last executing test programs:

57.522541284s ago: executing program 2 (id=88):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0}) (async)
socket$inet6(0xa, 0x6, 0x20005)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0xc021}}, 0x20}}, 0x4090)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, 0x0, 0x8008090) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0) (async)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r11, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")

57.519896196s ago: executing program 1 (id=90):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @local}]}, &(0x7f00000002c0)=0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="270e0000000000409efa000000040702001400020074756e6c3000000000000000000500000900030073797a31002da3390dbdc7939161279b83f4c66f2a487331d927de637be531697cf655b9ebcd9ba818754e5744dc8ccc8fe8ba6dcb7eefd9a6f203a17f7c4ac538dc258894a24ec85d6e5e1f437065c634fd2071c0b57373033cff1b82efd545a9382cf66c02113fa71b2ad601dbe955ee702d5d9687e3d3b8dda9f62adbb2bdf4f2bb05d180247b4079a94509e996d0da447e81ea466fcd6dd03150ea40c1ccd9fe441524cc453e6c95"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x24000010}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', <r7=>0x0})
socket$inet6(0xa, 0x1, 0x20005)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYRES64=r2, @ANYRES16=0x0], 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000081)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001100010100"/20, @ANYRES32=r7, @ANYBLOB="00000000214000000800c4ed292560d1"], 0x28}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x8008090)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r11, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
getsockopt$bt_hci(r1, 0x84, 0x2, &(0x7f0000000080)=""/4055, &(0x7f00000010c0)=0xfd7)
setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000040), 0x4)
r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$inet(r12, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}, 0x48811)

57.321376983s ago: executing program 2 (id=91):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000040)="10634a8fba76e12cc084eb445df2e85f6e7174b607b6f0afea2acf0ea38f8520b0044d795d8e5c675c472a9db00ea1a13d1f2faf3cc19279ffd26f7069c2bb2bec26fe23d023a95ef23522cccc0140635a2de2da1a48b60f140650fcc42c6f8d53ebf973ed6db65126d6dba74329083710ac8654ab03986e57cbfb2e8f5552a9841a517fa3a1783cb0daaa5ace402fb14beb6c5458f9ea1671d2fb8f2b522169183cbcbe06a6b2ddd51d8623b221c4f07d03f229a4e951b0195158c2df3dedcb3141d1398d090c6094a5edf770528eaf0690dacdacae90881a3b80c2a680e1e1875bc8ed88b4")
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr, @empty, <r3=>0x0}, &(0x7f0000000200)=0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000280)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@rand_addr, @remote, <r5=>0x0}, &(0x7f0000000300)=0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'rose0\x00', <r6=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'gretap0\x00', <r8=>0x0, 0x7800, 0x40, 0x1ee, 0x1, {{0x6, 0x4, 0x0, 0x39, 0x18, 0x68, 0x0, 0x68, 0x29, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, r9, 0x8, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0xe}}]}, 0x74}}, 0x24000011)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x114, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd358}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa239}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xccb1}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0xa1, 0xc, "adaa51c9244f53f57b90ae6bb2d55b2f4240880b323801643ec380b9a25d9553ae8ae68c05adb98f6104689ededad44ab3fec0e0399885e49c9fcd862853c092bc7d952fe0e8933950a3f6b4279f111302de07563f967fc0609efe2956641d92e713aa8d5630db375bfda07573387dd35811f91b0be20d1c5fc33110181f49844331cdcd3280674d239d626572f69cfa9f231f1a37bec62074a721c2ee"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x15c}, 0x1, 0x0, 0x0, 0x840}, 0x40)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r11, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xae}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8011}, 0x800)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x94, r12, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x94}}, 0x20000020)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000d40)={<r13=>0x0, 0x6}, &(0x7f0000000d80)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000dc0)={0xd, 0x3ff, 0x8000, 0x5, 0x80000001, 0xffff, 0x5aee51dc, 0x6, r13}, &(0x7f0000000e00)=0x20)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x820a61}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, 0x9, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8843}, 0x4004)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r14, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xc4, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xbd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x80}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), r15)
connect$inet(0xffffffffffffffff, &(0x7f0000001140)={0x2, 0x4e20, @multicast2}, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001180)=<r16=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r10, 0x5000943a, &(0x7f00000015c0)={{r15}, r16, 0x8, @unused=[0x8a36, 0x6, 0x1, 0x7], @devid})

57.262354455s ago: executing program 2 (id=92):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001080)={0x34, r2, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x24000010}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
socket$inet6(0xa, 0x6, 0x20005)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x40a1}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, 0x0, 0x8008090)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000)
r11 = socket$packet(0x11, 0x3, 0x300)
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r12, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r13, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x4)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x0, 0x2, 0xfffffffffffffffc, 0x40e, 0xf8a8], 0x3, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8)

57.200924484s ago: executing program 1 (id=93):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x0)
ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f00000004c0)="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") (async)
socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x25dfdbfc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
sendmsg$NFT_BATCH(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYRES16=r0, @ANYRES16=r3, @ANYRES16=r2, @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x44000) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'macsec0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001540)=ANY=[@ANYBLOB="2c000000100001042bbd70000000000000c0d49d58eb18cc9c971729", @ANYRES32=r11, @ANYBLOB="20240000000900000a0001000180c20000000000"], 0x2c}}, 0x0)
r12 = socket(0x8, 0x800, 0x5)
setsockopt$inet6_tcp_buf(r12, 0x6, 0x21, &(0x7f0000001500)="c54253771dec2c21cfd2bb9ff2bc145efd8171bc384d5449dd0fefb2876caba2a86d8f9ab7c5133cc02c37b0d407574aa7d73e94758329112cbe09", 0x3b)
setsockopt$inet_int(r9, 0x0, 0x7, 0x0, 0x0) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x2f, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0xfffffffffffffddf, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@getneigh={0x14, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x0)

57.090907802s ago: executing program 2 (id=95):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="050200000000fcff1f00128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0xba01, 0xfe, 0x4000044}, 0x10)

57.084199659s ago: executing program 1 (id=96):
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/236, &(0x7f0000000540)=0xec) (async)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00', @ANYBLOB="0187000000000000000067000000080001000c0000000c00990009"], 0x28}, 0x1, 0x0, 0x0, 0x44844}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async)
listen(r2, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async)
setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async)
listen(r3, 0x0)
listen(r4, 0x10000) (async)
unshare(0x22020600)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000180)=""/43, 0x2b}], 0x3}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000580)={<r7=>0x0, 0xc4ca861}, &(0x7f0000000640)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000007c0)=r7, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x56, 0xf7, &(0x7f0000000800)="c4586ff6642accb84d64210d2c015b2ef8bb1c0d9ecea34b82447252d5ed2b8d41f314819f6b3df6b613e63c7d843b0e97fbe9b87379e1821499aa0d070afecae9ed55fb3a273de9b2964a3726d55427f215bdd2bb1f", &(0x7f0000000880)=""/247, 0xc5, 0x0, 0x81, 0xa5, &(0x7f0000000980)="aa026c1087c8e168ba4f7781c24f8710531a8d441be288a7b4024e2764813964ae7e18d9bf8e3de5bd9bd8c18d8b2491af311338f46f667b94c2ec3f6de193bc6bf8be4fc2c1be008704557ef18f4ea562d7c65861d843dd534a09e987b78534ea836ba47974308240af9affb122356fb0fbad8c3a1fc9c25f1100026d36786a6c", &(0x7f0000000a40)="40ef2e989c1af3b74e41e1b8c070cce8734a4489c42a798623e95af48884249b4bbe7ebf0ae4d7d1e8190a46dd51f92fdd46e3d9d06ddf12268d292ec5d10602061445f8dc57fa1cf6f93b9030d6d365b47f9d09312a9f7d993216fcbd0851569447c32a3d611b5030cdcdfd0b8f38c29178a00db64684e1ee73b4008ce61ec4f11cef1274a6521391542eb6f47c487cb0961c366f38be6f36c6c63e85ca2db5d0b0755468", 0x2, 0x0, 0x702}, 0x50) (async)
socket$packet(0x11, 0x3, 0x300)

57.082028376s ago: executing program 2 (id=97):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}}, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f0000000340), 0x11000)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYRES64=r7], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
listen(r0, 0x9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYRES32=r8], 0x20}}, 0x0)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000240)=""/41, &(0x7f0000000340)=0x29)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

56.719711547s ago: executing program 1 (id=98):
r0 = socket$inet(0x2, 0x3, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000011c0)={'syztnl1\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x3, 0x3, {{0x1a, 0x4, 0x0, 0x4, 0x68, 0x67, 0x0, 0x7e, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x2d, 0x1, 0x4, [{@remote, 0x81}, {@multicast1, 0x9}, {@multicast1, 0x8}, {@multicast1, 0xe}, {@loopback, 0x5}, {@local, 0x40}, {@local, 0x8}]}, @timestamp_addr={0x44, 0x14, 0xee, 0x1, 0x9, [{@remote, 0x5}, {@multicast2, 0xd}]}, @noop, @noop, @end, @end]}}}}})
pipe(&(0x7f0000001a00)={<r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="da5239557c69000100bdf000fc00"/27], 0x20}}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa9001800300000008c1ee"], 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)

56.138164079s ago: executing program 2 (id=102):
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8481, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[], 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r2, 0x104, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x2000000000000222, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801001b5a000000000000004b66ff4c160000006d000000a50000000500000095", @ANYRESHEX=r0], &(0x7f00000005c0)='syzkaller\x00', 0xf96, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0)
write$nci(0xffffffffffffffff, 0x0, 0x12)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r4, 0x0, 0x4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40004)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012bbd7000fddbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f7f4af87189e08b0ec7aceb54552dc58b6f32c7258fca5dd7b19064c19da958b4e6e646d2e31d3f4d1f95bb71225498617592eff9be7e3a23cd33a33e6f0d4694cf7b724dac5ebf967f11b8d547c67e5558b3bfd9186342fb9949aabaaa9196c4592b388151245"], 0x24}, 0x1, 0x0, 0x0, 0x8844}, 0x24000885)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00'})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)

55.480369806s ago: executing program 1 (id=103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="050200000000fcff1f00128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0xba01, 0x204, 0x4000044}, 0x10)

55.478537088s ago: executing program 1 (id=104):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
readv(r5, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r6, 0x0, 0x0, 0x10000, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e33, @multicast1}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000000)=r7)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)

40.284279777s ago: executing program 32 (id=104):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
readv(r5, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r6, 0x0, 0x0, 0x10000, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e33, @multicast1}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000000)=r7)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)

40.246364831s ago: executing program 33 (id=102):
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8481, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[], 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r2, 0x104, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x2000000000000222, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801001b5a000000000000004b66ff4c160000006d000000a50000000500000095", @ANYRESHEX=r0], &(0x7f00000005c0)='syzkaller\x00', 0xf96, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0)
write$nci(0xffffffffffffffff, 0x0, 0x12)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r4, 0x0, 0x4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40004)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012bbd7000fddbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f7f4af87189e08b0ec7aceb54552dc58b6f32c7258fca5dd7b19064c19da958b4e6e646d2e31d3f4d1f95bb71225498617592eff9be7e3a23cd33a33e6f0d4694cf7b724dac5ebf967f11b8d547c67e5558b3bfd9186342fb9949aabaaa9196c4592b388151245"], 0x24}, 0x1, 0x0, 0x0, 0x8844}, 0x24000885)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00'})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)

16.657905846s ago: executing program 0 (id=316):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x0, 0x4d, &(0x7f0000000080)=""/77, 0x41100, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x8, 0x0, 0x57}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x4, 0x3, 0x8, 0x4}, {0x3, 0x3, 0x4, 0x8}], 0x10, 0xf}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex=<r1=>0x0, 0x33, 0x1, 0x0, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], <r2=>0x0}, 0x40)
r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000440)='memory.pressure\x00', 0x2, 0x0)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback=r3, r0, 0x10, 0x201c, 0x0, @value=r4, @void, @void, @void, r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%pi6   \x00'}, 0x20)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x1a8, 0x0, 0xffffffffffffffff, 0x9dfe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x8, r4}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pS    \x00'}, 0x20)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x10}, 0x18)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0xd8, 0x81, 0x7, 0x4420, 0x1, 0x6, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0xc}, 0x50)
r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0xe, &(0x7f0000000600)=@raw=[@exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x5, 0x17, 0x7, 0x6, 0xffffffffffffffff}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x47, &(0x7f00000006c0)=""/71, 0x40f00, 0x50, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x5, 0x1, 0x3}, 0x10, 0x24e3f, r0, 0x0, &(0x7f0000000b80)=[r7, r8, r9, r10, r11, r12, r13], &(0x7f0000000bc0), 0x10, 0xffff7adf}, 0x94)
r15 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$sock_int(r15, 0x1, 0x1d, &(0x7f0000000cc0)=0x6, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r11)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000d00)={0x0, ""/256, 0x0, <r16=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000000f00)={r16, 0x0, "255e4f8a830ab3b295f42b78f3f18936dc7fea7c215919bb99675cb0cd2925a19994c2fdb9e3d1fae533dd11a3a840ecac90c08dcb1df10b85d91a283e2848c2de2d9ba33f5bd3a13ba42da151ad95742ec89dbb1d2ab9f3d455c26870d51673686fc3a15b2dd15d6f858cc0f30a5d5bf181e14fbad3738cb940ddb557516de2cf7f14f4fb05d8115204c7126777cb26546ba14abfa18fe69ca308b295145d195e3615e9edcb814b2fa8abe755836aabe30bff6f2b3be3bfc6fcfce7a7156287fae700d0721748f4bce5bb20d1700a062d38d01ff5b5d9ae6e60e739f9d710b620f89ebafbd87c9c2dca16b0a9e42cc23155dc72fc4c3642ba5c09c5914a44f2", "9155dc8a892e50a5e197b73ac306fe31dfa3f345995afd654854092788124a68d81576bfc6fc86fe542e4e4d755d8eeab910ca2654c31f5493ab2052b3fc46b5063d9b66dd90d3d4a6345c68c2cf1ec495176b769e7d028c0fb4804dfbe6a029da45bf17fea8e95b4ec828d9421977ec07e8e45508f389ff2018c0d83cb97974eae807b21bccf0bfbebc6f83399f940ecd3f6dbaa262a49bee03c55807a4e55efe3fc6ef9522d3a87bdc1a1427056a38867c2f7b150db0e059b45919c6d0b842771a503e370ec6441b1d9e4e00800cb0b540a83592f5fcbdcee406abdc3f8f60c8e7b5eee8e417dc94bba1b8362505490f2d176ae16c956c2068a28d2c0f40d74fe81107b87116cd65d2ed6feb404cbd6897998e30989b842f846f9deba300744074cb04bcefedf68dae5a82a226792b2b1622b7a58ba8755266841e76e5b5484d9d110ca84ed20861e87f32d92959c65b1e364cd3a761ac4ddd8e7c8e211fa848a0cb1d0b93a97b80013db6297bd01d4b345e7bb06505992977eeca72d7db75a5eabade3b3cd09ba3c958ac84cc79074007d91338f5e618fee6053162663b374d29120ff6478f46ec9b993987d042a07c28f8b9c3ebe53b1951f38e7d96c80c94b34d8cea9b9a71d46311b50b47b107fd4a8ddcf778eb7c9c6d8b801d7f9501abbb18b98897bc0e2446b02cff48e0d9206a779c8a8becc972a918ba166d3bee37dbaf63998a177cc1a4d24d71380eaf038bcbd1ceb56efe757a34746ad3411d2f7fdf8d4a1653bc569f8e76ca23731f6af54d79731cd627f064bf11a39ac433270492bee470a2591e37934650cbc228449ad454c605579799ac2c7213c097ea1c38a8bf7a234c4344051751828c52fe4b3be6657709f8f2cf8928c6c974e3a932c1f4257737645ac878c5642801c1958670110fa25a906347c31b0ca9cb827f45db6eb7a40bc98d4c5b4fc701802bd14fb99fb18df9d39ffa6de8942028f91de63c3ff761ad463304412a36a7f582d0f578085680749aba89943b4e6e85bc9cef04fda9a8e837aa380bf1c420b28e62411976bb1b2d32aa12ea9eb7d1e5a6de19e6590cbe5d3468a68dbd3fc080a6c16b6656c4714a6b70311bbd991d297b86c953c903df95fa891c14c935f57783f65dd7b5728347d322a15c4b6bb559843c0720e4355d8af96be2911cf636a8e3d4613e6e742a7adcc2c1c0c4bf5590a2121056a28dc5ddd2bd69871b18b35f7dff82b6c7d85815a87cc7b3a203f4820193731640a25565ff86a02a0bcaec429f0fbf557899b020acb6c14d973b49dd490f33977db95d7463f14cc6f6f5350392de9d7b28415f05b7176bdbd7dde8212973721bd6ab44367454a03824120ff045445145b7f05c674670abf20b9d0d836b28bab057449251103e83e241c01ae88cfda3c917359e8f0036913e3d532b5beadc8c53286c02ab731e46ab24268713852207129f1cf7a4994db9991b3bd5898d3a75b9f3405f0bbb3fd342d0c9e1cf3078d0562fc17bcb1196f6a795e7b58a792eb176913d093f56f86851884ab39533a4a67ebc6ec14a546b14fa4c326372961aaf10a208ff42f69e66940e35f8643fa69ddb27704233dc48379efc86ebf47dad7e624412efacd2fe1c56296d2668a26c89c090b3bf2b8cf0ea603bae65b175c61452135d0a5379cbed5493e7070c058ea908ec44beb50bfd9e793909b6ccedae17463ba265ab49fb1c822c596a3b2074ae58814eb43d2844ddc9feed86f39a7805466a2f27c1c20fe97156349ecf19f199ccbff99e22b457029feeeb8b9d67d1d91280bb40681c4d91e0063ed4562c39952b05b566d64b6d8b2e40444e81306c5e460901c93ed89d8fe4d0c330585983b27e0f73b5fac645d40f903f4e9e6b207dceffd8a9b3754aa1e86cb59943edba472731ad6a3bea68e30709592f5a744c8aff8b7bccf5b3faf8d2390cb30934018105d514536ab328b9242d2c5f73ea08f967df07063cbdf85c01d3f1fd6feada8533d4c759c3cf735a67c2dfc7aba5a98c6df6ed3eb8976f81065672574885d60582c73ed7e7153a8cb213e877aa1e16e44c95b12191727584ba92ec6934cc7064de1f93b80d2810afbf8621dc6bce938aeffbd6b4b4c3c96ee993eb2f260359cd7edf1b4fd377835c80aca011e8de4c8916851d6d0114011ef89424ee1e7b054d0153dfc1f880872868beef60fdc99f556cd649ecda2aeba5af414f3594c582b11636666910af83909b81dd469b81143309c2a1c4c539492715d0ab27da9b0fea95039e68aae90788df3b9711841f790e70943458dd5a3113072e916cb57c7b5e291c831f65436c93140d0f964043a9bb7446341f0eaa876a8aed0efc8fecbb5e29295ad217d2b39ff1e9887b769d9c501671de07afbb38c4e2b27675fa4f4b2749dbb7389224ab69ce39bae4ed6335e7a88bc681ce857ccf9ae80c4db650bcf20cbdd7e5fddaaa1381407ee0e6e14ad2a8f10e408a0b4567d82dad8a7ed858541aa2bb0241a4ad2aa998f89ca5ed17ace1dbea6ec99f65d7f067b3ad17768854755b44d279ffb27a57024af1dccc924c88a4b98b0af39c0a55c2282a807178f8d6bb8b87151e08b4a39dc743cf0ccbc81b455e272b2098f4e6cf20ac5f8d1be0f30260c3791d3be915015b488fac74216b51440784f77ae78e1e10ed3ebdb5a51326fa0aa34ae660534b7d129d21dbc2672be5c2f703d25063d73d68efc4f627cae8fb2fe6537e96fbca3bac68b069895e02d20d4862749c0ba783cc6931e5c382c3db19f2189f3fcd3be1d0e946d94bb2c4a8aceb8c1d7da2dbecc318efe43abcbcde3034f63fa0fcc6477f38bf4923d113c314a2f636abe6723eedcbc0677ea6704ad10ffd65ac2ab8f4582f2864c54a08e17399b026b4801cef41227bf29a7320b2d184042b18ebd9df5dcb2d5bd4ea267cd644ee836c0d436b7fbd4c31716b1c5cc7b41ba25c90779e94f914fc67f3ac70404ade8df1488ecced4728da49a83794329fae7d19a186e1098bac163266106f62d87a3b337e39ef7ac395f976754b123c870c20e3a57d7e0db7dd13217c5d12d5358ff096a1a38111d81fd2f1f9ce94f6717b936ed2411ed9ea04f8ffe96cadc1692f7b9466a6f11547779aff8dfc6a7df74feb54d7a3b807ece2405658b61cb874232ba66e5ea8974d65a5036736e30ef05820318ab2712d07c2aa5981f1dceddbbb61c98d0bc2d76cf31e734c2be6dbe7569628946feeb58b67117def8477fa8d47c2485fa02deea77a4fada1024173974419f4ed3b01dda557639b2539a1815700d3c500f72696ad881f6791c10c7ab0ee0104ac8b245160081eda62795ce6d2f9837b893d011d6c5168170aaeaeb1e5f808378a412b71db5ed4bb2593a65dd105866d815533f87f13018b8dabe2e9618af59336c82bcb4656e1811a2fd71d30241676a5cda8ff7f2fd5e9dc08e528f43d44943368e7501ea3e8ee3757f5bf160a707a3df3ee7e6605e4eb024a2f26dea4199195c2ef81c1bc990550d203ee7571377a72e891f6c4a188547c53c1c0035a837ef2eb7145b829270c2f4df8db12c2a98408c81a60f1fde975427d21c24159525c93c8b72a87d57d7c751f392e3d5bf2a1cf173b57e6712b9341cb9e69132c8790844070173481c6027149af2d00b4c1bcd0dafe1acd89921f57046ad57796a0cf8c48775e55f7abf07a54d6ae70e79ae877ea78ef12c787c54aad4b6be438a6ad337d953045d016b320eb2247620bad895379824eedcdf948dbd8642a61fc1d714661b2ff26dbe8ebb20a8227d7e5f603d6a147e81778c74c9d76f68b38d380a7ed4462a2137c97c9964d483006812f8c2300562e79f8ed9025cc89946e932411011ffc7a2a7c384bfc72ad08a11ad897cb853cb316bb320e50620e8bfa9555dcf8f0f648d4d8c304b28f28f64ff4f0242173fd49658b1a20dac3436957a5317cc526a10564e9fdd3e1ef3e8af2bceeb80385deffa222d40b79df9c317e29b0ca45881f273a26c7834a5d84128d3ed3f5ef2cd8bd7cd9842d3855579f8520e54c6f410705dc78e3131033f24590d85f2eda4e1fe352746af81c6030bd04060f2f57669f04572345764ac2a8d9b3a681054d616c3dab957eb7b5615fba8b7c009ac4555727a550681f827d59bc2a35c21e696df76088464279adbe853316d8eaa38efbf3a8f0365229c6fa5dc985bb4f0ae5ef61cef47c93a27844fe2d280fb8b9ce4f71318d4eb41323cb2a5a9af501a56735187c8d2c08c5f6df5b0f9297ad0e60f6508309f83c4d3e28803faf110cfaaaa0f07578a9c1a00c97b71c349488248d09c31bed4d7a5277d0835a74c71f6f6fb4a5070b49d5ff1e11161d2e0b4e847bf206a0bc3b2725dd7dcd12a3b5a322b2d67ee4c9c27a43d70b1d876d10bdc5e1607291e6a3e6b47a303169622fa4ee158aa2f903c6ed259031f6339fe235f3f79279a6b9cff0df17568f6d19f7a8df4793be867582b78642e82cbb053a360546bd78a1be7197f001658f5f6e4d39d075c36f24b1376fc023ec52d152cb044e66e1cb4d583337bdce836df61ab0c0628d07ea057077fb9dd6126641022c6983887b20a69f0b2fb48d9a8c6139d5990c33519d5fff869690eb88f68b57b767480619353e577517bad0790632f4889a84afa8de68fcd045dac334b3b8122fb9f93e0c4303f2107357ed54c7be9e6320ac24e4373d14dadea01e0165f2ee98d9218e6b2ecf844395d171cb19b83806a31909b8a51d5bee4a7888ec08c8a8f8929b13a81e53bc8cc72cd3ff016d7c5e35df38dea9d81c01c4c177be9a880f93ab6a15b68f07e3009ace14cfbbe8f08e9b3878d5921bc98eda6abeb4880e97c9c1ed6766bbf9ad3c0601e4c6fbb9f9d93026321e7bf47a439fd0465905147f549aa8127cc94c9c954b80f41532e3a9b2f9df9d85c51ec1c22c541efe4071fc2adf18c82d0b4229b6ee455f7feb19e88331b6e4f4b8cc3b1dc3e516ed5418dd3a705e618b7842af68a5180d444421c119d5d0b5fe7abd8599efc47955ac1c0adf2c297fa251cf9e4efa0bd421fd3974623a9ee8a0db377f85b2eb9ceb82f0cd571deffb9516c48bc9ed016b485cffe7ef3e4056a6e7bcfc8c098bb1ccdaab4fe514030f593caf16983b88a0082bb7dab4f23c3c031e97fd7d2cd3c48a1c35010582c2e8fcfa962596533c92fb180f502f021a1fbabe9a50b9ffb8df2bedeaf43e12172b7f764e57f1b3b8e78cc62bc33aeb74c4e64a84bc2880dd0c024e68c9b69e1186a5af629861f7190177c367432443af32b476cc1289badbb1ea49d2c5dfa5f172162c7eedb2a244abad6c5968a50927ab87b381c4e03d302e8b3af1531f8878745c95763dd30ec44aa54cc365160be522d0af2a7a1f29"})
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001f00))
r17 = socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f80), r5)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r17, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x48, r18, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x34a1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc957}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x82}]}, 0x48}, 0x1, 0x0, 0x0, 0x8008010}, 0x80)
r19 = accept4$x25(0xffffffffffffffff, &(0x7f00000020c0)={0x9, @remote}, &(0x7f0000002100)=0x12, 0x0)
accept4$x25(r19, 0xfffffffffffffffe, &(0x7f0000002140), 0x80000)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000002180)={r14, r9}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000021c0)={0x2, 0x4e21, @multicast1}, 0x10)

16.588193303s ago: executing program 0 (id=317):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x2, 0x0)
setsockopt(r1, 0x107, 0x1, &(0x7f0000000000)="010000001e00060000084d74f9345ca1", 0x10)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xc}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x788d41, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0)
recvmmsg(r0, &(0x7f0000005b40)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000000380)}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x5, &(0x7f0000000440)=""/243, 0xf3}, 0x4}, {{&(0x7f0000003700)=@phonet, 0x80, &(0x7f0000000540)=[{&(0x7f0000003780)=""/147, 0x93}, {&(0x7f0000003840)=""/128, 0x80}], 0x2, &(0x7f00000038c0)=""/130, 0x82}}, {{&(0x7f0000003980)=@phonet, 0x80, &(0x7f0000000600)=[{&(0x7f0000003a00)=""/97, 0x61}], 0x1, &(0x7f0000003a80)=""/199, 0xc7}, 0xfffffff9}, {{&(0x7f0000003b80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003c00)=""/232, 0xe8}, {&(0x7f0000003d00)=""/68, 0x44}, {&(0x7f0000003d80)=""/33, 0x21}, {&(0x7f0000003dc0)=""/17, 0x11}, {&(0x7f0000003e00)=""/99, 0x63}, {&(0x7f0000003e80)=""/1, 0x1}, {&(0x7f0000003ec0)=""/167, 0xa7}, {&(0x7f0000003f80)=""/73, 0x49}], 0x8}, 0x8001}, {{&(0x7f0000004080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004100)=""/128, 0x80}, {&(0x7f0000004180)}, {&(0x7f00000041c0)=""/71, 0x47}, {&(0x7f0000004240)=""/194, 0xc2}, {&(0x7f0000004340)=""/72, 0x48}, {&(0x7f00000043c0)=""/64, 0x40}], 0x6, &(0x7f0000004480)=""/144, 0x90}, 0x3}, {{&(0x7f0000004540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/10, 0xa}, {&(0x7f0000004600)=""/94, 0x5e}, {&(0x7f0000004680)=""/51, 0x33}], 0x3, &(0x7f0000004700)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005700)=""/119, 0x77}, {&(0x7f0000005780)=""/214, 0xd6}, {&(0x7f0000005880)=""/41, 0x29}, {&(0x7f00000058c0)=""/30, 0x1e}, {&(0x7f0000005900)=""/89, 0x59}, {&(0x7f0000005980)=""/32, 0x20}], 0x6, &(0x7f0000005a40)=""/239, 0xef}, 0x4}], 0x7, 0x40010023, &(0x7f0000005d00)={0x0, 0x989680})

16.338308418s ago: executing program 0 (id=318):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}})
unshare(0x6a040000) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
unshare(0x600)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xb, 0x0, 0xff, 0x2, 0x3, 0x8e1, 0x6, 0x1}}) (async, rerun: 32)
r5 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 32)
connect$rxrpc(r5, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24)
r6 = socket$kcm(0x10, 0x2, 0x0) (async)
r7 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000200)='bic\x00', 0x4) (async)
recvfrom(r5, &(0x7f0000000900)=""/246, 0xf6, 0x101, &(0x7f0000000480)=@pppoe={0x18, 0x0, {0x4, @remote, 'veth0_to_batadv\x00'}}, 0x80) (async, rerun: 64)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) (async, rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r2, 0x4}, 0x38)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000031a7ca65be0104ae987d3dd52ae2bc83859d8555d78c005ff6e9a5bbeca1c1cc77a74cdc4c69ffc0359f1d2bc69115f9504f5720510a78db86a38e5abac845d00eb861ad634f3921458e6d3cb4e96115b33a303250f80caa61173f67f07e55b8c65ee21ad4dacad64f271f183bb8e72f2fdda1c12a95983653780cc7682a27fe889c3c2607fcb2de2ac301244ebb33a58205c82dc13b2c740d41c0ae7d951058820d8561bdba37703c6667e5"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)

16.018221199s ago: executing program 0 (id=319):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xfffffffffffffe95, &(0x7f0000000200)=[@in={0x2, 0x4e21, @multicast2}]}, &(0x7f00000001c0)=0x3)
syz_genetlink_get_family_id$smc(&(0x7f0000001100), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f9fffd0bebeee07d04008345d48c6ec7f0d8", @ANYBLOB="3b6a34182e69a23c78e71c8e0670c4d605cc7a1c0945dc3ae81726ca8aef5c5c0e6f258901acd58411458a71a7368d2f8d7ce407cdf35edf19d8ed2bb658c0c5d7b5eb7f169acb78e1849eb967231b885316ced15251be11d2d17030e8f61b5d35cb867ea24be4f59e7a7cef178dbfb5582aad9d7b026811cf33ae4dd5fed750de5b2b5d1d2a20dd92d8948c7b889972c1b7609ef72dc093163580d9d758651aaff3138ead543feeeabbb1db34be62fe3b40f2f290cdf350d2bb0413eb", @ANYRESOCT=r0], 0x34}, 0x1, 0x40030000000000, 0x0, 0x24000010}, 0x20000810)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netpci0\x00'})
socket$inet6(0xa, 0x6, 0x20005)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x8000)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, 0x0, 0x8008090)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4000)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001140)=""/4068, &(0x7f00000010c0)=0xfe4)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000002c0), 0x4)

15.937256495s ago: executing program 0 (id=320):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r6=>0x0})
socket$inet6(0xa, 0x6, 0x20005)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001100010100"/20, @ANYRES32=r6, @ANYRES8=r7], 0x28}}, 0x20000001)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, 0x0, 0x8008090)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x20404})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_int(r10, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r10, 0x0, 0x0, 0x2, 0x0, 0x60)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r11, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

15.076734028s ago: executing program 0 (id=321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b0000002af9b495cdbb8c927e7d3085778e5ff3445f1b09be", 0x45)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000700ffff140007800800124000000005050015000900000005000100f6ffff38050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c696661636500"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000700ffff140007800800124000000005050015000900000005000100f6ffff38050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c696661636500"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000700)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000500)=<r8=>0x0)
sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf250600000008000d000400000008000100", @ANYRES32=r7, @ANYBLOB="08000d008000000008000e000800000008000100", @ANYRES32=r8, @ANYBLOB="bdf51307a285dff1922665c08867f7cd2d50bd8a6070d075bfe6ba8bb857d494cdf99b88ba10cee6cfd5aa5968fad13bc05c7a48000028ad39fe7a63151254bf6641f307687daa932762c7582205259aee36c7ab52bdc7fdd9f42eff64929fbfaef6e721e8cb76dc25dd19f2dfaeaa6aae9a0dbdcd225bd1e6787d9092246b3902ad073ffe8ffa617cf552"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x68}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x68}}, 0x0)
bind$bt_sco(r3, &(0x7f00000001c0), 0x37)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0xf)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r12)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001200000000040500040000000000050005000a000000050001010800000014000300686173683a69702c706f72742c6970000900020073797a3100000000"], 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x4000) (async)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001200000000040500040000000000050005000a000000050001010800000014000300686173683a69702c706f72742c6970000900020073797a3100000000"], 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x4000)
sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000580)={0x0, 0xff01, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[], 0x184}}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) (async)
r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r14}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r14}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000100)="00fa664e1d05dbc34a538e052b939057ca311d55c264d4a1f008d3a3a9c98970c9813d19cbcdd67c126e3231bff6609ed5ce8611658619152e9863a308b36eb9365a67dbff33a9d193db74023e16b47cd86956911cfff066b782ade8fbe7ce740dc15d6d5d7a531d0a559b3a60f29991f403d72c0fe469d1b86fed7199a61a1103cccecab38fcfcec9490114e66ac13e6a47445149e73fc0aa10293ff2e67f21aad7efaa09c1d55622bf64", 0xab, 0x40000, &(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x80)
ioctl$sock_inet_udp_SIOCOUTQ(r14, 0x5411, &(0x7f0000000680)) (async)
ioctl$sock_inet_udp_SIOCOUTQ(r14, 0x5411, &(0x7f0000000680))

0s ago: executing program 34 (id=321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b0000002af9b495cdbb8c927e7d3085778e5ff3445f1b09be", 0x45)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000700ffff140007800800124000000005050015000900000005000100f6ffff38050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c696661636500"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000700ffff140007800800124000000005050015000900000005000100f6ffff38050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c696661636500"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000700)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000500)=<r8=>0x0)
sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf250600000008000d000400000008000100", @ANYRES32=r7, @ANYBLOB="08000d008000000008000e000800000008000100", @ANYRES32=r8, @ANYBLOB="bdf51307a285dff1922665c08867f7cd2d50bd8a6070d075bfe6ba8bb857d494cdf99b88ba10cee6cfd5aa5968fad13bc05c7a48000028ad39fe7a63151254bf6641f307687daa932762c7582205259aee36c7ab52bdc7fdd9f42eff64929fbfaef6e721e8cb76dc25dd19f2dfaeaa6aae9a0dbdcd225bd1e6787d9092246b3902ad073ffe8ffa617cf552"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x68}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x68}}, 0x0)
bind$bt_sco(r3, &(0x7f00000001c0), 0x37)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0xf)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r12)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001200000000040500040000000000050005000a000000050001010800000014000300686173683a69702c706f72742c6970000900020073797a3100000000"], 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x4000) (async)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001200000000040500040000000000050005000a000000050001010800000014000300686173683a69702c706f72742c6970000900020073797a3100000000"], 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x4000)
sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000580)={0x0, 0xff01, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[], 0x184}}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) (async)
r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r14}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r14}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000100)="00fa664e1d05dbc34a538e052b939057ca311d55c264d4a1f008d3a3a9c98970c9813d19cbcdd67c126e3231bff6609ed5ce8611658619152e9863a308b36eb9365a67dbff33a9d193db74023e16b47cd86956911cfff066b782ade8fbe7ce740dc15d6d5d7a531d0a559b3a60f29991f403d72c0fe469d1b86fed7199a61a1103cccecab38fcfcec9490114e66ac13e6a47445149e73fc0aa10293ff2e67f21aad7efaa09c1d55622bf64", 0xab, 0x40000, &(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x80)
ioctl$sock_inet_udp_SIOCOUTQ(r14, 0x5411, &(0x7f0000000680)) (async)
ioctl$sock_inet_udp_SIOCOUTQ(r14, 0x5411, &(0x7f0000000680))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31813' (ED25519) to the list of known hosts.
syzkaller login: [   56.934098][ T5807] cgroup: Unknown subsys name 'net'
[   57.051429][ T5807] cgroup: Unknown subsys name 'cpuset'
[   57.058529][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.187581][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.568404][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.572146][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.574742][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.578517][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.581404][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.609997][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.613013][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.615775][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.619248][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.622465][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.650737][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.653961][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.657654][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.661355][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.664428][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.895312][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   65.058225][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.061126][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.063555][ T5849] bridge_slave_0: entered allmulticast mode
[   65.066760][ T5849] bridge_slave_0: entered promiscuous mode
[   65.071902][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.074466][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.078456][ T5849] bridge_slave_1: entered allmulticast mode
[   65.081823][ T5849] bridge_slave_1: entered promiscuous mode
[   65.137530][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   65.172614][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.185577][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.244582][ T5849] team0: Port device team_slave_0 added
[   65.248423][ T5849] team0: Port device team_slave_1 added
[   65.269006][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   65.321311][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.323727][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.332613][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.339162][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.341369][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.350149][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.362521][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.365120][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.367981][ T5856] bridge_slave_0: entered allmulticast mode
[   65.371043][ T5856] bridge_slave_0: entered promiscuous mode
[   65.391117][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.393456][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.397291][ T5856] bridge_slave_1: entered allmulticast mode
[   65.400215][ T5856] bridge_slave_1: entered promiscuous mode
[   65.454527][ T5849] hsr_slave_0: entered promiscuous mode
[   65.459091][ T5849] hsr_slave_1: entered promiscuous mode
[   65.494422][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.497667][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.500910][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.503328][ T5853] bridge_slave_0: entered allmulticast mode
[   65.506679][ T5853] bridge_slave_0: entered promiscuous mode
[   65.525610][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.537573][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.540225][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.542650][ T5853] bridge_slave_1: entered allmulticast mode
[   65.545594][ T5853] bridge_slave_1: entered promiscuous mode
[   65.583335][ T5856] team0: Port device team_slave_0 added
[   65.601536][ T5856] team0: Port device team_slave_1 added
[   65.634247][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.639455][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.686360][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.689200][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.699490][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.710849][ T5853] team0: Port device team_slave_0 added
[   65.714104][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.717460][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.729905][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.741095][ T5853] team0: Port device team_slave_1 added
[   65.802551][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.805394][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.816384][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.828917][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.831778][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.842130][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.942200][ T5856] hsr_slave_0: entered promiscuous mode
[   65.945153][ T5856] hsr_slave_1: entered promiscuous mode
[   65.950563][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   65.952942][ T5856] Cannot create hsr debugfs directory
[   65.961398][ T5853] hsr_slave_0: entered promiscuous mode
[   65.963765][ T5853] hsr_slave_1: entered promiscuous mode
[   65.966008][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   65.968095][ T5853] Cannot create hsr debugfs directory
[   66.073498][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.104566][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.121500][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.156457][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.295612][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.303691][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.317251][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.323231][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.360027][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.369980][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.378805][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.383674][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.468502][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.498585][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.517299][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   66.534838][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   66.542604][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.545504][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.553445][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.564466][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.567157][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.581208][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.583988][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.589212][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.591393][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.621282][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   66.647471][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.650220][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.656519][   T54] Bluetooth: hci0: command tx timeout
[   66.656524][ T5852] Bluetooth: hci1: command tx timeout
[   66.683675][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.686498][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.736303][   T54] Bluetooth: hci2: command tx timeout
[   66.773837][ T5856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.779262][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.872462][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.920720][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.970468][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.002758][ T5849] veth0_vlan: entered promiscuous mode
[   67.025198][ T5853] veth0_vlan: entered promiscuous mode
[   67.049540][ T5849] veth1_vlan: entered promiscuous mode
[   67.060759][ T5853] veth1_vlan: entered promiscuous mode
[   67.065288][ T5856] veth0_vlan: entered promiscuous mode
[   67.089503][ T5856] veth1_vlan: entered promiscuous mode
[   67.118269][ T5849] veth0_macvtap: entered promiscuous mode
[   67.121941][ T5853] veth0_macvtap: entered promiscuous mode
[   67.128123][ T5849] veth1_macvtap: entered promiscuous mode
[   67.138415][ T5853] veth1_macvtap: entered promiscuous mode
[   67.154829][ T5856] veth0_macvtap: entered promiscuous mode
[   67.176132][ T5856] veth1_macvtap: entered promiscuous mode
[   67.181243][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.184917][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.195456][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.201040][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.211722][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.225096][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.229730][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.247038][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.254183][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.263113][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.267076][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.278352][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.282229][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.285024][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.305040][ T5877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.340974][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.344404][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.364460][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.421219][ T3597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.424537][ T3597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.474229][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.478198][ T3597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.478584][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.483663][ T3597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.512064][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.514787][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.554639][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.559920][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.570545][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.588663][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.594383][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.710890][ T5914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.783805][ T5914] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.790600][ T5914] bond0: (slave bond1): Enslaving as an active interface with an up link
[   67.985077][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4'.
[   68.019194][ T5926] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.033180][ T5926] bond_slave_0: entered promiscuous mode
[   68.035076][ T5926] bond_slave_1: entered promiscuous mode
[   68.039035][ T5926] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   68.043266][ T5926] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   68.050077][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   68.065498][ T5929] Bluetooth: MGMT ver 1.23
[   68.070119][ T5929] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   68.082068][ T5929] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6'.
[   68.218874][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.225418][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.230478][ T5929] bond0 (unregistering): Released all slaves
[   68.257323][ T5932] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   68.263679][ T5932] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7'.
[   68.275060][ T5932] bond_slave_0: left promiscuous mode
[   68.278239][ T5932] bond_slave_1: left promiscuous mode
[   68.389115][ T5932] bond1: (slave macvlan2): Removing an active aggregator
[   68.393372][ T5932] bond1: (slave macvlan2): Releasing backup interface
[   68.405587][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.413452][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.420558][ T5932] bond0 (unregistering): Released all slaves
[   68.736160][   T54] Bluetooth: hci0: command tx timeout
[   68.738497][   T54] Bluetooth: hci1: command tx timeout
[   68.816019][   T54] Bluetooth: hci2: command tx timeout
[   68.906286][ T5938] Zero length message leads to an empty skb
[   68.910505][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.910900][ T5938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.917105][ T5937] netlink: 'syz.1.8': attribute type 1 has an invalid length.
[   68.972795][ T5940] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.979917][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   69.292298][ T5950] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   69.292346][ T5951] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11'.
[   69.413187][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   69.462443][ T5954] netlink: 'syz.0.12': attribute type 1 has an invalid length.
[   69.554080][ T5970] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   69.762043][ T5980] vlan0: entered promiscuous mode
[   69.781637][ T5980] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   69.927076][ T5982] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   70.113521][ T5992] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   70.245121][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.248055][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.320360][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.327481][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.364758][ T6005] netlink: 'syz.2.25': attribute type 6 has an invalid length.
[   70.408729][ T5741] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.412188][ T5741] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.422950][ T5741] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.431426][ T5741] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.521039][ T6014] netlink: 'syz.2.27': attribute type 10 has an invalid length.
[   70.526832][ T6013] bond0: entered promiscuous mode
[   70.528863][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.587222][ T6013] bond0 (unregistering): Released all slaves
[   70.702951][ T6016] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET)
[   70.816426][   T54] Bluetooth: hci1: command tx timeout
[   70.816452][ T5852] Bluetooth: hci0: command tx timeout
[   70.906098][ T5852] Bluetooth: hci2: command tx timeout
[   71.039528][ T6047] netlink: 'syz.1.34': attribute type 1 has an invalid length.
[   71.189925][ T6055] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   71.192453][ T6055] netlink: 'syz.2.36': attribute type 11 has an invalid length.
[   71.197258][ T6055] warning: `syz.2.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.220705][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.222999][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.350731][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.357078][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.362795][ T6060] bond0 (unregistering): (slave bond1): Releasing backup interface
[   71.369355][ T6060] bond0 (unregistering): Released all slaves
[   71.546794][ T6072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.611345][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.636833][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.644327][ T6076] netlink: 'syz.1.42': attribute type 1 has an invalid length.
[   71.678121][ T6077] bond0 (unregistering): Released all slaves
[   71.702625][ T6076] bond0 (unregistering): Released all slaves
[   72.212947][ T6127] IPv6: sit1: Disabled Multicast RS
[   72.510520][ T6146] netlink: 'syz.1.57': attribute type 1 has an invalid length.
[   72.750361][ T6154] netlink: 'syz.2.60': attribute type 3 has an invalid length.
[   72.896056][ T5852] Bluetooth: hci1: command tx timeout
[   72.898442][ T5852] Bluetooth: hci0: command tx timeout
[   72.977319][   T54] Bluetooth: hci2: command tx timeout
[   73.042851][ T6169] pim6reg: entered allmulticast mode
[   73.101066][ T6169] : renamed from wg2 (while UP)
[   73.105190][ T6169] pim6reg: left allmulticast mode
[   73.176359][ T6172] team0: Port device team_slave_0 removed
[   73.304559][ T6178] __nla_validate_parse: 22 callbacks suppressed
[   73.304574][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'.
[   73.326719][ T6178] team0: Device ipip0 is of different type
[   73.376126][ T6185] tipc: Started in network mode
[   73.378044][ T6187] netlink: 172 bytes leftover after parsing attributes in process `syz.1.68'.
[   73.383710][ T6185] tipc: Node identity 0e5689ac492a, cluster identity 4711
[   73.391245][ T6185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.409191][ T6185] syzkaller0: entered promiscuous mode
[   73.411510][ T6185] syzkaller0: entered allmulticast mode
[   73.470625][ T6178] tipc: Resetting bearer <eth:syzkaller0>
[   73.487330][ T6177] tipc: Resetting bearer <eth:syzkaller0>
[   73.508663][ T6177] tipc: Disabling bearer <eth:syzkaller0>
[   73.538280][ T6195] bond0 (unregistering): Released all slaves
[   73.551923][ T6197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.555361][ T6197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.561005][ T6197] hsr_slave_0: left promiscuous mode
[   73.563281][ T6197] hsr_slave_1: left promiscuous mode
[   73.779378][ T6204] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   73.783269][ T6204] netlink: 14 bytes leftover after parsing attributes in process `syz.2.73'.
[   73.927188][ T6206] validate_nla: 2 callbacks suppressed
[   73.927215][ T6206] netlink: 'syz.2.75': attribute type 1 has an invalid length.
[   74.014767][ T6209] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   74.049712][ T6206] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface
[   74.063429][ T6206] bond0 (unregistering): Released all slaves
[   74.337198][ T6220] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   74.505379][ T6232] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   74.512271][ T6232] netlink: 14 bytes leftover after parsing attributes in process `syz.1.80'.
[   74.580222][ T6241] netlink: 48 bytes leftover after parsing attributes in process `syz.0.81'.
[   74.723948][ T6248] netlink: 'syz.2.84': attribute type 1 has an invalid length.
[   74.753028][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.758522][ T6255] netlink: 'syz.0.83': attribute type 7 has an invalid length.
[   74.761609][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'.
[   74.782499][ T6255] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.83'.
[   74.793884][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'.
[   74.802124][ T6254] bond0: entered promiscuous mode
[   74.804211][ T6254] bond0: entered allmulticast mode
[   74.806914][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.870647][ T6254] bond0 (unregistering): Released all slaves
[   75.096979][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'.
[   75.124974][ T6269] bond0 (unregistering): Released all slaves
[   75.135853][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.139388][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.167544][ T6281] bond0: entered promiscuous mode
[   75.169395][ T6281] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.270592][ T6281] bond0 (unregistering): Released all slaves
[   75.491403][ T6308] syz.1.96: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   75.499040][ T6308] CPU: 1 UID: 0 PID: 6308 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT(full) 
[   75.499056][ T6308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.499064][ T6308] Call Trace:
[   75.499069][ T6308]  <TASK>
[   75.499075][ T6308]  dump_stack_lvl+0x189/0x250
[   75.499100][ T6308]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.499115][ T6308]  ? __pfx__printk+0x10/0x10
[   75.499130][ T6308]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   75.499146][ T6308]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   75.499163][ T6308]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   75.499176][ T6308]  warn_alloc+0x214/0x310
[   75.499200][ T6308]  ? __pfx_warn_alloc+0x10/0x10
[   75.499244][ T6308]  ? __get_vm_area_node+0x28f/0x300
[   75.499261][ T6308]  ? xskq_create+0xbf/0x170
[   75.499281][ T6308]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   75.499314][ T6308]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   75.499331][ T6308]  ? __kasan_kmalloc+0x93/0xb0
[   75.499347][ T6308]  vmalloc_user_noprof+0xad/0xf0
[   75.499368][ T6308]  ? xskq_create+0xbf/0x170
[   75.499382][ T6308]  xskq_create+0xbf/0x170
[   75.499396][ T6308]  xsk_init_queue+0xb0/0x110
[   75.499410][ T6308]  xsk_setsockopt+0x57b/0x8d0
[   75.499424][ T6308]  ? __pfx_xsk_setsockopt+0x10/0x10
[   75.499436][ T6308]  ? __pfx_aa_sk_perm+0x10/0x10
[   75.499453][ T6308]  ? __fget_files+0x2a/0x420
[   75.499462][ T6308]  ? aa_sock_opt_perm+0xff/0x1b0
[   75.499473][ T6308]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   75.499485][ T6308]  ? __pfx_xsk_setsockopt+0x10/0x10
[   75.499497][ T6308]  do_sock_setsockopt+0x17c/0x1b0
[   75.499512][ T6308]  __x64_sys_setsockopt+0x13f/0x1b0
[   75.499526][ T6308]  do_syscall_64+0xfa/0x3b0
[   75.499536][ T6308]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.499551][ T6308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.499561][ T6308]  ? exc_page_fault+0x9f/0xf0
[   75.499575][ T6308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.499585][ T6308] RIP: 0033:0x7f62e2f8eba9
[   75.499596][ T6308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.499604][ T6308] RSP: 002b:00007f62e3d99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   75.499616][ T6308] RAX: ffffffffffffffda RBX: 00007f62e31d5fa0 RCX: 00007f62e2f8eba9
[   75.499623][ T6308] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[   75.499628][ T6308] RBP: 00007f62e3011e19 R08: 0000000000000004 R09: 0000000000000000
[   75.499634][ T6308] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   75.499640][ T6308] R13: 00007f62e31d6038 R14: 00007f62e31d5fa0 R15: 00007ffc28c85bc8
[   75.499657][ T6308]  </TASK>
[   75.499661][ T6308] Mem-Info:
[   75.607252][ T6308] active_anon:5358 inactive_anon:0 isolated_anon:0
[   75.607252][ T6308]  active_file:1127 inactive_file:38242 isolated_file:0
[   75.607252][ T6308]  unevictable:1768 dirty:1512 writeback:0
[   75.607252][ T6308]  slab_reclaimable:9488 slab_unreclaimable:50812
[   75.607252][ T6308]  mapped:18183 shmem:2435 pagetables:918
[   75.607252][ T6308]  sec_pagetables:0 bounce:0
[   75.607252][ T6308]  kernel_misc_reclaimable:0
[   75.607252][ T6308]  free:301609 free_pcp:20569 free_cma:0
[   75.627497][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'.
[   75.627563][ T6308] Node 0 active_anon:13928kB inactive_anon:0kB active_file:3448kB inactive_file:148520kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38016kB dirty:5596kB writeback:0kB shmem:4660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4524kB pagetables:1820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   75.643040][ T6308] Node 1 active_anon:7504kB inactive_anon:0kB active_file:1060kB inactive_file:4448kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34716kB dirty:452kB writeback:0kB shmem:5080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6876kB pagetables:1852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   75.653920][ T6308] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   75.664568][ T6308] lowmem_reserve[]: 0 811 811 811 811
[   75.666844][ T6308] Node 0 DMA32 free:283308kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13928kB inactive_anon:0kB active_file:3448kB inactive_file:148520kB unevictable:3536kB writepending:5596kB present:1556484kB managed:830904kB mlocked:0kB bounce:0kB free_pcp:34516kB local_pcp:18324kB free_cma:0kB
[   75.680701][ T6308] lowmem_reserve[]: 0 0 0 0 0
[   75.682632][ T6308] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   75.693660][ T6308] lowmem_reserve[]: 0 0 854 854 854
[   75.697199][ T6308] Node 1 Normal free:449308kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7492kB inactive_anon:0kB active_file:1060kB inactive_file:4448kB unevictable:3536kB writepending:452kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:47608kB local_pcp:32272kB free_cma:0kB
[   75.708648][ T6308] lowmem_reserve[]: 0 0 0 0 0
[   75.710628][ T6308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   75.716343][ T6308] Node 0 DMA32: 917*4kB (UME) 320*8kB (UM) 198*16kB (UME) 37*32kB (UME) 28*64kB (UME) 27*128kB (UM) 13*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 3*2048kB (ME) 61*4096kB (M) = 283348kB
[   75.723416][ T6308] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   75.730782][ T6308] Node 1 Normal: 251*4kB (UME) 484*8kB (UM) 263*16kB (UM) 47*32kB (ME) 27*64kB (UM) 20*128kB (UME) 7*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 3*2048kB (UME) 103*4096kB (M) = 449308kB
[   75.738275][ T6308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   75.742183][ T6308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   75.746126][ T6308] 41806 total pagecache pages
[   75.748025][ T6308] 0 pages in swap cache
[   75.749623][ T6308] Free swap  = 124996kB
[   75.751407][ T6308] Total swap = 124996kB
[   75.753118][ T6308] 786301 pages RAM
[   75.754643][ T6308] 0 pages HighMem/MovableOnly
[   75.757227][ T6308] 241343 pages reserved
[   75.759016][ T6308] 0 pages cma reserved
[   75.862185][ T6316] tipc: Started in network mode
[   75.864103][ T6316] tipc: Node identity 6efacdd8286f, cluster identity 4711
[   75.867252][ T6316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.902572][ T6316] syzkaller0: entered promiscuous mode
[   75.904793][ T6316] syzkaller0: entered allmulticast mode
[   75.908171][ T6316] tipc: Resetting bearer <eth:syzkaller0>
[   75.916352][ T6315] tipc: Resetting bearer <eth:syzkaller0>
[   76.816745][ T6328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.898115][ T5878] tipc: Node number set to 1184222680
[   76.961729][ T6315] tipc: Disabling bearer <eth:syzkaller0>
[   76.970772][ T6331] xfrm0: entered promiscuous mode
[   76.972504][ T6331] xfrm0: entered allmulticast mode
[   77.805446][ T6377] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[   77.815253][ T6377] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   77.917076][ T6348] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   77.923351][ T6348] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   77.934822][ T6348] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   77.940260][ T6348] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   77.955260][ T6348] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   77.960186][ T6348] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   79.224024][ T6421] __nla_validate_parse: 3 callbacks suppressed
[   79.224040][ T6421] netlink: 220 bytes leftover after parsing attributes in process `syz.0.114'.
[   79.232102][ T6421] netlink: 220 bytes leftover after parsing attributes in process `syz.0.114'.
[   79.284774][ T6421] netlink: 'syz.0.114': attribute type 9 has an invalid length.
[   79.294699][ T6421] IPVS: set_ctl: invalid protocol: 34 224.0.0.2:20001
[   79.399416][ T6425] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   79.403953][ T6425] netlink: 14 bytes leftover after parsing attributes in process `syz.0.115'.
[   79.507231][ T6427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.116'.
[   79.600247][ T6433] netlink: 'syz.0.117': attribute type 1 has an invalid length.
[   80.544305][ T6438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.118'.
[   80.582314][ T6442] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   80.620691][ T6442] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   80.627243][ T5877] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   80.627687][ T6442] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.701239][ T6442] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   80.705520][ T6442] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[   80.712396][ T6442] bond2 (unregistering): Released all slaves
[   80.838249][ T6445] netlink: 'syz.0.120': attribute type 20 has an invalid length.
[   80.880972][ T6447] netlink: 'syz.0.121': attribute type 1 has an invalid length.
[   80.898091][ T6447] bond2 (unregistering): Released all slaves
[   81.000927][ T6451] bond2: entered promiscuous mode
[   81.003172][ T6451] bond2: entered allmulticast mode
[   81.005198][ T6451] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.062761][ T6451] bond2 (unregistering): Released all slaves
[   81.863098][ T6456] RDS: rds_bind could not find a transport for ::ffff:172.30.2.1, load rds_tcp or rds_rdma?
[   81.866741][ T6457] RDS: rds_bind could not find a transport for ::ffff:172.30.2.1, load rds_tcp or rds_rdma?
[   81.870782][ T6456] netlink: 14 bytes leftover after parsing attributes in process `syz.0.123'.
[   81.918893][ T6459] netlink: 1 bytes leftover after parsing attributes in process `syz.0.124'.
[   82.213565][ T6476] bond2: entered promiscuous mode
[   82.215555][ T6476] bond2: entered allmulticast mode
[   82.219202][ T6476] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.289575][ T6476] bond2 (unregistering): Released all slaves
[   82.403939][ T6482] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.420736][ T6482] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   82.427529][ T6482] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[   82.433473][ T6482] bridge_slave_0: left allmulticast mode
[   82.437141][ T6482] bridge_slave_0: left promiscuous mode
[   82.439577][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.444955][ T6482] bridge_slave_1: left allmulticast mode
[   82.447444][ T6482] bridge_slave_1: left promiscuous mode
[   82.449818][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.459216][ T6482] team0: Port device team_slave_1 removed
[   82.463431][ T6482] bond1: (slave macvlan2): Releasing backup interface
[   82.856880][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'.
[   82.882876][ T6488] bond2: entered promiscuous mode
[   82.885429][ T6488] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.953028][ T6488] bond2 (unregistering): Released all slaves
[   83.547589][ T6497] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   84.422941][ T6499] netlink: 'syz.0.131': attribute type 11 has an invalid length.
[   84.425379][ T6499] netlink: 140 bytes leftover after parsing attributes in process `syz.0.131'.
[   84.447102][ T6499] bond0 (unregistering): Released all slaves
[   84.629257][ T6504] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   84.633585][ T6504] netlink: 14 bytes leftover after parsing attributes in process `syz.0.133'.
[   84.780523][ T6510] netlink: 'syz.0.135': attribute type 10 has an invalid length.
[   84.789300][ T6510] team0: Port device dummy0 added
[   84.792394][ T6510] netlink: 'syz.0.135': attribute type 10 has an invalid length.
[   84.796702][ T6510] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   84.808973][ T6510] team0: Failed to send options change via netlink (err -105)
[   84.812227][ T6510] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   84.816815][ T6510] team0: Port device dummy0 removed
[   84.863020][ T5854] IPVS: starting estimator thread 0...
[   84.868432][ T6512] netlink: 'syz.0.136': attribute type 1 has an invalid length.
[   84.977160][ T6513] IPVS: using max 41 ests per chain, 98400 per kthread
[   85.009682][ T6517] netlink: 'syz.0.137': attribute type 1 has an invalid length.
[   85.038594][ T6517] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.108600][ T6517] bond2 (unregistering): Released all slaves
[   85.338068][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'.
[   85.353669][ T6531] bond2: entered promiscuous mode
[   85.356385][ T6531] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.406808][ T6531] bond2 (unregistering): Released all slaves
[   85.498613][ T6535] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   85.723733][ T6548] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   85.731657][ T6548] netlink: 14 bytes leftover after parsing attributes in process `syz.0.144'.
[   85.790538][ T6550] bond0 (unregistering): Released all slaves
[   85.961496][ T6557] netlink: 'syz.0.147': attribute type 1 has an invalid length.
[   85.984740][ T6557] bond0: (slave gretap2): making interface the new active one
[   85.989320][ T6557] bond0: (slave gretap2): Enslaving as an active interface with an up link
[   86.000592][ T6558] bond0: (slave gretap3): Enslaving as an active interface with an up link
[   86.009328][ T6557] syz.0.147 (6557) used greatest stack depth: 19944 bytes left
[   86.065021][ T6562] netlink: 'syz.0.148': attribute type 1 has an invalid length.
[   86.084619][ T6562] netlink: 52 bytes leftover after parsing attributes in process `syz.0.148'.
[   86.196454][ T6562] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.232495][ T6567] netlink: 'syz.0.149': attribute type 1 has an invalid length.
[   86.264724][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'.
[   86.272219][ T6567] bond4 (unregistering): Released all slaves
[   86.403678][ T6572] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   86.408134][ T6572] netlink: 14 bytes leftover after parsing attributes in process `syz.0.151'.
[   86.451538][ T6575] netlink: 52 bytes leftover after parsing attributes in process `syz.0.152'.
[   86.471328][ T6575] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   86.475339][ T6575] netlink: 14 bytes leftover after parsing attributes in process `syz.0.152'.
[   86.562744][ T6578] vxlan0: entered promiscuous mode
[   86.564995][ T6578] vxlan0: entered allmulticast mode
[   86.569389][ T5877] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.572792][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.578286][ T5877] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.581856][ T5877] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.591581][  T793] cfg80211: failed to load regulatory.db
[   86.694976][ T6582] netlink: 'syz.0.154': attribute type 1 has an invalid length.
[   87.080447][ T6595] bond0 (unregistering): (slave gretap2): Releasing active interface
[   87.087791][ T6595] bond0 (unregistering): (slave gretap3): Releasing active interface
[   87.093778][ T6595] bond0 (unregistering): Released all slaves
[   87.396724][ T6603] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.441779][ T6603] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.481343][ T6603] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.520807][ T6603] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   87.599021][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.608549][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.618962][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.629705][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.865216][ T6625] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   89.118937][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'.
[   89.474930][ T6656] validate_nla: 4 callbacks suppressed
[   89.474948][ T6656] netlink: 'syz.0.171': attribute type 1 has an invalid length.
[   89.534355][ T6658] netlink: 'syz.0.172': attribute type 1 has an invalid length.
[   89.557774][ T6658] bond4 (unregistering): Released all slaves
[   89.653871][ T6661] __nla_validate_parse: 1 callbacks suppressed
[   89.653890][ T6661] netlink: 44 bytes leftover after parsing attributes in process `syz.0.173'.
[   89.870367][ T6672] netlink: 'syz.0.176': attribute type 1 has an invalid length.
[   90.086983][ T6675] macvtap1: entered allmulticast mode
[   90.089142][ T6675] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[   90.093511][ T6675] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[   90.200867][ T6681] netlink: 'syz.0.178': attribute type 1 has an invalid length.
[   90.224684][ T6681] 8021q: adding VLAN 0 to HW filter on device bond5
[   90.236897][ T6681] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.248495][ T6681] bond5: (slave batadv0): making interface the new active one
[   90.257001][ T6681] bond5: (slave batadv0): Enslaving as an active interface with an up link
[   90.305248][ T6684] bond0 (unregistering): Released all slaves
[   90.441427][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'.
[   90.512058][ T6690] netlink: 'syz.0.180': attribute type 10 has an invalid length.
[   90.520472][ T6690] team0: Port device dummy0 added
[   91.373065][ T6696] netlink: 'syz.0.182': attribute type 1 has an invalid length.
[   91.393956][ T6696] bond0 (unregistering): Released all slaves
[   92.487170][ T6709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.186'.
[   92.715280][ T6721] bond0: entered promiscuous mode
[   92.721152][ T6721] bond0: entered allmulticast mode
[   92.724578][ T6721] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.899714][ T6724] bond0 (unregistering): Released all slaves
[   93.042389][ T6731] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.084657][ T6737] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   94.170744][ T6750] netlink: 64 bytes leftover after parsing attributes in process `syz.0.193'.
[   94.174952][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'.
[   94.451088][ T6769] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   94.455509][ T6769] netlink: 14 bytes leftover after parsing attributes in process `syz.0.196'.
[   95.254843][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[   95.259611][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   95.262343][ T6771] netlink: 'syz.0.197': attribute type 12 has an invalid length.
[   95.267159][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[   95.270400][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   95.273382][ T6771] netlink: 'syz.0.197': attribute type 12 has an invalid length.
[   95.414710][ T6780] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.200'.
[   95.427265][ T6781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'.
[   95.431019][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'.
[   95.448218][ T6781] bond6: entered promiscuous mode
[   95.450726][ T6781] 8021q: adding VLAN 0 to HW filter on device bond6
[   95.521828][ T6781] bond6 (unregistering): Released all slaves
[   95.561093][ T6780] bond6: entered promiscuous mode
[   95.563466][ T6780] 8021q: adding VLAN 0 to HW filter on device bond6
[   95.633797][ T6780] bond6 (unregistering): Released all slaves
[   96.770111][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'.
[   96.890410][ T6799] netlink: 'syz.0.206': attribute type 1 has an invalid length.
[   97.832840][ T6806] : entered promiscuous mode
[   97.842235][ T6806] trusted_key: syz.0.208 sent an empty control message without MSG_MORE.
[   98.296704][ T6828] bond0 (unregistering): Released all slaves
[   98.387791][ T6834] netlink: 'syz.0.217': attribute type 1 has an invalid length.
[   98.387789][ T6833] netlink: 'syz.0.217': attribute type 1 has an invalid length.
[   98.413204][ T6834] bond0 (unregistering): Released all slaves
[   98.448107][ T6833] bond0 (unregistering): Released all slaves
[   98.547504][ T6840] netlink: 'syz.0.218': attribute type 1 has an invalid length.
[   98.626364][ T6840] bond0 (unregistering): Released all slaves
[   98.802591][ T6846] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   98.877177][ T6852] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   98.880885][ T6852] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   98.935348][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'.
[   98.959750][ T6854] bond0: entered promiscuous mode
[   98.962287][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.976151][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.979326][ T6854] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[   98.984761][ T6854] bond0: (slave vcan1): Error -95 calling set_mac_address
[   99.134944][ T6859] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   99.140713][ T6859] netlink: 14 bytes leftover after parsing attributes in process `syz.0.225'.
[   99.283451][ T6861] bond0 (unregistering): Released all slaves
[   99.299770][ T6862] unknown channel width for channel at 909000KHz?
[  100.302913][ T6870] netlink: 'syz.0.228': attribute type 1 has an invalid length.
[  100.333378][ T6870] bond0 (unregistering): Released all slaves
[  101.240154][ T6875] netlink: 'syz.0.229': attribute type 13 has an invalid length.
[  101.243161][ T6875] netlink: 'syz.0.229': attribute type 17 has an invalid length.
[  101.288377][ T6875] 8021q: adding VLAN 0 to HW filter on device team0
[  101.296888][ T6875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.384687][ T6873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.120764][ T6891] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  103.320037][ T6897] netlink: 'syz.0.232': attribute type 1 has an invalid length.
[  104.134092][ T6900] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  105.181384][ T6919] can: request_module (can-proto-5) failed.
[  105.193667][ T6919] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  105.200311][ T6919] netlink: 14 bytes leftover after parsing attributes in process `syz.0.236'.
[  105.261292][ T6923] netlink: 'syz.0.237': attribute type 1 has an invalid length.
[  105.287902][ T6923] 8021q: adding VLAN 0 to HW filter on device bond6
[  105.293693][ T6923] netlink: 52 bytes leftover after parsing attributes in process `syz.0.237'.
[  105.333548][ T6927] netlink: 'syz.0.238': attribute type 1 has an invalid length.
[  105.337037][ T6927] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  105.373797][ T6933] sctp: [Deprecated]: syz.0.239 (pid 6933) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.373797][ T6933] Use struct sctp_sack_info instead
[  105.388193][ T6933] sctp: [Deprecated]: syz.0.239 (pid 6933) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.388193][ T6933] Use struct sctp_sack_info instead
[  105.454940][ T6935] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  105.462321][ T6935] netlink: 14 bytes leftover after parsing attributes in process `syz.0.240'.
[  105.549361][ T6937] IPVS: Scheduler module ip_vs_sip not found
[  105.661125][ T6941] openvswitch: netlink: Flow key attribute not present in set flow.
[  105.712924][ T6946] netlink: 'syz.0.243': attribute type 1 has an invalid length.
[  105.739822][ T6946] bond7 (unregistering): Released all slaves
[  106.011336][ T6956] bond0 (unregistering): Released all slaves
[  106.116553][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'.
[  106.220620][ T6968] netlink: 'syz.0.249': attribute type 1 has an invalid length.
[  106.241548][ T6968] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.253715][ T6968] bond0: (slave gretap4): making interface the new active one
[  106.257997][ T6968] bond0: (slave gretap4): Enslaving as an active interface with an up link
[  106.324358][ T6979] netlink: 'syz.0.251': attribute type 3 has an invalid length.
[  106.327834][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'.
[  106.331406][ T6979] netlink: 666 bytes leftover after parsing attributes in process `syz.0.251'.
[  106.360749][ T6980] bond7: entered promiscuous mode
[  106.362693][ T6980] 8021q: adding VLAN 0 to HW filter on device bond7
[  106.442795][ T6980] bond7 (unregistering): Released all slaves
[  106.687547][ T6993] netlink: 'syz.0.255': attribute type 1 has an invalid length.
[  106.691079][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.255'.
[  107.620290][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'.
[  107.626042][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'.
[  107.631476][ T7001] netlink: 'syz.0.259': attribute type 1 has an invalid length.
[  107.659792][ T7001] bond7 (unregistering): Released all slaves
[  107.748393][ T7004] lo speed is unknown, defaulting to 1000
[  107.750730][ T7004] lo speed is unknown, defaulting to 1000
[  107.754633][ T7004] lo speed is unknown, defaulting to 1000
[  107.762336][ T7004] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  107.775641][ T7004] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  107.802469][ T7004] lo speed is unknown, defaulting to 1000
[  107.807314][ T7004] lo speed is unknown, defaulting to 1000
[  107.811234][ T7004] lo speed is unknown, defaulting to 1000
[  107.887401][ T7004] bond0 (unregistering): (slave gretap4): Releasing active interface
[  107.892138][ T7004] bond0 (unregistering): Released all slaves
[  107.980865][ T7007] netlink: 'syz.0.261': attribute type 1 has an invalid length.
[  108.006517][ T7007] netlink: 88 bytes leftover after parsing attributes in process `syz.0.261'.
[  108.231205][ T7010] bond7: entered promiscuous mode
[  108.233279][ T7010] bond7: entered allmulticast mode
[  108.235493][ T7010] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.317313][ T7010] bond7 (unregistering): Released all slaves
[  108.442540][ T7020] netlink: 'syz.0.263': attribute type 1 has an invalid length.
[  108.462956][ T7020] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.543364][ T7020] bond7 (unregistering): Released all slaves
[  108.623453][ T7023] netlink: 'syz.0.264': attribute type 4 has an invalid length.
[  108.626392][ T7024] netlink: 'syz.0.264': attribute type 4 has an invalid length.
[  108.794029][ T7030] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  108.905109][ T7038] bond0 (unregistering): Released all slaves
[  109.080564][ T7043] bond0 (unregistering): Released all slaves
[  110.129359][ T7059] bond0: entered promiscuous mode
[  110.131471][ T7059] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.217023][ T7059] bond0 (unregistering): Released all slaves
[  110.522373][ T7065] bond0: entered promiscuous mode
[  110.524700][ T7065] bond0: entered allmulticast mode
[  110.527465][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.602439][ T7065] bond0 (unregistering): Released all slaves
[  110.697855][ T7069] validate_nla: 3 callbacks suppressed
[  110.697871][ T7069] netlink: 'syz.0.276': attribute type 1 has an invalid length.
[  110.727247][ T7069] netlink: 'syz.0.276': attribute type 1 has an invalid length.
[  110.873382][ T7085] bond0 (unregistering): Released all slaves
[  111.011150][ T7089] __nla_validate_parse: 7 callbacks suppressed
[  111.011167][ T7089] netlink: 92 bytes leftover after parsing attributes in process `syz.0.280'.
[  111.132383][ T7093] netlink: 52 bytes leftover after parsing attributes in process `syz.0.282'.
[  111.243386][ T7103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.284'.
[  111.255158][  T793] lo speed is unknown, defaulting to 1000
[  111.303296][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.285'.
[  111.319424][ T7107] bond0 (unregistering): Released all slaves
[  111.439088][ T7111] bond0: entered promiscuous mode
[  111.441156][ T7111] bond0: entered allmulticast mode
[  111.443665][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.509776][ T7111] bond0 (unregistering): Released all slaves
[  111.612127][ T7114] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  111.622212][ T7114] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  111.777270][ T7120] netlink: 14 bytes leftover after parsing attributes in process `syz.0.289'.
[  111.837639][ T7123] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  111.842038][ T7122] netlink: 14 bytes leftover after parsing attributes in process `syz.0.290'.
[  111.899775][ T7126] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  111.904544][ T7126] netlink: 14 bytes leftover after parsing attributes in process `syz.0.291'.
[  111.960645][ T7129] netlink: 'syz.0.292': attribute type 6 has an invalid length.
[  112.002649][ T7133] pim6reg1: entered promiscuous mode
[  112.004432][ T7133] pim6reg1: entered allmulticast mode
[  112.041104][ T7134] bond0: entered promiscuous mode
[  112.043107][ T7134] bond0: entered allmulticast mode
[  112.046586][ T7134] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.115805][ T7134] bond0 (unregistering): Released all slaves
[  112.451579][ T7153] lo speed is unknown, defaulting to 1000
[  112.744203][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[  112.750211][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'.
[  112.761647][ T7158] geneve2: entered promiscuous mode
[  112.763723][ T7158] geneve2: entered allmulticast mode
[  112.768080][ T5863] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.771439][ T5863] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.774642][ T5863] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.777955][ T5863] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.243241][ T7175] netlink: 'syz.0.303': attribute type 1 has an invalid length.
[  113.314247][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'.
[  113.318860][ T7177] bond1: option mode: unable to set because the bond device is up
[  113.339622][ T7177] team0: Port device dummy0 removed
[  113.345224][ T7177] bond5: (slave batadv0): Releasing active interface
[  113.412569][ T7181] ipip1: entered promiscuous mode
[  113.533032][ T7183] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  113.602150][ T7185] netlink: 'syz.0.307': attribute type 1 has an invalid length.
[  113.632817][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.711859][ T7185] bond0 (unregistering): Released all slaves
[  113.870311][ T7188] netlink: 'syz.0.308': attribute type 1 has an invalid length.
[  113.885476][ T7188] bond0 (unregistering): Released all slaves
[  114.678950][ T7199] netlink: 'syz.0.310': attribute type 1 has an invalid length.
[  114.701931][ T7199] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.704268][ T7212] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  115.805322][ T7219] bond1: option mode: unable to set because the bond device is up
[  115.819260][ T7219] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  115.835342][ T7219] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  115.963519][ T7223] bond8: entered promiscuous mode
[  115.965547][ T7223] bond8: entered allmulticast mode
[  115.969154][ T7223] 8021q: adding VLAN 0 to HW filter on device bond8
[  116.069197][ T7223] bond8 (unregistering): Released all slaves
[  116.240318][ T7228] lo speed is unknown, defaulting to 1000
[  132.659521][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.662162][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.104494][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.108952][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  240.816159][   T34] INFO: task kworker/0:1:10 blocked for more than 143 seconds.
[  240.819458][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  240.821568][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  240.825972][   T34] task:kworker/0:1     state:D stack:23592 pid:10    tgid:10    ppid:2      task_flags:0x4208060 flags:0x00004000
[  240.830347][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  240.833231][   T34] Call Trace:
[  240.834642][   T34]  <TASK>
[  240.835903][   T34]  __schedule+0x1798/0x4cc0
[  240.837629][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  240.839387][   T34]  ? __pfx___schedule+0x10/0x10
[  240.841523][   T34]  ? schedule+0x91/0x360
[  240.843181][   T34]  schedule+0x165/0x360
[  240.845140][   T34]  schedule_preempt_disabled+0x13/0x30
[  240.855749][   T34]  __mutex_lock+0x7e6/0x1350
[  240.857597][   T34]  ? __mutex_lock+0x5bb/0x1350
[  240.859542][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  240.861951][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  240.863960][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  240.873432][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  240.881469][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  240.884923][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  240.888222][   T34]  process_scheduled_works+0xae1/0x17b0
[  240.890479][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  240.892931][   T34]  worker_thread+0x8a0/0xda0
[  240.894803][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.897962][   T34]  ? __kthread_parkme+0x7b/0x200
[  240.900002][   T34]  kthread+0x711/0x8a0
[  240.901637][   T34]  ? __pfx_worker_thread+0x10/0x10
[  240.905014][   T34]  ? __pfx_kthread+0x10/0x10
[  240.907797][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.909975][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.912089][   T34]  ? __pfx_kthread+0x10/0x10
[  240.913951][   T34]  ret_from_fork+0x3fc/0x770
[  240.916562][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  240.918644][   T34]  ? __switch_to_asm+0x39/0x70
[  240.920518][   T34]  ? __switch_to_asm+0x33/0x70
[  240.922397][   T34]  ? __pfx_kthread+0x10/0x10
[  240.924270][   T34]  ret_from_fork_asm+0x1a/0x30
[  240.927148][   T34]  </TASK>
[  240.928813][   T34] INFO: task syz.2.102:6335 blocked for more than 143 seconds.
[  240.931779][   T34]       Not tainted syzkaller #0
[  240.933769][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  240.938575][   T34] task:syz.2.102       state:D stack:25096 pid:6335  tgid:6335  ppid:5849   task_flags:0x400040 flags:0x00004006
[  240.943213][   T34] Call Trace:
[  240.944573][   T34]  <TASK>
[  240.945985][   T34]  __schedule+0x1798/0x4cc0
[  240.947840][   T34]  ? __lock_acquire+0xab9/0xd20
[  240.949734][   T34]  ? __lock_acquire+0xab9/0xd20
[  240.951664][   T34]  ? __pfx___schedule+0x10/0x10
[  240.953559][   T34]  ? schedule+0x91/0x360
[  240.955274][   T34]  schedule+0x165/0x360
[  240.960511][   T34]  schedule_preempt_disabled+0x13/0x30
[  240.962407][   T34]  __mutex_lock+0x7e6/0x1350
[  240.964251][   T34]  ? __mutex_lock+0x5bb/0x1350
[  240.966457][   T34]  ? rfkill_unregister+0xc8/0x220
[  240.968523][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  240.970544][   T34]  ? __pfx_device_del+0x10/0x10
[  240.972533][   T34]  rfkill_unregister+0xc8/0x220
[  240.974508][   T34]  nfc_unregister_device+0x96/0x2a0
[  240.976840][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  240.979385][   T34]  virtual_ncidev_close+0x56/0x90
[  240.981446][   T34]  __fput+0x44c/0xa70
[  240.983098][   T34]  task_work_run+0x1d4/0x260
[  240.985003][   T34]  ? __pfx_task_work_run+0x10/0x10
[  240.987282][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  240.989432][   T34]  exit_to_user_mode_loop+0xec/0x110
[  240.991131][   T34]  do_syscall_64+0x2bd/0x3b0
[  240.992585][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.994522][   T34]  ? asm_sysvec_call_function_single+0x1a/0x20
[  240.996478][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.998323][   T34] RIP: 0033:0x7fb37038eba9
[  240.999833][   T34] RSP: 002b:00007ffd7a629f58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  241.003045][   T34] RAX: 0000000000000000 RBX: 00007fb3705d7da0 RCX: 00007fb37038eba9
[  241.006282][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  241.009170][   T34] RBP: 00007fb3705d7da0 R08: 0000000000000240 R09: 0000001e7a62a24f
[  241.011702][   T34] R10: 00007fb3705d7cb0 R11: 0000000000000246 R12: 0000000000012d34
[  241.014133][   T34] R13: 00007fb3705d6090 R14: ffffffffffffffff R15: 00007ffd7a62a070
[  241.016701][   T34]  </TASK>
[  241.017685][   T34] INFO: task syz.1.104:6348 blocked for more than 143 seconds.
[  241.020298][   T34]       Not tainted syzkaller #0
[  241.022244][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.025256][   T34] task:syz.1.104       state:D stack:24888 pid:6348  tgid:6346  ppid:5853   task_flags:0x400140 flags:0x00004006
[  241.029184][   T34] Call Trace:
[  241.030382][   T34]  <TASK>
[  241.031364][   T34]  __schedule+0x1798/0x4cc0
[  241.032856][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.034733][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.036894][   T34]  ? __pfx___schedule+0x10/0x10
[  241.038789][   T34]  ? schedule+0x91/0x360
[  241.040441][   T34]  schedule+0x165/0x360
[  241.042101][   T34]  schedule_preempt_disabled+0x13/0x30
[  241.044189][   T34]  __mutex_lock+0x7e6/0x1350
[  241.046217][   T34]  ? __mutex_lock+0x5bb/0x1350
[  241.048135][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  241.050256][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  241.052294][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.054424][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  241.056871][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  241.059332][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  241.061620][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  241.063659][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  241.066220][   T34]  rfkill_set_block+0x1d2/0x440
[  241.068178][   T34]  rfkill_fop_write+0x44b/0x570
[  241.070085][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  241.072243][   T34]  ? security_kernfs_init_security+0x290/0x290
[  241.074672][   T34]  ? rw_verify_area+0x255/0x4d0
[  241.076847][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.078859][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  241.080996][   T34]  vfs_write+0x27e/0xb30
[  241.082724][   T34]  ? __pfx_vfs_write+0x10/0x10
[  241.084666][   T34]  ? __fget_files+0x2a/0x420
[  241.086777][   T34]  ? __fget_files+0x2a/0x420
[  241.088565][   T34]  ? __fget_files+0x3a0/0x420
[  241.090400][   T34]  ? __fget_files+0x2a/0x420
[  241.092228][   T34]  ksys_write+0x145/0x250
[  241.093981][   T34]  ? __pfx_ksys_write+0x10/0x10
[  241.097875][   T34]  ? do_syscall_64+0xbe/0x3b0
[  241.099808][   T34]  do_syscall_64+0xfa/0x3b0
[  241.101611][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.103696][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.106254][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.108131][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.110494][   T34] RIP: 0033:0x7f62e2f8eba9
[  241.112328][   T34] RSP: 002b:00007f62e3d78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  241.115907][   T34] RAX: ffffffffffffffda RBX: 00007f62e31d6090 RCX: 00007f62e2f8eba9
[  241.119081][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005
[  241.122221][   T34] RBP: 00007f62e3011e19 R08: 0000000000000000 R09: 0000000000000000
[  241.125262][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.128511][   T34] R13: 00007f62e31d6128 R14: 00007f62e31d6090 R15: 00007ffc28c85bc8
[  241.131720][   T34]  </TASK>
[  241.132980][   T34] INFO: task syz-executor:6710 blocked for more than 143 seconds.
[  241.136235][   T34]       Not tainted syzkaller #0
[  241.138214][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.141489][   T34] task:syz-executor    state:D stack:28040 pid:6710  tgid:6710  ppid:1      task_flags:0x400040 flags:0x00004000
[  241.146563][   T34] Call Trace:
[  241.147977][   T34]  <TASK>
[  241.149208][   T34]  __schedule+0x1798/0x4cc0
[  241.151047][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.153019][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.154995][   T34]  ? __pfx___schedule+0x10/0x10
[  241.157141][   T34]  ? schedule+0x91/0x360
[  241.158866][   T34]  schedule+0x165/0x360
[  241.160556][   T34]  schedule_preempt_disabled+0x13/0x30
[  241.162781][   T34]  __mutex_lock+0x7e6/0x1350
[  241.164617][   T34]  ? __mutex_lock+0x5bb/0x1350
[  241.166656][   T34]  ? rfkill_register+0x37/0x8e0
[  241.168606][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  241.170617][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  241.172705][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  241.174883][   T34]  ? device_initialize+0x24b/0x440
[  241.177249][   T34]  rfkill_register+0x37/0x8e0
[  241.179078][   T34]  hci_register_dev+0x3f5/0x890
[  241.181047][   T34]  vhci_create_device+0x39c/0x650
[  241.183056][   T34]  vhci_write+0x3ce/0x4a0
[  241.184768][   T34]  vfs_write+0x5c9/0xb30
[  241.186619][   T34]  ? __pfx_vhci_write+0x10/0x10
[  241.188616][   T34]  ? __pfx_vfs_write+0x10/0x10
[  241.190548][   T34]  ? count_memcg_event_mm+0x21/0x260
[  241.192719][   T34]  ksys_write+0x145/0x250
[  241.194486][   T34]  ? __pfx_ksys_write+0x10/0x10
[  241.196748][   T34]  ? do_syscall_64+0xbe/0x3b0
[  241.198691][   T34]  do_syscall_64+0xfa/0x3b0
[  241.200512][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.202606][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.205030][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.207044][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.209401][   T34] RIP: 0033:0x7f68bbb8d620
[  241.211189][   T34] RSP: 002b:00007ffd864203b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  241.214398][   T34] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f68bbb8d620
[  241.217554][   T34] RDX: 0000000000000002 RSI: 00007ffd864203ca RDI: 00000000000000ca
[  241.220476][   T34] RBP: 00007f68bbdd67b8 R08: 0000000000000000 R09: 00007f68bc90d6c0
[  241.223562][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  241.226610][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  241.229223][   T34]  </TASK>
[  241.230397][   T34] INFO: task syz-executor:6717 blocked for more than 143 seconds.
[  241.233538][   T34]       Not tainted syzkaller #0
[  241.235560][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.239293][   T34] task:syz-executor    state:D stack:27432 pid:6717  tgid:6717  ppid:1      task_flags:0x400040 flags:0x00004000
[  241.244010][   T34] Call Trace:
[  241.245377][   T34]  <TASK>
[  241.246728][   T34]  __schedule+0x1798/0x4cc0
[  241.248522][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.250517][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.252483][   T34]  ? __pfx___schedule+0x10/0x10
[  241.254476][   T34]  ? schedule+0x91/0x360
[  241.256412][   T34]  schedule+0x165/0x360
[  241.258147][   T34]  schedule_preempt_disabled+0x13/0x30
[  241.260365][   T34]  __mutex_lock+0x7e6/0x1350
[  241.262224][   T34]  ? __mutex_lock+0x5bb/0x1350
[  241.264157][   T34]  ? rfkill_register+0x37/0x8e0
[  241.266307][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  241.268377][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  241.270501][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  241.272698][   T34]  ? device_initialize+0x24b/0x440
[  241.274810][   T34]  rfkill_register+0x37/0x8e0
[  241.276842][   T34]  hci_register_dev+0x3f5/0x890
[  241.278828][   T34]  vhci_create_device+0x39c/0x650
[  241.280863][   T34]  vhci_write+0x3ce/0x4a0
[  241.282627][   T34]  vfs_write+0x5c9/0xb30
[  241.284400][   T34]  ? __pfx_vhci_write+0x10/0x10
[  241.287594][   T34]  ? __pfx_vfs_write+0x10/0x10
[  241.289504][   T34]  ? count_memcg_event_mm+0x21/0x260
[  241.291676][   T34]  ksys_write+0x145/0x250
[  241.293442][   T34]  ? __pfx_ksys_write+0x10/0x10
[  241.295451][   T34]  ? do_syscall_64+0xbe/0x3b0
[  241.297603][   T34]  do_syscall_64+0xfa/0x3b0
[  241.299386][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.301450][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.303860][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.305987][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.308330][   T34] RIP: 0033:0x7f2aa738d620
[  241.310117][   T34] RSP: 002b:00007ffd3005eb38 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  241.313392][   T34] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2aa738d620
[  241.316375][   T34] RDX: 0000000000000002 RSI: 00007ffd3005eb4a RDI: 00000000000000ca
[  241.319103][   T34] RBP: 00007f2aa75d67b8 R08: 0000000000000000 R09: 00007f2aa810d6c0
[  241.322235][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  241.325312][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  241.328664][   T34]  </TASK>
[  241.329934][   T34] 
[  241.329934][   T34] Showing all locks held in the system:
[  241.332785][   T34] 3 locks held by kworker/0:1/10:
[  241.334396][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  241.338084][   T34]  #1: ffffc900000d7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  241.342965][   T34]  #2: ffffffff8f813108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  241.347581][   T34] 1 lock held by khungtaskd/34:
[  241.349525][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  241.353499][   T34] 2 locks held by getty/5677:
[  241.355399][   T34]  #0: ffff888021fd60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  241.359443][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  241.363496][   T34] 2 locks held by syz.2.102/6335:
[  241.365518][   T34]  #0: ffff8881188d6100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  241.369082][   T34]  #1: ffffffff8f813108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  241.372271][   T34] 2 locks held by syz.1.104/6348:
[  241.373844][   T34]  #0: ffffffff8f813108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  241.377374][   T34]  #1: ffff8881188d6100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  241.380603][   T34] 2 locks held by syz-executor/6710:
[  241.382731][   T34]  #0: ffff888118d07918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  241.386942][   T34]  #1: ffffffff8f813108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  241.390808][   T34] 2 locks held by syz-executor/6717:
[  241.392966][   T34]  #0: ffff888118ba7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  241.397115][   T34]  #1: ffffffff8f813108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  241.400375][   T34] 3 locks held by syz.0.321/7245:
[  241.402430][   T34]  #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  241.405500][   T34]  #1: ffff8880391bd100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  241.409108][   T34]  #2: ffffffff8f813108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  241.412212][   T34] 1 lock held by syz-executor/7252:
[  241.413835][   T34]  #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  241.416772][   T34] 1 lock held by syz-executor/7255:
[  241.418449][   T34]  #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  241.421062][   T34] 1 lock held by syz-executor/7256:
[  241.422782][   T34]  #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  241.425785][   T34] 1 lock held by syz-executor/7259:
[  241.427828][   T34]  #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  241.431177][   T34] 1 lock held by syz-executor/7262:
[  241.433044][   T34]  #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  241.435958][   T34] 1 lock held by syz-executor/7263:
[  241.437650][   T34]  #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  241.440474][   T34] 
[  241.441278][   T34] =============================================
[  241.441278][   T34] 
[  241.443949][   T34] NMI backtrace for cpu 1
[  241.443960][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  241.443969][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.443974][   T34] Call Trace:
[  241.443980][   T34]  <TASK>
[  241.443987][   T34]  dump_stack_lvl+0x189/0x250
[  241.444003][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.444012][   T34]  ? __pfx__printk+0x10/0x10
[  241.444029][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  241.444043][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  241.444054][   T34]  ? __pfx__printk+0x10/0x10
[  241.444070][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  241.444084][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  241.444095][   T34]  watchdog+0xf93/0xfe0
[  241.444110][   T34]  ? watchdog+0x1de/0xfe0
[  241.444123][   T34]  kthread+0x711/0x8a0
[  241.444135][   T34]  ? __pfx_watchdog+0x10/0x10
[  241.444145][   T34]  ? __pfx_kthread+0x10/0x10
[  241.444156][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.444167][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.444180][   T34]  ? __pfx_kthread+0x10/0x10
[  241.444189][   T34]  ret_from_fork+0x3fc/0x770
[  241.444199][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  241.444210][   T34]  ? __switch_to_asm+0x39/0x70
[  241.444219][   T34]  ? __switch_to_asm+0x33/0x70
[  241.444228][   T34]  ? __pfx_kthread+0x10/0x10
[  241.444238][   T34]  ret_from_fork_asm+0x1a/0x30
[  241.444254][   T34]  </TASK>
[  241.444258][   T34] Sending NMI from CPU 1 to CPUs 0:
[  241.492792][    C0] NMI backtrace for cpu 0
[  241.492808][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  241.492817][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.492823][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  241.492841][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 27 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  241.492848][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  241.492856][    C0] RAX: ebced249b9f17600 RBX: ffffffff819683f8 RCX: ebced249b9f17600
[  241.492861][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b8d8d RDI: ffffffff8be33880
[  241.492866][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  241.492871][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa39830
[  241.492876][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  241.492881][    C0] FS:  0000000000000000(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  241.492887][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  241.492891][    C0] CR2: 00007ffa0ac87e20 CR3: 000000010d35e000 CR4: 00000000000006f0
[  241.492918][    C0] Call Trace:
[  241.492926][    C0]  <TASK>
[  241.492930][    C0]  default_idle+0x13/0x20
[  241.492939][    C0]  default_idle_call+0x74/0xb0
[  241.492949][    C0]  do_idle+0x1e8/0x510
[  241.492958][    C0]  ? __pfx_do_idle+0x10/0x10
[  241.492968][    C0]  cpu_startup_entry+0x44/0x60
[  241.492975][    C0]  rest_init+0x2de/0x300
[  241.492984][    C0]  start_kernel+0x3a9/0x410
[  241.492998][    C0]  x86_64_start_reservations+0x24/0x30
[  241.493008][    C0]  x86_64_start_kernel+0x143/0x1c0
[  241.493015][    C0]  common_startup_64+0x13e/0x147
[  241.493031][    C0]  </TASK>
[  241.493775][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  241.553495][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  241.557210][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.560554][   T34] Call Trace:
[  241.561893][   T34]  <TASK>
[  241.562905][   T34]  dump_stack_lvl+0x99/0x250
[  241.564384][   T34]  ? __asan_memcpy+0x40/0x70
[  241.565899][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.567580][   T34]  ? __pfx__printk+0x10/0x10
[  241.569048][   T34]  vpanic+0x281/0x750
[  241.570510][   T34]  ? __pfx_vpanic+0x10/0x10
[  241.572239][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  241.574132][   T34]  ? preempt_schedule+0xae/0xc0
[  241.575675][   T34]  ? preempt_schedule_common+0x83/0xd0
[  241.577671][   T34]  panic+0xb9/0xc0
[  241.578873][   T34]  ? __pfx_panic+0x10/0x10
[  241.580684][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  241.582688][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  241.584975][   T34]  watchdog+0xfd2/0xfe0
[  241.586561][   T34]  ? watchdog+0x1de/0xfe0
[  241.588194][   T34]  kthread+0x711/0x8a0
[  241.589741][   T34]  ? __pfx_watchdog+0x10/0x10
[  241.591561][   T34]  ? __pfx_kthread+0x10/0x10
[  241.593353][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.595328][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.597321][   T34]  ? __pfx_kthread+0x10/0x10
[  241.599119][   T34]  ret_from_fork+0x3fc/0x770
[  241.600907][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  241.602842][   T34]  ? __switch_to_asm+0x39/0x70
[  241.604647][   T34]  ? __switch_to_asm+0x33/0x70
[  241.606456][   T34]  ? __pfx_kthread+0x10/0x10
[  241.608259][   T34]  ret_from_fork_asm+0x1a/0x30
[  241.610038][   T34]  </TASK>
[  241.611762][   T34] Kernel Offset: disabled
[  241.613442][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:31:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff88801f748237 R9 =1ffff11003ee9046 R10=dffffc0000000000 R11=ffffffff854f4700
R12=dffffc0000000000 R13=ffffffff99afd8dd R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f477c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055968c057600 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000400000058 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000018000000000 RBX=ffffea00044cc400 RCX=ffff8880266d3980 RDX=0000000000000000
RSI=0000018000000000 RDI=0000018000000000 RBP=ffffc9000311f5d0 RSP=ffffc9000311f4f8
R8 =ffffea00044cc407 R9 =1ffffd4000899880 R10=dffffc0000000000 R11=fffff94000899881
R12=057ff7800000422c R13=0000018000000000 R14=1ffffd4000899880 R15=1ffff92000623ea4
RIP=ffffffff81bfae50 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fae9bf07d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fae9b3a76c3 00007fae9b3a76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=8003000800061000 201000060000001f XMM07=1000078000000000 060102aa00100007
XMM08=a003000800079803 010000060000001e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
