1609e908
[  225.574038][   T35]  </TASK>
[  225.575283][   T35] INFO: task syz.0.308:7058 blocked for more than 143 seconds.
[  225.578278][   T35]       Not tainted syzkaller #0
[  225.580301][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  225.584800][   T35] task:syz.0.308       state:D stack:28328 pid:7058  tgid:7057  ppid:5841   task_flags:0x400040 flags:0x00004004
[  225.589628][   T35] Call Trace:
[  225.591036][   T35]  <TASK>
[  225.592300][   T35]  __schedule+0x1798/0x4cc0
[  225.594262][   T35]  ? kasan_save_free_info+0x46/0x50
[  225.596302][   T35]  ? __lock_acquire+0xab9/0xd20
[  225.598164][   T35]  ? __lock_acquire+0xab9/0xd20
[  225.599819][   T35]  ? __pfx___schedule+0x10/0x10
[  225.601710][   T35]  ? schedule+0x91/0x360
[  225.603495][   T35]  schedule+0x165/0x360
[  225.605161][   T35]  schedule_preempt_disabled+0x13/0x30
[  225.607209][   T35]  __mutex_lock+0x7e6/0x1350
[  225.609022][   T35]  ? __mutex_lock+0x5bb/0x1350
[  225.610744][   T35]  ? misc_open+0x51/0x330
[  225.612222][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  225.614143][   T35]  misc_open+0x51/0x330
[  225.615787][   T35]  chrdev_open+0x4cc/0x5e0
[  225.617578][   T35]  ? __pfx_chrdev_open+0x10/0x10
[  225.619597][   T35]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  225.622110][   T35]  ? __pfx_chrdev_open+0x10/0x10
[  225.624183][   T35]  do_dentry_open+0x953/0x13f0
[  225.626071][   T35]  vfs_open+0x3b/0x340
[  225.627716][   T35]  ? path_openat+0x2ecd/0x3830
[  225.629613][   T35]  path_openat+0x2ee5/0x3830
[  225.631277][   T35]  ? arch_stack_walk+0xfc/0x150
[  225.633182][   T35]  ? stack_depot_save_flags+0x40/0x860
[  225.635018][   T35]  ? __pfx_path_openat+0x10/0x10
[  225.636623][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.638559][   T35]  do_filp_open+0x1fa/0x410
[  225.640087][   T35]  ? __lock_acquire+0xab9/0xd20
[  225.641752][   T35]  ? __pfx_do_filp_open+0x10/0x10
[  225.643774][   T35]  ? _raw_spin_unlock+0x28/0x50
[  225.645404][   T35]  ? alloc_fd+0x64c/0x6c0
[  225.646858][   T35]  do_sys_openat2+0x121/0x1c0
[  225.648516][   T35]  ? __se_sys_futex+0x36f/0x400
[  225.650175][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  225.651938][   T35]  ? rcu_is_watching+0x15/0xb0
[  225.653943][   T35]  __x64_sys_openat+0x138/0x170
[  225.655591][   T35]  do_syscall_64+0xfa/0x3b0
[  225.657093][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.658772][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.660923][   T35]  ? exc_page_fault+0x9f/0xf0
[  225.662456][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.664512][   T35] RIP: 0033:0x7f7bb4f8ebe9
[  225.666364][   T35] RSP: 002b:00007f7bb5d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  225.669471][   T35] RAX: ffffffffffffffda RBX: 00007f7bb51c5fa0 RCX: 00007f7bb4f8ebe9
[  225.672113][   T35] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  225.675139][   T35] RBP: 00007f7bb5011e19 R08: 0000000000000000 R09: 0000000000000000
[  225.677845][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.680528][   T35] R13: 00007f7bb51c6038 R14: 00007f7bb51c5fa0 R15: 00007ffc87885078
[  225.683325][   T35]  </TASK>
[  225.684368][   T35] INFO: task syz.1.312:7079 blocked for more than 143 seconds.
[  225.686769][   T35]       Not tainted syzkaller #0
[  225.688378][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  225.691296][   T35] task:syz.1.312       state:D stack:27808 pid:7079  tgid:7077  ppid:5848   task_flags:0x400040 flags:0x00004004
[  225.695391][   T35] Call Trace:
[  225.696591][   T35]  <TASK>
[  225.697622][   T35]  __schedule+0x1798/0x4cc0
[  225.699198][   T35]  ? kasan_save_free_info+0x46/0x50
[  225.700929][   T35]  ? __lock_acquire+0xab9/0xd20
[  225.702617][   T35]  ? __lock_acquire+0xab9/0xd20
[  225.704270][   T35]  ? __pfx___schedule+0x10/0x10
[  225.705967][   T35]  ? schedule+0x91/0x360
[  225.707383][   T35]  schedule+0x165/0x360
[  225.708798][   T35]  schedule_preempt_disabled+0x13/0x30
[  225.710559][   T35]  __mutex_lock+0x7e6/0x1350
[  225.712106][   T35]  ? __mutex_lock+0x5bb/0x1350
[  225.713936][   T35]  ? misc_open+0x51/0x330
[  225.715375][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  225.717018][   T35]  misc_open+0x51/0x330
[  225.718626][   T35]  chrdev_open+0x4cc/0x5e0
[  225.720537][   T35]  ? __pfx_chrdev_open+0x10/0x10
[  225.722240][   T35]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  225.724391][   T35]  ? __pfx_chrdev_open+0x10/0x10
[  225.726302][   T35]  do_dentry_open+0x953/0x13f0
[  225.728286][   T35]  vfs_open+0x3b/0x340
[  225.729825][   T35]  ? path_openat+0x2ecd/0x3830
[  225.731364][   T35]  path_openat+0x2ee5/0x3830
[  225.733167][   T35]  ? arch_stack_walk+0xfc/0x150
[  225.735179][   T35]  ? stack_depot_save_flags+0x40/0x860
[  225.737099][   T35]  ? __pfx_path_openat+0x10/0x10
[  225.738837][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.740894][   T35]  do_filp_open+0x1fa/0x410
[  225.742456][   T35]  ? __lock_acquire+0xab9/0xd20
[  225.744291][   T35]  ? __pfx_do_filp_open+0x10/0x10
[  225.745943][   T35]  ? _raw_spin_unlock+0x28/0x50
[  225.747484][   T35]  ? alloc_fd+0x64c/0x6c0
[  225.748924][   T35]  do_sys_openat2+0x121/0x1c0
[  225.750839][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  225.753084][   T35]  ? exc_page_fault+0x76/0xf0
[  225.754895][   T35]  ? do_user_addr_fault+0xc8a/0x1390
[  225.756875][   T35]  __x64_sys_openat+0x138/0x170
[  225.758823][   T35]  do_syscall_64+0xfa/0x3b0
[  225.760712][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.763122][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.765374][   T35]  ? exc_page_fault+0x9f/0xf0
[  225.766928][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.768867][   T35] RIP: 0033:0x7f9ec2f8ebe9
[  225.770340][   T35] RSP: 002b:00007f9ec3d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  225.773357][   T35] RAX: ffffffffffffffda RBX: 00007f9ec31c6090 RCX: 00007f9ec2f8ebe9
[  225.775864][   T35] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  225.778506][   T35] RBP: 00007f9ec3011e19 R08: 0000000000000000 R09: 0000000000000000
[  225.781251][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.784124][   T35] R13: 00007f9ec31c6128 R14: 00007f9ec31c6090 R15: 00007ffeeac89428
[  225.786986][   T35]  </TASK>
[  225.788054][   T35] 
[  225.788054][   T35] Showing all locks held in the system:
[  225.790535][   T35] 1 lock held by khungtaskd/35:
[  225.792168][   T35]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  225.795823][   T35] 4 locks held by kworker/1:2/792:
[  225.797715][   T35]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  225.801836][   T35]  #1: ffffc90002f4fbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  225.806094][   T35]  #2: ffffffff8f812c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  225.809890][   T35]  #3: ffff888023662100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  225.813375][   T35] 2 locks held by getty/5669:
[  225.815134][   T35]  #0: ffff888023afa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  225.818641][   T35]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  225.823011][   T35] 3 locks held by kworker/1:3/5849:
[  225.825164][   T35]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  225.829015][   T35]  #1: ffffc900043bfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  225.833842][   T35]  #2: ffffffff8f812c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  225.837877][   T35] 1 lock held by syz.2.305/7032:
[  225.839453][   T35]  #0: ffff888023662100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  225.842789][   T35] 3 locks held by syz.2.305/7039:
[  225.844604][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.847336][   T35]  #1: ffff88802f2cf100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  225.850473][   T35]  #2: ffffffff8f812c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  225.853899][   T35] 1 lock held by syz.0.308/7058:
[  225.855598][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.858685][   T35] 1 lock held by syz.1.312/7079:
[  225.860471][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.863407][   T35] 1 lock held by syz-executor/7086:
[  225.865138][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.867816][   T35] 1 lock held by syz-executor/7087:
[  225.869522][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.872391][   T35] 1 lock held by syz-executor/7089:
[  225.874863][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.877911][   T35] 1 lock held by syz-executor/7091:
[  225.879816][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.883415][   T35] 1 lock held by syz-executor/7093:
[  225.885675][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.889151][   T35] 1 lock held by syz-executor/7095:
[  225.891293][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.898716][   T35] 1 lock held by syz-executor/7097:
[  225.900908][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.904532][   T35] 1 lock held by syz-executor/7099:
[  225.906687][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.910095][   T35] 1 lock held by syz-executor/7101:
[  225.912266][   T35]  #0: ffffffff8e9c1bc8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  225.915898][   T35] 
[  225.916930][   T35] =============================================
[  225.916930][   T35] 
[  225.920303][   T35] NMI backtrace for cpu 0
[  225.920314][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  225.920327][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.920333][   T35] Call Trace:
[  225.920339][   T35]  <TASK>
[  225.920345][   T35]  dump_stack_lvl+0x189/0x250
[  225.920363][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.920376][   T35]  ? __pfx__printk+0x10/0x10
[  225.920400][   T35]  nmi_cpu_backtrace+0x39e/0x3d0
[  225.920418][   T35]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  225.920435][   T35]  ? __pfx__printk+0x10/0x10
[  225.920453][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  225.920473][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  225.920490][   T35]  watchdog+0xf93/0xfe0
[  225.920509][   T35]  ? watchdog+0x1de/0xfe0
[  225.920528][   T35]  kthread+0x711/0x8a0
[  225.920544][   T35]  ? __pfx_watchdog+0x10/0x10
[  225.920559][   T35]  ? __pfx_kthread+0x10/0x10
[  225.920574][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.920592][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.920602][   T35]  ? __pfx_kthread+0x10/0x10
[  225.920616][   T35]  ret_from_fork+0x3fc/0x770
[  225.920631][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  225.920646][   T35]  ? __switch_to_asm+0x39/0x70
[  225.920689][   T35]  ? __switch_to_asm+0x33/0x70
[  225.920702][   T35]  ? __pfx_kthread+0x10/0x10
[  225.920716][   T35]  ret_from_fork_asm+0x1a/0x30
[  225.920741][   T35]  </TASK>
[  225.920745][   T35] Sending NMI from CPU 0 to CPUs 1:
[  225.981739][    C1] NMI backtrace for cpu 1
[  225.981755][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  225.981766][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.981772][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  225.981787][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 f6 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  225.981795][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  225.981805][    C1] RAX: a7a2af9ff8ea5000 RBX: ffffffff819683c8 RCX: a7a2af9ff8ea5000
[  225.981812][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b95c1 RDI: ffffffff8be33800
[  225.981818][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  225.981826][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39330
[  225.981833][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  225.981839][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  225.981847][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.981854][    C1] CR2: 000055f20b4aa2a8 CR3: 000000000df36000 CR4: 00000000000006f0
[  225.981887][    C1] Call Trace:
[  225.981894][    C1]  <TASK>
[  225.981898][    C1]  default_idle+0x13/0x20
[  225.981910][    C1]  default_idle_call+0x74/0xb0
[  225.981921][    C1]  do_idle+0x1e8/0x510
[  225.981932][    C1]  ? __pfx_do_idle+0x10/0x10
[  225.981940][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  225.981954][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.981964][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  225.981977][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.981992][    C1]  cpu_startup_entry+0x44/0x60
[  225.982001][    C1]  start_secondary+0x101/0x110
[  225.982014][    C1]  common_startup_64+0x13e/0x147
[  225.982031][    C1]  </TASK>
[  225.982753][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  225.982765][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  225.982779][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.982786][   T35] Call Trace:
[  225.982792][   T35]  <TASK>
[  225.982798][   T35]  dump_stack_lvl+0x99/0x250
[  225.982817][   T35]  ? __asan_memcpy+0x40/0x70
[  225.982832][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.982846][   T35]  ? __pfx__printk+0x10/0x10
[  225.982870][   T35]  vpanic+0x281/0x750
[  225.982892][   T35]  ? __pfx_vpanic+0x10/0x10
[  225.982906][   T35]  ? preempt_schedule+0xae/0xc0
[  225.982925][   T35]  ? preempt_schedule_common+0x83/0xd0
[  225.982946][   T35]  panic+0xb9/0xc0
[  225.982959][   T35]  ? __pfx_panic+0x10/0x10
[  225.982973][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  225.982988][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  225.983006][   T35]  watchdog+0xfd2/0xfe0
[  225.983026][   T35]  ? watchdog+0x1de/0xfe0
[  225.983042][   T35]  kthread+0x711/0x8a0
[  225.983057][   T35]  ? __pfx_watchdog+0x10/0x10
[  225.983071][   T35]  ? __pfx_kthread+0x10/0x10
[  225.983086][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.983102][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.983111][   T35]  ? __pfx_kthread+0x10/0x10
[  225.983124][   T35]  ret_from_fork+0x3fc/0x770
[  225.983137][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  225.983152][   T35]  ? __switch_to_asm+0x39/0x70
[  225.983165][   T35]  ? __switch_to_asm+0x33/0x70
[  225.983179][   T35]  ? __pfx_kthread+0x10/0x10
[  225.983193][   T35]  ret_from_fork_asm+0x1a/0x30
[  225.983219][   T35]  </TASK>
[  226.124682][   T35] Kernel Offset: disabled
[  226.126482][   T35] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:19:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000069f6b0
R8 =ffff888021550237 R9 =1ffff110042aa046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018c9 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6ee3659348 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=0000000000000009 RCX=0000000000000009 RDX=0000000000000008
RSI=ffff88801ed98b68 RDI=ffff88801ed98000 RBP=0000000000000200 RSP=ffffc9000328f3a0
R8 =0000000000000000 R9 =ffffffff822aa779 R10=dffffc0000000000 R11=fffff9400089eb9f
R12=0000000000000003 R13=0000000000000001 R14=ffff88801ed98b68 R15=ffff88801ed98b88
RIP=ffffffff819d8adc RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fea696f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fea68b976c3 00007fea68b976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=000055556cc80960 0000555500000007 XMM07=0000555500000000 000055556cc80810
XMM08=000055556cc80760 0000555500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
