last executing test programs:

3m42.731816337s ago: executing program 2 (id=754):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x10, 0x8, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}}]}, 0x30}, 0x1, 0x0, 0x6558000000000000, 0x40000}, 0x4008000)

3m42.721299229s ago: executing program 2 (id=756):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) (async)
r2 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x46, 0x0, &(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'batadv0\x00', 0x4}, 0x18)

3m42.651644467s ago: executing program 2 (id=757):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000100)={0x6, @remote})
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
syz_emit_ethernet(0xb3, &(0x7f0000000500)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@mpls_uc={0x8847, {[{0x3}, {0x401, 0x0, 0x1}, {0xc}, {0x2, 0x0, 0x1}, {0x3}, {0x4, 0x0, 0x1}, {0xff}, {0x4}, {0x1}, {0x8}], @llc={@snap={0x1, 0xaa, "1b41", "ed8fcf", 0x8831, "393469d553e7b5f027cc74271d7c17093a333a2bd946df31788218a1a981434f51186889f742cfcf89f5a4a012c9afa0cba9c738a05aec1181f35e40040458a829cc29681d16cf8d3bffa9b7768ab8ad75e4f6435cdb6ba2dc30f2bae9383547b8df7ea1e0582fe396b3540810d6dc4f38a380b8"}}}}}}, &(0x7f00000004c0)={0x1, 0x3, [0xf79, 0x81d, 0x55d, 0x866]})

3m42.650204339s ago: executing program 2 (id=759):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000090, &(0x7f0000000100)={0xa, 0x4e23, 0x40000004, @mcast1, 0x8}, 0x1c) (async)
sendto$inet6(r1, 0x0, 0x0, 0x20000090, &(0x7f0000000100)={0xa, 0x4e23, 0x40000004, @mcast1, 0x8}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) (async)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10)

3m42.582571659s ago: executing program 2 (id=761):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa03f490781200183f250000ebeb62360000015a817f0000017f0000019f143e180822916d190e5e39f275cecef9bd044510"], 0x0)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x50) (async, rerun: 32)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

3m42.282966668s ago: executing program 2 (id=764):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f0000000900)=""/224, 0xe0}, {&(0x7f0000004e40)=""/4111, 0x100f}, {&(0x7f0000000500)=""/214, 0xd6}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000002e00)=""/4089, 0xff9}, {&(0x7f0000000440)=""/117, 0x75}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)=""/121, 0x79}], 0x1, &(0x7f0000000e40)=""/204, 0xcc}, 0x3}, {{&(0x7f0000000800)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/170, 0xaa}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f00000004c0)=""/53, 0x35}], 0x3, &(0x7f0000000ac0)=""/162, 0xa2}, 0x3}], 0xa, 0x12060, 0x0)

3m42.186650302s ago: executing program 32 (id=764):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f0000000900)=""/224, 0xe0}, {&(0x7f0000004e40)=""/4111, 0x100f}, {&(0x7f0000000500)=""/214, 0xd6}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000002e00)=""/4089, 0xff9}, {&(0x7f0000000440)=""/117, 0x75}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)=""/121, 0x79}], 0x1, &(0x7f0000000e40)=""/204, 0xcc}, 0x3}, {{&(0x7f0000000800)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/170, 0xaa}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f00000004c0)=""/53, 0x35}], 0x3, &(0x7f0000000ac0)=""/162, 0xa2}, 0x3}], 0xa, 0x12060, 0x0)

21.968195023s ago: executing program 1 (id=3689):
socket$inet6(0xa, 0x1, 0x100)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4a, &(0x7f00000002c0)={0x0, 0x0}, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100201082bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\r\x00\a\x00\x00\x00'], 0x30}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x336)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0x2, "37c891", 0x7b})
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000002040)=0x80000000, 0x4)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

20.739144022s ago: executing program 1 (id=3692):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
unshare(0x28000600)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x51f8, 0x7, 0xb69, 0xc1, 0x1, 0x1, 0x7, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0xfffffffe, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r7 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
bind$ax25(r8, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @default, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
connect$ax25(r8, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, 0x0, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095", @ANYRESHEX=r4, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10)

19.859927813s ago: executing program 1 (id=3701):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r2, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}}, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f00008b9000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, &(0x7f0000000040))

18.163972297s ago: executing program 3 (id=3725):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010100000000ffffffff0c00"/28], 0x1c}], 0x1}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x6c}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x25, 0x0, "394281e595fd9eb506cd1a5555af72cd375de18882e299a83da979fa66c8f49889716b8dc73f6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b75008e2576da2b0f564a63d98fb21dc8ab90d76"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ID={0x8}]}, 0x28}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea"], 0x1c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r10, 0x0, 0x0, 0x4, 0x0, 0x0)

18.080171208s ago: executing program 1 (id=3726):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket(0x11, 0x2, 0x0) (async)
r4 = socket(0x11, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xa0179e08})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = getuid()
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x3, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}, {@in=@empty, 0x3, 0x3c}, @in6=@private1, {0x3, 0xfffffffffffffffa, 0x7, 0x100000}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x3, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}, {@in=@empty, 0x3, 0x3c}, @in6=@private1, {0x3, 0xfffffffffffffffa, 0x7, 0x100000}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x2b, "4372070000000000476fb2be4c3f9725f0f2bf568d62c050880594c23d36147b586c9a7affa71b5e223700"}}) (async)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x2b, "4372070000000000476fb2be4c3f9725f0f2bf568d62c050880594c23d36147b586c9a7affa71b5e223700"}})
getsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
unshare(0x22020600)
r10 = socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0x10, 0x3, 0x10) (async)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r13, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) (async)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r13, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0x17, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(r10, 0x107, 0x17, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r5}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4004, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

17.250043715s ago: executing program 3 (id=3728):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000005600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x20)

17.161020799s ago: executing program 3 (id=3729):
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r6, 0x0, 0x6df33d3f}, 0x18)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x20, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffc, 0x0, 0x7c8f}, 0x7, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000044d351981617cb2df0a81159c54b5b97d8141af0a9cc7902b8d284481078749f30c128139a8849a21883ce7b4c5d2d03e51c474cb187da2f0989be69336f8ee14334de5b986ffbc961cfc9cb1c70a7760ff700b253bd2cdc0a143cb826200000f4fc21ddc743d676769f9c32", @ANYRES16=0x0, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e240000060001004e21000014000900"/50], 0x38}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0)
socket(0x10, 0x3, 0xc)
unshare(0x40020000)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000004c0)={0x1, &(0x7f0000000400)=[{0x4, 0xfe, 0x4}]})
mmap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
unshare(0x2a020400)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r8, 0x0)
ppoll(&(0x7f0000000300)=[{r8, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x400, @empty}, 0x1c)

16.66691401s ago: executing program 3 (id=3734):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x3, 0x2, 0x10000, 0xffff3aa4, 0x2]}, &(0x7f0000000080)=0x54) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@broadcast, @in=@local, 0x4e21, 0x7, 0x4e21, 0x8, 0x2, 0x10, 0xa0, 0x29}, {0x6, 0x9, 0x4, 0x2099, 0x2, 0x8001, 0x0, 0x6}, {0x7fffffffffffffff, 0x8, 0x7ff, 0x42}, 0x7fff, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d5, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x0, 0x2, 0x40, 0x4, 0x5aa, 0x3be}}, 0xe8) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) (async)
recvmmsg(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
recvmmsg$unix(r3, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000017c0), 0x2a}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2040, 0x0) (async)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x50}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000a40)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048041}, 0x40000) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000300010000", 0x7) (async)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000011c0)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES32=r1], 0x6f4}, 0x1, 0x0, 0x0, 0x8000}, 0x8080)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8001, 0x5a, 0x4, 0xfffffff7}, {0x9, 0x9, 0x2, 0xc59e}, {0xe, 0x54, 0xc5}, {0x8, 0x2, 0xff, 0xfffffff9}]}, 0x10) (async)
r5 = socket$kcm(0xa, 0x2, 0x73) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) (async)
setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000040)=0x5, 0x4) (async)
sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @remote}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac437", 0x1a}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
shutdown(r1, 0x0) (async)
recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

16.538938767s ago: executing program 3 (id=3735):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x5, './file0/../file0\x00'}})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '-%&)!'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\'+*'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x40}}, 0x4000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001000002"], 0x30}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, '\x00', 0x38}, 0x19}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000))

16.41986469s ago: executing program 3 (id=3736):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa03f4947890036dd67c90781200183f250000000000000000015a817f"], 0x0)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4)

16.418290236s ago: executing program 1 (id=3738):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4)
sendfile(r1, r3, 0x0, 0xb)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000500)='\x00\xe7(\xe0\xd5c\xd0a\x16\xca\x03$\x18i\x15\xc6\xf3Sf\x8dS8\xb4\"\xc5\xaecF\xa4!\t\x1fxd\xae\xb4\x90\xd3\xe6\xa2\xfbli\xd0\xa6H\xd6\x1dO\"\xbc\xda\x80\xbd\xa2\xdb\xff\x00\x00{\\\xd7\xbc*M\xd6\xe1\xdb\xe4\x00\x1a\xa2\x8a\x01\b\xc5\xe2+\xe2\x1e\xe9$d\xac[Z\x17\xb2\xab\x81\a\xbe\x17\x84\xfd\xadL7\xca\xe5\x8f\xb2\x9fv=L', 0xff09)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
sendmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000740)="eb37c5602ccd2701ef888c994ece5313b93c1188c50758e69d38f50e95faf2c88afbc81df1b2716a818ca64e1192a9ed415d322a628563334cb513c65995efee83381e5ee7b171277cedbde7f8a894d47fe6bd01584f8aa05469bc56288175db00ca611f9df6e8f2b8868bddec0a36ae62c043d8909c30de0950992b8689c6b8fce3ec671b7d60daf80540109299d91c8a8af26277c6ee628414aa36002ac5d7d14ff88dd0c0fb5081d49f9b0058a65cca89da15fabe96073111bd219f30e3bc9c847505ac6e11eb45b3721659ca65d2f99f", 0xd2}, {&(0x7f0000000000)="b2fd4c38a9e48f28f4d15a98c6f86c83cb06a0f24fdaa6ee92", 0x19}, {&(0x7f0000000880)="17c8db1d33aa0fe0d17e1e258f55918d06c2907e08c01a1b279ae560a67e8b2dc5e345f22fc281482defd42c3ee28b445db38427fd450b4337079d8be4a151e2a6ff45d5a9c070ae2baa6691742c82901062d4059615226c0fae3a8f5346967b068c8cda7b6abe8293043ff46a64048924f4df93ea24eb8efe41", 0x7a}], 0x3, &(0x7f0000000940)=ANY=[], 0x210}}], 0x1, 0x4000)
close(r0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) (async)
sendfile(r1, r3, 0x0, 0xb) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) (async)
socket$rxrpc(0x21, 0x2, 0xa) (async)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000500)='\x00\xe7(\xe0\xd5c\xd0a\x16\xca\x03$\x18i\x15\xc6\xf3Sf\x8dS8\xb4\"\xc5\xaecF\xa4!\t\x1fxd\xae\xb4\x90\xd3\xe6\xa2\xfbli\xd0\xa6H\xd6\x1dO\"\xbc\xda\x80\xbd\xa2\xdb\xff\x00\x00{\\\xd7\xbc*M\xd6\xe1\xdb\xe4\x00\x1a\xa2\x8a\x01\b\xc5\xe2+\xe2\x1e\xe9$d\xac[Z\x17\xb2\xab\x81\a\xbe\x17\x84\xfd\xadL7\xca\xe5\x8f\xb2\x9fv=L', 0xff09) (async)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) (async)
sendmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000740)="eb37c5602ccd2701ef888c994ece5313b93c1188c50758e69d38f50e95faf2c88afbc81df1b2716a818ca64e1192a9ed415d322a628563334cb513c65995efee83381e5ee7b171277cedbde7f8a894d47fe6bd01584f8aa05469bc56288175db00ca611f9df6e8f2b8868bddec0a36ae62c043d8909c30de0950992b8689c6b8fce3ec671b7d60daf80540109299d91c8a8af26277c6ee628414aa36002ac5d7d14ff88dd0c0fb5081d49f9b0058a65cca89da15fabe96073111bd219f30e3bc9c847505ac6e11eb45b3721659ca65d2f99f", 0xd2}, {&(0x7f0000000000)="b2fd4c38a9e48f28f4d15a98c6f86c83cb06a0f24fdaa6ee92", 0x19}, {&(0x7f0000000880)="17c8db1d33aa0fe0d17e1e258f55918d06c2907e08c01a1b279ae560a67e8b2dc5e345f22fc281482defd42c3ee28b445db38427fd450b4337079d8be4a151e2a6ff45d5a9c070ae2baa6691742c82901062d4059615226c0fae3a8f5346967b068c8cda7b6abe8293043ff46a64048924f4df93ea24eb8efe41", 0x7a}], 0x3, &(0x7f0000000940)=ANY=[], 0x210}}], 0x1, 0x4000) (async)
close(r0) (async)

16.339005524s ago: executing program 1 (id=3740):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x7, 0x8, 0x8}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket(0x11, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0xa0179e08})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = getuid()
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x3, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r8}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x3, 0xfffffffffffffffa, 0x7, 0x100000}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
unshare(0x22020600)
r10 = socket$kcm(0x11, 0x3, 0x0)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r13, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

16.286010834s ago: executing program 0 (id=3742):
r0 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000080))
r1 = socket$inet6(0xa, 0x1, 0x100)
unshare(0x6020400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @empty, @local, {[@routing={0x84}], "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"}}}}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
write$bt_hci(r2, &(0x7f0000000040)={0x1, @set_cpb={{0x441, 0xb}, {0x9, 0xaf, 0x8, 0x8, 0x3ff, 0x4, 0x9}}}, 0xf)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r3, 0x28, 0x1, 0x0, &(0x7f0000000000))
r4 = gettid()
syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/uts\x00')
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="5980a642beaf34ff0f0000121690ad0d2b", 0x11}], 0x1}, 0x2000c001)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

16.199894751s ago: executing program 0 (id=3743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="e2a6a239de4c7e53e96ed3322c53d75be293dd3f89882414a716eeb9c2a94e2f0e6ff7cb8a96e7df0fbc558164a0b8dcba803cc205ec5f73e423e781178f3e3f19982f3adf42787f737f41fd04e02451acb6bc81f5800bf66a68f0dda370d876256686214b982a31b6b83b35dc4412d93db502abe4394e516d78cc354dfcc97ca1d9c2136304cbce97df2874d1f946266c806624436c110b33f8bf97c730dfd84dc83cad8508751a8a28746bfa303506bb090812578c37b077663db23b16bf05608193117d2f6d1aa8a5946753f2b822f73d162dffc6957dd1746ab0227ee35eedd551c49feb6e5f3b7676ac105bad2b8c435613ce7dd408f60f759734e9ecfbfa66f43e8e6d9326b575769952bf71dd808636c04881128cba3b24d1b9be29b8c6da0e0770059aa5e262fa6bac3bbf50a24d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r2, 0x13, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x6c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea"], 0x1c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r9, 0x0, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x4a, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

16.12909933s ago: executing program 0 (id=3744):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000200)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}]}, &(0x7f0000000280)=0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r4=>0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
accept4$ax25(r0, &(0x7f0000000340)={{0x3, @default}, [@null, @bcast, @null, @netrom, @bcast, @rose, @remote, @default]}, &(0x7f00000002c0)=0x48, 0x0) (async)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) (async)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @empty, 0x9}, 0x1c) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) (async)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_modinfo={0x42, 0xb055}}) (async)
recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x24040840) (async)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}}, 0x1c)

16.039977226s ago: executing program 0 (id=3745):
r0 = socket$inet6(0xa, 0x80002, 0x0)
socket$inet(0x2, 0x1, 0x100)
close(0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6, 0xe, 0x2, 0xff, 0xb0, 0xf, 0x2, 0x3, 0x8, 0x5, 0x3, 0x2, 0x6d, 0x2}, 0xe)

16.039468581s ago: executing program 0 (id=3746):
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
unshare(0x40000)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000180)={[0x9da6]}, 0x8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000040)="9bc8922f7e5cc01feb6288daca37a8dce4cb59d8a4b7198f52c84041c2473658ec4228f2399fc5e950910ab0cdaa2d3be784823a4e212dd37985e42fcea0b651a17aaaa049b720ba185ec9948d586993914fdb5e9b98efcf946a0d085dc797ce3727b77c2ad7eccbdf34fcb29519dec5414cc12ddc5ade42")
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x21)
epoll_create1(0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000940), 0x10)
close(0x3)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, &(0x7f0000000080))
setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xde, "60403cc9143da550eb5736a4ee2f0dd67b879cde0af61879331e35bf3e7353864cdefb7e303826c77a8efb10b7800b9734a384dc4838037cc9a353642f2c2d500e6b95484d10121527426ba3a049202ac01788883f004e7123c0f4fa7a9c30ded0d01cf285b7ea3abb71fe1aa624c35111226cb71cc03013ad9d0177997003432a03d4c599204f5ba6fe8f00f6f236c85b546ad0c5d608adb3275809607d237960a11fee2e1dea4cb02f13ab9271bbbc3498bc3b77f8b1ecfc0d5b1289cc16bdef7b2cb4075c61be5c2bbde78235d491d149318650d9d85cc43566618c74"}, &(0x7f0000000180)=0xe6)

15.108720493s ago: executing program 0 (id=3747):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x80000001, 0x1000, 0x3, 0x7ff}, 0x10)
r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x80)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000100)=0x2, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0x5, 0x7f, 0xffff8000, 0x8}, 0x10)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x2100, 0x0)
ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f00000001c0)={'\x00', 0x6, 0x3, 0x473})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff, 0x0, 0xff], [0xff, 0xffff00], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x5, 0x38}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}, {[0xffffff44, 0xfffffff8], 0x9, 0x9, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x68}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast2, @local, [0xff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0xffffffff], 'dvmrp1\x00', 'bridge0\x00', {0xff}, {}, 0x16, 0x55, 0x2, 0x1a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x400001, 0x0)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000740))
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x409e}, 0x4000000)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000900)={<r5=>0x0, "ea7a6e9f3ee973ad22d2b8ca66936880"})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001900)={r5, 0x0, 0x80000001, 0x1})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r1)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000002140)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002100)={&(0x7f0000001d80)={0x324, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_IE={0xbe, 0x2a, [@preq={0x82, 0x62, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x8, 0x7, @device_b, 0x4, @value=@broadcast, 0x6, 0x2, 0x6, [{{}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x401}, {{0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x55e}, {{0x1}, @device_a, 0x6}]}}, @challenge={0x10, 0x1, 0x8b}, @challenge={0x10, 0x1, 0x4c}, @supported_rates={0x1, 0x6, [{0x5}, {0x6, 0x1}, {0xb}, {0x30}, {0x4, 0x1}, {0x1b, 0x1}]}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x7, 0x5, @broadcast, 0xf, 0x8, 0x2}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7f, 0x1d, 0x5}}, @ht={0x2d, 0x1a, {0x800, 0x3, 0x7, 0x0, {0x800, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0xad5, 0x9}}, @cf={0x4, 0x6, {0x3, 0x23, 0x400}}, @channel_switch={0x25, 0x3, {0x1, 0xb0, 0x6}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x191, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x95, 0x10}}, @channel_switch={0x25, 0x3, {0x1, 0x2}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @peer_mgmt={0x75, 0x14, {0x0, 0x0, @void, @void, @val="f1e91b735541b44b4808b3c055ceb21d"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @dsss={0x3, 0x1, 0x4}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0xf3, @device_a, 0xf9f, @value, 0x4, 0x0, @broadcast, 0x10}}, @perr={0x84, 0x135, {0x1, 0x13, [{{0x0, 0x1}, @device_a, 0x9, @value, 0x1c}, {{}, @broadcast, 0x1, @void, 0x15}, {{0x0, 0x1}, @broadcast, 0xc3a, @value, 0x33}, {{}, @device_a, 0xfffff69e, @void, 0xa}, {{}, @broadcast, 0x5, @void, 0x7}, {{0x0, 0x1}, @device_a, 0xf, @value=@broadcast, 0x1}, {{}, @device_a, 0x0, @void, 0x10}, {{}, @device_b, 0x0, @void, 0x1e}, {{}, @device_a, 0x1, @void, 0x15}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x42}, {{0x0, 0x1}, @device_a, 0x100, @value, 0x38}, {{0x0, 0x1}, @broadcast, 0xfffffff9, @value=@device_b, 0x2c}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x2}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0xc}, {{}, @device_b, 0x8001, @void, 0x3a}, {{}, @broadcast, 0x4, @void, 0x1f}, {{0x0, 0x1}, @device_a, 0x2f, @value, 0x35}, {{}, @device_a, 0x7, @void, 0x16}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x3e}]}}, @channel_switch={0x25, 0x3, {0x1, 0xa9, 0x98}}]}, @NL80211_ATTR_IE={0x59, 0x2a, [@mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0xff, @device_a, 0x80, @value=@device_b, 0x40, 0x9, @device_a, 0x1000}}, @mesh_chsw={0x76, 0x6, {0x5, 0x36, 0xc, 0x84}}, @dsss={0x3, 0x1, 0x80}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x78, 0x9}}, @cf={0x4, 0x6, {0x8, 0x5, 0x8, 0x7}}, @ibss={0x6, 0x2, 0x3}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x10, 0x0, 0x60}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x324}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000002180)=""/205, &(0x7f0000002280)=0xcd)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000022c0)={'wlan0\x00', @multicast})
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000002300)=0x1)
r7 = accept4$unix(r1, 0x0, &(0x7f0000002340), 0x80000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002380)={'wlan0\x00', <r8=>0x0})
ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000023c0))
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000027c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000002800)=0xc)
ioctl$TUNSETGROUP(r3, 0x400454ce, r9)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000002840)=@fragment={0xc, 0x0, 0x81, 0x0, 0x0, 0xd, 0x65}, 0x8)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b00)={0x6, 0x19, &(0x7f0000002880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x5, 0x0, 0xd, 0x6, 0xfffffffa}, @ldst={0x0, 0x0, 0x5, 0xbbb11e2007e6bf57, 0xb, 0x2, 0x8}, @map_fd={0x18, 0xb}, @tail_call]}, &(0x7f0000002980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000029c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002a00)={0x2, 0x3, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002a40)=[r2, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002a80)=[{0x2, 0x1, 0xc, 0x8}, {0x4, 0x5, 0xd, 0x5}, {0x4, 0x3, 0x1, 0xb}, {0x2, 0x4, 0x8, 0x9}, {0x2, 0x2, 0x0, 0x4}, {0x1, 0x1, 0xc}, {0x0, 0x4, 0xe, 0xa}], 0x10, 0x200}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000002bc0)={'batadv0\x00', <r11=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002c00)={r10, r11, 0x25, 0x1d, @void}, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000002c40))
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000002c80)=r8)

1.005790373s ago: executing program 33 (id=3740):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x7, 0x8, 0x8}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket(0x11, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0xa0179e08})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = getuid()
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x3, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r8}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x3, 0xfffffffffffffffa, 0x7, 0x100000}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
unshare(0x22020600)
r10 = socket$kcm(0x11, 0x3, 0x0)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r13, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

947.062868ms ago: executing program 34 (id=3736):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa03f4947890036dd67c90781200183f250000000000000000015a817f"], 0x0)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4)

0s ago: executing program 35 (id=3747):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x80000001, 0x1000, 0x3, 0x7ff}, 0x10)
r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x80)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000100)=0x2, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0x5, 0x7f, 0xffff8000, 0x8}, 0x10)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x2100, 0x0)
ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f00000001c0)={'\x00', 0x6, 0x3, 0x473})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff, 0x0, 0xff], [0xff, 0xffff00], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x5, 0x38}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}, {[0xffffff44, 0xfffffff8], 0x9, 0x9, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x68}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast2, @local, [0xff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0xffffffff], 'dvmrp1\x00', 'bridge0\x00', {0xff}, {}, 0x16, 0x55, 0x2, 0x1a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x400001, 0x0)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000740))
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x409e}, 0x4000000)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000900)={<r5=>0x0, "ea7a6e9f3ee973ad22d2b8ca66936880"})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001900)={r5, 0x0, 0x80000001, 0x1})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r1)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000002140)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002100)={&(0x7f0000001d80)={0x324, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_IE={0xbe, 0x2a, [@preq={0x82, 0x62, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x8, 0x7, @device_b, 0x4, @value=@broadcast, 0x6, 0x2, 0x6, [{{}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x401}, {{0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x55e}, {{0x1}, @device_a, 0x6}]}}, @challenge={0x10, 0x1, 0x8b}, @challenge={0x10, 0x1, 0x4c}, @supported_rates={0x1, 0x6, [{0x5}, {0x6, 0x1}, {0xb}, {0x30}, {0x4, 0x1}, {0x1b, 0x1}]}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x7, 0x5, @broadcast, 0xf, 0x8, 0x2}}, @mesh_chsw={0x76, 0x6, {0x40, 0x7f, 0x1d, 0x5}}, @ht={0x2d, 0x1a, {0x800, 0x3, 0x7, 0x0, {0x800, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0xad5, 0x9}}, @cf={0x4, 0x6, {0x3, 0x23, 0x400}}, @channel_switch={0x25, 0x3, {0x1, 0xb0, 0x6}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x191, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x95, 0x10}}, @channel_switch={0x25, 0x3, {0x1, 0x2}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @peer_mgmt={0x75, 0x14, {0x0, 0x0, @void, @void, @val="f1e91b735541b44b4808b3c055ceb21d"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @dsss={0x3, 0x1, 0x4}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0xf3, @device_a, 0xf9f, @value, 0x4, 0x0, @broadcast, 0x10}}, @perr={0x84, 0x135, {0x1, 0x13, [{{0x0, 0x1}, @device_a, 0x9, @value, 0x1c}, {{}, @broadcast, 0x1, @void, 0x15}, {{0x0, 0x1}, @broadcast, 0xc3a, @value, 0x33}, {{}, @device_a, 0xfffff69e, @void, 0xa}, {{}, @broadcast, 0x5, @void, 0x7}, {{0x0, 0x1}, @device_a, 0xf, @value=@broadcast, 0x1}, {{}, @device_a, 0x0, @void, 0x10}, {{}, @device_b, 0x0, @void, 0x1e}, {{}, @device_a, 0x1, @void, 0x15}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x42}, {{0x0, 0x1}, @device_a, 0x100, @value, 0x38}, {{0x0, 0x1}, @broadcast, 0xfffffff9, @value=@device_b, 0x2c}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x2}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0xc}, {{}, @device_b, 0x8001, @void, 0x3a}, {{}, @broadcast, 0x4, @void, 0x1f}, {{0x0, 0x1}, @device_a, 0x2f, @value, 0x35}, {{}, @device_a, 0x7, @void, 0x16}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x3e}]}}, @channel_switch={0x25, 0x3, {0x1, 0xa9, 0x98}}]}, @NL80211_ATTR_IE={0x59, 0x2a, [@mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0xff, @device_a, 0x80, @value=@device_b, 0x40, 0x9, @device_a, 0x1000}}, @mesh_chsw={0x76, 0x6, {0x5, 0x36, 0xc, 0x84}}, @dsss={0x3, 0x1, 0x80}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x78, 0x9}}, @cf={0x4, 0x6, {0x8, 0x5, 0x8, 0x7}}, @ibss={0x6, 0x2, 0x3}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x10, 0x0, 0x60}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x324}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000002180)=""/205, &(0x7f0000002280)=0xcd)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000022c0)={'wlan0\x00', @multicast})
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000002300)=0x1)
r7 = accept4$unix(r1, 0x0, &(0x7f0000002340), 0x80000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002380)={'wlan0\x00', <r8=>0x0})
ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000023c0))
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000027c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000002800)=0xc)
ioctl$TUNSETGROUP(r3, 0x400454ce, r9)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000002840)=@fragment={0xc, 0x0, 0x81, 0x0, 0x0, 0xd, 0x65}, 0x8)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b00)={0x6, 0x19, &(0x7f0000002880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x5, 0x0, 0xd, 0x6, 0xfffffffa}, @ldst={0x0, 0x0, 0x5, 0xbbb11e2007e6bf57, 0xb, 0x2, 0x8}, @map_fd={0x18, 0xb}, @tail_call]}, &(0x7f0000002980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000029c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002a00)={0x2, 0x3, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002a40)=[r2, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002a80)=[{0x2, 0x1, 0xc, 0x8}, {0x4, 0x5, 0xd, 0x5}, {0x4, 0x3, 0x1, 0xb}, {0x2, 0x4, 0x8, 0x9}, {0x2, 0x2, 0x0, 0x4}, {0x1, 0x1, 0xc}, {0x0, 0x4, 0xe, 0xa}], 0x10, 0x200}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000002bc0)={'batadv0\x00', <r11=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002c00)={r10, r11, 0x25, 0x1d, @void}, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000002c40))
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000002c80)=r8)

kernel console output (not intermixed with test programs):

x805/0xb30
[  171.684966][T11824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.684980][T11824]  ? aa_sock_msg_perm+0xf1/0x1d0
[  171.684995][T11824]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.685007][T11824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.685040][T11824]  __sock_sendmsg+0x21c/0x270
[  171.685059][T11824]  ____sys_sendmsg+0x505/0x830
[  171.685079][T11824]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.685101][T11824]  ? import_iovec+0x74/0xa0
[  171.685121][T11824]  ___sys_sendmsg+0x21f/0x2a0
[  171.685137][T11824]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.685181][T11824]  ? __fget_files+0x2a/0x420
[  171.685192][T11824]  ? __fget_files+0x3a0/0x420
[  171.685209][T11824]  __x64_sys_sendmsg+0x19b/0x260
[  171.685227][T11824]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.685255][T11824]  ? do_syscall_64+0xbe/0x3b0
[  171.685272][T11824]  do_syscall_64+0xfa/0x3b0
[  171.685283][T11824]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.685295][T11824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.685308][T11824]  ? exc_page_fault+0x9f/0xf0
[  171.685345][T11824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.685357][T11824] RIP: 0033:0x7f7f65b8ec29
[  171.685368][T11824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.685378][T11824] RSP: 002b:00007f7f63dcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.685398][T11824] RAX: ffffffffffffffda RBX: 00007f7f65dd6090 RCX: 00007f7f65b8ec29
[  171.685407][T11824] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  171.685415][T11824] RBP: 00007f7f65c11e41 R08: 0000000000000000 R09: 0000000000000000
[  171.685423][T11824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.685430][T11824] R13: 00007f7f65dd6128 R14: 00007f7f65dd6090 R15: 00007ffe6b2a05a8
[  171.685451][T11824]  </TASK>
[  172.158984][T11834] netlink: 'syz.0.1679': attribute type 2 has an invalid length.
[  172.279558][T11840] IPVS: Scheduler module ip_vs_sip not found
[  172.616505][T11858] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  172.776161][T11865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.788808][T11865] netlink: 'syz.3.1686': attribute type 13 has an invalid length.
[  172.867244][T11870] IPVS: stopping backup sync thread 11858 ...
[  173.265781][T11908] IPVS: stopping backup sync thread 11909 ...
[  173.281074][T11911] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  173.284843][T11908] netlink: 'syz.1.1701': attribute type 1 has an invalid length.
[  173.390063][T11927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.410685][T11931] netlink: 'syz.1.1709': attribute type 83 has an invalid length.
[  173.507140][T11931] block nbd1: server does not support multiple connections per device.
[  173.514579][T11931] block nbd1: shutting down sockets
[  174.038598][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[  174.505033][T11965] IPVS: stopping backup sync thread 11967 ...
[  174.506235][T11967] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  174.645049][T11976] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  174.651421][T11976] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  174.824753][T11995] netlink: 'syz.3.1726': attribute type 23 has an invalid length.
[  174.842009][T11994] netlink: 'syz.3.1726': attribute type 23 has an invalid length.
[  174.849590][T11994] nbd: must specify a size in bytes for the device
[  174.996690][T12009] syzkaller1: entered promiscuous mode
[  174.999815][T12009] syzkaller1: entered allmulticast mode
[  175.616506][T12022] __nla_validate_parse: 15 callbacks suppressed
[  175.616522][T12022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1737'.
[  175.705485][T12029] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1739'.
[  175.801742][T12029] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1739'.
[  175.815384][T12035] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1740'.
[  176.632326][T12050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.087200][T12076] block nbd1: server does not support multiple connections per device.
[  177.098027][T12076] block nbd1: shutting down sockets
[  177.161795][T12085] netlink: 'syz.1.1754': attribute type 1 has an invalid length.
[  177.165100][T12085] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1754'.
[  178.185748][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'.
[  178.727456][T12139] IPVS: stopping backup sync thread 12140 ...
[  178.729275][T12140] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  178.739818][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'.
[  178.956859][T12149] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  178.989930][T12151] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1766'.
[  179.050419][T12153] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  179.054152][T12153] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  180.149236][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'.
[  180.166752][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1776'.
[  180.483055][T12211] IPVS: persistence engine module ip_vs_pe_ not found
[  180.607164][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  180.791078][T12214] netlink: 'syz.0.1782': attribute type 1 has an invalid length.
[  180.807079][T12214] nbd: error processing sock list
[  180.810132][T12214] block nbd1: shutting down sockets
[  181.409402][T12229] syzkaller1: entered promiscuous mode
[  181.411906][T12229] syzkaller1: entered allmulticast mode
[  181.612960][T12240] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1790'.
[  181.662525][T12242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1791'.
[  182.383969][T12294] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  182.480447][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'.
[  182.661488][T12312] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1803'.
[  182.717484][T12318] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  182.721475][T12317] IPVS: stopping backup sync thread 12318 ...
[  182.740848][T12320] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1806'.
[  182.789136][T12320] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1806'.
[  182.794332][T12320] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1806'.
[  182.832769][T12331] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  182.865823][T12331] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  182.935902][T12338] netlink: 'syz.3.1812': attribute type 1 has an invalid length.
[  182.939056][T12338] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1812'.
[  183.063157][T12346] IPVS: set_ctl: invalid protocol: 44 172.20.20.19:20004
[  183.072758][T12344] IPVS: set_ctl: invalid protocol: 44 172.20.20.19:20004
[  183.116147][T12350] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1816'.
[  183.303253][T12358] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1818'.
[  183.754245][T12385] syzkaller1: entered promiscuous mode
[  183.756650][T12385] syzkaller1: entered allmulticast mode
[  183.763100][T12385] netlink: 'syz.3.1826': attribute type 5 has an invalid length.
[  184.685215][T12418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.693562][T12417] tipc: Resetting bearer <eth:syzkaller0>
[  184.706826][T12417] tipc: Disabling bearer <eth:syzkaller0>
[  184.862630][T12422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.867738][T12422] syzkaller0: entered promiscuous mode
[  184.869995][T12422] syzkaller0: entered allmulticast mode
[  184.944911][T12430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  184.991399][T12433] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  184.991771][T12432] IPVS: stopping backup sync thread 12433 ...
[  185.159605][T12445] netlink: 'syz.1.1846': attribute type 9 has an invalid length.
[  185.280260][T12459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.353493][T12452] tipc: Resetting bearer <eth:syzkaller0>
[  186.302055][T12452] tipc: Disabling bearer <eth:syzkaller0>
[  186.451106][T12494] nftables ruleset with unbound chain
[  186.465964][T12497] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  186.472383][T12496] IPVS: stopping backup sync thread 12497 ...
[  186.522736][T12499] IPv6: NLM_F_CREATE should be specified when creating new route
[  186.610916][T12508] netlink: 'syz.3.1866': attribute type 15 has an invalid length.
[  187.030821][T12530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.087446][T12534] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.135580][T12542] __nla_validate_parse: 10 callbacks suppressed
[  187.135590][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'.
[  187.256862][T12550] netlink: 'syz.3.1880': attribute type 1 has an invalid length.
[  187.261352][T12550] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1880'.
[  187.262027][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'.
[  187.270242][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1881'.
[  187.482109][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'.
[  188.066868][T12581] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1889'.
[  188.095611][T12581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1889'.
[  188.103978][T12581] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.110579][T12581] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  188.156855][T12583] IPVS: persistence engine module ip_vs_pe_ not found
[  188.280199][T12594] IPVS: persistence engine module ip_vs_pe_ not found
[  188.313838][T12602] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1897'.
[  188.319183][T12602] netlink: 'syz.1.1897': attribute type 1 has an invalid length.
[  188.321958][T12602] netlink: 'syz.1.1897': attribute type 1 has an invalid length.
[  188.324762][T12602] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1897'.
[  188.352055][T12605] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  188.355604][T12605] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  188.695962][T12627] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1904'.
[  188.806398][T12635] netlink: 'syz.3.1906': attribute type 13 has an invalid length.
[  188.809951][T12635] netlink: 'syz.3.1906': attribute type 17 has an invalid length.
[  188.854049][T12635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.866225][T12635] xfrm0: entered promiscuous mode
[  188.869339][T12635] xfrm0: entered allmulticast mode
[  189.245446][T12645] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  189.344833][T12649] netlink: 'syz.3.1911': attribute type 4 has an invalid length.
[  189.369346][T12654] IPVS: Scheduler module ip_vs_sip not found
[  189.577615][T12671] ..0: renamed from hsr0 (while UP)
[  189.584054][T12671] ..0: entered allmulticast mode
[  189.586348][T12671] hsr_slave_0: entered allmulticast mode
[  189.589503][T12671] hsr_slave_1: entered allmulticast mode
[  189.592361][T12671] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  189.732126][T12680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.752939][T12679] tipc: Resetting bearer <eth:syzkaller0>
[  189.774517][T12679] tipc: Disabling bearer <eth:syzkaller0>
[  190.191962][T12703] geneve2: entered promiscuous mode
[  190.530910][T12705] netlink: 'syz.0.1928': attribute type 1 has an invalid length.
[  190.534367][T12705] netlink: 'syz.0.1928': attribute type 2 has an invalid length.
[  190.537945][T12705] netlink: 'syz.0.1928': attribute type 1 has an invalid length.
[  190.766553][T12715] xt_time: unknown flags 0xf4
[  190.801744][T12717] TCP: TCP_TX_DELAY enabled
[  190.916873][T12722] IPv6: NLM_F_CREATE should be specified when creating new route
[  190.962373][T12724] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  191.019643][T12729] IPVS: stopping backup sync thread 12730 ...
[  191.022415][T12730] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  191.223337][T12748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.442068][T12765] IPVS: persistence engine module ip_vs_pe_ not found
[  191.858034][T12814] netlink: 'syz.0.1965': attribute type 14 has an invalid length.
[  191.861380][T12814] netlink: 'syz.0.1965': attribute type 11 has an invalid length.
[  191.900504][T12813] IPVS: persistence engine module ip_vs_pe_ not found
[  192.550214][T12844] IPVS: persistence engine module ip_vs_pe_ not found
[  192.708029][T12857] __nla_validate_parse: 19 callbacks suppressed
[  192.708043][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'.
[  192.733762][T12860] batadv_slave_0: entered promiscuous mode
[  192.746021][T12860] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1978'.
[  192.753079][T12859] batadv_slave_0: left promiscuous mode
[  192.796342][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1980'.
[  192.846615][T12872] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  192.888401][T12878] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  192.892096][T12877] IPVS: stopping backup sync thread 12878 ...
[  192.911747][T12877] netlink: 'syz.3.1982': attribute type 1 has an invalid length.
[  193.082211][T12882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  193.088270][T12886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  193.241614][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1987'.
[  194.205176][T12926] policy can only be matched on NF_INET_PRE_ROUTING
[  194.205193][T12926] unable to load match
[  194.764314][T12935] bond0: entered promiscuous mode
[  194.766664][T12935] bond0: entered allmulticast mode
[  194.769479][T12935] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.779947][T12937] netlink: 'syz.0.2000': attribute type 4 has an invalid length.
[  194.982701][T12943] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2002'.
[  195.074931][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'.
[  195.151960][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'.
[  195.156012][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'.
[  195.590107][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2014'.
[  195.675170][T12997] netlink: 'syz.0.2017': attribute type 2 has an invalid length.
[  195.677601][T12999] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2018'.
[  195.681082][T12997] netlink: 'syz.0.2017': attribute type 2 has an invalid length.
[  195.687236][T12997] netlink: 'syz.0.2017': attribute type 2 has an invalid length.
[  195.716837][T13007] netlink: 'syz.0.2019': attribute type 64 has an invalid length.
[  196.310818][T13040] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  196.314590][T13040] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  196.722242][T13046] syz.1.2030 uses old SIOCAX25GETINFO
[  196.894688][T13057] bond0: left allmulticast mode
[  197.170243][T13068] delete_channel: no stack
[  197.392838][T13091] openvswitch: netlink: Multiple metadata blocks provided
[  197.694512][T13119] netlink: 'syz.0.2052': attribute type 3 has an invalid length.
[  197.825610][T13128] netlink: 'syz.0.2055': attribute type 3 has an invalid length.
[  197.951134][T13134] __nla_validate_parse: 9 callbacks suppressed
[  197.951145][T13134] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2057'.
[  198.145862][T13166] netlink: 'syz.1.2062': attribute type 3 has an invalid length.
[  198.553553][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'.
[  198.575469][T13191] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  198.938710][T13216] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2076'.
[  199.257409][T13233] netlink: 'syz.1.2080': attribute type 1 has an invalid length.
[  199.277435][T13233] netlink: 'syz.1.2080': attribute type 1 has an invalid length.
[  199.303729][T13233] IPVS: fo: TCP 172.20.20.170:0 - no destination available
[  199.909816][T13246] IPVS: persistence engine module ip_vs_pe_ not found
[  199.998305][T13251] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2087'.
[  200.073333][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'.
[  200.158613][T13258] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  200.389956][T13265] bond2: entered promiscuous mode
[  200.392350][T13265] bond2: entered allmulticast mode
[  200.395614][T13265] 8021q: adding VLAN 0 to HW filter on device bond2
[  200.406087][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2092'.
[  200.873645][T13284] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  201.020879][T13300] netlink: 'syz.1.2102': attribute type 1 has an invalid length.
[  201.040643][T13300] bond1: entered promiscuous mode
[  201.040769][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2103'.
[  201.042828][T13300] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.070394][T13300] bond1: (slave bridge1): making interface the new active one
[  201.072984][T13300] bridge1: entered promiscuous mode
[  201.075710][T13300] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  201.130915][T13313] netlink: 'syz.1.2105': attribute type 1 has an invalid length.
[  201.149947][T13312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2105'.
[  201.174312][T13315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2104'.
[  201.199853][T13309] netlink: 'syz.3.2104': attribute type 1 has an invalid length.
[  201.242625][T13309] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  201.247921][T13309] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  201.493469][T13339] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  201.498845][T13339] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  201.619353][T13341] netlink: 'syz.3.2111': attribute type 1 has an invalid length.
[  201.622684][T13341] netlink: 'syz.3.2111': attribute type 2 has an invalid length.
[  202.175451][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'.
[  202.319939][T13350] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  202.551697][T13363] vlan2: entered allmulticast mode
[  202.596068][T13365] syzkaller1: entered promiscuous mode
[  202.601817][T13365] syzkaller1: entered allmulticast mode
[  202.668385][T13368] bridge_slave_1: entered promiscuous mode
[  202.674157][T13368] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  202.678440][T13368] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  203.705407][T13412] netlink: 'syz.1.2134': attribute type 1 has an invalid length.
[  203.720537][T13412] 8021q: adding VLAN 0 to HW filter on device bond3
[  203.796581][T13420] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  203.798203][T13418] IPVS: stopping backup sync thread 13420 ...
[  203.821650][T13422] __nla_validate_parse: 5 callbacks suppressed
[  203.821667][T13422] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2135'.
[  204.032007][T13438] geneve2: entered promiscuous mode
[  204.037305][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'.
[  204.474992][T13459] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  204.655575][T13465] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2149'.
[  204.782557][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'.
[  204.851245][T13469] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  204.994722][T13482] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2157'.
[  205.366620][T13495] sctp: [Deprecated]: syz.0.2160 (pid 13495) Use of struct sctp_assoc_value in delayed_ack socket option.
[  205.366620][T13495] Use struct sctp_sack_info instead
[  205.382369][T13495] 8021q: VLANs not supported on gre0
[  205.697829][T13516] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  205.703725][T13514] IPVS: stopping backup sync thread 13516 ...
[  205.893451][T13523] netlink: 'syz.0.2168': attribute type 4 has an invalid length.
[  206.054686][T13534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2171'.
[  206.078054][T13536] netlink: 'syz.0.2172': attribute type 4 has an invalid length.
[  206.083456][T13538] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2173'.
[  206.149984][T13543] IPVS: persistence engine module ip_vs_pe_ not found
[  206.151105][T13547] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2175'.
[  206.165263][T13547] batadv1: entered promiscuous mode
[  206.171648][T13547] batadv1: entered allmulticast mode
[  206.202988][T13553] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2177'.
[  206.329278][T13562] netlink: 'syz.3.2180': attribute type 7 has an invalid length.
[  206.340755][T13562] : entered promiscuous mode
[  207.266112][T13586] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  207.270493][T13586] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  207.320324][T13588] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  208.171698][T13607] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  208.176214][T13605] IPVS: stopping backup sync thread 13607 ...
[  208.280914][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2194'.
[  208.952009][T13640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2199'.
[  209.072768][T13643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2200'.
[  210.193644][T13669] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  210.212359][T13669] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  210.352721][T13685] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  210.360290][T13683] IPVS: stopping backup sync thread 13685 ...
[  210.504453][T13694] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  210.506678][T13692] IPVS: stopping backup sync thread 13694 ...
[  210.552455][T13697] : renamed from vlan0 (while UP)
[  210.560370][T13698] netlink: 'syz.1.2213': attribute type 1 has an invalid length.
[  210.563167][T13699] netlink: 'syz.1.2213': attribute type 1 has an invalid length.
[  210.573993][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'.
[  210.579050][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'.
[  210.582715][T13697] netlink: 'syz.1.2213': attribute type 7 has an invalid length.
[  210.590898][ T5870] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.593831][ T5870] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.598149][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'.
[  210.600657][ T5870] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.601606][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'.
[  210.604955][ T5870] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.609462][T13697] netlink: 'syz.1.2213': attribute type 7 has an invalid length.
[  211.099384][T13723] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2222'.
[  211.125540][T13725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2223'.
[  211.249166][T13732] IPVS: stopping backup sync thread 13733 ...
[  211.251784][T13733] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  211.360741][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2227'.
[  211.636610][T13758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2230'.
[  211.645338][T13758] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  211.794384][T13769] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  211.885698][T13781] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  211.889477][T13781] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  212.049256][T13799] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  212.055271][T13798] IPVS: stopping backup sync thread 13799 ...
[  212.157002][ T9115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.160095][ T9115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.674565][T13865] IPVS: persistence engine module ip_vs_pe_ not found
[  212.716553][T13868] netlink: 'syz.1.2257': attribute type 16 has an invalid length.
[  212.720067][T13868] tun4: tun_chr_ioctl cmd 1074025675
[  212.721851][T13868] tun4: persist enabled
[  212.723860][T13868] tun4: tun_chr_ioctl cmd 1074025675
[  212.725690][T13868] tun4: persist enabled
[  212.830117][T13870] IPVS: persistence engine module ip_vs_pe_ not found
[  213.208660][T13890] 0X: renamed from caif0
[  213.213319][T13890] 0X: entered allmulticast mode
[  213.221236][T13890] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  213.843867][T13937] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  213.847857][T13937] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  213.898883][T13939] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  213.902039][T13939] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  214.070070][T13954] __nla_validate_parse: 12 callbacks suppressed
[  214.070080][T13954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2276'.
[  214.533101][T13983] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  214.620074][T13992] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2287'.
[  214.900428][T14009] IPVS: Scheduler module ip_vs_sip not found
[  215.134651][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2293'.
[  215.490632][T14030] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2298'.
[  215.558474][T14033] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2299'.
[  215.578451][T14034] geneve3: entered promiscuous mode
[  215.582324][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.589611][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.597063][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.605460][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.785810][T14048] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  216.170702][T14067] syzkaller1: entered promiscuous mode
[  216.172719][T14067] syzkaller1: entered allmulticast mode
[  216.353639][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'.
[  216.460754][T14082] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  216.638029][T14089] nbd: must specify a size in bytes for the device
[  216.694650][T14091] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2315'.
[  216.922792][T14105] netlink: 'syz.0.2319': attribute type 10 has an invalid length.
[  216.926127][T14106] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  216.929805][T14105] IPVS: stopping backup sync thread 14106 ...
[  217.001279][T14111] netlink: 'syz.3.2320': attribute type 1 has an invalid length.
[  217.004342][T14111] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2320'.
[  217.391586][T14135] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  217.395923][T14133] IPVS: stopping backup sync thread 14135 ...
[  217.412799][T14133] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  217.583840][T14146] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  217.585969][T14145] IPVS: stopping backup sync thread 14146 ...
[  217.593696][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2331'.
[  217.843852][T14157] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  217.859974][T14157] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  218.211141][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'.
[  218.391784][T14213] sctp: [Deprecated]: syz.0.2348 (pid 14213) Use of int in max_burst socket option.
[  218.391784][T14213] Use struct sctp_assoc_value instead
[  219.246589][T14273] __nla_validate_parse: 3 callbacks suppressed
[  219.246600][T14273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2363'.
[  219.324933][T14277] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2364'.
[  220.308927][T14291] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2368'.
[  220.346556][T14291] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2368'.
[  220.803537][T14302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2372'.
[  220.821084][T14304] netlink: 'syz.1.2373': attribute type 3 has an invalid length.
[  220.825980][T14302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2372'.
[  220.826270][T14304] syz_tun: left allmulticast mode
[  220.832060][T14304] dvmrp8: left allmulticast mode
[  220.896265][T14305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.016267][T14314] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2378'.
[  221.190075][T14324] netlink: 'syz.3.2380': attribute type 29 has an invalid length.
[  221.194306][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'.
[  221.200507][T14328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2381'.
[  221.212929][T14328] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  221.216706][T14328] CPU: 0 UID: 0 PID: 14328 Comm: syz.0.2381 Not tainted syzkaller #0 PREEMPT(full) 
[  221.216751][T14328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.216759][T14328] Call Trace:
[  221.216764][T14328]  <TASK>
[  221.216771][T14328]  dump_stack_lvl+0x189/0x250
[  221.216795][T14328]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.216810][T14328]  ? __pfx__printk+0x10/0x10
[  221.216831][T14328]  ? kernfs_path_from_node+0x2f/0x290
[  221.216844][T14328]  ? kernfs_path_from_node+0x250/0x290
[  221.216857][T14328]  ? kernfs_path_from_node+0x2f/0x290
[  221.216873][T14328]  sysfs_warn_dup+0x8e/0xa0
[  221.216908][T14328]  sysfs_do_create_link_sd+0xc0/0x110
[  221.216926][T14328]  device_add_class_symlinks+0x1cf/0x240
[  221.216944][T14328]  device_add+0x475/0xb50
[  221.216963][T14328]  wiphy_register+0x1ba6/0x28d0
[  221.216990][T14328]  ? __pfx_wiphy_register+0x10/0x10
[  221.217003][T14328]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  221.217027][T14328]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  221.217054][T14328]  ieee80211_register_hw+0x3484/0x4100
[  221.217085][T14328]  ? ieee80211_register_hw+0x13f1/0x4100
[  221.217112][T14328]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  221.217132][T14328]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  221.217158][T14328]  ? __hrtimer_setup+0x187/0x210
[  221.217170][T14328]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  221.217185][T14328]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  221.217229][T14328]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  221.217247][T14328]  ? trace_kmalloc+0x1f/0xd0
[  221.217263][T14328]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  221.217280][T14328]  ? kstrndup+0xbf/0x160
[  221.217301][T14328]  hwsim_new_radio_nl+0xea4/0x1b10
[  221.217322][T14328]  ? __pfx___nla_validate_parse+0x10/0x10
[  221.217348][T14328]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.217378][T14328]  ? __nla_parse+0x40/0x60
[  221.217395][T14328]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  221.217420][T14328]  genl_family_rcv_msg_doit+0x215/0x300
[  221.217444][T14328]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  221.217472][T14328]  ? bpf_lsm_capable+0x9/0x20
[  221.217489][T14328]  ? security_capable+0x7e/0x2e0
[  221.217512][T14328]  genl_rcv_msg+0x60e/0x790
[  221.217534][T14328]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.217551][T14328]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.217582][T14328]  netlink_rcv_skb+0x208/0x470
[  221.217593][T14328]  ? __lock_acquire+0xab9/0xd20
[  221.217612][T14328]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.217629][T14328]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  221.217656][T14328]  ? down_read+0x1ad/0x2e0
[  221.217674][T14328]  genl_rcv+0x28/0x40
[  221.217690][T14328]  netlink_unicast+0x82f/0x9e0
[  221.217746][T14328]  ? __pfx_netlink_unicast+0x10/0x10
[  221.217769][T14328]  ? netlink_sendmsg+0x642/0xb30
[  221.217782][T14328]  ? skb_put+0x11b/0x210
[  221.217800][T14328]  netlink_sendmsg+0x805/0xb30
[  221.217822][T14328]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.217840][T14328]  ? aa_sock_msg_perm+0xf1/0x1d0
[  221.217856][T14328]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  221.217870][T14328]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.217886][T14328]  __sock_sendmsg+0x21c/0x270
[  221.217908][T14328]  ____sys_sendmsg+0x505/0x830
[  221.217928][T14328]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.217949][T14328]  ? import_iovec+0x74/0xa0
[  221.217968][T14328]  ___sys_sendmsg+0x21f/0x2a0
[  221.217986][T14328]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.218030][T14328]  ? __fget_files+0x2a/0x420
[  221.218041][T14328]  ? __fget_files+0x3a0/0x420
[  221.218066][T14328]  __x64_sys_sendmsg+0x19b/0x260
[  221.218085][T14328]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  221.218110][T14328]  ? rcu_is_watching+0x15/0xb0
[  221.218125][T14328]  ? do_syscall_64+0xbe/0x3b0
[  221.218143][T14328]  do_syscall_64+0xfa/0x3b0
[  221.218155][T14328]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.218169][T14328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.218183][T14328]  ? exc_page_fault+0x9f/0xf0
[  221.218196][T14328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.218208][T14328] RIP: 0033:0x7f61a218ec29
[  221.218220][T14328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.218231][T14328] RSP: 002b:00007f61a306a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.218246][T14328] RAX: ffffffffffffffda RBX: 00007f61a23d5fa0 RCX: 00007f61a218ec29
[  221.218256][T14328] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  221.218266][T14328] RBP: 00007f61a2211e41 R08: 0000000000000000 R09: 0000000000000000
[  221.218276][T14328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.218285][T14328] R13: 00007f61a23d6038 R14: 00007f61a23d5fa0 R15: 00007ffd239b1c68
[  221.218308][T14328]  </TASK>
[  221.396143][T14330] syzkaller0: left promiscuous mode
[  221.399356][T14330] syzkaller0: left allmulticast mode
[  221.403670][T14330] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.463690][T14337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.479212][T14336] tipc: Resetting bearer <eth:syzkaller0>
[  221.479281][T14343] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  221.496497][T14336] tipc: Disabling bearer <eth:syzkaller0>
[  221.502087][T14341] IPVS: stopping backup sync thread 14343 ...
[  221.511502][T14341] syz_tun: entered allmulticast mode
[  221.595501][T14349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2388'.
[  221.679776][T14355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  221.776789][T14365] IPVS: Scheduler module ip_vs_sip not found
[  222.950750][T14403] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  223.046833][T14407] netlink: 'syz.1.2406': attribute type 1 has an invalid length.
[  223.050484][T14407] netlink: 'syz.1.2406': attribute type 4 has an invalid length.
[  223.063039][T14406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.069033][T14405] tipc: Resetting bearer <eth:syzkaller0>
[  223.086241][T14405] tipc: Disabling bearer <eth:syzkaller0>
[  223.490805][T14446] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  224.146176][T14461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.159670][T14460] tipc: Resetting bearer <eth:syzkaller0>
[  224.177600][T14460] tipc: Disabling bearer <eth:syzkaller0>
[  224.290934][T14480] tun2: tun_chr_ioctl cmd 1074025675
[  224.293163][T14480] tun2: persist enabled
[  224.301403][T14480] tun2: tun_chr_ioctl cmd 1074025675
[  224.303423][T14480] tun2: persist enabled
[  224.305232][T14483] tun3: tun_chr_ioctl cmd 1074025673
[  224.311056][T14483] tun3: tun_chr_ioctl cmd 1074025675
[  224.313392][T14483] tun3: persist enabled
[  224.316020][T14482] tun3: tun_chr_ioctl cmd 1074025675
[  224.327017][T14482] tun3: persist enabled
[  224.328907][T14482] tun3: tun_chr_ioctl cmd 3223873039
[  224.377446][T14482] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode
[  224.419791][T14489] syzkaller1: entered promiscuous mode
[  224.421695][T14489] syzkaller1: entered allmulticast mode
[  224.435720][T14491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.442153][T14490] tipc: Resetting bearer <eth:syzkaller0>
[  224.456097][T14490] tipc: Disabling bearer <eth:syzkaller0>
[  224.731279][T14510] __nla_validate_parse: 10 callbacks suppressed
[  224.731289][T14510] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.2438'.
[  225.265512][T14512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2439'.
[  225.274798][T14512] syzkaller1: entered promiscuous mode
[  225.276631][T14512] syzkaller1: entered allmulticast mode
[  225.431081][T14523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2442'.
[  225.506043][T14528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.511743][T14527] tipc: Resetting bearer <eth:syzkaller0>
[  225.524744][T14527] tipc: Disabling bearer <eth:syzkaller0>
[  225.618254][T14530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.645332][T14529] tipc: Resetting bearer <eth:syzkaller0>
[  226.475747][T14529] tipc: Disabling bearer <eth:syzkaller0>
[  226.568342][T14543] netlink: 'syz.3.2450': attribute type 1 has an invalid length.
[  226.572332][T14545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2449'.
[  226.612385][T14552] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.654373][T14560] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.664045][T14563] netlink: 'syz.0.2457': attribute type 21 has an invalid length.
[  226.667527][T14563] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2457'.
[  226.670598][T14563] netlink: 'syz.0.2457': attribute type 4 has an invalid length.
[  226.673195][T14563] netlink: 'syz.0.2457': attribute type 3 has an invalid length.
[  226.675984][T14563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2457'.
[  226.684149][T14563] unknown channel width for channel at 909000KHz?
[  226.703458][T14567] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  226.780736][T14583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.784860][T14582] tipc: Resetting bearer <eth:syzkaller0>
[  226.802275][T14582] tipc: Disabling bearer <eth:syzkaller0>
[  226.909415][T14602] IPVS: set_ctl: invalid protocol: 34213 172.20.20.68:20003
[  226.940843][T14608] netlink: 'syz.3.2473': attribute type 3 has an invalid length.
[  226.943762][T14608] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2473'.
[  226.955919][T14608] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  226.958757][T14608] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  227.012029][T14617] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.019093][T14616] tipc: Resetting bearer <eth:syzkaller0>
[  227.030733][T14616] tipc: Disabling bearer <eth:syzkaller0>
[  227.940209][T14647] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.993424][T14649] IPVS: Scheduler module ip_vs_sip not found
[  227.996715][T14649] IPVS: length: 123 != 8
[  228.174872][T14672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.182731][T14671] tipc: Resetting bearer <eth:syzkaller0>
[  228.199269][T14671] tipc: Disabling bearer <eth:syzkaller0>
[  228.218732][T14675] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20000
[  228.261436][T14677] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2494'.
[  228.264844][T14677] netlink: 'syz.0.2494': attribute type 4 has an invalid length.
[  228.514375][T14693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2501'.
[  228.553725][T14696] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  228.556338][T14696] CPU: 1 UID: 0 PID: 14696 Comm: syz.0.2502 Not tainted syzkaller #0 PREEMPT(full) 
[  228.556349][T14696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  228.556354][T14696] Call Trace:
[  228.556357][T14696]  <TASK>
[  228.556361][T14696]  dump_stack_lvl+0x189/0x250
[  228.556375][T14696]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.556385][T14696]  ? __pfx__printk+0x10/0x10
[  228.556397][T14696]  ? kernfs_path_from_node+0x2f/0x290
[  228.556406][T14696]  ? kernfs_path_from_node+0x250/0x290
[  228.556413][T14696]  ? kernfs_path_from_node+0x2f/0x290
[  228.556423][T14696]  sysfs_warn_dup+0x8e/0xa0
[  228.556431][T14696]  sysfs_do_create_link_sd+0xc0/0x110
[  228.556440][T14696]  device_add_class_symlinks+0x1cf/0x240
[  228.556452][T14696]  device_add+0x475/0xb50
[  228.556463][T14696]  wiphy_register+0x1ba6/0x28d0
[  228.556479][T14696]  ? __pfx_wiphy_register+0x10/0x10
[  228.556486][T14696]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  228.556499][T14696]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  228.556511][T14696]  ieee80211_register_hw+0x3484/0x4100
[  228.556528][T14696]  ? ieee80211_register_hw+0x13f1/0x4100
[  228.556542][T14696]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  228.556554][T14696]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  228.556569][T14696]  ? __hrtimer_setup+0x187/0x210
[  228.556576][T14696]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  228.556586][T14696]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  228.556610][T14696]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  228.556641][T14696]  ? trace_kmalloc+0x1f/0xd0
[  228.556651][T14696]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  228.556662][T14696]  ? kstrndup+0xbf/0x160
[  228.556675][T14696]  hwsim_new_radio_nl+0xea4/0x1b10
[  228.556687][T14696]  ? __pfx___nla_validate_parse+0x10/0x10
[  228.556702][T14696]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  228.556718][T14696]  ? __nla_parse+0x40/0x60
[  228.556727][T14696]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  228.556742][T14696]  genl_family_rcv_msg_doit+0x215/0x300
[  228.556755][T14696]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  228.556771][T14696]  ? bpf_lsm_capable+0x9/0x20
[  228.556781][T14696]  ? security_capable+0x7e/0x2e0
[  228.556796][T14696]  genl_rcv_msg+0x60e/0x790
[  228.556808][T14696]  ? __pfx_genl_rcv_msg+0x10/0x10
[  228.556818][T14696]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  228.556835][T14696]  netlink_rcv_skb+0x208/0x470
[  228.556842][T14696]  ? __lock_acquire+0xab9/0xd20
[  228.556853][T14696]  ? __pfx_genl_rcv_msg+0x10/0x10
[  228.556864][T14696]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  228.556880][T14696]  ? down_read+0x1ad/0x2e0
[  228.556911][T14696]  genl_rcv+0x28/0x40
[  228.556925][T14696]  netlink_unicast+0x82f/0x9e0
[  228.556955][T14696]  ? __pfx_netlink_unicast+0x10/0x10
[  228.556975][T14696]  ? netlink_sendmsg+0x642/0xb30
[  228.556986][T14696]  ? skb_put+0x11b/0x210
[  228.557003][T14696]  netlink_sendmsg+0x805/0xb30
[  228.557017][T14696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.557026][T14696]  ? aa_sock_msg_perm+0xf1/0x1d0
[  228.557035][T14696]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  228.557043][T14696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.557052][T14696]  __sock_sendmsg+0x21c/0x270
[  228.557065][T14696]  ____sys_sendmsg+0x505/0x830
[  228.557077][T14696]  ? __pfx_____sys_sendmsg+0x10/0x10
[  228.557091][T14696]  ? import_iovec+0x74/0xa0
[  228.557103][T14696]  ___sys_sendmsg+0x21f/0x2a0
[  228.557113][T14696]  ? __pfx____sys_sendmsg+0x10/0x10
[  228.557138][T14696]  ? __fget_files+0x2a/0x420
[  228.557145][T14696]  ? __fget_files+0x3a0/0x420
[  228.557156][T14696]  __x64_sys_sendmsg+0x19b/0x260
[  228.557166][T14696]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  228.557180][T14696]  ? rcu_is_watching+0x15/0xb0
[  228.557191][T14696]  ? do_syscall_64+0xbe/0x3b0
[  228.557201][T14696]  do_syscall_64+0xfa/0x3b0
[  228.557208][T14696]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.557216][T14696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.557223][T14696]  ? exc_page_fault+0x9f/0xf0
[  228.557231][T14696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.557238][T14696] RIP: 0033:0x7f61a218ec29
[  228.557246][T14696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.557252][T14696] RSP: 002b:00007f61a3049038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  228.557260][T14696] RAX: ffffffffffffffda RBX: 00007f61a23d6090 RCX: 00007f61a218ec29
[  228.557266][T14696] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  228.557270][T14696] RBP: 00007f61a2211e41 R08: 0000000000000000 R09: 0000000000000000
[  228.557275][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.557279][T14696] R13: 00007f61a23d6128 R14: 00007f61a23d6090 R15: 00007ffd239b1c68
[  228.557291][T14696]  </TASK>
[  229.251756][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2514'.
[  229.254770][T14735] nbd: must specify at least one socket
[  229.440162][T14760] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  229.443708][T14759] IPVS: stopping backup sync thread 14760 ...
[  229.448098][T14762] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  229.634170][T14773] bridge_slave_0: left allmulticast mode
[  229.636375][T14773] bridge_slave_0: left promiscuous mode
[  229.639000][T14773] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.643665][T14773] bridge_slave_1: left allmulticast mode
[  229.646003][T14773] bridge_slave_1: left promiscuous mode
[  229.650294][T14773] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.656801][T14773] bond0: (slave bond_slave_0): Releasing backup interface
[  229.662656][T14773] bond0: (slave bond_slave_1): Releasing backup interface
[  229.666968][T14773] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.670708][T14773] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.956849][T14795] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  229.960426][T14794] IPVS: stopping backup sync thread 14795 ...
[  230.034705][T14798] __nla_validate_parse: 2 callbacks suppressed
[  230.034715][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'.
[  230.151812][T14802] IPVS: persistence engine module ip_vs_pe_ not found
[  230.216131][T14813] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2534'.
[  230.384270][T14816] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  230.387108][T14815] IPVS: stopping backup sync thread 14816 ...
[  230.474805][T14819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2536'.
[  230.612537][T14821] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2535'.
[  230.786387][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'.
[  230.790997][T14825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2537'.
[  230.794028][T14825] netem: change failed
[  230.928624][T14828] block nbd1: server does not support multiple connections per device.
[  230.937210][T14828] block nbd1: shutting down sockets
[  230.985548][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  230.990314][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  230.994858][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.008180][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.023516][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.033572][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.040289][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.050446][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.054299][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.067502][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.071569][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.075341][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.079943][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.083554][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.088146][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.091991][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.095692][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.110430][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.113216][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.116252][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.121117][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.124089][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.126870][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.130234][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.133153][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.138274][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.144213][T14860] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2550'.
[  231.153110][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.156630][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.161070][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.164096][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.169772][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'.
[  231.177831][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'.
[  231.194358][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.206799][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.210474][T14868] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2553'.
[  231.214896][T14848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.269081][T14875] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  231.274494][T14875] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  231.402800][T14894] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0
[  231.807848][T14933] IPVS: persistence engine module ip_vs_pe_ not found
[  232.233855][T14952] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.400728][T14968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.580517][T14986] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  232.583334][T14986] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  233.444717][T15003] 8021q: VLANs not supported on vxcan1
[  233.628479][T15024] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  233.631743][T15024] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  233.852545][T15038] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.803262][T15109] netlink: 'syz.3.2632': attribute type 3 has an invalid length.
[  234.834921][T15112] netlink: 'syz.1.2634': attribute type 3 has an invalid length.
[  235.073680][T15132] __nla_validate_parse: 17 callbacks suppressed
[  235.073690][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'.
[  235.080020][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'.
[  235.760613][T15150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.791390][T15149] tipc: Resetting bearer <eth:syzkaller0>
[  236.724781][T15149] tipc: Disabling bearer <eth:syzkaller0>
[  236.765031][T15157] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2646'.
[  236.973731][T15182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.984014][T15180] tipc: Resetting bearer <eth:syzkaller0>
[  236.999625][T15180] tipc: Disabling bearer <eth:syzkaller0>
[  237.049888][T15187] IPVS: Scheduler module ip_vs_sip not found
[  237.054948][T15185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.096841][T15184] tipc: Resetting bearer <eth:syzkaller0>
[  238.003645][T15184] tipc: Disabling bearer <eth:syzkaller0>
[  238.186661][T15212] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  238.227053][T15212] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  238.276538][T15223] IPVS: Scheduler module ip_vs_sip not found
[  238.280825][T15221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.312559][T15220] tipc: Resetting bearer <eth:syzkaller0>
[  239.230393][T15220] tipc: Disabling bearer <eth:syzkaller0>
[  239.281418][T15230] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2671'.
[  239.340709][T15230] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2671'.
[  239.463420][T15242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.541516][T15241] tipc: Resetting bearer <eth:syzkaller0>
[  239.567955][T15241] tipc: Disabling bearer <eth:syzkaller0>
[  239.749059][T15253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.770649][T15252] tipc: Resetting bearer <eth:syzkaller0>
[  240.003724][T15271] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2683'.
[  240.004413][T15274] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2683'.
[  240.720597][T15252] tipc: Disabling bearer <eth:syzkaller0>
[  240.959746][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'.
[  241.006864][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2695'.
[  241.080577][T15314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2698'.
[  241.122617][T15317] IPVS: stopping backup sync thread 14762 ...
[  241.129392][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2699'.
[  241.241763][T15324] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2702'.
[  241.248122][T15324] batadv1: entered promiscuous mode
[  241.250046][T15324] batadv1: entered allmulticast mode
[  241.363668][T15330] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2704'.
[  241.444174][T15338] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  241.446994][T15337] IPVS: stopping backup sync thread 15338 ...
[  241.534618][T15344] netlink: 'syz.0.2709': attribute type 1 has an invalid length.
[  241.539244][T15344] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2709'.
[  242.211358][T15361] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2712'.
[  242.214587][T15361] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2712'.
[  242.219648][T15361] netlink: 'syz.3.2712': attribute type 5 has an invalid length.
[  242.222574][T15361] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2712'.
[  242.569415][T15392] IPVS: set_ctl: invalid protocol: 135 172.30.0.1:20001
[  242.879892][T15416] netlink: 'syz.1.2723': attribute type 282 has an invalid length.
[  243.180014][T15446] block nbd1: server does not support multiple connections per device.
[  243.187521][T15446] block nbd1: shutting down sockets
[  243.437397][T15467] block nbd1: server does not support multiple connections per device.
[  243.440885][T15467] block nbd1: shutting down sockets
[  243.466527][T15471] netlink: 'syz.1.2733': attribute type 1 has an invalid length.
[  243.469250][T15472] xt_l2tp: v2 sid > 0xffff: 1114112
[  243.504534][T15475] netlink: 'syz.3.2739': attribute type 1 has an invalid length.
[  243.508788][T15475] netlink: 'syz.3.2739': attribute type 2 has an invalid length.
[  243.511574][T15475] netlink: 'syz.3.2739': attribute type 1 has an invalid length.
[  243.718927][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  243.851040][T15488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  244.268826][T15514] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  244.275763][T15514] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  244.316207][T15517] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  244.320033][T15516] IPVS: stopping backup sync thread 15517 ...
[  244.651937][T15531] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  244.656466][T15530] IPVS: stopping backup sync thread 15531 ...
[  244.928864][T15547] block nbd1: server does not support multiple connections per device.
[  244.932374][T15547] block nbd1: shutting down sockets
[  244.999832][T15551] block nbd1: server does not support multiple connections per device.
[  245.002914][T15551] block nbd1: shutting down sockets
[  245.067223][T15559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.135794][T15567] netlink: 'syz.3.2767': attribute type 7 has an invalid length.
[  245.141141][T15558] tipc: Resetting bearer <eth:syzkaller0>
[  246.004906][T15558] tipc: Disabling bearer <eth:syzkaller0>
[  246.408044][T15599] tun5: tun_chr_ioctl cmd 1074025675
[  246.410301][T15599] tun5: persist enabled
[  246.412266][T15599] tun5: tun_chr_ioctl cmd 1074025675
[  246.414666][T15599] tun5: persist enabled
[  246.416905][T15599] __nla_validate_parse: 17 callbacks suppressed
[  246.421496][T15599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2775'.
[  246.792949][T15608] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2779'.
[  246.932088][T15615] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  246.935856][T15615] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  247.109000][T15617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2782'.
[  247.334198][T15626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.340587][T15625] tipc: Resetting bearer <eth:syzkaller0>
[  247.355788][T15625] tipc: Disabling bearer <eth:syzkaller0>
[  247.435701][T15628] netlink: 201916 bytes leftover after parsing attributes in process `syz.3.2786'.
[  247.475720][T15633] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  247.475736][T15632] IPVS: stopping backup sync thread 15633 ...
[  247.841766][T15656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.848201][T15655] tipc: Resetting bearer <eth:syzkaller0>
[  247.862277][T15655] tipc: Disabling bearer <eth:syzkaller0>
[  247.920741][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'.
[  248.225072][T15679] IPVS: Error connecting to the multicast addr
[  248.230118][T15677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.280334][T15676] tipc: Resetting bearer <eth:syzkaller0>
[  248.430129][T15689] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2803'.
[  249.280706][T15676] tipc: Disabling bearer <eth:syzkaller0>
[  249.429134][T15709] IPv6: sit2: Disabled Multicast RS
[  249.487174][T15701] block nbd1: server does not support multiple connections per device.
[  249.490300][T15701] block nbd1: shutting down sockets
[  249.495458][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'.
[  249.505235][T15715] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2812'.
[  249.522689][T15713] IPVS: persistence engine module ip_vs_pe_ not found
[  249.531308][T15713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2811'.
[  249.574071][T15723] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2814'.
[  249.961519][T15764] IPVS: Scheduler module ip_vs_sip not found
[  250.255565][T15787] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.291950][T15792] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  250.295439][T15791] IPVS: stopping backup sync thread 15792 ...
[  250.406382][T15798] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  250.413350][T15798] CPU: 0 UID: 0 PID: 15798 Comm: syz.1.2840 Not tainted syzkaller #0 PREEMPT(full) 
[  250.413392][T15798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.413399][T15798] Call Trace:
[  250.413405][T15798]  <TASK>
[  250.413409][T15798]  dump_stack_lvl+0x189/0x250
[  250.413439][T15798]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.413456][T15798]  ? __pfx__printk+0x10/0x10
[  250.413477][T15798]  ? kernfs_path_from_node+0x2f/0x290
[  250.413491][T15798]  ? kernfs_path_from_node+0x250/0x290
[  250.413501][T15798]  ? kernfs_path_from_node+0x2f/0x290
[  250.413518][T15798]  sysfs_warn_dup+0x8e/0xa0
[  250.413531][T15798]  sysfs_do_create_link_sd+0xc0/0x110
[  250.413549][T15798]  device_add_class_symlinks+0x1cf/0x240
[  250.413566][T15798]  device_add+0x475/0xb50
[  250.413578][T15798]  wiphy_register+0x1ba6/0x28d0
[  250.413595][T15798]  ? __pfx_wiphy_register+0x10/0x10
[  250.413602][T15798]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  250.413616][T15798]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  250.413628][T15798]  ieee80211_register_hw+0x3484/0x4100
[  250.413644][T15798]  ? ieee80211_register_hw+0x13f1/0x4100
[  250.413658][T15798]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  250.413672][T15798]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  250.413688][T15798]  ? __hrtimer_setup+0x187/0x210
[  250.413695][T15798]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  250.413705][T15798]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  250.413728][T15798]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  250.413738][T15798]  ? trace_kmalloc+0x1f/0xd0
[  250.413747][T15798]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  250.413758][T15798]  ? kstrndup+0xbf/0x160
[  250.413772][T15798]  hwsim_new_radio_nl+0xea4/0x1b10
[  250.413785][T15798]  ? __pfx___nla_validate_parse+0x10/0x10
[  250.413800][T15798]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  250.413818][T15798]  ? __nla_parse+0x40/0x60
[  250.413828][T15798]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  250.413842][T15798]  genl_family_rcv_msg_doit+0x215/0x300
[  250.413856][T15798]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  250.413872][T15798]  ? bpf_lsm_capable+0x9/0x20
[  250.413882][T15798]  ? security_capable+0x7e/0x2e0
[  250.413896][T15798]  genl_rcv_msg+0x60e/0x790
[  250.413909][T15798]  ? __pfx_genl_rcv_msg+0x10/0x10
[  250.413918][T15798]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  250.413936][T15798]  netlink_rcv_skb+0x208/0x470
[  250.413942][T15798]  ? __lock_acquire+0xab9/0xd20
[  250.413954][T15798]  ? __pfx_genl_rcv_msg+0x10/0x10
[  250.413965][T15798]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  250.413981][T15798]  ? down_read+0x1ad/0x2e0
[  250.413991][T15798]  genl_rcv+0x28/0x40
[  250.414000][T15798]  netlink_unicast+0x82f/0x9e0
[  250.414015][T15798]  ? __pfx_netlink_unicast+0x10/0x10
[  250.414028][T15798]  ? netlink_sendmsg+0x642/0xb30
[  250.414035][T15798]  ? skb_put+0x11b/0x210
[  250.414045][T15798]  netlink_sendmsg+0x805/0xb30
[  250.414058][T15798]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.414067][T15798]  ? aa_sock_msg_perm+0xf1/0x1d0
[  250.414076][T15798]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  250.414085][T15798]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.414093][T15798]  __sock_sendmsg+0x21c/0x270
[  250.414106][T15798]  ____sys_sendmsg+0x505/0x830
[  250.414118][T15798]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.414132][T15798]  ? import_iovec+0x74/0xa0
[  250.414143][T15798]  ___sys_sendmsg+0x21f/0x2a0
[  250.414154][T15798]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.414179][T15798]  ? __fget_files+0x2a/0x420
[  250.414185][T15798]  ? __fget_files+0x3a0/0x420
[  250.414200][T15798]  __x64_sys_sendmsg+0x19b/0x260
[  250.414217][T15798]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  250.414238][T15798]  ? rcu_is_watching+0x15/0xb0
[  250.414254][T15798]  ? do_syscall_64+0xbe/0x3b0
[  250.414270][T15798]  do_syscall_64+0xfa/0x3b0
[  250.414283][T15798]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.414295][T15798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.414308][T15798]  ? exc_page_fault+0x9f/0xf0
[  250.414321][T15798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.414334][T15798] RIP: 0033:0x7f701e78ec29
[  250.414347][T15798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.414387][T15798] RSP: 002b:00007f701c9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.414402][T15798] RAX: ffffffffffffffda RBX: 00007f701e9d6090 RCX: 00007f701e78ec29
[  250.414411][T15798] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  250.414427][T15798] RBP: 00007f701e811e41 R08: 0000000000000000 R09: 0000000000000000
[  250.414434][T15798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.414442][T15798] R13: 00007f701e9d6128 R14: 00007f701e9d6090 R15: 00007ffe3f737db8
[  250.414464][T15798]  </TASK>
[  251.205898][T15805] netlink: 'syz.1.2844': attribute type 4 has an invalid length.
[  251.303406][T15810] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.309728][T15812] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  251.309855][T15811] IPVS: stopping backup sync thread 15812 ...
[  251.510774][T15820] __nla_validate_parse: 3 callbacks suppressed
[  251.510789][T15820] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2847'.
[  252.732242][T15870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2860'.
[  252.795321][T15874] syz.0.2862: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  252.804465][T15874] CPU: 1 UID: 0 PID: 15874 Comm: syz.0.2862 Not tainted syzkaller #0 PREEMPT(full) 
[  252.804485][T15874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.804493][T15874] Call Trace:
[  252.804499][T15874]  <TASK>
[  252.804505][T15874]  dump_stack_lvl+0x189/0x250
[  252.804526][T15874]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  252.804547][T15874]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.804562][T15874]  ? __pfx__printk+0x10/0x10
[  252.804581][T15874]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  252.804596][T15874]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  252.804636][T15874]  warn_alloc+0x214/0x310
[  252.804658][T15874]  ? stack_depot_save_flags+0x40/0x860
[  252.804679][T15874]  ? __pfx_warn_alloc+0x10/0x10
[  252.804698][T15874]  ? kasan_save_track+0x4f/0x80
[  252.804715][T15874]  ? xskq_create+0x56/0x170
[  252.804726][T15874]  ? xsk_init_queue+0xb0/0x110
[  252.804736][T15874]  ? xsk_setsockopt+0x4dc/0x8d0
[  252.804754][T15874]  ? do_sock_setsockopt+0x17c/0x1b0
[  252.804769][T15874]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  252.804782][T15874]  ? do_syscall_64+0xfa/0x3b0
[  252.804795][T15874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.804813][T15874]  __vmalloc_node_range_noprof+0x125/0x12f0
[  252.804853][T15874]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  252.804878][T15874]  ? __kasan_kmalloc+0x93/0xb0
[  252.804898][T15874]  vmalloc_user_noprof+0xad/0xf0
[  252.804916][T15874]  ? xskq_create+0xbf/0x170
[  252.804929][T15874]  xskq_create+0xbf/0x170
[  252.804943][T15874]  xsk_init_queue+0xb0/0x110
[  252.804956][T15874]  xsk_setsockopt+0x4dc/0x8d0
[  252.804977][T15874]  ? __pfx_xsk_setsockopt+0x10/0x10
[  252.804996][T15874]  ? __pfx_aa_sk_perm+0x10/0x10
[  252.805018][T15874]  ? aa_sock_opt_perm+0xff/0x1b0
[  252.805033][T15874]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  252.805047][T15874]  ? __pfx_xsk_setsockopt+0x10/0x10
[  252.805066][T15874]  do_sock_setsockopt+0x17c/0x1b0
[  252.805084][T15874]  __x64_sys_setsockopt+0x13f/0x1b0
[  252.805103][T15874]  do_syscall_64+0xfa/0x3b0
[  252.805116][T15874]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.805129][T15874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.805142][T15874]  ? exc_page_fault+0x9f/0xf0
[  252.805157][T15874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.805170][T15874] RIP: 0033:0x7f61a218ec29
[  252.805182][T15874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.805192][T15874] RSP: 002b:00007f61a306a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  252.805207][T15874] RAX: ffffffffffffffda RBX: 00007f61a23d5fa0 RCX: 00007f61a218ec29
[  252.805216][T15874] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  252.805223][T15874] RBP: 00007f61a2211e41 R08: 0000000000000004 R09: 0000000000000000
[  252.805230][T15874] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.805238][T15874] R13: 00007f61a23d6038 R14: 00007f61a23d5fa0 R15: 00007ffd239b1c68
[  252.805260][T15874]  </TASK>
[  252.917571][T15874] Mem-Info:
[  252.918702][T15874] active_anon:11353 inactive_anon:0 isolated_anon:0
[  252.918702][T15874]  active_file:1809 inactive_file:38319 isolated_file:0
[  252.918702][T15874]  unevictable:1768 dirty:51 writeback:0
[  252.918702][T15874]  slab_reclaimable:14267 slab_unreclaimable:112377
[  252.918702][T15874]  mapped:18349 shmem:8746 pagetables:896
[  252.918702][T15874]  sec_pagetables:0 bounce:0
[  252.918702][T15874]  kernel_misc_reclaimable:0
[  252.918702][T15874]  free:226695 free_pcp:18931 free_cma:0
[  252.934009][T15874] Node 0 active_anon:28388kB inactive_anon:0kB active_file:4508kB inactive_file:136052kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47908kB dirty:52kB writeback:0kB shmem:21436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7056kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  252.944539][T15874] Node 1 active_anon:10632kB inactive_anon:0kB active_file:2728kB inactive_file:17224kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25488kB dirty:152kB writeback:0kB shmem:7224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6016kB pagetables:1504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  252.955745][T15874] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  252.966009][T15874] lowmem_reserve[]: 0 811 811 811 811
[  252.968578][T15874] Node 0 DMA32 free:101700kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23696kB inactive_anon:0kB active_file:4508kB inactive_file:136052kB unevictable:3536kB writepending:52kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:53200kB local_pcp:16032kB free_cma:0kB
[  252.979655][T15874] lowmem_reserve[]: 0 0 0 0 0
[  252.981380][T15874] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  252.992373][T15874] lowmem_reserve[]: 0 0 854 854 854
[  252.994384][T15874] Node 1 Normal free:339292kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8320kB inactive_anon:0kB active_file:2728kB inactive_file:17224kB unevictable:3536kB writepending:152kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:28068kB local_pcp:11024kB free_cma:0kB
[  253.006830][T15874] lowmem_reserve[]: 0 0 0 0 0
[  253.008833][T15874] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  253.014005][T15874] Node 0 DMA32: 551*4kB (UM) 461*8kB (UME) 238*16kB (UME) 180*32kB (UME) 95*64kB (UME) 19*128kB (UME) 5*256kB (UM) 1*512kB (U) 8*1024kB (UM) 3*2048kB (M) 17*4096kB (M) = 109732kB
[  253.020998][T15874] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  253.027355][T15874] Node 1 Normal: 687*4kB (ME) 790*8kB (UM) 263*16kB (UM) 88*32kB (UM) 138*64kB (UM) 34*128kB (UM) 39*256kB (UME) 14*512kB (M) 4*1024kB (UM) 3*2048kB (ME) 69*4096kB (M) = 339292kB
[  253.034098][T15874] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  253.037845][T15874] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  253.044265][T15874] 42618 total pagecache pages
[  253.046191][T15874] 0 pages in swap cache
[  253.047862][T15874] Free swap  = 124996kB
[  253.049645][T15874] Total swap = 124996kB
[  253.052417][T15874] 786301 pages RAM
[  253.054033][T15874] 0 pages HighMem/MovableOnly
[  253.056091][T15874] 241346 pages reserved
[  253.057813][T15874] 0 pages cma reserved
[  253.200767][T15890] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2866'.
[  254.348725][T15931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2872'.
[  254.476652][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'.
[  254.483066][T15939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2880'.
[  254.514722][T15943] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  254.519349][T15942] IPVS: stopping backup sync thread 15943 ...
[  254.684377][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  255.562658][T15979] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2890'.
[  255.592924][T15981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2891'.
[  255.633216][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'.
[  255.657197][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'.
[  255.887242][T15992] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  256.717119][T16017] __nla_validate_parse: 2 callbacks suppressed
[  256.717133][T16017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2901'.
[  256.804512][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2903'.
[  256.811873][T16028] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2906'.
[  256.844820][T16030] IPv6: NLM_F_CREATE should be specified when creating new route
[  256.853690][T16026] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  256.900848][T16036] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2909'.
[  256.945970][T16036] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2909'.
[  257.039934][T16047] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2912'.
[  257.782919][T16062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.791580][T16061] tipc: Resetting bearer <eth:syzkaller0>
[  257.805916][T16061] tipc: Disabling bearer <eth:syzkaller0>
[  258.041425][T16069] IPVS: persistence engine module ip_vs_pe_ not found
[  258.046163][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2921'.
[  258.061061][T16075] tun3: tun_chr_ioctl cmd 1074025675
[  258.063327][T16075] tun3: persist enabled
[  258.065060][T16075] tun3: tun_chr_ioctl cmd 1074025675
[  258.067130][T16075] tun3: persist enabled
[  258.071527][T16076] IPVS: stopping backup sync thread 16077 ...
[  258.133174][T16081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.141946][T16080] tipc: Resetting bearer <eth:syzkaller0>
[  258.162827][T16080] tipc: Disabling bearer <eth:syzkaller0>
[  258.282507][T16090] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  258.285064][T16091] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  258.507067][T16108] IPv6: NLM_F_CREATE should be specified when creating new route
[  258.583460][T16119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.588193][T16117] tipc: Resetting bearer <eth:syzkaller0>
[  258.602192][T16117] tipc: Disabling bearer <eth:syzkaller0>
[  258.679761][T16123] sctp: [Deprecated]: syz.3.2934 (pid 16123) Use of int in max_burst socket option deprecated.
[  258.679761][T16123] Use struct sctp_assoc_value instead
[  258.792119][T16137] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  258.796355][T16136] IPVS: stopping backup sync thread 16137 ...
[  260.316217][T16216] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2967'.
[  260.447776][T16218] IPVS: Error connecting to the multicast addr
[  260.513317][T16225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2970'.
[  260.564180][T16233] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  260.568521][T16231] IPVS: stopping backup sync thread 16233 ...
[  260.633903][T16240] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2974'.
[  260.640127][T16240] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  262.007866][T16279] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  262.012497][T16278] IPVS: stopping backup sync thread 16279 ...
[  262.020707][T16278] __nla_validate_parse: 2 callbacks suppressed
[  262.020721][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2985'.
[  262.445483][T16282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2986'.
[  262.503181][T16287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2988'.
[  262.566110][T16291] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2990'.
[  262.611251][T16291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2990'.
[  262.759809][T16302] IPVS: persistence engine module ip_vs_pe_ not found
[  263.225939][T16331] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  263.229467][T16331] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  263.301054][T16333] netlink: 'syz.0.3006': attribute type 13 has an invalid length.
[  263.304365][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3006'.
[  263.391700][T16335] IPVS: persistence engine module ip_vs_pe_ not found
[  263.532024][T16348] netlink: 'syz.1.3009': attribute type 10 has an invalid length.
[  263.549286][T16348] team0: Port device 0! added
[  264.131005][T16387] netlink: 'syz.1.3019': attribute type 4 has an invalid length.
[  264.257164][T16392] block nbd1: server does not support multiple connections per device.
[  264.260827][T16392] block nbd1: shutting down sockets
[  264.267787][T16393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3022'.
[  264.336353][T16398] IPv6: NLM_F_CREATE should be specified when creating new route
[  264.425039][T16403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3026'.
[  264.435418][T16403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3026'.
[  265.044026][T16422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3031'.
[  265.332636][T16445] syz_tun (unregistering): left allmulticast mode
[  265.889060][T16472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  266.296319][T16490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  267.833769][T16531] __nla_validate_parse: 5 callbacks suppressed
[  267.833784][T16531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3065'.
[  267.877270][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3066'.
[  267.975950][T16537] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.983351][T16536] tipc: Resetting bearer <eth:syzkaller0>
[  268.000756][T16536] tipc: Disabling bearer <eth:syzkaller0>
[  268.358991][T16551] IPVS: Scheduler module ip_vs_sip not found
[  268.365536][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3072'.
[  269.518872][T16579] block nbd1: server does not support multiple connections per device.
[  269.522309][T16579] block nbd1: shutting down sockets
[  269.612452][T16589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3083'.
[  269.700757][T16593] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.789993][T16603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.885879][T16608] tun6: tun_chr_ioctl cmd 1074025675
[  269.892307][T16608] tun6: persist enabled
[  269.893979][T16608] tun6: tun_chr_ioctl cmd 1074025675
[  269.896212][T16608] tun6: persist enabled
[  269.998054][T16610] IPVS: Scheduler module ip_vs_sip not found
[  270.049646][T16615] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.057402][T16614] tipc: Resetting bearer <eth:syzkaller0>
[  270.071068][T16617] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3093'.
[  270.088812][T16614] tipc: Disabling bearer <eth:syzkaller0>
[  270.129105][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3093'.
[  270.172371][T16628] macvtap1: entered promiscuous mode
[  270.174514][T16628] macvtap1: entered allmulticast mode
[  270.176805][T16628] bond_slave_0: entered promiscuous mode
[  270.179213][T16628] bond_slave_1: entered promiscuous mode
[  270.181666][T16628] bond0: entered allmulticast mode
[  270.183810][T16628] bond_slave_0: entered allmulticast mode
[  270.186430][T16628] bond_slave_1: entered allmulticast mode
[  270.189657][T16628] bond0: entered promiscuous mode
[  270.194203][T16628] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  270.197652][T16628] team0: Device macvtap1 failed to register rx_handler
[  270.201711][T16628] bond0: left allmulticast mode
[  270.203969][T16628] bond_slave_0: left allmulticast mode
[  270.206294][T16628] bond_slave_1: left allmulticast mode
[  270.208997][T16628] bond0: left promiscuous mode
[  270.214640][T16628] bond_slave_0: left promiscuous mode
[  270.217222][T16628] bond_slave_1: left promiscuous mode
[  270.224933][T16632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3097'.
[  270.229408][T16632] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3097'.
[  270.353306][T16647] netlink: 'syz.3.3102': attribute type 1 has an invalid length.
[  270.353754][T16648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3101'.
[  270.366574][T16647] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0
[  270.376425][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.383929][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.397161][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.433060][T16653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.436253][T16653] syzkaller0: entered promiscuous mode
[  270.439719][T16653] syzkaller0: entered allmulticast mode
[  270.445844][T16653] tipc: Resetting bearer <eth:syzkaller0>
[  270.452796][T16652] tipc: Resetting bearer <eth:syzkaller0>
[  270.464329][T16652] tipc: Disabling bearer <eth:syzkaller0>
[  270.491969][T16659] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  270.508199][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.561165][T16667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3110'.
[  270.662251][T16682] netlink: 'syz.1.3114': attribute type 4 has an invalid length.
[  270.666254][T16683] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  270.670996][T16683] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  271.477175][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  271.627418][T16731] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  271.631895][T16731] CPU: 1 UID: 0 PID: 16731 Comm: syz.0.3128 Not tainted syzkaller #0 PREEMPT(full) 
[  271.631907][T16731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.631913][T16731] Call Trace:
[  271.631917][T16731]  <TASK>
[  271.631920][T16731]  dump_stack_lvl+0x189/0x250
[  271.631936][T16731]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.631945][T16731]  ? __pfx__printk+0x10/0x10
[  271.631959][T16731]  ? kernfs_path_from_node+0x2f/0x290
[  271.631968][T16731]  ? kernfs_path_from_node+0x250/0x290
[  271.631975][T16731]  ? kernfs_path_from_node+0x2f/0x290
[  271.631985][T16731]  sysfs_warn_dup+0x8e/0xa0
[  271.631994][T16731]  sysfs_do_create_link_sd+0xc0/0x110
[  271.632003][T16731]  device_add_class_symlinks+0x1cf/0x240
[  271.632016][T16731]  device_add+0x475/0xb50
[  271.632027][T16731]  wiphy_register+0x1ba6/0x28d0
[  271.632060][T16731]  ? __pfx_wiphy_register+0x10/0x10
[  271.632070][T16731]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  271.632083][T16731]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  271.632121][T16731]  ieee80211_register_hw+0x3484/0x4100
[  271.632144][T16731]  ? ieee80211_register_hw+0x13f1/0x4100
[  271.632158][T16731]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  271.632170][T16731]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  271.632191][T16731]  ? __hrtimer_setup+0x187/0x210
[  271.632199][T16731]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  271.632209][T16731]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  271.632233][T16731]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  271.632244][T16731]  ? trace_kmalloc+0x1f/0xd0
[  271.632253][T16731]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  271.632264][T16731]  ? kstrndup+0xbf/0x160
[  271.632277][T16731]  hwsim_new_radio_nl+0xea4/0x1b10
[  271.632289][T16731]  ? __pfx___nla_validate_parse+0x10/0x10
[  271.632304][T16731]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  271.632321][T16731]  ? __nla_parse+0x40/0x60
[  271.632330][T16731]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  271.632345][T16731]  genl_family_rcv_msg_doit+0x215/0x300
[  271.632358][T16731]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  271.632374][T16731]  ? bpf_lsm_capable+0x9/0x20
[  271.632385][T16731]  ? security_capable+0x7e/0x2e0
[  271.632400][T16731]  genl_rcv_msg+0x60e/0x790
[  271.632413][T16731]  ? __pfx_genl_rcv_msg+0x10/0x10
[  271.632422][T16731]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  271.632441][T16731]  netlink_rcv_skb+0x208/0x470
[  271.632448][T16731]  ? __lock_acquire+0xab9/0xd20
[  271.632459][T16731]  ? __pfx_genl_rcv_msg+0x10/0x10
[  271.632470][T16731]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  271.632486][T16731]  ? down_read+0x1ad/0x2e0
[  271.632496][T16731]  genl_rcv+0x28/0x40
[  271.632505][T16731]  netlink_unicast+0x82f/0x9e0
[  271.632520][T16731]  ? __pfx_netlink_unicast+0x10/0x10
[  271.632533][T16731]  ? netlink_sendmsg+0x642/0xb30
[  271.632540][T16731]  ? skb_put+0x11b/0x210
[  271.632550][T16731]  netlink_sendmsg+0x805/0xb30
[  271.632562][T16731]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.632572][T16731]  ? aa_sock_msg_perm+0xf1/0x1d0
[  271.632580][T16731]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  271.632589][T16731]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.632598][T16731]  __sock_sendmsg+0x21c/0x270
[  271.632612][T16731]  ____sys_sendmsg+0x505/0x830
[  271.632624][T16731]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.632637][T16731]  ? import_iovec+0x74/0xa0
[  271.632649][T16731]  ___sys_sendmsg+0x21f/0x2a0
[  271.632660][T16731]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.632686][T16731]  ? __fget_files+0x2a/0x420
[  271.632692][T16731]  ? __fget_files+0x3a0/0x420
[  271.632703][T16731]  __x64_sys_sendmsg+0x19b/0x260
[  271.632714][T16731]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  271.632732][T16731]  ? do_syscall_64+0xbe/0x3b0
[  271.632742][T16731]  do_syscall_64+0xfa/0x3b0
[  271.632750][T16731]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.632757][T16731]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.632765][T16731]  ? exc_page_fault+0x9f/0xf0
[  271.632773][T16731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.632780][T16731] RIP: 0033:0x7f61a218ec29
[  271.632791][T16731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.632801][T16731] RSP: 002b:00007f61a306a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.632813][T16731] RAX: ffffffffffffffda RBX: 00007f61a23d5fa0 RCX: 00007f61a218ec29
[  271.632822][T16731] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  271.632829][T16731] RBP: 00007f61a2211e41 R08: 0000000000000000 R09: 0000000000000000
[  271.632836][T16731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.632843][T16731] R13: 00007f61a23d6038 R14: 00007f61a23d5fa0 R15: 00007ffd239b1c68
[  271.632864][T16731]  </TASK>
[  271.916437][T16741] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20003
[  272.067051][T16753] IPVS: stopping backup sync thread 16659 ...
[  272.159925][T16761] netlink: 'syz.1.3141': attribute type 19 has an invalid length.
[  272.164015][T16761] netlink: 'syz.1.3141': attribute type 19 has an invalid length.
[  272.186478][T16765] syzkaller0: entered promiscuous mode
[  272.188407][T16765] syzkaller0: entered allmulticast mode
[  272.204987][T16768] IPVS: stopping backup sync thread 16770 ...
[  272.205268][T16770] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  272.313387][T16778] netlink: 'syz.0.3148': attribute type 16 has an invalid length.
[  272.722838][T16803] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  272.722894][T16802] IPVS: stopping backup sync thread 16803 ...
[  273.020742][T16816] __nla_validate_parse: 22 callbacks suppressed
[  273.020754][T16816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3160'.
[  273.054154][T16820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3161'.
[  273.096811][T16823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3162'.
[  273.097630][T16824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3162'.
[  273.110643][T16823] bond0: entered promiscuous mode
[  273.114439][T16823] bond0: left promiscuous mode
[  273.127204][T16824] bond0: entered promiscuous mode
[  273.130236][T16824] bond0: left promiscuous mode
[  273.256054][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3163'.
[  273.508708][T16842] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3167'.
[  273.544117][T16845] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3168'.
[  273.669003][T16852] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3170'.
[  273.949247][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'.
[  273.998424][T16871] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  274.003682][T16868] IPVS: stopping backup sync thread 16871 ...
[  274.221457][T16877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3179'.
[  274.403688][T16896] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  274.407458][T16895] IPVS: stopping backup sync thread 16896 ...
[  274.437056][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  274.715109][T16905] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  274.722360][T16905] team0: Device ipvlan2 is already an upper device of the team interface
[  274.846230][T16915] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  274.846292][T16916] IPVS: stopping backup sync thread 16915 ...
[  275.266740][T16945] netlink: 'syz.0.3201': attribute type 1 has an invalid length.
[  275.694400][T16957] tun4: tun_chr_ioctl cmd 1074025675
[  275.696339][T16957] tun4: persist enabled
[  275.699134][T16958] tun4: tun_chr_ioctl cmd 1074025675
[  275.701040][T16958] tun4: persist enabled
[  276.986865][T17012] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  276.991225][T17011] IPVS: stopping backup sync thread 17012 ...
[  277.342765][T17023] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  277.342829][T17022] IPVS: stopping backup sync thread 17023 ...
[  277.599938][T17042] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  277.602765][T17042] team0: Device ipvlan2 is already an upper device of the team interface
[  277.789851][T17074] netlink: 'syz.0.3239': attribute type 1 has an invalid length.
[  278.155786][T17094] __nla_validate_parse: 18 callbacks suppressed
[  278.155801][T17094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'.
[  278.681670][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'.
[  278.792717][T17119] openvswitch: netlink: Key type 29 is not supported
[  279.622559][T17158] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  279.626327][T17157] IPVS: stopping backup sync thread 17158 ...
[  279.757932][T17163] block nbd1: server does not support multiple connections per device.
[  279.761183][T17163] block nbd1: shutting down sockets
[  279.820804][T17167] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3256'.
[  279.930508][T17179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.949959][T17178] tipc: Resetting bearer <eth:syzkaller0>
[  279.959643][T17183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3264'.
[  279.964070][T17178] tipc: Disabling bearer <eth:syzkaller0>
[  280.036601][T17187] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  280.041169][T17186] IPVS: stopping backup sync thread 17187 ...
[  280.046521][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3265'.
[  280.088279][T17191] netlink: 'syz.0.3267': attribute type 1 has an invalid length.
[  280.160321][T17194] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3266'.
[  280.750434][T17199] nbd: must specify a size in bytes for the device
[  280.824551][T17201] IPVS: Scheduler module ip_vs_sip not found
[  281.048113][T17211] block nbd1: server does not support multiple connections per device.
[  281.052018][T17211] block nbd1: shutting down sockets
[  281.093695][T17215] IPVS: Scheduler module ip_vs_sip not found
[  281.140826][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'.
[  281.146379][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'.
[  281.157730][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'.
[  281.161962][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'.
[  281.238141][T17227] tun7: tun_chr_ioctl cmd 1074025675
[  281.240582][T17227] tun7: persist enabled
[  281.242632][T17227] tun7: tun_chr_ioctl cmd 1074025675
[  281.245113][T17227] tun7: persist enabled
[  281.603855][T17244] macvtap2: entered promiscuous mode
[  281.606247][T17244] macvtap2: entered allmulticast mode
[  281.609083][T17244] bond0: entered allmulticast mode
[  281.612048][T17244] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  281.616452][T17244] team0: Device macvtap2 failed to register rx_handler
[  281.621541][T17244] bond0: left allmulticast mode
[  281.824942][T17255] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  281.829606][T17254] IPVS: stopping backup sync thread 17255 ...
[  281.923161][T17260] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  282.063288][T17264] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  282.066195][T17264] team0: Device ipvlan2 is already an upper device of the team interface
[  282.275621][T17284] IPVS: persistence engine module ip_vs_pe_ not found
[  282.286057][T17286] lo: entered allmulticast mode
[  282.288867][T17286] lo: left allmulticast mode
[  282.409300][T17296] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  282.414014][T17295] IPVS: stopping backup sync thread 17296 ...
[  282.847058][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  283.104762][T17326] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:64
[  283.309148][T17343] IPVS: Scheduler module ip_vs_sip not found
[  283.474103][T17358] __nla_validate_parse: 9 callbacks suppressed
[  283.474112][T17358] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3316'.
[  283.619547][T17367] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3317'.
[  283.666490][T17367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3317'.
[  283.859725][T17382] block nbd1: server does not support multiple connections per device.
[  283.871002][T17382] block nbd1: shutting down sockets
[  283.882310][T17386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3323'.
[  284.102011][T17411] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3331'.
[  284.232595][T17426] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  284.248561][T17429] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  284.252630][T17428] IPVS: stopping backup sync thread 17429 ...
[  284.325992][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'.
[  284.370294][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'.
[  284.373583][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3341'.
[  284.376756][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3341'.
[  284.800846][T17454] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000
[  285.283983][T17473] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3350'.
[  285.410479][T17478] block nbd1: server does not support multiple connections per device.
[  285.415590][T17478] block nbd1: shutting down sockets
[  285.533155][   T56] block nbd1: Receive control failed (result -11)
[  285.784054][T17507] nbd: nbd1 already in use
[  285.793397][T17507] block nbd1: NBD_DISCONNECT
[  285.795768][T17507] block nbd1: Send disconnect failed -22
[  285.802991][T17507] block nbd1: shutting down sockets
[  285.964432][T17513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.992868][T17512] tipc: Resetting bearer <eth:syzkaller0>
[  285.995849][T17517] IPVS: Scheduler module ip_vs_sip not found
[  286.910266][T17512] tipc: Disabling bearer <eth:syzkaller0>
[  287.169032][T17543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.191808][T17542] tipc: Resetting bearer <eth:syzkaller0>
[  288.205625][T17542] tipc: Disabling bearer <eth:syzkaller0>
[  288.316862][T17578] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  288.318030][T17577] IPVS: stopping backup sync thread 17578 ...
[  288.823539][T17624] __nla_validate_parse: 8 callbacks suppressed
[  288.823550][T17624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3388'.
[  288.830818][T17624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3388'.
[  289.260227][T17647] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  289.352870][T17651] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  289.356383][T17651] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  289.635095][T17656] tun5: tun_chr_ioctl cmd 1074025675
[  289.637851][T17656] tun5: persist enabled
[  289.640073][T17656] tun5: tun_chr_ioctl cmd 1074025675
[  289.642301][T17656] tun5: persist enabled
[  289.700044][T17660] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  289.703559][T17660] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  289.771638][T17665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'.
[  289.782258][T17665] geneve3: entered promiscuous mode
[  289.784518][T17665] geneve3: entered allmulticast mode
[  289.790801][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 33456 - 0
[  289.796527][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 33456 - 0
[  289.801806][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 33456 - 0
[  289.805717][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 33456 - 0
[  289.923490][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3402'.
[  290.752856][T17695] netlink: 'syz.0.3409': attribute type 1 has an invalid length.
[  290.756263][T17695] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3409'.
[  291.059904][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'.
[  291.880908][T17734] netlink: 'syz.0.3419': attribute type 8 has an invalid length.
[  291.884066][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3419'.
[  291.894313][T17734] bond0: entered promiscuous mode
[  291.898529][T17734] bond0: left promiscuous mode
[  291.934158][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3420'.
[  292.188455][T17761] netlink: 'syz.3.3426': attribute type 11 has an invalid length.
[  292.201497][T17765] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  292.277950][T17774] netlink: 'syz.0.3428': attribute type 10 has an invalid length.
[  292.306532][T17774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.307985][T17775] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  292.310968][T17774] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  292.321981][T17773] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  292.326540][T17777] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  292.330549][T17774] netlink: 'syz.0.3428': attribute type 10 has an invalid length.
[  292.333252][T17774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3428'.
[  292.340219][T17774] batadv0: entered promiscuous mode
[  292.342391][T17774] batadv0: entered allmulticast mode
[  292.345546][T17774] bond0: (slave batadv0): Releasing backup interface
[  292.349835][T17774] bridge0: port 1(batadv0) entered blocking state
[  292.352209][T17774] bridge0: port 1(batadv0) entered disabled state
[  292.435965][T17785] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3432'.
[  292.577349][T17732] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  292.581526][T17732] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  293.456659][T17821] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  293.578798][T17834] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  293.631027][T17838] netlink: 'syz.3.3449': attribute type 11 has an invalid length.
[  293.837777][T17856] __nla_validate_parse: 4 callbacks suppressed
[  293.837787][T17856] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3456'.
[  293.848031][T17857] netlink: 'syz.1.3455': attribute type 4 has an invalid length.
[  293.851526][T17857] netlink: 'syz.1.3455': attribute type 4 has an invalid length.
[  293.854721][T17857] netlink: 'syz.1.3455': attribute type 4 has an invalid length.
[  294.752499][T17895] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3468'.
[  295.631090][T17920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3473'.
[  295.657512][T17923] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3474'.
[  295.669585][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3474'.
[  295.677862][T17923] tun6: tun_chr_ioctl cmd 1074025675
[  295.680108][T17923] tun6: persist enabled
[  295.682171][T17923] tun6: tun_chr_ioctl cmd 1074025675
[  295.684510][T17923] tun6: persist enabled
[  295.686655][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3474'.
[  295.754194][T17928] netlink: 'syz.0.3476': attribute type 1 has an invalid length.
[  295.943967][T17947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3481'.
[  296.093703][T17956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'.
[  296.109091][T17957] IPVS: persistence engine module ip_vs_pe_ not found
[  296.192518][T17968] IPVS: stopping backup sync thread 17821 ...
[  296.311446][T17980] netem: change failed
[  296.315649][T17980] macvlan1: entered allmulticast mode
[  296.318717][T17980] veth1_vlan: entered allmulticast mode
[  296.694244][T17990] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  296.696345][T17989] IPVS: stopping backup sync thread 17990 ...
[  296.704086][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3491'.
[  296.710102][T17989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3491'.
[  296.947662][T18003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.994931][T18000] tipc: Resetting bearer <eth:syzkaller0>
[  297.945554][T18012] netlink: 'syz.1.3496': attribute type 1 has an invalid length.
[  297.978376][ T5907] tipc: Node number set to 1609399234
[  298.003346][T18000] tipc: Disabling bearer <eth:syzkaller0>
[  298.068695][T18015] netlink: 'syz.1.3497': attribute type 32 has an invalid length.
[  298.083701][T18015] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  298.419194][T18035] IPVS: stopping backup sync thread 17834 ...
[  298.484709][T18039] IPv6: addrconf: prefix option has invalid lifetime
[  298.968863][T18079] openvswitch: netlink: IP tunnel TTL not specified.
[  299.477152][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  299.591869][T18113] __nla_validate_parse: 9 callbacks suppressed
[  299.591883][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'.
[  300.728113][T18151] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3535'.
[  300.752555][T18148] IPVS: Scheduler module ip_vs_sip not found
[  300.796113][T18160] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3537'.
[  300.865903][T18171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  300.976816][T18180] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3539'.
[  300.981015][T18180] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3539'.
[  301.755378][T18199] netlink: 'syz.0.3548': attribute type 1 has an invalid length.
[  301.759074][T18199] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3548'.
[  301.928446][T18203] IPVS: Scheduler module ip_vs_sip not found
[  302.166180][T18215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3553'.
[  302.205001][T18217] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  302.209855][T18217] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  302.344525][T18220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3555'.
[  302.351991][T18220] netlink: 'syz.3.3555': attribute type 10 has an invalid length.
[  302.355399][T18220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3555'.
[  302.369191][T18220] sctp: [Deprecated]: syz.3.3555 (pid 18220) Use of int in max_burst socket option.
[  302.369191][T18220] Use struct sctp_assoc_value instead
[  302.444405][T18224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3557'.
[  302.886328][T18242] netlink: 'syz.0.3565': attribute type 1 has an invalid length.
[  302.979703][T18245] nbd: must specify a size in bytes for the device
[  303.090856][T18251] tun8: tun_chr_ioctl cmd 1074025675
[  303.093358][T18251] tun8: persist enabled
[  303.095391][T18248] tun8: tun_chr_ioctl cmd 1074025675
[  303.100179][T18248] tun8: persist enabled
[  303.165656][T18254] netlink: 'syz.1.3568': attribute type 1 has an invalid length.
[  303.194706][T18254] 8021q: adding VLAN 0 to HW filter on device bond4
[  303.873043][T18294] IPVS: persistence engine module ip_vs_pe_ not found
[  303.875952][T18294] IPVS: set_ctl: invalid protocol: 45590 172.20.20.170:65532
[  303.916590][T18297] netlink: 'syz.0.3581': attribute type 1 has an invalid length.
[  303.920177][T18297] netlink: 'syz.0.3581': attribute type 2 has an invalid length.
[  303.923663][T18297] netlink: 'syz.0.3581': attribute type 1 has an invalid length.
[  303.927924][T18305] netlink: 'syz.0.3581': attribute type 1 has an invalid length.
[  303.930671][T18305] netlink: 'syz.0.3581': attribute type 1 has an invalid length.
[  303.933994][T18305] netlink: 'syz.0.3581': attribute type 2 has an invalid length.
[  303.940803][T18305] netlink: 'syz.0.3581': attribute type 1 has an invalid length.
[  304.580860][T18345] tun4: tun_chr_ioctl cmd 1074025675
[  304.583328][T18345] tun4: persist enabled
[  304.585550][T18345] tun4: tun_chr_ioctl cmd 1074025675
[  304.588168][T18345] tun4: persist enabled
[  304.831770][T18350] IPVS: persistence engine module ip_vs_pe_ not found
[  304.913791][T18361] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  304.918576][T18360] IPVS: stopping backup sync thread 18361 ...
[  304.957886][T18363] bond0: (slave rose0): Error: Device can not be enslaved while up
[  304.963104][T18369] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  304.964129][T18365] IPVS: stopping backup sync thread 18369 ...
[  304.985291][T18365] __nla_validate_parse: 24 callbacks suppressed
[  304.985341][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3600'.
[  305.054827][T18379] IPVS: stopping backup sync thread 17647 ...
[  305.127505][T18384] netlink: 'syz.1.3605': attribute type 21 has an invalid length.
[  305.130629][T18384] netlink: 'syz.1.3605': attribute type 22 has an invalid length.
[  305.133785][T18384] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3605'.
[  305.137988][T18383] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3605'.
[  305.525819][T18404] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3610'.
[  306.421782][T18418] IPVS: persistence engine module ip_vs_pe_ not found
[  306.554111][T18432] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  306.560946][T18431] IPVS: stopping backup sync thread 18432 ...
[  306.621292][T18437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3619'.
[  306.697306][T18442] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  306.728802][T18449] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  306.732527][T18448] IPVS: stopping backup sync thread 18449 ...
[  306.734254][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3624'.
[  306.741477][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3624'.
[  306.838318][T18460] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3626'.
[  306.848266][T18460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  306.927213][T18466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.931812][T18465] tipc: Resetting bearer <eth:syzkaller0>
[  306.942015][T18465] tipc: Disabling bearer <eth:syzkaller0>
[  307.690424][T18482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3633'.
[  307.760799][T18487] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3636'.
[  308.442599][T18515] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  308.446261][T18515] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  308.556637][T18519] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  308.559363][T18518] IPVS: stopping backup sync thread 18519 ...
[  309.097251][T18542] block nbd1: server does not support multiple connections per device.
[  309.101409][T18542] block nbd1: shutting down sockets
[  309.353899][T18556] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  309.358300][T18555] IPVS: stopping backup sync thread 18556 ...
[  309.895196][T18585] IPVS: stopping backup sync thread 18586 ...
[  309.897499][T18586] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  310.058677][T18591] __nla_validate_parse: 9 callbacks suppressed
[  310.058687][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'.
[  310.122914][T18595] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3674'.
[  310.263608][T18602] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  310.346761][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3679'.
[  310.526558][T18617] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  310.534899][T18616] tipc: Resetting bearer <eth:syzkaller0>
[  310.546806][T18616] tipc: Disabling bearer <eth:syzkaller0>
[  310.803471][T18627] IPVS: persistence engine module ip_vs_pe_ not found
[  310.806607][T18627] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:0
[  310.933100][T18632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.970648][T18631] tipc: Resetting bearer <eth:syzkaller0>
[  311.168804][T18634] syz.1.3689: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  311.174953][T18634] CPU: 0 UID: 0 PID: 18634 Comm: syz.1.3689 Not tainted syzkaller #0 PREEMPT(full) 
[  311.174971][T18634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  311.174985][T18634] Call Trace:
[  311.174992][T18634]  <TASK>
[  311.174998][T18634]  dump_stack_lvl+0x189/0x250
[  311.175019][T18634]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.175034][T18634]  ? __pfx__printk+0x10/0x10
[  311.175053][T18634]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  311.175069][T18634]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  311.175083][T18634]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  311.175101][T18634]  warn_alloc+0x214/0x310
[  311.175121][T18634]  ? stack_depot_save_flags+0x40/0x860
[  311.175141][T18634]  ? __pfx_warn_alloc+0x10/0x10
[  311.175160][T18634]  ? kasan_save_track+0x4f/0x80
[  311.175176][T18634]  ? xskq_create+0x56/0x170
[  311.175186][T18634]  ? xsk_init_queue+0xb0/0x110
[  311.175197][T18634]  ? xsk_setsockopt+0x4dc/0x8d0
[  311.175211][T18634]  ? do_sock_setsockopt+0x17c/0x1b0
[  311.175226][T18634]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  311.175238][T18634]  ? do_syscall_64+0xfa/0x3b0
[  311.175252][T18634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.175268][T18634]  __vmalloc_node_range_noprof+0x125/0x12f0
[  311.175307][T18634]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  311.175325][T18634]  ? xskq_create+0x56/0x170
[  311.175338][T18634]  ? __kasan_kmalloc+0x93/0xb0
[  311.175356][T18634]  vmalloc_user_noprof+0xad/0xf0
[  311.175373][T18634]  ? xskq_create+0xbf/0x170
[  311.175386][T18634]  xskq_create+0xbf/0x170
[  311.175398][T18634]  xsk_init_queue+0xb0/0x110
[  311.175413][T18634]  xsk_setsockopt+0x4dc/0x8d0
[  311.175432][T18634]  ? __pfx_xsk_setsockopt+0x10/0x10
[  311.175448][T18634]  ? __pfx_aa_sk_perm+0x10/0x10
[  311.175469][T18634]  ? aa_sock_opt_perm+0xff/0x1b0
[  311.175484][T18634]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  311.175497][T18634]  ? __pfx_xsk_setsockopt+0x10/0x10
[  311.175516][T18634]  do_sock_setsockopt+0x17c/0x1b0
[  311.175533][T18634]  __x64_sys_setsockopt+0x13f/0x1b0
[  311.175552][T18634]  do_syscall_64+0xfa/0x3b0
[  311.175566][T18634]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.175577][T18634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.175590][T18634]  ? exc_page_fault+0x9f/0xf0
[  311.175602][T18634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.175638][T18634] RIP: 0033:0x7f701e78ec29
[  311.175652][T18634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.175662][T18634] RSP: 002b:00007f701c9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  311.175676][T18634] RAX: ffffffffffffffda RBX: 00007f701e9d5fa0 RCX: 00007f701e78ec29
[  311.175684][T18634] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  311.175691][T18634] RBP: 00007f701e811e41 R08: 0000000000000004 R09: 0000000000000000
[  311.175700][T18634] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.175707][T18634] R13: 00007f701e9d6038 R14: 00007f701e9d5fa0 R15: 00007ffe3f737db8
[  311.175727][T18634]  </TASK>
[  311.175732][T18634] Mem-Info:
[  311.273119][T18636] validate_nla: 6 callbacks suppressed
[  311.273129][T18636] netlink: 'syz.1.3689': attribute type 4 has an invalid length.
[  311.273793][T18634] active_anon:12050 inactive_anon:0 isolated_anon:0
[  311.273793][T18634]  active_file:1809 inactive_file:38341 isolated_file:0
[  311.273793][T18634]  unevictable:1768 dirty:155 writeback:0
[  311.273793][T18634]  slab_reclaimable:15600 slab_unreclaimable:122025
[  311.273793][T18634]  mapped:18411 shmem:2480 pagetables:864
[  311.273793][T18634]  sec_pagetables:0 bounce:0
[  311.273793][T18634]  kernel_misc_reclaimable:0
[  311.273793][T18634]  free:213988 free_pcp:18642 free_cma:0
[  311.326375][T18634] Node 0 active_anon:14816kB inactive_anon:0kB active_file:4508kB inactive_file:136140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48128kB dirty:336kB writeback:0kB shmem:5048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7096kB pagetables:1884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  311.333724][T18637] netlink: 'syz.1.3689': attribute type 4 has an invalid length.
[  311.339041][T18634] Node 1 active_anon:33384kB inactive_anon:0kB active_file:2728kB inactive_file:17224kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29596kB dirty:284kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6168kB pagetables:1572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  311.353731][T18634] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  311.364060][T18634] lowmem_reserve[]: 0 811 811 811 811
[  311.366297][T18634] Node 0 DMA32 free:91952kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14816kB inactive_anon:0kB active_file:4508kB inactive_file:136140kB unevictable:3536kB writepending:336kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:41504kB local_pcp:26864kB free_cma:0kB
[  311.379004][T18634] lowmem_reserve[]: 0 0 0 0 0
[  311.381133][T18634] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  311.393821][T18634] lowmem_reserve[]: 0 0 854 854 854
[  311.396072][T18634] Node 1 Normal free:289704kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33384kB inactive_anon:0kB active_file:2728kB inactive_file:17224kB unevictable:3536kB writepending:284kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33140kB local_pcp:18856kB free_cma:0kB
[  311.409401][T18634] lowmem_reserve[]: 0 0 0 0 0
[  311.411483][T18634] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  311.416782][T18634] Node 0 DMA32: 684*4kB (U) 416*8kB (UM) 88*16kB (UME) 104*32kB (UME) 143*64kB (UM) 71*128kB (UM) 36*256kB (UM) 13*512kB (UM) 8*1024kB (ME) 1*2048kB (M) 9*4096kB (M) = 92016kB
[  311.424435][T18634] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  311.431697][T18634] Node 1 Normal: 106*4kB (UME) 48*8kB (M) 32*16kB (M) 25*32kB (UME) 89*64kB (UM) 18*128kB (UM) 13*256kB (UME) 7*512kB (UM) 6*1024kB (UM) 2*2048kB (UM) 64*4096kB (M) = 289416kB
[  311.439380][T18634] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.443382][T18634] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.447671][T18634] 42630 total pagecache pages
[  311.449759][T18634] 0 pages in swap cache
[  311.451561][T18634] Free swap  = 124996kB
[  311.453414][T18634] Total swap = 124996kB
[  311.455222][T18634] 786301 pages RAM
[  311.457044][T18634] 0 pages HighMem/MovableOnly
[  311.459085][T18634] 241346 pages reserved
[  311.460862][T18634] 0 pages cma reserved
[  312.315178][T18631] tipc: Disabling bearer <eth:syzkaller0>
[  312.330560][T18646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.333572][T18647] syzkaller0: entered promiscuous mode
[  312.335514][T18647] syzkaller0: entered allmulticast mode
[  312.346029][T18655] tipc: Resetting bearer <eth:syzkaller0>
[  312.414847][T18655] tipc: Resetting bearer <eth:syzkaller0>
[  312.429576][T18655] tipc: Disabling bearer <eth:syzkaller0>
[  312.439889][T18662] dvmrp1: entered allmulticast mode
[  312.442543][T18662] macvlan1: left allmulticast mode
[  312.444376][T18662] veth1_vlan: left allmulticast mode
[  312.446341][T18662] dvmrp1: left allmulticast mode
[  312.704954][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3698'.
[  312.792282][T18697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3700'.
[  312.799483][T18697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3700'.
[  313.821270][T18737] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20003
[  314.185277][T18744] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  314.518557][T18753] netlink: 'syz.3.3714': attribute type 4 has an invalid length.
[  314.518654][T18754] netlink: 'syz.3.3714': attribute type 4 has an invalid length.
[  314.707151][T18763] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  314.707175][T18764] IPVS: stopping backup sync thread 18763 ...
[  314.716727][T18761] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3718'.
[  314.863025][T18777] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  314.870636][T18775] IPVS: stopping backup sync thread 18777 ...
[  314.972245][T18790] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  314.975874][T18788] IPVS: stopping backup sync thread 18790 ...
[  315.019487][T18795] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3726'.
[  316.505730][T18861] netlink: 'syz.0.3733': attribute type 4 has an invalid length.
[  316.854295][T18899] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3740'.
[  316.913866][T18903] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  316.914959][T18902] IPVS: stopping backup sync thread 18903 ...
[  317.632357][T18893] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  317.634764][T18893] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  317.855967][T18893] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  317.867141][T18893] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  332.127696][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  398.687074][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  479.317130][   T34] INFO: task kworker/1:1:47 blocked for more than 143 seconds.
[  479.319888][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  479.321681][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  479.325239][   T34] task:kworker/1:1     state:D stack:23400 pid:47    tgid:47    ppid:2      task_flags:0x4208060 flags:0x00004000
[  479.333755][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  479.336218][   T34] Call Trace:
[  479.337651][   T34]  <TASK>
[  479.338738][   T34]  __schedule+0x1798/0x4cc0
[  479.340428][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  479.342360][   T34]  ? __pfx___schedule+0x10/0x10
[  479.344036][   T34]  ? schedule+0x91/0x360
[  479.345467][   T34]  schedule+0x165/0x360
[  479.346873][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.348858][   T34]  __mutex_lock+0x7e6/0x1350
[  479.350475][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.352402][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  479.354527][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.356415][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  479.360834][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  479.363204][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  479.365737][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  479.368252][   T34]  process_scheduled_works+0xae1/0x17b0
[  479.370642][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  479.373202][   T34]  worker_thread+0x8a0/0xda0
[  479.375216][   T34]  kthread+0x711/0x8a0
[  479.379244][   T34]  ? __pfx_worker_thread+0x10/0x10
[  479.381388][   T34]  ? __pfx_kthread+0x10/0x10
[  479.383296][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  479.385546][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.387861][   T34]  ? __pfx_kthread+0x10/0x10
[  479.389817][   T34]  ret_from_fork+0x439/0x7d0
[  479.391816][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  479.394002][   T34]  ? __switch_to_asm+0x39/0x70
[  479.396013][   T34]  ? __switch_to_asm+0x33/0x70
[  479.400303][   T34]  ? __pfx_kthread+0x10/0x10
[  479.402251][   T34]  ret_from_fork_asm+0x1a/0x30
[  479.404298][   T34]  </TASK>
[  479.405696][   T34] INFO: task syz.3.3736:18874 blocked for more than 143 seconds.
[  479.408882][   T34]       Not tainted syzkaller #0
[  479.410974][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.414466][   T34] task:syz.3.3736      state:D stack:25096 pid:18874 tgid:18874 ppid:8742   task_flags:0x400040 flags:0x00004004
[  479.421511][   T34] Call Trace:
[  479.422921][   T34]  <TASK>
[  479.424170][   T34]  __schedule+0x1798/0x4cc0
[  479.426069][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.428285][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.430421][   T34]  ? __pfx___schedule+0x10/0x10
[  479.432541][   T34]  ? schedule+0x91/0x360
[  479.434340][   T34]  schedule+0x165/0x360
[  479.436099][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.440527][   T34]  __mutex_lock+0x7e6/0x1350
[  479.442458][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.444689][   T34]  ? rfkill_unregister+0xc8/0x220
[  479.446733][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.448920][   T34]  ? __pfx_device_del+0x10/0x10
[  479.451029][   T34]  rfkill_unregister+0xc8/0x220
[  479.453063][   T34]  nfc_unregister_device+0x96/0x2a0
[  479.455199][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  479.479036][   T34]  virtual_ncidev_close+0x56/0x90
[  479.481182][   T34]  __fput+0x44c/0xa70
[  479.482889][   T34]  task_work_run+0x1d4/0x260
[  479.484775][   T34]  ? __pfx_task_work_run+0x10/0x10
[  479.493289][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  479.495606][   T34]  exit_to_user_mode_loop+0xec/0x110
[  479.499765][   T34]  do_syscall_64+0x2bd/0x3b0
[  479.501502][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.503433][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.505822][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.507595][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.510040][   T34] RIP: 0033:0x7f7f65b8ec29
[  479.511944][   T34] RSP: 002b:00007ffe6b2a0708 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  479.515493][   T34] RAX: 0000000000000000 RBX: 00007f7f65dd7da0 RCX: 00007f7f65b8ec29
[  479.521212][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  479.524611][   T34] RBP: 00007f7f65dd7da0 R08: 0000000000000220 R09: 0000001e6b2a09ff
[  479.528004][   T34] R10: 00007f7f65dd7cb0 R11: 0000000000000246 R12: 000000000004d7cb
[  479.531412][   T34] R13: 00007f7f65dd6180 R14: ffffffffffffffff R15: 00007ffe6b2a0820
[  479.534858][   T34]  </TASK>
[  479.536176][   T34] INFO: task syz.1.3740:18893 blocked for more than 143 seconds.
[  479.541468][   T34]       Not tainted syzkaller #0
[  479.543357][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.546775][   T34] task:syz.1.3740      state:D stack:25208 pid:18893 tgid:18892 ppid:5840   task_flags:0x400140 flags:0x00004006
[  479.551420][   T34] Call Trace:
[  479.552613][   T34]  <TASK>
[  479.553636][   T34]  __schedule+0x1798/0x4cc0
[  479.555146][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.558148][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.560309][   T34]  ? __pfx___schedule+0x10/0x10
[  479.562460][   T34]  ? schedule+0x91/0x360
[  479.564340][   T34]  schedule+0x165/0x360
[  479.566199][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.569332][   T34]  __mutex_lock+0x7e6/0x1350
[  479.571378][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.573496][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  479.575765][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.578116][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.580381][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  479.582977][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.585731][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  479.588329][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  479.590595][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  479.593100][   T34]  rfkill_set_block+0x1d2/0x440
[  479.595293][   T34]  rfkill_fop_write+0x44b/0x570
[  479.597638][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  479.600019][   T34]  ? security_file_permission+0x40/0x290
[  479.602449][   T34]  ? rw_verify_area+0x255/0x4d0
[  479.604602][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.606757][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  479.610263][   T34]  vfs_write+0x27e/0xb30
[  479.612128][   T34]  ? __pfx_vfs_write+0x10/0x10
[  479.614195][   T34]  ? __fget_files+0x2a/0x420
[  479.616185][   T34]  ? __fget_files+0x2a/0x420
[  479.619277][   T34]  ? __fget_files+0x3a0/0x420
[  479.621339][   T34]  ? __fget_files+0x2a/0x420
[  479.623327][   T34]  ksys_write+0x145/0x250
[  479.625212][   T34]  ? __pfx_ksys_write+0x10/0x10
[  479.628598][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.630698][   T34]  ? do_syscall_64+0xbe/0x3b0
[  479.632661][   T34]  do_syscall_64+0xfa/0x3b0
[  479.634652][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.638041][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.640705][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.642780][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.645359][   T34] RIP: 0033:0x7f701e78ec29
[  479.648396][   T34] RSP: 002b:00007f701c9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  479.652067][   T34] RAX: ffffffffffffffda RBX: 00007f701e9d5fa0 RCX: 00007f701e78ec29
[  479.655514][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  479.659210][   T34] RBP: 00007f701e811e41 R08: 0000000000000000 R09: 0000000000000000
[  479.662763][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.666323][   T34] R13: 00007f701e9d6038 R14: 00007f701e9d5fa0 R15: 00007ffe3f737db8
[  479.671304][   T34]  </TASK>
[  479.672809][   T34] INFO: task syz.1.3740:18899 blocked for more than 143 seconds.
[  479.676195][   T34]       Not tainted syzkaller #0
[  479.684103][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.688059][   T34] task:syz.1.3740      state:D stack:24712 pid:18899 tgid:18892 ppid:5840   task_flags:0x400140 flags:0x00004006
[  479.693143][   T34] Call Trace:
[  479.694596][   T34]  <TASK>
[  479.695898][   T34]  __schedule+0x1798/0x4cc0
[  479.698157][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.700391][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.702606][   T34]  ? __pfx___schedule+0x10/0x10
[  479.704807][   T34]  ? schedule+0x91/0x360
[  479.706656][   T34]  schedule+0x165/0x360
[  479.708643][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.711068][   T34]  __mutex_lock+0x7e6/0x1350
[  479.713140][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.715262][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.717543][   T34]  ? rfkill_register+0x37/0x8e0
[  479.719747][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.721981][   T34]  ? netdev_run_todo+0xe1d/0xea0
[  479.724207][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.726532][   T34]  ? __pfx_netdev_run_todo+0x10/0x10
[  479.728923][   T34]  ? __pfx_mod_delayed_work_on+0x10/0x10
[  479.731249][   T34]  rfkill_register+0x37/0x8e0
[  479.733195][   T34]  wiphy_register+0x214c/0x28d0
[  479.735203][   T34]  ? __pfx_wiphy_register+0x10/0x10
[  479.737430][   T34]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  479.739536][   T34]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  479.742039][   T34]  ieee80211_register_hw+0x3484/0x4100
[  479.744310][   T34]  ? ieee80211_register_hw+0x13f1/0x4100
[  479.746635][   T34]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  479.749101][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.751762][   T34]  ? __hrtimer_setup+0x187/0x210
[  479.753876][   T34]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  479.756313][   T34]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  479.759595][   T34]  ? __pfx__printk+0x10/0x10
[  479.761549][   T34]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  479.764091][   T34]  ? __nla_validate_parse+0x251c/0x2d40
[  479.766361][   T34]  ? __sock_sendmsg+0x21c/0x270
[  479.768460][   T34]  ? ____sys_sendmsg+0x505/0x830
[  479.770551][   T34]  hwsim_new_radio_nl+0xea4/0x1b10
[  479.772769][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  479.775136][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  479.778829][   T34]  ? __nla_parse+0x40/0x60
[  479.780737][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  479.783341][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  479.785655][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  479.788854][   T34]  ? bpf_lsm_capable+0x9/0x20
[  479.790862][   T34]  ? security_capable+0x7e/0x2e0
[  479.792925][   T34]  genl_rcv_msg+0x60e/0x790
[  479.794838][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.797163][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  479.799462][   T34]  netlink_rcv_skb+0x208/0x470
[  479.801468][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.803466][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.805733][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.808046][   T34]  ? down_read+0x1ad/0x2e0
[  479.809977][   T34]  genl_rcv+0x28/0x40
[  479.811723][   T34]  netlink_unicast+0x82f/0x9e0
[  479.813830][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  479.816198][   T34]  ? netlink_sendmsg+0x642/0xb30
[  479.818638][   T34]  ? skb_put+0x11b/0x210
[  479.820645][   T34]  netlink_sendmsg+0x805/0xb30
[  479.822894][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.825367][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.827860][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.830318][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.832845][   T34]  __sock_sendmsg+0x21c/0x270
[  479.835074][   T34]  ____sys_sendmsg+0x505/0x830
[  479.837513][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  479.839989][   T34]  ? import_iovec+0x74/0xa0
[  479.842171][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  479.844313][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  479.846753][   T34]  ? __fget_files+0x2a/0x420
[  479.849056][   T34]  ? __fget_files+0x3a0/0x420
[  479.851221][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  479.853533][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  479.855848][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  479.858134][   T34]  ? do_syscall_64+0xbe/0x3b0
[  479.860091][   T34]  do_syscall_64+0xfa/0x3b0
[  479.861995][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.864196][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.866820][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.869867][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.872394][   T34] RIP: 0033:0x7f701e78ec29
[  479.874272][   T34] RSP: 002b:00007f701c9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.877901][   T34] RAX: ffffffffffffffda RBX: 00007f701e9d6090 RCX: 00007f701e78ec29
[  479.881075][   T34] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  479.884313][   T34] RBP: 00007f701e811e41 R08: 0000000000000000 R09: 0000000000000000
[  479.888936][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.892203][   T34] R13: 00007f701e9d6128 R14: 00007f701e9d6090 R15: 00007ffe3f737db8
[  479.895470][   T34]  </TASK>
[  479.896831][   T34] INFO: task syz.0.3747:18920 blocked for more than 143 seconds.
[  479.900666][   T34]       Not tainted syzkaller #0
[  479.902736][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.906268][   T34] task:syz.0.3747      state:D stack:27336 pid:18920 tgid:18919 ppid:5841   task_flags:0x400040 flags:0x00004004
[  479.911211][   T34] Call Trace:
[  479.912615][   T34]  <TASK>
[  479.913845][   T34]  __schedule+0x1798/0x4cc0
[  479.915740][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.917843][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.919824][   T34]  ? __pfx___schedule+0x10/0x10
[  479.921804][   T34]  ? schedule+0x91/0x360
[  479.923508][   T34]  schedule+0x165/0x360
[  479.925238][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.927499][   T34]  __mutex_lock+0x7e6/0x1350
[  479.929381][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.931323][   T34]  ? genl_rcv_msg+0x10d/0x790
[  479.933227][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.935293][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.937340][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  479.939516][   T34]  ? radix_tree_lookup+0x240/0x290
[  479.941586][   T34]  genl_rcv_msg+0x10d/0x790
[  479.943423][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.945423][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.947592][   T34]  netlink_rcv_skb+0x208/0x470
[  479.949517][   T34]  ? __lock_acquire+0xab9/0xd20
[  479.951444][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.953508][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.955674][   T34]  ? down_read+0x1ad/0x2e0
[  479.957694][   T34]  genl_rcv+0x28/0x40
[  479.959329][   T34]  netlink_unicast+0x82f/0x9e0
[  479.961262][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  479.963425][   T34]  ? netlink_sendmsg+0x642/0xb30
[  479.965421][   T34]  ? skb_put+0x11b/0x210
[  479.967313][   T34]  netlink_sendmsg+0x805/0xb30
[  479.969288][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.971470][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.973813][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.976024][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.979037][   T34]  __sock_sendmsg+0x21c/0x270
[  479.981059][   T34]  __sys_sendto+0x3bd/0x520
[  479.982991][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  479.985100][   T34]  ? count_memcg_event_mm+0x21/0x260
[  479.987410][   T34]  ? exc_page_fault+0x76/0xf0
[  479.989330][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  479.991589][   T34]  __x64_sys_sendto+0xde/0x100
[  479.993556][   T34]  do_syscall_64+0xfa/0x3b0
[  479.995464][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.998955][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.001424][   T34]  ? exc_page_fault+0x9f/0xf0
[  480.003334][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.005743][   T34] RIP: 0033:0x7f61a2190abc
[  480.008223][   T34] RSP: 002b:00007f61a3068ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  480.011594][   T34] RAX: ffffffffffffffda RBX: 00007f61a3068fc0 RCX: 00007f61a2190abc
[  480.014798][   T34] RDX: 0000000000000020 RSI: 00007f61a3069010 RDI: 0000000000000005
[  480.018132][   T34] RBP: 0000000000000000 R08: 00007f61a3068f14 R09: 000000000000000c
[  480.021319][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  480.024482][   T34] R13: 00007f61a3068f68 R14: 00007f61a3069010 R15: 0000000000000000
[  480.027892][   T34]  </TASK>
[  480.029209][   T34] INFO: task syz.0.3747:18921 blocked for more than 144 seconds.
[  480.032427][   T34]       Not tainted syzkaller #0
[  480.034502][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  480.038474][   T34] task:syz.0.3747      state:D stack:28616 pid:18921 tgid:18919 ppid:5841   task_flags:0x400040 flags:0x00004004
[  480.043398][   T34] Call Trace:
[  480.044882][   T34]  <TASK>
[  480.046171][   T34]  __schedule+0x1798/0x4cc0
[  480.048264][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.050412][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.052543][   T34]  ? __pfx___schedule+0x10/0x10
[  480.054664][   T34]  ? schedule+0x91/0x360
[  480.056495][   T34]  schedule+0x165/0x360
[  480.058372][   T34]  schedule_preempt_disabled+0x13/0x30
[  480.060711][   T34]  __mutex_lock+0x7e6/0x1350
[  480.062716][   T34]  ? __mutex_lock+0x5bb/0x1350
[  480.064688][   T34]  ? genl_rcv_msg+0x10d/0x790
[  480.066689][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  480.068962][   T34]  ? stack_trace_save+0x9c/0xe0
[  480.071095][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  480.073419][   T34]  ? radix_tree_lookup+0x240/0x290
[  480.075546][   T34]  genl_rcv_msg+0x10d/0x790
[  480.077582][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.079618][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  480.081738][   T34]  netlink_rcv_skb+0x208/0x470
[  480.083756][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.085838][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  480.088926][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  480.091201][   T34]  ? down_read+0x1ad/0x2e0
[  480.093114][   T34]  genl_rcv+0x28/0x40
[  480.094809][   T34]  netlink_unicast+0x82f/0x9e0
[  480.096848][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  480.099141][   T34]  ? netlink_sendmsg+0x642/0xb30
[  480.101269][   T34]  ? skb_put+0x11b/0x210
[  480.103163][   T34]  netlink_sendmsg+0x805/0xb30
[  480.105273][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.108941][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  480.111093][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  480.113384][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.115727][   T34]  __sock_sendmsg+0x21c/0x270
[  480.118635][   T34]  __sys_sendto+0x3bd/0x520
[  480.120669][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  480.122929][   T34]  ? fd_install+0x97/0x540
[  480.124940][   T34]  ? fd_install+0x30d/0x540
[  480.127078][   T34]  __x64_sys_sendto+0xde/0x100
[  480.129214][   T34]  do_syscall_64+0xfa/0x3b0
[  480.131204][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.133380][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.135923][   T34]  ? exc_page_fault+0x9f/0xf0
[  480.137959][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.140419][   T34] RIP: 0033:0x7f61a2190abc
[  480.142306][   T34] RSP: 002b:00007f61a3047ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  480.145682][   T34] RAX: ffffffffffffffda RBX: 00007f61a3047fc0 RCX: 00007f61a2190abc
[  480.149094][   T34] RDX: 0000000000000020 RSI: 00007f61a3048010 RDI: 0000000000000006
[  480.152410][   T34] RBP: 0000000000000000 R08: 00007f61a3047f14 R09: 000000000000000c
[  480.155780][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  480.159119][   T34] R13: 00007f61a3047f68 R14: 00007f61a3048010 R15: 0000000000000000
[  480.162395][   T34]  </TASK>
[  480.163758][   T34] INFO: task syz-executor:18925 blocked for more than 144 seconds.
[  480.167372][   T34]       Not tainted syzkaller #0
[  480.169528][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  480.173161][   T34] task:syz-executor    state:D stack:28040 pid:18925 tgid:18925 ppid:1      task_flags:0x400040 flags:0x00004000
[  480.178201][   T34] Call Trace:
[  480.179682][   T34]  <TASK>
[  480.180970][   T34]  __schedule+0x1798/0x4cc0
[  480.182986][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.185145][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.187443][   T34]  ? __pfx___schedule+0x10/0x10
[  480.189648][   T34]  ? schedule+0x91/0x360
[  480.191502][   T34]  schedule+0x165/0x360
[  480.193352][   T34]  schedule_preempt_disabled+0x13/0x30
[  480.195611][   T34]  __mutex_lock+0x7e6/0x1350
[  480.198435][   T34]  ? __mutex_lock+0x5bb/0x1350
[  480.200460][   T34]  ? rfkill_register+0x37/0x8e0
[  480.202503][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  480.204587][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  480.206772][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  480.209009][   T34]  ? device_initialize+0x24b/0x440
[  480.211082][   T34]  rfkill_register+0x37/0x8e0
[  480.212990][   T34]  hci_register_dev+0x3f5/0x890
[  480.214995][   T34]  vhci_create_device+0x39c/0x650
[  480.217666][   T34]  vhci_write+0x3ce/0x4a0
[  480.219443][   T34]  vfs_write+0x5c9/0xb30
[  480.221178][   T34]  ? __pfx_vhci_write+0x10/0x10
[  480.223171][   T34]  ? __pfx_vfs_write+0x10/0x10
[  480.225144][   T34]  ? count_memcg_event_mm+0x21/0x260
[  480.228091][   T34]  ksys_write+0x145/0x250
[  480.229935][   T34]  ? __pfx_ksys_write+0x10/0x10
[  480.231996][   T34]  ? do_syscall_64+0xbe/0x3b0
[  480.233931][   T34]  do_syscall_64+0xfa/0x3b0
[  480.235792][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.237989][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.240421][   T34]  ? exc_page_fault+0x9f/0xf0
[  480.242335][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.244756][   T34] RIP: 0033:0x7f85cff8d6a0
[  480.246612][   T34] RSP: 002b:00007ffe53cd1c98 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  480.250124][   T34] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f85cff8d6a0
[  480.253320][   T34] RDX: 0000000000000002 RSI: 00007ffe53cd1caa RDI: 00000000000000ca
[  480.256651][   T34] RBP: 00007f85d01d67b8 R08: 0000000000000000 R09: 00007f85d0d0d6c0
[  480.259942][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  480.263135][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  480.266371][   T34]  </TASK>
[  480.267843][   T34] INFO: task syz-executor:18926 blocked for more than 144 seconds.
[  480.270978][   T34]       Not tainted syzkaller #0
[  480.272967][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  480.276393][   T34] task:syz-executor    state:D stack:28040 pid:18926 tgid:18926 ppid:1      task_flags:0x400040 flags:0x00004000
[  480.281311][   T34] Call Trace:
[  480.282728][   T34]  <TASK>
[  480.283957][   T34]  __schedule+0x1798/0x4cc0
[  480.285918][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.288038][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.290041][   T34]  ? __pfx___schedule+0x10/0x10
[  480.292118][   T34]  ? schedule+0x91/0x360
[  480.293959][   T34]  schedule+0x165/0x360
[  480.295783][   T34]  schedule_preempt_disabled+0x13/0x30
[  480.298252][   T34]  __mutex_lock+0x7e6/0x1350
[  480.300268][   T34]  ? __mutex_lock+0x5bb/0x1350
[  480.302192][   T34]  ? rfkill_register+0x37/0x8e0
[  480.304195][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  480.306209][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  480.309303][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  480.311518][   T34]  ? device_initialize+0x24b/0x440
[  480.313668][   T34]  rfkill_register+0x37/0x8e0
[  480.315620][   T34]  hci_register_dev+0x3f5/0x890
[  480.317732][   T34]  vhci_create_device+0x39c/0x650
[  480.319839][   T34]  vhci_write+0x3ce/0x4a0
[  480.321730][   T34]  vfs_write+0x5c9/0xb30
[  480.323502][   T34]  ? __pfx_vhci_write+0x10/0x10
[  480.325577][   T34]  ? __pfx_vfs_write+0x10/0x10
[  480.327962][   T34]  ? count_memcg_event_mm+0x21/0x260
[  480.330183][   T34]  ksys_write+0x145/0x250
[  480.331993][   T34]  ? __pfx_ksys_write+0x10/0x10
[  480.334006][   T34]  ? do_syscall_64+0xbe/0x3b0
[  480.335907][   T34]  do_syscall_64+0xfa/0x3b0
[  480.338480][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.340640][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.343095][   T34]  ? exc_page_fault+0x9f/0xf0
[  480.345002][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.347474][   T34] RIP: 0033:0x7f8de538d6a0
[  480.349356][   T34] RSP: 002b:00007ffc18194478 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  480.352722][   T34] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8de538d6a0
[  480.356041][   T34] RDX: 0000000000000002 RSI: 00007ffc1819448a RDI: 00000000000000ca
[  480.359339][   T34] RBP: 00007f8de55d67b8 R08: 0000000000000000 R09: 00007f8de610d6c0
[  480.362607][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  480.365841][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  480.369185][   T34]  </TASK>
[  480.370504][   T34] INFO: task syz-executor:18928 blocked for more than 144 seconds.
[  480.373735][   T34]       Not tainted syzkaller #0
[  480.375833][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  480.379587][   T34] task:syz-executor    state:D stack:28040 pid:18928 tgid:18928 ppid:1      task_flags:0x400040 flags:0x00004000
[  480.384624][   T34] Call Trace:
[  480.386253][   T34]  <TASK>
[  480.387742][   T34]  __schedule+0x1798/0x4cc0
[  480.389781][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.391877][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.394044][   T34]  ? __pfx___schedule+0x10/0x10
[  480.396217][   T34]  ? schedule+0x91/0x360
[  480.398169][   T34]  schedule+0x165/0x360
[  480.399948][   T34]  schedule_preempt_disabled+0x13/0x30
[  480.402289][   T34]  __mutex_lock+0x7e6/0x1350
[  480.404325][   T34]  ? __mutex_lock+0x5bb/0x1350
[  480.406436][   T34]  ? rfkill_register+0x37/0x8e0
[  480.408702][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  480.410911][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  480.413300][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  480.415657][   T34]  ? device_initialize+0x24b/0x440
[  480.418191][   T34]  rfkill_register+0x37/0x8e0
[  480.420275][   T34]  hci_register_dev+0x3f5/0x890
[  480.422424][   T34]  vhci_create_device+0x39c/0x650
[  480.424580][   T34]  vhci_write+0x3ce/0x4a0
[  480.426418][   T34]  vfs_write+0x5c9/0xb30
[  480.428437][   T34]  ? __pfx_vhci_write+0x10/0x10
[  480.430597][   T34]  ? __pfx_vfs_write+0x10/0x10
[  480.432706][   T34]  ? count_memcg_event_mm+0x21/0x260
[  480.435015][   T34]  ksys_write+0x145/0x250
[  480.437094][   T34]  ? __pfx_ksys_write+0x10/0x10
[  480.439244][   T34]  ? do_syscall_64+0xbe/0x3b0
[  480.441295][   T34]  do_syscall_64+0xfa/0x3b0
[  480.443270][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.445522][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.448202][   T34]  ? exc_page_fault+0x9f/0xf0
[  480.450211][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.452667][   T34] RIP: 0033:0x7fca8e38d6a0
[  480.454592][   T34] RSP: 002b:00007ffebfa29b98 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  480.458274][   T34] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fca8e38d6a0
[  480.461619][   T34] RDX: 0000000000000002 RSI: 00007ffebfa29baa RDI: 00000000000000ca
[  480.465035][   T34] RBP: 00007fca8e5d67b8 R08: 0000000000000000 R09: 00007fca8f10d6c0
[  480.468630][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  480.472005][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  480.475397][   T34]  </TASK>
[  480.476811][   T34] 
[  480.476811][   T34] Showing all locks held in the system:
[  480.480182][   T34] 1 lock held by khungtaskd/34:
[  480.482260][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  480.486453][   T34] 3 locks held by kworker/1:1/47:
[  480.488716][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  480.493401][   T34]  #1: ffffc9000075fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  480.499181][   T34]  #2: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  480.503793][   T34] 2 locks held by getty/5672:
[  480.505757][   T34]  #0: ffff8880245ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  480.509945][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  480.514296][   T34] 2 locks held by syz.3.3736/18874:
[  480.516575][   T34]  #0: ffff8881104f9100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  480.520850][   T34]  #1: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  480.525032][   T34] 2 locks held by syz.1.3740/18893:
[  480.527460][   T34]  #0: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  480.531699][   T34]  #1: ffff8881104f9100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  480.535684][   T34] 3 locks held by syz.1.3740/18899:
[  480.538039][   T34]  #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  480.541511][   T34]  #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  480.545339][   T34]  #2: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  480.549632][   T34] 2 locks held by syz.0.3747/18920:
[  480.551790][   T34]  #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  480.555127][   T34]  #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  480.558970][   T34] 2 locks held by syz.0.3747/18921:
[  480.561168][   T34]  #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  480.564640][   T34]  #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  480.568490][   T34] 2 locks held by syz-executor/18925:
[  480.570812][   T34]  #0: ffff88811a6a2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  480.575076][   T34]  #1: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  480.579356][   T34] 2 locks held by syz-executor/18926:
[  480.581714][   T34]  #0: ffff8881190a3118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  480.586046][   T34]  #1: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  480.590341][   T34] 2 locks held by syz-executor/18928:
[  480.592664][   T34]  #0: ffff88811a75f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  480.598386][   T34]  #1: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  480.602639][   T34] 2 locks held by syz-executor/18931:
[  480.604971][   T34]  #0: ffff888119ad0118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  480.609360][   T34]  #1: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  480.613623][   T34] 2 locks held by syz-executor/18932:
[  480.615927][   T34]  #0: ffff888119ad6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  480.620324][   T34]  #1: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  480.624511][   T34] 2 locks held by syz-executor/18934:
[  480.626772][   T34]  #0: ffff888039ee5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  480.631041][   T34]  #1: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  480.635095][   T34] 2 locks held by syz-executor/18937:
[  480.637574][   T34]  #0: ffff888110e8d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  480.641731][   T34]  #1: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  480.645680][   T34] 2 locks held by syz-executor/18938:
[  480.647953][   T34]  #0: ffff888110e8c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  480.652021][   T34]  #1: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  480.656032][   T34] 2 locks held by syz-executor/18940:
[  480.658333][   T34]  #0: ffff888119d35118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  480.662460][   T34]  #1: ffffffff8f813d08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  480.666576][   T34] 
[  480.667718][   T34] =============================================
[  480.667718][   T34] 
[  480.671151][   T34] NMI backtrace for cpu 1
[  480.671161][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  480.671175][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.671182][   T34] Call Trace:
[  480.671188][   T34]  <TASK>
[  480.671196][   T34]  dump_stack_lvl+0x189/0x250
[  480.671215][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.671229][   T34]  ? __pfx__printk+0x10/0x10
[  480.671253][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  480.671271][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  480.671290][   T34]  ? __pfx__printk+0x10/0x10
[  480.671307][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  480.671327][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  480.671345][   T34]  watchdog+0xf93/0xfe0
[  480.671364][   T34]  ? watchdog+0x1de/0xfe0
[  480.671385][   T34]  kthread+0x711/0x8a0
[  480.671402][   T34]  ? __pfx_watchdog+0x10/0x10
[  480.671417][   T34]  ? __pfx_kthread+0x10/0x10
[  480.671433][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  480.671450][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.671461][   T34]  ? __pfx_kthread+0x10/0x10
[  480.671475][   T34]  ret_from_fork+0x439/0x7d0
[  480.671490][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  480.671505][   T34]  ? __switch_to_asm+0x39/0x70
[  480.671519][   T34]  ? __switch_to_asm+0x33/0x70
[  480.671532][   T34]  ? __pfx_kthread+0x10/0x10
[  480.671546][   T34]  ret_from_fork_asm+0x1a/0x30
[  480.671593][   T34]  </TASK>
[  480.671598][   T34] Sending NMI from CPU 1 to CPUs 0:
[  480.731927][    C0] NMI backtrace for cpu 0
[  480.731943][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  480.731956][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.731991][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  480.732008][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 f9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  480.732018][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  480.732029][    C0] RAX: b7f0f91cea4fc200 RBX: ffffffff819693f8 RCX: b7f0f91cea4fc200
[  480.732038][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b9cae RDI: ffffffff8be33c00
[  480.732046][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  480.732054][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa3a630
[  480.732062][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  480.732069][    C0] FS:  0000000000000000(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  480.732078][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  480.732086][    C0] CR2: 00007fffec932538 CR3: 000000000df36000 CR4: 00000000000006f0
[  480.732121][    C0] Call Trace:
[  480.732129][    C0]  <TASK>
[  480.732133][    C0]  default_idle+0x13/0x20
[  480.732148][    C0]  default_idle_call+0x74/0xb0
[  480.732162][    C0]  do_idle+0x1e8/0x510
[  480.732176][    C0]  ? __pfx_do_idle+0x10/0x10
[  480.732193][    C0]  cpu_startup_entry+0x44/0x60
[  480.732203][    C0]  rest_init+0x2de/0x300
[  480.732218][    C0]  start_kernel+0x3a9/0x410
[  480.732233][    C0]  x86_64_start_reservations+0x24/0x30
[  480.732248][    C0]  x86_64_start_kernel+0x143/0x1c0
[  480.732262][    C0]  common_startup_64+0x13e/0x147
[  480.732283][    C0]  </TASK>
[  480.732912][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  480.803661][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  480.807492][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.811617][   T34] Call Trace:
[  480.813049][   T34]  <TASK>
[  480.814341][   T34]  dump_stack_lvl+0x99/0x250
[  480.816378][   T34]  ? __asan_memcpy+0x40/0x70
[  480.818413][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.820707][   T34]  ? __pfx__printk+0x10/0x10
[  480.822745][   T34]  vpanic+0x281/0x750
[  480.824511][   T34]  ? __pfx_vpanic+0x10/0x10
[  480.826505][   T34]  ? preempt_schedule+0xae/0xc0
[  480.828662][   T34]  ? preempt_schedule_common+0x83/0xd0
[  480.830972][   T34]  panic+0xb9/0xc0
[  480.832602][   T34]  ? __pfx_panic+0x10/0x10
[  480.834580][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  480.836939][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  480.839616][   T34]  watchdog+0xfd2/0xfe0
[  480.841379][   T34]  ? watchdog+0x1de/0xfe0
[  480.843249][   T34]  kthread+0x711/0x8a0
[  480.844959][   T34]  ? __pfx_watchdog+0x10/0x10
[  480.846929][   T34]  ? __pfx_kthread+0x10/0x10
[  480.848909][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  480.851199][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.853369][   T34]  ? __pfx_kthread+0x10/0x10
[  480.855352][   T34]  ret_from_fork+0x439/0x7d0
[  480.857329][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  480.859489][   T34]  ? __switch_to_asm+0x39/0x70
[  480.861575][   T34]  ? __switch_to_asm+0x33/0x70
[  480.863610][   T34]  ? __pfx_kthread+0x10/0x10
[  480.865602][   T34]  ret_from_fork_asm+0x1a/0x30
[  480.867671][   T34]  </TASK>
[  480.869855][   T34] Kernel Offset: disabled
[  480.871739][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:35:43  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bea60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df56b0 RSP=ffffc9000068f650
R8 =ffff888107210237 R9 =1ffff11020e42046 R10=dffffc0000000000 R11=ffffffff854f90f0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f9167 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffec932538 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000080fe 000000000000000a XMM01=0000000702000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc900075e0000 RBX=1ffff1102118125a RCX=ffff888022953980 RDX=0000000000010000
RSI=ffff888108c08000 RDI=0000000000000017 RBP=0000000000000083 RSP=ffffc900001e0dc0
R8 =ffffffff8fa3a637 R9 =1ffffffff1f474c6 R10=dffffc0000000000 R11=ffffffff869a3af0
R12=dffffc0000000000 R13=ffff888108c092d0 R14=ffff888108c08000 R15=dffffc0000000000
RIP=ffffffff869a3b38 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8eced89800 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcb8f79d38 CR3=0000000110ae0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
