last executing test programs:

22.489462538s ago: executing program 0 (id=1272):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@typed={0x8, 0x26, 0x0, 0x0, @u32}, @nested={0x4, 0x44}]}, 0x20}}, 0x0)

22.314294243s ago: executing program 0 (id=1275):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094)

21.999439288s ago: executing program 0 (id=1282):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1a6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x8}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)

21.998959827s ago: executing program 4 (id=1283):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r5, 0x6, 0x4, 0x0, &(0x7f0000001640))
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100003040000ca632a76000500007400ad4e497ea15bfb8890aca2f465c5f3a23b00000000b295d7007187802c9a2211d7c68b5b295a8518e94521d99b7578bc000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008001300030000000800140000000000"], 0x44}}, 0x0)

21.946638955s ago: executing program 4 (id=1285):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$nfc_raw(r1, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0xf}, 0x7})

21.863441783s ago: executing program 4 (id=1287):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async)

21.847522047s ago: executing program 0 (id=1288):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a3100000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0037006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0x2, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240088e0}, 0x4008080)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r12, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r13, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0)

21.583332783s ago: executing program 4 (id=1290):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106500000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0xa8, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x0, @val=0x80}, "46b1fd0fc043d7de1d6a8ca9f70cf0ca7f373e0731cc589d354533958ce2748cbb58d06088b9d41150483a6e913243b85e4c1578c461bb43a6e34941d6c0e14a11581e1de64a3d91877b01479c4ac61b92846f9d72d41dd80a3b9eb154ae517e889ab8ad33872515ac86aa2a67cd0765551237384c8241ced18dfdaa64c2d2e73c35f4def7bfe5e9b150e5967e366f78e5df4c9a27066734"}}}}}}}, 0xce)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r10, &(0x7f0000000100)={0xa, 0x0, 0x40, @loopback, 0x0, 0x80000}, 0x20)
socket$l2tp6(0xa, 0x2, 0x73)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r12 = accept4(r11, 0x0, 0x0, 0x0)
recvmsg$can_raw(r12, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

21.483028069s ago: executing program 3 (id=1291):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
connect$can_bcm(r1, &(0x7f0000000380)={0x1d, r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003"], 0xa8}}, 0x0)

21.396726271s ago: executing program 0 (id=1292):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
shutdown(r0, 0x0)
sendmsg$inet(r0, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200488d5)
socket$kcm(0x2, 0x922000000001, 0x106) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async)
shutdown(r0, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200488d5) (async)

21.245910314s ago: executing program 4 (id=1293):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x25, 0x2, 0x979, 0x9b5, 0x10400, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', <r3=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x12, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x3, 0xb, 0x1, 0x6, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x4e, &(0x7f00000001c0)=""/78, 0x40f00, 0x2a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[{0x4, 0x1, 0x1, 0xc}, {0x2, 0x1, 0x6, 0x5}, {0x4, 0x5, 0x8, 0x3}, {0x5, 0x2, 0x9, 0x8}, {0x1, 0x5, 0x9, 0x2}], 0x10, 0x15}, 0x94)

19.879247824s ago: executing program 3 (id=1296):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040)=0x6, 0x4)
r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
socket$inet6(0xa, 0x3, 0x8000000003c) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r0, <r3=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%pB    \x00'}, 0x20) (async, rerun: 32)
close(r1) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000280005000100070000000900020073797a31000000000c00078005001400750000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x58}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, <r7=>0xffffffffffffffff}, 0x4) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0xfffffffffffffeda, r9, 0x1, 0x0, 0x3, {}, [@handle=@pci]}, 0x14}}, 0x0) (async)
sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)={0x13c, r9, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0x64, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044890) (async)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095", @ANYRESHEX=r7, @ANYRESOCT=r9, @ANYRESHEX=0x0, @ANYRES32=r8, @ANYRES8=0x0, @ANYBLOB="77a247e9473eb992f3fd002a70903b2637d6ff2ddea526c5c351ba1fb86a36672b5cf166eddae12b4d19e94b6555ef5a95c6c945019b3d5315782d58b1412d9d64ff4f9db28885f5265c92e3a596775f7111c1948eb14f72d30bd0f035c61e3d7b83ace10db9fc6880cb81b129ef9cc90fb94d4386ab0798cc942a8c303194eb2ca0b34371dc959149f66281ba7735e289435cb40536463b0427c2e425771786f0ad21d53d647a0919c6ed2c9ac67d72616607631ce2a8a79ec2bf6ba933fe5c108a05f4e2d121c03ec7f281", @ANYRESOCT], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0xd, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19.877715182s ago: executing program 4 (id=1297):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0xb8e, 0x9, 0x3}, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0dddcae227b57153f86500000000def388854e", @ANYRES32=0x0, @ANYBLOB="080000000000000008001f0000080000"], 0x28}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x3}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x90a}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x28000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x4b0, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_DESC={0x46c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x134, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xed}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ca0847a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b6346a4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ae}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x90}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x49b4c13d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff05}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbef}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x22d3}]}]}, @NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x140000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca4c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe9f4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfc8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11d9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x209}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcc}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffeffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x55a6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x34f2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x15c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x99}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x927}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f2e}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2e42}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x57c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000140)=[{0x3, 0x2, {0x0, 0xff, 0x2}, {0x2, 0xe988f878ec2373bd, 0x1}, 0xfd, 0x2}, {0x0, 0x3, {0x1}, {0x0, 0xf0, 0x2}, 0xfe, 0xff}, {0x3, 0x3, {0x2, 0x0, 0x3}, {0x1, 0x1, 0x3}, 0x2, 0x1}, {0x2, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xfe, 0x3}, 0x2, 0xfd}, {0x0, 0x1, {0x1, 0xff}, {0x1, 0xf0, 0x4}, 0x0, 0xff}, {0x2, 0x1, {0x2, 0x1, 0x1}, {0x2, 0x0, 0x3}, 0x1, 0xff}, {0x0, 0x0, {0x1, 0xff, 0x3}, {0x0, 0x1, 0x3}, 0x1}], 0xe0)

19.784626987s ago: executing program 3 (id=1298):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "080865be5a"}]}, @NFTA_CMP_OP={0x8}]}}}]}]}], {0x14}}, 0x88}}, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

19.655401488s ago: executing program 3 (id=1301):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000037000000010000000000000000001b00000000000000"], 0x18}}], 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg0\x00', <r13=>0x0})
r14 = socket(0x10, 0x3, 0x0)
r15 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', <r17=>0x0, 0x2f, 0xe, 0x3, 0x9, 0x44, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x8, 0x454, 0x7}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000001480)={0x2510, r12, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1118, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "77293679d408dc814a04d5fb1f5c5a5aeb256b6ef8e3d165226b8dfadc18fb375f4cf880501db24609135bb5c5eddc25bee867402bd6c124c558b3a58eb6311fc37f8fdfed085fe073e82a3d689f3477b72be5c9154d6d50579c23577d4462b5382af2ec17436f321f62233b840099b996b520734e80002efa9f0bf1e79c7624c562b4eecc579e818efff380737883aba4ea487b63fa164ec78db0a1e7a3a8aefacad457c47d54adb3088081ad4361936bfe740dfd8e0339c870995d6fcbe639752ae554a935679ee783f18fcc145aabd0e13dbfac31591db2bf6002fe6b784ae9df9131254a613534ddea216f0fcc4cd1a421b2d84aa788"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x274, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x80\n'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@-.^.$*!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff114c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x876}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '+#\xc6%\'\x82^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0x20, 0x5, "379fecfb32b928cf22c38ed8e460db186dac081e98d9a68cfe81d1b2"}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x9f\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x80\n'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfbf8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x80\n'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@.,\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xcd, 0x4, "dcc7b3671f3c7658291a3bbca6d61216dd571d707c5d5c0349a1d1151fff1823c0c8b4521d0e7b16c9cf3a354a3c091ac3efe0d75d57049eb370b4976f0039f19d065d9e888e0fa2665f08c8f81cb82c0d31ed9971c9c6977ee49633803fd55ca84ac3872bdad36c9ee1a5175e3f142cc4ea48ea058cb610a5ccc3ecf0e45e2154315abefd0862c90266c62996b64acfa2123e8eceabd3dce3b98991510829821ad38dda9771fc13996b6ce0f6a00f9268760bdb4f3c243accd38356b6906bedff75e00aee00651902"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1078, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\r\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[$\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x80\n'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "24d4e804a3eb"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x64, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "b6b8b973a0725a9259ec95fa8e02181e913aa412fea76c8c71f4a4911e69354e8ea96f148a29aa135c2c18b9c140ec1f1ea4a2daf6c59b39c1f130346dee08c2e48689566f4fed628b6d599b72d34407877c5425aef37b9cfb1d53"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3b8f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffa}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7, 0x5, "bef149"}]}]}, 0x2510}, 0x1, 0x0, 0x0, 0x2011}, 0x4)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r18, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$netlink(0x10, 0x3, 0x6)

19.591088055s ago: executing program 3 (id=1303):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
unshare(0x22020600)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="080000000400"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001600), 0x4)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000005c0)=ANY=[@ANYBLOB="ac1414bbe000000014aaac1e0001ac1e00010000000000000000000023a14db49207b887628719b4227d7c8a3bae9314b007c912567eb2b1f900000000000000d76f21cad83585166239705515994604734a00b25702b2c1d7fb56226d8c5d9aba905111bbc12819c15cc5ff0e54c679009884ec887c5f"], 0x1c)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x6a)
syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x60, 0x0, 0x0, 0x0, 0x46, &(0x7f00000000c0)='batadv0\x00', 0x800, 0x1000, 0xfffd})
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000020c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="09a2d119601502ed05a4013be8fd11f75be159db20c4d98cd97e4fabe83017d1b4445f5e3fb0b8b47b615a3b5ff32b718ef8ab72e5402b4d5c4889102f2a35e7b017ff3cf1c65c1bd685de3baee584ddb84139d2e2d2177dc5f0289fb1ed207472fa3068423f0c7777daf96ad7312a6ebe267b7bca1f0a68c51615", 0x7b}, {&(0x7f0000000dc0)="f390bb9ceadf6f8452527bcf5b3370daab54215da062fee7ac05f8db623707", 0x1f}, {0x0}], 0x3, &(0x7f0000001000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000015c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0}}, {{&(0x7f0000001ac0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001b00)="ae405d7805192b6d075303c2d93c7155626133eec84cadfb48e0c5fdfe70fe34ff55b1d9d4824c5f39ec1ee1452581be62db40cdd115dd905d1191dc978c816df00824f5aba43eb2593fa96e48166c4e7ca1372781264cf77386ce048d0840d215e63f65ede9f672cd406dcab69e43dd0110dfc2ad00b416f41514f913970cd136af4c33ae9e811f5cf89dc469554b2f2d2616bb7639a091d150c8ac4ddd50ab82efd52d2ae436771f113ee62d6ca9a9e070e699ea7a2f1a8f46488e6a3e67e546ec87583e963052ccfc36", 0xcb}], 0x1, &(0x7f0000001d00)}}, {{&(0x7f0000001e00)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0}}], 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xb1, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
shutdown(r0, 0x1)

19.513775573s ago: executing program 3 (id=1305):
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002700)}, 0x200000c5) (async)
r1 = epoll_create1(0x80000)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) (async)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000600)) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x80000008})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 64)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 64)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x19, 0x0, &(0x7f0000000080))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r10=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', r10, @cgroup_device=0x6, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x9, 0xde8, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
sendto$packet(r8, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0xf, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r10, 0x1, 0x5, 0x6, @remote}, 0x14)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003800)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async)
close(r6) (async)
socket$kcm(0x29, 0x7, 0x0)

18.687765355s ago: executing program 2 (id=1316):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000304000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128009000100766c616e00000000080002800400038014000300766c616e3000"/52], 0x4c}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0xf0}}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
r3 = socket$inet6(0xa, 0x1, 0x100)
listen(r3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="c6961ed39984fe3620376244bde59853a655d47925e8a6494cf8e4bb8afafc75e2ca7dc0522114fa0b213dc92f7c9c93ed265f77709a193e8dd2d2", 0x3b}, {&(0x7f0000000080)="2e870d2fb09adefb2eef0bb664e59bd6751d310bb32f2f1a8f74219d1069f8e114c95a716056f3f998322aa14c8fabf72a840c09901eb892c8439d21b7e8a527ab3f64699074d1bb560996ebb71a2f5a953812bb0510a6e503b8b8b2ea962738767b01", 0x63}, {&(0x7f00000002c0)="6eac1d8b1dd04af7b0c9d1fba50504799a911804950e135693d976f33191726fcdbaddbb0ec0006169efa76631b5a197a21b722ae335fcf47786ad61d8b254f09c0fdf07c0603286f44bdad3e415fc61f885fddac7abec6eff9be7360c036486ef879fc4287320ce6da1c8c930897dda572951ca8b06949e24e4af7ff63bb1ef4b10fbb6afc197d739061d65e48695a88fa5368650425dbc53fa11c5504d046d27ab3768b9833344c56b8c60d052741c5adb334f297c252432e4bdebb2a9cb2515e421cb21249396f6ed0ef6494d596fbbfe67c420034b12487df630e9d3086907ed81574e2d240946e6b90c2e35a5", 0xef}, {&(0x7f00000003c0)="be3b02664dbd8a29f49d569a24fc4019140f6bde3e0d08adeed4d1b1491f1ecc3a623bf3afb67fd7040c2eab81e46fc59de947bdb2df771d6656ccfb7495fa970f39fc3b5748898a372969736253b628eeaf1242dfcf210722ecf89bcd75e9a3882a7034e08925690360", 0x6a}, {&(0x7f0000000140)="c80a0bebb6ef8874c936ba0319f22b572f59f9521c81da28245d11d54e154ceee820f18c4e1dbe448e88dcdb", 0x2c}, {&(0x7f00000004c0)="d7148e5c52b76944a8e230bdc671996493f97a873ff4388604258ade9d97cb86e5248d29df4302684f855789a753f7ee250ea0581153868bc0e309cb3864418722f10ebc2d6dc305e01d91f263f0c1c60dab90d0f973e55dcc7a8fe511e356484a7904202b0f2921a17d6c756dc63cdecf8355495a", 0x75}, {&(0x7f0000000880)="4be993004725a80aca5416d08e35ad7b4837ee1d76494632083d18b6ff650487825bada95c1015bfc93a7737083a0bffa65707225dcbc05d70465150a1a524b45587a31fc24ae46e840838b9e0a662fdd8060797832363458b3c22062fa5fabb2b9153f665a866", 0x67}], 0x7, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x44, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x14, 0x6, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9f}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x9}]}, @ssrr={0x89, 0x7, 0x4c, [@loopback]}, @ssrr={0x89, 0x17, 0xf5, [@dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @private=0xa010100, @multicast2, @multicast1]}]}}}], 0x78}, 0x4008000)
sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"])

18.457554391s ago: executing program 2 (id=1318):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000eaffffe8aaa26a8b8b8e3f8ffaffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000001"], 0x48)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000))
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f0000000240))

18.425276484s ago: executing program 2 (id=1319):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c, 0x80000)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @mcast1}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @mcast2, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @remote, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) (async)
listen(r1, 0x40000000) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

18.345567766s ago: executing program 2 (id=1320):
socket$kcm(0x10, 0x2, 0x10) (async)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x81764109abc7f5e6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
socket$kcm(0x29, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4c084)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

18.345096421s ago: executing program 2 (id=1321):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={<r2=>0x0, 0x5, "13bbbb5cd8"}, &(0x7f00000000c0)=0xd)
socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x8, 0x10}, &(0x7f0000000140)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_ADDRESS={0xa}]}, 0x5c}}, 0x0)

18.334965147s ago: executing program 0 (id=1322):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4041)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x18)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4)

18.295247704s ago: executing program 2 (id=1323):
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000002c0))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008"], 0x28}], 0x1}, 0x0)
write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="00010400d6030000faff4854031f00670000062f9078e00000017f000001440c70b3ac1414390000ffff0420880b00d00002161fbd1bf9040523363e81f492278248c9b640305ae36d7a7ccf3b31001a90a16e7731de243d0ecaa2949a88aa3438793af470b9f4db06c68d8bb9a64b674fadbd0c74dcc09c7d9f847e3d958a927c05a9d44e05ee041aaf7da7e8612da63c47a2534d52c4795b87e4e14a145ec892207996a8d0a74834c42408948776779fca8bf119e8002f8ffb0be72968d9cba0968e68295c9e81a84d7b28f6883393d35c6b6492d13d8be48dda5ff6ec2d65c77b6dcb8ecb5be4ae90df08a396a0ebf118ad5b432028c4be0bb617af0c20bbc889105d8d101c9a23282a51a70800080000050479798c82e472bb4c33bd280f45c3770adf12b18789a73c12e17533d4b9d36e34bb0e071c9bd3776a3bea8b11eefe2a2757a3479853c6603a1020c0fe30f8d82f3da13183eb077dd2ff5e2c3389d9f013c2836223e3aeac3c4af81a6ee9ed772e5a9ce487be58cc9146327480bf8045c3526e93b4d0021da129ebb6050b6a15ae3a26cdd1922b302fe03762d3b05e41f75269c74d19b5a140416df308af0c2c6f4bf871bd6143f48f3b96af140ce90f18621d23d9f9589e81449fbf446f77050086dd08000007b6bdffbbb4648aab7e188f329917d49d71843b1efccdc6db72239c1303210fc113b7e7c5d56983eb6184aeb5ec6aed9493670fdf7079df33080088be0000000310f4200001000000000000060800228c4deb000000012707c60102000000000080010008801c08006558000000001b7a35ddacfc8b12f3fcd7b21808c892a24c470b8bd5a866ae9ce05ab8638bd5a42b18edc53373920860e4ef2a0a7b48cfc2a700631e02fa7bfdb5b2f8781f0f91f5f0b326dffff2c4dfbcf81221f5b8b89b73e2743300ed657b9b4e6f28ee4c929c36b5e21e7e1b7a9713f467793be4a4a119d0b40f01339eabcc5d8ec40ced062f218cf10b45eb875e890e98eb2398f65010ffafc905faf73008494f73b2a77aeb3917b0e79f894a7732b6d7411528f64717591c5afe24c29fdf6a8bd8238adb9003e8caf9a3134eb6d761a3c73cb71f0699031277099106dbaa39ff21bc599c"], 0x329)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = accept(r5, &(0x7f0000000080)=@ethernet={0x0, @broadcast}, &(0x7f0000000180)=0x80)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x106, &(0x7f0000000a00)={@local, @multicast, @void, {@ipv4={0x800, @tipc={{0x18, 0x4, 0x3, 0x18, 0xf8, 0x65, 0x0, 0x9, 0x6, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x49, 0x2, [{0x2, 0x10, "a053afdb84508fda1c7c285e70fd"}, {0x7, 0x4, "93b5"}, {0x5, 0x4, "a81b"}, {0x2, 0xb, "383f22e4425d8af42f"}, {0x1, 0x8, "50428f928366"}, {0x1, 0x2}, {0x7, 0x4, "d84c"}, {0x2, 0x12, "48816e64729e2e6c9234e916fa1a9d36"}]}]}}, @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x5, 0x0, 0x0, 0x3, 0x1, 0x3, 0x4e20, 0x4e21, 0x1, 0x2}, [{0x85, 0xd, 0x3, 0x6, 0xfffffff7, 0x7, 0x5, 0x10000}, {0xc12, 0x5, 0x1, 0x81, 0xfffffffe, 0x3, 0x3, 0x9366}, {0x5, 0x9, 0x400009, 0xb, 0x441, 0x6, 0x2, 0xc}, {0x4, 0x80000000, 0x0, 0x1, 0xfffffddb, 0x1, 0x1, 0xc}]}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f00000002c0)={@val={0x0, 0xf7}, @val={0x2, 0x1, 0x4, 0x81, 0x9}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x18, 0x1, 0x0, 0x0, "9920c0dc2c2ea171e384dd74360a53f909f2e2595886de72dfa5d6c4963a6e3623c24662c396d7440d9f702e3c6e7826b5a6783becdf58adef27dc0df23490a5"}}}}}, 0x6c)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f0000000940)={0x2d, "5a551684f34f4a87ee5e43194f829f7548c8c76f90325c7b255a7661598160f0c974015b3758b2745953031a06068fe6b50b35884811845943af0a009fece8358cd17b55320e24ad71340524f6c4f7e3bc7310c6aa9cfafb2b67cf645fb3fa1e185cefca156135acec836ade953c7f13976f3bbb0b7c90f6805a3ee07497b1b7"})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r11 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r13, @ANYBLOB="00000000000000005c003f80110001"], 0x7c}}, 0x800)
sendmmsg(r11, &(0x7f0000000000), 0x400000000000235, 0x0)

16.210707697s ago: executing program 1 (id=1341):
r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x1d, @val=@tcx}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0xd3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x6}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe09}, @tail_call, @map_fd={0x18, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x1, 0x5, 0x5, 0x2}, {0x5, 0x3, 0x7, 0x3}, {0x0, 0x2, 0x9, 0x4}, {0x4, 0x1, 0x2, 0x6}, {0x1, 0x3, 0xc, 0x2}, {0x4, 0x1, 0x7, 0x8}, {0x1, 0x5, 0xc, 0x2}, {0x2, 0x5, 0x3, 0xc}], 0x10, 0x47bf}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r4, 0x0, 0x0}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl0\x00', <r5=>0x0, 0x29, 0x18, 0x7, 0x4, 0x20, @mcast1, @empty, 0x8000, 0x8, 0x7fff, 0x7}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000680)={'erspan0\x00', r5, 0x700, 0x80, 0x10000, 0x1, {{0x24, 0x4, 0x0, 0x5, 0x90, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x10, 0x99, 0x0, 0xa, [0x6, 0x40, 0x6]}, @lsrr={0x83, 0x23, 0x34, [@loopback, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x42}, @local, @empty]}, @lsrr={0x83, 0x17, 0x23, [@local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @rand_addr=0x64010102]}, @noop, @timestamp_prespec={0x44, 0xc, 0x51, 0x3, 0x6, [{@loopback, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0x62, 0x3, 0x1, [{@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x3}]}]}}}}})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000580)={r0, r1, 0x4, r4}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCGUNIT(r7, 0x80047456, &(0x7f0000000080))
r8 = socket$pppoe(0x18, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
ioctl$PPPOEIOCSFWD(r8, 0x40047459, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r6, @ANYRES64=r6, @ANYRES64=r8], 0xc0}, 0x1, 0x0, 0x0, 0x20008051}, 0x40001)
socket$netlink(0x10, 0x3, 0x7)

16.107165301s ago: executing program 1 (id=1342):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x6}, 0x6}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000002900000005"], 0x10}, 0x20800)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, &(0x7f0000000040), r3, 0x0, 0x800000000ff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0)

16.035295691s ago: executing program 1 (id=1343):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000a06010200000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10)

16.034466854s ago: executing program 1 (id=1344):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000180), 0x4)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}], 0x1c) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x2, 0x0, @loopback, 0x8}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)

16.007982009s ago: executing program 1 (id=1345):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="000000000000a000000000c9000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004804)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000001040500000000000000002c9654320006000640bff200000500010001"], 0x24}}, 0x20000020)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="000000000000a000000000c9000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004804) (async)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000001040500000000000000002c9654320006000640bff200000500010001"], 0x24}}, 0x20000020) (async)
close(0x3) (async)

15.980192211s ago: executing program 1 (id=1346):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
pipe(&(0x7f0000000280)={<r3=>0xffffffffffffffff})
listen(r2, 0x0)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
sendmmsg$alg(r4, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6)
sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0)
r8 = accept4$unix(r2, 0x0, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
recvmsg(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0)
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'})
write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a)

3.948191548s ago: executing program 32 (id=1305):
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002700)}, 0x200000c5) (async)
r1 = epoll_create1(0x80000)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) (async)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000600)) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x80000008})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 64)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 64)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x19, 0x0, &(0x7f0000000080))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r10=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', r10, @cgroup_device=0x6, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x9, 0xde8, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
sendto$packet(r8, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0xf, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r10, 0x1, 0x5, 0x6, @remote}, 0x14)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003800)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async)
close(r6) (async)
socket$kcm(0x29, 0x7, 0x0)

3.906562557s ago: executing program 33 (id=1297):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0xb8e, 0x9, 0x3}, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0dddcae227b57153f86500000000def388854e", @ANYRES32=0x0, @ANYBLOB="080000000000000008001f0000080000"], 0x28}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x3}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x90a}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x28000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x4b0, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_DESC={0x46c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x134, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xed}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ca0847a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b6346a4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ae}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x90}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x49b4c13d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff05}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbef}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x22d3}]}]}, @NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x140000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca4c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe9f4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfc8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11d9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x209}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcc}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffeffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x55a6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x34f2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x15c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x99}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x927}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f2e}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2e42}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x57c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000140)=[{0x3, 0x2, {0x0, 0xff, 0x2}, {0x2, 0xe988f878ec2373bd, 0x1}, 0xfd, 0x2}, {0x0, 0x3, {0x1}, {0x0, 0xf0, 0x2}, 0xfe, 0xff}, {0x3, 0x3, {0x2, 0x0, 0x3}, {0x1, 0x1, 0x3}, 0x2, 0x1}, {0x2, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xfe, 0x3}, 0x2, 0xfd}, {0x0, 0x1, {0x1, 0xff}, {0x1, 0xf0, 0x4}, 0x0, 0xff}, {0x2, 0x1, {0x2, 0x1, 0x1}, {0x2, 0x0, 0x3}, 0x1, 0xff}, {0x0, 0x0, {0x1, 0xff, 0x3}, {0x0, 0x1, 0x3}, 0x1}], 0xe0)

2.905315917s ago: executing program 34 (id=1322):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4041)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x18)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4)

2.884400922s ago: executing program 35 (id=1323):
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000002c0))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008"], 0x28}], 0x1}, 0x0)
write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x329)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = accept(r5, &(0x7f0000000080)=@ethernet={0x0, @broadcast}, &(0x7f0000000180)=0x80)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x106, &(0x7f0000000a00)={@local, @multicast, @void, {@ipv4={0x800, @tipc={{0x18, 0x4, 0x3, 0x18, 0xf8, 0x65, 0x0, 0x9, 0x6, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x49, 0x2, [{0x2, 0x10, "a053afdb84508fda1c7c285e70fd"}, {0x7, 0x4, "93b5"}, {0x5, 0x4, "a81b"}, {0x2, 0xb, "383f22e4425d8af42f"}, {0x1, 0x8, "50428f928366"}, {0x1, 0x2}, {0x7, 0x4, "d84c"}, {0x2, 0x12, "48816e64729e2e6c9234e916fa1a9d36"}]}]}}, @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x5, 0x0, 0x0, 0x3, 0x1, 0x3, 0x4e20, 0x4e21, 0x1, 0x2}, [{0x85, 0xd, 0x3, 0x6, 0xfffffff7, 0x7, 0x5, 0x10000}, {0xc12, 0x5, 0x1, 0x81, 0xfffffffe, 0x3, 0x3, 0x9366}, {0x5, 0x9, 0x400009, 0xb, 0x441, 0x6, 0x2, 0xc}, {0x4, 0x80000000, 0x0, 0x1, 0xfffffddb, 0x1, 0x1, 0xc}]}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f00000002c0)={@val={0x0, 0xf7}, @val={0x2, 0x1, 0x4, 0x81, 0x9}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x18, 0x1, 0x0, 0x0, "9920c0dc2c2ea171e384dd74360a53f909f2e2595886de72dfa5d6c4963a6e3623c24662c396d7440d9f702e3c6e7826b5a6783becdf58adef27dc0df23490a5"}}}}}, 0x6c)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f0000000940)={0x2d, "5a551684f34f4a87ee5e43194f829f7548c8c76f90325c7b255a7661598160f0c974015b3758b2745953031a06068fe6b50b35884811845943af0a009fece8358cd17b55320e24ad71340524f6c4f7e3bc7310c6aa9cfafb2b67cf645fb3fa1e185cefca156135acec836ade953c7f13976f3bbb0b7c90f6805a3ee07497b1b7"})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r11 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r13, @ANYBLOB="00000000000000005c003f80110001"], 0x7c}}, 0x800)
sendmmsg(r11, &(0x7f0000000000), 0x400000000000235, 0x0)

0s ago: executing program 36 (id=1346):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
pipe(&(0x7f0000000280)={<r3=>0xffffffffffffffff})
listen(r2, 0x0)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
sendmmsg$alg(r4, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6)
sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0)
r8 = accept4$unix(r2, 0x0, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
recvmsg(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0)
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'})
write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.214' (ED25519) to the list of known hosts.
[   70.604362][ T5815] cgroup: Unknown subsys name 'net'
[   70.690445][ T5815] cgroup: Unknown subsys name 'cpuset'
[   70.699325][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.471568][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[   71.478062][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[   72.158090][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.113891][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.122454][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.137357][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.148137][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.159261][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.194522][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.203343][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.212512][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.220749][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.228741][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.243065][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.262654][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.271954][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.272128][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.286724][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.287815][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.304749][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.312528][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.320748][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.333120][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.349164][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.410662][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.422256][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.430898][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.439317][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.832715][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   77.048792][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   77.131873][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.139326][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.146941][ T5825] bridge_slave_0: entered allmulticast mode
[   77.154976][ T5825] bridge_slave_0: entered promiscuous mode
[   77.168355][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   77.190475][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   77.200783][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.208139][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.215296][ T5825] bridge_slave_1: entered allmulticast mode
[   77.222828][ T5825] bridge_slave_1: entered promiscuous mode
[   77.371274][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.388808][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.418569][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   77.501771][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.509162][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.516364][ T5830] bridge_slave_0: entered allmulticast mode
[   77.523728][ T5830] bridge_slave_0: entered promiscuous mode
[   77.544563][ T5825] team0: Port device team_slave_0 added
[   77.562757][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.570082][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.577426][ T5830] bridge_slave_1: entered allmulticast mode
[   77.584461][ T5830] bridge_slave_1: entered promiscuous mode
[   77.616885][ T5825] team0: Port device team_slave_1 added
[   77.623096][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.630519][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.637962][ T5834] bridge_slave_0: entered allmulticast mode
[   77.645418][ T5834] bridge_slave_0: entered promiscuous mode
[   77.691408][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.699062][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.706206][ T5834] bridge_slave_1: entered allmulticast mode
[   77.713998][ T5834] bridge_slave_1: entered promiscuous mode
[   77.732592][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.740094][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.747880][ T5831] bridge_slave_0: entered allmulticast mode
[   77.754827][ T5831] bridge_slave_0: entered promiscuous mode
[   77.794404][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.804725][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.811953][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.819250][ T5831] bridge_slave_1: entered allmulticast mode
[   77.826263][ T5831] bridge_slave_1: entered promiscuous mode
[   77.838866][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.845835][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.872196][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.897308][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.930411][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.937492][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.964380][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.979293][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.032973][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.056494][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.067178][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.074739][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.081991][ T5841] bridge_slave_0: entered allmulticast mode
[   78.089100][ T5841] bridge_slave_0: entered promiscuous mode
[   78.097831][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.105049][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.113256][ T5841] bridge_slave_1: entered allmulticast mode
[   78.120401][ T5841] bridge_slave_1: entered promiscuous mode
[   78.139120][ T5830] team0: Port device team_slave_0 added
[   78.147520][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.187659][   T52] Bluetooth: hci0: command tx timeout
[   78.208455][ T5834] team0: Port device team_slave_0 added
[   78.216265][ T5830] team0: Port device team_slave_1 added
[   78.244339][ T5831] team0: Port device team_slave_0 added
[   78.265012][ T5834] team0: Port device team_slave_1 added
[   78.294716][ T5831] team0: Port device team_slave_1 added
[   78.303232][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.323537][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.331045][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.347977][   T52] Bluetooth: hci1: command tx timeout
[   78.357546][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.378926][ T5825] hsr_slave_0: entered promiscuous mode
[   78.385419][ T5825] hsr_slave_1: entered promiscuous mode
[   78.413950][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.427358][   T52] Bluetooth: hci3: command tx timeout
[   78.427366][ T5840] Bluetooth: hci2: command tx timeout
[   78.451859][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.458932][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.485745][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.498121][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.505162][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.531654][   T52] Bluetooth: hci4: command tx timeout
[   78.537754][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.560246][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.567489][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.593680][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.625785][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.632929][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.659512][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.672515][ T5841] team0: Port device team_slave_0 added
[   78.679444][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.686393][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.712620][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.745341][ T5841] team0: Port device team_slave_1 added
[   78.785755][ T5830] hsr_slave_0: entered promiscuous mode
[   78.792751][ T5830] hsr_slave_1: entered promiscuous mode
[   78.799369][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   78.805196][ T5830] Cannot create hsr debugfs directory
[   78.872906][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.880101][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.906354][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.951866][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.959170][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.985379][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.050126][ T5834] hsr_slave_0: entered promiscuous mode
[   79.056394][ T5834] hsr_slave_1: entered promiscuous mode
[   79.062745][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[   79.068662][ T5834] Cannot create hsr debugfs directory
[   79.091706][ T5831] hsr_slave_0: entered promiscuous mode
[   79.098095][ T5831] hsr_slave_1: entered promiscuous mode
[   79.104137][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   79.110039][ T5831] Cannot create hsr debugfs directory
[   79.254954][ T5841] hsr_slave_0: entered promiscuous mode
[   79.261681][ T5841] hsr_slave_1: entered promiscuous mode
[   79.268308][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   79.274044][ T5841] Cannot create hsr debugfs directory
[   79.560274][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.572646][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.601679][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.642433][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.731436][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.741585][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.753614][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.776077][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.851490][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.868310][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.880031][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.905397][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.993012][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.016543][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.028492][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.041443][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.052076][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.142600][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   80.162162][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.175597][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.182999][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.205412][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.228313][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.235484][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.249120][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.268570][   T52] Bluetooth: hci0: command tx timeout
[   80.275088][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.349681][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.429070][   T52] Bluetooth: hci1: command tx timeout
[   80.432217][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   80.483753][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.490948][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.508558][   T52] Bluetooth: hci3: command tx timeout
[   80.514032][   T52] Bluetooth: hci2: command tx timeout
[   80.526021][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.533237][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.551485][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.589110][   T52] Bluetooth: hci4: command tx timeout
[   80.633380][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.659965][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   80.701459][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.708765][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.721501][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   80.737024][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.752157][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.759378][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.774038][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.781353][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.806464][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   80.819833][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.826937][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.856204][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.876167][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.883337][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.901275][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.908506][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.080778][ T5825] veth0_vlan: entered promiscuous mode
[   81.188912][ T5825] veth1_vlan: entered promiscuous mode
[   81.374519][ T5825] veth0_macvtap: entered promiscuous mode
[   81.461744][ T5825] veth1_macvtap: entered promiscuous mode
[   81.500726][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.524039][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.538260][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.569984][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.604907][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.615300][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.648348][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.658109][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.685622][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.703716][ T5830] veth0_vlan: entered promiscuous mode
[   81.719248][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.815818][ T5830] veth1_vlan: entered promiscuous mode
[   81.837745][ T5834] veth0_vlan: entered promiscuous mode
[   81.885342][ T5834] veth1_vlan: entered promiscuous mode
[   81.903021][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.919795][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.960578][ T5831] veth0_vlan: entered promiscuous mode
[   82.016531][ T5831] veth1_vlan: entered promiscuous mode
[   82.035154][ T5830] veth0_macvtap: entered promiscuous mode
[   82.059541][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.070019][ T5830] veth1_macvtap: entered promiscuous mode
[   82.087538][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.173287][ T5831] veth0_macvtap: entered promiscuous mode
[   82.205905][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.223957][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.246936][ T5834] veth0_macvtap: entered promiscuous mode
[   82.271295][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.318137][ T5834] veth1_macvtap: entered promiscuous mode
[   82.347254][   T52] Bluetooth: hci0: command tx timeout
[   82.349716][ T5831] veth1_macvtap: entered promiscuous mode
[   82.393211][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.442043][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.451410][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.462932][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.495494][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.509045][   T52] Bluetooth: hci1: command tx timeout
[   82.516652][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.556614][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.587585][   T52] Bluetooth: hci2: command tx timeout
[   82.597149][   T52] Bluetooth: hci3: command tx timeout
[   82.599398][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.643766][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.659611][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.668679][   T52] Bluetooth: hci4: command tx timeout
[   82.676620][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.687601][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.705595][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.715163][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.741781][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.751587][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.766174][ T5952] Zero length message leads to an empty skb
[   82.843805][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.859317][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.875422][ T5841] veth0_vlan: entered promiscuous mode
[   82.931848][ T5841] veth1_vlan: entered promiscuous mode
[   82.976985][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.990995][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.095729][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.108590][ T5841] veth0_macvtap: entered promiscuous mode
[   83.117023][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.135954][ T5841] veth1_macvtap: entered promiscuous mode
[   83.201571][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.217970][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.331365][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.375435][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.385744][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.395193][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.404816][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.449551][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.468778][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.488494][ T5966] syzkaller0: entered promiscuous mode
[   83.494273][ T5966] syzkaller0: entered allmulticast mode
[   83.512952][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.531073][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.540572][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.740436][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.779498][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.941213][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.964831][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'.
[   83.977666][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.995720][ T5976] openvswitch: netlink: Unknown nsh attribute 0
[   84.002221][ T5976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.032050][ T5982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14'.
[   84.206909][ T5982] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[   84.223366][ T5982] bond1 (unregistering): Released all slaves
[   84.428120][   T52] Bluetooth: hci0: command tx timeout
[   84.512235][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'.
[   84.541385][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'.
[   84.604422][   T52] Bluetooth: hci1: command tx timeout
[   84.669347][   T52] Bluetooth: hci3: command tx timeout
[   84.670593][ T5840] Bluetooth: hci2: command tx timeout
[   84.747386][ T5840] Bluetooth: hci4: command tx timeout
[   84.920237][ T6021] netlink: 'syz.0.27': attribute type 2 has an invalid length.
[   84.947552][ T6021] netlink: 119 bytes leftover after parsing attributes in process `syz.0.27'.
[   85.051179][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28'.
[   85.161572][ T6033] netlink: 72 bytes leftover after parsing attributes in process `syz.2.31'.
[   85.185046][ T6030] netlink: 'syz.3.29': attribute type 1 has an invalid length.
[   85.215594][ T6030] netlink: 'syz.3.29': attribute type 2 has an invalid length.
[   85.305505][ T6033] bond1 (unregistering): Released all slaves
[   85.528319][ T6052] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002
[   85.672666][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'.
[   85.768411][ T6064] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   85.807255][ T6065] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   85.826988][ T6067] Cannot find del_set index 0 as target
[   85.939375][ T6069] netlink: 'syz.3.42': attribute type 12 has an invalid length.
[   85.997633][ T6075] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.44'.
[   86.020596][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.43'.
[   86.125731][ T6079] netlink: 'syz.3.47': attribute type 39 has an invalid length.
[   86.231027][ T6081] warning: `syz.2.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.763737][ T6114] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.765349][ T6113] netlink: 'syz.3.59': attribute type 4 has an invalid length.
[   86.839579][   T24] cfg80211: failed to load regulatory.db
[   86.873905][ T6115] bond1 (unregistering): Released all slaves
[   87.087370][ T6134] netlink: 'syz.4.66': attribute type 1 has an invalid length.
[   87.095164][ T6134] netlink: 'syz.4.66': attribute type 7 has an invalid length.
[   87.111055][ T6134] NCSI netlink: No device for ifindex 65584
[   87.160483][ T6138] : entered promiscuous mode
[   87.286183][ T6155] Bluetooth: MGMT ver 1.23
[   87.416826][ T6165] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   88.503636][ T6211] erspan0: entered promiscuous mode
[   88.547145][ T5840] Bluetooth: hci4: command tx timeout
[   89.133704][ T6219] vlan2: entered allmulticast mode
[   89.466454][ T6250] syz.1.99 uses obsolete (PF_INET,SOCK_PACKET)
[   89.629214][ T6257] dvmrp0: entered allmulticast mode
[   89.639486][ T6261] lo: entered promiscuous mode
[   89.660365][ T6261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.836735][   T10] IPVS: starting estimator thread 0...
[   89.938674][ T6280] IPVS: using max 33 ests per chain, 79200 per kthread
[   89.954380][ T6278] bond1: option resend_igmp: invalid value (32767)
[   89.997896][ T6278] bond1: option resend_igmp: allowed values 0 - 255
[   90.031239][ T6278] bond1 (unregistering): Released all slaves
[   90.093215][ T6287] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   90.287267][ T6303] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.310809][ T6303] __nla_validate_parse: 6 callbacks suppressed
[   90.310826][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'.
[   90.326617][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'.
[   90.336301][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'.
[   90.592923][ T6315] vxlan0: entered promiscuous mode
[   90.598395][ T6315] vxlan0: entered allmulticast mode
[   90.604734][ T2917] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.615819][ T2917] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.627658][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'.
[   90.639855][ T2917] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.649737][ T2917] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.959130][ T6332] openvswitch: netlink: EtherType 50a is less than min 600
[   91.028810][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'.
[   91.093806][ T6339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'.
[   91.264418][ T6347] validate_nla: 3 callbacks suppressed
[   91.264436][ T6347] netlink: 'syz.4.127': attribute type 1 has an invalid length.
[   91.513613][ T6364] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   91.696240][ T6378] tipc: Started in network mode
[   91.708551][ T6378] tipc: Node identity 1e193feb428a, cluster identity 4711
[   91.729824][ T6378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.736849][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'.
[   91.858358][ T6378] tipc: Disabling bearer <eth:syzkaller0>
[   92.125416][ T6407] syz.0.146: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   92.131827][ T6405] netlink: 'syz.2.144': attribute type 4 has an invalid length.
[   92.142917][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.0.146 Not tainted syzkaller #0 PREEMPT(full) 
[   92.142942][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   92.142959][ T6407] Call Trace:
[   92.142966][ T6407]  <TASK>
[   92.142975][ T6407]  dump_stack_lvl+0x189/0x250
[   92.143012][ T6407]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.143033][ T6407]  ? __pfx__printk+0x10/0x10
[   92.143051][ T6407]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   92.143073][ T6407]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   92.143096][ T6407]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   92.143119][ T6407]  warn_alloc+0x214/0x310
[   92.143142][ T6407]  ? stack_depot_save_flags+0x41b/0x860
[   92.143170][ T6407]  ? __pfx_warn_alloc+0x10/0x10
[   92.143193][ T6407]  ? kasan_save_track+0x3e/0x80
[   92.143214][ T6407]  ? __kasan_kmalloc+0x93/0xb0
[   92.143236][ T6407]  ? xsk_setsockopt+0x4dc/0x8d0
[   92.143254][ T6407]  ? do_sock_setsockopt+0x17c/0x1b0
[   92.143269][ T6407]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   92.143283][ T6407]  ? do_syscall_64+0xfa/0xfa0
[   92.143302][ T6407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.143327][ T6407]  __vmalloc_node_range_noprof+0x125/0x12d0
[   92.143379][ T6407]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   92.143405][ T6407]  ? __kasan_kmalloc+0x93/0xb0
[   92.143432][ T6407]  vmalloc_user_noprof+0xad/0xf0
[   92.143454][ T6407]  ? xskq_create+0xbf/0x170
[   92.143475][ T6407]  xskq_create+0xbf/0x170
[   92.143498][ T6407]  xsk_init_queue+0xb0/0x110
[   92.143521][ T6407]  xsk_setsockopt+0x4dc/0x8d0
[   92.143542][ T6407]  ? __pfx_xsk_setsockopt+0x10/0x10
[   92.143565][ T6407]  ? __pfx_aa_sk_perm+0x10/0x10
[   92.143588][ T6407]  ? aa_sock_opt_perm+0xff/0x1b0
[   92.143614][ T6407]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   92.143630][ T6407]  ? __pfx_xsk_setsockopt+0x10/0x10
[   92.143650][ T6407]  do_sock_setsockopt+0x17c/0x1b0
[   92.143671][ T6407]  __x64_sys_setsockopt+0x13f/0x1b0
[   92.143693][ T6407]  do_syscall_64+0xfa/0xfa0
[   92.143713][ T6407]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.143734][ T6407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.143750][ T6407]  ? clear_bhb_loop+0x60/0xb0
[   92.143769][ T6407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.143785][ T6407] RIP: 0033:0x7fa8f978f6c9
[   92.143807][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.143820][ T6407] RSP: 002b:00007fa8f79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   92.143838][ T6407] RAX: ffffffffffffffda RBX: 00007fa8f99e5fa0 RCX: 00007fa8f978f6c9
[   92.143850][ T6407] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   92.143866][ T6407] RBP: 00007fa8f9811f91 R08: 0000000000000004 R09: 0000000000000000
[   92.143875][ T6407] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.143885][ T6407] R13: 00007fa8f99e6038 R14: 00007fa8f99e5fa0 R15: 00007ffd1289f138
[   92.143915][ T6407]  </TASK>
[   92.143924][ T6407] Mem-Info:
[   92.188867][ T6405] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[   92.204178][ T6407] active_anon:4787 inactive_anon:0 isolated_anon:0
[   92.204178][ T6407]  active_file:2757 inactive_file:39876 isolated_file:0
[   92.204178][ T6407]  unevictable:768 dirty:432 writeback:0
[   92.204178][ T6407]  slab_reclaimable:10635 slab_unreclaimable:94019
[   92.204178][ T6407]  mapped:28917 shmem:1356 pagetables:1033
[   92.204178][ T6407]  sec_pagetables:0 bounce:0
[   92.204178][ T6407]  kernel_misc_reclaimable:0
[   92.204178][ T6407]  free:1329461 free_pcp:22593 free_cma:0
[   92.290776][ T6413] netlink: 'syz.4.147': attribute type 1 has an invalid length.
[   92.296363][ T6405] netlink: 228 bytes leftover after parsing attributes in process `syz.2.144'.
[   92.298318][ T6407] Node 0 active_anon:19048kB inactive_anon:0kB active_file:11028kB inactive_file:159300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115668kB dirty:1712kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11792kB pagetables:4100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.354977][ T6416] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.147'.
[   92.392012][ T6413] netlink: 'syz.4.147': attribute type 4 has an invalid length.
[   92.500463][ T6407] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.500511][ T6407] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   92.500576][ T6407] lowmem_reserve[]: 0 2505 2505 2505 2505
[   92.500615][ T6407] Node 0 DMA32 free:1411016kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18848kB inactive_anon:0kB active_file:11028kB inactive_file:159300kB unevictable:1536kB writepending:1712kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:68412kB local_pcp:36092kB free_cma:0kB
[   92.500665][ T6407] lowmem_reserve[]: 0 0 0 0 0
[   92.500703][ T6407] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   92.500753][ T6407] lowmem_reserve[]: 0 0 0 0 0
[   92.500792][ T6407] Node 1 Normal free:3890796kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22528kB local_pcp:8704kB free_cma:0kB
[   92.500851][ T6407] lowmem_reserve[]: 0 0 0 0 0
[   92.500892][ T6407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   92.501036][ T6407] Node 0 DMA32: 12*4kB (M) 99*8kB (UME) 58*16kB (UME) 98*32kB (UME) 23*64kB (UME) 9*128kB (UM) 4*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 340*4096kB (M) = 1410920kB
[   92.501205][ T6407] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   92.501310][ T6407] Node 1 Normal: 195*4kB (UME) 56*8kB (UME) 30*16kB (UME) 36*32kB (UME) 19*64kB (UME) 5*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3890796kB
[   92.501480][ T6407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   92.501495][ T6407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   92.501510][ T6407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   92.501524][ T6407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   92.501539][ T6407] 43985 total pagecache pages
[   92.501552][ T6407] 0 pages in swap cache
[   92.501560][ T6407] Free swap  = 124996kB
[   92.501568][ T6407] Total swap = 124996kB
[   92.501576][ T6407] 2097051 pages RAM
[   92.501583][ T6407] 0 pages HighMem/MovableOnly
[   92.501590][ T6407] 424121 pages reserved
[   92.501598][ T6407] 0 pages cma reserved
[   92.717343][ T6420] netlink: 666 bytes leftover after parsing attributes in process `syz.3.148'.
[   92.907737][ T6434] trusted_key: syz.2.151 sent an empty control message without MSG_MORE.
[   93.038109][ T6442] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   93.585692][ T6476] ipt_rpfilter: unknown options
[   93.595227][ T6480] syzkaller0: entered promiscuous mode
[   93.614498][ T6480] syzkaller0: entered allmulticast mode
[   93.729555][ T6486] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[   93.744728][ T6486] Bluetooth: MGMT ver 1.23
[   93.814731][ T6494] netlink: 'syz.4.171': attribute type 1 has an invalid length.
[   93.823010][ T6489] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.831863][ T6489] bond0: (slave bond1): Enslaving as an active interface with an up link
[   93.956624][ T6501] macvtap1: entered promiscuous mode
[   93.962762][ T6501] vlan0: entered promiscuous mode
[   93.968422][ T6501] macvtap1: entered allmulticast mode
[   93.973834][ T6501] vlan0: entered allmulticast mode
[   93.979050][ T6501] veth0_vlan: entered allmulticast mode
[   94.029348][ T6502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.153306][ T6502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.181707][ T6514] netlink: ct family unspecified
[   94.199867][ T6514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.259212][ T6502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.351594][ T6502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.524375][   T62] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.535317][   T62] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.544480][ T6526] netlink: 'syz.2.182': attribute type 4 has an invalid length.
[   94.595284][   T62] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.605296][   T62] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.616129][ T6531] netlink: 'syz.2.182': attribute type 4 has an invalid length.
[   94.666811][ T6526] netlink: 'syz.2.182': attribute type 64 has an invalid length.
[   94.720110][ T6526] openvswitch: netlink: Missing key (keys=40, expected=100)
[   95.276356][ T6573] team0: Port device dummy0 added
[   95.349382][ T6573] team0: Port device dummy0 removed
[   95.372649][ T6573] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   95.790775][ T5840] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   95.791965][ T5839] Bluetooth: hci4: command 0x0405 tx timeout
[   95.798807][ T5840] Bluetooth: hci2: command 0x0401 tx timeout
[   96.203972][ T6616] Bluetooth: MGMT ver 1.23
[   96.234051][ T6616] ipt_ECN: cannot use operation on non-tcp rule
[   96.249670][ T6616] __nla_validate_parse: 23 callbacks suppressed
[   96.249687][ T6616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.204'.
[   96.313889][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[   96.323627][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[   96.357362][ T6627] netlink: 64 bytes leftover after parsing attributes in process `syz.1.209'.
[   97.099943][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'.
[   97.110431][ T6655] x_tables: duplicate underflow at hook 2
[   97.410911][ T6677] netlink: 6 bytes leftover after parsing attributes in process `syz.3.214'.
[   97.464564][ T6677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.692022][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.219'.
[   97.772192][ T6695] validate_nla: 4 callbacks suppressed
[   97.772210][ T6695] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   97.935951][ T6702] netlink: zone id is out of range
[   97.953974][ T6702] netlink: zone id is out of range
[   97.967265][ T6702] netlink: zone id is out of range
[   97.977270][ T6702] netlink: zone id is out of range
[   97.992693][ T6702] netlink: zone id is out of range
[   98.016121][ T6697] syz.1.220 (6697) used greatest stack depth: 17832 bytes left
[   98.024333][ T6702] netlink: zone id is out of range
[   98.024350][ T6702] netlink: zone id is out of range
[   98.024389][ T6702] netlink: zone id is out of range
[   98.051693][ T6708] Bluetooth: MGMT ver 1.23
[   98.267783][ T5840] Bluetooth: hci0: command tx timeout
[   98.341950][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[   98.401172][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[   98.565752][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.235'.
[   98.645723][ T6744] veth1_to_bond: entered allmulticast mode
[   98.721837][ T6747] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.844410][ T6753] xt_policy: too many policy elements
[   98.886053][ T6744] bond0: (slave bond_slave_1): Releasing backup interface
[   99.006825][ T6749] bridge_slave_0: left allmulticast mode
[   99.026062][ T6749] bridge_slave_0: left promiscuous mode
[   99.063227][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.084969][ T6749] bridge_slave_1: left allmulticast mode
[   99.091029][ T6749] bridge_slave_1: left promiscuous mode
[   99.097429][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.113384][ T6749] bond0: (slave bond_slave_0): Releasing backup interface
[   99.124105][ T6749] bond0: (slave bond_slave_1): Releasing backup interface
[   99.140209][ T6749] team0: Port device team_slave_0 removed
[   99.153344][ T6749] team0: Port device team_slave_1 removed
[   99.161045][ T6749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.169741][ T6749] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.178679][ T6749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.186196][ T6749] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.264970][    T9] IPVS: starting estimator thread 0...
[   99.272328][ T6772] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   99.357959][ T6773] IPVS: using max 33 ests per chain, 79200 per kthread
[   99.827989][ T6805] bond2: entered promiscuous mode
[   99.845660][ T6805] bond2: entered allmulticast mode
[   99.861094][ T6805] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.067457][ T6825] netlink: 'syz.3.262': attribute type 7 has an invalid length.
[  100.132717][ T6668] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.146229][ T6825] netlink: 'syz.3.262': attribute type 7 has an invalid length.
[  100.164785][ T6668] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.381295][ T6668] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.439130][ T6858] netlink: 'syz.4.267': attribute type 1 has an invalid length.
[  100.609383][ T6869] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.646857][ T6871] 8021q: adding VLAN 0 to HW filter on device bond4
[  132.910535][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  132.916864][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  172.928351][ T6884] __nla_validate_parse: 14 callbacks suppressed
[  172.928370][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'.
[  172.953378][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'.
[  173.070147][ T6895] ipt_REJECT: ECHOREPLY no longer supported.
[  173.228686][ T6911] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.282'.
[  173.238239][ T6911] net_ratelimit: 6 callbacks suppressed
[  173.238255][ T6911] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  173.736868][ T6930] dvmrp0: entered allmulticast mode
[  173.880921][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.291'.
[  173.884222][ T6946] tipc: Failed to remove unknown binding: 66,1,1/0:2852215315/2852215317
[  173.929062][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'.
[  174.310715][ T6959] tipc: Started in network mode
[  174.315620][ T6959] tipc: Node identity 2afac3fbd9a1, cluster identity 4711
[  174.324968][ T6959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.340960][ T6959] syzkaller0: entered promiscuous mode
[  174.346476][ T6959] syzkaller0: entered allmulticast mode
[  174.412397][ T6959] tipc: Resetting bearer <eth:syzkaller0>
[  174.517888][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'.
[  174.560651][ T6974] netlink: 'syz.4.300': attribute type 2 has an invalid length.
[  174.577688][   T12] dvmrp0 (unregistering): left allmulticast mode
[  174.619398][ T6958] tipc: Resetting bearer <eth:syzkaller0>
[  174.657794][ T6958] tipc: Disabling bearer <eth:syzkaller0>
[  174.946402][ T7003] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[  174.954219][ T7003] netlink: 224 bytes leftover after parsing attributes in process `syz.1.306'.
[  175.039715][ T7014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.308'.
[  175.107215][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'.
[  175.479372][ T7041] tipc: Started in network mode
[  175.485201][ T7041] tipc: Node identity c6b8568fba93, cluster identity 4711
[  175.492657][ T7041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.505532][ T7041] syzkaller0: entered promiscuous mode
[  175.511774][ T7041] syzkaller0: entered allmulticast mode
[  175.526003][ T7041] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  175.581181][ T7041] tipc: Resetting bearer <eth:syzkaller0>
[  175.612766][ T7039] tipc: Resetting bearer <eth:syzkaller0>
[  175.651449][ T7052] sctp: [Deprecated]: syz.0.318 (pid 7052) Use of int in max_burst socket option.
[  175.651449][ T7052] Use struct sctp_assoc_value instead
[  175.673509][ T7039] tipc: Disabling bearer <eth:syzkaller0>
[  175.834600][ T7062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.321'.
[  176.146572][ T7072] netlink: 'syz.4.324': attribute type 29 has an invalid length.
[  176.168788][ T7079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.261089][ T7086] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  176.262613][ T7079] syzkaller0: entered promiscuous mode
[  176.285399][ T7079] syzkaller0: entered allmulticast mode
[  176.296318][ T7079] tipc: Resetting bearer <eth:syzkaller0>
[  176.435250][ T7077] tipc: Resetting bearer <eth:syzkaller0>
[  177.483188][ T7077] tipc: Disabling bearer <eth:syzkaller0>
[  177.497255][    T9] tipc: Node number set to 1553154027
[  177.815813][ T7118] hsr_slave_0 (unregistering): left promiscuous mode
[  178.378424][ T7179] __nla_validate_parse: 5 callbacks suppressed
[  178.378442][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'.
[  178.412103][ T7179] netlink: 'syz.2.353': attribute type 1 has an invalid length.
[  178.425625][ T7183] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[  178.442313][ T7179] netlink: 'syz.2.353': attribute type 1 has an invalid length.
[  178.510171][ T7179] netlink: 'syz.2.353': attribute type 2 has an invalid length.
[  178.579580][ T7179] netlink: 68 bytes leftover after parsing attributes in process `syz.2.353'.
[  178.631711][ T7197] netlink: 104 bytes leftover after parsing attributes in process `syz.1.357'.
[  178.662876][ T7196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.751784][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'.
[  178.778490][ T7205] netem: change failed
[  178.783792][ T7201] openvswitch: netlink: Flow key attr not present in new flow.
[  178.785193][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.360'.
[  179.015344][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'.
[  179.264447][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.272573][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.334622][ T7253] bond0: (slave erspan0): Opening slave failed
[  180.166069][ T7271] netlink: zone id is out of range
[  180.215109][ T7281] ieee802154 phy0 wpan0: encryption failed: -22
[  180.224798][ T7282] netlink: 'syz.4.376': attribute type 10 has an invalid length.
[  180.257776][ T7278] netlink: 'syz.4.376': attribute type 10 has an invalid length.
[  180.266615][ T7285] xt_hashlimit: invalid interval
[  180.291727][ T7284] netlink: 72 bytes leftover after parsing attributes in process `syz.3.375'.
[  180.451912][ T7294] bond1 (unregistering): Released all slaves
[  181.025795][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.391'.
[  181.081609][ T7330] netlink: 'syz.2.393': attribute type 1 has an invalid length.
[  181.215181][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'.
[  181.295188][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.395'.
[  181.817879][ T7382] netlink: 'syz.2.406': attribute type 2 has an invalid length.
[  182.017163][ T7337] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  182.023473][ T7337] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  182.083180][ T7337] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  182.099768][ T7337] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  182.102888][ T7401] netlink: 'syz.2.412': attribute type 15 has an invalid length.
[  182.120722][ T7397] pim6reg1: entered promiscuous mode
[  182.127000][ T7397] pim6reg1: entered allmulticast mode
[  182.136334][ T7337] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  182.150664][ T7401] netlink: 'syz.2.412': attribute type 15 has an invalid length.
[  182.152317][ T7337] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  182.198135][ T7337] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  182.216321][ T7337] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  182.272001][ T7337] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  182.278996][ T7337] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  182.407790][ T7414] netlink: 'syz.2.413': attribute type 1 has an invalid length.
[  182.465361][ T7419] sctp: [Deprecated]: syz.0.415 (pid 7419) Use of int in max_burst socket option deprecated.
[  182.465361][ T7419] Use struct sctp_assoc_value instead
[  182.530019][ T7414] 8021q: adding VLAN 0 to HW filter on device bond5
[  182.622238][ T7422] veth3: entered promiscuous mode
[  182.752328][ T7414] veth5: entered promiscuous mode
[  183.076248][ T7460] netlink: 'syz.3.422': attribute type 10 has an invalid length.
[  183.119273][ T7460] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  183.157316][ T7460] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  183.187178][ T7460] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  183.915434][ T7508] __nla_validate_parse: 9 callbacks suppressed
[  183.915451][ T7508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.435'.
[  183.955347][ T7512] xt_hashlimit: invalid rate
[  183.962120][ T7508] tipc: Enabling <eth:lo> not permitted
[  183.972788][ T7508] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  184.146194][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'.
[  184.196135][ T7525] hsr_slave_1: left promiscuous mode
[  184.256494][ T7524] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.441'.
[  184.728441][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'.
[  184.849727][ T7577] netlink: 68 bytes leftover after parsing attributes in process `syz.3.451'.
[  184.861218][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'.
[  184.877547][ T7575] netlink: 60 bytes leftover after parsing attributes in process `syz.0.450'.
[  184.901838][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'.
[  184.946188][ T7575] netlink: 60 bytes leftover after parsing attributes in process `syz.0.450'.
[  184.962053][ T7575] netlink: 104 bytes leftover after parsing attributes in process `syz.0.450'.
[  185.652545][ T7631] syzkaller0: entered promiscuous mode
[  185.666963][ T7631] syzkaller0: entered allmulticast mode
[  185.865794][ T7647] netlink: 'syz.4.470': attribute type 1 has an invalid length.
[  185.893207][ T7642] syz.0.469: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  185.945604][ T7647] 8021q: adding VLAN 0 to HW filter on device bond2
[  185.959970][ T7642] CPU: 0 UID: 0 PID: 7642 Comm: syz.0.469 Not tainted syzkaller #0 PREEMPT(full) 
[  185.959998][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  185.960010][ T7642] Call Trace:
[  185.960017][ T7642]  <TASK>
[  185.960034][ T7642]  dump_stack_lvl+0x189/0x250
[  185.960078][ T7642]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.960101][ T7642]  ? __pfx__printk+0x10/0x10
[  185.960120][ T7642]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  185.960164][ T7642]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  185.960189][ T7642]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  185.960216][ T7642]  warn_alloc+0x214/0x310
[  185.960242][ T7642]  ? stack_depot_save_flags+0x40/0x860
[  185.960273][ T7642]  ? __pfx_warn_alloc+0x10/0x10
[  185.960299][ T7642]  ? kasan_save_track+0x3e/0x80
[  185.960322][ T7642]  ? __kasan_kmalloc+0x93/0xb0
[  185.960348][ T7642]  ? xsk_setsockopt+0x4dc/0x8d0
[  185.960375][ T7642]  ? do_sock_setsockopt+0x17c/0x1b0
[  185.960392][ T7642]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  185.960408][ T7642]  ? do_syscall_64+0xfa/0xfa0
[  185.960426][ T7642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.960453][ T7642]  __vmalloc_node_range_noprof+0x125/0x12d0
[  185.960508][ T7642]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  185.960536][ T7642]  ? __kasan_kmalloc+0x93/0xb0
[  185.960566][ T7642]  vmalloc_user_noprof+0xad/0xf0
[  185.960590][ T7642]  ? xskq_create+0xbf/0x170
[  185.960612][ T7642]  xskq_create+0xbf/0x170
[  185.960636][ T7642]  xsk_init_queue+0xb0/0x110
[  185.960660][ T7642]  xsk_setsockopt+0x4dc/0x8d0
[  185.960684][ T7642]  ? __pfx_xsk_setsockopt+0x10/0x10
[  185.960708][ T7642]  ? __pfx_aa_sk_perm+0x10/0x10
[  185.960733][ T7642]  ? aa_sock_opt_perm+0xff/0x1b0
[  185.960761][ T7642]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  185.960777][ T7642]  ? __pfx_xsk_setsockopt+0x10/0x10
[  185.960799][ T7642]  do_sock_setsockopt+0x17c/0x1b0
[  185.960821][ T7642]  __x64_sys_setsockopt+0x13f/0x1b0
[  185.960845][ T7642]  do_syscall_64+0xfa/0xfa0
[  185.960867][ T7642]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.960890][ T7642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.960907][ T7642]  ? clear_bhb_loop+0x60/0xb0
[  185.960928][ T7642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.960948][ T7642] RIP: 0033:0x7fa8f978f6c9
[  185.960974][ T7642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.960988][ T7642] RSP: 002b:00007fa8f79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  185.961007][ T7642] RAX: ffffffffffffffda RBX: 00007fa8f99e5fa0 RCX: 00007fa8f978f6c9
[  185.961020][ T7642] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  185.961030][ T7642] RBP: 00007fa8f9811f91 R08: 0000000000000004 R09: 0000000000000000
[  185.961041][ T7642] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.961051][ T7642] R13: 00007fa8f99e6038 R14: 00007fa8f99e5fa0 R15: 00007ffd1289f138
[  185.961081][ T7642]  </TASK>
[  185.961154][ T7642] Mem-Info:
[  186.277569][ T7642] active_anon:7687 inactive_anon:0 isolated_anon:0
[  186.277569][ T7642]  active_file:2885 inactive_file:39895 isolated_file:0
[  186.277569][ T7642]  unevictable:772 dirty:87 writeback:0
[  186.277569][ T7642]  slab_reclaimable:10923 slab_unreclaimable:96249
[  186.277569][ T7642]  mapped:31017 shmem:4323 pagetables:1134
[  186.277569][ T7642]  sec_pagetables:0 bounce:0
[  186.277569][ T7642]  kernel_misc_reclaimable:0
[  186.277569][ T7642]  free:1329803 free_pcp:15340 free_cma:0
[  186.330081][ T7649] bond2: (slave veth3): Enslaving as an active interface with a down link
[  186.370510][ T7642] Node 0 active_anon:27348kB inactive_anon:0kB active_file:11540kB inactive_file:159376kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:124168kB dirty:348kB writeback:0kB shmem:12356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12240kB pagetables:4004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  186.389503][ T7647] bond2: (slave veth0_to_bond): making interface the new active one
[  186.443521][ T7642] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  186.460677][ T7647] veth0_to_bond: entered promiscuous mode
[  186.508284][ T7647] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  186.518665][ T7642] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  186.609110][ T7642] lowmem_reserve[]: 0 2505 2505 2505 2505
[  186.625575][ T7642] Node 0 DMA32 free:1423524kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19048kB inactive_anon:0kB active_file:11540kB inactive_file:159376kB unevictable:1552kB writepending:348kB zspages:0kB present:3129332kB managed:2565152kB mlocked:16kB bounce:0kB free_pcp:40692kB local_pcp:19064kB free_cma:0kB
[  186.678281][ T7642] lowmem_reserve[]: 0 0 0 0 0
[  186.683151][ T7642] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  186.770552][ T7642] lowmem_reserve[]: 0 0 0 0 0
[  186.775338][ T7642] Node 1 Normal free:3892076kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21316kB local_pcp:8484kB free_cma:0kB
[  186.927169][ T7642] lowmem_reserve[]: 0 0 0 0 0
[  186.944489][ T7642] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  187.016489][ T7642] Node 0 DMA32: 931*4kB (UME) 1002*8kB (UME) 408*16kB (UME) 1933*32kB (UME) 733*64kB (UE) 243*128kB (UE) 74*256kB (UM) 23*512kB (UM) 17*1024kB (UM) 8*2048kB (UM) 293*4096kB (UM) = 1422780kB
[  187.074098][ T7642] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  187.112253][ T7642] Node 1 Normal: 195*4kB (UME) 56*8kB (UME) 32*16kB (UME) 55*32kB (UME) 27*64kB (UME) 6*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3892076kB
[  187.180904][ T7642] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  187.219080][ T7642] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  187.249161][ T7642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  187.279616][ T7642] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  187.305793][ T7642] 44132 total pagecache pages
[  187.319587][ T7642] 0 pages in swap cache
[  187.331024][ T7642] Free swap  = 124996kB
[  187.340822][ T7642] Total swap = 124996kB
[  187.366426][ T7642] 2097051 pages RAM
[  187.375728][ T7642] 0 pages HighMem/MovableOnly
[  187.391795][ T7642] 424121 pages reserved
[  187.402196][ T7642] 0 pages cma reserved
[  187.504456][ T7724] xt_hashlimit: size too large, truncated to 1048576
[  187.544895][ T7726] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20002
[  187.643603][ T7728] syzkaller0: entered promiscuous mode
[  187.654125][ T7728] syzkaller0: entered allmulticast mode
[  187.716119][ T7734] netlink: 'syz.4.485': attribute type 7 has an invalid length.
[  187.725343][ T7734] netlink: 'syz.4.485': attribute type 8 has an invalid length.
[  187.903279][ T7739] syzkaller0: entered promiscuous mode
[  187.918644][ T7739] syzkaller0: entered allmulticast mode
[  188.690458][ T7776] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  188.707464][ T7776] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  189.445361][ T7778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.478740][ T7781] __nla_validate_parse: 14 callbacks suppressed
[  189.478756][ T7781] netlink: 224 bytes leftover after parsing attributes in process `syz.0.500'.
[  189.494638][ T7778] syzkaller0: entered promiscuous mode
[  189.507399][ T7781] ksmbd: Unknown IPC event: 3, ignore.
[  189.513257][ T7778] syzkaller0: entered allmulticast mode
[  189.529705][ T7786] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[  189.589577][ T7786] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[  189.612867][ T7788] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.625311][ T7786] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[  189.644944][ T7786] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[  189.657732][ T7778] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  189.667717][ T7786] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[  189.696664][ T7786] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[  189.710548][ T7786] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[  189.717236][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.730624][ T7798] tipc: Resetting bearer <eth:syzkaller0>
[  189.814355][ T7788] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.843731][ T7777] tipc: Resetting bearer <eth:syzkaller0>
[  189.862115][ T7777] tipc: Disabling bearer <eth:syzkaller0>
[  189.904880][ T7788] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.975994][ T7813] netlink: 81 bytes leftover after parsing attributes in process `syz.3.509'.
[  190.017630][ T7788] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.023555][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'.
[  190.341811][ T7848] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.464859][ T7844] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.522123][ T1164] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.552143][ T7844] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.582078][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.513'.
[  190.593036][ T7852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'.
[  190.646038][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'.
[  190.729711][ T7860] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  191.029651][    T9] IPVS: starting estimator thread 0...
[  191.042882][ T7885] lo: entered allmulticast mode
[  191.051663][ T7885] lo: left allmulticast mode
[  191.070725][ T7889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.134636][ T7886] tipc: Disabling bearer <eth:syzkaller0>
[  191.146971][ T7888] IPVS: using max 27 ests per chain, 64800 per kthread
[  191.174764][ T7896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.325467][ T7908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.531'.
[  191.348876][ T7906] xt_hashlimit: size too large, truncated to 1048576
[  191.471807][ T7917] syzkaller0: entered promiscuous mode
[  191.477521][ T7917] syzkaller0: entered allmulticast mode
[  191.692402][ T7929] netlink: 76 bytes leftover after parsing attributes in process `syz.4.537'.
[  191.746394][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'.
[  191.756501][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'.
[  191.952328][ T7844] tipc: Subscription rejected, illegal request
[  191.964159][ T7943] validate_nla: 26 callbacks suppressed
[  191.964178][ T7943] netlink: 'syz.1.541': attribute type 21 has an invalid length.
[  192.093916][ T7955] netlink: 'syz.3.547': attribute type 22 has an invalid length.
[  192.168241][ T7964] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.199923][ T7955] netlink: 'syz.3.547': attribute type 22 has an invalid length.
[  192.344853][ T7972] netlink: 'syz.1.553': attribute type 1 has an invalid length.
[  192.479731][ T7987] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  192.493284][ T7988] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  192.563870][ T7992] netlink: 'syz.4.557': attribute type 29 has an invalid length.
[  192.586391][ T7991] block nbd0: Unsupported socket: should be TCP or UNIX.
[  192.647735][ T7992] tipc: Started in network mode
[  192.652720][ T7992] tipc: Node identity , cluster identity 4711
[  192.673430][ T7992] tipc: Failed to obtain node identity
[  192.685149][ T7992] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  192.719761][ T8004] netlink: 'syz.1.561': attribute type 1 has an invalid length.
[  192.731019][ T8004] netlink: 'syz.1.561': attribute type 2 has an invalid length.
[  192.745811][ T8007] netlink: 'syz.2.562': attribute type 3 has an invalid length.
[  192.777313][ T8007] netlink: 'syz.2.562': attribute type 11 has an invalid length.
[  192.948655][ T8028] openvswitch: netlink: Missing key (keys=40, expected=80)
[  193.080615][ T8040] netlink: 'syz.0.570': attribute type 1 has an invalid length.
[  193.088635][ T8040] netlink: 'syz.0.570': attribute type 4 has an invalid length.
[  194.353182][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  194.359600][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  194.418619][ T8084] delete_channel: no stack
[  194.573300][ T8093] vlan2: entered allmulticast mode
[  194.593509][ T8097] __nla_validate_parse: 13 callbacks suppressed
[  194.593527][ T8097] netlink: 2 bytes leftover after parsing attributes in process `syz.1.584'.
[  194.773661][ T8106] sctp: [Deprecated]: syz.3.588 (pid 8106) Use of int in maxseg socket option.
[  194.773661][ T8106] Use struct sctp_assoc_value instead
[  194.824855][ T8112] netlink: 60 bytes leftover after parsing attributes in process `syz.0.590'.
[  194.859799][ T8113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.590'.
[  194.869762][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'.
[  194.979872][ T8119] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  195.028849][ T8129] bridge1: entered promiscuous mode
[  195.040746][ T8129] bridge1: entered allmulticast mode
[  195.086246][ T8131] bridge2: entered promiscuous mode
[  195.093071][ T8131] bridge2: entered allmulticast mode
[  195.273488][ T8147] Unsupported ieee802154 address type: 0
[  195.435435][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'.
[  195.453861][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'.
[  195.578131][ T8173] netlink: 64 bytes leftover after parsing attributes in process `syz.4.607'.
[  195.637804][ T8177] netlink: zone id is out of range
[  195.643113][ T8176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.650897][ T8176] syzkaller0: entered promiscuous mode
[  195.654246][ T8177] netlink: zone id is out of range
[  195.656548][ T8176] syzkaller0: entered allmulticast mode
[  195.673364][ T8176] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  195.694245][ T8176] tipc: Resetting bearer <eth:syzkaller0>
[  195.695726][ T8177] netlink: zone id is out of range
[  195.726129][ T8177] netlink: zone id is out of range
[  195.731767][ T8177] netlink: zone id is out of range
[  195.738345][ T8177] netlink: zone id is out of range
[  195.744691][ T8177] netlink: zone id is out of range
[  195.754956][ T8177] netlink: zone id is out of range
[  195.763171][ T8177] netlink: zone id is out of range
[  195.769571][ T8177] netlink: set zone limit has 4 unknown bytes
[  195.777253][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'.
[  195.786454][ T8174] tipc: Resetting bearer <eth:syzkaller0>
[  195.843317][ T8174] tipc: Disabling bearer <eth:syzkaller0>
[  195.917975][   T30] audit: type=1800 audit(1763167756.809:2): pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.610" name="memory.events" dev="tmpfs" ino=622 res=0 errno=0
[  195.952854][   T30] audit: type=1804 audit(1763167756.819:3): pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.610" name="/newroot/119/memory.events" dev="tmpfs" ino=622 res=1 errno=0
[  196.093290][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  196.204772][ T8194] syzkaller0: entered promiscuous mode
[  196.217014][ T8194] syzkaller0: entered allmulticast mode
[  196.226991][ T8194] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  196.253114][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'.
[  196.408481][ T8210] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  196.751793][ T8222] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  196.795780][ T8222] bond2 (unregistering): Released all slaves
[  197.180869][ T8259] vetè0_virt_wifi: renamed from dummy0 (while UP)
[  197.484003][ T8280] validate_nla: 1 callbacks suppressed
[  197.484022][ T8280] netlink: 'syz.1.642': attribute type 1 has an invalid length.
[  197.584021][   T30] audit: type=1800 audit(1763167758.489:4): pid=8287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.644" name="memory.events" dev="tmpfs" ino=643 res=0 errno=0
[  197.605638][ T1164] veth0_to_bond: left promiscuous mode
[  197.648729][ T8291] netlink: 'syz.2.641': attribute type 6 has an invalid length.
[  197.657524][ T8290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.665502][ T8290] syzkaller0: entered promiscuous mode
[  197.676201][ T8290] syzkaller0: entered allmulticast mode
[  197.686752][ T8290] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  197.719164][ T8290] tipc: Resetting bearer <eth:syzkaller0>
[  197.726934][ T8288] tipc: Resetting bearer <eth:syzkaller0>
[  197.744118][ T8288] tipc: Disabling bearer <eth:syzkaller0>
[  197.932887][ T8305] bond2: invalid ARP target 0.0.0.0 specified for addition
[  197.940989][ T8305] bond2: option arp_ip_target: invalid value (0)
[  197.954086][ T8305] bond2 (unregistering): Released all slaves
[  197.980123][ T8315] netlink: 'syz.3.652': attribute type 1 has an invalid length.
[  198.257455][ T8337] pim6reg1: entered promiscuous mode
[  198.262936][ T8337] pim6reg1: entered allmulticast mode
[  198.393569][ T8349] sctp: [Deprecated]: syz.1.662 (pid 8349) Use of int in max_burst socket option.
[  198.393569][ T8349] Use struct sctp_assoc_value instead
[  198.531109][ T8355] can: request_module (can-proto-0) failed.
[  199.284950][    T9] IPVS: starting estimator thread 0...
[  199.387569][ T8412] IPVS: using max 29 ests per chain, 69600 per kthread
[  199.801875][ T8452] __nla_validate_parse: 15 callbacks suppressed
[  199.801890][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'.
[  199.829404][ T8452] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  199.941184][ T8454] netlink: 14 bytes leftover after parsing attributes in process `syz.2.695'.
[  200.169002][ T8469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.176984][ T8469] syzkaller0: entered promiscuous mode
[  200.182659][ T8469] syzkaller0: entered allmulticast mode
[  200.192823][ T8469] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  200.340232][ T8468] tipc: Resetting bearer <eth:syzkaller0>
[  200.357799][ T8468] tipc: Disabling bearer <eth:syzkaller0>
[  200.406109][ T8471] netlink: 'syz.4.699': attribute type 3 has an invalid length.
[  200.414823][ T8471] netlink: 666 bytes leftover after parsing attributes in process `syz.4.699'.
[  200.435998][ T8474] netlink: 'syz.4.699': attribute type 3 has an invalid length.
[  200.467364][ T8474] netlink: 666 bytes leftover after parsing attributes in process `syz.4.699'.
[  200.813710][ T8489] netlink: 'syz.1.703': attribute type 7 has an invalid length.
[  200.903822][ T8493] netlink: 'syz.3.705': attribute type 5 has an invalid length.
[  200.942742][ T8493] netlink: 340 bytes leftover after parsing attributes in process `syz.3.705'.
[  200.989500][ T8497] netlink: 'syz.1.707': attribute type 1 has an invalid length.
[  201.001319][ T8497] nbd: error processing sock list
[  201.006693][ T8497] block nbd0: shutting down sockets
[  201.121790][ T8505] gretap0: entered promiscuous mode
[  201.131329][ T8505] vlan2: entered promiscuous mode
[  201.184418][ T8510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.192429][ T8510] syzkaller0: entered promiscuous mode
[  201.198963][ T8510] syzkaller0: entered allmulticast mode
[  201.215800][ T8510] tipc: Resetting bearer <eth:syzkaller0>
[  201.246765][ T8509] tipc: Resetting bearer <eth:syzkaller0>
[  201.280106][ T8520] netlink: 'syz.1.713': attribute type 1 has an invalid length.
[  201.289950][ T8509] tipc: Disabling bearer <eth:syzkaller0>
[  201.308068][ T8519] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  201.358263][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.713'.
[  201.361559][ T8520] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.377276][ T8524] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  201.470887][ T8515] veth3: entered promiscuous mode
[  201.490263][ T8515] bond2: (slave veth3): Enslaving as an active interface with a down link
[  201.556756][ T8515] bond2: entered allmulticast mode
[  201.616491][ T8540] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  201.633085][ T8536] vlan2: entered promiscuous mode
[  201.639950][ T8536] vlan2: entered allmulticast mode
[  201.650509][ T8536] hsr_slave_1: entered allmulticast mode
[  201.771790][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'.
[  201.811096][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'.
[  202.098276][ T8564] netlink: 36 bytes leftover after parsing attributes in process `syz.2.725'.
[  202.138578][ T8567] ip6gre0: Master is either lo or non-ether device
[  202.221714][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'.
[  202.261456][ T8574] vlan4: entered allmulticast mode
[  202.267524][ T8574] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  202.514276][ T8582] net_ratelimit: 3 callbacks suppressed
[  202.514295][ T8582] netlink: zone id is out of range
[  202.518251][ T8585] tipc: New replicast peer: 255.255.255.255
[  202.520123][ T8582] netlink: zone id is out of range
[  202.526034][ T8585] tipc: Enabled bearer <udp:syz2>, priority 10
[  202.537400][ T8582] netlink: zone id is out of range
[  202.567894][ T8582] netlink: get zone limit has 4 unknown bytes
[  202.934801][ T8613] xt_l2tp: missing protocol rule (udp|l2tpip)
[  203.284779][ T8625] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[  203.292179][ T8623] vlan2: entered promiscuous mode
[  203.297701][ T8623] bridge0: entered promiscuous mode
[  203.333774][ T8625] bond6: entered promiscuous mode
[  203.339376][ T8625] bond6: entered allmulticast mode
[  203.346536][ T8625] 8021q: adding VLAN 0 to HW filter on device bond6
[  203.362541][ T8624] IPv6: sit1: Disabled Multicast RS
[  203.386038][ T8624] sit1: entered allmulticast mode
[  203.484851][ T8639] netlink: 'syz.3.748': attribute type 2 has an invalid length.
[  203.515038][ T8642] syzkaller0: entered promiscuous mode
[  203.522594][ T8642] syzkaller0: entered allmulticast mode
[  203.663696][ T5828] tipc: Node number set to 4082877435
[  204.270857][ T8688] geneve2: entered promiscuous mode
[  204.276307][ T8688] geneve2: entered allmulticast mode
[  204.363138][ T7844] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  204.373451][ T8697] netlink: 'syz.4.768': attribute type 1 has an invalid length.
[  204.384114][ T7844] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  204.395159][ T7844] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  204.410559][ T7844] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  204.428814][ T8697] gretap1: entered promiscuous mode
[  204.542817][ T8704] xt_TCPMSS: Only works on TCP SYN packets
[  204.848182][ T8722] nbd0: detected capacity change from 0 to 127
[  204.853460][ T8723] pim6reg: entered allmulticast mode
[  205.183856][ T8741] tipc: Started in network mode
[  205.200880][ T8741] tipc: Node identity da4a01e6c615, cluster identity 4711
[  205.210724][ T8741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.218232][ T8750] syzkaller0: entered promiscuous mode
[  205.237767][ T8750] syzkaller0: entered allmulticast mode
[  205.266155][ T8741] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.371364][ T8741] tipc: Resetting bearer <eth:syzkaller0>
[  205.440665][ T8741] tipc: Disabling bearer <eth:syzkaller0>
[  205.490502][   T52] block nbd0: Receive control failed (result -32)
[  205.860343][ T8792] netlink: 'syz.3.792': attribute type 1 has an invalid length.
[  205.861748][ T8791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.892769][ T8794] netlink: 'syz.3.792': attribute type 1 has an invalid length.
[  205.958827][ T8792] 8021q: adding VLAN 0 to HW filter on device bond2
[  205.975754][ T8801] __nla_validate_parse: 11 callbacks suppressed
[  205.975771][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'.
[  206.005411][ T8804] x_tables: duplicate underflow at hook 1
[  206.021002][ T8797] 8021q: adding VLAN 0 to HW filter on device bond2
[  206.028805][ T8797] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  206.047648][ T8797] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  206.183693][ T8805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.212876][ T8805] syzkaller0: entered promiscuous mode
[  206.218619][ T8805] syzkaller0: entered allmulticast mode
[  206.323552][ T8826] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  206.419415][ T8835] netlink: 52 bytes leftover after parsing attributes in process `syz.4.805'.
[  206.438098][ T8839] netlink: 'syz.3.804': attribute type 1 has an invalid length.
[  206.511759][ T8839] bond3: entered promiscuous mode
[  206.517391][ T8839] bond3: entered allmulticast mode
[  206.523599][ T8839] 8021q: adding VLAN 0 to HW filter on device bond3
[  206.595810][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030dc4000: rx timeout, send abort
[  206.709733][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.810'.
[  206.719757][ T8856] netlink: 'syz.3.810': attribute type 16 has an invalid length.
[  206.728069][ T8856] netlink: 'syz.3.810': attribute type 17 has an invalid length.
[  206.758858][ T8856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  206.793878][ T8860] Driver unsupported XDP return value 0 on prog  (id 216) dev N/A, expect packet loss!
[  206.840320][ T8798] tipc: Resetting bearer <eth:syzkaller0>
[  206.888258][ T8798] tipc: Disabling bearer <eth:syzkaller0>
[  206.923715][ T8868] netlink: 88 bytes leftover after parsing attributes in process `syz.4.813'.
[  207.096294][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030dc4400: rx timeout, send abort
[  207.105455][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030dc4000: abort rx timeout. Force session deactivation
[  207.159121][ T8875] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  207.177982][ T8875] raw_sendmsg: syz.0.815 forgot to set AF_INET. Fix it!
[  207.259183][ T8885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.590135][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802fd1e400: rx timeout, send abort
[  207.598765][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fd1e400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  207.604808][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030dc4400: abort rx timeout. Force session deactivation
[  207.764155][ T8918] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  207.916667][ T8933] syzkaller0: entered promiscuous mode
[  207.930832][ T8933] syzkaller0: entered allmulticast mode
[  208.143507][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'.
[  208.163583][ T8947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.681911][ T8986] netlink: 'syz.0.851': attribute type 1 has an invalid length.
[  208.688520][ T8988] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20002
[  208.710961][ T8986] netlink: 44 bytes leftover after parsing attributes in process `syz.0.851'.
[  208.879732][ T8998] bridge0: port 3(team0) entered blocking state
[  208.887791][ T8998] bridge0: port 3(team0) entered disabled state
[  208.900978][ T8998] team0: entered allmulticast mode
[  208.906632][ T8998] team_slave_0: entered allmulticast mode
[  208.913019][ T8998] team_slave_1: entered allmulticast mode
[  208.921525][ T8998] team0: entered promiscuous mode
[  208.926701][ T8998] team_slave_0: entered promiscuous mode
[  208.933108][ T8998] team_slave_1: entered promiscuous mode
[  208.943385][ T8998] bridge0: port 3(team0) entered blocking state
[  208.950309][ T8998] bridge0: port 3(team0) entered forwarding state
[  208.976436][ T9000] gre2: entered promiscuous mode
[  208.991892][ T9000] gre2: entered allmulticast mode
[  209.174296][ T9020] netlink: 10 bytes leftover after parsing attributes in process `syz.1.861'.
[  209.349872][ T9030] netlink: 72 bytes leftover after parsing attributes in process `syz.2.865'.
[  209.423966][ T9038] openvswitch: netlink: Actions may not be safe on all matching packets
[  209.435136][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.865'.
[  209.553839][ T9038] bond3: Removing last arp target with arp_interval on
[  209.688984][ T9056] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.873'.
[  210.219175][ T9091] can: request_module (can-proto-0) failed.
[  210.513461][ T9115] netlink: 'syz.4.889': attribute type 26 has an invalid length.
[  210.527583][ T9115] netlink: 'syz.4.889': attribute type 26 has an invalid length.
[  211.006699][ T9156] __nla_validate_parse: 10 callbacks suppressed
[  211.006716][ T9156] netlink: 80 bytes leftover after parsing attributes in process `syz.4.904'.
[  211.282445][ T9176] netlink: 288 bytes leftover after parsing attributes in process `syz.2.909'.
[  211.293531][ T9180] netlink: 52 bytes leftover after parsing attributes in process `syz.3.911'.
[  211.452506][ T9188] sch_fq: defrate 0 ignored.
[  211.516419][ T9194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.525693][ T9194] syzkaller0: entered promiscuous mode
[  211.532111][ T9194] syzkaller0: entered allmulticast mode
[  211.552514][ T9193] ieee802154 phy0 wpan0: encryption failed: -22
[  211.572807][ T9194] tipc: Resetting bearer <eth:syzkaller0>
[  211.581601][ T9192] tipc: Resetting bearer <eth:syzkaller0>
[  211.606620][ T9192] tipc: Disabling bearer <eth:syzkaller0>
[  211.695000][ T9207] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  211.944802][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'.
[  211.984751][ T9239] netlink: 'syz.0.928': attribute type 2 has an invalid length.
[  212.000469][ T9239] netlink: 244 bytes leftover after parsing attributes in process `syz.0.928'.
[  212.042548][ T9237] syzkaller0: entered promiscuous mode
[  212.048425][ T9237] syzkaller0: entered allmulticast mode
[  212.141868][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'.
[  212.491399][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'.
[  212.509552][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.938'.
[  212.529597][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.937'.
[  212.681059][ T9280] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.710822][ T9283] ip6gre1: entered allmulticast mode
[  212.859583][ T9292] sctp: [Deprecated]: syz.0.944 (pid 9292) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.859583][ T9292] Use struct sctp_sack_info instead
[  212.876791][ T9293] sctp: [Deprecated]: syz.0.944 (pid 9293) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.876791][ T9293] Use struct sctp_sack_info instead
[  214.591181][ T9325] netlink: 'syz.4.952': attribute type 1 has an invalid length.
[  214.724438][ T9341] netlink: 'syz.2.955': attribute type 10 has an invalid length.
[  214.756924][ T9341] veth0_virt_wifi: entered allmulticast mode
[  214.868774][ T9351] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.960'.
[  214.873310][ T9341] team0: Port device veth0_virt_wifi added
[  215.462847][ T9399] ip6gre0: Master is either lo or non-ether device
[  215.472571][ T9399] sctp: [Deprecated]: syz.0.977 (pid 9399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  215.472571][ T9399] Use struct sctp_sack_info instead
[  215.548252][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.233825][ T9453] pim6reg: left allmulticast mode
[  216.265699][ T9461] netlink: 'syz.3.995': attribute type 1 has an invalid length.
[  216.274524][ T9461] __nla_validate_parse: 2 callbacks suppressed
[  216.274539][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'.
[  216.283820][ T9457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'.
[  216.291194][ T9461] netlink: 'syz.3.995': attribute type 1 has an invalid length.
[  216.310829][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'.
[  216.321219][ T9461] netlink: 'syz.3.995': attribute type 1 has an invalid length.
[  216.329875][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'.
[  216.339631][ T9461] netlink: 'syz.3.995': attribute type 1 has an invalid length.
[  216.347722][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'.
[  216.358058][ T9461] netlink: 'syz.3.995': attribute type 1 has an invalid length.
[  216.379130][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'.
[  216.389544][ T9461] netlink: 'syz.3.995': attribute type 1 has an invalid length.
[  216.412239][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'.
[  216.423198][ T9461] netlink: 'syz.3.995': attribute type 1 has an invalid length.
[  216.432859][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'.
[  216.442305][ T9461] netlink: 'syz.3.995': attribute type 1 has an invalid length.
[  216.450628][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'.
[  216.460397][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'.
[  218.112757][ T9505] syzkaller0: entered promiscuous mode
[  218.131195][ T9505] syzkaller0: entered allmulticast mode
[  218.255230][ T9511] pim6reg1: entered promiscuous mode
[  218.275396][ T9511] pim6reg1: entered allmulticast mode
[  218.504302][ T9535] set match dimension is over the limit!
[  218.584832][ T9539] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  218.962056][ T9557] xt_l2tp: wrong L2TP version: 0
[  219.222495][ T9574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.418695][ T9574] tipc: Disabling bearer <eth:syzkaller0>
[  220.003850][ T9606] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  220.234052][ T9623] º
: renamed from veth1_vlan (while UP)
[  220.474526][ T9640] validate_nla: 26 callbacks suppressed
[  220.474546][ T9640] netlink: 'syz.1.1045': attribute type 6 has an invalid length.
[  220.526725][ T9645] netlink: 'syz.1.1045': attribute type 6 has an invalid length.
[  220.919798][ T9659] netlink: 'syz.4.1049': attribute type 10 has an invalid length.
[  220.931440][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.958000][ T9659] bridge_slave_1: left allmulticast mode
[  220.970907][ T9659] bridge_slave_1: left promiscuous mode
[  220.976707][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.988059][ T9659] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  221.216472][ T9697] netlink: 'syz.1.1061': attribute type 11 has an invalid length.
[  221.255241][ T9697] netlink: 'syz.1.1061': attribute type 11 has an invalid length.
[  221.286277][ T9697] __nla_validate_parse: 36 callbacks suppressed
[  221.286298][ T9697] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1061'.
[  221.436601][ T9708] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  221.564830][ T9715] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  221.591524][ T9715] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  221.705868][ T9719] vetè0_virt_wifi: renamed from dummy0 (while UP)
[  221.746361][ T9725] sch_fq: defrate 0 ignored.
[  221.849790][ T9737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.895928][ T9742] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING
[  221.936177][ T9747] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1075'.
[  221.945639][ T9742] netlink: 'syz.0.1073': attribute type 4 has an invalid length.
[  221.954770][ T9744] Can't find ip_set type hash:i@,port,ip
[  222.216573][ T9772] netlink: 'syz.0.1080': attribute type 63 has an invalid length.
[  222.226640][ T9772] lo: left promiscuous mode
[  222.233789][ T9772] syz_tun: entered allmulticast mode
[  222.246043][ T9772] team_slave_1: entered allmulticast mode
[  222.329804][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.368081][ T9771] syz_tun: left allmulticast mode
[  222.405298][ T9771] team_slave_1: left allmulticast mode
[  222.407371][ T9781] sctp: [Deprecated]: syz.1.1081 (pid 9781) Use of struct sctp_assoc_value in delayed_ack socket option.
[  222.407371][ T9781] Use struct sctp_sack_info instead
[  222.685719][ T9791] netlink: 'syz.1.1081': attribute type 4 has an invalid length.
[  222.724063][ T9793] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1084'.
[  222.840810][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'.
[  222.955243][ T9798] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1086'.
[  222.966309][ T9800] netlink: 'syz.1.1087': attribute type 1 has an invalid length.
[  222.987738][ T9801] delete_channel: no stack
[  222.994681][ T9801] netlink: 'syz.1.1087': attribute type 39 has an invalid length.
[  222.999241][ T9800] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1087'.
[  223.829713][ T9832] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1095'.
[  223.991794][ T9848] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1099'.
[  224.018693][ T9848] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1099'.
[  224.082047][ T9856] netlink: 'syz.3.1102': attribute type 1 has an invalid length.
[  224.150529][ T9862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1105'.
[  224.151429][ T9856] 8021q: adding VLAN 0 to HW filter on device bond4
[  224.159788][ T9862] netlink: 'syz.4.1105': attribute type 7 has an invalid length.
[  224.193211][ T9862] ip6gretap0: entered promiscuous mode
[  224.200225][ T9862] syz_tun: entered promiscuous mode
[  224.208405][ T9862] debugfs: 'hsr0' already exists in 'hsr'
[  224.214413][ T9862] Cannot create hsr debugfs directory
[  224.523951][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.531903][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.597970][ T9880] bridge_slave_0: left promiscuous mode
[  224.604196][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.625708][ T9880] bridge_slave_1: left allmulticast mode
[  224.633649][ T9880] bridge_slave_1: left promiscuous mode
[  224.640663][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.663796][ T9880] bond0: (slave bond_slave_0): Releasing backup interface
[  224.678908][ T9880] bond0: (slave bond_slave_1): Releasing backup interface
[  224.701971][ T9880] team0: Port device team_slave_0 removed
[  224.720679][ T9880] team0: Port device team_slave_1 removed
[  224.734271][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.747785][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.760750][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.772927][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.792901][ T9880] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  225.224420][ T9941] IPv6: NLM_F_CREATE should be specified when creating new route
[  225.497150][ T9965] bond0: entered allmulticast mode
[  225.503716][ T9965] bond_slave_0: entered allmulticast mode
[  225.509929][ T9965] bond_slave_1: entered allmulticast mode
[  225.515766][ T9965] bridge_slave_1: entered allmulticast mode
[  225.585953][ T9967] validate_nla: 4 callbacks suppressed
[  225.585973][ T9967] netlink: 'syz.1.1137': attribute type 1 has an invalid length.
[  225.940642][ T9997] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  225.993715][T10000] netlink: 'syz.2.1144': attribute type 8 has an invalid length.
[  226.044838][T10006] SET target dimension over the limit!
[  226.281261][T10015] bridge5: port 1(veth3) entered blocking state
[  226.302288][T10015] bridge5: port 1(veth3) entered disabled state
[  226.329046][T10015] veth3: entered allmulticast mode
[  226.346916][T10015] veth3: entered promiscuous mode
[  226.422026][T10024] bridge5: port 2(veth5) entered blocking state
[  226.446757][T10035] Cannot find set identified by id 65534 to match
[  226.450560][T10024] bridge5: port 2(veth5) entered disabled state
[  226.464310][T10024] veth5: entered allmulticast mode
[  226.473970][T10024] veth5: entered promiscuous mode
[  226.492666][T10028] vlan3: entered allmulticast mode
[  226.638734][T10041] __nla_validate_parse: 7 callbacks suppressed
[  226.638752][T10041] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1158'.
[  226.674923][T10041] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1158'.
[  226.689079][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'.
[  226.698538][T10041] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1158'.
[  226.802260][T10051] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1158'.
[  226.965096][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'.
[  227.001729][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'.
[  227.132175][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'.
[  227.147296][T10076] netlink: 'syz.0.1168': attribute type 9 has an invalid length.
[  227.185544][T10061] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  227.301984][T10084] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1170'.
[  227.449542][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1175'.
[  227.511962][T10099] vlan2: entered promiscuous mode
[  227.537347][T10099] geneve1: entered promiscuous mode
[  227.560357][T10099] vlan2: entered allmulticast mode
[  227.563601][T10107] netlink: 'syz.0.1178': attribute type 1 has an invalid length.
[  227.565597][T10099] geneve1: entered allmulticast mode
[  227.597931][T10106] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  227.740631][T10120] wlan0 speed is unknown, defaulting to 1000
[  227.756619][T10126] xt_TCPMSS: Only works on TCP SYN packets
[  227.770739][T10120] wlan0 speed is unknown, defaulting to 1000
[  227.791505][T10120] wlan0 speed is unknown, defaulting to 1000
[  227.838043][T10120] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  227.889629][T10120] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  227.949710][T10137] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  227.968949][T10120] wlan0 speed is unknown, defaulting to 1000
[  227.977655][T10120] wlan0 speed is unknown, defaulting to 1000
[  227.986988][T10120] wlan0 speed is unknown, defaulting to 1000
[  228.003025][T10120] wlan0 speed is unknown, defaulting to 1000
[  228.013039][T10120] wlan0 speed is unknown, defaulting to 1000
[  228.165902][T10154] netlink: 'syz.0.1193': attribute type 1 has an invalid length.
[  228.205724][T10154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.425949][T10172] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  228.459225][T10170] pim6reg527: entered allmulticast mode
[  228.502754][T10172] veth0: entered promiscuous mode
[  228.510080][T10172] veth0: left promiscuous mode
[  228.670337][T10183] 8021q: adding VLAN 0 to HW filter on device bond7
[  228.761221][T10187] syzkaller1: entered promiscuous mode
[  228.766753][T10187] syzkaller1: entered allmulticast mode
[  228.996665][T10204] : entered promiscuous mode
[  229.724550][T10268] netlink: 'syz.3.1230': attribute type 6 has an invalid length.
[  229.805699][T10273] vxcan0: tx drop: invalid da for name 0x0000000001000000
[  229.816549][T10273] netlink: 'syz.1.1232': attribute type 11 has an invalid length.
[  229.882084][T10280] ieee802154 phy0 wpan0: encryption failed: -22
[  230.002800][T10286] netlink: 'syz.1.1236': attribute type 1 has an invalid length.
[  230.099848][T10286] 8021q: adding VLAN 0 to HW filter on device bond4
[  230.144333][T10301] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  230.205606][T10299] bond4: (slave veth7): Enslaving as an active interface with a down link
[  230.232593][T10286] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  230.313351][T10307] bond8: option miimon: invalid value (18446744073709551585)
[  230.321278][T10307] bond8: option miimon: allowed values 0 - 2147483647
[  230.332783][T10307] bond8 (unregistering): Released all slaves
[  230.826348][T10340] chnl_net:caif_netlink_parms(): no params data found
[  230.862275][T10341] wlan0 speed is unknown, defaulting to 1000
[  231.026254][T10351] veth0_to_bridge: entered promiscuous mode
[  231.039092][T10345] veth0_to_bridge: left promiscuous mode
[  231.119486][T10357] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  231.126281][T10357] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  231.672735][T10375] dvmrp0: entered allmulticast mode
[  231.749147][T10382] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  231.779620][T10382] bond8 (unregistering): Released all slaves
[  231.909316][T10390] __nla_validate_parse: 48 callbacks suppressed
[  231.909335][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'.
[  231.973166][T10392] syzkaller0: entered promiscuous mode
[  231.978889][T10392] syzkaller0: entered allmulticast mode
[  232.009631][T10396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1268'.
[  232.173532][T10404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1271'.
[  232.395686][T10424] netlink: 'syz.2.1279': attribute type 29 has an invalid length.
[  232.406318][T10424] netlink: 'syz.2.1279': attribute type 29 has an invalid length.
[  232.417812][T10424] netlink: 'syz.2.1279': attribute type 29 has an invalid length.
[  232.434428][T10424] netlink: 'syz.2.1279': attribute type 29 has an invalid length.
[  232.467168][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'.
[  232.591411][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1284'.
[  232.723406][T10440] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  232.735066][  T154] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  232.745249][  T154] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  232.754847][T10450] netlink: 'syz.0.1288': attribute type 5 has an invalid length.
[  232.762839][  T154] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  232.772299][  T154] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  232.782997][T10440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1284'.
[  232.798175][T10452] netlink: 'syz.4.1287': attribute type 11 has an invalid length.
[  232.821142][T10450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.872806][T10450] syzkaller0: entered promiscuous mode
[  232.910140][T10450] syzkaller0: entered allmulticast mode
[  232.919290][T10455] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1286'.
[  232.999603][T10450] tipc: Resetting bearer <eth:syzkaller0>
[  233.013136][T10447] tipc: Resetting bearer <eth:syzkaller0>
[  233.039495][T10447] tipc: Disabling bearer <eth:syzkaller0>
[  233.077189][T10464] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1289'.
[  233.156573][T10464] syzkaller0: entered promiscuous mode
[  233.162428][T10464] syzkaller0: entered allmulticast mode
[  233.204921][T10472] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1291'.
[  233.488831][T10480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1295'.
[  234.799290][T10502] netlink: 'syz.3.1298': attribute type 33 has an invalid length.
[  235.073744][T10527] ªªªªªª: renamed from wg2 (while UP)
[  235.461758][T10556] wlan0 speed is unknown, defaulting to 1000
[  235.792859][T10565] netlink: 'syz.2.1314': attribute type 1 has an invalid length.
[  236.173594][T10590] netlink: 'syz.2.1320': attribute type 9 has an invalid length.
[  236.225594][T10594] netlink: 'syz.2.1321': attribute type 8 has an invalid length.
[  236.935904][T10619] __nla_validate_parse: 12 callbacks suppressed
[  236.935920][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'.
[  236.975987][T10619] 
: renamed from bridge_slave_0
[  238.173675][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1337'.
[  238.310585][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'.
[  238.521946][T10664] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1344'.
[  255.790565][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.231727][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.672389][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  397.867339][   T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds.
[  397.874995][   T31]       Not tainted syzkaller #0
[  397.880133][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  397.888982][   T31] task:kworker/1:0     state:D stack:24008 pid:24    tgid:24    ppid:2      task_flags:0x4208060 flags:0x00080000
[  397.901274][   T31] Workqueue: events rfkill_sync_work
[  397.906594][   T31] Call Trace:
[  397.909895][   T31]  <TASK>
[  397.912817][   T31]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  397.917380][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  397.922745][   T31]  ? __pfx___schedule+0x10/0x10
[  397.927980][   T31]  ? schedule+0x91/0x360
[  397.932564][   T31]  schedule+0x165/0x360
[  397.936911][   T31]  schedule_preempt_disabled+0x13/0x30
[  397.942772][   T31]  __mutex_lock+0x7e6/0x1350
[  397.949131][   T31]  ? __mutex_lock+0x5bb/0x1350
[  397.953944][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  397.959371][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  398.007110][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.012566][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  398.032324][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  398.038902][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  398.044653][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  398.049901][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  398.055828][   T31]  rfkill_set_block+0x1d2/0x440
[  398.061979][   T31]  rfkill_sync_work+0x114/0x200
[  398.066893][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  398.072828][   T31]  process_scheduled_works+0xae1/0x17b0
[  398.078622][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  398.084614][   T31]  worker_thread+0x8a0/0xda0
[  398.089379][   T31]  kthread+0x711/0x8a0
[  398.093476][   T31]  ? __pfx_worker_thread+0x10/0x10
[  398.098719][   T31]  ? __pfx_kthread+0x10/0x10
[  398.103334][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  398.108668][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.113888][   T31]  ? __pfx_kthread+0x10/0x10
[  398.118568][   T31]  ret_from_fork+0x4bc/0x870
[  398.123188][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  398.128357][   T31]  ? __switch_to_asm+0x39/0x70
[  398.133121][   T31]  ? __switch_to_asm+0x33/0x70
[  398.138005][   T31]  ? __pfx_kthread+0x10/0x10
[  398.142595][   T31]  ret_from_fork_asm+0x1a/0x30
[  398.147434][   T31]  </TASK>
[  398.150792][   T31] INFO: task kworker/1:3:5828 blocked for more than 143 seconds.
[  398.158587][   T31]       Not tainted syzkaller #0
[  398.163693][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.172401][   T31] task:kworker/1:3     state:D stack:24424 pid:5828  tgid:5828  ppid:2      task_flags:0x4208060 flags:0x00080000
[  398.184525][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  398.191275][   T31] Call Trace:
[  398.194547][   T31]  <TASK>
[  398.197494][   T31]  __schedule+0x1798/0x4cc0
[  398.202021][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  398.207466][   T31]  ? __pfx___schedule+0x10/0x10
[  398.212414][   T31]  ? schedule+0x91/0x360
[  398.216846][   T31]  schedule+0x165/0x360
[  398.221179][   T31]  schedule_preempt_disabled+0x13/0x30
[  398.226726][   T31]  __mutex_lock+0x7e6/0x1350
[  398.231451][   T31]  ? __mutex_lock+0x5bb/0x1350
[  398.236304][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  398.242697][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  398.247815][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  398.253560][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  398.259329][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  398.265385][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  398.271166][   T31]  process_scheduled_works+0xae1/0x17b0
[  398.276908][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  398.283141][   T31]  worker_thread+0x8a0/0xda0
[  398.287971][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  398.294328][   T31]  ? __kthread_parkme+0x7b/0x200
[  398.299553][   T31]  kthread+0x711/0x8a0
[  398.303812][   T31]  ? __pfx_worker_thread+0x10/0x10
[  398.308947][   T31]  ? __pfx_kthread+0x10/0x10
[  398.313527][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  398.318764][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.324039][   T31]  ? __pfx_kthread+0x10/0x10
[  398.328665][   T31]  ret_from_fork+0x4bc/0x870
[  398.333680][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  398.339154][   T31]  ? __switch_to_asm+0x39/0x70
[  398.343992][   T31]  ? __switch_to_asm+0x33/0x70
[  398.348801][   T31]  ? __pfx_kthread+0x10/0x10
[  398.353412][   T31]  ret_from_fork_asm+0x1a/0x30
[  398.358363][   T31]  </TASK>
[  398.361522][   T31] INFO: task syz.4.1297:10490 blocked for more than 143 seconds.
[  398.369575][   T31]       Not tainted syzkaller #0
[  398.374639][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.384411][   T31] task:syz.4.1297      state:D stack:25960 pid:10490 tgid:10490 ppid:5841   task_flags:0x400040 flags:0x00080002
[  398.398260][   T31] Call Trace:
[  398.401569][   T31]  <TASK>
[  398.404540][   T31]  __schedule+0x1798/0x4cc0
[  398.409199][   T31]  ? validate_chain+0x897/0x2140
[  398.414243][   T31]  ? __lock_acquire+0xab9/0xd20
[  398.419172][   T31]  ? __pfx___schedule+0x10/0x10
[  398.424126][   T31]  ? schedule+0x91/0x360
[  398.428846][   T31]  schedule+0x165/0x360
[  398.433020][   T31]  schedule_timeout+0x9a/0x270
[  398.437936][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  398.443409][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  398.448783][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.454063][   T31]  ? wait_for_completion+0x267/0x5d0
[  398.459727][   T31]  wait_for_completion+0x2bf/0x5d0
[  398.464883][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  398.470593][   T31]  ? __flush_work+0xd2/0xbc0
[  398.475202][   T31]  ? __flush_work+0xd2/0xbc0
[  398.480097][   T31]  __flush_work+0x9b9/0xbc0
[  398.484715][   T31]  ? __flush_work+0xd2/0xbc0
[  398.489698][   T31]  ? __pfx___flush_work+0x10/0x10
[  398.494743][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  398.500232][   T31]  ? __pfx___cancel_work+0x10/0x10
[  398.505471][   T31]  ? nfc_genl_device_removed+0x23c/0x330
[  398.511276][   T31]  __cancel_work_sync+0xbe/0x110
[  398.516328][   T31]  rfkill_unregister+0x92/0x220
[  398.521691][   T31]  nfc_unregister_device+0x96/0x2a0
[  398.527092][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  398.533124][   T31]  virtual_ncidev_close+0x56/0x90
[  398.538208][   T31]  __fput+0x44c/0xa70
[  398.542201][   T31]  task_work_run+0x1d4/0x260
[  398.546809][   T31]  ? __pfx_task_work_run+0x10/0x10
[  398.552189][   T31]  ? exit_to_user_mode_loop+0x40/0x130
[  398.557862][   T31]  exit_to_user_mode_loop+0xe9/0x130
[  398.563323][   T31]  do_syscall_64+0x2bd/0xfa0
[  398.568044][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.573380][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.579698][   T31]  ? clear_bhb_loop+0x60/0xb0
[  398.584454][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.590546][   T31] RIP: 0033:0x7f02c538f6c9
[  398.595026][   T31] RSP: 002b:00007ffcd57d8c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  398.603559][   T31] RAX: 0000000000000000 RBX: 0000000000039497 RCX: 00007f02c538f6c9
[  398.611765][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  398.619772][   T31] RBP: 00007f02c55e7da0 R08: 0000000000000001 R09: 00000009d57d8eff
[  398.627793][   T31] R10: 0000001b30020000 R11: 0000000000000246 R12: 00007f02c55e5fac
[  398.635775][   T31] R13: 00007f02c55e5fa0 R14: ffffffffffffffff R15: 00007ffcd57d8d20
[  398.643930][   T31]  </TASK>
[  398.646957][   T31] INFO: task syz.3.1305:10520 blocked for more than 144 seconds.
[  398.654708][   T31]       Not tainted syzkaller #0
[  398.659686][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.668705][   T31] task:syz.3.1305      state:D stack:26696 pid:10520 tgid:10519 ppid:5831   task_flags:0x400040 flags:0x00080002
[  398.681766][   T31] Call Trace:
[  398.685083][   T31]  <TASK>
[  398.688260][   T31]  __schedule+0x1798/0x4cc0
[  398.692776][   T31]  ? __lock_acquire+0xab9/0xd20
[  398.698045][   T31]  ? __lock_acquire+0xab9/0xd20
[  398.702894][   T31]  ? __pfx___schedule+0x10/0x10
[  398.707850][   T31]  ? schedule+0x91/0x360
[  398.712092][   T31]  schedule+0x165/0x360
[  398.716235][   T31]  schedule_preempt_disabled+0x13/0x30
[  398.721808][   T31]  __mutex_lock+0x7e6/0x1350
[  398.726411][   T31]  ? __mutex_lock+0x5bb/0x1350
[  398.731346][   T31]  ? rfkill_register+0x37/0x8e0
[  398.736194][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  398.741255][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  398.746635][   T31]  ? device_initialize+0x24b/0x440
[  398.751848][   T31]  rfkill_register+0x37/0x8e0
[  398.756796][   T31]  nfc_register_device+0x14a/0x320
[  398.762188][   T31]  nci_register_device+0x87f/0x9d0
[  398.767368][   T31]  ? __pfx_nci_register_device+0x10/0x10
[  398.773095][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  398.778597][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  398.784081][   T31]  virtual_ncidev_open+0x129/0x1a0
[  398.789693][   T31]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  398.795426][   T31]  misc_open+0x2d5/0x350
[  398.799700][   T31]  chrdev_open+0x4cc/0x5e0
[  398.804115][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  398.809076][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  398.815392][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  398.820559][   T31]  do_dentry_open+0x953/0x13f0
[  398.825406][   T31]  vfs_open+0x3b/0x340
[  398.829558][   T31]  ? path_openat+0x2ecd/0x3830
[  398.834421][   T31]  path_openat+0x2ee5/0x3830
[  398.839090][   T31]  ? __pfx_path_openat+0x10/0x10
[  398.844072][   T31]  do_filp_open+0x1fa/0x410
[  398.848739][   T31]  ? __lock_acquire+0xab9/0xd20
[  398.853578][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  398.858626][   T31]  ? _raw_spin_unlock+0x28/0x50
[  398.863460][   T31]  ? alloc_fd+0x64c/0x6c0
[  398.867829][   T31]  do_sys_openat2+0x121/0x1c0
[  398.872497][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  398.877841][   T31]  ? exc_page_fault+0x82/0x100
[  398.882596][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  398.887909][   T31]  __x64_sys_openat+0x138/0x170
[  398.892755][   T31]  do_syscall_64+0xfa/0xfa0
[  398.897278][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.902492][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.908890][   T31]  ? clear_bhb_loop+0x60/0xb0
[  398.913564][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.919476][   T31] RIP: 0033:0x7f9e9738f6c9
[  398.923886][   T31] RSP: 002b:00007f9e982ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  398.932314][   T31] RAX: ffffffffffffffda RBX: 00007f9e975e5fa0 RCX: 00007f9e9738f6c9
[  398.941744][   T31] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  398.949777][   T31] RBP: 00007f9e97411f91 R08: 0000000000000000 R09: 0000000000000000
[  398.957975][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.965962][   T31] R13: 00007f9e975e6038 R14: 00007f9e975e5fa0 R15: 00007ffea20ddb78
[  398.974298][   T31]  </TASK>
[  398.977483][   T31] INFO: task syz.0.1322:10596 blocked for more than 144 seconds.
[  398.985294][   T31]       Not tainted syzkaller #0
[  398.991324][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  399.000154][   T31] task:syz.0.1322      state:D stack:24456 pid:10596 tgid:10595 ppid:5825   task_flags:0x400140 flags:0x00080002
[  399.012183][   T31] Call Trace:
[  399.015545][   T31]  <TASK>
[  399.018502][   T31]  __schedule+0x1798/0x4cc0
[  399.023084][   T31]  ? security_file_open+0xb1/0x270
[  399.028354][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.033226][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.038136][   T31]  ? __pfx___schedule+0x10/0x10
[  399.043078][   T31]  ? schedule+0x91/0x360
[  399.047535][   T31]  schedule+0x165/0x360
[  399.052591][   T31]  schedule_preempt_disabled+0x13/0x30
[  399.058384][   T31]  __mutex_lock+0x7e6/0x1350
[  399.063016][   T31]  ? __mutex_lock+0x5bb/0x1350
[  399.068078][   T31]  ? misc_open+0x51/0x350
[  399.072514][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  399.077601][   T31]  misc_open+0x51/0x350
[  399.081779][   T31]  chrdev_open+0x4cc/0x5e0
[  399.086207][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.091340][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  399.097694][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.102716][   T31]  do_dentry_open+0x953/0x13f0
[  399.107518][   T31]  vfs_open+0x3b/0x340
[  399.111590][   T31]  ? path_openat+0x2ecd/0x3830
[  399.116544][   T31]  path_openat+0x2ee5/0x3830
[  399.121324][   T31]  ? __pfx_path_openat+0x10/0x10
[  399.126477][   T31]  do_filp_open+0x1fa/0x410
[  399.131098][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.135945][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  399.141278][   T31]  ? _raw_spin_unlock+0x28/0x50
[  399.146210][   T31]  ? alloc_fd+0x64c/0x6c0
[  399.151164][   T31]  do_sys_openat2+0x121/0x1c0
[  399.155977][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  399.161379][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.166165][   T31]  __x64_sys_openat+0x138/0x170
[  399.171099][   T31]  do_syscall_64+0xfa/0xfa0
[  399.175609][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  399.181024][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.187250][   T31]  ? clear_bhb_loop+0x60/0xb0
[  399.192138][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.198450][   T31] RIP: 0033:0x7fa8f978f6c9
[  399.202871][   T31] RSP: 002b:00007fa8f79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  399.211468][   T31] RAX: ffffffffffffffda RBX: 00007fa8f99e5fa0 RCX: 00007fa8f978f6c9
[  399.219607][   T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  399.227691][   T31] RBP: 00007fa8f9811f91 R08: 0000000000000000 R09: 0000000000000000
[  399.235946][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.244266][   T31] R13: 00007fa8f99e6038 R14: 00007fa8f99e5fa0 R15: 00007ffd1289f138
[  399.252281][   T31]  </TASK>
[  399.255414][   T31] INFO: task syz.2.1323:10598 blocked for more than 144 seconds.
[  399.263743][   T31]       Not tainted syzkaller #0
[  399.268714][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  399.277534][   T31] task:syz.2.1323      state:D stack:28296 pid:10598 tgid:10597 ppid:5834   task_flags:0x400140 flags:0x00080002
[  399.289628][   T31] Call Trace:
[  399.292912][   T31]  <TASK>
[  399.295832][   T31]  __schedule+0x1798/0x4cc0
[  399.300365][   T31]  ? security_file_open+0xb1/0x270
[  399.305473][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.310360][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.315202][   T31]  ? __pfx___schedule+0x10/0x10
[  399.320098][   T31]  ? schedule+0x91/0x360
[  399.324428][   T31]  schedule+0x165/0x360
[  399.328626][   T31]  schedule_preempt_disabled+0x13/0x30
[  399.334244][   T31]  __mutex_lock+0x7e6/0x1350
[  399.338873][   T31]  ? __mutex_lock+0x5bb/0x1350
[  399.343724][   T31]  ? misc_open+0x51/0x350
[  399.348099][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  399.353337][   T31]  misc_open+0x51/0x350
[  399.357556][   T31]  chrdev_open+0x4cc/0x5e0
[  399.361963][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.366884][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  399.373445][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.378406][   T31]  do_dentry_open+0x953/0x13f0
[  399.383169][   T31]  vfs_open+0x3b/0x340
[  399.387260][   T31]  ? path_openat+0x2ecd/0x3830
[  399.392009][   T31]  path_openat+0x2ee5/0x3830
[  399.396775][   T31]  ? __pfx_path_openat+0x10/0x10
[  399.401794][   T31]  do_filp_open+0x1fa/0x410
[  399.406287][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.411168][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  399.416195][   T31]  ? _raw_spin_unlock+0x28/0x50
[  399.421181][   T31]  ? alloc_fd+0x64c/0x6c0
[  399.425638][   T31]  do_sys_openat2+0x121/0x1c0
[  399.430378][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  399.435588][   T31]  ? __pfx___se_sys_futex+0x10/0x10
[  399.440879][   T31]  __x64_sys_openat+0x138/0x170
[  399.445767][   T31]  do_syscall_64+0xfa/0xfa0
[  399.450309][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  399.455511][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.461708][   T31]  ? clear_bhb_loop+0x60/0xb0
[  399.466392][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.472404][   T31] RIP: 0033:0x7f2759f8f6c9
[  399.476836][   T31] RSP: 002b:00007f27581f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  399.485340][   T31] RAX: ffffffffffffffda RBX: 00007f275a1e5fa0 RCX: 00007f2759f8f6c9
[  399.493394][   T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  399.501503][   T31] RBP: 00007f275a011f91 R08: 0000000000000000 R09: 0000000000000000
[  399.509552][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.517589][   T31] R13: 00007f275a1e6038 R14: 00007f275a1e5fa0 R15: 00007ffe88af1998
[  399.525565][   T31]  </TASK>
[  399.528629][   T31] INFO: task syz.2.1323:10600 blocked for more than 145 seconds.
[  399.536435][   T31]       Not tainted syzkaller #0
[  399.541712][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  399.550492][   T31] task:syz.2.1323      state:D stack:27016 pid:10600 tgid:10597 ppid:5834   task_flags:0x400140 flags:0x00080002
[  399.562472][   T31] Call Trace:
[  399.565745][   T31]  <TASK>
[  399.568709][   T31]  __schedule+0x1798/0x4cc0
[  399.573217][   T31]  ? security_file_open+0xb1/0x270
[  399.578382][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.583325][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.588235][   T31]  ? __pfx___schedule+0x10/0x10
[  399.593108][   T31]  ? schedule+0x91/0x360
[  399.597495][   T31]  schedule+0x165/0x360
[  399.601658][   T31]  schedule_preempt_disabled+0x13/0x30
[  399.607250][   T31]  __mutex_lock+0x7e6/0x1350
[  399.611862][   T31]  ? __mutex_lock+0x5bb/0x1350
[  399.616647][   T31]  ? misc_open+0x51/0x350
[  399.621035][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  399.626061][   T31]  misc_open+0x51/0x350
[  399.630365][   T31]  chrdev_open+0x4cc/0x5e0
[  399.634793][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.639969][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  399.646396][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.651437][   T31]  do_dentry_open+0x953/0x13f0
[  399.656200][   T31]  vfs_open+0x3b/0x340
[  399.660281][   T31]  ? path_openat+0x2ecd/0x3830
[  399.665036][   T31]  path_openat+0x2ee5/0x3830
[  399.669663][   T31]  ? __pfx_path_openat+0x10/0x10
[  399.674597][   T31]  do_filp_open+0x1fa/0x410
[  399.679119][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.683956][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  399.689066][   T31]  ? _raw_spin_unlock+0x28/0x50
[  399.693916][   T31]  ? alloc_fd+0x64c/0x6c0
[  399.698351][   T31]  do_sys_openat2+0x121/0x1c0
[  399.703022][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  399.708892][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.713681][   T31]  __x64_sys_openat+0x138/0x170
[  399.718583][   T31]  do_syscall_64+0xfa/0xfa0
[  399.723094][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  399.728389][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.734563][   T31]  ? clear_bhb_loop+0x60/0xb0
[  399.739333][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.745260][   T31] RIP: 0033:0x7f2759f8f6c9
[  399.750061][   T31] RSP: 002b:00007f27581d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  399.758503][   T31] RAX: ffffffffffffffda RBX: 00007f275a1e6090 RCX: 00007f2759f8f6c9
[  399.766486][   T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  399.774510][   T31] RBP: 00007f275a011f91 R08: 0000000000000000 R09: 0000000000000000
[  399.782528][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.790635][   T31] R13: 00007f275a1e6128 R14: 00007f275a1e6090 R15: 00007ffe88af1998
[  399.798672][   T31]  </TASK>
[  399.801697][   T31] INFO: task syz.1.1346:10674 blocked for more than 145 seconds.
[  399.809548][   T31]       Not tainted syzkaller #0
[  399.814643][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  399.823431][   T31] task:syz.1.1346      state:D stack:28296 pid:10674 tgid:10673 ppid:5830   task_flags:0x400040 flags:0x00080002
[  399.835441][   T31] Call Trace:
[  399.838845][   T31]  <TASK>
[  399.841772][   T31]  __schedule+0x1798/0x4cc0
[  399.846264][   T31]  ? security_file_open+0xb1/0x270
[  399.851430][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.856338][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.861313][   T31]  ? __pfx___schedule+0x10/0x10
[  399.866161][   T31]  ? schedule+0x91/0x360
[  399.870531][   T31]  schedule+0x165/0x360
[  399.874702][   T31]  schedule_preempt_disabled+0x13/0x30
[  399.880197][   T31]  __mutex_lock+0x7e6/0x1350
[  399.884775][   T31]  ? __mutex_lock+0x5bb/0x1350
[  399.889598][   T31]  ? misc_open+0x51/0x350
[  399.893924][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  399.899057][   T31]  misc_open+0x51/0x350
[  399.903325][   T31]  chrdev_open+0x4cc/0x5e0
[  399.907775][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.912699][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  399.919101][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.924060][   T31]  do_dentry_open+0x953/0x13f0
[  399.928846][   T31]  vfs_open+0x3b/0x340
[  399.932919][   T31]  ? path_openat+0x2ecd/0x3830
[  399.937763][   T31]  path_openat+0x2ee5/0x3830
[  399.942371][   T31]  ? __pfx_path_openat+0x10/0x10
[  399.947639][   T31]  do_filp_open+0x1fa/0x410
[  399.952256][   T31]  ? __lock_acquire+0xab9/0xd20
[  399.957154][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  399.962183][   T31]  ? _raw_spin_unlock+0x28/0x50
[  399.967088][   T31]  ? alloc_fd+0x64c/0x6c0
[  399.971433][   T31]  do_sys_openat2+0x121/0x1c0
[  399.976116][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  399.981490][   T31]  ? __pfx___se_sys_futex+0x10/0x10
[  399.986718][   T31]  __x64_sys_openat+0x138/0x170
[  399.991620][   T31]  do_syscall_64+0xfa/0xfa0
[  399.996134][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.001530][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.007656][   T31]  ? clear_bhb_loop+0x60/0xb0
[  400.012390][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.018368][   T31] RIP: 0033:0x7f70ef18f6c9
[  400.022767][   T31] RSP: 002b:00007f70efff0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  400.031357][   T31] RAX: ffffffffffffffda RBX: 00007f70ef3e5fa0 RCX: 00007f70ef18f6c9
[  400.039552][   T31] RDX: 00000000000a2f01 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  400.047578][   T31] RBP: 00007f70ef211f91 R08: 0000000000000000 R09: 0000000000000000
[  400.055543][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.063548][   T31] R13: 00007f70ef3e6038 R14: 00007f70ef3e5fa0 R15: 00007ffe4f4325b8
[  400.071611][   T31]  </TASK>
[  400.074644][   T31] INFO: task syz-executor:10682 blocked for more than 145 seconds.
[  400.082682][   T31]       Not tainted syzkaller #0
[  400.087722][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  400.096458][   T31] task:syz-executor    state:D stack:28008 pid:10682 tgid:10682 ppid:1      task_flags:0x400040 flags:0x00080000
[  400.108713][   T31] Call Trace:
[  400.111981][   T31]  <TASK>
[  400.114901][   T31]  __schedule+0x1798/0x4cc0
[  400.119467][   T31]  ? security_file_open+0xb1/0x270
[  400.124591][   T31]  ? __lock_acquire+0xab9/0xd20
[  400.129486][   T31]  ? __lock_acquire+0xab9/0xd20
[  400.134440][   T31]  ? __pfx___schedule+0x10/0x10
[  400.139428][   T31]  ? schedule+0x91/0x360
[  400.143755][   T31]  schedule+0x165/0x360
[  400.147938][   T31]  schedule_preempt_disabled+0x13/0x30
[  400.153394][   T31]  __mutex_lock+0x7e6/0x1350
[  400.158015][   T31]  ? __mutex_lock+0x5bb/0x1350
[  400.162813][   T31]  ? misc_open+0x51/0x350
[  400.167186][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  400.172233][   T31]  misc_open+0x51/0x350
[  400.176474][   T31]  chrdev_open+0x4cc/0x5e0
[  400.180929][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  400.185849][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  400.192332][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  400.197347][   T31]  do_dentry_open+0x953/0x13f0
[  400.202142][   T31]  vfs_open+0x3b/0x340
[  400.206235][   T31]  ? path_openat+0x2ecd/0x3830
[  400.211309][   T31]  path_openat+0x2ee5/0x3830
[  400.215907][   T31]  ? __pfx_css_rstat_updated+0x10/0x10
[  400.221415][   T31]  ? count_memcg_event_mm+0x21/0x260
[  400.226703][   T31]  ? __pfx_path_openat+0x10/0x10
[  400.231659][   T31]  ? __pfx___up_read+0x10/0x10
[  400.236409][   T31]  ? do_user_addr_fault+0xbbc/0x1380
[  400.241742][   T31]  do_filp_open+0x1fa/0x410
[  400.246272][   T31]  ? __lock_acquire+0xab9/0xd20
[  400.251193][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  400.256222][   T31]  ? _raw_spin_unlock+0x28/0x50
[  400.261095][   T31]  ? alloc_fd+0x64c/0x6c0
[  400.265418][   T31]  do_sys_openat2+0x121/0x1c0
[  400.270141][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  400.275328][   T31]  ? fd_install+0x97/0x540
[  400.279763][   T31]  ? fd_install+0x30d/0x540
[  400.284373][   T31]  __x64_sys_openat+0x138/0x170
[  400.289383][   T31]  do_syscall_64+0xfa/0xfa0
[  400.293883][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.299129][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.305186][   T31]  ? clear_bhb_loop+0x60/0xb0
[  400.309890][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.315854][   T31] RIP: 0033:0x7f245a38de91
[  400.320310][   T31] RSP: 002b:00007ffc26964190 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  400.328770][   T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f245a38de91
[  400.336732][   T31] RDX: 0000000000000002 RSI: 00007f245a4129b7 RDI: 00000000ffffff9c
[  400.344824][   T31] RBP: 00007f245a4129b7 R08: 0000000000000000 R09: 00007f245b11d6c0
[  400.353084][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  400.361121][   T31] R13: 0000000000000003 R14: 00007ffc26964568 R15: 0000000000000000
[  400.369200][   T31]  </TASK>
[  400.372238][   T31] INFO: task syz-executor:10683 blocked for more than 145 seconds.
[  400.380323][   T31]       Not tainted syzkaller #0
[  400.385257][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  400.393940][   T31] task:syz-executor    state:D stack:28008 pid:10683 tgid:10683 ppid:1      task_flags:0x400040 flags:0x00080000
[  400.405924][   T31] Call Trace:
[  400.409246][   T31]  <TASK>
[  400.412178][   T31]  __schedule+0x1798/0x4cc0
[  400.416759][   T31]  ? security_file_open+0xb1/0x270
[  400.422011][   T31]  ? __lock_acquire+0xab9/0xd20
[  400.426855][   T31]  ? __lock_acquire+0xab9/0xd20
[  400.431805][   T31]  ? __pfx___schedule+0x10/0x10
[  400.436679][   T31]  ? schedule+0x91/0x360
[  400.440981][   T31]  schedule+0x165/0x360
[  400.445139][   T31]  schedule_preempt_disabled+0x13/0x30
[  400.450638][   T31]  __mutex_lock+0x7e6/0x1350
[  400.455227][   T31]  ? __mutex_lock+0x5bb/0x1350
[  400.460066][   T31]  ? misc_open+0x51/0x350
[  400.464387][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  400.469459][   T31]  misc_open+0x51/0x350
[  400.473699][   T31]  chrdev_open+0x4cc/0x5e0
[  400.478142][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  400.483061][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  400.489431][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  400.494374][   T31]  do_dentry_open+0x953/0x13f0
[  400.499177][   T31]  vfs_open+0x3b/0x340
[  400.503245][   T31]  ? path_openat+0x2ecd/0x3830
[  400.508084][   T31]  path_openat+0x2ee5/0x3830
[  400.512699][   T31]  ? __pfx_css_rstat_updated+0x10/0x10
[  400.518267][   T31]  ? count_memcg_event_mm+0x21/0x260
[  400.523648][   T31]  ? __pfx_path_openat+0x10/0x10
[  400.528622][   T31]  ? __pfx___up_read+0x10/0x10
[  400.533375][   T31]  ? do_user_addr_fault+0xbbc/0x1380
[  400.538696][   T31]  do_filp_open+0x1fa/0x410
[  400.543283][   T31]  ? __lock_acquire+0xab9/0xd20
[  400.548157][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  400.553204][   T31]  ? _raw_spin_unlock+0x28/0x50
[  400.558069][   T31]  ? alloc_fd+0x64c/0x6c0
[  400.562394][   T31]  do_sys_openat2+0x121/0x1c0
[  400.567119][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  400.572323][   T31]  ? fd_install+0x97/0x540
[  400.576936][   T31]  ? fd_install+0x30d/0x540
[  400.581478][   T31]  __x64_sys_openat+0x138/0x170
[  400.586409][   T31]  do_syscall_64+0xfa/0xfa0
[  400.590944][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.596144][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.602277][   T31]  ? clear_bhb_loop+0x60/0xb0
[  400.606963][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.612892][   T31] RIP: 0033:0x7f279bd8de91
[  400.617356][   T31] RSP: 002b:00007ffd82e9c1d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  400.625772][   T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f279bd8de91
[  400.633790][   T31] RDX: 0000000000000002 RSI: 00007f279be129b7 RDI: 00000000ffffff9c
[  400.641835][   T31] RBP: 00007f279be129b7 R08: 0000000000000000 R09: 00007f279cb1d6c0
[  400.649853][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  400.657862][   T31] R13: 0000000000000003 R14: 00007ffd82e9c5a8 R15: 0000000000000000
[  400.665855][   T31]  </TASK>
[  400.669181][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  400.679048][   T31] 
[  400.679048][   T31] Showing all locks held in the system:
[  400.687143][   T31] 7 locks held by kworker/0:0/9:
[  400.692398][   T31]  #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: process_scheduled_works+0x9b4/0x17b0
[  400.702760][   T31]  #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  400.711726][   T31]  #2: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: finish_task_switch+0x18b/0x950
[  400.721366][   T31]  #3: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  400.730312][   T31]  #4: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd9/0x340
[  400.739228][   T31]  #5: ffff88802d6ba8a8 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x12b0
[  400.748598][   T31]  #6: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  400.758577][   T31] 4 locks held by kworker/1:0/24:
[  400.763685][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  400.774699][   T31]  #1: ffffc900001e7ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  400.787298][   T31]  #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  400.797410][   T31]  #3: ffff8880484fa100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  400.807162][   T31] 1 lock held by khungtaskd/31:
[  400.812026][   T31]  #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  400.822090][   T31] 2 locks held by getty/5589:
[  400.826837][   T31]  #0: ffff8880301a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  400.836924][   T31]  #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  400.847190][   T31] 3 locks held by kworker/1:3/5828:
[  400.852452][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  400.863629][   T31]  #1: ffffc90004cefba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  400.877367][   T31]  #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  400.888826][   T31] 1 lock held by syz.4.1297/10490:
[  400.894006][   T31]  #0: ffff8880484fa100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  400.903781][   T31] 3 locks held by syz.3.1305/10520:
[  400.909176][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  400.917643][   T31]  #1: ffff88804801b100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  400.927317][   T31]  #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  400.937413][   T31] 1 lock held by syz.0.1322/10596:
[  400.942614][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  400.951094][   T31] 1 lock held by syz.2.1323/10598:
[  400.956275][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  400.964759][   T31] 1 lock held by syz.2.1323/10600:
[  400.970020][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  400.978745][   T31] 1 lock held by syz.1.1346/10674:
[  400.983836][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  400.992304][   T31] 1 lock held by syz-executor/10682:
[  400.997818][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.006335][   T31] 1 lock held by syz-executor/10683:
[  401.011702][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.020204][   T31] 1 lock held by syz-executor/10686:
[  401.025497][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.033993][   T31] 1 lock held by syz-executor/10687:
[  401.039298][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.047768][   T31] 1 lock held by syz-executor/10689:
[  401.053054][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.061718][   T31] 1 lock held by syz-executor/10697:
[  401.067195][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.075685][   T31] 1 lock held by syz-executor/10698:
[  401.081025][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.089565][   T31] 1 lock held by syz-executor/10701:
[  401.094854][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.103550][   T31] 1 lock held by syz-executor/10702:
[  401.108839][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.117326][   T31] 1 lock held by syz-executor/10704:
[  401.122623][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.131081][   T31] 1 lock held by syz-executor/10712:
[  401.136347][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.144814][   T31] 1 lock held by syz-executor/10713:
[  401.150370][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.158845][   T31] 1 lock held by syz-executor/10716:
[  401.164110][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.172599][   T31] 1 lock held by syz-executor/10717:
[  401.177905][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.186421][   T31] 1 lock held by syz-executor/10719:
[  401.191768][   T31]  #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  401.200262][   T31] 
[  401.202584][   T31] =============================================
[  401.202584][   T31] 
[  401.211131][   T31] NMI backtrace for cpu 1
[  401.211144][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  401.211156][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  401.211162][   T31] Call Trace:
[  401.211166][   T31]  <TASK>
[  401.211172][   T31]  dump_stack_lvl+0x189/0x250
[  401.211190][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  401.211203][   T31]  ? __pfx__printk+0x10/0x10
[  401.211219][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  401.211232][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  401.211249][   T31]  ? __pfx__printk+0x10/0x10
[  401.211261][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  401.211277][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  401.211289][   T31]  watchdog+0xf60/0xfa0
[  401.211302][   T31]  ? watchdog+0x1e2/0xfa0
[  401.211313][   T31]  kthread+0x711/0x8a0
[  401.211328][   T31]  ? __pfx_watchdog+0x10/0x10
[  401.211336][   T31]  ? __pfx_kthread+0x10/0x10
[  401.211349][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  401.211361][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  401.211374][   T31]  ? __pfx_kthread+0x10/0x10
[  401.211386][   T31]  ret_from_fork+0x4bc/0x870
[  401.211398][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  401.211411][   T31]  ? __switch_to_asm+0x39/0x70
[  401.211418][   T31]  ? __switch_to_asm+0x33/0x70
[  401.211426][   T31]  ? __pfx_kthread+0x10/0x10
[  401.211437][   T31]  ret_from_fork_asm+0x1a/0x30
[  401.211453][   T31]  </TASK>
[  401.211457][   T31] Sending NMI from CPU 1 to CPUs 0:
[  401.356983][    C0] NMI backtrace for cpu 0
[  401.357016][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  401.357031][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  401.357040][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  401.357066][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c0 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  401.357079][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  401.357093][    C0] RAX: a055d800b5382400 RBX: ffffffff81967b47 RCX: a055d800b5382400
[  401.357104][    C0] RDX: 0000000000000001 RSI: ffffffff8d70e04f RDI: ffffffff8bbf0760
[  401.357114][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb
[  401.357125][    C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce870
[  401.357136][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40
[  401.357146][    C0] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[  401.357158][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  401.357168][    C0] CR2: 000055b8f35f9468 CR3: 000000000dd38000 CR4: 00000000003526f0
[  401.357181][    C0] Call Trace:
[  401.357188][    C0]  <TASK>
[  401.357194][    C0]  default_idle+0x13/0x20
[  401.357208][    C0]  default_idle_call+0x73/0xb0
[  401.357222][    C0]  do_idle+0x1e7/0x510
[  401.357241][    C0]  ? __pfx_do_idle+0x10/0x10
[  401.357262][    C0]  cpu_startup_entry+0x44/0x60
[  401.357277][    C0]  rest_init+0x2de/0x300
[  401.357292][    C0]  start_kernel+0x3ae/0x410
[  401.357308][    C0]  x86_64_start_reservations+0x24/0x30
[  401.357328][    C0]  x86_64_start_kernel+0x143/0x1c0
[  401.357346][    C0]  common_startup_64+0x13e/0x147
[  401.357372][    C0]  </TASK>