last executing test programs:

16.540355715s ago: executing program 2 (id=223):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0xce23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r6, 0xfffffff9}, 0x8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x4, 0x9, 0x1ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x2, 0xd, 0x2}], 0x10, 0x2}, 0x94)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c00028006"], 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_wake_idle_without_ipi\x00', r7, 0x0, 0x400}, 0x18)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={<r11=>r3, 0x5}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={r11, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90)

16.538239637s ago: executing program 1 (id=224):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xffffffff00000000})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100800000008ef1e0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0100"], 0x8)
close(0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r6)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000800000000000000008098110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1, 0x6, 0x492f, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xca, r10}, 0x38)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r11, 0x0, 0x0}, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf251500000008000300", @ANYRES32=r8, @ANYBLOB=' \x00+'], 0x3c}, 0x1, 0x0, 0x0, 0x2400089c}, 0x4000080)

16.430361793s ago: executing program 2 (id=225):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) (async)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)) (async)
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000040)=0xf3) (async)
bind(r1, 0x0, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="564c84f51b1fed2a48adf92e475a3d82a82f8a695a8d97d776daed68d0d46fddc9cf936a08884fbae77c71de5786e06b1bf63b0c90c58fa3698bd03c4d12354b322a6c302dc971f73e0dff53a980cc95146eab44d02f56f98d8029406a33f47a53a3"], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x4810)

16.429689959s ago: executing program 1 (id=226):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b8008000900000009"], 0x184}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r2, 0xffffffff)
sendmmsg(r2, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="af9b"], 0xfe61}}], 0x2, 0xc88c4)

16.336688956s ago: executing program 1 (id=227):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={<r2=>0x0, @in6={{0xa, 0x4e21, 0x9, @private1, 0xb}}}, &(0x7f0000000000)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000f40)=[{&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="1528e3e780", 0x5}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8008, 0x6, 0x8, r2}}], 0x20, 0x4005}], 0x1, 0x8008)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x9, @private1, 0xb}}}, &(0x7f0000000000)=0x84) (async)
sendmmsg$inet_sctp(r0, &(0x7f0000000f40)=[{&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="1528e3e780", 0x5}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8008, 0x6, 0x8, r2}}], 0x20, 0x4005}], 0x1, 0x8008) (async)

16.335683152s ago: executing program 2 (id=229):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x2})
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x4000, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001680)='\t', 0x1}, {&(0x7f00000006c0)="b4d7666aa984607e88dd74bb2886a44f46a5a03878555c445a7970703ac5103bba864e7613b2a52114f0343417287db63de4647c00fda1dd5cff72ba3a0cef7515f21f31abbb2877de1a2bea058643d1938c76b601110bd93a0c19eee25b6b4015333499a5d776f9a4a6d01a0d8dda6aa8a30265f415eb1772b4f6365b6f54065096fa4c9ddc004abb61d942aee5", 0x8e}, {&(0x7f0000000540)="f05ae135cd0fcc6545cb883c36f33ac0d212846fbe0cfc8628d8ff0801143879b34d1da79df9cc476557887001ae5a5972941c9fa9e03c64279712a71bbff8d8ac1bc9bc436e311671ba91766e5ed4847ea38a2002123777253f5340b2c543be2ecb96ecd307c143e8c9b73be4eac379028bcb4994bc", 0x76}, {&(0x7f0000000880)="71bfe876e44ab347f053d2f7da4ef16cf58fb3dc2eb0234e96d4b5814d71f6ec5c714c8c8b610d5534a6e2b7dff523b84cf30ed459260da4a386200881edcbce2529790172509621330e01d178c98a8d0fefb72b74c16342733a49c775fa6e52892ea9d1321594bf3c7daab885c159d77b4853339c88a29ff61d6c7937891dcdd48bb6559a945250c9079c646c3436b9d4380df1090ccb0d069ff5115feb22cc365a979fe3ab58c921294d990fc5ae9118b8df77c1fea3c114e6278564059bf7a9d10f21559304ba3f0a1ba52d0405e632f638791ca8f7", 0xd7}], 0x4}}], 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[], 0x8)
close(0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000448a7421fe0b65b57134d36c9d20f60736a011e3ced5324a178be6738e97e8082ba8a0c917e6bd0cae75efbd0efbf775e4440a9cd20d", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c000280080007007f0000010a000100aaaaaaaaaa000000"], 0x48}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000480)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x64, 0x6, 0x0, @local, @local, {[@hopopts={0x3c}, @fragment={0x0, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x68}, @dstopts={0x87, 0x6, '\x00', [@hao={0xc9, 0x10, @mcast2}, @enc_lim, @hao={0xc9, 0x10, @mcast2}, @generic={0x4, 0x2, "cc08"}, @pad1, @enc_lim={0x4, 0x1, 0x70}, @jumbo={0xc2, 0x4, 0x8}]}], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r6, 0x1, 0x15, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r8)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)

16.332513435s ago: executing program 1 (id=230):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r5, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=@getneigh={0x14, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r8, 0x2, {0x2, 0xff, 0x1}, 0xfe}, 0x18)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r9, 0x58, &(0x7f0000000240)}, 0x10)
clock_gettime(0xffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x1}]}, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

16.261857476s ago: executing program 0 (id=231):
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x25dfdbff, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x32}, @in6=@empty, {0x0, 0x0, 0x10000000, 0x0, 0x8}, {0x2000000000000000}, {}, 0x0, 0x3505, 0x0, 0x0, 0x0, 0x1}}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@remote, 0x2, 0x4}}]}, 0x120}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x44}}, 0x20008040)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb, 0x0, 0xb1000000}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

16.161713958s ago: executing program 0 (id=232):
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xf0}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0x8, 0x6, "09c2b4", 0x68, 0x6, 0xff, @empty, @mcast2, {[@fragment={0x2e, 0x0, 0x2c, 0x0, 0x0, 0x3, 0x67}, @srh={0x4, 0x6, 0x4, 0x3, 0x8f, 0x10, 0x1000, [@loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x2, 0x2, 0x4886, 0x0, 0x3, 0x9, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4e23, 0x4e20}, 0x1}, 0x4, 0x4}}}}}}}, 0x9e)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r4, 0x7fc9f000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206010100540000000000000500000014000780080008000000004008000640000000090900020073797a32000000000500040002000000050005000a00000005000100060000000c000300686173683a6970"], 0x58}}, 0x80)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r4, 0x12574000)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
socket$rds(0x15, 0x5, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r8 = accept4(r7, 0x0, 0x0, 0x0)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x101, 0x0)
read$alg(r8, &(0x7f00000009c0)=""/75, 0x4b)
bind$tipc(r8, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x2}}, 0x10)

15.98924876s ago: executing program 0 (id=233):
r0 = socket(0x2, 0x80805, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0)

15.988920952s ago: executing program 0 (id=234):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4)
getpeername$unix(r0, 0x0, &(0x7f0000000240))
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x1}}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r1, 0xffffffff)
sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="af9b00000000000084"], 0xfe61}}], 0x2, 0xc88c4)

15.882053892s ago: executing program 0 (id=235):
socket(0x25, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000400", @ANYRES32=<r1=>r0], 0x20}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x2, &(0x7f0000000380)='\x00', 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001700), 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000801)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r7}, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000400)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008810)
r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvfrom$llc(r10, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r11, 0x29, 0x46, 0x0, 0x0)

15.878139466s ago: executing program 0 (id=236):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x6)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'bond0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x57}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0xa4ff)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={<r5=>r3, 0x2, 0x4, 0x1})
write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'memory'}, {0x2b, 'io'}, {0x2d, 'perf_event'}, {0x2b, 'net_cls'}, {0x2d, 'cpuacct'}]}, 0x2a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000040000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0200000001000000000000000000000000000000cee444f20f12e2b27acaee5e396c973a421b512754406076d9ebe16749eb200030c39405d841540509bd80c304ce47fd136d9f90206521d84852bb34ced1d328be4036a0f908108ea32421024d9c5b38a7e0c0e8de8f737aaa0d857892678c58fc9c7e6e4c6bff4a822b79f9d12e9bc388397635e11cafcfa3555dc609818a65619d12ca2fe59f765596e67e623810b0ab3b6f1e93f219b3d09e102f4f09061d13c496913a7910bd6bd48ac419b84d1bb8b1288e7d941e023b1b11ee65f3"], 0x48)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r8=>0x0)
read$nci(r3, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000826bd7000fcdbdf250200000008000100", @ANYRES32=r8, @ANYBLOB="b02fe5ac90994fb8e24e17484031f42aa0f21842dc518d6cca37bc6190a30f96cff93598a1f3aae2d158fb45560e5b7df054e0575fff967ad3477413f138ff125ead49db2484c11e8bf1c6644c79615795542c88"], 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)
sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xffd, @private1, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0xfffffffffffffd20}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000800000043e4000017000000060063c17d55c50627958974fa"], 0xfe61}}], 0x2, 0xc88c4)

15.422039219s ago: executing program 2 (id=237):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080)=0x8, 0x4)
syz_emit_ethernet(0x29f, &(0x7f00000009c0)=ANY=[], 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
tee(r3, r3, 0x1, 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x40000)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={<r6=>0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c)
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000001980)=ANY=[], &(0x7f0000001a00)={0x1, 0x3, [0xc06, 0xf17, 0xf27, 0x1f4]})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, 0x0, &(0x7f0000000100))
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080012000e00000014001a"], 0x50}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRES32=r5, @ANYRES8=r10, @ANYRES8=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)

15.421649955s ago: executing program 1 (id=238):
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x25dfdbff, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x32}, @in6=@empty, {0x0, 0x0, 0x10000000, 0x0, 0x8}, {0x2000000000000000}, {}, 0x0, 0x3505, 0x0, 0x0, 0x0, 0x1}}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@remote, 0x2, 0x4}}]}, 0x120}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x44}}, 0x20008040)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb, 0x0, 0xd1161600}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

15.342450264s ago: executing program 2 (id=239):
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x1}}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r1, 0xffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25020000001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="af9b00000000000084"], 0xfe61}}], 0x2, 0xc88c4)

15.342100728s ago: executing program 2 (id=240):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
unshare(0x6a040000)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840)
write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="610502040606820b04060573ee3077ffe4050b050a4cd2585d05d0d3a624e20fddd142cbf209d627c6101a9c517fe433eebd1c63efdade2cfb05d346a1768678da62b5967886f5d271bba694914305dae8c54f7ec5ef131745ca48bf324ac2631eb6"], 0x61)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24000840)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

15.260778259s ago: executing program 1 (id=241):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x338, 0xa, 0x148, 0x338, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0xff}, 0x0, 0x2c8, 0x338, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000000540)="00829aed4a151f2001dc01e2d20c6f985f895f12382930e81937", 0x1a, 0x20000040, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0xfffffacd, @loopback, 0x9}}, 0x40, 0x6, 0x6, 0x9, 0x54, 0x6, 0xfe}, 0x9c)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
r2 = socket(0x400000000010, 0x3, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x800000001, 0x8001, 0x96bb, 0x6, 0x502f28f4, 0x100000001, 0xb4b0, 0x5}, &(0x7f0000000280)={0x100000001, 0x48, 0x100040001, 0x4, 0x10000, 0x1, 0x40, 0x6}, &(0x7f00000002c0)={0x5, 0x0, 0x4, 0x0, 0x3, 0x8, 0x654, 0x7fffffffffffffff}, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f0000000380)={[0x800000000000004]}, 0x8})
sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x601, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0xfff1, 0xffee}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x9, 0x8, @private0, @local, 0x40, 0x8, 0x7ff, 0xffffffff}})
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ppoll(&(0x7f00000001c0)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x4, 0x2, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0xfe, 0x1}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x105042, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, 0x0, 0x0, 0x931766f6319eed40)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000001100010095000000000000001324287584fa8591db1b54fb1fa002d0623fe331814284b3df1d728cb3f27ee19de56c7dd7f017518ce509a60629a4153fb861956545ea9b1f24d7b548df845e4f20212f207ab2c4e591adeff10063fc29e43bb0b3e8b48d184fc5efab217e44"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10)

50.432276ms ago: executing program 32 (id=236):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x6)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'bond0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x57}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0xa4ff)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={<r5=>r3, 0x2, 0x4, 0x1})
write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'memory'}, {0x2b, 'io'}, {0x2d, 'perf_event'}, {0x2b, 'net_cls'}, {0x2d, 'cpuacct'}]}, 0x2a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000040000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0200000001000000000000000000000000000000cee444f20f12e2b27acaee5e396c973a421b512754406076d9ebe16749eb200030c39405d841540509bd80c304ce47fd136d9f90206521d84852bb34ced1d328be4036a0f908108ea32421024d9c5b38a7e0c0e8de8f737aaa0d857892678c58fc9c7e6e4c6bff4a822b79f9d12e9bc388397635e11cafcfa3555dc609818a65619d12ca2fe59f765596e67e623810b0ab3b6f1e93f219b3d09e102f4f09061d13c496913a7910bd6bd48ac419b84d1bb8b1288e7d941e023b1b11ee65f3"], 0x48)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r8=>0x0)
read$nci(r3, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000826bd7000fcdbdf250200000008000100", @ANYRES32=r8, @ANYBLOB="b02fe5ac90994fb8e24e17484031f42aa0f21842dc518d6cca37bc6190a30f96cff93598a1f3aae2d158fb45560e5b7df054e0575fff967ad3477413f138ff125ead49db2484c11e8bf1c6644c79615795542c88"], 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)
sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xffd, @private1, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0xfffffffffffffd20}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000800000043e4000017000000060063c17d55c50627958974fa"], 0xfe61}}], 0x2, 0xc88c4)

135.69µs ago: executing program 33 (id=241):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x338, 0xa, 0x148, 0x338, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0xff}, 0x0, 0x2c8, 0x338, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000000540)="00829aed4a151f2001dc01e2d20c6f985f895f12382930e81937", 0x1a, 0x20000040, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0xfffffacd, @loopback, 0x9}}, 0x40, 0x6, 0x6, 0x9, 0x54, 0x6, 0xfe}, 0x9c)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
r2 = socket(0x400000000010, 0x3, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x800000001, 0x8001, 0x96bb, 0x6, 0x502f28f4, 0x100000001, 0xb4b0, 0x5}, &(0x7f0000000280)={0x100000001, 0x48, 0x100040001, 0x4, 0x10000, 0x1, 0x40, 0x6}, &(0x7f00000002c0)={0x5, 0x0, 0x4, 0x0, 0x3, 0x8, 0x654, 0x7fffffffffffffff}, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f0000000380)={[0x800000000000004]}, 0x8})
sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x601, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0xfff1, 0xffee}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x9, 0x8, @private0, @local, 0x40, 0x8, 0x7ff, 0xffffffff}})
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ppoll(&(0x7f00000001c0)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x4, 0x2, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0xfe, 0x1}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x105042, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, 0x0, 0x0, 0x931766f6319eed40)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000001100010095000000000000001324287584fa8591db1b54fb1fa002d0623fe331814284b3df1d728cb3f27ee19de56c7dd7f017518ce509a60629a4153fb861956545ea9b1f24d7b548df845e4f20212f207ab2c4e591adeff10063fc29e43bb0b3e8b48d184fc5efab217e44"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10)

0s ago: executing program 34 (id=240):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
unshare(0x6a040000)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840)
write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="610502040606820b04060573ee3077ffe4050b050a4cd2585d05d0d3a624e20fddd142cbf209d627c6101a9c517fe433eebd1c63efdade2cfb05d346a1768678da62b5967886f5d271bba694914305dae8c54f7ec5ef131745ca48bf324ac2631eb6"], 0x61)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x24000840)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44666' (ED25519) to the list of known hosts.
syzkaller login: [   48.603033][ T5738] cgroup: Unknown subsys name 'net'
[   48.673688][ T5738] cgroup: Unknown subsys name 'cpuset'
[   48.678244][ T5738] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.341304][ T5738] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.708462][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.711846][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.714304][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.716890][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.719182][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.749519][ T5200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.753720][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.756269][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.759121][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.761609][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.764121][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.768299][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.771753][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.792625][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.796253][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.973448][ T5806] chnl_net:caif_netlink_parms(): no params data found
[   55.057885][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   55.120372][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.123175][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.125598][ T5806] bridge_slave_0: entered allmulticast mode
[   55.128404][ T5806] bridge_slave_0: entered promiscuous mode
[   55.133170][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   55.145644][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.148549][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.152514][ T5806] bridge_slave_1: entered allmulticast mode
[   55.155648][ T5806] bridge_slave_1: entered promiscuous mode
[   55.202081][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.229735][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.282111][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.284264][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.286414][ T5810] bridge_slave_0: entered allmulticast mode
[   55.289174][ T5810] bridge_slave_0: entered promiscuous mode
[   55.294569][ T5806] team0: Port device team_slave_0 added
[   55.296414][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.298511][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.300716][ T5810] bridge_slave_1: entered allmulticast mode
[   55.303479][ T5810] bridge_slave_1: entered promiscuous mode
[   55.306088][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.308227][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.310422][ T5812] bridge_slave_0: entered allmulticast mode
[   55.314452][ T5812] bridge_slave_0: entered promiscuous mode
[   55.318073][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.320159][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.322921][ T5812] bridge_slave_1: entered allmulticast mode
[   55.325817][ T5812] bridge_slave_1: entered promiscuous mode
[   55.330042][ T5806] team0: Port device team_slave_1 added
[   55.378403][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.390115][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.393385][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.402411][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.408435][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.413617][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.426013][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.428462][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.437146][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.442825][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.470776][ T5810] team0: Port device team_slave_0 added
[   55.483279][ T5810] team0: Port device team_slave_1 added
[   55.487069][ T5812] team0: Port device team_slave_0 added
[   55.522694][ T5812] team0: Port device team_slave_1 added
[   55.546827][ T5806] hsr_slave_0: entered promiscuous mode
[   55.549394][ T5806] hsr_slave_1: entered promiscuous mode
[   55.552707][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.554750][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.562143][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.575463][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.577923][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.586583][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.591830][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.593870][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.601679][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.618738][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.621513][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.629186][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.705173][ T5810] hsr_slave_0: entered promiscuous mode
[   55.707471][ T5810] hsr_slave_1: entered promiscuous mode
[   55.709541][ T5810] debugfs: 'hsr0' already exists in 'hsr'
[   55.712374][ T5810] Cannot create hsr debugfs directory
[   55.746047][ T5812] hsr_slave_0: entered promiscuous mode
[   55.748842][ T5812] hsr_slave_1: entered promiscuous mode
[   55.752461][ T5812] debugfs: 'hsr0' already exists in 'hsr'
[   55.754144][ T5812] Cannot create hsr debugfs directory
[   55.958085][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.968799][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.974910][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.989695][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.051222][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.063847][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.069200][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.075186][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.157093][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.164534][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.182675][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.192038][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.239047][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.276367][ T5806] 8021q: adding VLAN 0 to HW filter on device team0
[   56.292450][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.294840][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.306799][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.308998][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.343706][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.380318][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   56.388591][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.396115][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.398339][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.409949][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.412346][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.474896][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   56.488932][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.491313][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.516518][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.518740][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.617747][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.656954][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.678854][ T5806] veth0_vlan: entered promiscuous mode
[   56.685057][ T5806] veth1_vlan: entered promiscuous mode
[   56.713335][ T5806] veth0_macvtap: entered promiscuous mode
[   56.721713][ T5806] veth1_macvtap: entered promiscuous mode
[   56.759377][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.763358][ T5812] veth0_vlan: entered promiscuous mode
[   56.769120][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.775324][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.787612][ T5812] veth1_vlan: entered promiscuous mode
[   56.799167][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.803261][   T55] Bluetooth: hci0: command tx timeout
[   56.807401][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.820165][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.823169][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.856028][ T5810] veth0_vlan: entered promiscuous mode
[   56.868504][ T5812] veth0_macvtap: entered promiscuous mode
[   56.870848][ T5807] Bluetooth: hci2: command tx timeout
[   56.872721][   T55] Bluetooth: hci1: command tx timeout
[   56.876785][ T5812] veth1_macvtap: entered promiscuous mode
[   56.889689][ T5810] veth1_vlan: entered promiscuous mode
[   56.910907][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.920256][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.929561][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.932910][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.940047][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.943873][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.959727][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.964736][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.974743][ T3631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.977397][ T5810] veth0_macvtap: entered promiscuous mode
[   56.979400][ T3631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.983778][ T5810] veth1_macvtap: entered promiscuous mode
[   57.014450][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.027620][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.044257][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.047586][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.050358][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.059644][ T5806] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.070169][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.112221][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.128357][ T5875] : entered promiscuous mode
[   57.135537][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.138745][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.178066][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.178362][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.186617][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.189665][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.197790][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.216164][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.219499][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.223178][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.305562][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.343539][ T5837] hid-generic 0005:0002:5508.0001: item fetching failed at offset 19/20
[   57.357578][ T5837] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22
[   57.472066][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4'.
[   57.627714][ T5898] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET)
[   57.636443][ T5899] warning: `syz.1.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.701960][ T5899] netlink: 'syz.1.9': attribute type 10 has an invalid length.
[   57.723591][ T5899] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   57.845698][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.848634][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.904539][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.914526][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.982330][ T5836] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.007812][ T5836] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.020757][ T5836] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.023373][ T5836] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.068232][ T5917] bridge_slave_0: left allmulticast mode
[   58.069947][ T5917] bridge_slave_0: left promiscuous mode
[   58.075663][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.097166][ T5917] bridge_slave_1: left allmulticast mode
[   58.098768][ T5917] bridge_slave_1: left promiscuous mode
[   58.105534][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.114692][ T5917] bond0: (slave bond_slave_0): Releasing backup interface
[   58.119733][ T5917] bond0: (slave bond_slave_1): Releasing backup interface
[   58.128715][ T5917] team0: Port device team_slave_0 removed
[   58.145108][ T5917] team0: Port device team_slave_1 removed
[   58.148252][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.155464][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.159476][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.163961][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.167622][ T5927] netlink: 'syz.0.13': attribute type 10 has an invalid length.
[   58.169836][ T5917] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   58.227279][ T5927] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   58.334956][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.341869][ T5932] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[   58.345169][ T5932] bond0: (slave gre0): Error -95 calling set_mac_address
[   58.359904][ T5932] netlink: 'syz.1.19': attribute type 39 has an invalid length.
[   58.425784][ T5934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18'.
[   58.466636][ T5944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   58.669192][ T5959] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   58.678192][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'.
[   58.690383][ T5959] netlink: 'syz.2.23': attribute type 10 has an invalid length.
[   58.693564][ T5959] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   58.870696][   T55] Bluetooth: hci0: command tx timeout
[   58.951000][   T55] Bluetooth: hci1: command tx timeout
[   58.952804][   T55] Bluetooth: hci2: command tx timeout
[   59.409428][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'.
[   59.476921][  T974] cfg80211: failed to load regulatory.db
[   59.809615][ T5977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.28'.
[   59.814738][ T5820] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.820755][ T5820] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.827903][ T5820] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.899338][ T5820] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.503352][ T6006] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   60.509386][ T6006] bridge_slave_0: left allmulticast mode
[   60.512299][ T6006] bridge_slave_0: left promiscuous mode
[   60.514146][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.518002][ T6006] bridge_slave_1: left allmulticast mode
[   60.519681][ T6006] bridge_slave_1: left promiscuous mode
[   60.521817][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.526061][ T6006] bond0: (slave bond_slave_0): Releasing backup interface
[   60.529173][ T6006] bond0: (slave bond_slave_1): Releasing backup interface
[   60.532650][ T6006] team0: Port device team_slave_0 removed
[   60.535244][ T6006] team0: Port device team_slave_1 removed
[   60.537125][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.539618][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.542310][ T6006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   60.549326][ T6006] netlink: 'syz.1.38': attribute type 10 has an invalid length.
[   60.552990][ T6006] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   60.558278][ T6006] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   60.561486][ T6006] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   60.930409][ T6008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.951441][ T5807] Bluetooth: hci0: command tx timeout
[   60.975647][ T6012] sctp: [Deprecated]: syz.2.40 (pid 6012) Use of int in maxseg socket option.
[   60.975647][ T6012] Use struct sctp_assoc_value instead
[   60.984526][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'.
[   61.030859][ T5807] Bluetooth: hci2: command tx timeout
[   61.032952][ T5807] Bluetooth: hci1: command tx timeout
[   61.198226][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.201507][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.822064][ T6067] xt_CONNSECMARK: invalid mode: 0
[   61.882722][ T6069] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.142061][ T6071] __nla_validate_parse: 8 callbacks suppressed
[   62.142081][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'.
[   62.146977][ T6071] netlink: 'syz.2.58': attribute type 2 has an invalid length.
[   62.150062][ T6071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.58'.
[   62.267884][ T6073] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   62.399933][ T6079] IPVS: Unknown mcast interface: netpci0
[   62.537897][ T6083] netlink: 'syz.2.63': attribute type 1 has an invalid length.
[   62.602901][ T6083] vlan2: entered allmulticast mode
[   62.605007][ T6083] bridge0: entered allmulticast mode
[   62.938084][ T6102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.71'.
[   62.941506][ T6102] netlink: 'syz.2.71': attribute type 29 has an invalid length.
[   62.945760][ T6102] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.030577][   T55] Bluetooth: hci0: command tx timeout
[   63.110913][   T55] Bluetooth: hci1: command tx timeout
[   63.111588][ T5815] Bluetooth: hci2: command tx timeout
[   63.418309][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'.
[   63.595872][ T6136] tipc: Started in network mode
[   63.597500][ T6136] tipc: Node identity 5206182beb08, cluster identity 4711
[   63.599789][ T6136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.605076][ T6136] syzkaller0: entered promiscuous mode
[   63.606695][ T6136] syzkaller0: entered allmulticast mode
[   63.610382][ T6136] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   63.624355][ T6136] tipc: Resetting bearer <eth:syzkaller0>
[   63.629923][ T6135] tipc: Resetting bearer <eth:syzkaller0>
[   63.639291][ T6135] tipc: Disabling bearer <eth:syzkaller0>
[   63.648214][ T6138] netem: change failed
[   64.295992][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'.
[   64.593823][   T33] audit: type=1800 audit(1762145230.456:2): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.89" name="memory.events" dev="tmpfs" ino=165 res=0 errno=0
[   65.190726][ T5815] Bluetooth: hci2: command 0x0405 tx timeout
[   65.526676][ T6195] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[   65.898963][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'.
[   65.904601][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'.
[   65.907338][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'.
[   65.909864][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'.
[   65.912756][ T6201] Zero length message leads to an empty skb
[   66.014155][ T6208] syzkaller1: entered promiscuous mode
[   66.016027][ T6208] syzkaller1: entered allmulticast mode
[   66.317340][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.101'.
[   66.329014][ T6215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.817300][ T6243] ieee802154 phy0 wpan0: encryption failed: -22
[   67.195020][ T6265] tc_dump_action: action bad kind
[   67.446518][ T6294] __nla_validate_parse: 3 callbacks suppressed
[   67.446528][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   67.455575][ T6294] : entered promiscuous mode
[   67.458061][ T6292] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   67.481093][ T6292] bond1: entered promiscuous mode
[   67.482984][ T6292] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.493054][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[   67.496248][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'.
[   67.527537][ T6298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'.
[   67.634553][ T6301] bond1: left promiscuous mode
[   67.644699][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'.
[   67.647982][ T6301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.121'.
[   67.651751][ T6301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.121'.
[   67.858025][ T6315] netlink: 'syz.1.125': attribute type 6 has an invalid length.
[   67.924416][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.124'.
[   67.939187][ T6321] ieee802154 phy0 wpan0: encryption failed: -22
[   68.090890][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.129'.
[   68.534189][ T6335] netlink: 256 bytes leftover after parsing attributes in process `syz.0.130'.
[   68.935544][ T6352] netlink: 'syz.1.133': attribute type 1 has an invalid length.
[   68.951859][ T6352] bond1: entered promiscuous mode
[   68.953722][ T6352] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.971251][ T6352] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.974642][ T6352] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[   68.979875][ T6352] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[   68.984508][ T6352] bond1: (slave gre1): Opening slave failed
[   69.083965][ T6359] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   69.087938][ T6359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   69.102670][ T6359] netlink: 'syz.1.134': attribute type 10 has an invalid length.
[   69.105059][ T6359] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   69.109970][ T6359] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   69.116277][ T6359] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   69.664224][ T6374] netlink: 'syz.2.140': attribute type 6 has an invalid length.
[   69.667094][ T6374] netlink: 'syz.2.140': attribute type 5 has an invalid length.
[   69.676453][ T6374] netlink: 'syz.2.140': attribute type 4 has an invalid length.
[   70.026822][ T6392] netlink: 'syz.2.145': attribute type 1 has an invalid length.
[   70.112557][ T6397] netlink: 'syz.1.147': attribute type 6 has an invalid length.
[   70.118620][ T6397] netlink: 'syz.1.147': attribute type 5 has an invalid length.
[   70.130035][ T6397] netlink: 'syz.1.147': attribute type 4 has an invalid length.
[   70.136770][ T6397] netlink: 'syz.1.147': attribute type 4 has an invalid length.
[   70.247635][ T6406] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   70.259089][ T6406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   70.270023][ T6406] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   70.281098][ T6406] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   70.284607][ T6406] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   71.160104][ T6420] tipc: Started in network mode
[   71.162451][ T6420] tipc: Node identity 0e742f5e0fa4, cluster identity 4711
[   71.165359][ T6420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.168599][ T6420] syzkaller0: entered promiscuous mode
[   71.174703][ T6420] syzkaller0: entered allmulticast mode
[   71.197497][ T6420] tipc: Resetting bearer <eth:syzkaller0>
[   71.202196][ T6419] tipc: Resetting bearer <eth:syzkaller0>
[   71.213464][ T6419] tipc: Disabling bearer <eth:syzkaller0>
[   71.566306][ T6446] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   71.680428][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.683992][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   72.048764][ T6471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.051843][ T6471] syzkaller0: entered promiscuous mode
[   72.053680][ T6471] syzkaller0: entered allmulticast mode
[   72.069644][ T6471] tipc: Resetting bearer <eth:syzkaller0>
[   72.081496][ T6470] tipc: Resetting bearer <eth:syzkaller0>
[   72.087895][ T6470] tipc: Disabling bearer <eth:syzkaller0>
[   72.626996][ T6488] __nla_validate_parse: 18 callbacks suppressed
[   72.627010][ T6488] netlink: 128 bytes leftover after parsing attributes in process `syz.0.175'.
[   72.687315][ T6489] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   73.224154][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.230015][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.303404][ T5836] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.309491][ T5836] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.313142][ T5836] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.316226][ T5836] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.424252][ T6507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.181'.
[   73.427361][ T6507] netlink: 35 bytes leftover after parsing attributes in process `syz.1.181'.
[   73.429861][ T6507] netlink: 35 bytes leftover after parsing attributes in process `syz.1.181'.
[   73.471374][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'.
[   73.686442][ T6532] syzkaller1: entered promiscuous mode
[   73.688165][ T6532] syzkaller1: entered allmulticast mode
[   74.666733][ T6566] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   74.795408][ T6573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.199'.
[   74.798059][ T6573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.199'.
[   74.802479][ T6573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.199'.
[   75.143269][ T6583] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   75.147161][ T6584] bridge_slave_0: left allmulticast mode
[   75.149261][ T6584] bridge_slave_0: left promiscuous mode
[   75.155317][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.160349][ T6584] bridge_slave_1: left allmulticast mode
[   75.162704][ T6584] bridge_slave_1: left promiscuous mode
[   75.164872][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.171968][ T6584] bond0: (slave bond_slave_0): Releasing backup interface
[   75.176245][ T6584] bond0: (slave bond_slave_1): Releasing backup interface
[   75.182046][ T6584] team0: Port device team_slave_0 removed
[   75.185710][ T6584] team0: Port device team_slave_1 removed
[   75.188179][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.194991][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.198125][ T6584] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   75.223874][ T6587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.203'.
[   75.274541][ T6597] validate_nla: 5 callbacks suppressed
[   75.274568][ T6597] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   75.278465][ T6597] netlink: 248 bytes leftover after parsing attributes in process `syz.2.204'.
[   75.284695][ T6597] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   75.286970][ T6597] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   75.289150][ T6597] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   75.291704][ T6597] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   75.293949][ T6597] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   75.296190][ T6597] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   75.298601][ T6597] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   75.301413][ T6597] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   75.303758][ T6597] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   75.312243][ T6598] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   75.767406][ T6616] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   75.773967][ T6616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   75.787660][ T6616] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   75.792491][ T6616] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   75.796410][ T6616] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   76.626766][ T6650] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   76.689898][ T6650] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   76.698164][ T6650] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   76.701912][ T6650] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   76.704599][ T6650] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   77.608929][ T5278] IPVS: starting estimator thread 0...
[   77.703540][ T6682] IPVS: using max 62 ests per chain, 148800 per kthread
[   77.987580][ T6694] __nla_validate_parse: 71 callbacks suppressed
[   77.987591][ T6694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'.
[   77.992611][ T6694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'.
[   78.418588][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'.
[   78.440720][ T6700] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.577261][ T6712] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   78.670023][ T5820] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x6
[   79.411136][ T6717] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   79.413570][ T6717] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   79.428541][ T6717] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   79.431713][ T6717] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   79.437670][ T6717] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   79.439806][ T6717] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  133.113238][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.115633][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.554683][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.556518][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  232.950955][   T34] INFO: task kworker/1:3:5278 blocked for more than 143 seconds.
[  232.953481][   T34]       Not tainted syzkaller #0
[  232.956255][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  232.959857][   T34] task:kworker/1:3     state:D stack:26320 pid:5278  tgid:5278  ppid:2      task_flags:0x4208060 flags:0x00080000
[  232.963410][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  232.965340][   T34] Call Trace:
[  232.966395][   T34]  <TASK>
[  232.967272][   T34]  __schedule+0x1798/0x4cc0
[  232.968639][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.970851][   T34]  ? __pfx___schedule+0x10/0x10
[  232.987950][   T34]  ? schedule+0x91/0x360
[  232.989577][   T34]  schedule+0x165/0x360
[  232.992295][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.994415][   T34]  __mutex_lock+0x7e6/0x1350
[  232.996142][   T34]  ? __mutex_lock+0x5bb/0x1350
[  232.997928][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  233.000252][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.002863][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.004969][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.007042][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  233.009252][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.011658][   T34]  process_scheduled_works+0xae1/0x17b0
[  233.013730][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  233.015926][   T34]  worker_thread+0x8a0/0xda0
[  233.017588][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.019892][   T34]  ? __kthread_parkme+0x7b/0x200
[  233.021611][   T34]  kthread+0x711/0x8a0
[  233.022831][   T34]  ? __pfx_worker_thread+0x10/0x10
[  233.024231][   T34]  ? __pfx_kthread+0x10/0x10
[  233.025613][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.027186][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.028869][   T34]  ? __pfx_kthread+0x10/0x10
[  233.030282][   T34]  ret_from_fork+0x4bc/0x870
[  233.031895][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.033387][   T34]  ? __switch_to_asm+0x39/0x70
[  233.034776][   T34]  ? __switch_to_asm+0x33/0x70
[  233.036148][   T34]  ? __pfx_kthread+0x10/0x10
[  233.037709][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.039487][   T34]  </TASK>
[  233.040789][   T34] INFO: task syz.0.236:6694 blocked for more than 143 seconds.
[  233.043000][   T34]       Not tainted syzkaller #0
[  233.044431][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.047190][   T34] task:syz.0.236       state:D stack:24456 pid:6694  tgid:6693  ppid:5810   task_flags:0x400140 flags:0x00080003
[  233.050837][   T34] Call Trace:
[  233.052146][   T34]  <TASK>
[  233.053344][   T34]  __schedule+0x1798/0x4cc0
[  233.055214][   T34]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  233.057292][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.058793][   T34]  ? __pfx___schedule+0x10/0x10
[  233.060415][   T34]  ? schedule+0x91/0x360
[  233.062825][   T34]  schedule+0x165/0x360
[  233.064525][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.066201][   T34]  __mutex_lock+0x7e6/0x1350
[  233.067809][   T34]  ? __mutex_lock+0x5bb/0x1350
[  233.069284][   T34]  ? rfkill_unregister+0xc8/0x220
[  233.070927][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.072484][   T34]  ? __pfx_device_del+0x10/0x10
[  233.073981][   T34]  rfkill_unregister+0xc8/0x220
[  233.075542][   T34]  nfc_unregister_device+0x96/0x2a0
[  233.077359][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  233.079259][   T34]  virtual_ncidev_close+0x56/0x90
[  233.081068][   T34]  __fput+0x44c/0xa70
[  233.082407][   T34]  task_work_run+0x1d4/0x260
[  233.083889][   T34]  ? __pfx_task_work_run+0x10/0x10
[  233.085517][   T34]  get_signal+0x11ec/0x1340
[  233.087045][   T34]  ? task_work_add+0x377/0x420
[  233.088854][   T34]  ? __pfx_vfs_read+0x10/0x10
[  233.090705][   T34]  arch_do_signal_or_restart+0xa0/0x790
[  233.092705][   T34]  ? __pfx___fput_deferred+0x10/0x10
[  233.094794][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  233.097209][   T34]  ? exit_to_user_mode_loop+0x40/0x130
[  233.099393][   T34]  exit_to_user_mode_loop+0x72/0x130
[  233.101612][   T34]  do_syscall_64+0x2bd/0xfa0
[  233.103247][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.105354][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.107940][   T34]  ? exc_page_fault+0xab/0x100
[  233.109891][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.112251][   T34] RIP: 0033:0x7f42dff8efc9
[  233.114045][   T34] RSP: 002b:00007f42de1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  233.117078][   T34] RAX: fffffffffffffff2 RBX: 00007f42e01e5fa0 RCX: 00007f42dff8efc9
[  233.119587][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  233.122208][   T34] RBP: 00007f42e0011f91 R08: 0000000000000000 R09: 0000000000000000
[  233.124702][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.127485][   T34] R13: 00007f42e01e6038 R14: 00007f42e01e5fa0 R15: 00007ffeee5b0618
[  233.129884][   T34]  </TASK>
[  233.130903][   T34] INFO: task syz.2.240:6708 blocked for more than 143 seconds.
[  233.133124][   T34]       Not tainted syzkaller #0
[  233.134571][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.137368][   T34] task:syz.2.240       state:D stack:25608 pid:6708  tgid:6708  ppid:5812   task_flags:0x400040 flags:0x00080002
[  233.141105][   T34] Call Trace:
[  233.142160][   T34]  <TASK>
[  233.143030][   T34]  __schedule+0x1798/0x4cc0
[  233.144450][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.145874][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.147369][   T34]  ? __pfx___schedule+0x10/0x10
[  233.149131][   T34]  ? schedule+0x91/0x360
[  233.150441][   T34]  schedule+0x165/0x360
[  233.151786][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.153654][   T34]  __mutex_lock+0x7e6/0x1350
[  233.155064][   T34]  ? __mutex_lock+0x5bb/0x1350
[  233.156519][   T34]  ? rfkill_unregister+0xc8/0x220
[  233.158101][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.159638][   T34]  ? __pfx_device_del+0x10/0x10
[  233.161252][   T34]  rfkill_unregister+0xc8/0x220
[  233.162702][   T34]  nfc_unregister_device+0x96/0x2a0
[  233.164289][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  233.165957][   T34]  virtual_ncidev_close+0x56/0x90
[  233.167534][   T34]  __fput+0x44c/0xa70
[  233.168924][   T34]  task_work_run+0x1d4/0x260
[  233.170543][   T34]  ? __pfx_task_work_run+0x10/0x10
[  233.172053][   T34]  ? exit_to_user_mode_loop+0x40/0x130
[  233.173654][   T34]  exit_to_user_mode_loop+0xe9/0x130
[  233.175198][   T34]  do_syscall_64+0x2bd/0xfa0
[  233.176560][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.178334][   T34]  ? asm_sysvec_call_function_single+0x1a/0x20
[  233.180124][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.182880][   T34] RIP: 0033:0x7fc72858efc9
[  233.184229][   T34] RSP: 002b:00007ffc1b7e2288 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  233.186541][   T34] RAX: 0000000000000000 RBX: 00007fc7287e7da0 RCX: 00007fc72858efc9
[  233.188955][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  233.191465][   T34] RBP: 00007fc7287e7da0 R08: 000000000000017c R09: 000000131b7e257f
[  233.193817][   T34] R10: 00007fc7287e7cb0 R11: 0000000000000246 R12: 0000000000013592
[  233.196088][   T34] R13: 00007fc7287e6090 R14: ffffffffffffffff R15: 00007ffc1b7e23a0
[  233.198403][   T34]  </TASK>
[  233.199328][   T34] INFO: task syz.1.241:6719 blocked for more than 143 seconds.
[  233.201620][   T34]       Not tainted syzkaller #0
[  233.203233][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.206129][   T34] task:syz.1.241       state:D stack:25176 pid:6719  tgid:6711  ppid:5806   task_flags:0x400040 flags:0x00080002
[  233.209928][   T34] Call Trace:
[  233.210966][   T34]  <TASK>
[  233.211840][   T34]  __schedule+0x1798/0x4cc0
[  233.213172][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.214784][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.216204][   T34]  ? __pfx___schedule+0x10/0x10
[  233.217632][   T34]  ? schedule+0x91/0x360
[  233.218958][   T34]  schedule+0x165/0x360
[  233.220258][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.221838][   T34]  __mutex_lock+0x7e6/0x1350
[  233.223355][   T34]  ? __mutex_lock+0x5bb/0x1350
[  233.225005][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  233.226716][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.228226][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.229783][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.231703][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.233463][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  233.235323][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  233.236835][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  233.238588][   T34]  rfkill_set_block+0x1d2/0x440
[  233.240169][   T34]  rfkill_fop_write+0x44b/0x570
[  233.241734][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  233.243295][   T34]  ? security_file_permission+0x20/0x290
[  233.244905][   T34]  ? rw_verify_area+0x255/0x4d0
[  233.246289][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.247695][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  233.249258][   T34]  vfs_write+0x27e/0xb30
[  233.250575][   T34]  ? __pfx_vfs_write+0x10/0x10
[  233.251948][   T34]  ? __fget_files+0x2a/0x420
[  233.253262][   T34]  ? __fget_files+0x2a/0x420
[  233.254600][   T34]  ? __fget_files+0x3a0/0x420
[  233.255951][   T34]  ? __fget_files+0x2a/0x420
[  233.257317][   T34]  ksys_write+0x145/0x250
[  233.258572][   T34]  ? __pfx_ksys_write+0x10/0x10
[  233.259990][   T34]  ? do_syscall_64+0xbe/0xfa0
[  233.261357][   T34]  do_syscall_64+0xfa/0xfa0
[  233.262635][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.264263][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.266012][   T34]  ? exc_page_fault+0xab/0x100
[  233.267505][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.269301][   T34] RIP: 0033:0x7f23a9d8efc9
[  233.270767][   T34] RSP: 002b:00007f23a7fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  233.273231][   T34] RAX: ffffffffffffffda RBX: 00007f23a9fe6180 RCX: 00007f23a9d8efc9
[  233.275555][   T34] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000006
[  233.278072][   T34] RBP: 00007f23a9e11f91 R08: 0000000000000000 R09: 0000000000000000
[  233.280368][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.282633][   T34] R13: 00007f23a9fe6218 R14: 00007f23a9fe6180 R15: 00007ffe0f5f7498
[  233.285208][   T34]  </TASK>
[  233.286157][   T34] 
[  233.286157][   T34] Showing all locks held in the system:
[  233.288423][   T34] 1 lock held by khungtaskd/34:
[  233.289965][   T34]  #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  233.294258][   T34] 3 locks held by kworker/1:3/5278:
[  233.295796][   T34]  #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.299047][   T34]  #1: ffffc900035ffba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.302910][   T34]  #2: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  233.306184][   T34] 2 locks held by getty/5638:
[  233.307970][   T34]  #0: ffff888175e8c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  233.311194][   T34]  #1: ffffc900034e82f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  233.314066][   T34] 2 locks held by syz.0.236/6694:
[  233.315473][   T34]  #0: ffff88811341d100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  233.318490][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  233.321707][   T34] 2 locks held by syz.2.240/6708:
[  233.323265][   T34]  #0: ffff88817090e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  233.326184][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  233.329907][   T34] 2 locks held by syz.1.241/6719:
[  233.331860][   T34]  #0: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  233.335584][   T34]  #1: ffff88811341d100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  233.339126][   T34] 2 locks held by syz-executor/6759:
[  233.341197][   T34]  #0: ffff888110797918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  233.344880][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.348289][   T34] 2 locks held by syz-executor/6760:
[  233.349807][   T34]  #0: ffff8881135ee918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  233.352610][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.355441][   T34] 2 locks held by syz-executor/6761:
[  233.357083][   T34]  #0: ffff88811cce8918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  233.359905][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.362855][   T34] 2 locks held by syz-executor/6768:
[  233.364558][   T34]  #0: ffff88811d1be918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  233.367617][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.370332][   T34] 2 locks held by syz-executor/6770:
[  233.371897][   T34]  #0: ffff8881ac143118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  233.374963][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.378017][   T34] 2 locks held by syz-executor/6771:
[  233.379465][   T34]  #0: ffff88811638e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  233.382657][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.385986][   T34] 2 locks held by syz-executor/6773:
[  233.387672][   T34]  #0: ffff88811d9b5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  233.391025][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.394050][   T34] 2 locks held by syz-executor/6777:
[  233.395624][   T34]  #0: ffff8881ac141118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  233.398874][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.402578][   T34] 2 locks held by syz-executor/6778:
[  233.404240][   T34]  #0: ffff8881ac145118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  233.407277][   T34]  #1: ffffffff8f5a9ec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.410303][   T34] 
[  233.411830][   T34] =============================================
[  233.411830][   T34] 
[  233.414262][   T34] NMI backtrace for cpu 1
[  233.414282][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  233.414292][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.414297][   T34] Call Trace:
[  233.414301][   T34]  <TASK>
[  233.414305][   T34]  dump_stack_lvl+0x189/0x250
[  233.414321][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.414331][   T34]  ? __pfx__printk+0x10/0x10
[  233.414345][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  233.414360][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  233.414373][   T34]  ? __pfx__printk+0x10/0x10
[  233.414382][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  233.414396][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  233.414409][   T34]  watchdog+0xf60/0xfa0
[  233.414420][   T34]  ? watchdog+0x1e2/0xfa0
[  233.414430][   T34]  kthread+0x711/0x8a0
[  233.414442][   T34]  ? __pfx_watchdog+0x10/0x10
[  233.414449][   T34]  ? __pfx_kthread+0x10/0x10
[  233.414459][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.414469][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.414478][   T34]  ? __pfx_kthread+0x10/0x10
[  233.414488][   T34]  ret_from_fork+0x4bc/0x870
[  233.414498][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.414508][   T34]  ? __switch_to_asm+0x39/0x70
[  233.414515][   T34]  ? __switch_to_asm+0x33/0x70
[  233.414521][   T34]  ? __pfx_kthread+0x10/0x10
[  233.414530][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.414548][   T34]  </TASK>
[  233.414551][   T34] Sending NMI from CPU 1 to CPUs 0:
[  233.460620][    C0] NMI backtrace for cpu 0
[  233.460633][    C0] CPU: 0 UID: 0 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT(full) 
[  233.460642][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.460648][    C0] RIP: 0010:update_se+0x52/0x5f0
[  233.460662][    C0] Code: e8 03 0f b6 04 18 84 c0 0f 85 ee 03 00 00 83 3d d3 86 ea 0d 00 74 5a 4d 8d b4 24 30 0e 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 18 <84> c0 0f 85 0e 04 00 00 41 83 3e 00 4c 89 e7 74 20 4d 8d b4 24 18
[  233.460669][    C0] RSP: 0018:ffffc900001575b0 EFLAGS: 00000806
[  233.460678][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 1ffff11024247408
[  233.460683][    C0] RDX: 0000000000000009 RSI: ffff8881026ad780 RDI: ffff88812123a000
[  233.460688][    C0] RBP: dffffc0000000000 R08: ffffffff8f7ccb77 R09: 1ffffffff1ef996e
[  233.460693][    C0] R10: dffffc0000000000 R11: fffffbfff1ef996f R12: ffff88812123a000
[  233.460699][    C0] R13: 1ffff11024247447 R14: ffff88812123ae30 R15: ffff88812123a118
[  233.460704][    C0] FS:  0000000000000000(0000) GS:ffff88818eb40000(0000) knlGS:0000000000000000
[  233.460710][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  233.460715][    C0] CR2: 000055a46fdc1598 CR3: 000000011564e000 CR4: 00000000000006f0
[  233.460785][    C0] Call Trace:
[  233.460791][    C0]  <TASK>
[  233.460796][    C0]  ? rcu_qs+0xc4/0x170
[  233.460808][    C0]  update_curr+0x75/0x730
[  233.460820][    C0]  ? __lock_acquire+0xab9/0xd20
[  233.460829][    C0]  dequeue_entities+0x1b3/0x30b0
[  233.460838][    C0]  ? sched_clock+0x3f/0x60
[  233.460849][    C0]  ? sched_clock_cpu+0x74/0x430
[  233.460857][    C0]  ? do_raw_spin_lock+0x121/0x290
[  233.460867][    C0]  ? arch_scale_cpu_capacity+0x18/0xb0
[  233.460878][    C0]  dequeue_task_fair+0x20e/0x790
[  233.460888][    C0]  __schedule+0x5f1/0x4cc0
[  233.460902][    C0]  ? __lock_acquire+0xab9/0xd20
[  233.460909][    C0]  ? __pfx___schedule+0x10/0x10
[  233.460920][    C0]  ? schedule+0x91/0x360
[  233.460928][    C0]  schedule+0x165/0x360
[  233.460936][    C0]  schedule_timeout+0x12b/0x270
[  233.460944][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  233.460951][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  233.460959][    C0]  ? __pfx_process_timeout+0x10/0x10
[  233.460970][    C0]  ? prepare_to_swait_event+0x341/0x380
[  233.460981][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  233.460992][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  233.460999][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  233.461005][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  233.461014][    C0]  ? finish_swait+0xcd/0x1f0
[  233.461023][    C0]  rcu_gp_kthread+0x99/0x390
[  233.461030][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  233.461036][    C0]  ? __kthread_parkme+0x7b/0x200
[  233.461045][    C0]  ? __kthread_parkme+0x1a1/0x200
[  233.461054][    C0]  kthread+0x711/0x8a0
[  233.461063][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  233.461070][    C0]  ? __pfx_kthread+0x10/0x10
[  233.461079][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.461086][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.461095][    C0]  ? __pfx_kthread+0x10/0x10
[  233.461103][    C0]  ret_from_fork+0x4bc/0x870
[  233.461112][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  233.461120][    C0]  ? __switch_to_asm+0x39/0x70
[  233.461127][    C0]  ? __switch_to_asm+0x33/0x70
[  233.461132][    C0]  ? __pfx_kthread+0x10/0x10
[  233.461141][    C0]  ret_from_fork_asm+0x1a/0x30
[  233.461151][    C0]  </TASK>

VM DIAGNOSIS:
04:49:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000003818 RBX=0000000000000035 RCX=ffff888103a83a00 RDX=ffff88816c0b0898
RSI=0000000000000000 RDI=ffff88816c0b08aa RBP=ffffc900000064b0 RSP=ffffc900000062a0
R8 =ffffffff8f7ccb77 R9 =1ffffffff1ef996e R10=dffffc0000000000 R11=fffffbfff1ef996f
R12=00000000ffffffff R13=dffffc0000000000 R14=ffffc90008120000 R15=00000000ffffffca
RIP=ffffffff865f8a91 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe54d639e16 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fe54f9b7d20
XMM02=000000030000000f 0001000000000001 XMM03=010c982008000680 0302f60200028e03
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=0000000100000017 2008000700000001 XMM07=02880302b8c40484 0002840304040002
XMM08=000001380102b810 0010800412080002 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ed5d364003fcf200 RBX=ffffffff81967b87 RCX=ed5d364003fcf200 RDX=0000000000000001
RSI=ffffffff8d70bfda RDI=ffffffff8bbf0460 RBP=ffffc90000197f10 RSP=ffffc90000197de0
R8 =ffff88823c632fdb R9 =1ffff110478c65fb R10=dffffc0000000000 R11=ffffed10478c65fc
R12=ffffffff8f7ccb70 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102c1d2000
RIP=ffffffff8b45fdd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563f10a23600 CR3=000000016eb18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
