last executing test programs:

1m17.384020983s ago: executing program 0 (id=4604):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000801000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000070601010000000000000000020000020500010007000000460e0fbf4eacdedfd7d15236d0b8f6c2dc73855a25d199dced1676368ae53e09f69a4dc91fb8e3fb1103c3b1e6d297c142"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYBLOB="8042224e9e27fc2c45141c552d5ea00fff1542ef4e2108781ce8a252ade67a5a2f561dbfd4572ad952a5402f0c56f170a53eb79c63ff65cb955e90a2b1e6bee5a4f96b06f5175c23a4c3d53487fe"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xad, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r10 = socket$netlink(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1m15.855651132s ago: executing program 0 (id=4613):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25170000004c0006804400040067636d28616573ae0000000000000000000000000000000000000000000000001c000000963e7917d56de1ace2fe62c0b4a647eb221c9aee790000000000000004000300"], 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004) (async)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3b, 0xc, 0x0, 0x0, 0x4, 0x0, 0x40001}, 0x50) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

1m15.76545387s ago: executing program 0 (id=4615):
close(0x4) (async)
close(0x4)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)
socket$inet6(0xa, 0x3, 0x5) (async)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x3, 0x40000000000000}, {0x0, 0x9, 0x53e7, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x9}}, 0xe8)
getsockopt(r0, 0x101, 0x4, &(0x7f00000003c0)=""/150, &(0x7f0000000540)=0x96)
socket$netlink(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008200000000000000400000109500000000000000"], &(0x7f0000000180)='GPL\x00', 0x6, 0xca, &(0x7f0000000800)=""/202, 0x0, 0x47}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008200000000000000400000109500000000000000"], &(0x7f0000000180)='GPL\x00', 0x6, 0xca, &(0x7f0000000800)=""/202, 0x0, 0x47}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e000900"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e000900"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100620d24c370319b4d7b6f2dbd700000078008000210090000001300010062726f6164636173742d6c696e00"/60], 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) (async)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100620d24c370319b4d7b6f2dbd700000078008000210090000001300010062726f6164636173742d6c696e00"/60], 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf251500000008000300", @ANYRES32=r6, @ANYBLOB="30002b8008000100000000001c0003"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) (async)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r7, &(0x7f0000000380)='syz1\x00', 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2000000, 0x0, 0x7d, 0x600, 0x2, 0x970310})
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
accept4(r9, 0x0, 0x0, 0x0) (async)
accept4(r9, 0x0, 0x0, 0x0)

1m15.693249043s ago: executing program 0 (id=4616):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
read(r0, &(0x7f0000000300)=""/212, 0xd4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

1m15.144133187s ago: executing program 2 (id=4617):
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x2, @void}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00562e00000035eaa96627b7a4000000000000000000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x6f, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
socket$inet(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00'}) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x2, @void}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00562e00000035eaa96627b7a4000000000000000000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x6f, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async)

1m15.142865169s ago: executing program 2 (id=4618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x20, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f00000002c0), 0x4)

1m15.142271825s ago: executing program 2 (id=4619):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000)
write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000000000086dd6d0000000008113e00000000000000000000800100000000ffea"], 0x42)

1m15.014840505s ago: executing program 2 (id=4620):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r2 = socket$inet(0x2, 0xa, 0xd3)
getpeername$l2tp(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
listen(0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x100)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x80002005})
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x2, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x994}, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="14045200d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x15015000)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
bind$alg(r8, &(0x7f0000000680)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis256)\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1a, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @ldst={0x0, 0x2, 0x0, 0x8, 0xb, 0xfffffffffffffff0, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0xc, 0x8, 0xf, 0xffffffffffffffff, 0xffffffffffffffff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='GPL\x00', 0x3adbd747, 0x0, 0x0, 0x40f00, 0x20, '\x00', r7, 0x0, r8, 0x8, &(0x7f00000005c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xe, 0x7, 0x8fe1}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000640)=[{0x4, 0x3, 0xe, 0x8}, {0x5, 0x2, 0x1}, {0x3, 0x1, 0xc, 0x7}, {0x4, 0x4, 0xd, 0xc}, {0x1, 0x1, 0xf, 0x4}, {0x3, 0x3, 0x2, 0xb}, {0x0, 0x5, 0x2, 0xa}, {0x2, 0x2, 0x1, 0x6}, {0x0, 0x4, 0x2, 0x1}, {0x3, 0x2, 0x2, 0xc}], 0x10, 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r9=>0x0})
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r9, 0x25, 0x0, @void}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='sched_switch\x00'}, 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd700000dcdf25920b1524", @ANYRES32=r12, @ANYBLOB="570da800a65a0200"], 0x20}}, 0x2000e844)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r3, 0x4, r3}, 0x10)

1m14.832261211s ago: executing program 2 (id=4622):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000000c000000000000000047a700"/33, @ANYRES32=0x0], 0x30}], 0x1, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0x3, 0x4}, 0x6) (async)
sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async)
syz_emit_ethernet(0x3e, 0x0, 0x0) (async)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) (async)
listen(0xffffffffffffffff, 0xfffffffc) (async)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@ipv6_delrule={0x30, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x30}}, 0x58) (async)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000018e010018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca920000000000035090100000000009500500000000006bf9800000000000036080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

1m14.829281568s ago: executing program 0 (id=4623):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000008004500005b0100000000119078000000000000000000004e20009c907801000000000000007b4b143b8e61fd778d1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19965e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09447d85ca73475db674e0b63f55874699878f968ea77000d4b37d6384e3c888b99df16d06dedf29fc47f1e29f82a89e9d432d42b3994517ed70"], 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
recvmmsg(r0, &(0x7f0000003d40), 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x5, 0x1, 0x0, &(0x7f0000000200)="d7", 0x0, 0xe18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) (async)
socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) (async)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async)
bind$can_raw(r2, &(0x7f00000000c0), 0x10) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async)
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (async)
sendmmsg$inet6(r7, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003c80)={0xa, 0x4e24, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000003f00)=[{&(0x7f0000003d00)="32607b20f4ebd4e86c60bfc02d671512b75c7eff8a8e4adbfc89e0e2dab4ea78829a0db8f7fa5abc8a8615c740e99c900b1b696720772d2908992aec54f5b2efdf1cc44fa94c700abe36399c6949e00ce52f6a557eaba68ff6873958a7df59bd6fe08b14cf5f0cceda5ce60c24b4912af4a4170606f75cf78be7c82f18b7d85ac2d7255d26e0dfa436467027ed7e4aa24e9c08", 0x93}, {&(0x7f0000003e00)="4359ae00e2cae11972e25bc7e1576041f2b680087a96f0f55c58a1d94fc16ea42d49990044b5dc5c2330ad8a3a7be11b9cd9c2d20c5da109c6cec75d3abd2bbdafc2148d8c7b7bdb7e5d3c87797b50bd0c46a00624b48c62773068f78744af35c93a64869cffc318c9c583d0d460fa7f7587632e8481057ad354ba74b507e6c45074f42c78b65880ca1a781bbcbfbc7eb09895c288491146af3d6f1c469e9054b9d64636f45d78568cac31bfb668638949b542", 0xb3}], 0x2}}, {{&(0x7f0000003f40)={0xa, 0x4e22, 0x5, @private1, 0x8}, 0x1c, 0x0}}], 0x3, 0x4001c00) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m14.713178536s ago: executing program 2 (id=4626):
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa5d44b3baff950800450000280000000000069078ac1414bbffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="093497c490780000"], 0x0) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async, rerun: 32)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf251a0000000800228004000080070021006ff70000a1158b1f811037da92ef3002936b67f29b956b3582a31c13a03d2f2aeb1d41c9455ce72deba86122c19c4eb3f5cabd8dabaf6c6056109350681ea9765c985ab128117a8c2d16530f7288cca522bebf85e142312cc3af5fc889df0f0f20068fdd76ea25252236c6e754d51290b083cf"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40800) (async)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r4, 0xb00, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async, rerun: 64)
r6 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac1414aa000086dd"], 0xb9) (async)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, &(0x7f0000000080)) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r8, 0x0, 0x0)

1m14.605112224s ago: executing program 32 (id=4626):
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa5d44b3baff950800450000280000000000069078ac1414bbffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="093497c490780000"], 0x0) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async, rerun: 32)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf251a0000000800228004000080070021006ff70000a1158b1f811037da92ef3002936b67f29b956b3582a31c13a03d2f2aeb1d41c9455ce72deba86122c19c4eb3f5cabd8dabaf6c6056109350681ea9765c985ab128117a8c2d16530f7288cca522bebf85e142312cc3af5fc889df0f0f20068fdd76ea25252236c6e754d51290b083cf"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40800) (async)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r4, 0xb00, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async, rerun: 64)
r6 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac1414aa000086dd"], 0xb9) (async)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, &(0x7f0000000080)) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r8, 0x0, 0x0)

1m14.334674662s ago: executing program 0 (id=4628):
r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x400000000010, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00002004800bcf186172ab101b37d473bc33bd47c889f48eee848dbd6f99900e31d95182f317fdc422fc3364b5b692f73d06b96b092337e325053b45d3bb9a95d737c552d69d47524378fb316416652397931b46fda8e7b8de323d4d9c60f6d9e77a20c36c04da4a51a9ad11ce038dd6d97353d420651e78a92a5d13ce2b3eb7627f5943b7693670299896909d37c2e6d6ad8a57f890453069f8b88a83b42eddd9b0bb403b7db43addcd5f8ebe654383386781366471a90c331023ba8dec3374b2896f770e7c0bc1b50c3dab0079ef2bbc390a049174", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x2c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="80010000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000084) (async)
r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r6)
sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4040004)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r13=>0x0}, &(0x7f0000000040)=0x8) (async)
r14 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r14, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) (async)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r14, 0x84, 0x19, &(0x7f0000000600)={r13, 0x9}, 0x8) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000340)) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)

1m14.069296149s ago: executing program 33 (id=4628):
r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x400000000010, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00002004800bcf186172ab101b37d473bc33bd47c889f48eee848dbd6f99900e31d95182f317fdc422fc3364b5b692f73d06b96b092337e325053b45d3bb9a95d737c552d69d47524378fb316416652397931b46fda8e7b8de323d4d9c60f6d9e77a20c36c04da4a51a9ad11ce038dd6d97353d420651e78a92a5d13ce2b3eb7627f5943b7693670299896909d37c2e6d6ad8a57f890453069f8b88a83b42eddd9b0bb403b7db43addcd5f8ebe654383386781366471a90c331023ba8dec3374b2896f770e7c0bc1b50c3dab0079ef2bbc390a049174", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x2c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="80010000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000084) (async)
r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r6)
sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4040004)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r13=>0x0}, &(0x7f0000000040)=0x8) (async)
r14 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r14, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) (async)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r14, 0x84, 0x19, &(0x7f0000000600)={r13, 0x9}, 0x8) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000340)) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)

41.105210089s ago: executing program 3 (id=4972):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) (async)
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r7, 0x25, 0x2, @void}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, r8, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000100b700000000000000c584f0fff0ffffff668c3ef108369c3ce94e879272cc16345144f1ba7cbb3d6d7b80a49dc95c1fc693a7f803d8226fee3d83e5e1ee986d21d94e213980fa7c6ecaa41c07c69d"], &(0x7f0000000180)='GPL\x00', 0x1, 0xd0, &(0x7f00000002c0)=""/208, 0x41100, 0x8, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x9, 0x4}, {0x5, 0x1, 0xa}, {0x4, 0x3, 0x1, 0x7}, {0x1000001, 0x3, 0xe, 0x1}, {0x0, 0x3, 0x4, 0x8}, {0x3fd, 0x2, 0x3, 0xb}, {0x5, 0x100003, 0x4, 0x3}, {0x0, 0x1, 0x0, 0x1}, {0x3, 0x5, 0xa, 0x1}], 0x10, 0x40}, 0x94) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x140b, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)

41.104753393s ago: executing program 4 (id=4973):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket(0x11, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xf, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1d, &(0x7f0000000380)=""/29, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000f00)={0x2, 0x1, 0xbb, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001240), 0x10, 0x8}, 0x94)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8954, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0xf9, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x46)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000006c0)={<r9=>r4, 0x0, 0x80, 0x4})
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r11, 0x0, 0x0}, 0x20)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x3, 0x0, 0x3}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000c40)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008500000013000000180000000000000000000000000060cb180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008500000006000000185700000000b5e600"/128], &(0x7f0000000240)='GPL\x00', 0x9, 0x46, &(0x7f0000000500)=""/70, 0x20780, 0x0, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xd, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, r3, r14, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x1, 0xf, 0x57fd0b19a1a8d717}, {0x2, 0x5, 0xc, 0x2}, {0x0, 0x1, 0xf, 0x7}, {0x3, 0x4, 0xc, 0x4}, {0x4, 0x4, 0x5, 0x5}, {0x3, 0x3, 0x2, 0x2}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
accept$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r15}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

41.035421226s ago: executing program 3 (id=4975):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000002341000000fe80000000000000000000000000e51a00000000000000000000ffff0a010102ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000001000000000000000100000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x4cc00)

41.034863469s ago: executing program 3 (id=4976):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x3e, 0x23, &(0x7f00000000c0)="a0acf1117e0643e2a62f9fb5ec84bbb542603922fe306cd82cb14604a496eab85787dc0f21891e803563ac659986c15289efca595b9672a023e1e27f648e", &(0x7f0000000140)=""/35, 0x3, 0x0, 0x57, 0x72, &(0x7f0000000340)="4eae0c2d50456a3ba9a98842232adbd9d338b4a97ffebcadf57cdc53c998322c30557db46cf655fbc174c61e251071ce626ad1cca354d9635a7ad555d290cf7f34352b17659587536ca7163926103069e5bf8bcbeb445a", &(0x7f0000000400)="4185ff22eed96fcf97b705fbf0c3fbb7de46911d28898644bd0910d378ec7034593fa53033c93dab7e771fe6772db2b7b59d4d1c3b81bbf9db803e9d0521737d3cef0a7113c58f4dfd8ae1daaa15e9ae1957f694e7c8b110ff211ca8ca84ec04002b449feefc108f17de3c8390251fd9cb01", 0x1, 0x0, 0x32}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000001020102000000000000215e8b2ac26900000a0000078648eaac4978eb0a548d7f9a9103ee50084f0909a49961ee414397943fd87b8af26893aabc2a0a91d534a1bb2c0859af7ed3df52b3c9f78fa3e4e9a32101d2b920f3e8177d26e448e8b3a5091897b0e9df8753152e6f2a60d31f84ca304a9b565259962218f551729e5a1c"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0xfffffffffffffffe, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f00000002c0)={0x1f, 0x2}, 0x6)
write(r3, &(0x7f0000000000)="05000000", 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x35, 0x0, 0x3, 0xff9f0007}, {0x15, 0x0, 0x0, 0x9e8}, {0x3, 0x20}, {0x0, 0x2}, {0x6, 0x9}]})

40.738465983s ago: executing program 4 (id=4977):
r0 = socket(0x2a, 0x800, 0xfffffffc)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
readv(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1)
socket(0x2a, 0x800, 0xfffffffc) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]}) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) (async)
readv(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) (async)

40.593801367s ago: executing program 4 (id=4979):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
listen(0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='sched_switch\x00'}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x224, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r7, &(0x7f0000000240)=[{&(0x7f0000000180)="89c7ce2c78dad9b4b473fec96558c292d044bfc506d796f002000000", 0x1c}], 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4004804)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4040014)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x18, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, r9)

40.495184845s ago: executing program 3 (id=4980):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x701}, 0x14}}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095", @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
listen(r1, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "969d3962d3990319", "561629aa97f6a4fc44468752f7035b1c6fe2f59627bbf572b3251d249803eefe", "1c9d130c"}, 0x38)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
r7 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x81800)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00183c00fe880000000000000000000000000001ff020000000000000000000000000001880000000000010000000000000290"], 0x0)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10)
sendmsg$can_bcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="020000600100000001000060ab1833c787bf6c2d144ba8b41f010000aed9f943c3b090af2f3d7012e18970307c71351f632ad861d198c0b03b12627d9fb9e3519cbc88457805f7b0f115c1a1f57fddb7"], 0x80}, 0x1, 0x0, 0x0, 0x404c001}, 0x81)
sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000100"/15, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000"], 0x48}}, 0x0)
close(0x3)
recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x400100a0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r10)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000600)=""/135, 0x87, 0x40013001, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

40.314776182s ago: executing program 4 (id=4981):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ab50000000000000000000000000000000000000f7c716d26ab8606ebbbcc7fe98b3b6da6b36830d804ee596f17d9679d9c78a2854aaca45c4a0c2dadfe669f85c64f8697e9a046de8e837452ef9807a12a31747aa45803994c0f7768d1e40a498984af05c3cc51b30a9ea55451647d8551f0e92f279f32a65d76366d1c46317ddaec3c80db6db5530dd377aea80d7f2aa69bf7d2b0bef50abd3a10c7b4288108db10207532461ab2ddd8340291f676d35c085fbf496c8d4a35b9ffbd43bd8ea9ca176c3"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18000b00001c2e2d08000000000000000000001a120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f00000000c0), &(0x7f0000000140)=""/116}, 0x20)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000000)={0x0, 0x1})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ab50000000000000000000000000000000000000f7c716d26ab8606ebbbcc7fe98b3b6da6b36830d804ee596f17d9679d9c78a2854aaca45c4a0c2dadfe669f85c64f8697e9a046de8e837452ef9807a12a31747aa45803994c0f7768d1e40a498984af05c3cc51b30a9ea55451647d8551f0e92f279f32a65d76366d1c46317ddaec3c80db6db5530dd377aea80d7f2aa69bf7d2b0bef50abd3a10c7b4288108db10207532461ab2ddd8340291f676d35c085fbf496c8d4a35b9ffbd43bd8ea9ca176c3"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18000b00001c2e2d08000000000000000000001a120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f00000000c0), &(0x7f0000000140)=""/116}, 0x20) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000000)={0x0, 0x1}) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async)

40.310931363s ago: executing program 3 (id=4982):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x6, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3672eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

40.245206426s ago: executing program 4 (id=4983):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000940)="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", &(0x7f0000000600)=""/155}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0xffffe000)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xad, &(0x7f000000cf3d)=""/173, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r11 = socket$netlink(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="81a411a8", @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x14, r12, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040)

40.152369838s ago: executing program 4 (id=4984):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r8 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r9=>0x0})
sendto$packet(r7, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r9, 0x1, 0x62}, 0x14)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)="577a29be4c834fe105e3399e08de3d945090b935490a65b37419c3391c7a68c302f06f897abc0381c27dd32f", 0x2c}], 0x1, 0x48, 0x3)
recvmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r11, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x50, r10, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x8, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "00e3dba4a68c248e49e64009a2b5fbf4"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2aa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000)
getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f00000001c0))
r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r9], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xffffffffffffffb1, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfcd4, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0x22, 0x0, &(0x7f0000000140)="259a53f271a76d2608004c6588a8d6dc03d5cc2ac8547d548a6d5672ad26812311ae", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

40.151860757s ago: executing program 3 (id=4985):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000020301020000000000d3288ff4000009"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4000004)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r5, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
sendmsg$nl_route(r3, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000006800010025bd7000feffffec0a00070000000000180008801400010001000000000000001f00040002080400060007000700000008000500", @ANYRES32=r1], 0x40}}, 0x40040d0)
r6 = socket$pptp(0x18, 0x1, 0x2)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f00000000c0)={0x8, 0xd})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

25.061525711s ago: executing program 34 (id=4984):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r8 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r9=>0x0})
sendto$packet(r7, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r9, 0x1, 0x62}, 0x14)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)="577a29be4c834fe105e3399e08de3d945090b935490a65b37419c3391c7a68c302f06f897abc0381c27dd32f", 0x2c}], 0x1, 0x48, 0x3)
recvmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r11, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x50, r10, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x8, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "00e3dba4a68c248e49e64009a2b5fbf4"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2aa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000)
getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f00000001c0))
r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r9], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xffffffffffffffb1, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfcd4, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0x22, 0x0, &(0x7f0000000140)="259a53f271a76d2608004c6588a8d6dc03d5cc2ac8547d548a6d5672ad26812311ae", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

25.004077714s ago: executing program 35 (id=4985):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000020301020000000000d3288ff4000009"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4000004)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r5, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
sendmsg$nl_route(r3, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000006800010025bd7000feffffec0a00070000000000180008801400010001000000000000001f00040002080400060007000700000008000500", @ANYRES32=r1], 0x40}}, 0x40040d0)
r6 = socket$pptp(0x18, 0x1, 0x2)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f00000000c0)={0x8, 0xd})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

16.622056687s ago: executing program 1 (id=5088):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
write(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0004000000000000000000"], 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
sendmmsg$alg(r2, &(0x7f0000003000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc855}], 0x1, 0x4004004)
recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)}, 0x40002023)
socket$nl_rdma(0x10, 0x3, 0x14)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r3 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, 0x0, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911067000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendmmsg$inet(r6, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

16.265282389s ago: executing program 1 (id=5089):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f00000000c0))
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', <r2=>0x0, 0x4, 0x1, 0xd8, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x20, 0x17, 0x5efc, 0x55}})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @alu={0x4, 0x1, 0xb, 0x0, 0x8, 0xffffffffffffffc0, 0x10}], &(0x7f0000000400)='GPL\x00', 0x100, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x42, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x2, 0x10, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000009841000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="190000000400000004000000020400856aa7d4004b5c2244c797c6dce7f2946ea8adcdc044ed859ac23d9512b04ab5c78c905c7fc1583034f3f919f403", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f00000001c0), 0x0}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500082c"], 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086200000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000350d00008500000006000000bf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000005c0)={0x3, 0x4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

16.134694334s ago: executing program 1 (id=5090):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$packet(0x11, 0x3, 0x300) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)

16.018098692s ago: executing program 1 (id=5091):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
recvmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/246, 0xf6}, {0x0}], 0x2}, 0x4}, {{0x0, 0x0, 0x0}, 0xe2}], 0x2, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, 0x0, 0x0, 0x12000, 0x0)

15.615368456s ago: executing program 1 (id=5092):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}}, 0x24}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56561, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x0, 0xfff3}, {0xfff2}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x20, 0xc, 0x3f, 0x113000, 0x7, 0x7, 0x8001, 0x4}}, {0xc, 0x2, [0x401, 0x401, 0x2, 0x1]}}, {{0x1c, 0x1, {0x1, 0x8a, 0xc26c, 0x8d1, 0x2, 0x8d7d, 0x5, 0x2}}, {0x8, 0x2, [0xff7f, 0x1]}}, {{0x1c, 0x1, {0x2, 0xb, 0x82, 0x3ff, 0x0, 0x100, 0x9, 0x2}}, {0x8, 0x2, [0xae19, 0x9]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'rose0\x00', @link_local})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x40000)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000280)=r12}, 0x20)
r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r13, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000001880)=0x4)
r14 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r15=>0x0})
bind$can_j1939(r14, &(0x7f0000000380)={0x1d, r15, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
bind$can_raw(r14, &(0x7f0000000340)={0x1d, r15}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

15.354974418s ago: executing program 1 (id=5093):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x10, 0x2, 0x1}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x21}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8]}]}]}, 0x30}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r5, 0x89f4, &(0x7f0000000000))
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f00000002c0)={0x0, 0x6, 0xf002, 0xfa64})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r6})
syz_emit_ethernet(0xa3, &(0x7f00000000c0)={@link_local, @broadcast, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@llc={0x4, {@llc={0xf8, 0x7e, "1feb", "62054cd9173b5a86adc650e266a8f34acfb323d7a551d183e34eeb3ece8e195524a14a7bf24444498aaa7772a0eea48c6ba7374bc5b3c7239be78cb492563e252bf0d59c4aefda9535003d65853558a61f1789377c35ca8d04884f86f9c614c33e80c3a0a6194dcb8ef51460dac76174efd2379e771f9b3aa259b987ed2a75a4b1b4b2158de520495e29e69b1d"}}}}}, 0x0)

0s ago: executing program 36 (id=5093):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x10, 0x2, 0x1}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x21}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8]}]}]}, 0x30}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r5, 0x89f4, &(0x7f0000000000))
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f00000002c0)={0x0, 0x6, 0xf002, 0xfa64})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r6})
syz_emit_ethernet(0xa3, &(0x7f00000000c0)={@link_local, @broadcast, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@llc={0x4, {@llc={0xf8, 0x7e, "1feb", "62054cd9173b5a86adc650e266a8f34acfb323d7a551d183e34eeb3ece8e195524a14a7bf24444498aaa7772a0eea48c6ba7374bc5b3c7239be78cb492563e252bf0d59c4aefda9535003d65853558a61f1789377c35ca8d04884f86f9c614c33e80c3a0a6194dcb8ef51460dac76174efd2379e771f9b3aa259b987ed2a75a4b1b4b2158de520495e29e69b1d"}}}}}, 0x0)

kernel console output (not intermixed with test programs):

ng attributes in process `syz.0.3361'.
[  376.999993][T18448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3361'.
[  377.408371][ T6072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.411111][ T6072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.063638][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3375'.
[  378.071091][T18504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3375'.
[  378.366546][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.369225][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.378076][T18526] netlink: 'syz.2.3383': attribute type 12 has an invalid length.
[  378.407685][T18526] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3383'.
[  378.424190][T18525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3382'.
[  378.428635][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'.
[  378.544563][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'.
[  378.595358][T18540] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.646836][T18544] geneve2: entered promiscuous mode
[  378.653600][T18544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  378.653892][T18540] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.733912][ T5882] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.737364][ T5882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.740691][ T5882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.745691][ T5882] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.801838][T18540] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.839436][T18540] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.949273][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.959827][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.970525][ T5882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.984367][ T5882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.992197][T18556] netlink: 'syz.0.3391': attribute type 12 has an invalid length.
[  379.919331][T18584] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.966478][T18584] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.996022][T18586] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.019589][T18584] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.049088][T18586] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.070161][T18584] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.098628][T18586] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.155592][ T5882] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.167438][ T5882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.179289][ T5882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.185270][T18586] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.202553][ T5858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.048206][T18641] __nla_validate_parse: 2 callbacks suppressed
[  381.048224][T18641] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3413'.
[  381.086454][T18641] pim6reg: left allmulticast mode
[  382.181587][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.200371][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.224519][T18644] netlink: 'syz.1.3414': attribute type 1 has an invalid length.
[  382.236093][ T5882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.238419][T18644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3414'.
[  382.239711][ T5882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.435156][T18663] veth0_to_bond: entered allmulticast mode
[  382.436613][T18644] net_ratelimit: 3 callbacks suppressed
[  382.436625][T18644] netlink: zone id is out of range
[  382.442145][T18644] netlink: zone id is out of range
[  382.444932][T18644] netlink: zone id is out of range
[  382.449061][T18644] netlink: zone id is out of range
[  382.451635][T18644] netlink: zone id is out of range
[  382.472676][T18644] netlink: zone id is out of range
[  382.474926][T18644] netlink: zone id is out of range
[  382.477124][T18644] netlink: zone id is out of range
[  382.479282][T18644] netlink: zone id is out of range
[  382.481595][T18644] netlink: zone id is out of range
[  383.026300][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3422'.
[  383.456186][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  383.497357][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3425'.
[  383.605070][T18710] netlink: 'syz.2.3425': attribute type 4 has an invalid length.
[  383.849785][T18711] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  383.891910][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  384.163581][T18727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3431'.
[  384.167652][T18727] netlink: 'syz.0.3431': attribute type 29 has an invalid length.
[  384.187204][T18726] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  384.195317][T18729] vxcan0: entered allmulticast mode
[  384.205881][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3432'.
[  384.237481][T18729] batadv_slave_1: entered promiscuous mode
[  384.247346][T18729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3433'.
[  384.269859][T18729] batadv_slave_1 (unregistering): left promiscuous mode
[  384.313201][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.085568][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3451'.
[  386.156122][T18806] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3452'.
[  386.238560][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'.
[  386.346330][T18771] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  386.409491][T18818] netlink: 7906 bytes leftover after parsing attributes in process `syz.1.3456'.
[  386.509693][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'.
[  386.516697][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'.
[  386.714885][T18841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3465'.
[  386.718830][T18841] raw_sendmsg: syz.1.3465 forgot to set AF_INET. Fix it!
[  386.781574][T18845] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  386.784929][T18845] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  386.817118][T18845] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  386.820795][T18845] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  386.876054][T18845] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  386.879847][T18845] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  386.925367][T18845] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  386.928926][T18845] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  387.018977][ T5858] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  387.022836][ T5858] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  387.036124][ T5858] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  387.039126][ T5858] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  387.048138][ T5858] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  387.051072][ T5858] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  387.060611][ T5858] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  387.063618][ T5858] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  387.677841][T18856] net_ratelimit: 93 callbacks suppressed
[  387.677860][T18856] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  387.720770][T18856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3470'.
[  387.839703][T18865] netlink: zone id is out of range
[  387.841434][T18865] netlink: zone id is out of range
[  387.852453][T18865] netlink: zone id is out of range
[  387.854313][T18865] netlink: zone id is out of range
[  387.855994][T18865] netlink: zone id is out of range
[  387.857618][T18865] netlink: zone id is out of range
[  387.859550][T18865] netlink: zone id is out of range
[  387.863727][T18866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3472'.
[  387.864455][T18865] netlink: zone id is out of range
[  387.873073][T18865] netlink: zone id is out of range
[  387.961529][T18877] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  388.099066][T18892] geneve4: entered promiscuous mode
[  388.127435][T18885] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.204784][T18899] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  388.208437][T18899] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  388.529887][T18885] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.562192][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'.
[  388.568305][T18906] syzkaller0: entered promiscuous mode
[  388.570655][T18906] syzkaller0: entered allmulticast mode
[  389.004456][T18899] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  389.008798][T18899] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  389.048557][T18885] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.077280][T18899] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  389.081539][T18899] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  389.126506][T18899] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  389.130223][T18899] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  389.140485][T18885] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.179952][T18914] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.205403][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.215546][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.228436][ T5882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.232574][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.239984][T18914] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.256126][ T5882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.321421][T18914] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.385819][T18914] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.472638][ T5882] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.480486][ T5882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.488518][ T5882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.496529][ T5882] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.687426][T18937] xfrm0: entered promiscuous mode
[  389.689353][T18937] xfrm0: entered allmulticast mode
[  390.731619][T18989] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.757553][T18992] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.788240][T18989] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.835617][T18992] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.876880][T18989] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.915473][T18992] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.959237][T18989] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.997305][T18992] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.317836][ T5882] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  391.321453][ T5882] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  391.333233][ T5882] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  391.336204][ T5882] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  391.348408][ T5882] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  391.351953][ T5882] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  391.365848][ T5882] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  391.369448][ T5882] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  391.423875][ T5882] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.434730][ T5882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.447642][ T5882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.460275][ T5882] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.466236][T18991] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.517736][T18991] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.809762][T18991] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.869339][T18991] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.018322][T19008] netlink: 'syz.1.3512': attribute type 1 has an invalid length.
[  392.037008][T19008] bond5: entered promiscuous mode
[  392.039548][T19008] 8021q: adding VLAN 0 to HW filter on device bond5
[  392.047422][T19008] __nla_validate_parse: 7 callbacks suppressed
[  392.047435][T19008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3512'.
[  392.055540][T19008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  392.058606][T19008] IPv6: NLM_F_CREATE should be set when creating new route
[  392.061494][T19008] IPv6: NLM_F_CREATE should be set when creating new route
[  392.065457][T19008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  392.232229][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.245442][T11536] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.256480][T11536] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.269471][T11536] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.299511][T19011] netlink: 'syz.2.3513': attribute type 3 has an invalid length.
[  392.304134][T19011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3513'.
[  392.339044][T19011] netlink: 'syz.2.3513': attribute type 10 has an invalid length.
[  392.376087][T19013] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3461959822/3461959824
[  392.380708][T19013] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3461959822/3461959824
[  392.471785][T19017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3515'.
[  392.511496][T19017] netlink: 'syz.2.3515': attribute type 10 has an invalid length.
[  392.670459][T19025] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.716534][T19025] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.776106][T19025] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.828543][T19025] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.194545][T11536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.206567][T11536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.219106][T11536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.230823][T11536] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.837674][T19046] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.889829][T19046] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.949302][T19046] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.996866][T19046] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.149080][T11536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.157131][T11536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.165609][T11536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.174870][T11536] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.631367][T11536] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.642810][T11536] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.674411][T11536] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.733975][T19053] syz_tun: entered allmulticast mode
[  395.740292][T19053] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3523'.
[  395.967268][T19063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3526'.
[  396.015130][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3525'.
[  396.105679][T19066] netlink: 'syz.1.3526': attribute type 4 has an invalid length.
[  396.867646][T19072] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3528'.
[  396.876100][T19072] batadv_slave_0: entered promiscuous mode
[  396.885448][T19071] batadv_slave_0: left promiscuous mode
[  397.014248][T19026] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.067257][T19026] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.129122][T19026] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.662554][T19085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3533'.
[  397.894327][T19093] netlink: 'syz.1.3536': attribute type 2 has an invalid length.
[  397.897459][T19093] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3536'.
[  397.941192][T19096] xt_limit: Overflow, try lower: 271964/0
[  397.957177][T19100] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20001
[  398.719316][T11536] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.734836][T11536] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.747470][T11536] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.755794][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3539'.
[  398.770042][T11536] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.867311][T19116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3542'.
[  398.893638][T19116] netlink: 'syz.2.3542': attribute type 10 has an invalid length.
[  398.925212][T19121] netlink: 'syz.0.3544': attribute type 178 has an invalid length.
[  398.928564][T19121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3544'.
[  398.931550][T19121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3544'.
[  398.970642][T19113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3541'.
[  399.024156][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3546'.
[  399.084705][T19134] netlink: 'syz.0.3546': attribute type 4 has an invalid length.
[  399.304405][T19141] 8021q: adding VLAN 0 to HW filter on device bond7
[  399.325248][T19139] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  399.329156][T19139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3550'.
[  399.335167][T19144] netlink: 'syz.1.3552': attribute type 10 has an invalid length.
[  399.347970][T19144] 8021q: adding VLAN 0 to HW filter on device team0
[  399.351591][T19144] bond0: (slave team0): Enslaving as an active interface with an up link
[  399.597218][T19159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3556'.
[  399.648965][T19160] netlink: 'syz.1.3556': attribute type 4 has an invalid length.
[  399.653272][T19160] netlink: 'syz.1.3556': attribute type 4 has an invalid length.
[  399.896041][T19174] IPVS: length: 123 != 24
[  400.029399][T19184] tipc: Resetting bearer <ib:caif0>
[  400.200945][T19187] : renamed from bond_slave_0
[  400.319009][T19191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  400.453052][T19196] x_tables: ip_tables: udp match: only valid for protocol 17
[  401.187366][T19233] netlink: 'syz.2.3577': attribute type 11 has an invalid length.
[  401.381193][T19250] net_ratelimit: 23 callbacks suppressed
[  401.381208][T19250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  401.403974][ T5915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  401.409571][T19250] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  401.492274][T19259] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.568451][T19259] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.691414][T19259] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.744286][T19259] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.836821][T11536] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.848807][T11536] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.878628][T11536] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.890388][T11536] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.353354][ T5915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  402.377136][T19312] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.417225][T19312] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.476928][T19312] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.530455][T19312] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.706297][T19321] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.748149][T19321] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.798230][T19321] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.838752][T19321] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.895640][T11536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.904742][T11536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.916247][T11536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.928894][T11536] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.296688][T19340] __nla_validate_parse: 8 callbacks suppressed
[  403.296701][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3605'.
[  403.846366][T19356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3610'.
[  403.872078][T19356] netlink: 'syz.0.3610': attribute type 10 has an invalid length.
[  404.506344][T19363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  404.509481][T19363] IPv6: NLM_F_CREATE should be set when creating new route
[  404.523151][T19364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  404.608410][T19368] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3613'.
[  404.621726][T19368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'.
[  404.966855][T19359] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  404.989550][ T5858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.037352][ T5858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.080850][ T5858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.102619][ T5858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.172205][T19379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3616'.
[  405.197240][T19383] sctp: [Deprecated]: syz.2.3618 (pid 19383) Use of struct sctp_assoc_value in delayed_ack socket option.
[  405.197240][T19383] Use struct sctp_sack_info instead
[  405.222637][T19381] IPVS: Scheduler module ip_vs_sip not found
[  405.271188][T19394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'.
[  405.276222][T19394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'.
[  405.335544][T19387] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  405.339648][T19387] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  405.388507][T19408] sctp: [Deprecated]: syz.2.3626 (pid 19408) Use of int in max_burst socket option.
[  405.388507][T19408] Use struct sctp_assoc_value instead
[  405.414361][T19408] netlink: 468 bytes leftover after parsing attributes in process `syz.2.3626'.
[  405.509313][T19387] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  405.515203][T19387] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  405.566094][T19387] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  405.570553][T19387] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  405.621599][T19420] syz_tun: left promiscuous mode
[  405.625614][T19420] syz_tun: left allmulticast mode
[  405.628849][T19420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  405.636715][T19387] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  405.640246][T19387] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  405.652760][ T5915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  405.691442][T19422] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  405.709281][T19422] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  405.739304][T19422] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  405.752292][T11536] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  405.756309][T11536] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  405.763878][T19422] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  405.776072][T19422] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  405.796944][T19422] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  405.808740][T19422] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  405.815915][T11536] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  405.819547][T11536] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  405.833365][T19422] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  405.840193][T11536] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  405.846580][T11536] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  405.861230][T11536] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  405.865168][T11536] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  406.144140][T19442] netlink: 'syz.1.3636': attribute type 4 has an invalid length.
[  406.153059][T19442] netlink: 'syz.1.3636': attribute type 4 has an invalid length.
[  406.330770][T19452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3638'.
[  406.358883][T19461] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3640'.
[  406.672939][ T5915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  407.154192][T19508] ieee802154 phy0 wpan0: encryption failed: -22
[  408.036598][T19510] netlink: 'syz.0.3654': attribute type 4 has an invalid length.
[  408.088559][T19517] netlink: 'syz.0.3656': attribute type 7 has an invalid length.
[  408.160127][T19522] syzkaller1: entered promiscuous mode
[  408.164511][T19522] syzkaller1: entered allmulticast mode
[  408.307784][T19531] __nla_validate_parse: 6 callbacks suppressed
[  408.307823][T19531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3662'.
[  408.313863][T19531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3662'.
[  409.174035][T19531] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  409.476221][T19562] net_ratelimit: 57 callbacks suppressed
[  409.476236][T19562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  409.502740][ T5316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  409.510050][T19562] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  409.561273][T19568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3671'.
[  409.566260][T19568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3671'.
[  409.761836][T19590] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.856627][T19590] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.860343][T19597] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3679'.
[  409.899210][T19600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3680'.
[  409.930600][T19590] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.000914][T19590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.126447][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.134930][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.143441][ T5882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.150849][ T5882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.368221][T19622] bond0: (slave team0): Releasing backup interface
[  410.382210][T19622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  410.406212][T19622] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  410.428275][T19626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3687'.
[  410.513084][ T5316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  410.627643][T19642] netlink: 'syz.2.3691': attribute type 9 has an invalid length.
[  410.702890][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'.
[  411.116130][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'.
[  412.162922][T19694] net veth1_virt_wifi : renamed from virt_wifi0
[  413.266256][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3715'.
[  413.545914][T19736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'.
[  413.766367][T19739] syzkaller0: entered promiscuous mode
[  413.768635][T19739] syzkaller0: entered allmulticast mode
[  413.824393][T19751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3721'.
[  413.921605][T19757] veth0_to_bridge: entered promiscuous mode
[  413.927404][T19758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3722'.
[  413.961998][T19756] veth0_to_bridge: left promiscuous mode
[  414.048820][T19766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3725'.
[  414.054016][T19766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3725'.
[  414.123191][T19770] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  414.127369][T19770] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  414.179870][T19770] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  414.210514][T19770] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  414.224428][T19774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3727'.
[  414.238925][T19778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3728'.
[  414.270274][T19770] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  414.275731][T19770] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  414.326362][T19770] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  414.329965][T19770] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  414.343874][T19782] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3729'.
[  414.402667][T11536] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  414.405666][T11536] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  414.419867][T11536] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  414.429948][T11536] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  414.433054][T11536] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  414.435834][T11536] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  414.452485][T11536] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  414.461872][T11536] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  414.644205][T19791] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  414.669416][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3733'.
[  414.673750][T19793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3733'.
[  416.050272][T19848] netlink: 'syz.0.3748': attribute type 10 has an invalid length.
[  416.050272][T19847] netlink: 'syz.0.3748': attribute type 10 has an invalid length.
[  416.050307][T19847] !: entered promiscuous mode
[  416.059890][T19847] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  416.066566][T19848] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  416.218029][T19855] netlink: 'syz.2.3749': attribute type 4 has an invalid length.
[  417.440653][T19928] netlink: 'syz.2.3770': attribute type 1 has an invalid length.
[  417.660459][T19936] netlink: 'syz.2.3772': attribute type 3 has an invalid length.
[  418.227577][T19945] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  418.252771][ T7016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  418.443998][T19951] netlink: 'syz.0.3776': attribute type 4 has an invalid length.
[  418.458948][T19949] netlink: 'syz.0.3776': attribute type 4 has an invalid length.
[  418.535411][T19939] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  418.541182][T19959] netlink: 'syz.0.3778': attribute type 1 has an invalid length.
[  418.556181][T19959] syzkaller1: entered promiscuous mode
[  418.558668][T19959] syzkaller1: entered allmulticast mode
[  418.604571][T15072] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  419.680189][T19992] __nla_validate_parse: 20 callbacks suppressed
[  419.680200][T19992] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3788'.
[  420.513035][T20006] netlink: 'syz.1.3793': attribute type 1 has an invalid length.
[  421.823204][T20056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3804'.
[  421.913176][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'.
[  421.988875][T20058] macsec1: entered promiscuous mode
[  421.992743][T20058] macsec1: entered allmulticast mode
[  421.994922][T20058] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  422.161471][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3812'.
[  422.997799][T20084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3813'.
[  423.184517][T20091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3816'.
[  423.593939][T20119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  423.623739][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  423.656979][T20119] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  424.012633][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.234102][T20155] veth0: entered promiscuous mode
[  424.240851][T20155] batadv_slave_0: entered promiscuous mode
[  424.281226][T20158] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3834'.
[  424.287268][T20158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  424.290585][T20158] syzkaller0: entered promiscuous mode
[  424.293288][T20158] syzkaller0: entered allmulticast mode
[  424.301994][T20154] batadv_slave_0: left promiscuous mode
[  424.304437][T20154] veth0: left promiscuous mode
[  424.308238][T20157] tipc: Resetting bearer <eth:syzkaller0>
[  424.333871][T20157] tipc: Disabling bearer <eth:syzkaller0>
[  424.345571][T20164] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3836'.
[  424.437163][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3837'.
[  424.485016][T20171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3838'.
[  424.975743][T20199] __nla_validate_parse: 2 callbacks suppressed
[  424.975752][T20199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3845'.
[  425.124593][T20208] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3848'.
[  425.148858][T20206] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  425.155836][T20206] veth0: entered promiscuous mode
[  425.158070][T20206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3847'.
[  425.404794][T20213] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3849'.
[  425.409881][T20213] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3849'.
[  425.630157][T20221] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  425.653009][ T5915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.660277][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'.
[  425.908629][T20229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3854'.
[  425.937180][T20229] netlink: 'syz.2.3854': attribute type 10 has an invalid length.
[  425.942586][ T5316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.956412][T20230] netlink: 'syz.0.3853': attribute type 1 has an invalid length.
[  425.990408][T20230] bond8: entered promiscuous mode
[  425.993119][T20230] 8021q: adding VLAN 0 to HW filter on device bond8
[  426.052396][T20227] 8021q: adding VLAN 0 to HW filter on device bond9
[  426.058163][T20227] bond8: (slave bond9): making interface the new active one
[  426.061538][T20227] bond9: entered promiscuous mode
[  426.069441][T20227] bond8: (slave bond9): Enslaving as an active interface with an up link
[  426.172081][T20253] netlink: 'syz.0.3859': attribute type 4 has an invalid length.
[  426.186824][T20253] netlink: 'syz.0.3859': attribute type 4 has an invalid length.
[  426.332135][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3860'.
[  426.518699][T20280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3861'.
[  427.048493][T20285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3862'.
[  427.158914][T20293] syzkaller1: entered promiscuous mode
[  427.161238][T20293] syzkaller1: entered allmulticast mode
[  427.312497][ T5316] page_pool_release_retry() stalled pool shutdown: id 1414, 1 inflight 60 sec
[  427.431937][T20297] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.478418][T20297] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.541649][T20297] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.595881][T20297] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.753316][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.756930][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.772781][ T5882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.776227][ T5882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.142972][T20319] syzkaller1: entered promiscuous mode
[  428.145238][T20319] syzkaller1: entered allmulticast mode
[  428.201721][T20323] sctp: [Deprecated]: syz.2.3878 (pid 20323) Use of int in max_burst socket option.
[  428.201721][T20323] Use struct sctp_assoc_value instead
[  428.346249][T20335] netlink: 'syz.1.3879': attribute type 4 has an invalid length.
[  428.400877][T20336] netlink: 'syz.1.3879': attribute type 4 has an invalid length.
[  428.565881][T20350] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  428.568629][T20342] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  428.594347][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  429.866208][T20401] netlink: 'syz.0.3896': attribute type 29 has an invalid length.
[  430.193599][T20426] netlink: 'syz.1.3902': attribute type 1 has an invalid length.
[  430.218954][T20426] 8021q: adding VLAN 0 to HW filter on device bond6
[  430.253476][T20426] bond6: (slave veth1): Enslaving as an active interface with a down link
[  430.259250][T20426] __nla_validate_parse: 11 callbacks suppressed
[  430.259261][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3902'.
[  430.283220][T20426] netlink: 'syz.1.3902': attribute type 10 has an invalid length.
[  430.285832][T20426] syz_tun: entered promiscuous mode
[  430.294303][T20426] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  430.398835][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3906'.
[  430.501503][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3905'.
[  430.944300][T20435] bridge4: the hash_elasticity option has been deprecated and is always 16
[  430.948339][T20435] bridge4: entered allmulticast mode
[  431.037286][T20460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3910'.
[  431.177602][T20473] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3914'.
[  431.948843][T20480] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3915'.
[  432.113240][T20494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3918'.
[  432.296941][T20520] netlink: 'syz.1.3922': attribute type 10 has an invalid length.
[  432.300453][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3922'.
[  432.309386][T20521] netlink: 'syz.2.3924': attribute type 1 has an invalid length.
[  432.504146][T20524] tipc: Resetting bearer <eth:macvtap0>
[  432.624928][T20526] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.635381][ T5858] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  432.639737][ T5858] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  432.643858][ T5858] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  432.647505][ T5858] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  432.650699][ T5858] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  432.653713][ T5858] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  432.656956][ T5858] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  432.660086][ T5858] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  432.687521][T20526] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.728243][T20526] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.779017][T20526] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.861497][ T5858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.885404][ T5858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.888256][ T5858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.890932][ T5858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.897685][T20534] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  432.913723][T20534] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  432.922931][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  432.999546][T20534] !: left promiscuous mode
[  433.013381][T20534] xfrm0: left promiscuous mode
[  433.015527][T20534] xfrm0: left allmulticast mode
[  433.017918][T20534] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  433.124552][T20551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3932'.
[  433.269442][T20563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3935'.
[  434.891049][T20611] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  434.895829][T20611] batman_adv: batadv0: Adding interface: gretap1
[  434.898003][T20611] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  434.907322][T20611] batman_adv: batadv0: Interface activated: gretap1
[  435.755342][T20619] __nla_validate_parse: 1 callbacks suppressed
[  435.755356][T20619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3952'.
[  435.809996][T20619] netlink: 'syz.0.3952': attribute type 10 has an invalid length.
[  435.925292][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3955'.
[  435.949215][T20626] netlink: 'syz.0.3955': attribute type 1 has an invalid length.
[  435.965490][T20626] 8021q: adding VLAN 0 to HW filter on device bond10
[  435.970025][T20626] netlink: 'syz.0.3955': attribute type 1 has an invalid length.
[  435.973011][T20626] netlink: 'syz.0.3955': attribute type 4 has an invalid length.
[  435.975711][T20626] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3955'.
[  435.980906][T20626] netlink: 'syz.0.3955': attribute type 4 has an invalid length.
[  435.985149][T20626] netlink: 'syz.0.3955': attribute type 4 has an invalid length.
[  436.290767][T20647] netlink: 'syz.0.3960': attribute type 10 has an invalid length.
[  436.296836][T20647] team0: Device macvlan0 failed to change mtu
[  436.296854][T20647] bond0: (slave team0): Error -22 calling dev_set_mtu
[  436.735633][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3963'.
[  436.739630][T20655] netlink: 'syz.0.3963': attribute type 1 has an invalid length.
[  436.745194][T20655] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3963'.
[  437.144717][T20673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3968'.
[  437.188440][T20671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3967'.
[  437.426295][T20695] veth0: entered promiscuous mode
[  437.473657][T20704] validate_nla: 1 callbacks suppressed
[  437.473671][T20704] netlink: 'syz.2.3976': attribute type 21 has an invalid length.
[  437.478522][T20704] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3976'.
[  437.489990][T20694] veth0: left promiscuous mode
[  437.690682][T20725] IPVS: Scheduler module ip_vs_sip not found
[  437.973421][T20734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3982'.
[  437.995118][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'.
[  437.999059][T20739] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  438.046476][T20743] netlink: 'syz.0.3985': attribute type 5 has an invalid length.
[  438.624414][T20777] netlink: 'syz.2.3995': attribute type 10 has an invalid length.
[  438.624419][T20778] netlink: 'syz.2.3995': attribute type 10 has an invalid length.
[  439.007900][T20811] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  439.105132][T20817] netlink: 'syz.2.4003': attribute type 4 has an invalid length.
[  439.771721][T20839] netlink: 'syz.1.4010': attribute type 29 has an invalid length.
[  439.795151][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  439.799307][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.802190][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  440.234511][T20871] netlink: 'syz.1.4020': attribute type 2 has an invalid length.
[  441.456534][T20896] netlink: 'syz.2.4026': attribute type 3 has an invalid length.
[  441.459857][T20896] __nla_validate_parse: 8 callbacks suppressed
[  441.459868][T20896] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4026'.
[  441.466565][T20897] netlink: 'syz.2.4026': attribute type 3 has an invalid length.
[  441.469346][T20897] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4026'.
[  441.587495][T20905] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.657303][T20905] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.717838][T20905] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.768278][T20905] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.854942][ T5858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.863793][ T5858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.872070][ T5858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.881923][ T5858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.051780][T20917] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.095020][T20917] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.114267][T20919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4033'.
[  442.149799][T20917] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.186644][T20917] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.521198][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.545620][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.550453][ T5882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.566450][T20975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4050'.
[  444.569753][T20975] netlink: 'syz.0.4050': attribute type 7 has an invalid length.
[  444.575387][T20975] netlink: 'syz.0.4050': attribute type 8 has an invalid length.
[  444.579307][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4050'.
[  444.582643][ T5882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.591726][T20975] ip6gretap0: entered promiscuous mode
[  444.595799][T20975] syz_tun: entered promiscuous mode
[  444.601160][T20975] syz_tun: left promiscuous mode
[  444.614505][T20975] ip6gretap0: left promiscuous mode
[  444.664078][T20980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4052'.
[  444.730973][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4055'.
[  444.812748][T20998] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  445.656936][T21006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  445.671091][T21006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  445.750281][T21013] bridge0: port 1(erspan0) entered blocking state
[  445.755411][T21013] bridge0: port 1(erspan0) entered disabled state
[  445.758792][T21013] erspan0: entered allmulticast mode
[  445.763683][T21013] erspan0: entered promiscuous mode
[  445.830098][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'.
[  446.385727][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4072'.
[  446.417449][T21052] 8021q: adding VLAN 0 to HW filter on device bond11
[  446.425427][T21052] bond11: entered promiscuous mode
[  447.105925][T21072] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.145158][T21072] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.205661][T21072] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.264762][T21072] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.288446][T21080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4083'.
[  447.367223][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.381036][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.396641][ T5858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.408443][ T5858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.027588][T21112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4094'.
[  448.065930][T21115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4095'.
[  448.369141][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4097'.
[  448.390587][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4097'.
[  448.451492][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4099'.
[  448.461868][T21135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4099'.
[  448.611230][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4100'.
[  448.863451][T21158] netlink: 716 bytes leftover after parsing attributes in process `syz.2.4105'.
[  448.942804][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4105'.
[  449.009932][T21164] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  449.206606][T21178] netlink: 'syz.0.4111': attribute type 29 has an invalid length.
[  449.287346][T21181] vxcan0: left allmulticast mode
[  449.338577][T21186] netlink: 'syz.2.4114': attribute type 18 has an invalid length.
[  449.372832][T21186] IPVS: Scheduler module ip_vs_sip not found
[  449.391351][T21186] netlink: 'syz.2.4114': attribute type 29 has an invalid length.
[  449.399616][T21186] netlink: 'syz.2.4114': attribute type 29 has an invalid length.
[  450.373741][T21231] netlink: 'syz.1.4120': attribute type 4 has an invalid length.
[  451.899893][T21287] netlink: 'syz.2.4141': attribute type 10 has an invalid length.
[  452.009556][T21300] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.121043][T21300] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.218312][T21300] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.257228][T21300] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.284149][T21323] unknown channel width for channel at 909000KHz?
[  452.337969][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.352483][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.355546][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.364389][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.664398][T21347] netlink: zone id is out of range
[  452.666602][T21347] netlink: zone id is out of range
[  452.668737][T21347] netlink: zone id is out of range
[  452.673365][T21347] netlink: zone id is out of range
[  452.675677][T21347] netlink: zone id is out of range
[  452.677862][T21347] netlink: zone id is out of range
[  452.679862][T21347] netlink: zone id is out of range
[  452.681722][T21347] netlink: zone id is out of range
[  452.685254][T21347] netlink: zone id is out of range
[  452.687575][T21347] netlink: set zone limit has 8 unknown bytes
[  453.503802][T21389] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.624960][T21395] __nla_validate_parse: 8 callbacks suppressed
[  453.624970][T21395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4173'.
[  453.648985][T21395] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4173'.
[  453.655389][T21401] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4175'.
[  453.659309][T21401] 0X: renamed from caif0
[  453.664301][T21401] 0X: entered allmulticast mode
[  453.666738][T21395] netlink: 'syz.2.4173': attribute type 29 has an invalid length.
[  453.878568][T21422] bridge0: port 1(erspan0) entered blocking state
[  453.884826][T21422] bridge0: port 1(erspan0) entered disabled state
[  453.887606][T21422] erspan0: entered allmulticast mode
[  453.891183][T21422] erspan0: entered promiscuous mode
[  453.906701][T21422] erspan0: left allmulticast mode
[  453.908875][T21422] erspan0: left promiscuous mode
[  453.912149][T21422] bridge0: port 1(erspan0) entered disabled state
[  453.994899][T21430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4181'.
[  453.998790][T21430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4181'.
[  454.076120][T21433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4181'.
[  454.117937][T21427] netlink: 'syz.2.4181': attribute type 4 has an invalid length.
[  454.126037][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4183'.
[  454.130350][T21437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4183'.
[  454.252798][T21449] netlink: 'syz.1.4184': attribute type 13 has an invalid length.
[  454.254160][T21447] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4187'.
[  454.255830][T21449] netlink: 'syz.1.4184': attribute type 17 has an invalid length.
[  454.260562][T21447] xt_time: invalid argument - start or stop time greater than 23:59:59
[  454.396699][T21451] netlink: 732 bytes leftover after parsing attributes in process `syz.2.4187'.
[  454.538466][T21449] syz_tun: left promiscuous mode
[  454.711836][T21449] 8021q: adding VLAN 0 to HW filter on device team0
[  454.725952][T21449] 0X: left allmulticast mode
[  454.728165][T21450] xfrm0: entered promiscuous mode
[  454.734098][T21450] xfrm0: entered allmulticast mode
[  454.843068][T11536] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  455.156886][ T5858] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  455.381325][T21511] erspan0: left allmulticast mode
[  455.386931][T21511] erspan0: left promiscuous mode
[  455.389113][T21511] bridge0: port 1(erspan0) entered disabled state
[  455.655049][T21521] netlink: 'syz.0.4201': attribute type 10 has an invalid length.
[  455.803950][T21530] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001
[  455.880725][T21533] bond0: (slave gretap0): Error: Device type is different from other slaves
[  455.897850][T21532] vlan0: entered promiscuous mode
[  455.900355][T21532] bond0: entered promiscuous mode
[  455.902794][T21532] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  455.905980][T21532] syz_tun: entered promiscuous mode
[  455.908617][T21532] vlan0: entered allmulticast mode
[  455.910952][T21532] bond0: entered allmulticast mode
[  455.913586][T21532] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  455.916240][T21532] syz_tun: entered allmulticast mode
[  455.919629][ T6072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.927397][ T6072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.951388][T21532] netlink: 'syz.1.4205': attribute type 10 has an invalid length.
[  456.067617][T21540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.631914][T21558] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  456.863140][T21534] tipc: Resetting bearer <eth:syzkaller0>
[  456.955434][ T5858] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  458.001266][T21534] tipc: Disabling bearer <eth:syzkaller0>
[  458.099380][T21584] netlink: 'syz.1.4217': attribute type 10 has an invalid length.
[  458.123291][T21587] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.283022][T21587] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.317578][T21587] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.376924][T21587] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.402100][T21599] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.438158][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.447052][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.456795][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.465185][T11536] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.500826][T21599] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.619354][T21599] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.806495][T21599] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.873015][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.883963][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.898308][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.909685][ T5858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.992771][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  459.425702][T21651] netlink: 'syz.0.4230': attribute type 1 has an invalid length.
[  459.461052][T21651] bond12: entered promiscuous mode
[  459.463720][T21651] 8021q: adding VLAN 0 to HW filter on device bond12
[  459.480967][T21650] bond12: (slave bridge9): making interface the new active one
[  459.484788][T21650] bridge9: entered promiscuous mode
[  459.488136][T21650] bond12: (slave bridge9): Enslaving as an active interface with an up link
[  459.611581][T21658] syz_tun: left allmulticast mode
[  459.925175][T21682] __nla_validate_parse: 10 callbacks suppressed
[  459.925187][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4240'.
[  460.289316][T21688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4242'.
[  460.294181][T21688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4242'.
[  460.390546][T21693] net_ratelimit: 3 callbacks suppressed
[  460.390555][T21693] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  460.485892][T21706] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.555985][T21706] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.595930][T21716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4250'.
[  460.601293][T21716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4250'.
[  460.682725][T21714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4249'.
[  460.702986][T21706] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.746405][T21714] netlink: 'syz.2.4249': attribute type 4 has an invalid length.
[  461.038044][T21706] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.137148][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  461.149853][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  461.166790][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  461.177510][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.264782][T21741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4257'.
[  461.306921][T21746] xt_l2tp: wrong L2TP version: 1
[  461.381143][T21751] syzkaller1: entered promiscuous mode
[  461.385364][T21751] syzkaller1: entered allmulticast mode
[  461.685047][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4264'.
[  461.688670][T21763] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  461.982184][T21773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4266'.
[  462.176307][T21783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4268'.
[  462.361466][T21800] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  462.680711][T21821] netlink: 'syz.2.4278': attribute type 29 has an invalid length.
[  463.183587][T21838] team0: Caught tx_queue_len zero misconfig
[  464.363742][T21914] syzkaller1: entered promiscuous mode
[  464.366138][T21914] syzkaller1: entered allmulticast mode
[  464.555550][T21923] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.930681][T21923] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.993998][T21923] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.038675][T21923] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.104043][T21947] __nla_validate_parse: 7 callbacks suppressed
[  465.104057][T21947] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4308'.
[  465.256797][T21950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4309'.
[  465.337767][T11536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.343895][T11536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.355006][T11536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.368015][T11536] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.424805][T21957] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4310'.
[  465.428526][T21957] netlink: 'syz.1.4310': attribute type 1 has an invalid length.
[  465.488698][T21966] netlink: 'syz.2.4314': attribute type 29 has an invalid length.
[  465.654649][T21978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  465.708914][T21971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4313'.
[  465.834235][T21986] netlink: 'syz.1.4313': attribute type 4 has an invalid length.
[  465.891083][T21978] tipc: Disabling bearer <eth:syzkaller0>
[  465.949104][T21992] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4318'.
[  465.954729][T21992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4318'.
[  465.959736][T21992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4318'.
[  466.020451][T22001] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4322'.
[  466.216963][T22006] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  466.248032][T22010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4325'.
[  466.248046][T22009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4325'.
[  466.417347][T22014] netlink: 'syz.2.4326': attribute type 10 has an invalid length.
[  467.312524][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  467.549555][T22078] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  467.777666][T22082] netlink: 'syz.1.4345': attribute type 10 has an invalid length.
[  468.008686][T22101] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.058084][T22104] syzkaller1: entered promiscuous mode
[  468.060351][T22104] syzkaller1: entered allmulticast mode
[  468.070113][T22101] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.125251][T22101] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.189577][T22101] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.266466][T22108] netlink: 'syz.2.4352': attribute type 10 has an invalid length.
[  468.379023][T11536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.428811][T22118] bridge: RTM_NEWNEIGH with invalid ether address
[  468.446575][T11536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.460980][T11536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.476659][T22118] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  468.569040][T11536] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.570514][T22163] netlink: 'syz.2.4367': attribute type 7 has an invalid length.
[  469.575620][T22164] netlink: 'syz.2.4367': attribute type 7 has an invalid length.
[  469.623489][T22163] 8021q: adding VLAN 0 to HW filter on device bond2
[  469.704036][T22163] bond2 (unregistering): Released all slaves
[  469.716641][T22164] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  469.719504][T22168] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.828920][T22168] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.878945][T22168] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.938924][T22168] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.008856][T11536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.022856][T11536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.035971][T11536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.045634][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.741674][T22212] netlink: 'syz.1.4379': attribute type 2 has an invalid length.
[  470.761830][T22209] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.807782][T22209] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.885396][T22209] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.000609][T22209] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.060872][T22230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  471.067661][T22230] tipc: Resetting bearer <eth:syzkaller0>
[  471.089509][T22229] tipc: Disabling bearer <eth:syzkaller0>
[  471.112183][T11536] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.121634][T11536] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.125952][T22232] __nla_validate_parse: 49 callbacks suppressed
[  471.125961][T22232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4387'.
[  471.131793][T22232] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4387'.
[  471.135287][T11536] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.142272][T22232] netlink: 'syz.1.4387': attribute type 2 has an invalid length.
[  471.150725][T11536] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.187505][T22236] IPVS: set_ctl: invalid protocol: 7 172.20.20.19:65532
[  471.202825][T22236] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20001
[  471.241182][T22247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4392'.
[  471.251498][T22247] bond_slave_1: Caught tx_queue_len zero misconfig
[  471.419084][T22257] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.431637][T22263] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  471.459224][T22257] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.516883][T22257] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.550045][T22257] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.661770][T22273] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4397'.
[  471.845077][T22280] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  472.034488][T22290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4400'.
[  472.136226][T22296] netlink: 'syz.1.4400': attribute type 10 has an invalid length.
[  472.155761][T22298] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.198904][T22298] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.247338][T22298] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.308324][T22298] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.326246][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'.
[  472.348547][T22304] bond0: (slave syz_tun): Releasing backup interface
[  472.351407][T22304] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  472.360332][T22304] syz_tun (unregistering): left allmulticast mode
[  472.394637][T22305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4403'.
[  472.411995][T11536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.425067][T11536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.436704][T11536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.449914][T11536] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.542079][T22308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4404'.
[  473.173578][ T5858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.181618][ T5858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.189765][ T5858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.198309][ T5858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.582655][T22344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4414'.
[  473.591909][T22344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4414'.
[  473.829955][T22360] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  473.868603][T22362] macvlan0: left allmulticast mode
[  473.870927][T22362] netlink: 'syz.0.4419': attribute type 1 has an invalid length.
[  473.874762][T22362] netlink: 'syz.0.4419': attribute type 2 has an invalid length.
[  474.070903][T22378] netlink: get zone limit has 8 unknown bytes
[  475.556826][T22464] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  476.237674][T22493] __nla_validate_parse: 9 callbacks suppressed
[  476.237690][T22493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4449'.
[  476.320582][T22497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4450'.
[  476.327825][T22497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4450'.
[  477.823063][T22573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4469'.
[  477.923979][T22581] netlink: 'syz.2.4471': attribute type 1 has an invalid length.
[  478.180656][T22604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4479'.
[  478.184626][T22604] netlink: 'syz.0.4479': attribute type 29 has an invalid length.
[  478.194592][T22603] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4478'.
[  478.200147][T22603] netlink: 'syz.2.4478': attribute type 29 has an invalid length.
[  478.369583][T22615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4480'.
[  478.421637][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4482'.
[  478.556484][T22624] IPVS: Unknown mcast interface: vcan0
[  478.656357][T22634] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  478.665189][T22634] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4488'.
[  478.727342][T22643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  478.769379][T22643] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  478.774195][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4490'.
[  478.816807][ T5858] nci: nci_ntf_packet: unknown ntf opcode 0x4
[  479.746666][T22700] IPVS: set_ctl: invalid protocol: 103 172.30.1.3:20004
[  479.910954][T22707] netlink: 'syz.0.4507': attribute type 4 has an invalid length.
[  479.922815][T22707] netlink: 'syz.0.4507': attribute type 4 has an invalid length.
[  480.391862][T22736] netlink: 'syz.0.4514': attribute type 10 has an invalid length.
[  481.109848][T22784] netlink: 'syz.1.4528': attribute type 5 has an invalid length.
[  481.207044][T22783] netlink: 'syz.0.4527': attribute type 4 has an invalid length.
[  481.222131][T22792] netlink: 'syz.1.4529': attribute type 1 has an invalid length.
[  481.236141][T22792] netlink: 'syz.1.4529': attribute type 2 has an invalid length.
[  481.376590][T22798] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.429015][T22798] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.467542][T22798] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.509884][T22798] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.584936][T11536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.592552][T11536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.604075][T11536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.611163][T11536] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.702704][T22815] __nla_validate_parse: 9 callbacks suppressed
[  481.702719][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4536'.
[  481.847569][T22823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4538'.
[  482.173044][T22851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4544'.
[  482.671219][T22886] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4550'.
[  482.676133][T22886] bridge_slave_0: default FDB implementation only supports local addresses
[  482.715744][T22890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4551'.
[  482.901641][T22908] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  482.905929][T22908] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  482.974166][T22911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4556'.
[  482.978571][T22912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4557'.
[  483.033543][T22913] validate_nla: 4 callbacks suppressed
[  483.033557][T22913] netlink: 'syz.0.4557': attribute type 4 has an invalid length.
[  483.039937][T22913] netlink: 'syz.0.4557': attribute type 4 has an invalid length.
[  483.148962][T22917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4558'.
[  483.249205][T22921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4559'.
[  483.254200][T22921] netlink: 'syz.0.4559': attribute type 29 has an invalid length.
[  483.307430][T22923] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.345858][T22923] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.375196][T22925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  483.378596][T22925] syzkaller0: entered promiscuous mode
[  483.380588][T22925] syzkaller0: entered allmulticast mode
[  483.385774][T22923] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.401531][T22925] tipc: Resetting bearer <eth:syzkaller0>
[  483.407636][T22923] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.414062][T22924] tipc: Resetting bearer <eth:syzkaller0>
[  483.425316][T22924] tipc: Disabling bearer <eth:syzkaller0>
[  483.464017][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.471241][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.485430][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.502278][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.667983][T22933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  483.676728][T22938] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4564'.
[  483.682934][T22933] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.728881][T22933] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.793430][T22933] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.850477][T22933] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.926564][T22945] netlink: 'syz.2.4566': attribute type 23 has an invalid length.
[  484.484044][T22938] delete_channel: no stack
[  484.602780][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  485.042828][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.050038][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.060148][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.080941][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.191357][T22980] netlink: 'syz.2.4574': attribute type 1 has an invalid length.
[  485.393188][T22996] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  485.766576][T23005] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  486.171498][T23016] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  486.647788][T23048] netlink: 'syz.1.4593': attribute type 1 has an invalid length.
[  486.651044][T23048] netlink: 'syz.1.4593': attribute type 2 has an invalid length.
[  486.656926][T23048] netlink: 'syz.1.4593': attribute type 1 has an invalid length.
[  486.660027][T23048] netlink: 'syz.1.4593': attribute type 2 has an invalid length.
[  486.673198][T23052] netlink: 'syz.2.4594': attribute type 16 has an invalid length.
[  486.784808][T23057] __nla_validate_parse: 10 callbacks suppressed
[  486.784824][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4596'.
[  486.881582][T23059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4597'.
[  486.885995][T23059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4597'.
[  486.889728][T23059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4597'.
[  486.894097][T23059] netlink: 540 bytes leftover after parsing attributes in process `syz.2.4597'.
[  486.905339][T23059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4597'.
[  486.909329][T23059] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4597'.
[  486.927856][T23066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4599'.
[  487.018911][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4600'.
[  487.072873][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  487.170858][T23086] IPVS: length: 72 != 24
[  487.172853][T23085] IPVS: length: 72 != 24
[  488.189178][T23088] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.193784][ T5854] Bluetooth: hci0: command tx timeout
[  488.259654][T23088] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.321440][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4608'.
[  488.571411][T23088] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.641019][T23088] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.707414][T23112] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  488.717040][ T5858] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  488.728838][ T5858] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  488.745396][ T5858] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  488.757156][ T5858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.798004][T23117] validate_nla: 1 callbacks suppressed
[  488.798019][T23117] netlink: 'syz.0.4613': attribute type 10 has an invalid length.
[  488.850204][T23117] syz_tun: entered promiscuous mode
[  489.951054][ T5858] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.043452][ T5858] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.118531][ T5858] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.194538][ T5858] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.424959][T23030] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  490.432169][T23030] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  490.440125][T23030] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  490.446593][T23030] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  490.453000][T23030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  490.866018][T23030] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  490.869598][T23030] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  490.873116][T23030] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  490.876426][T23030] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  490.879346][T23030] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  491.757190][ T5858] bond1 (unregistering): Released all slaves
[  491.767920][ T5858] bond0 (unregistering): Released all slaves
[  491.881033][ T5858] tipc: Disabling bearer <udp:syz2>
[  491.885446][ T5858] tipc: Disabling bearer <ib:caif0>
[  491.890150][ T5858] tipc: Left network mode
[  491.975028][T23206] Bluetooth: MGMT ver 1.23
[  492.050375][T23213] __nla_validate_parse: 1 callbacks suppressed
[  492.050390][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4633'.
[  492.073155][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4633'.
[  492.157005][T23185] chnl_net:caif_netlink_parms(): no params data found
[  492.223536][T23175] chnl_net:caif_netlink_parms(): no params data found
[  492.280209][T23185] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.290120][T23185] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.293610][T23185] bridge_slave_0: entered allmulticast mode
[  492.297802][T23185] bridge_slave_0: entered promiscuous mode
[  492.326968][T23185] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.329438][T23185] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.331990][T23185] bridge_slave_1: entered allmulticast mode
[  492.335593][T23185] bridge_slave_1: entered promiscuous mode
[  492.386746][T23185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  492.411592][T23185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.425330][T23175] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.427825][T23175] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.430477][T23175] bridge_slave_0: entered allmulticast mode
[  492.433988][T23175] bridge_slave_0: entered promiscuous mode
[  492.437560][T23175] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.439915][T23175] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.442655][T23175] bridge_slave_1: entered allmulticast mode
[  492.445431][T23175] bridge_slave_1: entered promiscuous mode
[  492.488054][T23185] team0: Port device team_slave_0 added
[  492.512536][ T5854] Bluetooth: hci1: command tx timeout
[  492.517995][T23175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  492.523256][T23185] team0: Port device team_slave_1 added
[  492.540381][T23175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.579557][T23175] team0: Port device team_slave_0 added
[  492.605177][T23185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.608349][T23185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.619980][T23185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  492.626196][T23175] team0: Port device team_slave_1 added
[  492.645665][T23185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  492.652477][T23185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.663478][T23185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  492.684729][T23175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.687396][T23175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.696178][T23175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  492.700951][T23175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  492.703718][T23175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.713339][T23175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  492.748547][T23185] hsr_slave_0: entered promiscuous mode
[  492.750954][T23185] hsr_slave_1: entered promiscuous mode
[  492.805650][T23175] hsr_slave_0: entered promiscuous mode
[  492.807921][T23175] hsr_slave_1: entered promiscuous mode
[  492.810121][T23175] debugfs: 'hsr0' already exists in 'hsr'
[  492.819883][T23175] Cannot create hsr debugfs directory
[  492.912598][ T5854] Bluetooth: hci2: command tx timeout
[  493.133850][T23185] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  493.143953][T23185] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  493.167121][T23185] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  493.179314][T23185] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  493.248751][T23175] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  493.256077][T23175] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  493.260293][T23175] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  493.264567][T23175] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  493.390245][T23185] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.445602][T23185] 8021q: adding VLAN 0 to HW filter on device team0
[  493.474553][T23175] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.478339][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.481447][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.498554][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.500816][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.539069][T23175] 8021q: adding VLAN 0 to HW filter on device team0
[  493.557668][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.560729][ T6072] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.578990][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.582259][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.607945][T23185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  493.614650][T23185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  493.891751][T23185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  493.900629][T23175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  493.963081][ T5858] veth1_macvtap: left promiscuous mode
[  493.965773][ T5858] veth0_macvtap: left promiscuous mode
[  494.544463][T23175] veth0_vlan: entered promiscuous mode
[  494.574622][T23175] veth1_vlan: entered promiscuous mode
[  494.593013][ T5854] Bluetooth: hci1: command tx timeout
[  494.645511][T23175] veth0_macvtap: entered promiscuous mode
[  494.649563][T23175] veth1_macvtap: entered promiscuous mode
[  494.670108][T23185] veth0_vlan: entered promiscuous mode
[  494.707907][T23175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.711899][T23185] veth1_vlan: entered promiscuous mode
[  494.723028][T23175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.744297][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.755930][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.759239][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.791331][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.836646][T23185] veth0_macvtap: entered promiscuous mode
[  494.840380][T23185] veth1_macvtap: entered promiscuous mode
[  494.860466][ T5858] IPVS: stop unused estimator thread 0...
[  494.888909][T23185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.891959][ T6444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.899297][ T6444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.902492][T23185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.909262][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.928509][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.941345][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.946242][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.974880][ T6082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.981713][ T6082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.003381][ T5854] Bluetooth: hci2: command tx timeout
[  495.032243][T13156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.044601][T13156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.085902][ T6439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.094837][ T6439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.296921][T23298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4629'.
[  495.364091][T23298] netlink: 'syz.4.4629': attribute type 10 has an invalid length.
[  495.386693][T23298] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  495.464122][T23308] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4644'.
[  495.464724][T23309] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4642'.
[  495.472196][T23308] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4644'.
[  495.481570][T23308] netlink: 'syz.4.4644': attribute type 6 has an invalid length.
[  495.487253][T23308] netlink: 'syz.4.4644': attribute type 4 has an invalid length.
[  495.658888][T23317] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  495.986935][T23333] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  496.027892][T23335] bridge_slave_0: left allmulticast mode
[  496.029949][T23335] bridge_slave_0: left promiscuous mode
[  496.032139][T23335] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.039587][T23335] bridge_slave_1: left allmulticast mode
[  496.041945][T23335] bridge_slave_1: left promiscuous mode
[  496.044721][T23335] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.051729][T23335] bond0: (slave bond_slave_0): Releasing backup interface
[  496.060525][T23335] bond0: (slave bond_slave_1): Releasing backup interface
[  496.069114][T23335] team0: Port device team_slave_0 removed
[  496.074516][T23335] team0: Port device team_slave_1 removed
[  496.077016][T23335] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  496.079592][T23335] batman_adv: batadv0: Removing interface: batadv_slave_0
[  496.084359][T23335] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  496.087174][T23335] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.090863][T23335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  496.112652][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  496.204155][T23345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4652'.
[  496.208526][T23345] netlink: 'syz.3.4652': attribute type 29 has an invalid length.
[  496.672709][ T5854] Bluetooth: hci1: command tx timeout
[  496.911646][T23372] !: renamed from dummy0 (while UP)
[  497.084100][ T5854] Bluetooth: hci2: command tx timeout
[  497.549472][T23406] netlink: 'syz.1.4670': attribute type 16 has an invalid length.
[  497.656483][T23420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  497.790798][T23429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4677'.
[  497.799791][T23429] netlink: 'syz.3.4677': attribute type 29 has an invalid length.
[  497.956886][T23444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4679'.
[  497.968349][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4679'.
[  498.358071][T23471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'.
[  498.389621][T23481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4688'.
[  498.414752][T23481] openvswitch: netlink: Key type 186 is out of range max 32
[  498.417898][T23481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4688'.
[  498.565666][T23500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4693'.
[  498.621142][T23504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4694'.
[  498.753029][ T5854] Bluetooth: hci1: command tx timeout
[  498.877816][T23522] netlink: 'syz.1.4699': attribute type 10 has an invalid length.
[  498.980440][T23533] netlink: 'syz.3.4702': attribute type 4 has an invalid length.
[  499.032727][T23536] netlink: 'syz.3.4702': attribute type 4 has an invalid length.
[  499.158867][T23539] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  499.164919][ T5854] Bluetooth: hci2: command tx timeout
[  499.249270][T23544] netlink: 'syz.1.4704': attribute type 4 has an invalid length.
[  500.146723][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4719'.
[  500.338823][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4723'.
[  500.355041][ T5316] page_pool_release_retry() stalled pool shutdown: id 1787, 1 inflight 60 sec
[  500.444039][T23617] IPVS: Scheduler module ip_vs_sip not found
[  500.713809][T23632] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  501.030597][T23661] 8021q: VLANs not supported on wlan0
[  501.234990][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  501.290320][T23678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  502.618867][T23756] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  503.315108][T23783] __nla_validate_parse: 15 callbacks suppressed
[  503.315122][T23783] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4771'.
[  503.486246][T23793] netlink: 'syz.4.4772': attribute type 1 has an invalid length.
[  503.552194][T23799] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  503.652816][T23803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4775'.
[  503.735858][T23801] netlink: 'syz.4.4775': attribute type 4 has an invalid length.
[  503.764811][T23808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4776'.
[  503.767188][T23810] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.772301][T23810] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.790895][T23810] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  503.805126][T23810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4777'.
[  503.826840][T23813] netlink: 'syz.3.4776': attribute type 10 has an invalid length.
[  503.833600][T23813] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  504.006519][T23825] IPVS: Scheduler module ip_vs_sip not found
[  504.575030][T23860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4789'.
[  504.631572][T23859] netlink: 'syz.4.4789': attribute type 4 has an invalid length.
[  504.635530][T23859] netlink: 'syz.4.4789': attribute type 4 has an invalid length.
[  504.696611][T23862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4790'.
[  504.751088][T23864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4791'.
[  504.792850][T23864] netlink: 'syz.3.4791': attribute type 10 has an invalid length.
[  504.974476][T23877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4793'.
[  505.024769][T23875] netlink: 'syz.3.4793': attribute type 4 has an invalid length.
[  505.319855][T23887] netlink: 'syz.4.4795': attribute type 10 has an invalid length.
[  505.324215][T23887] syz_tun: entered promiscuous mode
[  505.332080][T23887] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  505.803621][T23902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4799'.
[  505.963843][T23902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.043535][T23902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.054237][T23912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4802'.
[  506.096898][T23912] netlink: 'syz.1.4802': attribute type 10 has an invalid length.
[  506.111782][T23902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.205509][T23902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.228270][T23914] bond0: (slave syz_tun): Releasing backup interface
[  506.241359][T23914] bridge_slave_0: left allmulticast mode
[  506.244999][T23914] bridge_slave_0: left promiscuous mode
[  506.247567][T23914] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.256555][T23914] bridge_slave_1: left allmulticast mode
[  506.259065][T23914] bridge_slave_1: left promiscuous mode
[  506.261652][T23914] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.276958][T23914] bond0: (slave bond_slave_0): Releasing backup interface
[  506.284118][T23914] bond0: (slave bond_slave_1): Releasing backup interface
[  506.290248][T23914] team0: Port device team_slave_0 removed
[  506.298495][T23914] team0: Port device team_slave_1 removed
[  506.300889][T23914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  506.304963][T23914] batman_adv: batadv0: Removing interface: batadv_slave_0
[  506.308012][T23914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  506.310453][T23914] batman_adv: batadv0: Removing interface: batadv_slave_1
[  506.314678][T23914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  506.369701][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.386599][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  506.402725][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  506.419454][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.600809][T23930] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.663781][T23930] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.733529][T23930] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.802406][T23930] bond0: (slave netdevsim0): Releasing backup interface
[  506.889611][T23930] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.965212][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.975011][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  506.983428][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  506.991606][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.831606][T23980] bridge1: entered allmulticast mode
[  508.336473][T23997] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4822'.
[  508.658981][T24005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4824'.
[  508.913510][ T5888] page_pool_release_retry() stalled pool shutdown: id 1818, 1 inflight 60 sec
[  509.172184][T24035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4829'.
[  509.291657][T24048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  509.379979][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4831'.
[  509.382506][T24053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4831'.
[  509.384387][T24054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4831'.
[  509.909391][T24061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  510.053818][T24067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4834'.
[  510.057829][T24067] netlink: 'syz.1.4834': attribute type 29 has an invalid length.
[  510.064702][T24067] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4834'.
[  510.830421][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4843'.
[  510.884674][T24117] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4845'.
[  512.255081][T24150] bridge0: port 1(veth0_to_bridge) entered blocking state
[  512.259292][T24150] bridge0: port 1(veth0_to_bridge) entered disabled state
[  512.267156][T24150] veth0_to_bridge: entered allmulticast mode
[  512.275799][T24150] veth0_to_bridge: entered promiscuous mode
[  512.423647][T24152] pim6reg: entered allmulticast mode
[  513.295502][T24188] mac80211_hwsim hwsim76 wlan1: entered promiscuous mode
[  513.300495][T24188] macsec1: entered promiscuous mode
[  513.305451][T24188] mac80211_hwsim hwsim76 wlan1: left promiscuous mode
[  513.392563][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  513.535994][T24200] __nla_validate_parse: 3 callbacks suppressed
[  513.536007][T24200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4866'.
[  514.080617][T24213] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4869'.
[  514.920959][T24240] netlink: 'syz.3.4876': attribute type 1 has an invalid length.
[  514.924655][T24241] netlink: 'syz.3.4876': attribute type 1 has an invalid length.
[  515.029748][T24243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4877'.
[  515.049602][T24246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4878'.
[  515.061713][T24246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4878'.
[  515.090727][T24246] gretap0: entered promiscuous mode
[  515.096204][T24246] gretap0: left promiscuous mode
[  515.151708][T24254] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4881'.
[  515.208175][T24259] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.286048][T24259] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.361437][T24259] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.478558][T24259] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.589983][ T5882] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.604623][ T5882] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.627006][ T5882] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.649269][ T5882] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.703100][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'.
[  516.561025][T24303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4898'.
[  516.567222][T24303] Unsupported ieee802154 address type: 0
[  517.159972][T24331] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4908'.
[  517.167900][T24329] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4906'.
[  517.177839][T24329] netlink: 'syz.3.4906': attribute type 29 has an invalid length.
[  519.014462][T24363] syz.4.4918 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  519.024815][T24363] CPU: 1 UID: 0 PID: 24363 Comm: syz.4.4918 Not tainted syzkaller #0 PREEMPT(full) 
[  519.024834][T24363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  519.024841][T24363] Call Trace:
[  519.024846][T24363]  <TASK>
[  519.024852][T24363]  dump_stack_lvl+0x189/0x250
[  519.024878][T24363]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.024890][T24363]  ? __pfx__printk+0x10/0x10
[  519.024908][T24363]  dump_header+0xd3/0x480
[  519.024919][T24363]  oom_kill_process+0x387/0x920
[  519.024933][T24363]  out_of_memory+0xf09/0x12a0
[  519.024948][T24363]  ? __pfx_out_of_memory+0x10/0x10
[  519.024962][T24363]  mem_cgroup_out_of_memory+0x145/0x240
[  519.024969][T24363]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  519.024985][T24363]  ? _raw_spin_unlock+0x28/0x50
[  519.024994][T24363]  ? memcg1_oom_prepare+0x37f/0x450
[  519.025004][T24363]  try_charge_memcg+0xdff/0x1290
[  519.025019][T24363]  ? __pfx_try_charge_memcg+0x10/0x10
[  519.025035][T24363]  charge_memcg+0x9f/0x180
[  519.025071][T24363]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  519.025085][T24363]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  519.025095][T24363]  __read_swap_cache_async+0x28c/0x510
[  519.025108][T24363]  swap_cluster_readahead+0x305/0x5f0
[  519.025117][T24363]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  519.025130][T24363]  ? get_vma_policy+0x27c/0x3c0
[  519.025141][T24363]  swapin_readahead+0x17d/0xb50
[  519.025148][T24363]  ? __pfx_filemap_get_entry+0x10/0x10
[  519.025163][T24363]  ? __pfx_swapin_readahead+0x10/0x10
[  519.025172][T24363]  ? __filemap_get_folio+0x9a6/0xaf0
[  519.025185][T24363]  ? swap_cache_get_folio+0xae/0x3b0
[  519.025194][T24363]  do_swap_page+0x525/0x5ac0
[  519.025204][T24363]  ? __lock_acquire+0xab9/0xd20
[  519.025219][T24363]  ? do_swap_page+0x184/0x5ac0
[  519.025227][T24363]  ? __pfx_do_swap_page+0x10/0x10
[  519.025234][T24363]  ? __lock_acquire+0xab9/0xd20
[  519.025243][T24363]  ? __pfx_default_wake_function+0x10/0x10
[  519.025253][T24363]  ? ___pte_offset_map+0x1cf/0x250
[  519.025263][T24363]  ? pte_offset_map_rw_nolock+0xea/0x160
[  519.025272][T24363]  __handle_mm_fault+0xe55/0x5440
[  519.025280][T24363]  ? __lock_acquire+0xab9/0xd20
[  519.025295][T24363]  ? __pfx___handle_mm_fault+0x10/0x10
[  519.025309][T24363]  ? lock_vma_under_rcu+0xdf/0x3d0
[  519.025318][T24363]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  519.025330][T24363]  handle_mm_fault+0x40a/0x8e0
[  519.025343][T24363]  do_user_addr_fault+0xa81/0x1390
[  519.025357][T24363]  ? rcu_is_watching+0x15/0xb0
[  519.025363][T24363]  ? trace_page_fault_user+0x84/0x1e0
[  519.025374][T24363]  exc_page_fault+0x76/0xf0
[  519.025386][T24363]  asm_exc_page_fault+0x26/0x30
[  519.025398][T24363] RIP: 0033:0x7f7377bb6a50
[  519.025406][T24363] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00
[  519.025412][T24363] RSP: 002b:00007ffc032e6568 EFLAGS: 00010246
[  519.025420][T24363] RAX: 0000000000000000 RBX: 00007f7377dd5fa0 RCX: 00007f7377bc14e5
[  519.025425][T24363] RDX: 00007ffc032e65b0 RSI: 0000000000000000 RDI: 0000000000000000
[  519.025429][T24363] RBP: 00007f7377dd7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  519.025434][T24363] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000007eb52
[  519.025438][T24363] R13: 00007ffc032e66d0 R14: ffffffffffffffff R15: 00007ffc032e66f0
[  519.025450][T24363]  </TASK>
[  519.025454][T24363] memory: usage 307200kB, limit 307200kB, failcnt 140
[  519.151205][T24363] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0
[  519.154510][T24363] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  519.157470][T24363] Memory cgroup stats for /syz4:
[  519.157525][T24363] cache 0
[  519.160656][T24363] rss 0
[  519.162150][T24363] rss_huge 0
[  519.163541][T24363] shmem 0
[  519.164567][T24363] mapped_file 0
[  519.165738][T24363] dirty 0
[  519.166733][T24363] writeback 0
[  519.167853][T24363] workingset_refault_anon 0
[  519.169378][T24363] workingset_refault_file 0
[  519.170836][T24363] swap 135168
[  519.171868][T24363] swapcached 0
[  519.173138][T24363] pgpgin 6652
[  519.174620][T24363] pgpgout 6652
[  519.175844][T24363] pgfault 18586
[  519.177104][T24363] pgmajfault 0
[  519.178227][T24363] inactive_anon 0
[  519.179447][T24363] active_anon 0
[  519.180616][T24363] inactive_file 0
[  519.181852][T24363] active_file 0
[  519.192406][T24363] unevictable 0
[  519.193839][T24363] hierarchical_memory_limit 314572800
[  519.196005][T24363] hierarchical_memsw_limit 9223372036854771712
[  519.198444][T24363] total_cache 0
[  519.199890][T24363] total_rss 0
[  519.201274][T24363] total_rss_huge 0
[  519.212584][T24363] total_shmem 0
[  519.213981][T24363] total_mapped_file 0
[  519.215625][T24363] total_dirty 0
[  519.217149][T24363] total_writeback 0
[  519.218558][T24363] total_workingset_refault_anon 0
[  519.220243][T24363] total_workingset_refault_file 0
[  519.221908][T24363] total_swap 135168
[  519.232500][T24363] total_swapcached 0
[  519.234230][T24363] total_pgpgin 6652
[  519.235743][T24363] total_pgpgout 6652
[  519.237096][T24363] total_pgfault 18586
[  519.244369][T24363] total_pgmajfault 0
[  519.245750][T24363] total_inactive_anon 0
[  519.247253][T24363] total_active_anon 0
[  519.248763][T24363] total_inactive_file 0
[  519.250162][T24363] total_active_file 0
[  519.251551][T24363] total_unevictable 0
[  519.262414][T24363] anon_cost 0
[  519.263594][T24363] file_cost 0
[  519.272638][T24363] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4918,pid=24363,uid=0
[  519.282462][T24363] Memory cgroup out of memory: Killed process 24363 (syz.4.4918) total-vm:98308kB, anon-rss:1076kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  519.475296][T24384] __nla_validate_parse: 4 callbacks suppressed
[  519.475306][T24384] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4923'.
[  519.628832][T24391] netlink: 368 bytes leftover after parsing attributes in process `syz.3.4925'.
[  520.729143][T24414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4934'.
[  520.733876][T24414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4934'.
[  520.744870][T24414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4934'.
[  520.747695][T24414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4934'.
[  520.955822][T24425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4935'.
[  521.072811][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  521.342851][T24444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4941'.
[  521.664864][T24468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4945'.
[  521.804792][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4946'.
[  523.083412][T24498] netlink: 'syz.1.4954': attribute type 4 has an invalid length.
[  523.177488][T24512] tun0: tun_chr_ioctl cmd 21731
[  523.179484][T24511] tun0: tun_chr_ioctl cmd 1074025673
[  523.212723][T24515] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  523.354250][T24536] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  523.545948][T24559] unknown channel width for channel at 909000KHz?
[  524.617057][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  524.626619][T24603] netlink: 'syz.3.4985': attribute type 1 has an invalid length.
[  525.304535][T24575] Set syz1 is full, maxelem 65536 reached
[  525.385450][T24632] __nla_validate_parse: 40 callbacks suppressed
[  525.385465][T24632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4986'.
[  525.498610][T24598] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  525.500897][T24598] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  525.520402][T24598] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  525.523458][T24598] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  527.480821][T24668] erspan0: entered allmulticast mode
[  527.614102][T24672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4993'.
[  527.663667][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4993'.
[  527.669154][T24670] sctp: [Deprecated]: syz.1.4993 (pid 24670) Use of int in max_burst socket option deprecated.
[  527.669154][T24670] Use struct sctp_assoc_value instead
[  527.727888][T24672] netlink: 'syz.1.4993': attribute type 4 has an invalid length.
[  527.731686][T24672] netlink: 'syz.1.4993': attribute type 4 has an invalid length.
[  529.132565][T24685] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4997'.
[  529.136443][T24685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4997'.
[  529.184736][T24690] netlink: 'syz.1.4998': attribute type 11 has an invalid length.
[  529.188106][T24690] netlink: 'syz.1.4998': attribute type 4 has an invalid length.
[  529.191243][T24690] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4998'.
[  530.471273][T24707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5004'.
[  530.528082][T24708] netlink: 'syz.1.5004': attribute type 4 has an invalid length.
[  530.620627][T24710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5005'.
[  530.661255][T24710] netlink: 'syz.1.5005': attribute type 4 has an invalid length.
[  530.664189][T24710] netlink: 'syz.1.5005': attribute type 4 has an invalid length.
[  530.668496][T24709] delete_channel: no stack
[  531.981932][T24730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5011'.
[  533.867804][T24746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5016'.
[  535.585167][T24748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  535.588511][T24748] syzkaller0: entered promiscuous mode
[  535.590300][T24748] syzkaller0: entered allmulticast mode
[  535.596515][T24748] netlink: 'syz.1.5017': attribute type 13 has an invalid length.
[  535.636863][T24747] tipc: Resetting bearer <eth:syzkaller0>
[  535.647125][T24747] tipc: Disabling bearer <eth:syzkaller0>
[  537.251329][T24776] syzkaller1: entered promiscuous mode
[  537.253647][T24776] syzkaller1: entered allmulticast mode
[  537.783644][T24802] netlink: 'syz.1.5033': attribute type 29 has an invalid length.
[  537.795723][T24802] tap0: tun_chr_ioctl cmd 1074812118
[  539.975298][T24849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5046'.
[  541.501369][T24905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5064'.
[  543.323110][T24915] TCP: TCP_TX_DELAY enabled
[  544.177746][T24918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5068'.
[  544.285913][T24926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5070'.
[  544.344969][T24927] netlink: 'syz.1.5070': attribute type 4 has an invalid length.
[  544.402917][T24928] netlink: 'syz.1.5070': attribute type 4 has an invalid length.
[  546.032490][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  547.574389][T24988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5085'.
[  549.092962][T25014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5092'.
[  549.160258][T25014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  549.209621][T25013] tipc: Disabling bearer <eth:syzkaller0>
[  562.676220][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  573.393031][ T5915] page_pool_release_retry() stalled pool shutdown: id 2204, 1 inflight 60 sec
[  579.633898][ T5915] page_pool_release_retry() stalled pool shutdown: id 2234, 1 inflight 60 sec
[  593.392648][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  613.873135][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  624.116179][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  682.992611][   T34] INFO: task kworker/0:2:20530 blocked for more than 143 seconds.
[  682.995830][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  682.998109][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  683.003473][   T34] task:kworker/0:2     state:D stack:23568 pid:20530 tgid:20530 ppid:2      task_flags:0x4208060 flags:0x00004000
[  683.008373][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  683.011097][   T34] Call Trace:
[  683.013547][   T34]  <TASK>
[  683.015144][   T34]  __schedule+0x1798/0x4cc0
[  683.017083][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  683.019365][   T34]  ? __pfx___schedule+0x10/0x10
[  683.021477][   T34]  ? schedule+0x91/0x360
[  683.042616][   T34]  schedule+0x165/0x360
[  683.044481][   T34]  schedule_preempt_disabled+0x13/0x30
[  683.046839][   T34]  __mutex_lock+0x7e6/0x1350
[  683.048703][   T34]  ? __mutex_lock+0x5bb/0x1350
[  683.050646][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  683.057309][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  683.059427][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  683.061857][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  683.064760][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  683.067386][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  683.069848][   T34]  process_scheduled_works+0xae1/0x17b0
[  683.072123][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  683.075350][   T34]  worker_thread+0x8a0/0xda0
[  683.077390][   T34]  kthread+0x711/0x8a0
[  683.079169][   T34]  ? __pfx_worker_thread+0x10/0x10
[  683.081298][   T34]  ? __pfx_kthread+0x10/0x10
[  683.084074][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  683.086314][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  683.088719][   T34]  ? __pfx_kthread+0x10/0x10
[  683.090694][   T34]  ret_from_fork+0x439/0x7d0
[  683.093979][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  683.096136][   T34]  ? __switch_to_asm+0x39/0x70
[  683.098092][   T34]  ? __switch_to_asm+0x33/0x70
[  683.100158][   T34]  ? __pfx_kthread+0x10/0x10
[  683.102117][   T34]  ret_from_fork_asm+0x1a/0x30
[  683.104815][   T34]  </TASK>
[  683.106225][   T34] INFO: task syz.4.4984:24594 blocked for more than 143 seconds.
[  683.109423][   T34]       Not tainted syzkaller #0
[  683.111542][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  683.115842][   T34] task:syz.4.4984      state:D stack:24104 pid:24594 tgid:24594 ppid:23185  task_flags:0x400040 flags:0x00004004
[  683.120788][   T34] Call Trace:
[  683.122261][   T34]  <TASK>
[  683.124398][   T34]  __schedule+0x1798/0x4cc0
[  683.126523][   T34]  ? __lock_acquire+0xab9/0xd20
[  683.128674][   T34]  ? __lock_acquire+0xab9/0xd20
[  683.130780][   T34]  ? __pfx___schedule+0x10/0x10
[  683.133041][   T34]  ? schedule+0x91/0x360
[  683.135077][   T34]  schedule+0x165/0x360
[  683.136897][   T34]  schedule_preempt_disabled+0x13/0x30
[  683.139250][   T34]  __mutex_lock+0x7e6/0x1350
[  683.141264][   T34]  ? __mutex_lock+0x5bb/0x1350
[  683.143443][   T34]  ? rfkill_unregister+0xc8/0x220
[  683.145870][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  683.148038][   T34]  ? __pfx_device_del+0x10/0x10
[  683.150140][   T34]  rfkill_unregister+0xc8/0x220
[  683.152241][   T34]  nfc_unregister_device+0x96/0x2a0
[  683.154779][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  683.157250][   T34]  virtual_ncidev_close+0x56/0x90
[  683.159410][   T34]  __fput+0x44c/0xa70
[  683.161158][   T34]  task_work_run+0x1d4/0x260
[  683.163385][   T34]  ? __pfx_task_work_run+0x10/0x10
[  683.165572][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  683.167897][   T34]  exit_to_user_mode_loop+0xec/0x110
[  683.170162][   T34]  do_syscall_64+0x2bd/0x3b0
[  683.172166][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.174862][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  683.177438][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.179950][   T34] RIP: 0033:0x7f7377b8ec29
[  683.181842][   T34] RSP: 002b:00007ffc032e65d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  683.185542][   T34] RAX: 0000000000000000 RBX: 00007f7377dd7da0 RCX: 00007f7377b8ec29
[  683.188857][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  683.192171][   T34] RBP: 00007f7377dd7da0 R08: 0000000000000244 R09: 0000001e032e68cf
[  683.195625][   T34] R10: 00007f7377dd7cb0 R11: 0000000000000246 R12: 000000000008037e
[  683.199006][   T34] R13: 00007f7377dd6270 R14: ffffffffffffffff R15: 00007ffc032e66f0
[  683.203199][   T34]  </TASK>
[  683.204547][   T34] INFO: task syz.3.4985:24598 blocked for more than 143 seconds.
[  683.207830][   T34]       Not tainted syzkaller #0
[  683.209951][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  683.213676][   T34] task:syz.3.4985      state:D stack:25288 pid:24598 tgid:24597 ppid:23175  task_flags:0x400140 flags:0x00004006
[  683.218705][   T34] Call Trace:
[  683.220124][   T34]  <TASK>
[  683.221369][   T34]  __schedule+0x1798/0x4cc0
[  683.223382][   T34]  ? __lock_acquire+0xab9/0xd20
[  683.225476][   T34]  ? __lock_acquire+0xab9/0xd20
[  683.227569][   T34]  ? __pfx___schedule+0x10/0x10
[  683.229658][   T34]  ? schedule+0x91/0x360
[  683.231496][   T34]  schedule+0x165/0x360
[  683.233971][   T34]  schedule_preempt_disabled+0x13/0x30
[  683.236158][   T34]  __mutex_lock+0x7e6/0x1350
[  683.238066][   T34]  ? __mutex_lock+0x5bb/0x1350
[  683.240120][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  683.242483][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  683.244572][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  683.246783][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  683.249234][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  683.251856][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  683.254412][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  683.256636][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  683.259081][   T34]  rfkill_set_block+0x1d2/0x440
[  683.261167][   T34]  rfkill_fop_write+0x44b/0x570
[  683.263572][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  683.265782][   T34]  ? security_file_permission+0x60/0x290
[  683.268167][   T34]  ? rw_verify_area+0x255/0x4d0
[  683.270214][   T34]  ? __lock_acquire+0xab9/0xd20
[  683.271814][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  683.273750][   T34]  vfs_write+0x27e/0xb30
[  683.275286][   T34]  ? __pfx_vfs_write+0x10/0x10
[  683.277333][   T34]  ? __fget_files+0x2a/0x420
[  683.279321][   T34]  ? __fget_files+0x2a/0x420
[  683.281321][   T34]  ? __fget_files+0x3a0/0x420
[  683.283502][   T34]  ? __fget_files+0x2a/0x420
[  683.285151][   T34]  ksys_write+0x145/0x250
[  683.286620][   T34]  ? __pfx_ksys_write+0x10/0x10
[  683.288282][   T34]  ? rcu_is_watching+0x15/0xb0
[  683.289887][   T34]  ? do_syscall_64+0xbe/0x3b0
[  683.291407][   T34]  do_syscall_64+0xfa/0x3b0
[  683.293075][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  683.294804][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.296860][   T34]  ? exc_page_fault+0x9f/0xf0
[  683.298465][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.300441][   T34] RIP: 0033:0x7fba4278ec29
[  683.301953][   T34] RSP: 002b:00007fba4367a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  683.304749][   T34] RAX: ffffffffffffffda RBX: 00007fba429d5fa0 RCX: 00007fba4278ec29
[  683.307468][   T34] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000008
[  683.310125][   T34] RBP: 00007fba42811e41 R08: 0000000000000000 R09: 0000000000000000
[  683.313384][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  683.316078][   T34] R13: 00007fba429d6038 R14: 00007fba429d5fa0 R15: 00007fff15fa8d58
[  683.318790][   T34]  </TASK>
[  683.319875][   T34] 
[  683.319875][   T34] Showing all locks held in the system:
[  683.323199][   T34] 1 lock held by ksoftirqd/1/23:
[  683.325201][   T34] 1 lock held by khungtaskd/34:
[  683.327299][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  683.331417][   T34] 2 locks held by getty/5676:
[  683.333535][   T34]  #0: ffff8880203970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  683.337554][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  683.341809][   T34] 3 locks held by kworker/0:2/20530:
[  683.344379][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  683.349169][   T34]  #1: ffffc9000330fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  683.354873][   T34]  #2: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  683.359598][   T34] 2 locks held by syz.4.4984/24594:
[  683.361395][   T34]  #0: ffff888038bf3100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  683.364750][   T34]  #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  683.368758][   T34] 2 locks held by syz.3.4985/24598:
[  683.370954][   T34]  #0: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  683.375427][   T34]  #1: ffff888038bf3100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  683.379523][   T34] 2 locks held by syz-executor/24841:
[  683.381819][   T34]  #0: ffff88811234d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  683.386233][   T34]  #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  683.390371][   T34] 2 locks held by syz-executor/24842:
[  683.392721][   T34]  #0: ffff888107c38918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  683.396862][   T34]  #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  683.401006][   T34] 2 locks held by syz.1.5093/25020:
[  683.403384][   T34]  #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  683.406896][   T34]  #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[  683.411005][   T34] 1 lock held by syz-executor/25023:
[  683.413100][   T34]  #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  683.416672][   T34] 1 lock held by syz-executor/25026:
[  683.418919][   T34]  #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  683.423122][   T34] 1 lock held by syz-executor/25027:
[  683.425329][   T34]  #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  683.428889][   T34] 1 lock held by syz-executor/25030:
[  683.431129][   T34]  #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  683.434813][   T34] 1 lock held by syz-executor/25033:
[  683.437074][   T34]  #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  683.440548][   T34] 1 lock held by syz-executor/25034:
[  683.442758][   T34]  #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  683.446324][   T34] 
[  683.447401][   T34] =============================================
[  683.447401][   T34] 
[  683.450874][   T34] NMI backtrace for cpu 0
[  683.450885][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  683.450898][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  683.450905][   T34] Call Trace:
[  683.450911][   T34]  <TASK>
[  683.450917][   T34]  dump_stack_lvl+0x189/0x250
[  683.450961][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  683.450974][   T34]  ? __pfx__printk+0x10/0x10
[  683.450999][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  683.451017][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  683.451033][   T34]  ? __pfx__printk+0x10/0x10
[  683.451051][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  683.451070][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  683.451087][   T34]  watchdog+0xf93/0xfe0
[  683.451105][   T34]  ? watchdog+0x1de/0xfe0
[  683.451125][   T34]  kthread+0x711/0x8a0
[  683.451141][   T34]  ? __pfx_watchdog+0x10/0x10
[  683.451155][   T34]  ? __pfx_kthread+0x10/0x10
[  683.451169][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  683.451185][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  683.451199][   T34]  ? __pfx_kthread+0x10/0x10
[  683.451259][   T34]  ret_from_fork+0x439/0x7d0
[  683.451273][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  683.451287][   T34]  ? __switch_to_asm+0x39/0x70
[  683.451299][   T34]  ? __switch_to_asm+0x33/0x70
[  683.451311][   T34]  ? __pfx_kthread+0x10/0x10
[  683.451324][   T34]  ret_from_fork_asm+0x1a/0x30
[  683.451349][   T34]  </TASK>
[  683.451354][   T34] Sending NMI from CPU 0 to CPUs 1:
[  683.514039][    C1] NMI backtrace for cpu 1
[  683.514054][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  683.514067][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  683.514073][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  683.514093][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 49 15 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  683.514102][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  683.514113][    C1] RAX: 579f365bedec2800 RBX: ffffffff819683f8 RCX: 579f365bedec2800
[  683.514121][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b06ab RDI: ffffffff8be33f00
[  683.514128][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  683.514136][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa2ee30
[  683.514144][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  683.514151][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c3d000(0000) knlGS:0000000000000000
[  683.514160][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  683.514167][    C1] CR2: 000055f251031e10 CR3: 000000000df36000 CR4: 00000000000006f0
[  683.514201][    C1] Call Trace:
[  683.514208][    C1]  <TASK>
[  683.514212][    C1]  default_idle+0x13/0x20
[  683.514224][    C1]  default_idle_call+0x74/0xb0
[  683.514236][    C1]  do_idle+0x1e8/0x510
[  683.514254][    C1]  ? __pfx_do_idle+0x10/0x10
[  683.514275][    C1]  cpu_startup_entry+0x44/0x60
[  683.514289][    C1]  start_secondary+0x101/0x110
[  683.514304][    C1]  common_startup_64+0x13e/0x147
[  683.514322][    C1]  </TASK>
[  683.515310][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  683.586213][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  683.590072][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  683.594301][   T34] Call Trace:
[  683.595734][   T34]  <TASK>
[  683.597026][   T34]  dump_stack_lvl+0x99/0x250
[  683.599041][   T34]  ? __asan_memcpy+0x40/0x70
[  683.601034][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  683.603279][   T34]  ? __pfx__printk+0x10/0x10
[  683.605348][   T34]  vpanic+0x281/0x750
[  683.606832][   T34]  ? __pfx_vpanic+0x10/0x10
[  683.608373][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  683.610191][   T34]  ? preempt_schedule+0xae/0xc0
[  683.611794][   T34]  ? preempt_schedule_common+0x83/0xd0
[  683.613864][   T34]  panic+0xb9/0xc0
[  683.615331][   T34]  ? __pfx_panic+0x10/0x10
[  683.617238][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  683.619515][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  683.622177][   T34]  watchdog+0xfd2/0xfe0
[  683.624012][   T34]  ? watchdog+0x1de/0xfe0
[  683.625905][   T34]  kthread+0x711/0x8a0
[  683.627729][   T34]  ? __pfx_watchdog+0x10/0x10
[  683.629769][   T34]  ? __pfx_kthread+0x10/0x10
[  683.631791][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  683.634081][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  683.636308][   T34]  ? __pfx_kthread+0x10/0x10
[  683.638284][   T34]  ret_from_fork+0x439/0x7d0
[  683.640330][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  683.642538][   T34]  ? __switch_to_asm+0x39/0x70
[  683.644563][   T34]  ? __switch_to_asm+0x33/0x70
[  683.646548][   T34]  ? __pfx_kthread+0x10/0x10
[  683.648501][   T34]  ret_from_fork_asm+0x1a/0x30
[  683.650498][   T34]  </TASK>
[  683.652648][   T34] Kernel Offset: disabled
[  683.654485][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:12:32  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff8881067d0237 R9 =1ffff11020cfa046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad78c8 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005572d46ae680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00346e6170772f74 656e2f307968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000003818 RBX=00000000000000e2 RCX=ffff888109ea3980 RDX=ffff88801fded098
RSI=0000000000000000 RDI=ffff88801fded0aa RBP=ffffc900034bec90 RSP=ffffc900034bea80
R8 =ffffffff8fa2ee37 R9 =1ffffffff1f45dc6 R10=dffffc0000000000 R11=fffffbfff1f45dc7
R12=00000000ffffffff R13=dffffc0000000000 R14=ffffc900076c0000 R15=00000000ffffff1d
RIP=ffffffff8699b971 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2335f8a800 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcd8e16d0c CR3=00000001113cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
