last executing test programs:

34.791988448s ago: executing program 2 (id=3108):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r3, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'bpf\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!!+\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

34.259548715s ago: executing program 2 (id=3113):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, r1, 0x43e, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c011}, 0x44000) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, r1, 0x43e, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c011}, 0x44000)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xfffffffe}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001a00010100000000000000000a"], 0x20}}, 0x0)

34.12391444s ago: executing program 2 (id=3114):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @bcast, @netrom, @remote, @rose, @null, @null, @null]}, &(0x7f0000000080)=0x48)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc1) (async)
r3 = socket(0x27, 0x5, 0x3)
recvfrom$l2tp(r3, &(0x7f0000000200)=""/236, 0xec, 0x100, 0xfffffffffffffffc, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r3)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async, rerun: 32)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=<r5=>0x0, &(0x7f0000000540)=0x4) (rerun: 32)
sendmsg$xdp(r3, &(0x7f00000007c0)={&(0x7f0000000580)={0x2c, 0x0, r5, 0x2f}, 0x10, &(0x7f0000000780)=[{&(0x7f00000005c0)="148a43333e54e77b1e81f65e2b711b9a440d878baa71002c2ddeab1f0e21505e3810291642306067d85fdc3269dffe996164ed23b329c504880c4af7b0d43403059985f6f0c11b3c6c4cd44b247943701ac339924b84e95474f42c6dd94f31315a94bd0f7f3b093d7f58c259392c96b15ef0c68ae5c8e5556e45c3ad8e7b919461d9c113055a3e39a313aadc9db5971e37199f589a0ddb99dced667ef575ea085ac3f64aaa515d53efc4808e7f5a106ac6f1826ca0c76d2e57cf921a3a415cc39e0cea7ca1d8e65651d184e04c1caba337c9dd189001445bcff34533c7b72a02aa6971aa58", 0xe5}, {&(0x7f00000006c0)="a1ca44ed7d5d00803bf7ffa38c900b9bf74988aaa908f55b219a", 0x1a}, {&(0x7f0000000700)="c23cd325b46b9bd73cc478ee2df036ff233fed8608da5de7a936b459fee8408b25d2ddd1b73749ad4d403ddbf497e6244ee3c038ed8700dc514a4a3336f4b549e56ed0e5b0f8a0fb9d1bc5e55dd3295ff6e369b4", 0x54}], 0x3, 0x0, 0x0, 0x880}, 0x40) (async)
r6 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r7, &(0x7f0000000f80)={&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/27, 0x1b}, {&(0x7f0000000940)=""/178, 0xb2}, {&(0x7f0000000a00)=""/160, 0xa0}, {&(0x7f0000000ac0)=""/245, 0xf5}, {&(0x7f0000000bc0)=""/121, 0x79}, {&(0x7f0000000c40)=""/82, 0x52}, {&(0x7f0000000cc0)=""/224, 0xe0}, {&(0x7f0000000dc0)=""/115, 0x73}, {&(0x7f0000000e40)=""/115, 0x73}], 0x9}, 0x22) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002180)={&(0x7f0000001000)={0x114c, 0x1d, 0x100, 0x70bd2b, 0x25dfdbfe, {0xd}, [@generic="4ac027a17535138d17fa1a1b44196fd31d8fec04f420c50b06aec4bcdc94c7049fe0b13a249fca5eaae567f2d3", @typed={0x4, 0x39}, @nested={0xc, 0xaf, 0x0, 0x1, [@nested={0x4, 0xc8}, @nested={0x4, 0x8b}]}, @typed={0xc, 0x10d, 0x0, 0x0, @u64=0x76}, @generic="aa6a87d2b618a15f19eb49dfeb3577b0ac85ad8612f70b9b3b22a555ce0d5020925bafc8c5ef25a6369eb3ae04e1deaa36ea6ced639644d8b5344affc1f416e413b214f72a8703b3e4704c7d05a5eaa6db9c7ac7892720f7361a788e187460831fcd6bd70afeb5983d4d425d0ed0e14b6131fb64fd25e9742aab01d76640ef391dce70194286087b5870ec13c258f6269155eb053eb6d2f098d32d6d53803985a830f48f23f7deeb9d87e5e0dd02755f7e1e2e6122cea4baaf397e6dad5bf0b1361a70bb7502e2ae440a64c80a6d05e0e5b5ed6c2ec3f061389fca305a97c9aa51e2216d56cd4e2e6ca9a4", @generic="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", @typed={0x4, 0x89}]}, 0x114c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async)
bind$inet(r6, &(0x7f0000002200)={0x2, 0x4e22, @loopback}, 0x10)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x40010, r0, 0x4e8d7000) (async)
bind$ax25(r1, &(0x7f0000002240)={{0x3, @bcast, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @bcast]}, 0x48) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x48, 0x1, 0x8, 0x403, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9d3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x44000) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002440)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000002400), {[{{@uncond, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x4, 0x4, 0x4, 0x0, 0x3], 0x5, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x5, 0x3, 0xb, 0x5, '\x00', 'syz1\x00', {0xb33}}}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0xffffff00, 0xff000000, 'macsec0\x00', 'syzkaller1\x00', {}, {}, 0x73, 0x3, 0x34}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0xc]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x8, 0x9, 0x3, 'pptp\x00', 'syz0\x00', {0x60}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
connect$pppl2tp(r3, &(0x7f0000002780)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010100}, 0x4, 0x2, 0x3}}, 0x26) (async, rerun: 32)
sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000002c80)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c40)={&(0x7f0000002800)={0x440, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbfe, {0x5, 0x2, 0xe, [0xff, 0x10000, 0x7, 0x9, 0x8, 0x3, 0xb1, 0x8, 0x0, 0x7, 0x7, 0x1, 0x1, 0xb, 0x0, 0x8, 0x8, 0xfad, 0x7, 0x5e, 0x211, 0x1f8, 0x7, 0x1, 0x9, 0x5ba9, 0x80000001, 0x80000000, 0x0, 0x80000000, 0xfffffff9, 0x3, 0x6, 0x81, 0x6, 0x1000, 0x7, 0x5, 0x9, 0x100, 0x0, 0x6, 0xfffffffb, 0x5, 0x4, 0x2, 0x3ff, 0x8, 0x80000001, 0x1, 0xffffffff, 0x0, 0x8e8, 0x6, 0xa, 0x7, 0x200, 0x7b7, 0x6, 0x6, 0x2, 0x80, 0x7f, 0x7fffffff], [0x80000001, 0x1, 0xe, 0x81, 0x8, 0x0, 0x4, 0xfffffeff, 0x200, 0x80000001, 0x1, 0xb4, 0x5, 0x2, 0xff, 0x7, 0xe0000000, 0x480, 0x24cc000, 0x7f, 0x3, 0xffffffff, 0x8, 0x6, 0x5bf43a40, 0x4, 0x7fff, 0xffffffff, 0x9, 0x9, 0x8, 0x7d, 0x4, 0x3, 0x7, 0x7, 0x752f8d9e, 0xc, 0x1, 0x1, 0x8, 0x1, 0x10, 0x10000, 0xfffffffb, 0xffffffff, 0x4, 0x7, 0x3, 0x6, 0x9, 0x2, 0x7, 0x101, 0x1, 0x4, 0x3, 0x2, 0x6, 0x10000, 0x6a, 0xfffffff8, 0x8, 0x4], [0x8, 0x6, 0x7f, 0x3, 0x9, 0xfffffffc, 0x2c8574ae, 0x7, 0x2, 0x7b0, 0xf, 0x9, 0x0, 0xfffffff7, 0x6, 0xc83, 0x2, 0xfffffffc, 0x8, 0x2f, 0x1, 0x3f80000, 0x2, 0xfffffff5, 0xffffffff, 0xfffffff7, 0x80000000, 0x2, 0x7, 0x7, 0x9, 0x8000, 0x80000000, 0xe, 0x400, 0x8001, 0x5, 0xfed, 0x1, 0x200, 0x3, 0x80, 0x1, 0x4, 0x0, 0x200000, 0x6, 0x6c7, 0x800, 0x7, 0x5d6d, 0x0, 0x5, 0x4, 0x4, 0xfffffffc, 0x28, 0x6, 0x7fff, 0x1, 0x8, 0x5, 0x7, 0x9], [0x95, 0x1, 0x1, 0x2b, 0xb, 0x100, 0x3, 0x7, 0xfffff800, 0x6, 0xbbb, 0x5c, 0x0, 0x8, 0x9, 0x9, 0xb, 0xe00, 0x9, 0x4, 0xd, 0x9d7, 0x1, 0x101, 0x2, 0xd1cf, 0x10001, 0x9, 0x9, 0xffff, 0xca9, 0x3, 0x7, 0x5, 0x2, 0xab, 0x2, 0x3, 0x7, 0x30ab87c7, 0x4, 0x78, 0x40, 0x15, 0x1c2b, 0x7, 0x2, 0xffffffff, 0xfe6, 0x5, 0x5, 0x6, 0x81, 0x5, 0xe, 0x7, 0xd32, 0x3, 0x4, 0xb, 0x8, 0x9, 0xffff, 0x8], 0x1e, ['syzkaller1\x00', 'set\x00', '\x00', 'macsec0\x00', ']:!\x00', '\x00', '\x00']}, ["", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (rerun: 32)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000002cc0), 0x101482, 0x0)
write$tun(r9, &(0x7f0000002d00)={@val={0x0, 0x8808}, @val={0x0, 0x0, 0x5, 0x8, 0x5}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @multicast2, @remote, @rand_addr=0x64010101}}, 0x2a) (async)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002d80), r2)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000003100)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002dc0)={0x2e4, r10, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e6278187cf284f8c7c028f9bfea58dfc45a7b5f3cf3054937b80"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "087ad5175751793ae3c656baa316e6ae28d1cdb2f261d6a1c1e28bc83c2755"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "0d3730acac7cf6974658cc0d063af4d3f98cf22e02024735762e5269def7b40d30"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf1a}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "7c60296158ca1c1e97da118796788df9102d88572f08eff2e3d1d0d052520fd6c8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff5d35}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "660d239e24cac79546626414af73068a148ead8d56621f39b126799303d45429af5a8055"}}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x14801}, 0x40005)
socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000003140)={<r11=>0x0, 0x59}, &(0x7f0000003180)=0x8) (rerun: 32)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000031c0)={r11, 0x7}, &(0x7f0000003200)=0x8)

33.052755429s ago: executing program 2 (id=3126):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x17f3, 0x4}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)

32.829806499s ago: executing program 2 (id=3130):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0)
close(r3)
write(r1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, 0x0}}], 0x48}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

19.889338292s ago: executing program 3 (id=3206):
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'caif0\x00', &(0x7f0000000540)=@ethtool_ringparam={0x11, 0x1, 0x0, 0xfffffffc, 0x3, 0x7, 0xfffffffa, 0x80000000, 0x7}})
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r2, @ANYBLOB="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", @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

19.801402468s ago: executing program 3 (id=3208):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x41)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040)=0x9, 0x4)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x884)

19.71361942s ago: executing program 1 (id=3209):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x4, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000680)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@getchain={0x2c, 0x66, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0xd}, {0x5, 0x1}, {0x1, 0xffe0}}, [{0x8, 0xb, 0x8}]}, 0x2c}}, 0x0)
socket$inet6(0xa, 0x5, 0x6)
r9 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x6e22}}, 0x80, 0x0}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x50}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x3c, 0xb2, &(0x7f0000000180)="4362fcf141059e2a2f532f5d78c3ca4d8d964c78115a5dafa485c66d6654069fca6ea9b3b107ed43388d6f8735ad66ab786b334e15ba84554bda9ca7", &(0x7f00000003c0)=""/178, 0x2, 0x0, 0xd3, 0x49, &(0x7f0000000580)="abe7c92140176b6d43f327adb0c8d17501c9b5eaf455f7bbb856494f4dffb9e4a7ad9038f1cc94e96bd5ed596ebb1218d3a4767f9595a4a0b4d81eafff305a770467c9e35c7c4802a414576df715ae2e314e843b8d897f49668dc3e392613c230f4e5e65d3202a4c071f5217e6f49624e1cf3ac5ed5624e4b4442676da11ee19bbc3163279c1dc6f506c6ede1ad7f725252229251983b825dcb3c052cce03b32e480858571a2cab5cd1c9e539c52645b1362c18d0b8413615956bcd759bc2dd4eeb5a64f3675d6746ffbb4b92e507324764d59", &(0x7f00000001c0)="4eb3b8e690566cb6f04a72da061c75762a7e1a840c851929197915155cc34076b92a9f6dd9db383926c38f14f8930b8988f9d089894a98c0ba3246180a7d77787a9b508d1fca30efaa", 0x7, 0x0, 0xb}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000006c0)={'ip6gretap0\x00', <r12=>0x0})
sendto$packet(r11, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080))

19.485472761s ago: executing program 3 (id=3211):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000040000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

19.345555799s ago: executing program 1 (id=3212):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "ac74259b537c4b95", "9ed501065517d221be1c4349e438e145", "81b2f7c7", "64bd34370dc046c3"}, 0x28)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, '\x00 \x00', "38967a2445914c2e5ab898a7f56a364a", "80020007", "bff5b80e1f6fd131"}, 0x28)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={<r2=>0x0, 0x9}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r2, 0x8001}, &(0x7f00000001c0)=0x8)

19.189143092s ago: executing program 3 (id=3214):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001000100000014000700000000000000000000000014"], 0x64}}, 0x2000000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x98, r1, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff1, 0x62f}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x2, 0x1, 0x0, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x3]}]}, @NL80211_ATTR_CSA_IES={0x20, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x7, 0x2, 0x0, 0x1, 0x1, 0xb, 0x6, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x7]}]}]}, 0x98}}, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, r1, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x59}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x2, 0x0, 0x0, {0xff2, 0x9, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x4, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x2, 0x4, 0x0, {0x6, 0x8, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x3, 0xfa}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x19, 0x7e, @random="f4c17385a6672ed070ac69cba47786493ec0e6d635"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x2, 0x0, 0x0, {0x6, 0x2, 0x0, 0x3f9, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x15, 0xb7}}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000850}, 0x4001)

19.179096247s ago: executing program 1 (id=3215):
socket(0x400000000010, 0x5, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) (async)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e23, @loopback}}) (async)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})

19.153311488s ago: executing program 0 (id=3216):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91)

18.981773476s ago: executing program 0 (id=3217):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0xa0000, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x70, 0x0, 0xa0c, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x6, 0x1}, {0x0, 0x3}, {0x8, 0x6}, {0x7e, 0x7}], "c00b4f7168984363"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x3, 0x4}, {0xd7, 0x2}, {0x8, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0xac, 0x2}, {0xd}, {0x3, 0x2}, {0x20, 0x7}, {0x6f, 0x2}, {0x8, 0x4}, {}], "20572f23217c061c"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "2840c26f1d3ca129"}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x28}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x34}}, 0x0)

18.981493351s ago: executing program 3 (id=3218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000340)=@ethtool_rxfh_indir={0x1}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x3c}}, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4004044}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x4000}, 0x18)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x703d2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000040)={0x11, 0x4, r9}, 0x14)
r10 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r10, 0x8)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendto$inet(r11, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r11, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x107a}, 0x8)

18.749019698s ago: executing program 1 (id=3219):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448c9, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x3, 0x3, 0xc, 0x100, 0x1ff}, 0x20)
write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'w\x00'}, 0x8)
sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x54, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYRESOCT=r9], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4008000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000000c000000050000000200000001f0ff0000000006040000000000"], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r11}, 0x18)

18.687756334s ago: executing program 3 (id=3220):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0xffffff, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x5, 0x8, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0xd8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f0000000400)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="3d83207b1d9e989570662f9c2e26f23666209d79d431a5d25575bcaf6559dd75914ebfa027af148b813d", 0x2a}, {&(0x7f0000000480)="ab6eedbda7fd156c2e4405197c7eb26d745d3f362d245db8470a1834c7bf440a3a15ff53123de6c857ebe207736ca8b1382d9f3e5f790eb7999ac5819f934f1d7f2c57ce947d195443cfc1b8613bac29bda15b0fd0e4a4884710fbc83e9e420c0dc1f045b0bd5fc9f23a42a9308884099ad830e235110f9466863e5de084fa4b31d7", 0x82}], 0x2, &(0x7f0000000b40)="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", 0xe40, 0x188d0}, 0x20000010)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed8"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRES8=r3, @ANYRESOCT, @ANYRES8], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0x8}, 0x18)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0x1, 0x3, 0xa5c, 0x802}, 0x20)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r6, 0x8b32, &(0x7f0000000040))
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000003c0)=0xc8)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x5, 0x0, 0xa00d, 0x35}, 0x0, &(0x7f00000002c0)={0x3ff, 0x53, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

18.654372797s ago: executing program 1 (id=3221):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071183e000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=0x0], 0x48) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r2) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x443, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async)
recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x405}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/33, 0x21}, {&(0x7f0000000540)=""/70, 0x46}], 0x4, &(0x7f0000000600)}, 0xfffff3d8}], 0x2, 0x10240, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket(0x1d, 0x2, 0x6)
ppoll(&(0x7f0000000380)=[{r7, 0x100}], 0x1, 0x0, 0x0, 0x0) (async)
unshare(0x20040400) (async)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) (async)
r8 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) (async, rerun: 32)
getsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0)

18.495442579s ago: executing program 1 (id=3223):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x2d, 0x2, 0x0)
ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000140)=@default)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
unshare(0x6a040000)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001400010a0000000001000000020000000c00228008003100040000005f62bf219a759016bce8e46249f5f4646bae954e28827cc4f04de093ce07a2911f7773d94b63b2dbe7dd6d4027e343d676f62568ab0bafa147c7b5fcefb625dd2ebac563bbc166f547d159caf9a6d71490adf7ca7940cc6f1dfe0a319033b1"], 0x20}}, 0x20000080)
unshare(0x44000000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f0000000100)={0xa, 0x4e21, 0xfffa, @empty, 0x3}, 0x1c)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000009060104000000ffff240007801800018014000240fe80000000bf000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890)
socket$netlink(0x10, 0x3, 0x0)

18.475245241s ago: executing program 2 (id=3136):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="661b00000009000101b4c489bda3963e2200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x1a}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x28, 0x801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

17.935593163s ago: executing program 0 (id=3224):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081) (async)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x368}}, 0x0)

17.489375306s ago: executing program 4 (id=3225):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x7, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000800000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b80000050000000080919356c39e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)

17.489165933s ago: executing program 0 (id=3226):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91)

17.404139162s ago: executing program 4 (id=3227):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0x100000001, 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x58}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000140)={@none, 0x80000001})
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x847b023adc5ee2e2)
unshare(0x6a040000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0xfd6a)

17.390677443s ago: executing program 0 (id=3228):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="142fdb503d000b63d25a80648c2594f91324fc6030d19fe89a29636f0bfb0303f824dda84ddaeeebf05adfe3be11dbb74b13e178e0e650881f2c96a14f6355b1a784ac02e6e463ba3b87038b0e606e900000000000000000", 0x58}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=<r3=>r1, @ANYRES32, @ANYRESHEX=r0, @ANYBLOB="3298a06c00f26c484470084d8199627872928fb7d8eb78d63dcf21fdfa389a932fe03f849d3d0695ac4044c0c1b18716272aa532c87877ac6493a921766fa43aa577b01286f828b7d874ed078477b0e6ec3d1cafb57cfcc90d609477a98a638786a56e3dd84eac7176c7ebe206911e66ee1134ae9801e60958a79be03f4a1776ca9bd29d938295393abbe7040819abd1a0cbbab1ad8c192ab765aa2cdb2d6bdcd7ae5c884165d5ae062f3ef3c515d829d604ea96e29a2fffdfd8bcf83ee18bb633ac2593169202a59ea47139deca8253829a9ef54ccf24c17cdcd7d7f9d36867e39743294797036cb75b6fb078c2d8ad601eae", @ANYRES32=r0], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x2, 0x0, &(0x7f0000000200)="63ec", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a640000bcfe0a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000408000440000000040900010073797a30000000000900020073797a32000000001400000011000100"/138], 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x8, 0x6, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b043107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000480)="5a7d573653aef61d1d88753bf11c731bce77594c4740a1ec2b82c00c8f57cc18b8fbef08de8f0fe1c7b89802e4eb966dd1247a2d05e785cb1b20547d20e9f7548324de343dc8f9a7e2b78a5fb1a6c025428e47bc9dcdb7f28ec74758", 0x5c}, {&(0x7f00000005c0)="8f523cdc06f11253610bed3ddf48e24a1b6ab80a7bca1b0f4fe8ba382142713faa08f2f83af2d076e7661c80d231ba9e35cd10e6f3be4f04a7d34704bc8873e08a2649b1de56dc0bd3cfa2541044c0be5be37513befb0ba603943f746500ddebe8866d914da9069bbd4be5b33d6163f9bd69389b6ca71203746d5d461c8ac4273973611959ecd70bbab5a9b92bc1", 0x8e}, {&(0x7f0000000a80)="aa9cb637a3a9c2bc511e5eae9f871b2e9a709b9757f5610066b0ab8f61f8e9e16b6cf74d78dc5fee4ec2eaa96a868c205e530a3ea195ea01881927ee0664151ebdb90197b277e6", 0x47}, {&(0x7f0000000b00)="6de8103723df30251a9412e96cee8f92e5103273f6f21257001a99cb2ea930a5d26a03ab773d46f442587d4a749c7595c0f2e42d97c8ccd20445ea2ca743819625c4e20c92f826f3824c89e524a9ab3e2249a4a8ede0128d49d4f67d0378f6c9041832c28683f226252e0543a0f2a0802f2d842ce316d60f", 0x78}], 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x48}}, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
close(r6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)={0x2a4, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x294, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @nested={0x26c, 0x1004, 0x0, 0x1, [@nested={0x156, 0x480, 0x0, 0x1, [@generic="488928aa6eac26b8aa20759d66e0f775344a7676df91802bad264a0eab37381b9376507f6b9bd46a0b5f3e53651ed1d1eecdd0d5306504e0906e5d574576f31056d0516f698e53c88fe84b31a6e1c38777c646b4a04089981e379f1f35a2504ab14550c4bcdbe3d4fa0d6efb1a9909af787a641ca02088330fb040caffbb42329bfd7105f1c1869cef24e6308128b6bef3e8c91239e3c2fbbc362eb9e7d989cd12bc3652b216c5e773e5454e", @generic="c2fee0b5f026c2948042c83e87f141891d296deac7bf4f81926fbd222732d71f701520d23e5ee4d963c599", @typed={0x8, 0x11d, 0x0, 0x0, @pid}, @nested={0x4, 0x3c}, @generic="8311d92e9c3aca44af632aa7e9da6c149749f487f06c4cbc6b0d04c263869f4360a156f6b481a2963f4f9e8b84b1ff47f594c305eac9a3b656929b961480a69b66490835e71106e7f119b2c4e3f7108565ca49eaca9045a2d709993da6195790f14f9fe2dda52c2a01ded3", @nested={0x4, 0xae}]}, @generic="5ec5f6693d41cdacfcd519906fdac79f53f5038a13bf9b26c826010a40526ab85c70bc86212afafad66a203424b15523318d5c5c5d8e8ade6a8ee58266cb6870a6fd0d36315fca7e06682f441c16a7345f15f72a7573826af93eb1d406b7cae3fda3acd9e3605ffeed220c0fdfdbdd32ae393f8bf03ad8ae5e6fa894723544a0c5cc00becb164ff0bd73cc1dc78f1ae046811bea46f2f22d2d0daa7b4f96dcea74a0e53fabe56074cd490093ac5fde476e8646d9683511e55ed300e8b3348984c680496f94c25dfc6dc95be7b08eb13783ca42a0cdfcfa7103ce06239ee1d2bc2a134aefea3cf089", @typed={0xc, 0x77, 0x0, 0x0, @u64=0x49fa}, @nested={0x10, 0x1c, 0x0, 0x1, [@nested={0x4, 0x4b}, @typed={0x8, 0x12b, 0x0, 0x0, @fd=r9}]}, @typed={0xb, 0x55, 0x0, 0x0, @str='(\xaa+-\\v\x00'}]}, @typed={0x4, 0xe9}]}]}, 0x2a4}], 0x1, 0x0, 0x0, 0x1}, 0x0)

17.097145225s ago: executing program 0 (id=3229):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff}, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="a15013a8a389f7b8ebb2f8b98016ec133a5d9551274958dfaab89671a981eedc44f8d86c55309bf143c7db13f120c10cd33972fdfbd1b6aef0fab9f60369e7afabadba6052f76e596fbdf76af8ad305308ab69a45be1f7451fe1580be20e8940e2ac5b50bc4eb1f2c20cdd632c50d393eeb4db8f53df5c504eb6fe305f01e6421c0976e939c397090c10c6e95a255909b8cc1129eccfcbc85a"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0)
write$nci(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="40010421f9252ea3"], 0x8)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r12, 0x0, 0xd}, 0x18)

16.57751967s ago: executing program 4 (id=3230):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r2 = socket(0x2b, 0x80801, 0x1)
shutdown(r2, 0x7ffffffe) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={<r5=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0xfffffffe}, &(0x7f0000000240)=0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)={r5, 0x10, 0xb3, "fcdae73c1a67f6199a6d0637a233f5ce7e4aa152aabdadefa876e3f2cd957422dd83e34895f8f9468a7162959ae6a5d1158c42a6015fb46ca2fd46ea41c79fa6e376c9f1229026c61b30652a75df6a9a0ffa62d38fcbd16ed62a9ef774ebc6fb87d1a5b0ca323f2871a5a6ef3abd1657f346ebe48c49a1ebba7221f14cd48bfcae728de3b58b9e830002444f82ee39a427714473cc8f0e282ed35afe49a94520efc70435e41d3f9b8e51b943d2a950138279e1"}, 0xbb) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r6=>0x0}) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket(0x1e, 0x4, 0xfffffffd)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r8, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x2}]}}}]}, 0x44}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="14008000e3010500000000000000000003c83aaf1ae9ee9c8cba6310b06141645a57ffda205c74d5d172ed429139873c4c2d2cae26948be061c676f869f8d336f83f305dd1609e3e4639c764d2beb43cfa787296bfd3cbf91d525d6df9b8b044ebd59eea0cf1f507f2fa3558186394a5edeb9e05e6ce1666eac5b391ff1b2e9bcf94652ab3118837f0ecff1f84b7af05d16a2d5508c077833b382e3d23d4fc30cce49c2b6ea535a07f9412a94574c34b9eb0c85bf43165d0c4d0904790c5f0204ad83a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x810) (async)
bind$can_raw(r1, &(0x7f0000000200)={0x1d, r6}, 0x10) (async)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x9, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@gettaction={0x9c, 0x32, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3292}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x804}, 0x80)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000500)={&(0x7f0000000400)=""/129, 0x81})

16.422733889s ago: executing program 4 (id=3231):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e23, @empty}})
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8) (async)
listen(r1, 0x8)
accept4(r1, 0x0, 0x0, 0x80000) (async)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x0, 0x401}, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x4}}, 0x10) (async)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x4}}, 0x10)
bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async)
bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r4, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e22, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
close(0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="23001328", @ANYRES16=r7, @ANYBLOB="080029bd7000fcdbdf253e0000000c0099000600000055000000"], 0x20}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4000)

16.161034775s ago: executing program 4 (id=3232):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa00000000040000000000000000000000000000000777976b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000a00)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x14d, 0x35, 0x6})
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
write(r6, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf)

15.156857378s ago: executing program 4 (id=3234):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet(0xa, 0x801, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvfrom$l2tp6(r8, &(0x7f0000000180)=""/41, 0x29, 0x42, 0x0, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r13, 0x80087601, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x8000)

3.505016429s ago: executing program 32 (id=3220):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0xffffff, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x5, 0x8, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0xd8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f0000000400)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="3d83207b1d9e989570662f9c2e26f23666209d79d431a5d25575bcaf6559dd75914ebfa027af148b813d", 0x2a}, {&(0x7f0000000480)="ab6eedbda7fd156c2e4405197c7eb26d745d3f362d245db8470a1834c7bf440a3a15ff53123de6c857ebe207736ca8b1382d9f3e5f790eb7999ac5819f934f1d7f2c57ce947d195443cfc1b8613bac29bda15b0fd0e4a4884710fbc83e9e420c0dc1f045b0bd5fc9f23a42a9308884099ad830e235110f9466863e5de084fa4b31d7", 0x82}], 0x2, &(0x7f0000000b40)="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", 0xe40, 0x188d0}, 0x20000010)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRES8=r3, @ANYRESOCT, @ANYRES8], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0x8}, 0x18)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0x1, 0x3, 0xa5c, 0x802}, 0x20)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r6, 0x8b32, &(0x7f0000000040))
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000003c0)=0xc8)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x5, 0x0, 0xa00d, 0x35}, 0x0, &(0x7f00000002c0)={0x3ff, 0x53, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

2.488159017s ago: executing program 33 (id=3136):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="661b00000009000101b4c489bda3963e2200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x1a}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x28, 0x801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.021462039s ago: executing program 34 (id=3229):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff}, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="a15013a8a389f7b8ebb2f8b98016ec133a5d9551274958dfaab89671a981eedc44f8d86c55309bf143c7db13f120c10cd33972fdfbd1b6aef0fab9f60369e7afabadba6052f76e596fbdf76af8ad305308ab69a45be1f7451fe1580be20e8940e2ac5b50bc4eb1f2c20cdd632c50d393eeb4db8f53df5c504eb6fe305f01e6421c0976e939c397090c10c6e95a255909b8cc1129eccfcbc85a"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0)
write$nci(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="40010421f9252ea3"], 0x8)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r12, 0x0, 0xd}, 0x18)

0s ago: executing program 35 (id=3234):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet(0xa, 0x801, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvfrom$l2tp6(r8, &(0x7f0000000180)=""/41, 0x29, 0x42, 0x0, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r13, 0x80087601, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x8000)

kernel console output (not intermixed with test programs):

 netlink: 'syz.1.1854': attribute type 27 has an invalid length.
[  363.967181][T13651] netlink: 'syz.1.1854': attribute type 27 has an invalid length.
[  364.221406][T13649] veth0_to_team: left promiscuous mode
[  364.241415][T13649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.304573][T13649] macvlan0: left promiscuous mode
[  364.324134][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'.
[  364.340086][T13675] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1857'.
[  364.363485][T13649] mac80211_hwsim hwsim7 wlan0: left allmulticast mode
[  364.371767][T13649] bond1: left promiscuous mode
[  364.380725][T13649] bond1: left allmulticast mode
[  364.408652][T13649] bridge2: left allmulticast mode
[  364.464187][T13649] vlan2: left promiscuous mode
[  364.492997][T13649] ip6gre1: left promiscuous mode
[  364.508454][T13649] ip6gre1: left allmulticast mode
[  364.525593][T13649] bond4: left promiscuous mode
[  364.537510][T13649] wireguard0: left promiscuous mode
[  364.553652][T13649] vlan3: left promiscuous mode
[  364.559327][T13649] bridge4: left allmulticast mode
[  364.565004][T13649] macsec1: left promiscuous mode
[  364.570160][T13649] macsec1: left allmulticast mode
[  364.665511][T13683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  364.672901][T13683] IPv6: NLM_F_CREATE should be set when creating new route
[  364.680150][T13683] IPv6: NLM_F_CREATE should be set when creating new route
[  364.752570][T13675] 0ªX¹¦À: renamed from caif0
[  364.776667][T13675] 0ªX¹¦À: entered allmulticast mode
[  364.782363][T13675] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  364.800432][ T1157] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.815683][ T1157] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.828829][ T1157] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.837760][ T1157] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.940222][T13666] wlan0 speed is unknown, defaulting to 1000
[  364.966957][T13666] ip6_vti0 speed is unknown, defaulting to 1000
[  365.057297][T13690] wlan0 speed is unknown, defaulting to 1000
[  365.552182][T13690] ip6_vti0 speed is unknown, defaulting to 1000
[  366.239327][T13723] siw: device registration error -23
[  366.614388][T13749] netlink: 'syz.1.1872': attribute type 9 has an invalid length.
[  366.689151][T13749] netlink: 'syz.1.1872': attribute type 7 has an invalid length.
[  366.734346][T13749] netlink: 'syz.1.1872': attribute type 8 has an invalid length.
[  366.903357][T13758] __nla_validate_parse: 2 callbacks suppressed
[  366.903379][T13758] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1874'.
[  367.157032][T13767] wlan0 speed is unknown, defaulting to 1000
[  367.181423][T13767] ip6_vti0 speed is unknown, defaulting to 1000
[  367.251272][T13778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1877'.
[  367.381273][T13772] wlan0 speed is unknown, defaulting to 1000
[  367.489526][T13788] veth7: entered promiscuous mode
[  367.596087][T13786] syzkaller1: entered promiscuous mode
[  367.601636][T13786] syzkaller1: entered allmulticast mode
[  367.643749][T13797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1879'.
[  367.948182][T13772] ip6_vti0 speed is unknown, defaulting to 1000
[  368.013391][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1881'.
[  368.063446][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1881'.
[  368.108729][T13803] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1881'.
[  368.160550][T13806] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1882'.
[  368.473682][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'.
[  368.635036][ T5148] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  368.909064][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1888'.
[  368.926301][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1888'.
[  368.937801][T13827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  369.866491][T13878] netlink: 'syz.2.1900': attribute type 10 has an invalid length.
[  369.934878][T13880] ip6t_rpfilter: unknown options
[  369.947115][T13874] ip6t_rpfilter: unknown options
[  370.006611][T13882] netlink: 'syz.0.1896': attribute type 2 has an invalid length.
[  370.236311][T13889] syzkaller0: entered promiscuous mode
[  370.242273][T13889] syzkaller0: entered allmulticast mode
[  370.820490][T13904] syzkaller1: entered promiscuous mode
[  370.846617][T13904] syzkaller1: entered allmulticast mode
[  370.882630][T13912] netlink: 'syz.1.1907': attribute type 11 has an invalid length.
[  370.916146][T13910] bond7: option lp_interval: invalid value (0)
[  370.922988][T13910] bond7: option lp_interval: allowed values 1 - 2147483647
[  370.931926][T13910] bond7 (unregistering): Released all slaves
[  370.956202][T13914] netlink: 'syz.1.1907': attribute type 1 has an invalid length.
[  370.966033][T13914] netlink: 'syz.1.1907': attribute type 2 has an invalid length.
[  370.981591][T13914] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  371.249649][T13926] kthread_run failed with err -4
[  371.322915][T13928] ip6gre1: entered promiscuous mode
[  371.346313][T13928] ip6gre1: entered allmulticast mode
[  371.404034][T13931] wlan0 speed is unknown, defaulting to 1000
[  371.424748][T13931] ip6_vti0 speed is unknown, defaulting to 1000
[  371.710512][T13959] netlink: 'syz.0.1916': attribute type 30 has an invalid length.
[  371.840729][T13962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.896036][T13966] syzkaller0: entered promiscuous mode
[  371.931451][T13966] syzkaller0: entered allmulticast mode
[  371.988011][T13966] tipc: Resetting bearer <eth:syzkaller0>
[  372.270116][T13966] tipc: Disabling bearer <eth:syzkaller0>
[  372.653570][T13979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  372.762773][T13981] atomic_op ffff888026c42998 conn xmit_atomic 0000000000000000
[  372.933222][T13986] trusted_key: syz.3.1924 sent an empty control message without MSG_MORE.
[  373.115826][ T7514] IPVS: starting estimator thread 0...
[  373.233495][T13995] IPVS: using max 23 ests per chain, 55200 per kthread
[  373.692377][T14006] Bluetooth: MGMT ver 1.23
[  373.704289][ T8010] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.732149][ T8010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.740660][ T8010] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.788687][ T8010] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.009558][T14016] sctp: [Deprecated]: syz.1.1931 (pid 14016) Use of int in max_burst socket option deprecated.
[  374.009558][T14016] Use struct sctp_assoc_value instead
[  374.757734][T14031] netlink: 'syz.1.1934': attribute type 9 has an invalid length.
[  375.185981][T14046] sctp: [Deprecated]: syz.4.1937 (pid 14046) Use of struct sctp_assoc_value in delayed_ack socket option.
[  375.185981][T14046] Use struct sctp_sack_info instead
[  375.240646][T14031] can: request_module (can-proto-0) failed.
[  375.286451][T14015] __nla_validate_parse: 5 callbacks suppressed
[  375.286473][T14015] netlink: 584 bytes leftover after parsing attributes in process `syz.2.1932'.
[  375.454131][T14054] wlan0 speed is unknown, defaulting to 1000
[  375.475352][T14054] ip6_vti0 speed is unknown, defaulting to 1000
[  375.507572][T14061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1941'.
[  375.584187][T14061] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1941'.
[  375.783463][T14069] netlink: 'syz.3.1943': attribute type 2 has an invalid length.
[  375.793394][T14068] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1942'.
[  376.136374][T14075] wlan0 speed is unknown, defaulting to 1000
[  376.246413][T14075] ip6_vti0 speed is unknown, defaulting to 1000
[  376.374646][T14079] netlink: 'syz.1.1945': attribute type 15 has an invalid length.
[  376.813903][T14089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.830242][T14090] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  376.854594][T14088] tipc: Disabling bearer <eth:syzkaller0>
[  376.954262][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'.
[  377.988196][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1954'.
[  378.025153][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'.
[  379.166739][T14144] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1962'.
[  379.231358][T14142] bond5 (unregistering): Released all slaves
[  379.592490][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'.
[  379.655926][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'.
[  379.790668][T14171] batadv1: entered promiscuous mode
[  380.270227][T14171] wlan0 speed is unknown, defaulting to 1000
[  380.299773][T14171] ip6_vti0 speed is unknown, defaulting to 1000
[  380.349611][T14190] wlan0 speed is unknown, defaulting to 1000
[  380.777967][T14203] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  380.937944][T14203] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  380.976786][T14206] __nla_validate_parse: 3 callbacks suppressed
[  380.976807][T14206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1972'.
[  381.029313][T14206] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1972'.
[  381.034932][T14203] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  381.195893][T14203] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  381.435525][T14190] ip6_vti0 speed is unknown, defaulting to 1000
[  381.552430][   T61] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  381.573714][T14217] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1973'.
[  381.574395][   T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  381.739307][   T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  381.748286][   T61] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  381.877468][T14223] netlink: 1315 bytes leftover after parsing attributes in process `syz.1.1974'.
[  382.285111][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1977'.
[  382.529133][T14250] netlink: 'syz.4.1977': attribute type 5 has an invalid length.
[  382.573191][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'.
[  382.735000][T14254] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  382.771571][T14256] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1980'.
[  383.075526][T14262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'.
[  383.440566][T14278] wlan0 speed is unknown, defaulting to 1000
[  383.464037][T14278] ip6_vti0 speed is unknown, defaulting to 1000
[  384.895681][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1993'.
[  385.158794][T14333] bond0: (slave batadv0): Releasing backup interface
[  385.174320][T14333] batadv0: left promiscuous mode
[  385.195713][T14333] bond0: (slave bond_slave_0): Releasing backup interface
[  385.206815][T14333] bond_slave_0: left promiscuous mode
[  385.219012][T14333] bond0: (slave bond_slave_1): Releasing backup interface
[  385.234609][T14333] bond_slave_1: left promiscuous mode
[  385.241666][T14333] team_slave_0: left allmulticast mode
[  385.259710][T14333] team0: Port device team_slave_0 removed
[  385.290653][T14333] team_slave_1: left allmulticast mode
[  385.319063][T14333] team0: Port device team_slave_1 removed
[  385.348397][T14333] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.371479][T14333] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.397294][T14333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  385.416864][T14340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1995'.
[  385.422163][T14335] netlink: 'syz.4.1996': attribute type 41 has an invalid length.
[  385.938881][T14355] vlan4: entered promiscuous mode
[  385.952596][T14355] vlan4: entered allmulticast mode
[  385.973086][T14355] hsr_slave_1: entered allmulticast mode
[  386.068099][T14359] __nla_validate_parse: 1 callbacks suppressed
[  386.068121][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'.
[  386.134347][T14355] wlan0 speed is unknown, defaulting to 1000
[  386.145989][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'.
[  386.188817][T14355] ip6_vti0 speed is unknown, defaulting to 1000
[  386.254637][T14374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2003'.
[  386.365921][T14380] netlink: 'syz.4.2003': attribute type 1 has an invalid length.
[  386.546093][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'.
[  386.630184][T14366] bond5: (slave veth7): Enslaving as an active interface with a down link
[  386.693276][T14383] bond5: (slave veth9): Enslaving as an active interface with a down link
[  387.099765][T14077] Set syz1 is full, maxelem 65536 reached
[  387.203394][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2007'.
[  387.603403][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'.
[  388.494038][T14439] netlink: 'syz.1.2022': attribute type 58 has an invalid length.
[  388.515385][T14439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2022'.
[  388.590275][T14446] syz_tun: left allmulticast mode
[  388.602486][T14446] dvmrp8: left allmulticast mode
[  388.716227][T14447] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  388.991494][T14457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2027'.
[  389.000956][T14472] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2031'.
[  389.001125][T14472] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2031'.
[  389.036229][T14473] netlink: 'syz.2.2030': attribute type 13 has an invalid length.
[  389.339172][T14483] batman_adv: batadv0: Interface deactivated: macsec1
[  389.441786][   T61] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  389.466795][   T61] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  389.526217][   T61] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  389.542966][   T61] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  390.239762][T14546] wlan0 speed is unknown, defaulting to 1000
[  390.297278][T14551] ip6gretap0: entered promiscuous mode
[  390.306926][T14551] macsec1: entered promiscuous mode
[  390.314326][T14551] macsec1: entered allmulticast mode
[  390.319863][T14551] ip6gretap0: entered allmulticast mode
[  390.328851][T14546] ip6_vti0 speed is unknown, defaulting to 1000
[  390.388785][T14555] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  390.400843][T14555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.213973][T14574] xt_hashlimit: size too large, truncated to 1048576
[  391.255748][T14574] syz.2.2056: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  391.257804][T14573] netlink: 'syz.1.2055': attribute type 4 has an invalid length.
[  391.302235][T14574] CPU: 1 UID: 0 PID: 14574 Comm: syz.2.2056 Not tainted syzkaller #0 PREEMPT(full) 
[  391.302263][T14574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  391.302275][T14574] Call Trace:
[  391.302283][T14574]  <TASK>
[  391.302291][T14574]  dump_stack_lvl+0x189/0x250
[  391.302325][T14574]  ? __pfx_dump_stack_lvl+0x10/0x10
[  391.302347][T14574]  ? __pfx__printk+0x10/0x10
[  391.302365][T14574]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  391.302389][T14574]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  391.302413][T14574]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  391.302439][T14574]  warn_alloc+0x214/0x310
[  391.302471][T14574]  ? __pfx_warn_alloc+0x10/0x10
[  391.302507][T14574]  ? __get_vm_area_node+0x28f/0x300
[  391.302535][T14574]  ? htable_create+0x101/0x7a0
[  391.302566][T14574]  __vmalloc_node_range_noprof+0x690/0x12d0
[  391.302620][T14574]  ? alloc_pages_mpol+0x3cd/0x4a0
[  391.302638][T14574]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  391.302672][T14574]  ? rcu_is_watching+0x15/0xb0
[  391.302690][T14574]  ? htable_create+0x101/0x7a0
[  391.302711][T14574]  __kvmalloc_node_noprof+0x674/0x910
[  391.302733][T14574]  ? htable_create+0x101/0x7a0
[  391.302750][T14574]  ? hashlimit_pernet+0x23/0x240
[  391.302770][T14574]  ? hashlimit_pernet+0x23/0x240
[  391.302788][T14574]  ? hashlimit_pernet+0x23/0x240
[  391.302814][T14574]  htable_create+0x101/0x7a0
[  391.302841][T14574]  hashlimit_mt_check_common+0x719/0xa10
[  391.302870][T14574]  xt_check_match+0x3d1/0xab0
[  391.302897][T14574]  ? __pfx_xt_check_match+0x10/0x10
[  391.302919][T14574]  ? pcpu_alloc_noprof+0xfdd/0x1720
[  391.302950][T14574]  ? xt_find_match+0x1f7/0x250
[  391.302981][T14574]  translate_table+0x1553/0x2040
[  391.303027][T14574]  ? __pfx_translate_table+0x10/0x10
[  391.303051][T14574]  ? __might_fault+0xb0/0x130
[  391.303090][T14574]  ? _copy_from_user+0x94/0xb0
[  391.303115][T14574]  do_ip6t_set_ctl+0x970/0xce0
[  391.303133][T14574]  ? rcu_is_watching+0x15/0xb0
[  391.303150][T14574]  ? trace_contention_end+0x39/0x120
[  391.303168][T14574]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  391.303205][T14574]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  391.303233][T14574]  ? file_init_path+0x3b/0x590
[  391.303253][T14574]  ? __lock_acquire+0xab9/0xd20
[  391.303272][T14574]  nf_setsockopt+0x26f/0x290
[  391.303300][T14574]  rawv6_setsockopt+0x23b/0x5b0
[  391.303324][T14574]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  391.303340][T14574]  ? aa_sock_opt_perm+0xff/0x1b0
[  391.303364][T14574]  ? sock_common_setsockopt+0x36/0xc0
[  391.303385][T14574]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  391.303408][T14574]  do_sock_setsockopt+0x17c/0x1b0
[  391.303429][T14574]  __x64_sys_setsockopt+0x13f/0x1b0
[  391.303451][T14574]  do_syscall_64+0xfa/0xfa0
[  391.303471][T14574]  ? lockdep_hardirqs_on+0x9c/0x150
[  391.303492][T14574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.303507][T14574]  ? clear_bhb_loop+0x60/0xb0
[  391.303526][T14574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.303540][T14574] RIP: 0033:0x7f463538f6c9
[  391.303555][T14574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  391.303569][T14574] RSP: 002b:00007f4636239038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  391.303587][T14574] RAX: ffffffffffffffda RBX: 00007f46355e5fa0 RCX: 00007f463538f6c9
[  391.303598][T14574] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  391.303607][T14574] RBP: 00007f4635411f91 R08: 0000000000000528 R09: 0000000000000000
[  391.303616][T14574] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000
[  391.303626][T14574] R13: 00007f46355e6038 R14: 00007f46355e5fa0 R15: 00007ffc7ea81778
[  391.303661][T14574]  </TASK>
[  391.303699][T14574] Mem-Info:
[  391.427138][T14593] __nla_validate_parse: 65 callbacks suppressed
[  391.427157][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'.
[  391.451416][T14574] active_anon:4631 inactive_anon:0 isolated_anon:0
[  391.451416][T14574]  active_file:3214 inactive_file:39993 isolated_file:0
[  391.451416][T14574]  unevictable:768 dirty:263 writeback:0
[  391.451416][T14574]  slab_reclaimable:12164 slab_unreclaimable:134604
[  391.451416][T14574]  mapped:29301 shmem:1356 pagetables:1150
[  391.451416][T14574]  sec_pagetables:0 bounce:0
[  391.451416][T14574]  kernel_misc_reclaimable:0
[  391.451416][T14574]  free:1292111 free_pcp:12968 free_cma:0
[  391.635276][T14596] wlan0 speed is unknown, defaulting to 1000
[  391.643052][T14574] Node 0 active_anon:18524kB inactive_anon:0kB active_file:12856kB inactive_file:159772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117404kB dirty:1052kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14260kB pagetables:4580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  391.679431][T14596] ip6_vti0 speed is unknown, defaulting to 1000
[  391.685627][T14574] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  391.836368][T14574] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  391.867890][T14574] lowmem_reserve[]: 0 2505 2505 2505 2505
[  391.873765][T14574] Node 0 DMA32 free:1254972kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19724kB inactive_anon:0kB active_file:12856kB inactive_file:159772kB unevictable:1536kB writepending:1052kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:38700kB local_pcp:21624kB free_cma:0kB
[  391.910867][T14574] lowmem_reserve[]: 0 0 0 0 0
[  391.919907][T14574] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  391.951644][T14574] lowmem_reserve[]: 0 0 0 0 0
[  391.969858][T14574] Node 1 Normal free:3897856kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12876kB local_pcp:6380kB free_cma:0kB
[  392.003625][T14574] lowmem_reserve[]: 0 0 0 0 0
[  392.010571][T14574] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  392.061185][T14574] Node 0 DMA32: 844*4kB (UM) 1609*8kB (UME) 752*16kB (UME) 1063*32kB (UME) 377*64kB (UME) 168*128kB (UME) 122*256kB (UM) 71*512kB (UME) 43*1024kB (UM) 5*2048kB (UME) 250*4096kB (UM) = 1253784kB
[  392.084275][T14574] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  392.096117][T14574] Node 1 Normal: 4*4kB (UME) 14*8kB (UME) 44*16kB (UME) 162*32kB (UME) 56*64kB (UME) 9*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3897856kB
[  392.142167][T14574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  392.152791][T14574] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  392.171121][T14574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  392.352405][T14574] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  392.368704][T14574] 47375 total pagecache pages
[  392.398923][T14574] 0 pages in swap cache
[  392.432255][T14574] Free swap  = 124996kB
[  392.436480][T14574] Total swap = 124996kB
[  392.492418][T14574] 2097051 pages RAM
[  392.496333][T14574] 0 pages HighMem/MovableOnly
[  392.501041][T14574] 424124 pages reserved
[  392.552627][T14574] 0 pages cma reserved
[  392.899252][T14621] geneve2: entered promiscuous mode
[  393.704409][T14654] netlink: 'syz.1.2074': attribute type 13 has an invalid length.
[  393.719193][T14654] netlink: 'syz.1.2074': attribute type 17 has an invalid length.
[  393.925197][T14654] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.938488][T14654] 8021q: adding VLAN 0 to HW filter on device team0
[  393.958735][T14654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  394.012611][ T5835] ip6_vti0 speed is unknown, defaulting to 1000
[  394.019064][ T5835] syz2: Port: 1 Link ACTIVE
[  394.037101][ T5835] ip6_vti0 speed is unknown, defaulting to 1000
[  394.159394][T14656] wlan0 speed is unknown, defaulting to 1000
[  394.664917][T14656] ip6_vti0 speed is unknown, defaulting to 1000
[  394.952987][T14674] wlan0 speed is unknown, defaulting to 1000
[  395.194080][T14674] ip6_vti0 speed is unknown, defaulting to 1000
[  396.111052][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2086'.
[  396.121213][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2086'.
[  396.153524][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2086'.
[  396.651760][T14720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2091'.
[  396.837513][T14732] netlink: 'syz.0.2092': attribute type 13 has an invalid length.
[  396.845878][T14732] netlink: 'syz.0.2092': attribute type 17 has an invalid length.
[  396.897219][T14735] IPv6: addrconf: prefix option has invalid lifetime
[  396.974892][T14732] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.991116][T14732] 8021q: adding VLAN 0 to HW filter on device team0
[  397.022660][T14732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  397.166774][T14733] wlan0 speed is unknown, defaulting to 1000
[  397.199273][T14733] ip6_vti0 speed is unknown, defaulting to 1000
[  397.676216][T14757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2099'.
[  397.722934][T14761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.769683][T14763] netlink: 'syz.3.2100': attribute type 13 has an invalid length.
[  397.796804][T14763] netlink: 'syz.3.2100': attribute type 17 has an invalid length.
[  397.827712][T14764] wlan0 speed is unknown, defaulting to 1000
[  397.838100][T14764] ip6_vti0 speed is unknown, defaulting to 1000
[  398.154548][T14763] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.190372][T14763] 8021q: adding VLAN 0 to HW filter on device team0
[  398.231942][T14763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  398.600410][T14769] wlan0 speed is unknown, defaulting to 1000
[  398.639412][T14769] ip6_vti0 speed is unknown, defaulting to 1000
[  398.647243][T14766] wlan0 speed is unknown, defaulting to 1000
[  398.777759][T14797] syzkaller1: entered promiscuous mode
[  398.783641][T14797] syzkaller1: entered allmulticast mode
[  398.828450][T14800] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2109'.
[  398.855514][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2109'.
[  398.997409][T14766] ip6_vti0 speed is unknown, defaulting to 1000
[  399.233630][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'.
[  399.628170][T14825] wlan0 speed is unknown, defaulting to 1000
[  399.708186][T14825] ip6_vti0 speed is unknown, defaulting to 1000
[  399.716735][T14820] wlan0 speed is unknown, defaulting to 1000
[  400.091197][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'.
[  400.480315][T14859] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2123'.
[  400.501149][T14861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2123'.
[  400.639663][T14820] ip6_vti0 speed is unknown, defaulting to 1000
[  400.841386][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2124'.
[  400.911549][T14872] netlink: 'syz.0.2125': attribute type 10 has an invalid length.
[  400.966729][T14873] netlink: 'syz.0.2125': attribute type 10 has an invalid length.
[  401.013688][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'.
[  401.098033][T14872] bond0: (slave dummy0): Releasing backup interface
[  401.120938][T14872] team0: Port device dummy0 added
[  401.159203][T14873] team0: Port device dummy0 removed
[  401.181267][T14873] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  402.208475][T14884] wlan0 speed is unknown, defaulting to 1000
[  402.270472][T14884] ip6_vti0 speed is unknown, defaulting to 1000
[  402.406105][T14898] wlan0 speed is unknown, defaulting to 1000
[  402.889377][T14898] ip6_vti0 speed is unknown, defaulting to 1000
[  403.274800][T14924] wlan0 speed is unknown, defaulting to 1000
[  403.320914][T14924] ip6_vti0 speed is unknown, defaulting to 1000
[  403.778612][T14936] v: renamed from vlan0
[  404.532456][T14948] wlan0 speed is unknown, defaulting to 1000
[  404.542378][T14948] ip6_vti0 speed is unknown, defaulting to 1000
[  405.013234][T14963] netlink: 'syz.4.2142': attribute type 83 has an invalid length.
[  405.844711][T14978] wlan0 speed is unknown, defaulting to 1000
[  405.863010][T14978] ip6_vti0 speed is unknown, defaulting to 1000
[  406.341979][T14984] IPv6: sit4: Disabled Multicast RS
[  406.395840][T14988] delete_channel: no stack
[  406.470363][T14988] batadv_slave_1: entered promiscuous mode
[  406.572808][T14988] batman_adv: batadv0: Adding interface: macvlan2
[  406.579565][T14988] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.634483][T14993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2152'.
[  406.655290][T14988] batman_adv: batadv0: Interface activated: macvlan2
[  406.865410][T15006] netlink: 'syz.2.2156': attribute type 9 has an invalid length.
[  406.875820][T15006] netlink: 'syz.2.2156': attribute type 7 has an invalid length.
[  406.884121][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'.
[  407.023869][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2156'.
[  407.087037][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'.
[  407.114663][T15017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.324304][T15017] batman_adv: batadv0: Interface deactivated: macvlan2
[  407.375903][T15017] batman_adv: batadv0: Removing interface: macvlan2
[  407.407292][T15017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.449660][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'.
[  407.630241][T15027] bridge6: entered allmulticast mode
[  407.914454][T15051] netlink: 'syz.2.2165': attribute type 8 has an invalid length.
[  407.922971][T15051] netlink: 'syz.2.2165': attribute type 9 has an invalid length.
[  407.930731][T15051] netlink: 'syz.2.2165': attribute type 10 has an invalid length.
[  408.020848][T15051] netlink: 'syz.2.2165': attribute type 11 has an invalid length.
[  408.029300][T15059] v: renamed from ip6_vti0
[  408.038378][T15064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.115616][T15051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2165'.
[  408.269133][T15062] wlan0 speed is unknown, defaulting to 1000
[  408.342145][T15062] ip6_vti0 speed is unknown, defaulting to 1000
[  408.371720][T15066] wlan0 speed is unknown, defaulting to 1000
[  408.440000][T15083] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2172'.
[  408.454910][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'.
[  408.650047][T15087] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2173'.
[  408.674382][T15091] netlink: 'syz.3.2174': attribute type 13 has an invalid length.
[  408.702215][T15087] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2173'.
[  408.705678][T15091] netlink: 'syz.3.2174': attribute type 17 has an invalid length.
[  408.772485][T15087] netlink: 'syz.1.2173': attribute type 5 has an invalid length.
[  409.155895][T15066] ip6_vti0 speed is unknown, defaulting to 1000
[  409.579255][T15125] Cannot find add_set index 0 as target
[  409.927965][T15138] wlan0 speed is unknown, defaulting to 1000
[  409.939190][T15138] ip6_vti0 speed is unknown, defaulting to 1000
[  410.537157][T15145] netlink: 'syz.3.2187': attribute type 3 has an invalid length.
[  410.783344][T15158] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  412.138957][T15197] __nla_validate_parse: 14 callbacks suppressed
[  412.138978][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'.
[  412.292825][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'.
[  412.416559][T15204] wlan0 speed is unknown, defaulting to 1000
[  412.452401][T15204] ip6_vti0 speed is unknown, defaulting to 1000
[  412.848284][T15222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2206'.
[  413.412631][T15229] wlan0 speed is unknown, defaulting to 1000
[  413.522906][T15229] ip6_vti0 speed is unknown, defaulting to 1000
[  413.720794][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'.
[  413.828753][T15245] wlan0 speed is unknown, defaulting to 1000
[  413.883025][T15246] wlan0 speed is unknown, defaulting to 1000
[  413.994187][T15255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2217'.
[  414.132342][T15255] nbd: socks must be embedded in a SOCK_ITEM attr
[  414.241332][T15245] ip6_vti0 speed is unknown, defaulting to 1000
[  414.903591][T15267] xt_socket: unknown flags 0xfc
[  414.971427][T15246] ip6_vti0 speed is unknown, defaulting to 1000
[  415.890268][T15271] wlan0 speed is unknown, defaulting to 1000
[  415.936730][T15270] wlan0 speed is unknown, defaulting to 1000
[  415.990803][T15275] wlan0 speed is unknown, defaulting to 1000
[  416.050862][T15275] ip6_vti0 speed is unknown, defaulting to 1000
[  416.228077][T15284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'.
[  416.797350][T15271] ip6_vti0 speed is unknown, defaulting to 1000
[  417.300573][T15270] ip6_vti0 speed is unknown, defaulting to 1000
[  417.731258][T15303] pim6reg1: entered promiscuous mode
[  417.750066][T15303] pim6reg1: entered allmulticast mode
[  418.741823][T15313] netlink: 'syz.1.2228': attribute type 298 has an invalid length.
[  418.811906][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'.
[  419.458846][T15340] netlink: 'syz.4.2233': attribute type 4 has an invalid length.
[  419.615928][T15350] batadv_slave_0: entered promiscuous mode
[  419.630826][T15348] batadv_slave_0: left promiscuous mode
[  419.918788][T15376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2243'.
[  420.195137][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'.
[  420.390572][T15404] wlan0 speed is unknown, defaulting to 1000
[  420.425968][T15404] ip6_vti0 speed is unknown, defaulting to 1000
[  420.821515][T15433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2257'.
[  421.086242][T15446] wlan0 speed is unknown, defaulting to 1000
[  421.125059][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2259'.
[  421.264750][T15446] ip6_vti0 speed is unknown, defaulting to 1000
[  421.479401][T15451] wlan0 speed is unknown, defaulting to 1000
[  421.583876][T15468] bridge7: entered promiscuous mode
[  421.589507][T15468] bridge7: entered allmulticast mode
[  422.100106][T15451] ip6_vti0 speed is unknown, defaulting to 1000
[  422.165056][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'.
[  422.452673][T15490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2268'.
[  422.462896][T15490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2268'.
[  422.491694][T15490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2268'.
[  422.817231][T15501] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2273'.
[  423.154326][T15502] wlan0 speed is unknown, defaulting to 1000
[  423.241752][T15503] wlan0 speed is unknown, defaulting to 1000
[  423.256914][T15502] ip6_vti0 speed is unknown, defaulting to 1000
[  423.364959][T15511] x_tables: duplicate underflow at hook 2
[  423.837074][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2277'.
[  424.001338][T15503] ip6_vti0 speed is unknown, defaulting to 1000
[  424.007865][T15523] wlan0 speed is unknown, defaulting to 1000
[  424.471052][T15523] ip6_vti0 speed is unknown, defaulting to 1000
[  424.695495][T15546] netlink: 'syz.2.2286': attribute type 13 has an invalid length.
[  424.716666][T15546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2286'.
[  424.777747][T15549] netlink: 'syz.0.2285': attribute type 29 has an invalid length.
[  424.786420][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'.
[  425.193699][T15562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2290'.
[  426.163662][T15593] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2298'.
[  426.183648][T15595] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  426.191117][T15595] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  426.214852][T15595] veth1_virt_wifi: entered allmulticast mode
[  426.235986][T15595] veth1_virt_wifi: left allmulticast mode
[  426.307434][T15595] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2297'.
[  426.429928][T15602] bond6: entered allmulticast mode
[  426.439740][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'.
[  426.578181][T15613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2302'.
[  426.850129][T15620] bond8: option packets_per_slave: invalid value (1048582)
[  426.850825][T15615] netlink: 'syz.3.2303': attribute type 1 has an invalid length.
[  426.858627][T15620] bond8: option packets_per_slave: allowed values 0 - 65535
[  426.877302][T15620] bond8 (unregistering): Released all slaves
[  426.977945][T15615] 8021q: adding VLAN 0 to HW filter on device bond4
[  427.004716][T15631] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.043468][T15626] wlan0 speed is unknown, defaulting to 1000
[  427.062672][T15626] ip6_vti0 speed is unknown, defaulting to 1000
[  427.079066][T15631] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.154490][T15631] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.214129][T15631] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.329441][   T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.436973][T11948] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.543313][T11948] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.627159][T11944] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.774211][T15666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.844066][T15673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2316'.
[  428.275378][T15688] wlan0 speed is unknown, defaulting to 1000
[  428.293708][T15688] ip6_vti0 speed is unknown, defaulting to 1000
[  429.756019][T15746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2332'.
[  429.919856][T15754] tap0: tun_chr_ioctl cmd 1074025673
[  429.927146][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'.
[  429.996750][T15756] netlink: 1168 bytes leftover after parsing attributes in process `syz.2.2335'.
[  430.307398][T15776] netlink: 'syz.3.2341': attribute type 10 has an invalid length.
[  430.326292][T15776] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2341'.
[  430.351865][T15776] team0: entered promiscuous mode
[  430.662177][T15803] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2350'.
[  430.728097][T15804] nbd0: detected capacity change from 0 to 127
[  430.773287][ T5148] block nbd0: Receive control failed (result -32)
[  430.888305][T15818] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2353'.
[  430.907993][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'.
[  431.001964][T15825] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  431.407020][T15858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2362'.
[  431.417865][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2362'.
[  431.471189][T15862] macsec2: entered promiscuous mode
[  431.492522][T15862] bridge0: entered promiscuous mode
[  431.505037][T15862] bridge0: port 1(macsec2) entered blocking state
[  431.512531][T15862] bridge0: port 1(macsec2) entered disabled state
[  431.519405][T15862] macsec2: entered allmulticast mode
[  431.542290][T15862] bridge0: entered allmulticast mode
[  431.603031][T15862] macsec2: left allmulticast mode
[  431.609020][T15862] bridge0: left allmulticast mode
[  431.616446][T15862] bridge0: left promiscuous mode
[  431.853843][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2369'.
[  432.163767][T15900] wlan0 speed is unknown, defaulting to 1000
[  432.180571][T15900] ip6_vti0 speed is unknown, defaulting to 1000
[  432.276620][T15910] netlink: 'syz.4.2375': attribute type 9 has an invalid length.
[  432.495421][T15913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.511141][T15913] syzkaller0: entered promiscuous mode
[  432.525568][T15913] syzkaller0: entered allmulticast mode
[  432.582953][T15913] tipc: Resetting bearer <eth:syzkaller0>
[  432.593322][T15912] tipc: Resetting bearer <eth:syzkaller0>
[  432.680467][T15912] tipc: Disabling bearer <eth:syzkaller0>
[  433.516018][T15934] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  434.145259][T15957] netlink: 'syz.1.2388': attribute type 13 has an invalid length.
[  434.202767][T15957] gretap0: refused to change device tx_queue_len
[  434.232601][T15957] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  434.330990][T15960] pimreg: entered allmulticast mode
[  434.605136][T15960] pimreg: left allmulticast mode
[  434.969309][T15991] __nla_validate_parse: 5 callbacks suppressed
[  434.969333][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2398'.
[  435.107942][T16001] netlink: 'syz.3.2397': attribute type 1 has an invalid length.
[  435.138845][T16003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2400'.
[  435.188291][T16001] 8021q: adding VLAN 0 to HW filter on device bond5
[  435.211667][T15997] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2400'.
[  435.238844][T16002] bond5: (slave dummy0): making interface the new active one
[  435.249500][T16002] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  435.260292][T15997] 0ªX¹¦À: renamed from caif0
[  435.271618][T15997] 0ªX¹¦À: entered allmulticast mode
[  435.281771][T16003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2400'.
[  435.293229][T15997] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  435.320951][T16012] syzkaller1: entered promiscuous mode
[  435.329298][T16012] syzkaller1: entered allmulticast mode
[  435.332509][T15997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2400'.
[  435.477691][T16022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2405'.
[  435.497925][T16022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2405'.
[  435.861667][T16052] netlink: 'syz.4.2413': attribute type 1 has an invalid length.
[  436.066709][T16056] wlan0 speed is unknown, defaulting to 1000
[  436.075581][T16056] ip6_vti0 speed is unknown, defaulting to 1000
[  436.655256][T16070] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  436.701117][T16072] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2416'.
[  436.741351][T16072] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  436.951940][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'.
[  436.971305][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2419'.
[  437.184165][T16092] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  437.569708][T16117] netlink: 'syz.2.2426': attribute type 1 has an invalid length.
[  437.581641][T16117] netlink: 'syz.2.2426': attribute type 3 has an invalid length.
[  437.590086][T16117] netlink: 'syz.2.2426': attribute type 2 has an invalid length.
[  437.600441][T16117] netlink: 'syz.2.2426': attribute type 3 has an invalid length.
[  438.613116][T16149] netlink: 'syz.3.2432': attribute type 13 has an invalid length.
[  438.621210][T16149] netlink: 'syz.3.2432': attribute type 17 has an invalid length.
[  438.690472][T16149] team0: left promiscuous mode
[  438.709181][T16156] netlink: 'syz.0.2433': attribute type 13 has an invalid length.
[  438.718768][T16156] netlink: 'syz.0.2433': attribute type 17 has an invalid length.
[  438.727700][T16149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  438.806365][T16162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.824953][T16156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  439.010386][T16159] wlan0 speed is unknown, defaulting to 1000
[  439.023516][T16159] ip6_vti0 speed is unknown, defaulting to 1000
[  439.104769][T16165] wlan0 speed is unknown, defaulting to 1000
[  439.300105][T16175] netlink: 'syz.1.2441': attribute type 1 has an invalid length.
[  439.364151][T16165] ip6_vti0 speed is unknown, defaulting to 1000
[  439.386537][T16175] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  439.976355][T16183] C: renamed from lo (while UP)
[  439.995048][T16183] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  440.170685][T16196] xt_recent: Unsupported userspace flags (000000b1)
[  440.681112][T16201] __nla_validate_parse: 8 callbacks suppressed
[  440.681137][T16201] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2447'.
[  440.859334][T16209] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  440.882186][T16209] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  440.928776][T16211] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  440.935614][T16209] wlan0 speed is unknown, defaulting to 1000
[  440.977033][T16209] ip6_vti0 speed is unknown, defaulting to 1000
[  441.306782][T16231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2453'.
[  441.455789][T16233] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  441.741615][T16247] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  443.265196][ T8010] bond0: (slave bond_slave_0): interface is now down
[  443.274581][ T8010] bond0: (slave bond_slave_1): interface is now down
[  443.280382][T16303] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.281700][ T8010] bond0: (slave team0): interface is now down
[  443.329276][T16311] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  443.330464][T16303] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  443.337828][ T8010] bond0: (slave bond_slave_0): interface is now down
[  443.363536][ T8010] bond0: (slave bond_slave_1): interface is now down
[  443.382125][ T8010] bond0: (slave team0): interface is now down
[  443.398823][T16297] wlan0 speed is unknown, defaulting to 1000
[  443.407964][T16297] ip6_vti0 speed is unknown, defaulting to 1000
[  443.415518][T11943] bond0: (slave bond_slave_0): interface is now down
[  443.425066][T11943] bond0: (slave bond_slave_1): interface is now down
[  443.431920][T11943] bond0: (slave team0): interface is now down
[  443.475957][T11944] bond0: (slave bond_slave_0): interface is now down
[  443.487629][T11944] bond0: (slave bond_slave_1): interface is now down
[  443.504489][T11944] bond0: (slave team0): interface is now down
[  443.527290][T11944] bond0: now running without any active interface!
[  443.721937][T16332] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2473'.
[  443.910828][T11943] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.993018][ T8010] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.039938][T11944] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.139713][ T8010] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.458874][T16367] macvtap1: entered promiscuous mode
[  444.479231][T16367] batadv0: entered promiscuous mode
[  444.505300][T16367] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  444.535225][T16367] batadv0: left promiscuous mode
[  444.813069][T16376] IPVS: length: 209 != 24
[  444.950381][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2487'.
[  445.143887][T16391] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  445.561431][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'.
[  445.641528][T16413] syzkaller1: entered promiscuous mode
[  445.667566][T16413] syzkaller1: entered allmulticast mode
[  445.711666][T16415] netlink: 'syz.4.2496': attribute type 29 has an invalid length.
[  446.949862][T16470] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  447.087045][T16474] sctp: [Deprecated]: syz.0.2508 (pid 16474) Use of int in max_burst socket option.
[  447.087045][T16474] Use struct sctp_assoc_value instead
[  447.284904][T16487] xt_l2tp: missing protocol rule (udp|l2tpip)
[  447.304202][T16489] nbd: must specify at least one socket
[  447.537581][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'.
[  448.247699][T16536] wlan0 speed is unknown, defaulting to 1000
[  448.256047][T16536] ip6_vti0 speed is unknown, defaulting to 1000
[  449.742423][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2530'.
[  449.791536][T16565] openvswitch: netlink: Missing key (keys=40, expected=80)
[  449.861642][T16572] sctp: [Deprecated]: syz.2.2533 (pid 16572) Use of int in max_burst socket option deprecated.
[  449.861642][T16572] Use struct sctp_assoc_value instead
[  450.047630][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2531'.
[  450.105146][T16581] sctp: [Deprecated]: syz.2.2536 (pid 16581) Use of struct sctp_assoc_value in delayed_ack socket option.
[  450.105146][T16581] Use struct sctp_sack_info instead
[  450.163518][T16590] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  450.232570][T16592] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2537'.
[  450.350812][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'.
[  450.360827][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2539'.
[  450.767055][T16618] netlink: 'syz.2.2545': attribute type 16 has an invalid length.
[  450.790699][T16618] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2545'.
[  451.256735][T16629] wlan0 speed is unknown, defaulting to 1000
[  451.359773][T16629] ip6_vti0 speed is unknown, defaulting to 1000
[  451.384337][T16634] wlan0 speed is unknown, defaulting to 1000
[  451.571900][T16635] syzkaller0: entered promiscuous mode
[  451.615023][T16635] syzkaller0: entered allmulticast mode
[  451.790821][T16634] ip6_vti0 speed is unknown, defaulting to 1000
[  451.800915][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2553'.
[  452.319821][T16666] netlink: 'syz.1.2558': attribute type 96 has an invalid length.
[  452.408279][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'.
[  452.490902][T16672] pim6reg: entered allmulticast mode
[  452.535350][T16678] pim6reg: left allmulticast mode
[  452.592727][T16680] rdma_op ffff8880757951f0 conn xmit_rdma 0000000000000000
[  452.629103][T16680] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2561'.
[  452.841694][T16687] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2564'.
[  452.942192][T16695] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2564'.
[  452.962137][T16688] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2564'.
[  453.183733][T16704] --map-set only usable from mangle table
[  453.234507][T16703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  453.498559][T16718] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2570'.
[  453.508313][T16718] nbd: illegal input index 65508
[  453.851700][T16721] syzkaller0: entered promiscuous mode
[  453.857849][T16721] syzkaller0: entered allmulticast mode
[  453.980038][T16726] x_tables: duplicate underflow at hook 3
[  455.922873][T16737] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  455.952286][T16739] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  455.960003][T16739] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  456.023047][T16740] bond0: (slave syz_tun): Releasing backup interface
[  456.029808][T16740] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  456.093880][T16740] bond0: (slave dummy0): Releasing backup interface
[  456.126302][T16740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  456.352401][T16749] dvmrp6: left allmulticast mode
[  456.580868][T16770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2583'.
[  456.614735][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'.
[  457.071682][T16779] wlan0 speed is unknown, defaulting to 1000
[  457.142360][T16779] ip6_vti0 speed is unknown, defaulting to 1000
[  457.258046][T16788] netlink: 'syz.0.2584': attribute type 2 has an invalid length.
[  457.358708][T16788] netlink: 'syz.0.2584': attribute type 1 has an invalid length.
[  457.410558][T16793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2586'.
[  457.504004][T16782] wlan0 speed is unknown, defaulting to 1000
[  457.507721][T16793] veth0: entered promiscuous mode
[  457.667130][T16787] wlan0 speed is unknown, defaulting to 1000
[  457.694070][T16791] veth0: left promiscuous mode
[  458.291060][T16782] ip6_vti0 speed is unknown, defaulting to 1000
[  458.753088][T16814] delete_channel: no stack
[  458.760168][T16787] ip6_vti0 speed is unknown, defaulting to 1000
[  459.976553][T16825] netlink: 'syz.1.2595': attribute type 1 has an invalid length.
[  460.113316][T16825] 8021q: adding VLAN 0 to HW filter on device bond5
[  460.265038][T16827] 8021q: adding VLAN 0 to HW filter on device bond5
[  460.273580][T16827] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  460.285755][T16827] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  460.323855][T16825] vlan5: entered allmulticast mode
[  460.329128][T16825] team0: entered allmulticast mode
[  460.372808][T16825] team_slave_0: entered allmulticast mode
[  460.378868][T16825] team_slave_1: entered allmulticast mode
[  460.654839][T16838] netlink: 'syz.1.2597': attribute type 13 has an invalid length.
[  460.663702][T16838] netlink: 'syz.1.2597': attribute type 17 has an invalid length.
[  460.754774][T16838] 0ªX¹¦À: left allmulticast mode
[  460.760313][T16838] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  460.863899][T16836] wlan0 speed is unknown, defaulting to 1000
[  460.873082][T16836] ip6_vti0 speed is unknown, defaulting to 1000
[  460.914079][T16842] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  460.954528][T16838] wlan0 speed is unknown, defaulting to 1000
[  461.487039][T16838] ip6_vti0 speed is unknown, defaulting to 1000
[  461.554452][T16851] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  461.696158][T16849] delete_channel: no stack
[  461.875333][T16854] wlan0 speed is unknown, defaulting to 1000
[  461.933077][T16855] veth0: entered promiscuous mode
[  462.082367][T16855] netlink: 'syz.3.2602': attribute type 16 has an invalid length.
[  462.091093][T16855] netlink: 'syz.3.2602': attribute type 17 has an invalid length.
[  462.109398][T16854] ip6_vti0 speed is unknown, defaulting to 1000
[  462.155104][T16855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  462.978538][T16855] veth0: left promiscuous mode
[  463.100719][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'.
[  463.288387][T16888] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2609'.
[  463.434751][T16894] netlink: 'syz.2.2611': attribute type 1 has an invalid length.
[  463.490121][T16894] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2611'.
[  463.730862][T16904] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2614'.
[  464.356001][T16922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2620'.
[  464.424272][T16921] wlan0 speed is unknown, defaulting to 1000
[  464.445400][T16921] ip6_vti0 speed is unknown, defaulting to 1000
[  465.133311][T16942] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  465.142337][T16945] wlan0 speed is unknown, defaulting to 1000
[  465.211768][T16953] netlink: zone id is out of range
[  465.358750][T16945] ip6_vti0 speed is unknown, defaulting to 1000
[  465.477052][T16961] x_tables: ip_tables: ah match: only valid for protocol 51
[  465.488505][T16960] netlink: 'syz.4.2630': attribute type 5 has an invalid length.
[  465.887681][T16979] netlink: 'syz.2.2634': attribute type 11 has an invalid length.
[  466.050323][T16983] geneve2: entered promiscuous mode
[  466.086491][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2635'.
[  466.148363][T16981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2635'.
[  466.290952][T16987] syz_tun: entered allmulticast mode
[  466.328277][T16987] 0ªX¹¦À: left allmulticast mode
[  466.334006][T16987] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  466.359751][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2637'.
[  466.386289][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2637'.
[  466.398350][T16986] syz_tun: left allmulticast mode
[  466.593573][T16992] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  466.715757][T17004] siw: device registration error -23
[  466.786932][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'.
[  467.280999][T17031] ip6_vti0 speed is unknown, defaulting to 1000
[  467.447176][T17038] netlink: 'syz.4.2650': attribute type 39 has an invalid length.
[  467.660899][T17041] warn_alloc: 1 callbacks suppressed
[  467.660919][T17041] syz.1.2651: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  467.679082][T17035] bond6 (unregistering): Released all slaves
[  467.752089][T17041] CPU: 0 UID: 0 PID: 17041 Comm: syz.1.2651 Not tainted syzkaller #0 PREEMPT(full) 
[  467.752119][T17041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  467.752137][T17041] Call Trace:
[  467.752145][T17041]  <TASK>
[  467.752154][T17041]  dump_stack_lvl+0x189/0x250
[  467.752189][T17041]  ? __pfx_dump_stack_lvl+0x10/0x10
[  467.752215][T17041]  ? __pfx__printk+0x10/0x10
[  467.752235][T17041]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  467.752262][T17041]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  467.752290][T17041]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  467.752318][T17041]  warn_alloc+0x214/0x310
[  467.752354][T17041]  ? __pfx_warn_alloc+0x10/0x10
[  467.752394][T17041]  ? __get_vm_area_node+0x28f/0x300
[  467.752420][T17041]  ? xskq_create+0xbf/0x170
[  467.752450][T17041]  __vmalloc_node_range_noprof+0x690/0x12d0
[  467.752524][T17041]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  467.752556][T17041]  ? __kasan_kmalloc+0x93/0xb0
[  467.752591][T17041]  vmalloc_user_noprof+0xad/0xf0
[  467.752618][T17041]  ? xskq_create+0xbf/0x170
[  467.752644][T17041]  xskq_create+0xbf/0x170
[  467.752671][T17041]  xsk_init_queue+0xb0/0x110
[  467.752699][T17041]  xsk_setsockopt+0x57b/0x8d0
[  467.752725][T17041]  ? __pfx_xsk_setsockopt+0x10/0x10
[  467.752754][T17041]  ? __pfx_aa_sk_perm+0x10/0x10
[  467.752784][T17041]  ? aa_sock_opt_perm+0xff/0x1b0
[  467.752815][T17041]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  467.752833][T17041]  ? __pfx_xsk_setsockopt+0x10/0x10
[  467.752860][T17041]  do_sock_setsockopt+0x17c/0x1b0
[  467.752887][T17041]  __x64_sys_setsockopt+0x13f/0x1b0
[  467.752914][T17041]  do_syscall_64+0xfa/0xfa0
[  467.752948][T17041]  ? lockdep_hardirqs_on+0x9c/0x150
[  467.752975][T17041]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.752992][T17041]  ? clear_bhb_loop+0x60/0xb0
[  467.753016][T17041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.753034][T17041] RIP: 0033:0x7f2ddff8f6c9
[  467.753053][T17041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  467.753069][T17041] RSP: 002b:00007f2de0ec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  467.753089][T17041] RAX: ffffffffffffffda RBX: 00007f2de01e5fa0 RCX: 00007f2ddff8f6c9
[  467.753103][T17041] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  467.753114][T17041] RBP: 00007f2de0011f91 R08: 0000000000000004 R09: 0000000000000000
[  467.753134][T17041] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  467.753145][T17041] R13: 00007f2de01e6038 R14: 00007f2de01e5fa0 R15: 00007ffe7d046338
[  467.753180][T17041]  </TASK>
[  467.978796][T17041] Mem-Info:
[  468.034813][T17041] active_anon:3980 inactive_anon:0 isolated_anon:0
[  468.034813][T17041]  active_file:3213 inactive_file:40024 isolated_file:0
[  468.034813][T17041]  unevictable:768 dirty:236 writeback:0
[  468.034813][T17041]  slab_reclaimable:12456 slab_unreclaimable:177724
[  468.034813][T17041]  mapped:32341 shmem:1377 pagetables:986
[  468.034813][T17041]  sec_pagetables:0 bounce:0
[  468.034813][T17041]  kernel_misc_reclaimable:0
[  468.034813][T17041]  free:1252725 free_pcp:11449 free_cma:0
[  468.091666][T17041] Node 0 active_anon:15920kB inactive_anon:0kB active_file:12852kB inactive_file:159896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129364kB dirty:940kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13732kB pagetables:3824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  468.137006][T17053] __nla_validate_parse: 1 callbacks suppressed
[  468.137024][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2653'.
[  468.139411][T17041] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  468.185515][T17041] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  468.224761][T17041] lowmem_reserve[]: 0 2505 2505 2505 2505
[  468.231785][T17041] Node 0 DMA32 free:1095000kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15876kB inactive_anon:0kB active_file:12852kB inactive_file:159896kB unevictable:1536kB writepending:964kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:35432kB local_pcp:12888kB free_cma:0kB
[  468.284800][T17041] lowmem_reserve[]: 0 0 0 0 0
[  468.289791][T17041] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  468.386333][T17041] lowmem_reserve[]: 0 0 0 0 0
[  468.391533][T17041] Node 1 Normal free:3900988kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9760kB local_pcp:5728kB free_cma:0kB
[  468.432434][T17041] lowmem_reserve[]: 0 0 0 0 0
[  468.440359][T17041] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  468.460209][T17041] Node 0 DMA32: 3148*4kB (UME) 2216*8kB (UM) 866*16kB (UME) 687*32kB (UME) 545*64kB (UME) 235*128kB (UME) 146*256kB (UM) 89*512kB (UE) 54*1024kB (UE) 3*2048kB (M) 200*4096kB (UM) = 1094704kB
[  468.481673][T17041] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  468.496923][T17041] Node 1 Normal: 179*4kB (UME) 54*8kB (UME) 44*16kB (UME) 188*32kB (UME) 68*64kB (UME) 13*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3900988kB
[  468.547688][T17041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  468.558472][T17041] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  468.570145][T17041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  468.583293][T17041] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  468.593514][T17041] 44615 total pagecache pages
[  468.598297][T17041] 0 pages in swap cache
[  468.602848][T17041] Free swap  = 124996kB
[  468.607691][T17041] Total swap = 124996kB
[  468.612488][T17041] 2097051 pages RAM
[  468.616351][T17041] 0 pages HighMem/MovableOnly
[  468.621657][T17041] 424124 pages reserved
[  468.626358][T17041] 0 pages cma reserved
[  468.908093][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'.
[  469.020178][T17073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.418750][T17089] netlink: 'syz.2.2661': attribute type 3 has an invalid length.
[  469.492566][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'.
[  469.706156][T17100] 8021q: VLANs not supported on 
60ªX¹¦À
[  469.743765][T17103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2665'.
[  469.758824][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2666'.
[  469.782270][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'.
[  470.189915][T17107] hsr0: left promiscuous mode
[  470.208506][T17107] hsr0: left allmulticast mode
[  470.231926][T17107] hsr_slave_0: left allmulticast mode
[  470.239796][T17107] hsr_slave_1: left allmulticast mode
[  470.247422][T17107] veth0_virt_wifi: left allmulticast mode
[  470.255762][T17107] vlan0: left promiscuous mode
[  470.261205][T17107] vlan0: left allmulticast mode
[  470.267115][T17107] veth0_vlan: left allmulticast mode
[  470.276177][T17107] macvtap1: left promiscuous mode
[  470.286600][T17131] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2668'.
[  470.297631][T17107] macvtap1: left allmulticast mode
[  470.304937][T17107] macvtap2: left promiscuous mode
[  470.310947][T17107] macvtap2: left allmulticast mode
[  470.319958][T17107] vti0: left promiscuous mode
[  470.327084][T17107] nicvf0: left promiscuous mode
[  470.333921][T17107] ip6gre1: left promiscuous mode
[  470.339828][T17107] ip6gre1: left allmulticast mode
[  470.354630][T17107] bond6: left allmulticast mode
[  470.548445][T17128] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  470.575585][T17136] netlink: 'syz.0.2670': attribute type 20 has an invalid length.
[  470.577300][T17139] netlink: 'syz.0.2670': attribute type 20 has an invalid length.
[  470.643523][T17130] ip6_vti0 speed is unknown, defaulting to 1000
[  470.923083][T17147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.944442][T17147] syzkaller0: entered promiscuous mode
[  470.960393][T17147] syzkaller0: entered allmulticast mode
[  470.990364][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'.
[  471.009247][T17147] tipc: Resetting bearer <eth:syzkaller0>
[  471.104746][T17151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  471.258557][T17135] ip6_vti0 speed is unknown, defaulting to 1000
[  471.499880][T17158] sctp: [Deprecated]: syz.2.2674 (pid 17158) Use of struct sctp_assoc_value in delayed_ack socket option.
[  471.499880][T17158] Use struct sctp_sack_info instead
[  471.636517][T17146] tipc: Resetting bearer <eth:syzkaller0>
[  471.656490][T17146] tipc: Disabling bearer <eth:syzkaller0>
[  472.257496][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2677'.
[  473.196730][T17207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2683'.
[  473.409444][T17206] ip6_vti0 speed is unknown, defaulting to 1000
[  474.348951][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2691'.
[  474.466942][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2686'.
[  474.707994][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'.
[  474.724901][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'.
[  474.804469][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'.
[  474.823156][T17253] netlink: 'syz.4.2692': attribute type 83 has an invalid length.
[  474.866491][T17239] ip6_vti0 speed is unknown, defaulting to 1000
[  474.948438][T17258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  474.998120][T17258] syzkaller0: entered promiscuous mode
[  475.005377][T17258] syzkaller0: entered allmulticast mode
[  475.046653][T17258] tipc: Resetting bearer <eth:syzkaller0>
[  475.065092][T17257] tipc: Resetting bearer <eth:syzkaller0>
[  475.093336][T17257] tipc: Disabling bearer <eth:syzkaller0>
[  475.291273][T17270] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  475.634655][T17279] netlink: 'syz.2.2702': attribute type 11 has an invalid length.
[  475.643014][T17279] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2702'.
[  475.856095][T17276] ip6_vti0 speed is unknown, defaulting to 1000
[  476.300235][T17289] ip6_vti0 speed is unknown, defaulting to 1000
[  476.858504][T17302] netlink: 'syz.1.2708': attribute type 1 has an invalid length.
[  476.912319][T17302] bond6: entered promiscuous mode
[  476.918376][T17302] 8021q: adding VLAN 0 to HW filter on device bond6
[  476.996699][T17310] 8021q: adding VLAN 0 to HW filter on device bond7
[  477.010109][T17310] bond6: (slave bond7): making interface the new active one
[  477.024267][T17310] bond7: entered promiscuous mode
[  477.034599][T17310] bond6: (slave bond7): Enslaving as an active interface with an up link
[  477.405172][T17321] vlan2: entered promiscuous mode
[  477.410876][T17321] gretap0: entered promiscuous mode
[  477.414792][T17326] netlink: 'syz.1.2713': attribute type 1 has an invalid length.
[  477.426003][T17323] netlink: 'syz.3.2714': attribute type 16 has an invalid length.
[  477.470477][T17326] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  477.994513][T17368] sctp: [Deprecated]: syz.0.2722 (pid 17368) Use of int in max_burst socket option.
[  477.994513][T17368] Use struct sctp_assoc_value instead
[  478.125436][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2723'.
[  478.233052][T17371] syzkaller0: mtu less than device minimum
[  478.638523][T17381] netlink: 'syz.3.2727': attribute type 1 has an invalid length.
[  478.649079][T17381] netlink: 'syz.3.2727': attribute type 1 has an invalid length.
[  479.022407][T17403] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20000
[  479.209592][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2737'.
[  479.234575][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'.
[  479.269891][T17409] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2737'.
[  479.308867][T17418] netlink: 'syz.2.2737': attribute type 13 has an invalid length.
[  479.520684][T17434] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2740'.
[  479.596242][T17418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.699457][T17418] tipc: Resetting bearer <eth:syzkaller0>
[  479.755773][T17418] ip6gretap0: left allmulticast mode
[  479.777548][T17431] netlink: 'syz.3.2740': attribute type 4 has an invalid length.
[  479.881450][ T7999] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  479.893349][ T7999] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  479.959226][T17439] tunl0: entered promiscuous mode
[  479.969025][T17439] netlink: 'syz.1.2744': attribute type 4 has an invalid length.
[  479.977230][T17439] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2744'.
[  480.002585][ T7999] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.011286][ T7999] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.062588][ T7999] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.094260][ T7999] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.114108][ T7999] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.127404][ T7999] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.213130][T17455] 8021q: VLANs not supported on caif0
[  480.393887][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2752'.
[  480.452424][T17469] netlink: 'syz.2.2753': attribute type 1 has an invalid length.
[  480.676507][T17480] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.855772][T17480] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.874991][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2760'.
[  480.953303][T17480] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.034018][T17480] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.151421][T11948] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.248931][T11948] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.268027][T11948] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.292102][T11948] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.459942][T17500] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.530555][T17503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  481.545065][T17502] tipc: Disabling bearer <eth:syzkaller0>
[  481.577699][T17500] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.611777][T17507] SET target dimension over the limit!
[  481.697674][T17500] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.900458][T17513] ip6_vti0 speed is unknown, defaulting to 1000
[  481.953005][T17500] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.491910][T17528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2773'.
[  482.636944][T17526] ip6_vti0 speed is unknown, defaulting to 1000
[  483.120010][T17553] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2779'.
[  483.167677][T17557] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  483.434968][T11955] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.447327][T17561] ip6_vti0 speed is unknown, defaulting to 1000
[  483.504300][T11955] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.629063][ T7999] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.649180][ T7999] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.880252][T17577] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  484.209876][T17591] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2790'.
[  484.261908][T17590] netlink: 'syz.3.2791': attribute type 1 has an invalid length.
[  484.320996][T17590] 8021q: adding VLAN 0 to HW filter on device bond6
[  484.338173][T17592] bond5: (slave dummy0): Releasing active interface
[  484.360507][T17592] bond6: (slave dummy0): making interface the new active one
[  484.376596][T17592] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  484.749015][T17609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2796'.
[  484.767897][T17607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  484.823509][T17607] syzkaller0: entered promiscuous mode
[  484.829262][T17607] syzkaller0: entered allmulticast mode
[  484.863394][T17615] netlink: 'syz.1.2798': attribute type 33 has an invalid length.
[  484.934493][T17606] tipc: Resetting bearer <eth:syzkaller0>
[  485.006975][T17606] tipc: Disabling bearer <eth:syzkaller0>
[  485.038910][T17615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2798'.
[  485.054619][T17615] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2798'.
[  485.072380][T17615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2798'.
[  485.315111][T17633] ip6_vti0 speed is unknown, defaulting to 1000
[  485.611067][T17651] syzkaller0: entered promiscuous mode
[  485.627388][T17651] syzkaller0: entered allmulticast mode
[  485.882643][T17656] ip6_vti0 speed is unknown, defaulting to 1000
[  486.019773][T17678] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2813'.
[  486.056126][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2813'.
[  486.138271][T17678] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2813'.
[  486.603897][T17670] ip6_vti0 speed is unknown, defaulting to 1000
[  486.742583][T17710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'.
[  486.811743][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'.
[  486.821465][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'.
[  487.043599][T17701] ip6_vti0 speed is unknown, defaulting to 1000
[  487.438856][T17708] ip6_vti0 speed is unknown, defaulting to 1000
[  487.480164][T17733] bond7 (unregistering): Released all slaves
[  487.683040][T17723] ip6_vti0 speed is unknown, defaulting to 1000
[  490.012656][T17766] ip6_vti0 speed is unknown, defaulting to 1000
[  490.556377][T17805] syzkaller0: entered promiscuous mode
[  490.569484][T17805] syzkaller0: entered allmulticast mode
[  490.620836][T17806] xt_bpf: check failed: parse error
[  490.876518][T17825] __nla_validate_parse: 1 callbacks suppressed
[  490.876540][T17825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2845'.
[  490.944504][T17780] ip6_vti0 speed is unknown, defaulting to 1000
[  492.017378][T17862] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2851'.
[  493.158292][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  493.170637][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  493.179395][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  493.184209][ T7999] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.189121][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  493.205805][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  493.300784][ T7999] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.302118][T17893] netlink: 'syz.4.2859': attribute type 2 has an invalid length.
[  493.319249][T17893] netlink: 'syz.4.2859': attribute type 1 has an invalid length.
[  493.336301][T17886] ip6_vti0 speed is unknown, defaulting to 1000
[  493.363297][T17895] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  493.377436][T17893] sch_fq: defrate 4294967293 ignored.
[  493.398860][ T7999] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.479853][ T7999] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.529638][T17898] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2861'.
[  494.234485][ T7999] bond3 (unregistering): (slave gretap3): Releasing active interface
[  494.248018][ T7999] gretap3 (unregistering): left allmulticast mode
[  494.766240][ T7999] bond0 (unregistering): Released all slaves
[  494.901436][ T7999] bond1 (unregistering): Released all slaves
[  494.916228][ T7999] bond2 (unregistering): (slave vcan1): Releasing backup interface
[  494.925169][ T7999] bond2 (unregistering): Released all slaves
[  495.059011][ T7999] bond3 (unregistering): Released all slaves
[  495.185151][ T7999] bond4 (unregistering): Released all slaves
[  495.277519][ T5148] Bluetooth: hci4: command tx timeout
[  495.326765][ T7999] bond5 (unregistering): Released all slaves
[  495.451053][ T7999] bond6 (unregistering): (slave dummy0): Releasing active interface
[  495.464444][ T7999] bond6 (unregistering): Released all slaves
[  495.678319][T17921] netlink: 'syz.2.2866': attribute type 4 has an invalid length.
[  495.698707][ T7999] : left promiscuous mode
[  495.783204][ T7999] tipc: Disabling bearer <eth:syzkaller0>
[  495.805494][ T7999] tipc: Left network mode
[  495.819246][T17886] chnl_net:caif_netlink_parms(): no params data found
[  495.857940][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'.
[  495.894394][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'.
[  495.925984][T17927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2868'.
[  495.937115][T17927] openvswitch: netlink: Flow actions attr not present in new flow.
[  496.023623][T17926] TCP: TCP_TX_DELAY enabled
[  496.211646][T17886] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.216243][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'.
[  496.231224][T17886] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.246003][T17886] bridge_slave_0: entered allmulticast mode
[  496.255246][T17886] bridge_slave_0: entered promiscuous mode
[  496.274708][T17886] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.282435][T17886] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.304772][T17886] bridge_slave_1: entered allmulticast mode
[  496.317895][T17886] bridge_slave_1: entered promiscuous mode
[  496.406752][T17886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.421921][T17886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.508265][T17886] team0: Port device team_slave_0 added
[  496.520179][T17886] team0: Port device team_slave_1 added
[  496.620208][T17886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.637774][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  496.698039][T17886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.724478][T17886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.731740][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  496.780784][T17886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.158366][T17886] hsr_slave_0: entered promiscuous mode
[  497.169657][T17886] hsr_slave_1: entered promiscuous mode
[  497.236047][T17886] debugfs: 'hsr0' already exists in 'hsr'
[  497.241956][T17886] Cannot create hsr debugfs directory
[  497.322849][ T7999] hsr_slave_0: left promiscuous mode
[  497.372356][ T5148] Bluetooth: hci4: command tx timeout
[  497.954727][T17972] No such timeout policy "syz1"
[  499.435160][ T5148] Bluetooth: hci4: command tx timeout
[  499.556125][T17981] openvswitch: netlink: Flow key attr not present in new flow.
[  499.687790][ T7999] IPVS: stop unused estimator thread 0...
[  499.863732][T17986] ipvlan3: entered promiscuous mode
[  499.877413][T17986] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  500.133130][T17886] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  500.163940][T17886] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  500.177664][T17886] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  500.198772][T17886] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  500.314744][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2885'.
[  500.461096][T17886] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.557556][T17886] 8021q: adding VLAN 0 to HW filter on device team0
[  500.595006][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.602298][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.637262][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.644900][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.790221][T18017] bond0: (slave team0): Releasing backup interface
[  500.811748][T18017] bond0: (slave bond_slave_0): Releasing backup interface
[  500.834584][T18017] bond0: (slave bond_slave_1): Releasing backup interface
[  500.857392][T18017] team0: Port device team_slave_0 removed
[  500.876139][T18017] team0: Port device team_slave_1 removed
[  500.893536][T18017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.915420][T18017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  501.089204][T18017] ip6_vti0 speed is unknown, defaulting to 1000
[  501.512317][ T5148] Bluetooth: hci4: command tx timeout
[  501.591537][T17886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  501.687415][T18047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2893'.
[  501.845031][T18047] 8021q: adding VLAN 0 to HW filter on device bond7
[  501.945242][T18052] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  501.977233][T18052] bond7: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  502.423863][T18057] ip6_vti0 speed is unknown, defaulting to 1000
[  502.510828][T17886] veth0_vlan: entered promiscuous mode
[  502.573735][T18067] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2898'.
[  502.663638][T17886] veth1_vlan: entered promiscuous mode
[  502.772053][T17886] veth0_macvtap: entered promiscuous mode
[  502.862869][T18067] ip6_vti0 speed is unknown, defaulting to 1000
[  502.863756][T17886] veth1_macvtap: entered promiscuous mode
[  502.923394][T18083] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  502.932523][T18081] netlink: 'syz.4.2897': attribute type 9 has an invalid length.
[  502.982722][T18081] netlink: 'syz.4.2897': attribute type 9 has an invalid length.
[  503.258390][T17886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.304612][T17886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  503.345452][T11955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  503.371312][T11955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  503.410276][T11955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  503.433080][T11944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.566282][T11944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.601871][T11944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.719751][T11944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.722524][T18090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2901'.
[  503.737153][T11944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.784593][T18098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2901'.
[  503.955280][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2854'.
[  503.984411][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2854'.
[  504.185472][T18102] team1: entered promiscuous mode
[  504.211442][T18102] team1: entered allmulticast mode
[  504.220448][T18102] 8021q: adding VLAN 0 to HW filter on device team1
[  504.304824][T18104] team2: entered promiscuous mode
[  504.320624][T18104] team2: entered allmulticast mode
[  504.327143][T18104] 8021q: adding VLAN 0 to HW filter on device team2
[  504.486591][T18070] ip6_vti0 speed is unknown, defaulting to 1000
[  504.677823][T18111] macvtap1: entered promiscuous mode
[  504.683769][T18111] syz_tun: entered promiscuous mode
[  504.708328][T18111] syz_tun: left promiscuous mode
[  504.775040][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  504.789820][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  504.803308][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  504.831119][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  504.850545][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  504.978024][T18113] 8021q: adding VLAN 0 to HW filter on device bond1
[  504.991804][T18113] bond0: (slave bond1): Enslaving as an active interface with an up link
[  505.235231][T18115] ip6_vti0 speed is unknown, defaulting to 1000
[  505.998069][T18137] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  506.319165][T18147] pimreg: tun_chr_ioctl cmd 2147767506
[  506.569593][T18115] chnl_net:caif_netlink_parms(): no params data found
[  506.779758][ T5835] IPVS: starting estimator thread 0...
[  506.864448][T18115] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.875402][T18115] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.884747][T18115] bridge_slave_0: entered allmulticast mode
[  506.892237][T18168] IPVS: using max 25 ests per chain, 60000 per kthread
[  506.894870][T18115] bridge_slave_0: entered promiscuous mode
[  506.925809][T18166] tipc: Started in network mode
[  506.930820][T18166] tipc: Node identity ac1414aa, cluster identity 4711
[  506.941872][T18166] tipc: Enabled bearer <udp:s>, priority 10
[  506.951944][T18115] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.953430][ T5148] Bluetooth: hci5: command tx timeout
[  506.971759][T18115] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.979660][T18115] bridge_slave_1: entered allmulticast mode
[  506.987879][T18115] bridge_slave_1: entered promiscuous mode
[  507.125845][T18184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.138829][T18183] netlink: 'syz.1.2920': attribute type 1 has an invalid length.
[  507.162348][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'.
[  507.198174][T18115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  507.245077][T18115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.361420][T18115] team0: Port device team_slave_0 added
[  507.384775][T18115] team0: Port device team_slave_1 added
[  507.493282][T18115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.513205][T18115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.547088][T18208] netlink: 4240 bytes leftover after parsing attributes in process `syz.1.2928'.
[  507.566716][T18115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.600658][T18115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.619648][T18115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.681592][T18115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.705547][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'.
[  507.953175][T18115] hsr_slave_0: entered promiscuous mode
[  507.960630][T18115] hsr_slave_1: entered promiscuous mode
[  508.032982][T18115] debugfs: 'hsr0' already exists in 'hsr'
[  508.040391][T18115] Cannot create hsr debugfs directory
[  508.050723][T18224] syzkaller0: entered promiscuous mode
[  508.061951][T18224] syzkaller0: entered allmulticast mode
[  508.062404][T17690] tipc: Node number set to 2886997162
[  508.326904][T18239] ip6_vti0 speed is unknown, defaulting to 1000
[  508.779644][T18256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2940'.
[  508.839264][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'.
[  508.974101][T18265] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  508.981237][T18265] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  508.987999][T18265] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  508.994615][T18265] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  509.001559][T18265] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  509.008228][T18265] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  509.015254][T18265] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  509.021855][T18265] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  509.028791][T18265] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  509.042665][ T5148] Bluetooth: hci5: command tx timeout
[  509.718931][T18269] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.726733][T18269] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.019841][T18269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.044768][T18269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  510.486513][T18255] ip6_vti0 speed is unknown, defaulting to 1000
[  510.549941][ T8010] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.579717][ T8010] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.591918][T18290] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2946'.
[  510.654199][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2947'.
[  510.665400][T11955] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.675314][T11955] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.920643][T18115] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  510.944777][T18115] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  510.981930][T18115] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  511.011279][T18115] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  511.113015][ T5148] Bluetooth: hci5: command tx timeout
[  511.646794][T18115] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.725866][T18115] 8021q: adding VLAN 0 to HW filter on device team0
[  511.777103][T11948] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.784563][T11948] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.838984][T11948] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.846286][T11948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  512.490532][T18115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.718623][T18355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2963'.
[  513.001263][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2965'.
[  513.202248][ T5148] Bluetooth: hci5: command tx timeout
[  513.618415][T18373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2966'.
[  513.646623][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2966'.
[  513.791023][T18115] veth0_vlan: entered promiscuous mode
[  513.814044][T18376] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2967'.
[  513.869422][T18115] veth1_vlan: entered promiscuous mode
[  513.973848][T18115] veth0_macvtap: entered promiscuous mode
[  513.999274][T18115] veth1_macvtap: entered promiscuous mode
[  514.065650][T18115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.098831][T18115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.139736][T11948] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.247739][T11948] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.287261][T18393] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  514.306736][T11948] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.317608][T18389] netlink: 'syz.0.2973': attribute type 1 has an invalid length.
[  514.369936][T11948] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.410366][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'.
[  514.441888][T18396] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2975'.
[  514.455953][T18401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2976'.
[  514.769039][T18396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  514.781293][T18396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  514.795615][T18396] bond0 (unregistering): (slave bond1): Releasing backup interface
[  514.806461][T18396] bond0 (unregistering): Released all slaves
[  514.847301][T18389] mac80211_hwsim hwsim4 wlan1 (unregistering): left promiscuous mode
[  514.914580][T11948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.931386][T11948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.031020][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.045800][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.106246][T18420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2981'.
[  515.108328][T18413] netlink: 'syz.3.2982': attribute type 13 has an invalid length.
[  515.130679][T18413] netlink: 'syz.3.2982': attribute type 17 has an invalid length.
[  515.368796][T18413] 8021q: adding VLAN 0 to HW filter on device team0
[  515.447149][T18413] net_ratelimit: 15 callbacks suppressed
[  515.447158][T18413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  515.497867][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2985'.
[  516.145501][T18469] netlink: 'syz.4.2991': attribute type 10 has an invalid length.
[  516.363135][T18469] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  516.407345][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  516.422980][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  516.431646][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  516.461140][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  516.471841][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  516.714420][T18475] ip6_vti0 speed is unknown, defaulting to 1000
[  517.707820][   T61] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  517.722118][   T61] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - e6:70:1c:69:01:11 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  517.759576][   T61] ip6gretap1 (unregistering): left promiscuous mode
[  517.898427][T18529] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  518.094134][   T61] bond6 (unregistering): (slave ip6gretap3): Releasing backup interface
[  518.107282][   T61] bond6 (unregistering): (slave ip6gretap3): the permanent HWaddr of slave - 16:47:85:ca:41:8a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  518.266389][T18538] __nla_validate_parse: 4 callbacks suppressed
[  518.266413][T18538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3010'.
[  518.290610][T18538] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3010'.
[  518.554202][ T5148] Bluetooth: hci1: command tx timeout
[  518.900206][   T61] bond0 (unregistering): Released all slaves
[  519.033556][   T61] bond1 (unregistering): (slave veth3): Releasing active interface
[  519.042807][   T61] bond1 (unregistering): Released all slaves
[  519.057610][   T61] bond2 (unregistering): Released all slaves
[  519.080610][   T61] bond3 (unregistering): Released all slaves
[  519.215750][   T61] bond4 (unregistering): Released all slaves
[  519.342620][   T61] bond5 (unregistering): (slave wireguard0): Releasing backup interface
[  519.351385][   T61] wireguard0: left promiscuous mode
[  519.361357][   T61] bond5 (unregistering): Released all slaves
[  519.377941][   T61] bond6 (unregistering): (slave veth11): Releasing backup interface
[  519.387738][   T61] bond6 (unregistering): Released all slaves
[  519.401364][   T61] bond7 (unregistering): Released all slaves
[  519.604740][T18538] ip6_vti0 speed is unknown, defaulting to 1000
[  519.624170][   T61] tipc: Left network mode
[  519.749384][   T61] IPVS: stopping backup sync thread 18393 ...
[  520.062913][T18551] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  520.271484][T18475] chnl_net:caif_netlink_parms(): no params data found
[  520.639245][ T5148] Bluetooth: hci1: command tx timeout
[  520.862330][T18475] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.879504][T18475] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.910405][T18475] bridge_slave_0: entered allmulticast mode
[  520.932701][T18475] bridge_slave_0: entered promiscuous mode
[  520.950395][T18475] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.981519][T18475] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.993698][T18475] bridge_slave_1: entered allmulticast mode
[  521.006405][T18475] bridge_slave_1: entered promiscuous mode
[  521.040369][   T61] hsr_slave_0: left promiscuous mode
[  521.049776][   T61] hsr_slave_1: left promiscuous mode
[  521.307668][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'.
[  521.493153][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880572ed400: rx timeout, send abort
[  521.991876][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880572ec800: rx timeout, send abort
[  522.003108][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880572ed400: abort rx timeout. Force session deactivation
[  522.410245][   T61] batadv0 (unregistering): left allmulticast mode
[  522.500342][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880572ec800: abort rx timeout. Force session deactivation
[  522.676144][T18475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.717893][ T5148] Bluetooth: hci1: command tx timeout
[  522.725778][T18475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.866202][T18475] team0: Port device team_slave_0 added
[  522.894315][T18594] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3025'.
[  522.907603][T18475] team0: Port device team_slave_1 added
[  523.181854][T18475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.190068][T18475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.231651][T18475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.248174][T18595] ip6_vti0 speed is unknown, defaulting to 1000
[  523.269161][T18475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.285727][T18475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.322791][T18475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.523607][   T61] IPVS: stop unused estimator thread 0...
[  523.596214][T18475] hsr_slave_0: entered promiscuous mode
[  523.604781][T18475] hsr_slave_1: entered promiscuous mode
[  524.600377][T18632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3034'.
[  524.794323][ T5148] Bluetooth: hci1: command tx timeout
[  524.817097][T18645] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3037'.
[  524.826945][T18645] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3037'.
[  524.857850][T18645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3037'.
[  525.140837][T18647] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3038'.
[  525.160927][T18647] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3038'.
[  525.180112][T18647] netlink: 'syz.4.3038': attribute type 6 has an invalid length.
[  525.190238][T18647] netlink: 'syz.4.3038': attribute type 4 has an invalid length.
[  525.255284][T18647] ip6_vti0 speed is unknown, defaulting to 1000
[  525.546054][T18652] ip6_vti0 speed is unknown, defaulting to 1000
[  525.951795][T18475] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  526.059241][T18475] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  526.157539][T18475] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  526.262341][T18688] syzkaller1: entered promiscuous mode
[  526.268185][T18688] syzkaller1: entered allmulticast mode
[  526.275398][T18475] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  526.580070][T18697] netlink: 344 bytes leftover after parsing attributes in process `syz.3.3050'.
[  526.632685][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3050'.
[  526.974504][T18475] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.037615][T18715] openvswitch: netlink: Duplicate or invalid key (type 0).
[  527.050992][T18715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.182102][T18475] 8021q: adding VLAN 0 to HW filter on device team0
[  527.201023][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.208521][ T8010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.237630][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.245044][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.605635][T18735] Unsupported ieee802154 address type: 0
[  527.610726][T18475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  527.661515][T18475] veth0_vlan: entered promiscuous mode
[  527.680411][T18475] veth1_vlan: entered promiscuous mode
[  527.729511][T18475] veth0_macvtap: entered promiscuous mode
[  527.745979][T18475] veth1_macvtap: entered promiscuous mode
[  527.776128][T18475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.800711][T18475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.821169][T11948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.831199][T11948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.843977][T11948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.857389][T11948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  527.971794][T18738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  528.103011][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.110940][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.209196][ T8010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.225371][ T8010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.273380][T18756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.288715][T18752] bond7: Unable to set peer notification delay as MII monitoring is disabled
[  528.308609][T18752] bond7 (unregistering): Released all slaves
[  528.416241][T18763] ip6_vti0 speed is unknown, defaulting to 1000
[  528.421257][T18749] netlink: 'syz.4.3060': attribute type 3 has an invalid length.
[  528.435529][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'.
[  528.495567][T18764] syzkaller0: entered promiscuous mode
[  528.501190][T18764] syzkaller0: entered allmulticast mode
[  529.060838][T18777] ip6_vti0 speed is unknown, defaulting to 1000
[  529.360638][T18792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3070'.
[  529.588522][T18792] macvlan2: entered promiscuous mode
[  529.607821][T18792] macvlan2: entered allmulticast mode
[  529.758966][T18794] ip6_vti0 speed is unknown, defaulting to 1000
[  530.010349][T18801] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  530.313797][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3074'.
[  530.964549][T18831] ip6_vti0 speed is unknown, defaulting to 1000
[  531.401606][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3083'.
[  532.165794][ T5835] IPVS: starting estimator thread 0...
[  532.198824][T18885] netlink: 'syz.1.3090': attribute type 21 has an invalid length.
[  532.255985][T18884] IPVS: using max 26 ests per chain, 62400 per kthread
[  532.267096][T18888] netlink: 'syz.0.3091': attribute type 1 has an invalid length.
[  532.285012][T18888] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3091'.
[  532.301349][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'.
[  532.347332][T18891] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  532.459939][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3093'.
[  532.498384][T18893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3093'.
[  532.639483][T18905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3098'.
[  532.698638][T18906] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002
[  533.183108][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'.
[  533.591195][T18930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3106'.
[  533.673804][T18930] ip6gre1: entered promiscuous mode
[  533.943180][T18948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3109'.
[  534.360420][T18961] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  534.968838][T18988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  534.976338][T18988] IPv6: NLM_F_CREATE should be set when creating new route
[  534.983955][T18988] IPv6: NLM_F_CREATE should be set when creating new route
[  535.840993][T19012] ip6_vti0 speed is unknown, defaulting to 1000
[  537.333603][T19068] xt_hashlimit: size too large, truncated to 1048576
[  537.341929][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  537.354211][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  537.398679][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  537.420500][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  537.430029][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  537.741492][T19065] ip6_vti0 speed is unknown, defaulting to 1000
[  537.865155][T19085] __nla_validate_parse: 1 callbacks suppressed
[  537.865177][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'.
[  537.895718][T19085] netlink: 'syz.0.3145': attribute type 2 has an invalid length.
[  538.138724][T19096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3148'.
[  538.371383][T19079] ip6_vti0 speed is unknown, defaulting to 1000
[  538.382838][T19098] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  538.505383][T19116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3152'.
[  538.689088][T19113] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.697696][T19113] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.849878][T19113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.869885][T19113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.039529][ T1157] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.051361][ T1157] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.070968][ T1157] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.124575][ T1157] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.187572][T11944] tipc: Resetting bearer <eth:syzkaller0>
[  539.513609][ T5148] Bluetooth: hci0: command tx timeout
[  540.165419][T11944] tipc: Disabling bearer <eth:syzkaller0>
[  540.508944][T11944] bond0 (unregistering): Released all slaves
[  540.523744][T11944] bond1 (unregistering): Released all slaves
[  540.646093][T11944] bond2 (unregistering): Released all slaves
[  540.660534][T11944] bond3 (unregistering): Released all slaves
[  540.796730][T11944] bond4 (unregistering): (slave wireguard0): Releasing backup interface
[  540.805267][T11944] wireguard0: left promiscuous mode
[  540.811579][T11944] bond4 (unregistering): (slave wireguard1): Releasing backup interface
[  540.820506][T11944] bond4 (unregistering): Released all slaves
[  540.834852][T11944] bond5 (unregistering): Released all slaves
[  540.850880][T11944] bond6 (unregistering): Released all slaves
[  541.247694][T11944] tipc: Left network mode
[  541.602088][ T5148] Bluetooth: hci0: command tx timeout
[  541.737236][T19065] chnl_net:caif_netlink_parms(): no params data found
[  541.869595][T19170] xt_CT: No such helper "snmp_trap"
[  542.130197][T19065] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.144088][T19065] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.159173][T19065] bridge_slave_0: entered allmulticast mode
[  542.194101][T19065] bridge_slave_0: entered promiscuous mode
[  542.236764][T19186] tunl0: left promiscuous mode
[  542.320481][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'.
[  542.351151][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'.
[  542.597311][T19204] IPv6: addrconf: prefix option has invalid lifetime
[  542.607118][T19204] IPv6: addrconf: prefix option has invalid lifetime
[  542.617480][T19186] bond6: left promiscuous mode
[  542.632476][T19186] bond7: left promiscuous mode
[  542.693204][T19065] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.700656][T19065] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.719909][T19065] bridge_slave_1: entered allmulticast mode
[  542.731786][T19065] bridge_slave_1: entered promiscuous mode
[  542.779572][T11955] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  542.799142][T11955] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  542.841158][T17690] ip6_vti0 speed is unknown, defaulting to 1000
[  542.869059][T17690] syz2: Port: 1 Link DOWN
[  542.929906][T19065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.956650][T11955] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  542.976049][T11955] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  542.977345][ T7514] ip6_vti0 speed is unknown, defaulting to 1000
[  543.031082][T19065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  543.115666][T19223] netlink: 'syz.1.3180': attribute type 13 has an invalid length.
[  543.150665][T19223] netlink: 'syz.1.3180': attribute type 17 has an invalid length.
[  543.219768][T19212] syzkaller0: entered promiscuous mode
[  543.228859][T19212] syzkaller0: entered allmulticast mode
[  543.278643][T19223] gretap0: refused to change device tx_queue_len
[  543.288160][T19223] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  543.343647][T19212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.397639][T19065] team0: Port device team_slave_0 added
[  543.423114][T11944] hsr_slave_0: left promiscuous mode
[  543.429731][T11944] hsr_slave_1: left promiscuous mode
[  543.678617][ T5148] Bluetooth: hci0: command tx timeout
[  544.414856][T19218] tipc: Resetting bearer <eth:syzkaller0>
[  544.426501][T19065] team0: Port device team_slave_1 added
[  544.465360][T19211] tipc: Resetting bearer <eth:syzkaller0>
[  544.510899][T19211] tipc: Disabling bearer <eth:syzkaller0>
[  544.586483][T19065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  544.602218][T19065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.651424][T19065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  544.734698][T19065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  544.756437][T19065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.795980][T19255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3185'.
[  544.804090][T19065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  544.882402][T19255] vlan6: entered promiscuous mode
[  544.887883][T19255] batadv0: entered promiscuous mode
[  545.074399][T19065] hsr_slave_0: entered promiscuous mode
[  545.084806][T19065] hsr_slave_1: entered promiscuous mode
[  545.091488][T19065] debugfs: 'hsr0' already exists in 'hsr'
[  545.097583][T19065] Cannot create hsr debugfs directory
[  545.130180][T19258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3188'.
[  545.140282][T19258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3188'.
[  545.226471][T19260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  545.253012][T19265] syzkaller0: entered promiscuous mode
[  545.259086][T19265] syzkaller0: entered allmulticast mode
[  545.444160][T19259] tipc: Resetting bearer <eth:syzkaller0>
[  545.450043][T19267] ip6_vti0 speed is unknown, defaulting to 1000
[  545.488275][T19259] tipc: Disabling bearer <eth:syzkaller0>
[  545.516503][T11944] IPVS: stop unused estimator thread 0...
[  545.765627][ T5148] Bluetooth: hci0: command tx timeout
[  545.809944][T19273] wg1: entered promiscuous mode
[  545.815292][T19273] wg1: entered allmulticast mode
[  547.234690][T19065] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  547.275582][T19065] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  547.320856][T19065] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  547.367279][T19065] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  547.946484][T19065] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.975365][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3200'.
[  548.048652][T19318] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.153847][T19321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3201'.
[  548.291656][T19065] 8021q: adding VLAN 0 to HW filter on device team0
[  548.337769][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.345833][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.463322][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.470550][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  548.483223][T19330] netlink: 'syz.1.3203': attribute type 1 has an invalid length.
[  548.606255][T19330] vlan6: entered allmulticast mode
[  548.632294][T19330] bond8: entered allmulticast mode
[  548.699371][T19341] macvlan3: entered promiscuous mode
[  548.865491][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3208'.
[  549.130628][T19065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.264653][T19065] veth0_vlan: entered promiscuous mode
[  549.270751][T19364] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3212'.
[  549.303196][T19065] veth1_vlan: entered promiscuous mode
[  549.405229][T19065] veth0_macvtap: entered promiscuous mode
[  549.418548][T19368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3214'.
[  549.428455][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'.
[  549.439323][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'.
[  549.450743][T19065] veth1_macvtap: entered promiscuous mode
[  549.509150][T19065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  549.547673][T19065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  549.600565][T11955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.634930][T11955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.655248][T11955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.681000][T11955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.818440][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'.
[  549.875535][ T7999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.893078][ T7999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.920947][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802f06c400: rx timeout, send abort
[  549.930019][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f06c400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  549.979265][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.989154][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  550.252922][T19404] netlink: 'syz.4.3222': attribute type 27 has an invalid length.
[  550.282146][T19404] netlink: 'syz.4.3222': attribute type 1 has an invalid length.
[  550.290534][T19404] bridge0: port 1(bridge_slave_0) entered learning state
[  550.316333][T19406] 8021q: VLANs not supported on vxcan1
[  550.338348][T19410] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3223'.
[  550.360743][T19400] ip6_vti0 speed is unknown, defaulting to 1000
[  550.737715][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3224'.
[  550.738040][T19416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3224'.
[  550.819577][T19393] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  550.826438][T19393] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  550.836948][T19415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3224'.
[  550.852203][T19415] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3224'.
[  550.906229][T19393] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  550.914448][T19393] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  550.959863][T19407] ip6_vti0 speed is unknown, defaulting to 1000
[  550.968753][T19393] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  550.982218][T19393] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  550.996203][T19416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3224'.
[  551.458168][T19424] ip6_vti0 speed is unknown, defaulting to 1000
[  552.233761][T19446] netlink: 'syz.4.3231': attribute type 1 has an invalid length.
[  552.252909][T19445] netlink: 'syz.4.3231': attribute type 1 has an invalid length.
[  552.260808][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'.
[  552.262143][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'.
[  552.579338][T19449] ip6_vti0 speed is unknown, defaulting to 1000
[  553.552656][T19458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3234'.
[  553.640134][T19458] 8021q: adding VLAN 0 to HW filter on device bond1
[  696.952162][   T31] INFO: task syz-executor:5833 blocked for more than 143 seconds.
[  696.960351][   T31]       Not tainted syzkaller #0
[  696.965486][   T31]       Blocked by coredump.
[  696.970354][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  696.979152][   T31] task:syz-executor    state:D stack:21736 pid:5833  tgid:5833  ppid:1      task_flags:0x40054c flags:0x00080003
[  696.991210][   T31] Call Trace:
[  696.994617][   T31]  <TASK>
[  696.997778][   T31]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  697.002391][   T31]  ? __lock_acquire+0xab9/0xd20
[  697.007621][   T31]  ? __lock_acquire+0xab9/0xd20
[  697.012735][   T31]  ? __pfx___schedule+0x10/0x10
[  697.017759][   T31]  ? schedule+0x91/0x360
[  697.022381][   T31]  schedule+0x165/0x360
[  697.026628][   T31]  schedule_preempt_disabled+0x13/0x30
[  697.033106][   T31]  __mutex_lock+0x7e6/0x1350
[  697.042080][   T31]  ? __mutex_lock+0x5bb/0x1350
[  697.047036][   T31]  ? rfkill_unregister+0xc8/0x220
[  697.091965][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  697.097342][   T31]  ? __pfx_device_del+0x10/0x10
[  697.115438][   T31]  ? hci_sock_dev_event+0x42d/0x600
[  697.120721][   T31]  rfkill_unregister+0xc8/0x220
[  697.125735][   T31]  hci_unregister_dev+0x374/0x510
[  697.130891][   T31]  vhci_release+0x152/0x1a0
[  697.135812][   T31]  ? __pfx_vhci_release+0x10/0x10
[  697.141034][   T31]  __fput+0x44c/0xa70
[  697.145368][   T31]  task_work_run+0x1d4/0x260
[  697.150099][   T31]  ? __pfx_task_work_run+0x10/0x10
[  697.155303][   T31]  ? do_exit+0x6b0/0x2300
[  697.159764][   T31]  ? kmem_cache_free+0x19b/0x690
[  697.164975][   T31]  do_exit+0x6b5/0x2300
[  697.169182][   T31]  ? do_raw_spin_lock+0x121/0x290
[  697.174317][   T31]  ? __pfx_do_exit+0x10/0x10
[  697.179095][   T31]  ? cgroup_freezing+0x20/0x350
[  697.184291][   T31]  do_group_exit+0x21c/0x2d0
[  697.188998][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  697.195519][   T31]  get_signal+0x1285/0x1340
[  697.200116][   T31]  arch_do_signal_or_restart+0xa0/0x790
[  697.205878][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  697.212243][   T31]  ? exit_to_user_mode_loop+0x40/0x130
[  697.217843][   T31]  exit_to_user_mode_loop+0x72/0x130
[  697.223380][   T31]  do_syscall_64+0x2bd/0xfa0
[  697.228187][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  697.233571][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.239809][   T31]  ? clear_bhb_loop+0x60/0xb0
[  697.244604][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.250524][   T31] RIP: 0033:0x7f2ddff8e0dc
[  697.255604][   T31] RSP: 002b:00007ffe7d046690 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  697.264300][   T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f2ddff8e0dc
[  697.272889][   T31] RDX: 0000000000000030 RSI: 00007ffe7d046750 RDI: 00000000000000f9
[  697.281163][   T31] RBP: 00007ffe7d0466fc R08: 0000000000000000 R09: 0079746972756365
[  697.289332][   T31] R10: 00007ffe7d046050 R11: 0000000000000246 R12: 000000000000026d
[  697.297409][   T31] R13: 00000000000927c0 R14: 000000000008683a R15: 00007ffe7d046750
[  697.305839][   T31]  </TASK>
[  697.309027][   T31] INFO: task kworker/0:11:7512 blocked for more than 143 seconds.
[  697.317503][   T31]       Not tainted syzkaller #0
[  697.322645][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  697.331418][   T31] task:kworker/0:11    state:D stack:21352 pid:7512  tgid:7512  ppid:2      task_flags:0x4208060 flags:0x00080000
[  697.343891][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  697.350865][   T31] Call Trace:
[  697.354543][   T31]  <TASK>
[  697.357517][   T31]  __schedule+0x1798/0x4cc0
[  697.362282][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  697.367677][   T31]  ? __pfx___schedule+0x10/0x10
[  697.373172][   T31]  ? schedule+0x91/0x360
[  697.377570][   T31]  schedule+0x165/0x360
[  697.381769][   T31]  schedule_preempt_disabled+0x13/0x30
[  697.387757][   T31]  __mutex_lock+0x7e6/0x1350
[  697.392487][   T31]  ? __mutex_lock+0x5bb/0x1350
[  697.397437][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  697.404072][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  697.409102][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  697.414854][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  697.420665][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  697.427259][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  697.436726][   T31]  process_scheduled_works+0xae1/0x17b0
[  697.442403][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  697.448397][   T31]  worker_thread+0x8a0/0xda0
[  697.453048][   T31]  kthread+0x711/0x8a0
[  697.457294][   T31]  ? __pfx_worker_thread+0x10/0x10
[  697.462988][   T31]  ? __pfx_kthread+0x10/0x10
[  697.467798][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  697.473031][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  697.478238][   T31]  ? __pfx_kthread+0x10/0x10
[  697.483076][   T31]  ret_from_fork+0x4bc/0x870
[  697.487787][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  697.493426][   T31]  ? __switch_to_asm+0x39/0x70
[  697.498258][   T31]  ? __switch_to_asm+0x33/0x70
[  697.503159][   T31]  ? __pfx_kthread+0x10/0x10
[  697.507796][   T31]  ret_from_fork_asm+0x1a/0x30
[  697.512790][   T31]  </TASK>
[  697.515880][   T31] INFO: task syz.3.3220:19390 blocked for more than 143 seconds.
[  697.524460][   T31]       Not tainted syzkaller #0
[  697.529650][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  697.538364][   T31] task:syz.3.3220      state:D stack:27328 pid:19390 tgid:19389 ppid:17886  task_flags:0x400140 flags:0x00080003
[  697.550634][   T31] Call Trace:
[  697.554353][   T31]  <TASK>
[  697.557301][   T31]  __schedule+0x1798/0x4cc0
[  697.561820][   T31]  ? __lock_acquire+0xab9/0xd20
[  697.566844][   T31]  ? __lock_acquire+0xab9/0xd20
[  697.571716][   T31]  ? __pfx___schedule+0x10/0x10
[  697.576619][   T31]  ? schedule+0x91/0x360
[  697.580900][   T31]  schedule+0x165/0x360
[  697.585620][   T31]  schedule_preempt_disabled+0x13/0x30
[  697.591119][   T31]  __mutex_lock+0x7e6/0x1350
[  697.596182][   T31]  ? __mutex_lock+0x5bb/0x1350
[  697.601041][   T31]  ? rfkill_fop_release+0x4b/0x220
[  697.606367][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  697.611450][   T31]  ? __pfx_rfkill_fop_release+0x10/0x10
[  697.617476][   T31]  rfkill_fop_release+0x4b/0x220
[  697.622590][   T31]  ? __pfx_rfkill_fop_release+0x10/0x10
[  697.628404][   T31]  __fput+0x44c/0xa70
[  697.632596][   T31]  task_work_run+0x1d4/0x260
[  697.637209][   T31]  ? __pfx_task_work_run+0x10/0x10
[  697.642970][   T31]  ? __pfx_futex_wait+0x10/0x10
[  697.648176][   T31]  get_signal+0x11ec/0x1340
[  697.652918][   T31]  ? __asan_memset+0x22/0x50
[  697.657786][   T31]  ? __pfx_poll_select_finish+0x10/0x10
[  697.663716][   T31]  arch_do_signal_or_restart+0xa0/0x790
[  697.669559][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  697.676429][   T31]  ? exit_to_user_mode_loop+0x40/0x130
[  697.682264][   T31]  exit_to_user_mode_loop+0x72/0x130
[  697.687747][   T31]  do_syscall_64+0x2bd/0xfa0
[  697.692414][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  697.697719][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.704177][   T31]  ? clear_bhb_loop+0x60/0xb0
[  697.708858][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.714789][   T31] RIP: 0033:0x7fa65918f6c9
[  697.719201][   T31] RSP: 002b:00007fa65a01f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  697.727787][   T31] RAX: 0000000000000001 RBX: 00007fa6593e5fa0 RCX: 00007fa65918f6c9
[  697.736226][   T31] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000001c0
[  697.744338][   T31] RBP: 00007fa659211f91 R08: 0000000000000000 R09: 0000000000000000
[  697.752388][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  697.760466][   T31] R13: 00007fa6593e6038 R14: 00007fa6593e5fa0 R15: 00007ffcf7aeda98
[  697.769466][   T31]  </TASK>
[  697.772587][   T31] INFO: task syz.3.3220:19393 blocked for more than 144 seconds.
[  697.780351][   T31]       Not tainted syzkaller #0
[  697.792272][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  697.801019][   T31] task:syz.3.3220      state:D stack:23744 pid:19393 tgid:19389 ppid:17886  task_flags:0x400040 flags:0x00080003
[  697.813032][   T31] Call Trace:
[  697.816430][   T31]  <TASK>
[  697.819415][   T31]  __schedule+0x1798/0x4cc0
[  697.824230][   T31]  ? __lock_acquire+0xab9/0xd20
[  697.829129][   T31]  ? __lock_acquire+0xab9/0xd20
[  697.834235][   T31]  ? __pfx___schedule+0x10/0x10
[  697.839123][   T31]  ? schedule+0x91/0x360
[  697.843436][   T31]  schedule+0x165/0x360
[  697.847601][   T31]  schedule_preempt_disabled+0x13/0x30
[  697.853124][   T31]  __mutex_lock+0x7e6/0x1350
[  697.857807][   T31]  ? __mutex_lock+0x5bb/0x1350
[  697.862690][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  697.867995][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  697.873094][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  697.878417][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  697.884638][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  697.891004][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  697.896858][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  697.902033][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  697.907892][   T31]  rfkill_set_block+0x1d2/0x440
[  697.913074][   T31]  rfkill_fop_write+0x44b/0x570
[  697.917996][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  697.923785][   T31]  ? security_file_permission+0x10/0x290
[  697.929462][   T31]  ? rw_verify_area+0x255/0x4d0
[  697.934365][   T31]  ? __lock_acquire+0xab9/0xd20
[  697.939312][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  697.944775][   T31]  vfs_write+0x27e/0xb30
[  697.949037][   T31]  ? __pfx_vfs_write+0x10/0x10
[  697.953920][   T31]  ? __fget_files+0x2a/0x420
[  697.958629][   T31]  ? __fget_files+0x2a/0x420
[  697.963274][   T31]  ? __fget_files+0x3a0/0x420
[  697.968057][   T31]  ? __fget_files+0x2a/0x420
[  697.972777][   T31]  ksys_write+0x145/0x250
[  697.977187][   T31]  ? __pfx_ksys_write+0x10/0x10
[  697.982208][   T31]  ? do_syscall_64+0xbe/0xfa0
[  697.987016][   T31]  do_syscall_64+0xfa/0xfa0
[  697.991527][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  697.996776][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.003175][   T31]  ? clear_bhb_loop+0x60/0xb0
[  698.007886][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.014191][   T31] RIP: 0033:0x7fa65918f6c9
[  698.018774][   T31] RSP: 002b:00007fa659ffe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  698.027308][   T31] RAX: ffffffffffffffda RBX: 00007fa6593e6090 RCX: 00007fa65918f6c9
[  698.035642][   T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008
[  698.043794][   T31] RBP: 00007fa659211f91 R08: 0000000000000000 R09: 0000000000000000
[  698.052012][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  698.060032][   T31] R13: 00007fa6593e6128 R14: 00007fa6593e6090 R15: 00007ffcf7aeda98
[  698.068285][   T31]  </TASK>
[  698.071347][   T31] INFO: task syz.2.3136:19398 blocked for more than 144 seconds.
[  698.079525][   T31]       Not tainted syzkaller #0
[  698.084604][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  698.093363][   T31] task:syz.2.3136      state:D stack:25960 pid:19398 tgid:19398 ppid:19065  task_flags:0x400040 flags:0x00080002
[  698.105639][   T31] Call Trace:
[  698.108953][   T31]  <TASK>
[  698.111955][   T31]  __schedule+0x1798/0x4cc0
[  698.116514][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.121462][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.126624][   T31]  ? __pfx___schedule+0x10/0x10
[  698.131570][   T31]  ? schedule+0x91/0x360
[  698.135881][   T31]  schedule+0x165/0x360
[  698.140134][   T31]  schedule_preempt_disabled+0x13/0x30
[  698.145617][   T31]  __mutex_lock+0x7e6/0x1350
[  698.150225][   T31]  ? __mutex_lock+0x5bb/0x1350
[  698.155243][   T31]  ? rfkill_unregister+0xc8/0x220
[  698.160424][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  698.165592][   T31]  ? __pfx_device_del+0x10/0x10
[  698.170514][   T31]  rfkill_unregister+0xc8/0x220
[  698.176093][   T31]  nfc_unregister_device+0x96/0x2a0
[  698.181395][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  698.187273][   T31]  virtual_ncidev_close+0x56/0x90
[  698.192428][   T31]  __fput+0x44c/0xa70
[  698.196477][   T31]  task_work_run+0x1d4/0x260
[  698.201106][   T31]  ? __pfx_task_work_run+0x10/0x10
[  698.206421][   T31]  ? exit_to_user_mode_loop+0x40/0x130
[  698.212155][   T31]  exit_to_user_mode_loop+0xe9/0x130
[  698.217485][   T31]  do_syscall_64+0x2bd/0xfa0
[  698.222160][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  698.227391][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.233930][   T31]  ? clear_bhb_loop+0x60/0xb0
[  698.238666][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.244884][   T31] RIP: 0033:0x7fcb4ff8f6c9
[  698.249422][   T31] RSP: 002b:00007ffe5fe00eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  698.258155][   T31] RAX: 0000000000000000 RBX: 00007fcb501e7da0 RCX: 00007fcb4ff8f6c9
[  698.266270][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  698.274414][   T31] RBP: 00007fcb501e7da0 R08: 00000000000001e4 R09: 0000001d5fe011af
[  698.282599][   T31] R10: 00000000003ffbf8 R11: 0000000000000246 R12: 0000000000086804
[  698.290662][   T31] R13: 00007fcb501e5fa0 R14: ffffffffffffffff R15: 00007ffe5fe00fd0
[  698.299071][   T31]  </TASK>
[  698.302339][   T31] INFO: task syz.0.3229:19434 blocked for more than 144 seconds.
[  698.310255][   T31]       Not tainted syzkaller #0
[  698.315599][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  698.324614][   T31] task:syz.0.3229      state:D stack:25608 pid:19434 tgid:19429 ppid:18475  task_flags:0x400140 flags:0x00080002
[  698.336640][   T31] Call Trace:
[  698.339962][   T31]  <TASK>
[  698.342945][   T31]  __schedule+0x1798/0x4cc0
[  698.347463][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.352399][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.357616][   T31]  ? __pfx___schedule+0x10/0x10
[  698.362660][   T31]  ? schedule+0x91/0x360
[  698.366918][   T31]  schedule+0x165/0x360
[  698.371094][   T31]  schedule_preempt_disabled+0x13/0x30
[  698.376698][   T31]  __mutex_lock+0x7e6/0x1350
[  698.381310][   T31]  ? __mutex_lock+0x5bb/0x1350
[  698.386236][   T31]  ? rfkill_register+0x37/0x8e0
[  698.391378][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  698.396653][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  698.402357][   T31]  ? device_initialize+0x24b/0x440
[  698.407474][   T31]  rfkill_register+0x37/0x8e0
[  698.412271][   T31]  nfc_register_device+0x14a/0x320
[  698.417662][   T31]  nci_register_device+0x87f/0x9d0
[  698.423398][   T31]  ? __pfx_nci_register_device+0x10/0x10
[  698.429112][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  698.434529][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  698.439923][   T31]  virtual_ncidev_open+0x129/0x1a0
[  698.445112][   T31]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  698.450872][   T31]  misc_open+0x2d5/0x350
[  698.455205][   T31]  chrdev_open+0x4cc/0x5e0
[  698.459629][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  698.464943][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  698.471273][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  698.476428][   T31]  do_dentry_open+0x953/0x13f0
[  698.481225][   T31]  vfs_open+0x3b/0x340
[  698.485363][   T31]  ? path_openat+0x2ecd/0x3830
[  698.490196][   T31]  path_openat+0x2ee5/0x3830
[  698.494868][   T31]  ? __pfx_path_openat+0x10/0x10
[  698.499829][   T31]  do_filp_open+0x1fa/0x410
[  698.504451][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.509322][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  698.514622][   T31]  ? _raw_spin_unlock+0x28/0x50
[  698.519579][   T31]  ? alloc_fd+0x64c/0x6c0
[  698.523942][   T31]  do_sys_openat2+0x121/0x1c0
[  698.528726][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  698.533989][   T31]  ? __pfx___se_sys_futex+0x10/0x10
[  698.539230][   T31]  __x64_sys_openat+0x138/0x170
[  698.544211][   T31]  do_syscall_64+0xfa/0xfa0
[  698.548729][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  698.554011][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.560198][   T31]  ? clear_bhb_loop+0x60/0xb0
[  698.564914][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.570903][   T31] RIP: 0033:0x7fb2e338f6c9
[  698.575366][   T31] RSP: 002b:00007fb2e0df2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  698.584181][   T31] RAX: ffffffffffffffda RBX: 00007fb2e35e6360 RCX: 00007fb2e338f6c9
[  698.592392][   T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  698.600793][   T31] RBP: 00007fb2e3411f91 R08: 0000000000000000 R09: 0000000000000000
[  698.609465][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  698.617576][   T31] R13: 00007fb2e35e63f8 R14: 00007fb2e35e6360 R15: 00007fffdb77f928
[  698.625685][   T31]  </TASK>
[  698.628721][   T31] INFO: task syz-executor:19452 blocked for more than 145 seconds.
[  698.637056][   T31]       Not tainted syzkaller #0
[  698.642072][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  698.651109][   T31] task:syz-executor    state:D stack:27008 pid:19452 tgid:19452 ppid:1      task_flags:0x400040 flags:0x00080000
[  698.663259][   T31] Call Trace:
[  698.666571][   T31]  <TASK>
[  698.669593][   T31]  __schedule+0x1798/0x4cc0
[  698.674167][   T31]  ? security_file_open+0xb1/0x270
[  698.679300][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.684208][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.689056][   T31]  ? __pfx___schedule+0x10/0x10
[  698.693980][   T31]  ? schedule+0x91/0x360
[  698.698361][   T31]  schedule+0x165/0x360
[  698.702567][   T31]  schedule_preempt_disabled+0x13/0x30
[  698.708054][   T31]  __mutex_lock+0x7e6/0x1350
[  698.713409][   T31]  ? __mutex_lock+0x5bb/0x1350
[  698.718400][   T31]  ? misc_open+0x51/0x350
[  698.722913][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  698.728007][   T31]  misc_open+0x51/0x350
[  698.732223][   T31]  chrdev_open+0x4cc/0x5e0
[  698.736827][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  698.741767][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  698.748124][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  698.753112][   T31]  do_dentry_open+0x953/0x13f0
[  698.757934][   T31]  vfs_open+0x3b/0x340
[  698.762071][   T31]  ? path_openat+0x2ecd/0x3830
[  698.766858][   T31]  path_openat+0x2ee5/0x3830
[  698.771604][   T31]  ? __pfx_css_rstat_updated+0x10/0x10
[  698.777139][   T31]  ? count_memcg_event_mm+0x21/0x260
[  698.782558][   T31]  ? __pfx_path_openat+0x10/0x10
[  698.787770][   T31]  ? __pfx___up_read+0x10/0x10
[  698.792718][   T31]  ? do_user_addr_fault+0xbbc/0x1380
[  698.798110][   T31]  do_filp_open+0x1fa/0x410
[  698.802639][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.807685][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  698.812744][   T31]  ? _raw_spin_unlock+0x28/0x50
[  698.817855][   T31]  ? alloc_fd+0x64c/0x6c0
[  698.822335][   T31]  do_sys_openat2+0x121/0x1c0
[  698.827040][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  698.832283][   T31]  ? fd_install+0x97/0x540
[  698.836872][   T31]  ? fd_install+0x30d/0x540
[  698.841465][   T31]  __x64_sys_openat+0x138/0x170
[  698.846458][   T31]  do_syscall_64+0xfa/0xfa0
[  698.851054][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  698.856273][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.862578][   T31]  ? clear_bhb_loop+0x60/0xb0
[  698.867325][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.873915][   T31] RIP: 0033:0x7f01aa78de91
[  698.878454][   T31] RSP: 002b:00007ffcc42b3660 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  698.886907][   T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f01aa78de91
[  698.894909][   T31] RDX: 0000000000000002 RSI: 00007f01aa8129b7 RDI: 00000000ffffff9c
[  698.903118][   T31] RBP: 00007f01aa8129b7 R08: 0000000000000000 R09: 00007f01ab51d6c0
[  698.911187][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  698.919363][   T31] R13: 0000000000000003 R14: 00007ffcc42b3a38 R15: 0000000000000000
[  698.927403][   T31]  </TASK>
[  698.930462][   T31] INFO: task syz.4.3234:19455 blocked for more than 145 seconds.
[  698.938330][   T31]       Not tainted syzkaller #0
[  698.943406][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  698.952344][   T31] task:syz.4.3234      state:D stack:28296 pid:19455 tgid:19454 ppid:18115  task_flags:0x400040 flags:0x00080002
[  698.964881][   T31] Call Trace:
[  698.968260][   T31]  <TASK>
[  698.971190][   T31]  __schedule+0x1798/0x4cc0
[  698.975724][   T31]  ? security_file_open+0xb1/0x270
[  698.980870][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.985809][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.990699][   T31]  ? __pfx___schedule+0x10/0x10
[  698.995601][   T31]  ? schedule+0x91/0x360
[  698.999844][   T31]  schedule+0x165/0x360
[  699.004052][   T31]  schedule_preempt_disabled+0x13/0x30
[  699.009634][   T31]  __mutex_lock+0x7e6/0x1350
[  699.014407][   T31]  ? __mutex_lock+0x5bb/0x1350
[  699.019394][   T31]  ? misc_open+0x51/0x350
[  699.023879][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  699.028924][   T31]  misc_open+0x51/0x350
[  699.033264][   T31]  chrdev_open+0x4cc/0x5e0
[  699.037775][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  699.042778][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  699.049268][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  699.054268][   T31]  do_dentry_open+0x953/0x13f0
[  699.059088][   T31]  vfs_open+0x3b/0x340
[  699.063695][   T31]  ? path_openat+0x2ecd/0x3830
[  699.068490][   T31]  path_openat+0x2ee5/0x3830
[  699.073421][   T31]  ? __pfx_path_openat+0x10/0x10
[  699.078496][   T31]  do_filp_open+0x1fa/0x410
[  699.083174][   T31]  ? __lock_acquire+0xab9/0xd20
[  699.088075][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  699.093153][   T31]  ? _raw_spin_unlock+0x28/0x50
[  699.098355][   T31]  ? alloc_fd+0x64c/0x6c0
[  699.102819][   T31]  do_sys_openat2+0x121/0x1c0
[  699.107499][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  699.112882][   T31]  ? rcu_is_watching+0x15/0xb0
[  699.117690][   T31]  __x64_sys_openat+0x138/0x170
[  699.122583][   T31]  do_syscall_64+0xfa/0xfa0
[  699.127283][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  699.132715][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.138843][   T31]  ? clear_bhb_loop+0x60/0xb0
[  699.143652][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.149544][   T31] RIP: 0033:0x7f98c058f6c9
[  699.153995][   T31] RSP: 002b:00007f98c1349038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  699.162467][   T31] RAX: ffffffffffffffda RBX: 00007f98c07e5fa0 RCX: 00007f98c058f6c9
[  699.170651][   T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  699.178795][   T31] RBP: 00007f98c0611f91 R08: 0000000000000000 R09: 0000000000000000
[  699.187159][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  699.195287][   T31] R13: 00007f98c07e6038 R14: 00007f98c07e5fa0 R15: 00007fffcb9c78d8
[  699.203672][   T31]  </TASK>
[  699.206740][   T31] 
[  699.206740][   T31] Showing all locks held in the system:
[  699.214525][   T31] 1 lock held by khungtaskd/31:
[  699.219382][   T31]  #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  699.229600][   T31] 2 locks held by getty/5590:
[  699.234418][   T31]  #0: ffff88814d73d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  699.244208][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  699.254341][   T31] 1 lock held by syz-executor/5833:
[  699.259546][   T31]  #0: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  699.269798][   T31] 3 locks held by kworker/0:11/7512:
[  699.275387][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  699.286469][   T31]  #1: ffffc90003affba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  699.300246][   T31]  #2: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  699.311669][   T31] 1 lock held by syz.3.3220/19390:
[  699.316821][   T31]  #0: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4b/0x220
[  699.327133][   T31] 2 locks held by syz.3.3220/19393:
[  699.332374][   T31]  #0: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  699.342535][   T31]  #1: ffff88807d08e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  699.352616][   T31] 2 locks held by syz.2.3136/19398:
[  699.357933][   T31]  #0: ffff88807d08e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  699.367742][   T31]  #1: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  699.377992][   T31] 3 locks held by syz.0.3229/19434:
[  699.383335][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.391861][   T31]  #1: ffff888052f88100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  699.401678][   T31]  #2: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  699.411950][   T31] 1 lock held by syz-executor/19452:
[  699.417443][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.426011][   T31] 1 lock held by syz.4.3234/19455:
[  699.431144][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.439674][   T31] 1 lock held by syz-executor/19463:
[  699.444979][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.453646][   T31] 1 lock held by syz-executor/19465:
[  699.459003][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.467471][   T31] 1 lock held by syz-executor/19467:
[  699.472788][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.481398][   T31] 1 lock held by syz-executor/19469:
[  699.486711][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.495347][   T31] 1 lock held by syz-executor/19471:
[  699.500623][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.509190][   T31] 1 lock held by syz-executor/19473:
[  699.514607][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.523165][   T31] 1 lock held by syz-executor/19476:
[  699.528464][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.537252][   T31] 1 lock held by syz-executor/19477:
[  699.542584][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.551173][   T31] 1 lock held by syz-executor/19479:
[  699.556493][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.564993][   T31] 1 lock held by syz-executor/19481:
[  699.570269][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.578842][   T31] 1 lock held by syz-executor/19483:
[  699.584158][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.592945][   T31] 1 lock held by syz-executor/19486:
[  699.598260][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.607060][   T31] 1 lock held by syz-executor/19487:
[  699.612436][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.621032][   T31] 1 lock held by syz-executor/19489:
[  699.626437][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  699.635068][   T31] 
[  699.637434][   T31] =============================================
[  699.637434][   T31] 
[  699.645923][   T31] NMI backtrace for cpu 1
[  699.645940][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  699.645954][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  699.645961][   T31] Call Trace:
[  699.645969][   T31]  <TASK>
[  699.645975][   T31]  dump_stack_lvl+0x189/0x250
[  699.645996][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  699.646011][   T31]  ? __pfx__printk+0x10/0x10
[  699.646030][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  699.646045][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  699.646059][   T31]  ? __pfx__printk+0x10/0x10
[  699.646073][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  699.646090][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  699.646105][   T31]  watchdog+0xf60/0xfa0
[  699.646120][   T31]  ? watchdog+0x1e2/0xfa0
[  699.646134][   T31]  kthread+0x711/0x8a0
[  699.646150][   T31]  ? __pfx_watchdog+0x10/0x10
[  699.646161][   T31]  ? __pfx_kthread+0x10/0x10
[  699.646175][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  699.646190][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  699.646204][   T31]  ? __pfx_kthread+0x10/0x10
[  699.646218][   T31]  ret_from_fork+0x4bc/0x870
[  699.646232][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  699.646247][   T31]  ? __switch_to_asm+0x39/0x70
[  699.646256][   T31]  ? __switch_to_asm+0x33/0x70
[  699.646265][   T31]  ? __pfx_kthread+0x10/0x10
[  699.646278][   T31]  ret_from_fork_asm+0x1a/0x30
[  699.646298][   T31]  </TASK>
[  699.646302][   T31] Sending NMI from CPU 1 to CPUs 0:
[  699.793520][    C0] NMI backtrace for cpu 0
[  699.793539][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  699.793556][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  699.793565][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  699.793593][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 a1 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  699.793617][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  699.793632][    C0] RAX: 31e1450ee926ee00 RBX: ffffffff81967bf7 RCX: 31e1450ee926ee00
[  699.793644][    C0] RDX: 0000000000000001 RSI: ffffffff8d70e901 RDI: ffffffff8bbf0760
[  699.793655][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb
[  699.793666][    C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce570
[  699.793677][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40
[  699.793687][    C0] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[  699.793700][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  699.793711][    C0] CR2: 00005567d5633000 CR3: 000000000dd38000 CR4: 00000000003526f0
[  699.793727][    C0] Call Trace:
[  699.793734][    C0]  <TASK>
[  699.793740][    C0]  default_idle+0x13/0x20
[  699.793755][    C0]  default_idle_call+0x73/0xb0
[  699.793771][    C0]  do_idle+0x1e7/0x510
[  699.793788][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  699.793809][    C0]  ? __pfx_do_idle+0x10/0x10
[  699.793828][    C0]  ? do_idle+0x4e7/0x510
[  699.793845][    C0]  cpu_startup_entry+0x44/0x60
[  699.793861][    C0]  rest_init+0x2de/0x300
[  699.793878][    C0]  start_kernel+0x3ae/0x410
[  699.793895][    C0]  x86_64_start_reservations+0x24/0x30
[  699.793915][    C0]  x86_64_start_kernel+0x143/0x1c0
[  699.793934][    C0]  common_startup_64+0x13e/0x147
[  699.793961][    C0]  </TASK>