last executing test programs:

5m5.151738784s ago: executing program 2 (id=10596):
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000000)="9b0406dc29645d64c717bf9e1d4763e39703b40adf40b8753bc559c101a1f643efe5d2ef9ee8fb645fa6e4093163abd5d6da672f00d33acd13ad26ca03c8ea4b48fdcf3fedd50f8c8f914ad5babbe9720c87bf2ac06b87bd01022ad6424d694c16d9e63e1302738f993584447ecb112813ef5b1d16046381c0fe3eb3c6859c4a282ceb426693228e16ca83cffd8744e5ffbaedb9e23d0537c91578239f36d92db280000aa2e0485f3e7e81ceee9814db255dda97a71c67240688604869f606bbb74d311dfcd240a64482017e9b1f0dadd1b2cfa7bc1ddf6be3e9e7349efb16970e852182c74149bddd7692bb985da06c9682d12dc51bf5ed0fa975e21d77fd9d")
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000100)=0x400, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x4045802)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x26, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x28, '\x00', r1, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xa, 0x9, 0x81}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000005c0)=[{0x4, 0x2, 0x2, 0x9}], 0x10, 0x1ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x0, 0xec, 0xa2, &(0x7f00000006c0)="0a0234dd8c9d3c39a0d662cd29366478b61244ca5c7e8997b2444fa95f2a6b76a5832ad2fc82f3734344071a041ed06104187ef41d8f4f2bdd7ec7f98cce7b7fa91d903e170e14a18dc03996262d8c14cea0fe300146eec9f39153574e8878355ae92feb9b7e1685944333bb8b04df78b9f9f65d3ed5ea0b07d2c73ea1e392ff6c9e415c8f9e9e1376d54119d7601bb3fc4d7e5ffaff425e90359b9b46ce95e80ea626fa08a7ceac73c4fbaedbd0d94ddbb0bdbfc90989abc918a5705049204f1998db680636cd877a56d8b9fb4ed4e1244abf22964f9c4eb72322305972843cadc0ffc66edebd71b5e31e53", &(0x7f00000007c0)=""/162, 0xffff, 0x0, 0xc2, 0xbf, &(0x7f0000000880)="6f8441cc23bbb95e5b96305f8183952c36795ad43c8cf13d6221b1cec3e6db0daaa45cb875d544842fe5a57ba216e17f9869d6d21cfb737c87322ee4b0a70791eb8bb10c3cfd99eddb866c4bec986b2ddb0ae72da73ac57b3ff710f8f60c301ff131d681a081cd9af6183d7d7ae531ad7d52c950d882c7683c9ecfe65b40c3d349ca48969e3327baf1754d7133471433f9d4ac16b915eacf474b77d1ee623dc53831d611cb5487a04907483bed7c8addaa2cccd6e25e2cadd753fd210f10a0f2d181", &(0x7f0000000980)="adcdb564cd0ca9c2a173605c71ab03e1cdee7e47b74903755e1345282897b5048084066a963516ee13c25aedb59887c886e7ac777bb414d5ec5c22b64fd319bf43a1ef3e49a7b97b2fbaa8a4c2acc23a4109c61b4d6613821b725bd812187973d18842cfd39cc00e8e494b40c77ebae985b1527820e14b5fa19b483e846baf515dd7a962a64b6831d82846eb4c462a991e21d576dcc6c21c0fea8958f584676c3b27d07d74d49d953345d0f554fe00b805fa83ad3ae399fc037ce4f2cdfc28", 0x6, 0x0, 0x7}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r6, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40))
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xb0ba146449cdc56, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x4001)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xf8, 0x2, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004010}, 0x885)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000000f80)={'bond0\x00', 0x1})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r11 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r11, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x30, 0x464, 0x400, 0x70bd29, 0x25dfdbfc, "ce0a6cd65085495fd555267a9faf5f2fe09d83270cfecbe819d1078a8e75fb", [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004090)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000001240), 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r5)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x158, r12, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf29}, {0x6, 0x11, 0xfff4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xc2d4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0xfffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000001500), 0x4)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff)

5m5.020291573s ago: executing program 2 (id=10597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x20, 0x3c, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x50}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)

5m4.949680689s ago: executing program 2 (id=10598):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1) (async)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x9b0b7000) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x9b0b7000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'pimreg1\x00', @multicast})
socket$kcm(0x10, 0x2, 0x4) (async)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)=0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xffffffff, 0xf})
bind$netrom(r6, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @bcast, @null, @default, @default, @default, @bcast, @default]}, 0x48)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5m4.870193363s ago: executing program 2 (id=10600):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a670f, 0x40)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000100008f4e"], 0x0, 0x47, 0x0, 0x1, 0x100}, 0x28)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a310000000028000000000a010800000000000000000a00000008000240000000010900010073797a300000000028000000000a030000000000000000000a00000008000240000000000900010073797a30"], 0x98}}, 0x0)

5m4.752246929s ago: executing program 2 (id=10601):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000003c0)="975c49a232", &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000004c0), 0x6b, r1}, 0x38)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0, 0x0}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x14, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x2}, @alu={0x7, 0x1, 0xa, 0x4, 0xb, 0x8, 0xfffffffffffffff0}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8000}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xf, 0x0, 0x5}, 0x10, 0x278cd, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000006c0)=[{0x3, 0x1, 0x6, 0x6}, {0x545, 0x1, 0x8, 0x8}, {0x0, 0x3, 0x4, 0x4}], 0x10, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%-010d \x00'}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/11, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
r8 = socket$netlink(0x10, 0x3, 0x12)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
sendfile(r8, r9, 0x0, 0xf03a0005)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xf, 0x5, 0x32, 0x5, 0x18400, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x5, 0x18}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xf, 0x1d, &(0x7f00000003c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0x1, 0x4, 0x1, 0x80, 0x10}, @printk={@llu}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6c}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x0, 0xa, 0x8, 0x2, 0x99, 0xffffffffffffffed}], &(0x7f0000000300)='GPL\x00', 0x3, 0x3b, &(0x7f00000004c0)=""/59, 0x41100, 0x14, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, r5, 0x2, &(0x7f0000000a00)=[0xffffffffffffffff, r6, r7, r9, r10, r11, r12], &(0x7f0000000a40)=[{0x4, 0x1, 0x3}, {0x5, 0x2, 0x9, 0x9}], 0x10, 0x6}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112})
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r16=>0x0})
r17 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r17, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x80, 0x0, 0x10005}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r17, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r16, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @mcast2, 0x0, 0x0, 0x0, 0x4007}})
setsockopt$CAIFSO_REQ_PARAM(r17, 0x116, 0x80, &(0x7f0000000040)="5da448af82", 0x5)
close(0x4)

5m4.670899627s ago: executing program 2 (id=10603):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917511679abf4579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0)

5m4.532267168s ago: executing program 32 (id=10603):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917511679abf4579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0)

19.50054582s ago: executing program 1 (id=14258):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0xd}})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000180)=0x8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000400)="8f852fe1b0ef10cea92496d1ffd2056da51fba54af74c47d65da1dfea75184498a88e9ccffa060fca55a3fedcc9653eec69d77c4edc28250484dab3d0cce6b5942c8f267f7c0ad632f0896a84f856291c8bcee505907cf94d2112af8d1cbbdd64bfb4e92e66815ef6762d4618b32359227c418512fa62711eec2b4ce9de2befd7d0c041c9660cbd8b666")
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x38}}, 0x40)
r6 = socket(0x1f, 0x5, 0x9)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040)

19.390111067s ago: executing program 1 (id=14260):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x30, 0x140f, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xfffffffffffffff4, 0x45, 'ib_srpt\x00'}]}, 0x30}, 0x1, 0xfffffffc, 0x0, 0x80}, 0x20000000)

19.387222702s ago: executing program 1 (id=14262):
socket(0x10, 0x80003, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0xa}, {0x29d, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async, rerun: 32)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) (async, rerun: 32)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x5a}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x1, @empty}}, 0x0, 0x5}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) (async, rerun: 64)
unshare(0x24020400) (async, rerun: 64)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r7, &(0x7f0000000240)="94", 0x1) (async)
vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r6, r8, 0x2, 0x100000000000003) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async, rerun: 64)
socket$inet6_udp(0xa, 0x2, 0x0)

19.013639428s ago: executing program 1 (id=14270):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "49fd003900"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x4, 0x2, 0xcc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000071700010014000200fc0200000000000000000000e0160001080018004e004e221400010020010000000000000000000000000001"], 0x4c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

18.948217672s ago: executing program 1 (id=14271):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81})
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)
r1 = socket$inet6(0xa, 0x5, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xa}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000004000000b73d000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000890000000000000000008000"/31], 0x48)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0a0006e92554130008021100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6erspan0\x00', <r9=>0x0})
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14)
socket(0x10, 0x3, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r11 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82307201, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r12=>0x0})
connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10)
sendmsg$can_bcm(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="010000004008000000000000000000009c459c3e10c799609377dbb03e6033de88b9ee96c9161d3ec84ac73f32c55632f7c086ca8afb7571e2ce9a0897f62ba081", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0)
clock_gettime(0x0, &(0x7f00000010c0)={<r13=>0x0, <r14=>0x0})
sendmsg$can_bcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="02000000010000000300000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r13, @ANYRES64=r14/1000+60000, @ANYBLOB="030000e02dfbd13f0400008000020000f467aef0f23fe738"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)

18.876042352s ago: executing program 1 (id=14275):
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x40044)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000400)={0x0, @aes128, 0x0, @desc1})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200), 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000480)={0x80000000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r7, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x3ffffffe, @remote, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc004040}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x48, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2a}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40040)

18.429365328s ago: executing program 3 (id=14280):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_int(r1, &(0x7f00000003c0)=0x7, 0x12) (async)
read$rfkill(r1, &(0x7f0000000080), 0x8)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002380)={'dummy0\x00', 0x0}) (async)
bind$bt_hci(r0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="670000008c400000760000000000000027000000000000009500000000000000dbfd0b9b7cea8f79e657849ff83588bc3ea414a717977e57"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000aac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8062844}, 0x0)
r5 = socket(0xa, 0x3, 0xff)
getsockopt$sock_int(r5, 0x1, 0x2, 0x0, &(0x7f0000000040))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private=0xfffffffc, 0x0, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x24}, {0x40000000000, 0x0, 0x0, 0x8000000000000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x200000}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@private0}]}, 0x104}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000))
ioctl$FIONCLEX(r6, 0x5450) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8b15, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, <r8=>0x0}, &(0x7f0000000340)=0xfffffffffffffeb9)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x0) (async)
ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f00000000c0))
socket$inet(0x2, 0x1, 0x0) (async)
sendto$rose(r6, &(0x7f0000000280)="d317840d985e541299b3fccaf28458d524b391ef36078894739f8c69275f3429511c75e1a5ef2f9d9c7014e6033afb5f86bf39565f5744a476b13cb0f22fd446c83f27dfc92adcae5b93655989ff8e86b50ecf291d7073eaaf6c6e2ee42a23314d63c7343f31f2a1986b6b22e4af4a083a7e83dbf907fed6dd9338993ed081e94cbec637a78833eccd037b2ed28cd291ac4099730850339ef78affebab1781e261c0cc0404994bf567c401bec863a1ed1d2cc0bb08d6369752b806", 0xbb, 0x10, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}, 0x40) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r10, 0x104, 0x2, &(0x7f0000000040)=0x3, 0x4) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

18.330347598s ago: executing program 3 (id=14281):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="63ec436946dc7634cb41c9f7b943", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000008000000000000000000009b0be5edef5b9ac652aef2872d16f6ac8c9b0bb7186f472aaace9246ccf78407647f4fab91e64a67148c9d126744c000554befbe4178817382062efcac1d9b589099e5f23a839a5705a451b0d908311ad26cf1fb85e1cf45c348d49d7a32fec2a6edd72e028c9d5289c90b62cc48ae0932f963190f60df706b44aad24eddc3c79f3cdc4fa03d037c31e607d82bd067718ea16f2193fdb33044b23a868d7c853d9406c131e2a5a220eed65c8208"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r7, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000000100000000000000ff25000000000000", @ANYRES32=0x0, @ANYBLOB="41000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r5, @ANYBLOB], 0x40}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))

18.230323947s ago: executing program 3 (id=14282):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x140b, 0x300, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)

18.160039407s ago: executing program 3 (id=14283):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2, 0x4902, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10501, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.'])
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$FICLONE(r9, 0x40049409, r7)

18.158755457s ago: executing program 3 (id=14284):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@deltclass={0x474, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x4, 0x9}, {0xb, 0xc}}, [@c_atm={{0x8}, {0x38, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x3}}, @TCA_ATM_HDR={0x29, 0x3, "b27ce56d7bd66b577e2a00fa2a6f8cad70c37fd0b6897c949b3eae33effdff0994e913a6b5"}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x80000001, 0x0, 0x7, 0x6, 0x10001, 0x1, 0x0, 0x87e0, 0x44, 0x1c, 0xebe, 0x8, 0x2, 0x8001, 0x10000, 0x6, 0x6, 0x5, 0x4, 0x8, 0xc, 0x6, 0xfff, 0x1, 0x9, 0xffffff40, 0x5, 0x7, 0xa, 0x8529, 0x0, 0x1bc2, 0x2, 0x7, 0x5690bb00, 0x0, 0x1, 0x4ac9, 0x6, 0x7fff, 0xa3, 0x7, 0x2, 0x81, 0x1, 0x4, 0xffff710f, 0x10000, 0x2, 0x1, 0xe541380, 0x40, 0x0, 0x100, 0x6, 0x40, 0x5, 0x6, 0x8, 0x1, 0x4, 0x2, 0x9, 0x4, 0x3, 0xfd, 0x440f, 0x6, 0x3b, 0x7, 0x1, 0x5, 0x1, 0x38000000, 0x1, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x800000, 0x8, 0x1, 0xd6, 0x2, 0x4, 0x0, 0x30, 0x5, 0x7fa7, 0xffff, 0x878a, 0x1, 0xfffffff8, 0x4, 0x2, 0x6, 0x7, 0x9, 0x1, 0x50000000, 0x8, 0x7fffffff, 0xffff, 0x2, 0x6, 0x4, 0x2, 0xd13, 0x3, 0x7ff, 0x2, 0xfff, 0x6, 0xfffffffd, 0x24f0, 0x0, 0x6, 0x8, 0x80000000, 0xff, 0x6, 0xfffffffb, 0xffff7fff, 0xb02, 0x2, 0x9, 0x200, 0x80000001, 0x0, 0xa6, 0x2, 0x80000000, 0x5, 0xfffffff9, 0x2, 0x0, 0x4, 0x7, 0x47, 0xc0, 0xd1b7, 0x2, 0x8, 0xddf3, 0x8, 0x4, 0x80000000, 0x9, 0x6, 0x9, 0x100, 0x6, 0x1, 0x6, 0xe, 0xfffffff8, 0x2, 0x5, 0x7, 0x611, 0x0, 0x8, 0x0, 0x3, 0x2, 0x3, 0x3, 0x6, 0x4, 0x7, 0x9, 0x94, 0xe74, 0x80000000, 0x63, 0x8, 0x3, 0x0, 0x7, 0x6, 0x155a, 0x2, 0x401, 0x5, 0x7ff, 0x8, 0x4, 0x2, 0xbf4b, 0x2, 0x1, 0x401, 0x7, 0x0, 0x6, 0x800, 0x2, 0x0, 0x9, 0x9, 0x4, 0x4, 0x29, 0x800, 0x4, 0x45df, 0x9, 0x7fff, 0x2, 0x7f, 0x8, 0x0, 0x5, 0x2, 0x0, 0x6, 0x90, 0xfffffff7, 0x3, 0x8, 0x81, 0xff, 0x5, 0x9, 0x6, 0x8, 0x6, 0x400, 0x9d, 0x7fffffff, 0x80, 0xb, 0xffff, 0x6, 0x2, 0xa, 0x12a1, 0x5, 0x8, 0x0, 0x3, 0x7, 0xe755, 0x3, 0xa65f, 0x3, 0x6dbc, 0x7, 0x2, 0x1, 0x81, 0x100, 0x401, 0xc6]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101, 0x4018}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8db1b}]}}}]}, 0x44}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40094)

18.078670841s ago: executing program 3 (id=14286):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200338a0000280012800b0001006d61637365630000180002800c0004000400000100c28000050006000100000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

16.210796777s ago: executing program 0 (id=14297):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async)
r1 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x30, 0x3, 0x51, 0xfffff074}]}, 0x10)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$inet6(0xa, 0x2, 0x0) (async)
syz_emit_ethernet(0xd6f, &(0x7f0000001280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "efdf22", 0xd39, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x2f, 0xa, 0x4, 0x5, 0x11, 0x8, 0x6, [@remote, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, @local, @mcast1]}, @srh={0xc, 0x8, 0x4, 0x4, 0x2, 0x40, 0x1, [@mcast1, @mcast2, @private2, @mcast2]}, @hopopts={0x67, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x32, 0x16e, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0xfb, 0xb6d, "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"}]}], {0x4e20, 0x4e20, 0xf9, 0x0, @gue={{0x2, 0x1, 0x3, 0x9}, "ec214c88c5b5fab209fd8c6777d6f72fc0c4d1f01926328d871e69436cd7afeb66b5507aa0ef5bef87f06eabc61540fd2f022b27e689aef9bfd3cecab0acaf4ed328b7af1beba1619f0ddccfdc43c0024cfeae03efe2170bb8135331ac32516e8e37f9198cccb0577d2f54b25dbfb9a31f35b8594cf01cc189353acc433e7b4396e54bfeb4761f565e6c963903debf0644b31e8a2582cdb8b9c627f8f23b616e3cea4c9ea9f0fc3b0f7f625091564739d7a3338b8667e2307bcfd4d04a4beac2173964f59edd44b52856c1ef6563e96ef5ef1413f9049351aa6b9b2dce32111c296489583307bfbdf5"}}}}}}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0800000004000000040000000200010000000000a11189bd1a90b501e53dec54d85583cd6bcd004667398391007eb1a3c1d40d0772121b8f4ffb3685dde5e1c8f8b940e1e7f1025cdd34b367347349f7d54edaf298f1893fbd53a7aee4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x50)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000ec030100000000000000000f0000000a14000000f8030100000000fcffffff0c0000000a5bc9bb2006deeb7860803a981ef56dc46154ad632ab31cd5a43d64457920192ce32e0404000000000000005d1215014f3bf321c1c82c454f314f4fd31e47552cfc319f79201ec1f8319e2e7e967923b77aaf12f57f7a50881e15b020034beacc1bcaa0c931e04c4ac8ccd22c9e6737cc"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) (async)
close(0x3)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async)
getsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000380)=""/134, &(0x7f00000002c0)=0x86) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x4, 0x7, 0x3}, 0x10) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xa}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x8000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
listen(0xffffffffffffffff, 0xa596)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x140, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1112}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1}}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x10000}, 0x2000c000) (async)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000b40)={0x400, 0x4, 0xffffff01, 0x2}, 0x10)
sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x3, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@rthdrdstopts={{0x14, 0x29, 0x37, {0x3a}}}], 0x14}, 0x4028090) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0)

16.127188583s ago: executing program 0 (id=14298):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed', 0x9)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x5, r3, 0x4}, 0x38)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})

15.271046019s ago: executing program 0 (id=14299):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000a62000/0x2000)=nil, 0x2000, 0x200000a, 0x13, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x13}}]}, 0x30}}, 0x4048000)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x66)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r7=>0x0})
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2, [0x0, 0x0, 0x6], [0x0, 0x4]}, 0x400}}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r4}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r9=>0x0, 0x8000, 0x8000, 0x9, 0x5, {{0x29, 0x4, 0x0, 0x11, 0xa4, 0x66, 0x0, 0xe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, {[@rr={0x7, 0xb, 0x65, [@remote, @multicast2]}, @timestamp_addr={0x44, 0x54, 0x47, 0x1, 0x2, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@private=0xa010102, 0x4}, {@empty, 0x27}, {@loopback, 0x7}, {@local, 0x6}, {@multicast2, 0x3c1400}, {@empty, 0x8}, {@empty, 0x5}, {@broadcast, 0x1}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x7, 0xe, "49a472a2ec4545d9675844a3"}]}, @generic={0x86, 0x2}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xa0, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x80000001}, {@broadcast, 0x8}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', <r10=>0x0, 0x4, 0xb7, 0xa, 0x7, 0x28, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x10, 0x2, 0x2}})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@RTM_DELMDB={0x78, 0x55, 0x1, 0x70bd2b, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x2, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x3, {@in6_addr=@mcast1, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x2, 0x3, {@ip4=@multicast2, 0x8edd}}}]}, 0x78}}, 0x0)

15.210778636s ago: executing program 0 (id=14300):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd998}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x284d7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r2, 0x0)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="50c2000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="002805000044000008000300", @ANYRES32=0x0, @ANYBLOB="680f0f79de20d9d6dba095ecb022b87c92c22d5922c6488f4621b8e037f6c7d7897cfa27d8711555b2a27394acc0aa"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

15.208045168s ago: executing program 0 (id=14301):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000600)={r1, 0x9}, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x62, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0)

15.120845504s ago: executing program 0 (id=14302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e)
r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{}, [@rose, @netrom, @null, @default, @bcast, @default, @default]}, &(0x7f0000000200)=0x48, 0x800)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400))
r4 = accept$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r6, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r4}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1a0200000000000000007dfc000000000000009500000000aaf6646f0001000000010000000000000000070000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300020000000000fbdbdf25fc0000000000000000000000000000000000001200000000000000000000000000000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x50)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000012c0)="ed0d85df9774992f080000000000", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.991786737s ago: executing program 33 (id=14275):
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x40044)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000400)={0x0, @aes128, 0x0, @desc1})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200), 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000480)={0x80000000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r7, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x3ffffffe, @remote, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000012000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc004040}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x48, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2a}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40040)

2.949068435s ago: executing program 34 (id=14286):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200338a0000280012800b0001006d61637365630000180002800c0004000400000100c28000050006000100000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

0s ago: executing program 35 (id=14302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e)
r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{}, [@rose, @netrom, @null, @default, @bcast, @default, @default]}, &(0x7f0000000200)=0x48, 0x800)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400))
r4 = accept$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r6, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r4}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1a0200000000000000007dfc000000000000009500000000aaf6646f0001000000010000000000000000070000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300020000000000fbdbdf25fc0000000000000000000000000000000000001200000000000000000000000000000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x50)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000012c0)="ed0d85df9774992f080000000000", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

process `syz.3.12694'.
[  807.927509][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12694'.
[  807.933433][ T9705] netlink: 'syz.3.12694': attribute type 1 has an invalid length.
[  808.019613][ T9718] tipc: New replicast peer: 255.255.255.255
[  808.022125][ T9718] tipc: Enabled bearer <udp:syz2>, priority 6
[  808.024241][T11315] wg1 speed is unknown, defaulting to 1000
[  808.026293][T11315] syz: Port: 1 Link ACTIVE
[  808.078947][ T9720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.180854][ T9736] bridge79: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  808.225449][ T9745] x_tables: duplicate underflow at hook 3
[  808.318325][ T9755] openvswitch: netlink: nsh attr 60 is out of range max 3
[  808.321265][ T9755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  808.350650][ T9762] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  808.386151][ T9770] netlink: 'syz.3.12711': attribute type 8 has an invalid length.
[  808.656777][ T9785] syz_tun: entered promiscuous mode
[  808.659425][ T9785] geneve0: entered promiscuous mode
[  808.663874][ T9785] debugfs: 'hsr0' already exists in 'hsr'
[  808.668071][ T9785] Cannot create hsr debugfs directory
[  808.670091][ T9785] hsr0: entered promiscuous mode
[  808.769860][ T9798] x_tables: duplicate underflow at hook 3
[  808.947055][ T9808] bond26: option miimon: invalid value (18446744073709551607)
[  808.950094][ T9808] bond26: option miimon: allowed values 0 - 2147483647
[  808.955221][ T9808] bond26 (unregistering): Released all slaves
[  809.149033][ T9820] netlink: 'syz.0.12731': attribute type 3 has an invalid length.
[  809.218720][ T9828] netlink: 'syz.3.12734': attribute type 1 has an invalid length.
[  809.328579][ T9831] 8021q: adding VLAN 0 to HW filter on device bond1
[  809.348059][ T9833] vet0_virt_wif: Caught tx_queue_len zero misconfig
[  809.432340][ T9837] xt_l2tp: v2 doesn't support IP mode
[  809.434524][ T9838] xt_l2tp: v2 doesn't support IP mode
[  809.467136][ T9840] team0: entered promiscuous mode
[  809.468789][ T9840] team0: entered allmulticast mode
[  809.470760][ T9840] 8021q: adding VLAN 0 to HW filter on device team0
[  809.484449][ T9840] team6: entered promiscuous mode
[  809.486128][ T9840] team6: entered allmulticast mode
[  809.488002][ T9840] 8021q: adding VLAN 0 to HW filter on device team6
[  809.571037][ T9846] vlan6: entered promiscuous mode
[  809.772094][ T9857] tap0: tun_chr_ioctl cmd 1074025681
[  810.126261][ T9871] bond99 (unregistering): Released all slaves
[  810.770145][ T9864] workqueue: Failed to create a rescuer kthread for wq "bond80": -EINTR
[  810.886605][ T9891] netlink: 'syz.3.12750': attribute type 1 has an invalid length.
[  810.910695][ T9891] 8021q: adding VLAN 0 to HW filter on device bond27
[  811.003755][ T9895]  speed is unknown, defaulting to 1000
[  811.006386][ T9895] wg1 speed is unknown, defaulting to 1000
[  811.009075][ T9895] ip6_vti0 speed is unknown, defaulting to 1000
[  811.075553][ T9897] bridge: RTM_NEWNEIGH with invalid ether address
[  811.080204][ T9902] netlink: 'syz.0.12754': attribute type 1 has an invalid length.
[  811.163787][ T9902] 8021q: adding VLAN 0 to HW filter on device bond100
[  811.169124][ T9902] bond99: (slave bond100): making interface the new active one
[  811.173275][ T9902] bond99: (slave bond100): Enslaving as an active interface with an up link
[  811.176759][ T9908] netlink: 'syz.1.12755': attribute type 6 has an invalid length.
[  811.190111][ T9902] 8021q: adding VLAN 0 to HW filter on device bond99
[  811.203325][ T9908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  811.223360][ T9902] vlan6: entered promiscuous mode
[  811.225867][ T9902] bond99: entered promiscuous mode
[  811.227941][ T9902] bond100: entered promiscuous mode
[  811.307869][ T9895] wg1 speed is unknown, defaulting to 1000
[  811.335619][ T9914] team0 (uninitialized): Failed to send options change via netlink (err -105)
[  811.360981][ T9914] team0: entered promiscuous mode
[  811.363153][ T9914] team0: entered allmulticast mode
[  811.446769][ T9925] netlink: 'syz.0.12762': attribute type 10 has an invalid length.
[  811.647756][ T9941] netlink: 'syz.1.12767': attribute type 10 has an invalid length.
[  811.798257][ T9949] IPVS: length: 132 != 8
[  811.925869][ T9958]  speed is unknown, defaulting to 1000
[  811.928657][ T9958] wg1 speed is unknown, defaulting to 1000
[  811.934764][ T9958] ip6_vti0 speed is unknown, defaulting to 1000
[  812.224064][ T9988] __nla_validate_parse: 26 callbacks suppressed
[  812.224076][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12781'.
[  812.266802][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12781'.
[  812.326464][ T9958] wg1 speed is unknown, defaulting to 1000
[  812.497835][T10004] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12785'.
[  812.545856][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12785'.
[  812.573718][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12786'.
[  812.600045][ T9995] Bluetooth: MGMT ver 1.23
[  812.716328][T10013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12789'.
[  812.801017][T10020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12790'.
[  812.811239][T10027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12792'.
[  812.827530][T10029] gre0: entered promiscuous mode
[  812.829199][T10029] gre0: entered allmulticast mode
[  813.009665][T10034] x_tables: ip6_tables: mh match: only valid for protocol 135
[  813.030510][T10034] vlan1 (unregistering): left allmulticast mode
[  813.033047][T10034] 1{X: left allmulticast mode
[  813.034627][T10034] vlan1 (unregistering): left promiscuous mode
[  813.038196][T10034] bridge0: port 1(vlan1) entered disabled state
[  813.051341][T10023] syzkaller1: entered promiscuous mode
[  813.061902][T10023] syzkaller1: entered allmulticast mode
[  813.313079][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12800'.
[  813.340488][T10059] 8021q: adding VLAN 0 to HW filter on device batadv1
[  813.346053][T10059] bond29: (slave batadv1): Enslaving as an active interface with an up link
[  813.349890][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12800'.
[  813.355902][T10059] 8021q: adding VLAN 0 to HW filter on device bond29
[  813.390585][T10067] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  813.423437][T10071] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3607818377/3607818379
[  813.470194][T10074]  speed is unknown, defaulting to 1000
[  813.475087][T10074] wg1 speed is unknown, defaulting to 1000
[  813.479478][T10075] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3607818377/3607818379
[  813.479929][T10074] ip6_vti0 speed is unknown, defaulting to 1000
[  813.483135][T10075] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3607818377/3607818379
[  813.632327][T10079] validate_nla: 1 callbacks suppressed
[  813.632341][T10079] netlink: 'syz.0.12805': attribute type 5 has an invalid length.
[  813.647034][T10079] netlink: 'syz.0.12805': attribute type 6 has an invalid length.
[  813.713882][T10074] wg1 speed is unknown, defaulting to 1000
[  814.298399][T10097] tipc: Resetting bearer <eth:syzkaller0>
[  814.379849][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  814.382945][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  814.385427][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  814.388053][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  814.575436][T10108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  814.633955][T10110] block nbd5: Unsupported socket: should be TCP or UNIX.
[  814.844842][T10123] netlink: 'syz.0.12819': attribute type 1 has an invalid length.
[  814.890091][T10116] bond101: (slave vxcan5): The slave device specified does not support setting the MAC address
[  814.902132][T10116] bond101: (slave vxcan5): Setting fail_over_mac to active for active-backup mode
[  814.909469][T10116] bond101: (slave vxcan5): making interface the new active one
[  814.913749][T10116] bond101: (slave vxcan5): Enslaving as an active interface with an up link
[  814.927312][T10116] bond101 (unregistering): (slave vxcan5): Releasing backup interface
[  814.941531][T10116] bond101 (unregistering): Released all slaves
[  815.146226][T10133]  speed is unknown, defaulting to 1000
[  815.149046][T10133] wg1 speed is unknown, defaulting to 1000
[  815.151656][T10133] ip6_vti0 speed is unknown, defaulting to 1000
[  815.418302][T10133] wg1 speed is unknown, defaulting to 1000
[  815.444941][T10146] netlink: 'syz.1.12827': attribute type 1 has an invalid length.
[  815.959720][T10170] netlink: 'syz.3.12836': attribute type 1 has an invalid length.
[  815.974576][T10170] bond30: entered promiscuous mode
[  815.976478][T10170] 8021q: adding VLAN 0 to HW filter on device bond30
[  815.997219][T10170] 8021q: adding VLAN 0 to HW filter on device bond30
[  816.001167][T10170] bond30: (slave wireguard2): The slave device specified does not support setting the MAC address
[  816.006826][T10170] bond30: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  816.013609][T10170] bond30: (slave wireguard2): making interface the new active one
[  816.017267][T10170] wireguard2: entered promiscuous mode
[  816.019743][T10170] bond30: (slave wireguard2): Enslaving as an active interface with an up link
[  816.028297][T10170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  816.030553][T10170] IPv6: NLM_F_CREATE should be set when creating new route
[  816.032942][T10170] IPv6: NLM_F_CREATE should be set when creating new route
[  816.035475][T10170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  816.041328][T10170] bond30: (slave wireguard3): The slave device specified does not support setting the MAC address
[  816.048390][T10170] bond30: (slave wireguard3): Enslaving as a backup interface with an up link
[  816.461387][T10199] netlink: 'syz.1.12846': attribute type 8 has an invalid length.
[  816.463471][T10200] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  816.574525][T10203] Set syz0 is full, maxelem 0 reached
[  816.648649][T10207] netlink: 'syz.1.12850': attribute type 1 has an invalid length.
[  816.655105][T10207] batadv0: entered promiscuous mode
[  816.657379][T10207] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  816.769723][T10215] netlink: 'syz.1.12853': attribute type 3 has an invalid length.
[  816.773730][T10216] netlink: 'syz.1.12853': attribute type 3 has an invalid length.
[  816.813243][T10219] netlink: 'syz.1.12854': attribute type 2 has an invalid length.
[  816.819844][T10219] @;: entered promiscuous mode
[  817.545004][T10253] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  817.569914][T10251] bond31: option arp_validate: invalid value (18446744073491447809)
[  817.574427][T10251] bond31 (unregistering): Released all slaves
[  817.585034][T10253] __nla_validate_parse: 21 callbacks suppressed
[  817.585045][T10253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12868'.
[  817.704720][T10258] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  817.707681][T10258] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  817.759562][T10261] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  817.805718][T10261] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  817.857489][T10261] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  817.920317][T10261] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  818.014918][T31250] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  818.027220][T31250] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  818.046017][T31250] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  818.051134][T31250] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  818.108052][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12876'.
[  818.173353][T10283] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  818.240375][T10287] dvmrp1: entered allmulticast mode
[  818.254093][T10287] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12878'.
[  818.254198][T10289] dvmrp0: left allmulticast mode
[  818.259850][T10289] dvmrp1: left allmulticast mode
[  818.448506][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12880'.
[  818.572033][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12882'.
[  818.575148][T10300]  speed is unknown, defaulting to 1000
[  818.577010][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12882'.
[  818.578443][T10300] wg1 speed is unknown, defaulting to 1000
[  818.584256][T10300] ip6_vti0 speed is unknown, defaulting to 1000
[  818.597382][T10303] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12882'.
[  818.601180][T10303] 0{X: renamed from  (while UP)
[  818.606885][T10303] 0{X: entered allmulticast mode
[  818.609472][T10303] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  818.618962][T10304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12881'.
[  818.728507][T10311] blkio.reset_stats is deprecated
[  818.739168][T10311] validate_nla: 3 callbacks suppressed
[  818.739187][T10311] netlink: 'syz.0.12885': attribute type 4 has an invalid length.
[  818.782370][T10311] macsec1: entered promiscuous mode
[  818.802602][T10300] wg1 speed is unknown, defaulting to 1000
[  818.829443][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12886'.
[  818.858579][T10315]  speed is unknown, defaulting to 1000
[  818.861274][T10315] wg1 speed is unknown, defaulting to 1000
[  818.870758][T10315] ip6_vti0 speed is unknown, defaulting to 1000
[  818.966955][T10322]  speed is unknown, defaulting to 1000
[  818.973525][T10322] wg1 speed is unknown, defaulting to 1000
[  818.998068][T10330] netlink: 27 bytes leftover after parsing attributes in process `syz.0.12889'.
[  819.066268][T10335] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  819.070142][T10335] netlink: 'syz.0.12891': attribute type 10 has an invalid length.
[  819.088301][T10322] ip6_vti0 speed is unknown, defaulting to 1000
[  819.117551][T10338] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  819.512824][T10315] wg1 speed is unknown, defaulting to 1000
[  819.689087][T10356] netlink: 'syz.0.12895': attribute type 5 has an invalid length.
[  819.734193][T10322] wg1 speed is unknown, defaulting to 1000
[  819.998369][T10366] netlink: 'syz.3.12898': attribute type 8 has an invalid length.
[  820.104662][T10368] gretap6: entered promiscuous mode
[  820.574042][T10382] netlink: 'syz.3.12902': attribute type 1 has an invalid length.
[  820.622876][T10382] 8021q: adding VLAN 0 to HW filter on device bond31
[  820.640174][T10382] veth9: entered promiscuous mode
[  820.709268][T10387] netlink: 'syz.3.12904': attribute type 1 has an invalid length.
[  820.732571][T10387] 8021q: adding VLAN 0 to HW filter on device bond32
[  820.897582][T10387] bond32 (unregistering): Released all slaves
[  820.996441][T10392] netlink: 'syz.1.12906': attribute type 1 has an invalid length.
[  821.016548][T10392] bond81: entered promiscuous mode
[  821.018344][T10392] bond81: entered allmulticast mode
[  821.020457][T10392] 8021q: adding VLAN 0 to HW filter on device bond81
[  821.074863][T10405] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  821.127955][T10407] netlink: 'syz.1.12910': attribute type 8 has an invalid length.
[  821.256150][T10418] netlink: 'syz.1.12914': attribute type 1 has an invalid length.
[  821.367836][T10426] can: request_module (can-proto-0) failed.
[  821.626802][T10450] netlink: 'syz.3.12922': attribute type 4 has an invalid length.
[  821.708829][T10459] macsec1: entered promiscuous mode
[  821.711980][T10459] bridge0: port 2(macsec1) entered blocking state
[  821.715042][T10459] bridge0: port 2(macsec1) entered disabled state
[  821.717903][T10459] macsec1: entered allmulticast mode
[  821.720225][T10459] bridge0: entered allmulticast mode
[  821.742947][T10459] macsec1: left allmulticast mode
[  821.749489][T10459] bridge0: left allmulticast mode
[  822.174542][T10495] 8021q: VLANs not supported on ip_vti0
[  822.309734][T10515] bond82: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  822.315556][T10515] bond82 (unregistering): Released all slaves
[  822.597004][T10532] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  822.641153][T10534] __nla_validate_parse: 19 callbacks suppressed
[  822.641171][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12946'.
[  822.651062][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12946'.
[  822.698268][T10539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12947'.
[  822.714046][T10539] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  822.721727][T10539] bond5: (slave macvlan7): Enslaving as a backup interface with a down link
[  822.726015][T10539] veth0_to_bridge: left allmulticast mode
[  822.728487][T10539] veth0_to_bridge: left promiscuous mode
[  822.731138][T10539] bridge0: port 1(veth0_to_bridge) entered disabled state
[  822.738086][T10539] bond77: (slave geneve0): Releasing active interface
[  822.743317][T10539] bond78: (slave bridge78): Releasing active interface
[  822.749788][T10539] bond5: (slave macvlan7): Releasing backup interface
[  823.139043][T10548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12950'.
[  823.164501][T10548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12950'.
[  823.267414][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12951'.
[  823.673923][T10566] rdma_rxe: rxe_newlink: failed to add xfrm0
[  823.741731][T10570] gre0: left promiscuous mode
[  823.744651][T10570] team_slave_0: left promiscuous mode
[  823.746580][T10570] tipc: Resetting bearer <eth:syzkaller0>
[  823.749252][T10570] syzkaller0: left promiscuous mode
[  823.753707][T10570] batadv0: left promiscuous mode
[  823.756916][T10570] veth45: left promiscuous mode
[  823.758639][T10570] vlan4: left promiscuous mode
[  823.760371][T10570] bond71: left promiscuous mode
[  823.762175][T10570] bond73: left promiscuous mode
[  823.763892][T10570] veth49: left promiscuous mode
[  823.765655][T10570] geneve9: left promiscuous mode
[  823.767352][T10570] team0: left promiscuous mode
[  823.769848][T10570] gretap6: left promiscuous mode
[  823.777180][T10570] bond81: left promiscuous mode
[  824.148737][T10583] vlan5: entered promiscuous mode
[  824.151282][T10585] mac80211_hwsim hwsim79 ;: renamed from wlan0
[  824.234261][T10590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12963'.
[  824.314408][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12964'.
[  824.319845][T10595] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12964'.
[  824.407977][T10601] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12965'.
[  824.604640][T10617] validate_nla: 2 callbacks suppressed
[  824.604653][T10617] netlink: 'syz.0.12967': attribute type 4 has an invalid length.
[  824.609732][T10617] netlink: 'syz.0.12967': attribute type 2 has an invalid length.
[  824.613776][T10617] netlink: 'syz.0.12967': attribute type 11 has an invalid length.
[  824.827709][T10639] x_tables: duplicate underflow at hook 2
[  824.916865][T10649] netlink: 'syz.1.12974': attribute type 1 has an invalid length.
[  824.937464][T10644] IPVS: Scheduler module ip_vs_ not found
[  824.952345][T10649] 8021q: adding VLAN 0 to HW filter on device bond82
[  825.004471][T10649] 8021q: adding VLAN 0 to HW filter on device bond82
[  825.007118][T10649] bond82: (slave vxcan1): The slave device specified does not support setting the MAC address
[  825.013098][T10649] bond82: (slave vxcan1): Error -95 calling set_mac_address
[  825.037314][T10656] netlink: 'syz.0.12975': attribute type 4 has an invalid length.
[  825.148859][T10657]  speed is unknown, defaulting to 1000
[  825.166140][T10649] veth65: entered promiscuous mode
[  825.172344][T10649] bond82: (slave veth65): Enslaving as an active interface with a down link
[  825.175729][T10657] wg1 speed is unknown, defaulting to 1000
[  825.179117][T10657] ip6_vti0 speed is unknown, defaulting to 1000
[  825.321098][T10676] bond101 (unregistering): Released all slaves
[  825.486791][T10682]  speed is unknown, defaulting to 1000
[  825.490123][T10682] wg1 speed is unknown, defaulting to 1000
[  825.494469][T10682] ip6_vti0 speed is unknown, defaulting to 1000
[  825.605895][T10657] wg1 speed is unknown, defaulting to 1000
[  825.755120][T10694] bond83: Unable to set up delay as MII monitoring is disabled
[  825.760479][T10694] bond83 (unregistering): Released all slaves
[  825.874156][T10682] wg1 speed is unknown, defaulting to 1000
[  825.990328][T10710] 0{X: entered promiscuous mode
[  825.992410][T10710] macsec3: entered promiscuous mode
[  825.994240][T10710] macsec3: entered allmulticast mode
[  825.998050][T10710] 0{X: left promiscuous mode
[  826.031118][T10711] 0{X: entered promiscuous mode
[  826.033092][T10711] macsec3: entered promiscuous mode
[  826.034860][T10711] macsec3: entered allmulticast mode
[  826.044576][T10711] 0{X: left promiscuous mode
[  826.234604][T10718] bond101: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  826.240305][T10718] bond101 (unregistering): Released all slaves
[  826.363865][T10727] netlink: 'syz.0.12994': attribute type 16 has an invalid length.
[  826.483032][T10730] bond32: option resend_igmp: invalid value (2878)
[  826.485422][T10730] bond32: option resend_igmp: allowed values 0 - 255
[  826.489602][T10730] bond32 (unregistering): Released all slaves
[  826.520349][T10735] veth0: Caught tx_queue_len zero misconfig
[  826.889031][T10750] bond101: invalid ARP target 0.0.0.0 specified for addition
[  826.892218][T10750] bond101: option arp_ip_target: invalid value (0)
[  826.896709][T10750] bond101 (unregistering): Released all slaves
[  826.975205][T10755]  speed is unknown, defaulting to 1000
[  826.983304][T10755] wg1 speed is unknown, defaulting to 1000
[  826.987023][T10755] ip6_vti0 speed is unknown, defaulting to 1000
[  827.097251][T10769] bond83: ARP target 9.0.0.0 is already present
[  827.099970][T10769] bond83: option arp_ip_target: invalid value (9)
[  827.109660][T10769] bond83 (unregistering): Released all slaves
[  827.263124][T10777] netlink: 'syz.1.13006': attribute type 1 has an invalid length.
[  827.327312][T10777] bond83: entered promiscuous mode
[  827.329330][T10777] bond83: entered allmulticast mode
[  827.331871][T10777] 8021q: adding VLAN 0 to HW filter on device bond83
[  827.376559][T10755] wg1 speed is unknown, defaulting to 1000
[  827.443755][T10790] x_tables: duplicate underflow at hook 1
[  827.614050][T10808] netlink: 'syz.1.13016': attribute type 1 has an invalid length.
[  827.675724][T10808] bond84 (unregistering): Released all slaves
[  827.730972][T10814] __nla_validate_parse: 24 callbacks suppressed
[  827.730988][T10814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13016'.
[  827.896219][T10825] netlink: 112 bytes leftover after parsing attributes in process `syz.1.13021'.
[  827.933839][T10829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13023'.
[  827.944440][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13024'.
[  827.949820][T10829] vlan1: entered promiscuous mode
[  827.986714][T10837] syzkaller0: entered promiscuous mode
[  827.998611][T10837] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  828.149025][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13027'.
[  828.259595][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13028'.
[  828.324982][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13028'.
[  828.328614][T10860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13028'.
[  828.356217][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13031'.
[  828.433718][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13032'.
[  828.436592][T10864] netlink: 'syz.1.13032': attribute type 30 has an invalid length.
[  828.444933][ T5833] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  828.447523][ T5833] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  828.450341][T10864] netlink: 'syz.1.13032': attribute type 30 has an invalid length.
[  828.454105][ T5833] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  828.456699][ T5833] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  828.687974][T10873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  828.726924][T10875] netem: change failed
[  828.852824][T10881] 8021q: adding VLAN 0 to HW filter on device bond101
[  828.882521][T10881] 8021q: adding VLAN 0 to HW filter on device bond101
[  828.885090][T10881] bond101: (slave vxcan7): The slave device specified does not support setting the MAC address
[  828.889553][T10881] bond101: (slave vxcan7): Error -95 calling set_mac_address
[  828.955939][T10887] veth59: entered promiscuous mode
[  828.957952][T10886] syzkaller0: left promiscuous mode
[  828.960276][T10886] syzkaller0: left allmulticast mode
[  829.006880][T10891] veth9: entered promiscuous mode
[  829.076668][T10898] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  829.109436][T10899] wireguard4: entered promiscuous mode
[  829.111608][T10899] wireguard4: entered allmulticast mode
[  829.177391][T10898] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  829.224693][T10907] bond102: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  829.229631][T10907] bond102 (unregistering): Released all slaves
[  829.240770][T10898] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  829.285418][T10898] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  829.357529][ T5833] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  829.373279][ T5833] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  829.394790][ T5867] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  829.410188][ T5867] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  829.518426][T10928] bond1: option mode: unable to set because the bond device has slaves
[  830.060960][T10933] bond102: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  830.067687][T10933] bond102 (unregistering): Released all slaves
[  830.464692][T10961] bond84: ARP target 9.0.0.0 is already present
[  830.467308][T10961] bond84: option arp_ip_target: invalid value (9)
[  830.473878][T10961] bond84 (unregistering): Released all slaves
[  830.673938][T10974] validate_nla: 5 callbacks suppressed
[  830.673956][T10974] netlink: 'syz.1.13064': attribute type 4 has an invalid length.
[  830.809299][T10981] netlink: 'syz.3.13067': attribute type 4 has an invalid length.
[  831.680445][T10991] netlink: 'syz.3.13069': attribute type 8 has an invalid length.
[  831.841020][T11003] bond84: option arp_validate: invalid value (18446744073491447809)
[  831.846906][T11003] bond84 (unregistering): Released all slaves
[  831.876615][T11009] bond33: ARP target 9.0.0.0 is already present
[  831.878644][T11009] bond33: option arp_ip_target: invalid value (9)
[  831.882129][T11009] bond33 (unregistering): Released all slaves
[  831.949894][T11015] xfrm0: entered promiscuous mode
[  831.952220][T11015] xfrm0: entered allmulticast mode
[  832.005274][T11017] netlink: 'syz.1.13076': attribute type 10 has an invalid length.
[  832.063929][T11024] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  832.068809][T11024] bridge: RTM_NEWNEIGH with invalid ether address
[  832.204820][T11028] netlink: 'syz.3.13083': attribute type 10 has an invalid length.
[  832.207880][T11028] batadv0: left allmulticast mode
[  832.275980][T11036] netlink: 'syz.3.13084': attribute type 1 has an invalid length.
[  832.281415][T11036] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR
[  832.283840][T11040] netlink: 'syz.1.13085': attribute type 10 has an invalid length.
[  832.306984][T11041] wg1: left promiscuous mode
[  832.308486][T11041] wg1: left allmulticast mode
[  832.361179][T11041] mac80211_hwsim hwsim102 wlan0: left promiscuous mode
[  832.365171][T11041] tipc: Resetting bearer <eth:syzkaller0>
[  832.368055][T11041] syzkaller0: left promiscuous mode
[  832.370499][T11041] syzkaller0: left allmulticast mode
[  832.378761][T11041] bond90: left promiscuous mode
[  832.381390][T11041] team4: left promiscuous mode
[  832.384055][T11041] team4: left allmulticast mode
[  832.386208][T11041] batadv7: left allmulticast mode
[  832.388979][T11041] bond96: left promiscuous mode
[  832.391081][T11041] bridge72: left promiscuous mode
[  832.393238][T11041] bridge72: left allmulticast mode
[  832.395397][T11041] team5: left promiscuous mode
[  832.397403][T11041] team5: left allmulticast mode
[  832.421592][T11041] team0: left promiscuous mode
[  832.424449][T11041] team0: left allmulticast mode
[  832.441406][T11041] team6: left promiscuous mode
[  832.444752][T11041] team6: left allmulticast mode
[  832.469146][T11041] macsec1: left promiscuous mode
[  832.491449][T11041] veth59: left promiscuous mode
[  832.494002][T11328] wg1 speed is unknown, defaulting to 1000
[  832.495962][T11328] syz: Port: 1 Link DOWN
[  832.723036][T11072] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  832.727382][T11072] syzkaller0: entered promiscuous mode
[  832.729667][T11072] syzkaller0: entered allmulticast mode
[  832.860159][T11078]  speed is unknown, defaulting to 1000
[  832.864271][T11078] wg1 speed is unknown, defaulting to 1000
[  832.866825][T11078] ip6_vti0 speed is unknown, defaulting to 1000
[  833.176297][T11078] wg1 speed is unknown, defaulting to 1000
[  833.407350][T11118] pim6reg1: entered promiscuous mode
[  833.409070][T11118] pim6reg1: entered allmulticast mode
[  833.480100][T11126] x9: renamed from bridge_slave_0
[  833.485985][T11125] __nla_validate_parse: 14 callbacks suppressed
[  833.485996][T11125] netlink: 6 bytes leftover after parsing attributes in process `syz.1.13111'.
[  833.492695][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13110'.
[  833.494314][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13111'.
[  833.499043][T11124] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  833.502860][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13111'.
[  833.508604][T11124] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  833.621340][T11129] netlink: 'syz.1.13112': attribute type 30 has an invalid length.
[  833.850659][T11138] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  834.021808][T11153] netlink: 'syz.1.13119': attribute type 10 has an invalid length.
[  834.065225][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13120'.
[  834.068791][T11155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13120'.
[  834.072162][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13120'.
[  834.075225][T11155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13120'.
[  834.140251][T11159] netlink: 'syz.1.13122': attribute type 12 has an invalid length.
[  834.209577][T11116] delete_channel: no stack
[  834.453992][T11180] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13127'.
[  834.538763][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13128'.
[  834.635128][T11192] bond33: entered promiscuous mode
[  834.636795][T11192] bond33: entered allmulticast mode
[  834.648045][T11192] bond33: (slave ip6gretap5): making interface the new active one
[  834.650796][T11192] ip6gretap5: entered promiscuous mode
[  834.653116][T11192] ip6gretap5: entered allmulticast mode
[  834.656074][T11192] bond33: (slave ip6gretap5): Enslaving as an active interface with an up link
[  834.663367][T11192] bond33: left promiscuous mode
[  834.665816][T11192] ip6gretap5: left promiscuous mode
[  834.667709][T11192] bond33: left allmulticast mode
[  834.669599][T11192] ip6gretap5: left allmulticast mode
[  834.672638][T11192] 8021q: adding VLAN 0 to HW filter on device bond33
[  834.770221][T11188] Cannot find del_set index 4 as target
[  835.104476][T11202]  speed is unknown, defaulting to 1000
[  835.107172][T11202] wg1 speed is unknown, defaulting to 1000
[  835.109745][T11202] ip6_vti0 speed is unknown, defaulting to 1000
[  835.339281][T11202] wg1 speed is unknown, defaulting to 1000
[  835.679103][T11237] pim6reg1: entered promiscuous mode
[  835.681014][T11237] pim6reg1: entered allmulticast mode
[  835.969575][T11252] validate_nla: 38 callbacks suppressed
[  835.969587][T11252] netlink: 'syz.1.13149': attribute type 1 has an invalid length.
[  836.324003][T11271] gre0: left allmulticast mode
[  836.328124][T11271] erspan0: left allmulticast mode
[  836.352836][T11271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  836.859025][T11293] netlink: 'syz.0.13160': attribute type 1 has an invalid length.
[  836.924525][T11299] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000
[  836.930796][T11300] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  837.118029][T11311] bond103: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  837.124251][T11311] bond103 (unregistering): Released all slaves
[  837.137663][T11318] netlink: 'syz.3.13166': attribute type 1 has an invalid length.
[  837.164566][T11318] 8021q: adding VLAN 0 to HW filter on device bond34
[  837.321621][T11310] tipc: Resetting bearer <eth:syzkaller0>
[  837.392826][T11330] x_tables: duplicate underflow at hook 1
[  837.398645][T11318] 8021q: adding VLAN 0 to HW filter on device bond34
[  837.401250][T11318] bond34: (slave vxcan3): The slave device specified does not support setting the MAC address
[  837.406395][T11318] bond34: (slave vxcan3): Error -95 calling set_mac_address
[  837.434257][T11325] macvlan1: entered promiscuous mode
[  837.436330][T11325] macvlan1: entered allmulticast mode
[  837.439285][T11325] bond34: entered promiscuous mode
[  837.441645][T11325] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  837.449018][T11325] bond34: left promiscuous mode
[  837.475491][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  837.480592][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  837.486497][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  837.490225][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  837.563644][T11333] netlink: 'syz.0.13167': attribute type 1 has an invalid length.
[  837.581335][T11335] netlink: 'syz.3.13168': attribute type 1 has an invalid length.
[  837.634698][T11335] 8021q: adding VLAN 0 to HW filter on device bond35
[  837.659656][T11335] bond35: entered allmulticast mode
[  837.682578][T11346] netlink: 'syz.1.13169': attribute type 4 has an invalid length.
[  837.696961][T11347] netlink: 'syz.1.13169': attribute type 4 has an invalid length.
[  837.715106][T11351] netlink: 'syz.3.13171': attribute type 1 has an invalid length.
[  837.759967][T11340] 8021q: adding VLAN 0 to HW filter on device batadv8
[  837.801307][T11351] bond36: (slave vxcan3): The slave device specified does not support setting the MAC address
[  837.806160][T11351] bond36: (slave vxcan3): Error -95 calling set_mac_address
[  837.830795][T11354] macvlan1: entered promiscuous mode
[  837.833754][T11354] macvlan1: entered allmulticast mode
[  837.836740][T11354] bond36: entered promiscuous mode
[  837.839486][T11354] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  837.846724][T11354] bond36: left promiscuous mode
[  838.033277][T11364]  speed is unknown, defaulting to 1000
[  838.036483][T11364] ip6_vti0 speed is unknown, defaulting to 1000
[  838.259984][T11364] wg1 speed is unknown, defaulting to 1000
[  838.554150][T11400] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20001
[  838.556493][T11400] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20001
[  838.558564][T11400] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20001
[  838.668666][T11410] __nla_validate_parse: 17 callbacks suppressed
[  838.668676][T11410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13187'.
[  838.806083][T11416] mac80211_hwsim hwsim102 wlan0: Caught tx_queue_len zero misconfig
[  838.836323][T11420] netlink: 'syz.1.13192': attribute type 1 has an invalid length.
[  838.839148][T11420] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13192'.
[  838.869571][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13188'.
[  838.872680][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13188'.
[  838.874474][T11423] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  838.877926][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13191'.
[  838.942661][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13194'.
[  839.003789][T11433] bridge81: entered promiscuous mode
[  839.080189][T11446] netlink: 'syz.1.13200': attribute type 8 has an invalid length.
[  839.084382][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13200'.
[  839.099663][T11445]  speed is unknown, defaulting to 1000
[  839.102959][T11445] ip6_vti0 speed is unknown, defaulting to 1000
[  839.298214][T11445] wg1 speed is unknown, defaulting to 1000
[  839.447048][T11456] bond37: option updelay: invalid value (18446744073709551615)
[  839.449421][T11456] bond37: option updelay: allowed values 0 - 2147483647
[  839.463501][T11456] bond37 (unregistering): Released all slaves
[  839.618047][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13207'.
[  839.674253][T11472] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  839.690948][T11472] bond5: (slave lo): speed changed to 0 on port 1
[  839.697908][T11472] bond5: (slave lo): Enslaving as a backup interface with an up link
[  839.701022][T11472] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  839.778687][T11482] bond86: entered promiscuous mode
[  839.780639][T11482] 8021q: adding VLAN 0 to HW filter on device bond86
[  839.785300][T11485] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  839.833872][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13214'.
[  839.847710][T11495] bond103: option coupled_control: invalid value (12)
[  839.850101][T11497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13211'.
[  839.858124][T11495] bond103 (unregistering): Released all slaves
[  839.870313][T11497] bond86: entered allmulticast mode
[  839.928308][T11497] bond86: (slave bridge82): making interface the new active one
[  839.930761][T11497] bridge82: entered promiscuous mode
[  839.946011][T11497] bridge82: entered allmulticast mode
[  839.949003][T11497] bond86: (slave bridge82): Enslaving as an active interface with an up link
[  839.973058][T11509] x_tables: ip6_tables: mh match: only valid for protocol 135
[  840.031468][T11510] netem: change failed
[  840.434772][T11533] 0{X: left allmulticast mode
[  840.441707][T11533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  840.711309][T11539] ip6tnl11: entered allmulticast mode
[  840.714609][T11539] team0: Port device ip6tnl11 added
[  840.888509][T11545] ip6erspan2: entered allmulticast mode
[  840.987640][T11551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  841.155664][T11563]  speed is unknown, defaulting to 1000
[  841.159861][T11563] ip6_vti0 speed is unknown, defaulting to 1000
[  841.255007][T11568] validate_nla: 8 callbacks suppressed
[  841.255020][T11568] netlink: 'syz.3.13238': attribute type 1 has an invalid length.
[  841.265284][T11568] workqueue: Failed to create a rescuer kthread for wq "bond37": -EINTR
[  841.416590][T11576] bond5: option mode: unable to set because the bond device has slaves
[  841.484390][T11563] wg1 speed is unknown, defaulting to 1000
[  841.547283][T11582] netlink: 'syz.3.13242': attribute type 8 has an invalid length.
[  841.649686][T11584]  speed is unknown, defaulting to 1000
[  841.656607][T11584] ip6_vti0 speed is unknown, defaulting to 1000
[  841.723969][T11585] bond103: option arp_validate: invalid value (18446744073491447809)
[  841.728982][T11585] bond103 (unregistering): Released all slaves
[  841.760359][T11586] bond103: option arp_validate: invalid value (18446744073491447809)
[  841.767441][T11586] bond103 (unregistering): Released all slaves
[  841.908764][T11603] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  841.995437][T11584] wg1 speed is unknown, defaulting to 1000
[  842.231422][T11610] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  842.237987][T11610] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  842.265549][T11610] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  842.607885][T11624] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  842.649854][T11629] nicvf0: entered allmulticast mode
[  842.789440][T11642] netlink: 'syz.3.13261': attribute type 4 has an invalid length.
[  842.809125][T11650] netlink: 'syz.3.13261': attribute type 4 has an invalid length.
[  842.809125][T11642] netlink: 'syz.3.13261': attribute type 4 has an invalid length.
[  842.931625][T11657] netlink: 'syz.0.13266': attribute type 1 has an invalid length.
[  842.947708][T11657] 8021q: adding VLAN 0 to HW filter on device bond103
[  843.125316][T11662] 1{X: left promiscuous mode
[  843.128171][T11662] 1{X: entered promiscuous mode
[  843.140857][T11662] 8021q: adding VLAN 0 to HW filter on device .`
[  843.146397][T11662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  843.152525][T11319] ip6_vti0 speed is unknown, defaulting to 1000
[  843.155160][T11319] syz2: Port: 1 Link ACTIVE
[  843.164098][T11319] ip6_vti0 speed is unknown, defaulting to 1000
[  843.717928][T11669] bond87: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  843.735784][T11669] bond88: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  843.867630][T11677] netlink: 'syz.1.13272': attribute type 8 has an invalid length.
[  843.869930][T11677] __nla_validate_parse: 20 callbacks suppressed
[  843.869939][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13272'.
[  843.936391][T11679] netlink: 'syz.1.13273': attribute type 10 has an invalid length.
[  843.939183][T11679] netlink: 228 bytes leftover after parsing attributes in process `syz.1.13273'.
[  844.070360][T11684] veth0_to_bridge: entered promiscuous mode
[  844.178227][T11686] netlink: 'syz.0.13275': attribute type 4 has an invalid length.
[  844.190691][T11686] netlink: 'syz.0.13275': attribute type 4 has an invalid length.
[  844.397022][T11697]  speed is unknown, defaulting to 1000
[  844.399847][T11697] ip6_vti0 speed is unknown, defaulting to 1000
[  844.433437][T11699] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  844.574100][T11703] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  844.578619][T11703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  844.696590][T11709] IPVS: length: 132 != 8
[  844.698820][T11710] IPVS: length: 132 != 8
[  844.706946][T11697] wg1 speed is unknown, defaulting to 1000
[  844.750579][T11709] pimreg: entered allmulticast mode
[  844.760648][T11708] pimreg: left allmulticast mode
[  844.904797][T11682] veth0_to_bridge: left promiscuous mode
[  845.134744][T11722] batadv0: Device is already in use.
[  845.178367][T11718] Cannot find del_set index 4 as target
[  845.254670][T11730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13290'.
[  845.261630][T11731] netlink: 43 bytes leftover after parsing attributes in process `syz.0.13290'.
[  845.269477][T11731] IPv6: sit12: Disabled Multicast RS
[  845.272172][T11731] sit12: entered allmulticast mode
[  845.496696][T11738] 8021q: adding VLAN 0 to HW filter on device bond4
[  845.674647][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13296'.
[  845.741074][T11760] : renamed from team_slave_1
[  845.791398][T11767] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  845.930147][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13304'.
[  845.981669][T11785] netlink: 176 bytes leftover after parsing attributes in process `syz.3.13306'.
[  845.986623][T11781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[  846.045789][T11785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13306'.
[  846.087162][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13308'.
[  846.090557][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13308'.
[  846.127355][T11793] bond37 (unregistering): Released all slaves
[  846.167145][T11796] bond104: entered promiscuous mode
[  846.169191][T11796] 8021q: adding VLAN 0 to HW filter on device bond104
[  846.202605][T11801] bond0: (slave rose0): Error: Device can not be enslaved while up
[  846.305689][T11810] validate_nla: 5 callbacks suppressed
[  846.305699][T11810] netlink: 'syz.0.13313': attribute type 3 has an invalid length.
[  846.318534][T11810] netlink: 'syz.0.13313': attribute type 16 has an invalid length.
[  846.389232][T11827] netlink: 'syz.3.13319': attribute type 8 has an invalid length.
[  846.422635][T11829] netlink: 'syz.0.13320': attribute type 1 has an invalid length.
[  846.447738][T11837] tipc: Failed to remove unknown binding: 66,1,1/448830382:3188913436/3188913438
[  846.454746][T11837] tipc: Failed to remove unknown binding: 66,1,1/448830382:3188913436/3188913438
[  846.559923][T11846] 1{X: renamed from 30{X (while UP)
[  846.582795][T11846] 1{X: entered allmulticast mode
[  846.584880][T11846] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  846.636062][T11846] SET target dimension over the limit!
[  846.694942][T11850] netlink: 'syz.3.13326': attribute type 1 has an invalid length.
[  846.784700][T11859] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  846.818925][T11865] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  846.823517][T11865] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  846.927855][T11877] bridge80: entered promiscuous mode
[  846.980912][T11880] pim6reg: entered allmulticast mode
[  846.984558][T11880] pim6reg: left allmulticast mode
[  847.105473][T11889] openvswitch: netlink: Missing valid actions attribute.
[  847.108179][T11889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  847.349110][T11880] batadv0: left promiscuous mode
[  847.516972][T11891] 8021q: VLANs not supported on caif0
[  847.522964][ T5833] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  847.526720][ T5833] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  847.530197][ T5833] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  847.534287][ T5833] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  847.954110][T11906] netlink: 'syz.1.13341': attribute type 1 has an invalid length.
[  847.978919][T11906] 8021q: adding VLAN 0 to HW filter on device bond89
[  848.003571][T11906] 8021q: adding VLAN 0 to HW filter on device bond89
[  848.006746][T11906] bond89: (slave vxcan1): The slave device specified does not support setting the MAC address
[  848.012290][T11906] bond89: (slave vxcan1): Error -95 calling set_mac_address
[  848.053002][T11910] veth69: entered promiscuous mode
[  848.059020][T11910] bond89: (slave veth69): Enslaving as an active interface with a down link
[  848.069007][T11909]  speed is unknown, defaulting to 1000
[  848.075069][T11909] ip6_vti0 speed is unknown, defaulting to 1000
[  848.264554][T11919] syzkaller1: entered promiscuous mode
[  848.266621][T11919] syzkaller1: entered allmulticast mode
[  848.446602][T11909] wg1 speed is unknown, defaulting to 1000
[  848.666466][T11925] netlink: 'syz.1.13344': attribute type 30 has an invalid length.
[  848.702091][T11925] bond90: option arp_missed_max: invalid value (0)
[  848.704068][T11925] bond90: option arp_missed_max: allowed values 1 - 255
[  848.710235][T11925] bond90 (unregistering): Released all slaves
[  848.755910][T11929]  speed is unknown, defaulting to 1000
[  848.758545][T11929] ip6_vti0 speed is unknown, defaulting to 1000
[  848.988624][T11941] __nla_validate_parse: 12 callbacks suppressed
[  848.988635][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13348'.
[  849.053421][T11929] wg1 speed is unknown, defaulting to 1000
[  849.180761][T11948] netlink: 404 bytes leftover after parsing attributes in process `syz.0.13350'.
[  849.184113][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13350'.
[  849.187284][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13350'.
[  849.190336][T11948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13350'.
[  849.314117][T11955] netlink: 'syz.3.13351': attribute type 8 has an invalid length.
[  849.316648][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13351'.
[  849.408553][T11967] netlink: 'syz.3.13355': attribute type 10 has an invalid length.
[  849.411348][T11967] netlink: 'syz.3.13355': attribute type 10 has an invalid length.
[  849.522011][T11969] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  849.769993][T11984] pimreg3: entered allmulticast mode
[  849.848967][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13363'.
[  849.931949][T12007] 9: entered promiscuous mode
[  850.111910][T30570] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  850.151000][T12021]  speed is unknown, defaulting to 1000
[  850.154022][T12021] ip6_vti0 speed is unknown, defaulting to 1000
[  850.347385][T12021] wg1 speed is unknown, defaulting to 1000
[  850.471497][T12037] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13375'.
[  850.547734][T12042] netlink: 260 bytes leftover after parsing attributes in process `syz.3.13376'.
[  850.616904][T12043] geneve4: entered promiscuous mode
[  850.624744][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[  850.633053][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  850.636642][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  850.640714][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  850.763152][T12045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13377'.
[  850.869761][T12051]  speed is unknown, defaulting to 1000
[  851.226907][T12060] bond106: entered promiscuous mode
[  851.229113][T12060] 8021q: adding VLAN 0 to HW filter on device bond106
[  852.006413][T12080] validate_nla: 3 callbacks suppressed
[  852.006425][T12080] netlink: 'syz.1.13384': attribute type 4 has an invalid length.
[  852.017838][T12080] netlink: 'syz.1.13384': attribute type 4 has an invalid length.
[  852.318508][T12091] pim6reg: entered allmulticast mode
[  852.320667][T12091] pim6reg: left allmulticast mode
[  852.346116][T12093] bond1: option mode: unable to set because the bond device has slaves
[  852.355786][T12093] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  852.359991][T12093] bond1: (slave macvlan1): Enslaving as a backup interface with a down link
[  852.364562][T12093] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  852.471643][T12100] netlink: 'syz.3.13389': attribute type 1 has an invalid length.
[  852.805739][T12116] tc_dump_action: action bad kind
[  852.883126][T12126] pim6reg1: entered promiscuous mode
[  852.888348][T12126] pim6reg1: entered allmulticast mode
[  852.981599][T12135] netlink: 'syz.3.13401': attribute type 1 has an invalid length.
[  852.998958][T12135] 8021q: adding VLAN 0 to HW filter on device bond39
[  853.134977][T12135] 8021q: adding VLAN 0 to HW filter on device bond39
[  853.142205][T12135] bond39: (slave geneve5): making interface the new active one
[  853.146328][T12135] bond39: (slave geneve5): Enslaving as an active interface with an up link
[  853.152232][ T5867] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  853.155606][ T5867] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  853.163431][ T5867] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  853.170024][ T5867] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  853.494788][T12174] netlink: 'syz.0.13413': attribute type 10 has an invalid length.
[  853.498383][T12174] netlink: 'syz.0.13413': attribute type 10 has an invalid length.
[  853.822330][T12195] netlink: 'syz.0.13419': attribute type 19 has an invalid length.
[  853.880399][T12202]  speed is unknown, defaulting to 1000
[  853.889661][T12202] ip6_vti0 speed is unknown, defaulting to 1000
[  853.910552][T12205] netlink: 'syz.1.13422': attribute type 8 has an invalid length.
[  854.039295][T12210] __nla_validate_parse: 12 callbacks suppressed
[  854.039306][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13424'.
[  854.124833][T12202] wg1 speed is unknown, defaulting to 1000
[  854.195926][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13427'.
[  854.204960][T12218] batman_adv: batadv0: Adding interface: ipvlan7
[  854.207281][T12218] batman_adv: batadv0: Not using interface ipvlan7 (retrying later): interface not active
[  854.253035][T12221] netlink: 'syz.1.13428': attribute type 6 has an invalid length.
[  854.262199][T12221] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13428'.
[  854.413726][T12228]  speed is unknown, defaulting to 1000
[  854.419204][T12232] syzkaller0: left promiscuous mode
[  854.420827][T12232] syzkaller0: left allmulticast mode
[  854.422817][T12228] ip6_vti0 speed is unknown, defaulting to 1000
[  854.490517][T12234] netlink: 'syz.3.13431': attribute type 10 has an invalid length.
[  854.596558][T12239] bond107: entered promiscuous mode
[  854.598526][T12239] 8021q: adding VLAN 0 to HW filter on device bond107
[  854.619110][T12239] bond107: (slave bridge82): making interface the new active one
[  854.622084][T12239] bridge82: entered promiscuous mode
[  854.625197][T12239] bond107: (slave bridge82): Enslaving as an active interface with an up link
[  854.667951][T12228] wg1 speed is unknown, defaulting to 1000
[  854.871297][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13442'.
[  854.898943][T12259] vlan1: entered promiscuous mode
[  855.024041][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13443'.
[  855.071734][T12264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13444'.
[  855.169011][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13447'.
[  855.291285][T12294] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  855.515363][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13460'.
[  855.590244][T12333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13463'.
[  855.823657][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13467'.
[  856.056791][T12352] bond109: (slave vxcan7): The slave device specified does not support setting the MAC address
[  856.060937][T12352] bond109: (slave vxcan7): Error -95 calling set_mac_address
[  856.108909][T12354] bond109: (slave bridge83): Enslaving as an active interface with a down link
[  856.124083][T12352] bond109: (slave bridge84): Enslaving as an active interface with a down link
[  856.133280][T12352] macvlan0: entered promiscuous mode
[  856.135567][T12352] macvlan0: entered allmulticast mode
[  856.138244][T12352] bond109: entered promiscuous mode
[  856.140843][T12352] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  856.146134][T12352] bond109: left promiscuous mode
[  856.369473][T12365] bond41: Removing last arp target with arp_interval on
[  856.448089][T12373] vlan7: entered promiscuous mode
[  856.449800][T12373] vlan7: entered allmulticast mode
[  856.451420][T12373] bond0: entered allmulticast mode
[  856.662494][T12390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  856.715034][T12396] bridge85: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  856.730125][T12397] bridge86: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  856.903085][T12411] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2
[  857.242536][T30570] Bluetooth: hci2: command 0x0405 tx timeout
[  857.370428][T12417] xt_TCPMSS: Only works on TCP SYN packets
[  857.580521][T12427] validate_nla: 8 callbacks suppressed
[  857.580536][T12427] netlink: 'syz.3.13497': attribute type 1 has an invalid length.
[  857.609618][T12427] bond42: entered promiscuous mode
[  857.611683][T12427] bond42: entered allmulticast mode
[  857.627325][T12427] bond42: (slave ip6gretap6): making interface the new active one
[  857.630602][T12427] ip6gretap6: entered promiscuous mode
[  857.633401][T12427] ip6gretap6: entered allmulticast mode
[  857.637060][T12427] bond42: (slave ip6gretap6): Enslaving as an active interface with an up link
[  857.763019][T12427] bond42: left promiscuous mode
[  857.764698][T12427] ip6gretap6: left promiscuous mode
[  857.766476][T12427] bond42: left allmulticast mode
[  857.768051][T12427] ip6gretap6: left allmulticast mode
[  857.771600][T12433] netlink: 'syz.0.13498': attribute type 1 has an invalid length.
[  857.772915][T12427] 8021q: adding VLAN 0 to HW filter on device bond42
[  857.779954][T12433] workqueue: Failed to create a rescuer kthread for wq "bond110": -EINTR
[  857.883000][T12444] IPv6: Can't replace route, no match found
[  857.926113][T12450] bond43: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  857.930134][T12450] bond43 (unregistering): Released all slaves
[  858.059370][T12450] bond43: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  858.067637][T12450] bond43 (unregistering): Released all slaves
[  858.147320][T12450] bond43: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  858.153582][T12450] bond43 (unregistering): Released all slaves
[  858.246350][T12450] bond43: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  858.252577][T12450] bond43 (unregistering): Released all slaves
[  858.267840][T12473] syzkaller0: entered promiscuous mode
[  858.269727][T12473] syzkaller0: entered allmulticast mode
[  858.337706][T12450] bond43: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  858.344531][T12450] bond43 (unregistering): Released all slaves
[  858.429917][T12487] netlink: 'syz.1.13510': attribute type 8 has an invalid length.
[  858.433509][T12450] bond43: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  858.437929][T12450] bond43 (unregistering): Released all slaves
[  858.473403][T12486]  speed is unknown, defaulting to 1000
[  858.476579][T12486] ip6_vti0 speed is unknown, defaulting to 1000
[  858.516934][T12450] bond43: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  858.531708][T12450] bond43 (unregistering): Released all slaves
[  858.611290][T12450] bond43: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  858.611500][T12492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  858.623512][T12450] bond43 (unregistering): Released all slaves
[  858.708081][T12450] bond43: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  858.723422][T12450] bond43 (unregistering): Released all slaves
[  858.780160][T12497] dvmrp1: entered allmulticast mode
[  858.794122][T12497] dvmrp1: left allmulticast mode
[  858.825419][T12486] wg1 speed is unknown, defaulting to 1000
[  858.862392][T12501] dvmrp1: entered allmulticast mode
[  858.879482][T12501] dvmrp1: left allmulticast mode
[  858.962715][T12508] netlink: 'syz.3.13516': attribute type 1 has an invalid length.
[  858.974480][T12506] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  858.977684][T12509] syzkaller0: entered promiscuous mode
[  858.979597][T12509] syzkaller0: entered allmulticast mode
[  859.063080][T12515] __nla_validate_parse: 20 callbacks suppressed
[  859.063091][T12515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13516'.
[  859.070515][T12513] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13518'.
[  859.076849][T12513] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13518'.
[  859.079717][T12513] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13518'.
[  859.167036][T12523] netlink: 'syz.1.13520': attribute type 6 has an invalid length.
[  859.175282][T12523] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13520'.
[  859.514260][T12529] tipc: Resetting bearer <eth:syzkaller0>
[  859.555309][T12533] bond111 (unregistering): Released all slaves
[  859.715363][T12552] batadv0: mtu less than device minimum
[  859.719184][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13529'.
[  859.943274][T12555] Cannot find del_set index 4 as target
[  860.258397][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13532'.
[  860.263326][T12564] netlink: 'syz.1.13532': attribute type 30 has an invalid length.
[  860.267147][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13532'.
[  860.270272][T12564] netlink: 'syz.1.13532': attribute type 30 has an invalid length.
[  860.288054][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13533'.
[  860.299699][T12568] !yz!: rxe_newlink: already configured on team_slave_0
[  860.354106][T12574] netlink: 'syz.1.13536': attribute type 4 has an invalid length.
[  860.356855][T12574] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13536'.
[  860.482279][T12586] syzkaller1: entered promiscuous mode
[  860.484759][T12586] syzkaller1: entered allmulticast mode
[  860.555882][T12589] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  860.592231][T12591] dvmrp1: entered allmulticast mode
[  860.674415][T12596] netlink: 'syz.3.13542': attribute type 31 has an invalid length.
[  860.714808][T12594] netlink: 'syz.1.13540': attribute type 7 has an invalid length.
[  860.953365][T12620] geneve6: entered promiscuous mode
[  860.955203][T12620] geneve6: entered allmulticast mode
[  860.958157][   T12] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 256 - 0
[  860.961393][   T12] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 256 - 0
[  860.964984][   T12] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 256 - 0
[  860.967998][   T12] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 256 - 0
[  861.221598][T12628]  speed is unknown, defaulting to 1000
[  861.225611][T12635] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  861.229038][T12628] ip6_vti0 speed is unknown, defaulting to 1000
[  861.435243][T12628] wg1 speed is unknown, defaulting to 1000
[  861.791077][T12660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  861.829176][T12663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  862.055697][T12694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  862.086795][T12697] 8021q: adding VLAN 0 to HW filter on device bond90
[  862.090164][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.093173][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.095614][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.097960][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.101306][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.104705][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.107305][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.110678][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.113461][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.115920][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.118242][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.120501][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.123057][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.125193][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.127516][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.129718][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.132561][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.135098][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.137459][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.139972][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.144786][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.153447][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.160920][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.172199][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.175116][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.177479][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.179678][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.183461][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.186114][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.188465][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.190761][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.199451][T12698] veth71: entered promiscuous mode
[  862.204151][T12696] erspan0: entered allmulticast mode
[  862.204993][T12697] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[  862.303085][T12704] tipc: Resetting bearer <eth:syzkaller0>
[  862.343516][T12710] openvswitch: netlink: Flow key attr not present in new flow.
[  862.412543][T12535] ip6_vti0 speed is unknown, defaulting to 1000
[  862.415156][T12535] syz2: Port: 1 Link DOWN
[  862.417048][T12535] ip6_vti0 speed is unknown, defaulting to 1000
[  862.443405][T12712] geneve10: entered promiscuous mode
[  862.446990][ T5867] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[  862.450035][ T5867] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  862.462452][ T5867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  862.467746][ T5867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  862.564580][T12725]  speed is unknown, defaulting to 1000
[  862.568496][T12725] ip6_vti0 speed is unknown, defaulting to 1000
[  862.665559][T12729] bond44: (slave bridge28): Enslaving as an active interface with an up link
[  862.699910][T12729] macvlan4: entered promiscuous mode
[  862.705351][T12729] macvlan4: entered allmulticast mode
[  862.709509][T12729] bond44: entered promiscuous mode
[  862.712673][T12729] bridge28: entered promiscuous mode
[  862.719749][T12729] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  862.733463][T12729] bond44: left promiscuous mode
[  862.737842][T12729] bridge28: left promiscuous mode
[  862.839034][T12740] validate_nla: 9 callbacks suppressed
[  862.839048][T12740] netlink: 'syz.1.13580': attribute type 4 has an invalid length.
[  862.844017][T12740] netlink: 'syz.1.13580': attribute type 1 has an invalid length.
[  862.884361][T12742] syzkaller0: left promiscuous mode
[  862.886376][T12742] syzkaller0: left allmulticast mode
[  862.984772][T12725] wg1 speed is unknown, defaulting to 1000
[  862.990900][T12750] netlink: 'syz.1.13582': attribute type 10 has an invalid length.
[  863.006668][T12750] netlink: 'syz.1.13582': attribute type 10 has an invalid length.
[  863.101145][T12753]  speed is unknown, defaulting to 1000
[  863.106731][T12753] ip6_vti0 speed is unknown, defaulting to 1000
[  863.220544][T12765] netlink: 'syz.3.13588': attribute type 1 has an invalid length.
[  863.229272][T12766] netlink: 'syz.1.13587': attribute type 1 has an invalid length.
[  863.264696][T12766] bond91: entered promiscuous mode
[  863.266597][T12766] bond91: entered allmulticast mode
[  863.268587][T12766] 8021q: adding VLAN 0 to HW filter on device bond91
[  863.276143][T12765] workqueue: Failed to create a rescuer kthread for wq "bond45": -EINTR
[  863.299404][T12775] netlink: 'syz.3.13589': attribute type 33 has an invalid length.
[  863.479924][T12753] wg1 speed is unknown, defaulting to 1000
[  863.506912][T12789] bond0: (slave gre0): Error: Device type is different from other slaves
[  863.759501][T12800] mac80211_hwsim hwsim102 wlan0: entered promiscuous mode
[  863.766980][T12800] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  864.056722][T12837] pim6reg: entered allmulticast mode
[  864.062323][T12837] pim6reg: left allmulticast mode
[  864.072941][T12838] __nla_validate_parse: 27 callbacks suppressed
[  864.072953][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13605'.
[  864.090609][T12840] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13608'.
[  864.128149][T12842] lo: MTU too low for tipc bearer
[  864.130146][T12842] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  864.133828][T12842] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  864.136993][T12842] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  864.157145][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13608'.
[  864.159800][T12840] netlink: 'syz.0.13608': attribute type 7 has an invalid length.
[  864.162474][T12840] netlink: 'syz.0.13608': attribute type 8 has an invalid length.
[  864.164738][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13608'.
[  864.210168][T12846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13609'.
[  864.227586][T12846] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13609'.
[  864.237127][T12846] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13609'.
[  864.498220][ T5867] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20002 - 0
[  864.507190][ T5867] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20002 - 0
[  864.510704][ T5867] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20002 - 0
[  864.514543][ T5867] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20002 - 0
[  864.977948][T12867] netlink: 'syz.3.13612': attribute type 1 has an invalid length.
[  864.980321][T12867] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13612'.
[  865.044465][T12869] vxcan2: entered allmulticast mode
[  865.085867][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13612'.
[  865.331166][T12881] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13616'.
[  865.508296][T12894] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  865.522664][T12894] syzkaller0: entered promiscuous mode
[  865.524949][T12894] syzkaller0: entered allmulticast mode
[  865.592349][T12902] syzkaller0: left promiscuous mode
[  865.594362][T12902] syzkaller0: left allmulticast mode
[  865.598131][T12901] syzkaller1: entered promiscuous mode
[  865.599961][T12901] syzkaller1: entered allmulticast mode
[  865.902559][T12920] bond0: Device is already in use.
[  866.742856][T12932] IPv6: NLM_F_REPLACE set, but no existing node found!
[  866.788468][T12940] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  867.288923][T12975]  speed is unknown, defaulting to 1000
[  867.292878][T12975] ip6_vti0 speed is unknown, defaulting to 1000
[  867.353787][T12983] bond5: (slave lo): Releasing backup interface
[  867.363283][T12983] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  867.388435][T12983] bond82: (slave veth65): Releasing active interface
[  867.399278][T12983] bond86: (slave bridge82): Releasing backup interface
[  867.401308][T12983] bridge82: left promiscuous mode
[  867.403461][T12983] bridge82: left allmulticast mode
[  867.423675][T12983] ip6tnl11: left allmulticast mode
[  867.445129][T12983] team0: Port device ip6tnl11 removed
[  867.448709][T12983] bond89: (slave veth69): Releasing active interface
[  867.466504][T12983] batman_adv: batadv0: Removing interface: ipvlan7
[  867.472618][T12986] openvswitch: netlink: Missing key (keys=40, expected=80)
[  867.490109][T12983] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  867.635962][T12975] wg1 speed is unknown, defaulting to 1000
[  867.954112][T13011] validate_nla: 1 callbacks suppressed
[  867.954124][T13011] netlink: 'syz.3.13653': attribute type 1 has an invalid length.
[  868.013671][T13011] bond45: entered promiscuous mode
[  868.015911][T13011] 8021q: adding VLAN 0 to HW filter on device bond45
[  868.070500][T13021] 8021q: adding VLAN 0 to HW filter on device bond46
[  868.082778][T13021] bond45: (slave bond46): making interface the new active one
[  868.085356][T13021] bond46: entered promiscuous mode
[  868.089973][T13021] bond45: (slave bond46): Enslaving as an active interface with an up link
[  868.266655][T13041] netlink: 'syz.3.13660': attribute type 4 has an invalid length.
[  868.296585][T13043] netlink: 'syz.1.13661': attribute type 1 has an invalid length.
[  868.315444][T13043] bond92: entered promiscuous mode
[  868.317218][T13043] 8021q: adding VLAN 0 to HW filter on device bond92
[  868.362565][T13048] bond47: option ad_user_port_key: invalid value (65535)
[  868.365481][T13048] bond47: option ad_user_port_key: allowed values 0 - 1023
[  868.370320][T13048] bond47 (unregistering): Released all slaves
[  868.384639][T13054] bond92: entered allmulticast mode
[  868.414640][T13054] bond92: (slave bridge87): making interface the new active one
[  868.417417][T13054] bridge87: entered promiscuous mode
[  868.419485][T13054] bridge87: entered allmulticast mode
[  868.423096][T13054] bond92: (slave bridge87): Enslaving as an active interface with an up link
[  893.097401][T13066] netlink: 'syz.0.13668': attribute type 1 has an invalid length.
[  893.105438][T13067] netlink: 'syz.3.13670': attribute type 39 has an invalid length.
[  893.125804][T13066] bond111: entered promiscuous mode
[  893.128402][T13066] 8021q: adding VLAN 0 to HW filter on device bond111
[  893.144971][T13066] __nla_validate_parse: 12 callbacks suppressed
[  893.144990][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13668'.
[  893.151004][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13668'.
[  893.156241][T13067] syz_tun (unregistering): left promiscuous mode
[  893.169455][T13062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13669'.
[  893.268393][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13673'.
[  893.328630][T13086] netlink: 'syz.1.13676': attribute type 1 has an invalid length.
[  893.368790][T13085] vlan1: entered promiscuous mode
[  893.398771][T13086] bond93: (slave bridge88): making interface the new active one
[  893.402454][T13086] bond93: (slave bridge88): Enslaving as an active interface with an up link
[  893.409942][T13094] mac80211_hwsim hwsim80 syzkaller0: Caught tx_queue_len zero misconfig
[  893.432418][T13094] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  893.464916][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13679'.
[  893.474554][T13096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13679'.
[  893.488146][T13098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  893.512525][T13096]  speed is unknown, defaulting to 1000
[  893.515256][T13096] ip6_vti0 speed is unknown, defaulting to 1000
[  893.680756][T13096] wg1 speed is unknown, defaulting to 1000
[  893.813187][T13114] bond0: Device is already in use.
[  893.816685][T13114] bond0: Device is already in use.
[  893.827506][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13684'.
[  893.860550][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13686'.
[  893.954457][T13121] netlink: 'syz.0.13687': attribute type 8 has an invalid length.
[  893.957230][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13687'.
[  894.188871][T13129] netlink: 136 bytes leftover after parsing attributes in process `syz.0.13689'.
[  894.191636][T13129] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  894.324916][T13134] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  894.329860][T11329] wg1 speed is unknown, defaulting to 1000
[  894.332331][T11329] syz: Port: 1 Link ACTIVE
[  894.346512][T13134] dvmrp1: entered allmulticast mode
[  894.349068][T13134] dvmrp1: left allmulticast mode
[  894.388979][T13136] bond47: option arp_all_targets: invalid value (18446744073709551615)
[  894.393812][T13136] bond47 (unregistering): Released all slaves
[  894.493966][T13142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  894.520766][T13145] bond47: Unable to set peer notification delay as MII monitoring is disabled
[  894.525863][T13145] bond47 (unregistering): Released all slaves
[  894.583733][T13151] bond47: Unable to set peer notification delay as MII monitoring is disabled
[  894.587660][T13151] bond47 (unregistering): Released all slaves
[  894.689018][T13163] netlink: 'syz.3.13698': attribute type 1 has an invalid length.
[  894.718527][T13163] bond47: entered promiscuous mode
[  894.720518][T13163] 8021q: adding VLAN 0 to HW filter on device bond47
[  894.944204][T13179] bond94: option miimon: invalid value (18446744073709551607)
[  894.947241][T13179] bond94: option miimon: allowed values 0 - 2147483647
[  894.951674][T13179] bond94 (unregistering): Released all slaves
[  895.014778][T13184] block nbd5: shutting down sockets
[  895.119534][T13190] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  895.130180][T13193] netlink: 'syz.0.13709': attribute type 8 has an invalid length.
[  895.197046][T13198] tipc: Resetting bearer <eth:veth0_to_team>
[  895.204838][T13198] tipc: Resetting bearer <eth:syzkaller0>
[  895.213924][T13198] bond0: (slave rose0): Error: Device can not be enslaved while up
[  895.244105][T13200] bond48: entered allmulticast mode
[  895.246192][T13200] 8021q: adding VLAN 0 to HW filter on device bond48
[  895.283489][T13200] 8021q: adding VLAN 0 to HW filter on device bond49
[  895.288803][T13200] bond49: entered allmulticast mode
[  895.291441][T13200] bond48: (slave bond49): Enslaving as an active interface with an up link
[  895.540326][T13223] x_tables: duplicate underflow at hook 1
[  895.567785][T13223] bond112: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  895.573774][T13223] bond112 (unregistering): Released all slaves
[  895.756758][T13227] syzkaller1: tun_chr_ioctl cmd 1074025677
[  895.758821][T13227] syzkaller1: Linktype set failed because interface is up
[  895.761522][T13227] netlink: 'syz.0.13717': attribute type 13 has an invalid length.
[  895.765795][T13227] netlink: 'syz.0.13717': attribute type 13 has an invalid length.
[  895.892539][T13230] netlink: 'syz.0.13718': attribute type 8 has an invalid length.
[  896.133976][T13241] mac80211_hwsim hwsim94 wlan0: entered promiscuous mode
[  896.136683][T13241] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  896.500525][T13251] netlink: 'syz.1.13726': attribute type 8 has an invalid length.
[  896.709250][T13271] 8021q: adding VLAN 0 to HW filter on device bond94
[  896.736913][T13271] 8021q: adding VLAN 0 to HW filter on device bond94
[  896.739459][T13271] bond94: (slave vxcan1): The slave device specified does not support setting the MAC address
[  896.744116][T13271] bond94: (slave vxcan1): Error -95 calling set_mac_address
[  896.779033][T13275] x_tables: duplicate underflow at hook 1
[  896.947833][T13288] pim6reg1: entered allmulticast mode
[  897.026764][T13295] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  897.307997][T13315] Cannot find del_set index 4 as target
[  897.562235][T13336] nbd5: detected capacity change from 0 to 127
[  897.575922][   T56] block nbd5: Receive control failed (result -32)
[  897.582790][T13099] block nbd5: Dead connection, failed to find a fallback
[  897.585960][T13099] block nbd5: shutting down sockets
[  897.588266][T13099] blk_print_req_error: 27 callbacks suppressed
[  897.588309][T13099] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  897.594706][T13099] buffer_io_error: 27 callbacks suppressed
[  897.594722][T13099] Buffer I/O error on dev nbd5, logical block 0, async page read
[  897.600486][T13099] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  897.604225][T13099] Buffer I/O error on dev nbd5, logical block 1, async page read
[  897.607377][T13099] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  897.611023][T13099] Buffer I/O error on dev nbd5, logical block 2, async page read
[  897.614347][T13099] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  897.617955][T13099] Buffer I/O error on dev nbd5, logical block 3, async page read
[  897.621263][T13099] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  897.624968][T13099] Buffer I/O error on dev nbd5, logical block 0, async page read
[  897.627924][T13099] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  897.630580][T13099] Buffer I/O error on dev nbd5, logical block 1, async page read
[  897.636587][T13099] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  897.640039][T13099] Buffer I/O error on dev nbd5, logical block 2, async page read
[  897.643500][T13099] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  897.647248][T13099] Buffer I/O error on dev nbd5, logical block 3, async page read
[  897.650453][T13099] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  897.654393][T13099] Buffer I/O error on dev nbd5, logical block 0, async page read
[  897.657848][T13099] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  897.661951][T13099] Buffer I/O error on dev nbd5, logical block 1, async page read
[  897.667260][T13099] ldm_validate_partition_table(): Disk read failed.
[  897.671571][T13099] Dev nbd5: unable to read RDB block 0
[  897.675984][T13099]  nbd5: unable to read partition table
[  897.786913][T13339]  speed is unknown, defaulting to 1000
[  897.791725][T13339] ip6_vti0 speed is unknown, defaulting to 1000
[  897.808346][T13099] ldm_validate_partition_table(): Disk read failed.
[  897.814656][T13099] Dev nbd5: unable to read RDB block 0
[  897.824649][T13099]  nbd5: unable to read partition table
[  898.104368][T13347]  speed is unknown, defaulting to 1000
[  898.107249][T13347] ip6_vti0 speed is unknown, defaulting to 1000
[  898.164245][T13339] wg1 speed is unknown, defaulting to 1000
[  898.447650][T13347] wg1 speed is unknown, defaulting to 1000
[  898.768212][T13362] validate_nla: 4 callbacks suppressed
[  898.768222][T13362] netlink: 'syz.1.13762': attribute type 8 has an invalid length.
[  898.776781][T13362] __nla_validate_parse: 32 callbacks suppressed
[  898.776794][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13762'.
[  898.804425][T13365] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13763'.
[  898.859905][T13370] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13763'.
[  898.965458][T13379] netlink: 348 bytes leftover after parsing attributes in process `syz.1.13767'.
[  898.991376][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13766'.
[  899.060449][T13386] netlink: 'syz.1.13768': attribute type 1 has an invalid length.
[  899.126581][T13386] 8021q: adding VLAN 0 to HW filter on device bond95
[  899.149326][T13392] bond95: (slave veth73): Enslaving as an active interface with a down link
[  899.282301][T13404] netlink: 'syz.0.13772': attribute type 8 has an invalid length.
[  899.284834][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13772'.
[  899.390960][T13386] bond95 (unregistering): (slave veth73): Releasing active interface
[  899.399811][T13386] bond95 (unregistering): Released all slaves
[  899.527016][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13774'.
[  899.534721][T13419] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13774'.
[  899.537614][T13419] tunl0: Caught tx_queue_len zero misconfig
[  899.602893][T13426] netlink: 'syz.0.13776': attribute type 3 has an invalid length.
[  899.640741][T13426] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  899.650572][T13422]  speed is unknown, defaulting to 1000
[  899.680423][T13422] ip6_vti0 speed is unknown, defaulting to 1000
[  899.696494][T13431] 1{X: left promiscuous mode
[  899.698670][T13431] 1{X: entered promiscuous mode
[  899.717590][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13775'.
[  899.749442][T13431] 8021q: adding VLAN 0 to HW filter on device .`
[  899.810054][T13431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  899.817514][T11327] ip6_vti0 speed is unknown, defaulting to 1000
[  899.820181][T11327] syz2: Port: 1 Link ACTIVE
[  899.822577][T11327] ip6_vti0 speed is unknown, defaulting to 1000
[  899.903897][T13444] netlink: 'syz.0.13780': attribute type 8 has an invalid length.
[  899.906912][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13780'.
[  899.987373][T13422] wg1 speed is unknown, defaulting to 1000
[  900.069132][T13453] 8021q: adding VLAN 0 to HW filter on device bond50
[  900.189042][T13457] vlan0: left promiscuous mode
[  900.215903][T13457] bond50: (slave vlan0): Enslaving as an active interface with an up link
[  900.337357][T13463] netlink: 'syz.0.13786': attribute type 18 has an invalid length.
[  900.532813][T13457] bond50 (unregistering): (slave vlan0): Releasing backup interface
[  900.542761][T13457] bond50 (unregistering): Released all slaves
[  900.641438][T13468] bond112: Unable to set down delay as MII monitoring is disabled
[  900.645834][T13468] bond112 (unregistering): Released all slaves
[  900.754646][T13474] netlink: 'syz.1.13790': attribute type 8 has an invalid length.
[  901.393170][T13529] netlink: 'syz.0.13806': attribute type 1 has an invalid length.
[  901.408192][T13529] 8021q: adding VLAN 0 to HW filter on device bond112
[  901.410703][T13530] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  901.494635][T13515] delete_channel: no stack
[  901.524633][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  901.528201][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  901.534722][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  901.538601][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  901.589529][T13537] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  901.644216][T13539] bond50: option packets_per_slave: invalid value (1735287149)
[  901.647513][T13539] bond50: option packets_per_slave: allowed values 0 - 65535
[  901.652811][T13539] bond50 (unregistering): Released all slaves
[  901.712297][T30570] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  901.890078][T13549] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!!b.>nS#^'
[  901.895242][T13549] CPU: 1 UID: 0 PID: 13549 Comm: syz.3.13812 Not tainted syzkaller #0 PREEMPT(full) 
[  901.895288][T13549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  901.895297][T13549] Call Trace:
[  901.895306][T13549]  <TASK>
[  901.895314][T13549]  dump_stack_lvl+0x189/0x250
[  901.895358][T13549]  ? __pfx_dump_stack_lvl+0x10/0x10
[  901.895378][T13549]  ? __pfx__printk+0x10/0x10
[  901.895398][T13549]  ? kernfs_path_from_node+0x2f/0x290
[  901.895417][T13549]  ? kernfs_path_from_node+0x250/0x290
[  901.895431][T13549]  ? kernfs_path_from_node+0x2f/0x290
[  901.895451][T13549]  sysfs_warn_dup+0x8e/0xa0
[  901.895468][T13549]  sysfs_do_create_link_sd+0xc0/0x110
[  901.895486][T13549]  device_add_class_symlinks+0x1cf/0x240
[  901.895506][T13549]  device_add+0x475/0xb50
[  901.895526][T13549]  wiphy_register+0x1d2e/0x2d20
[  901.895557][T13549]  ? __pfx_wiphy_register+0x10/0x10
[  901.895572][T13549]  ? __pfx_netdev_run_todo+0x10/0x10
[  901.895590][T13549]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  901.895617][T13549]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  901.895639][T13549]  ieee80211_register_hw+0x3473/0x40d0
[  901.895671][T13549]  ? ieee80211_register_hw+0x1451/0x40d0
[  901.895698][T13549]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  901.895715][T13549]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  901.895735][T13549]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  901.895749][T13549]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  901.895770][T13549]  ? __hrtimer_setup+0x187/0x210
[  901.895784][T13549]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  901.895803][T13549]  mac80211_hwsim_new_radio+0x2f9a/0x5260
[  901.895847][T13549]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  901.895860][T13549]  ? trace_kmalloc+0x1f/0xd0
[  901.895878][T13549]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  901.895897][T13549]  ? kstrndup+0xbf/0x160
[  901.895919][T13549]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  901.895940][T13549]  ? __pfx___nla_validate_parse+0x10/0x10
[  901.895967][T13549]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  901.895987][T13549]  ? rcu_is_watching+0x15/0xb0
[  901.896005][T13549]  ? __nla_parse+0x40/0x60
[  901.896023][T13549]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  901.896043][T13549]  genl_family_rcv_msg_doit+0x215/0x300
[  901.896061][T13549]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  901.896085][T13549]  ? bpf_lsm_capable+0x9/0x20
[  901.896101][T13549]  ? security_capable+0x7e/0x2e0
[  901.896125][T13549]  genl_rcv_msg+0x60e/0x790
[  901.896143][T13549]  ? __pfx_genl_rcv_msg+0x10/0x10
[  901.896155][T13549]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  901.896180][T13549]  netlink_rcv_skb+0x208/0x470
[  901.896196][T13549]  ? __lock_acquire+0xab9/0xd20
[  901.896209][T13549]  ? __pfx_genl_rcv_msg+0x10/0x10
[  901.896246][T13549]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  901.896306][T13549]  ? down_read+0x1ad/0x2e0
[  901.896326][T13549]  genl_rcv+0x28/0x40
[  901.896346][T13549]  netlink_unicast+0x82f/0x9e0
[  901.896371][T13549]  ? __pfx_netlink_unicast+0x10/0x10
[  901.896387][T13549]  ? netlink_sendmsg+0x642/0xb30
[  901.896403][T13549]  ? skb_put+0x11b/0x210
[  901.896422][T13549]  netlink_sendmsg+0x805/0xb30
[  901.896446][T13549]  ? __pfx_netlink_sendmsg+0x10/0x10
[  901.896465][T13549]  ? aa_sock_msg_perm+0xf1/0x1d0
[  901.896485][T13549]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  901.896498][T13549]  ? __pfx_netlink_sendmsg+0x10/0x10
[  901.896515][T13549]  __sock_sendmsg+0x21c/0x270
[  901.896538][T13549]  ____sys_sendmsg+0x505/0x830
[  901.896559][T13549]  ? __pfx_____sys_sendmsg+0x10/0x10
[  901.896583][T13549]  ? import_iovec+0x74/0xa0
[  901.896602][T13549]  ___sys_sendmsg+0x21f/0x2a0
[  901.896621][T13549]  ? __pfx____sys_sendmsg+0x10/0x10
[  901.896665][T13549]  ? __fget_files+0x2a/0x420
[  901.896678][T13549]  ? __fget_files+0x3a0/0x420
[  901.896700][T13549]  __x64_sys_sendmsg+0x19b/0x260
[  901.896719][T13549]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  901.896750][T13549]  ? do_syscall_64+0xbe/0xfa0
[  901.896769][T13549]  do_syscall_64+0xfa/0xfa0
[  901.896784][T13549]  ? lockdep_hardirqs_on+0x9c/0x150
[  901.896799][T13549]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.896812][T13549]  ? exc_page_fault+0xab/0x100
[  901.896829][T13549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.896850][T13549] RIP: 0033:0x7f533778f7c9
[  901.896862][T13549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  901.896874][T13549] RSP: 002b:00007f533864d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  901.896891][T13549] RAX: ffffffffffffffda RBX: 00007f53379e5fa0 RCX: 00007f533778f7c9
[  901.896901][T13549] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  901.896911][T13549] RBP: 00007f53377f297f R08: 0000000000000000 R09: 0000000000000000
[  901.896919][T13549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  901.896926][T13549] R13: 00007f53379e6038 R14: 00007f53379e5fa0 R15: 00007ffc1cc857a8
[  901.896951][T13549]  </TASK>
[  902.315513][T13573] netlink: 'syz.1.13818': attribute type 4 has an invalid length.
[  902.344296][T13582] netlink: 'syz.1.13821': attribute type 8 has an invalid length.
[  902.419733][T13596] sctp: [Deprecated]: syz.3.13825 (pid 13596) Use of int in max_burst socket option deprecated.
[  902.419733][T13596] Use struct sctp_assoc_value instead
[  902.427072][T13596] IPVS: set_ctl: invalid protocol: 39 172.20.20.6:20002
[  902.482491][T13601] IPVS: set_ctl: invalid protocol: 384 0.32.0.0:18432
[  903.403398][T13628] bond50: option arp_all_targets: invalid value (18446744073709551615)
[  903.407223][T13628] bond50 (unregistering): Released all slaves
[  903.842085][T13660] validate_nla: 3 callbacks suppressed
[  903.842095][T13660] netlink: 'syz.3.13842': attribute type 2 has an invalid length.
[  903.848424][T13660] __nla_validate_parse: 25 callbacks suppressed
[  903.848432][T13660] netlink: 119 bytes leftover after parsing attributes in process `syz.3.13842'.
[  903.901593][T13667] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  904.189518][T13687] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  904.194320][T13687] syzkaller0: entered promiscuous mode
[  904.196434][T13687] syzkaller0: entered allmulticast mode
[  904.223987][T13685] netlink: 220 bytes leftover after parsing attributes in process `syz.1.13847'.
[  904.266577][T13692] netlink: 'syz.1.13850': attribute type 39 has an invalid length.
[  904.269435][T13693] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13850'.
[  904.273516][T13693] netlink: 43 bytes leftover after parsing attributes in process `syz.1.13850'.
[  904.277955][T13693] netlink: 'syz.1.13850': attribute type 5 has an invalid length.
[  904.281265][T13693] netlink: 43 bytes leftover after parsing attributes in process `syz.1.13850'.
[  904.299095][T13690] can: request_module (can-proto-0) failed.
[  904.380483][T13706] netlink: 'syz.0.13853': attribute type 10 has an invalid length.
[  904.383711][T13706] netlink: 'syz.0.13853': attribute type 10 has an invalid length.
[  904.406053][T13708] netlink: 'syz.1.13854': attribute type 1 has an invalid length.
[  904.426979][T13708] 8021q: adding VLAN 0 to HW filter on device bond95
[  904.432617][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13854'.
[  904.473290][T13712] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13855'.
[  904.574433][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13856'.
[  904.598670][T13712] .` (unregistering): Released all slaves
[  904.605024][T13720] netlink: 'syz.1.13856': attribute type 1 has an invalid length.
[  904.628014][T13720] bond96: entered promiscuous mode
[  904.630500][T13720] 8021q: adding VLAN 0 to HW filter on device bond96
[  904.638168][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13856'.
[  904.645269][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13856'.
[  904.731511][T13727] netlink: 'syz.1.13859': attribute type 1 has an invalid length.
[  904.768627][T13727] 8021q: adding VLAN 0 to HW filter on device bond97
[  904.842981][T13727] vlan1: entered allmulticast mode
[  904.845175][T13731] netlink: 'syz.0.13860': attribute type 1 has an invalid length.
[  904.847847][T13727] bond97: entered allmulticast mode
[  904.889559][T13731] bond114: (slave vxcan1): The slave device specified does not support setting the MAC address
[  904.896114][T13731] bond114: (slave vxcan1): Error -95 calling set_mac_address
[  905.027815][T13735] openvswitch: netlink: IP tunnel dst address not specified
[  905.043320][T13741] macvlan0: entered promiscuous mode
[  905.046809][T13741] macvlan0: entered allmulticast mode
[  905.049268][T13741] bond114: entered promiscuous mode
[  905.051327][T13741] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  905.062442][T13741] bond114: left promiscuous mode
[  905.220291][T13766] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  905.671032][T13790] netlink: 'syz.0.13876': attribute type 54 has an invalid length.
[  906.169720][T13821] gretap7: entered allmulticast mode
[  906.409408][T13833] siw: device registration error -23
[  906.649955][T13848]  speed is unknown, defaulting to 1000
[  906.657638][T13848] ip6_vti0 speed is unknown, defaulting to 1000
[  906.690535][T13849] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  906.855825][T13848] wg1 speed is unknown, defaulting to 1000
[  906.928563][T13858]  speed is unknown, defaulting to 1000
[  906.934339][T13858] ip6_vti0 speed is unknown, defaulting to 1000
[  906.986188][T13859] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11
[  907.424938][T13858] wg1 speed is unknown, defaulting to 1000
[  908.417369][T13889] tipc: Resetting bearer <eth:syzkaller0>
[  908.702203][T13897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  908.760007][T13905] bond115: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  908.767661][T13905] bond115 (unregistering): Released all slaves
[  908.891697][T13923] __nla_validate_parse: 21 callbacks suppressed
[  908.891717][T13923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13912'.
[  908.947444][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13915'.
[  908.974872][T13935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13917'.
[  908.976010][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13916'.
[  908.983412][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13916'.
[  909.046991][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13921'.
[  909.055789][T13946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13920'.
[  909.077100][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13922'.
[  909.106495][T13948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13922'.
[  909.110110][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13922'.
[  909.200732][T13962] Set syz0 is full, maxelem 0 reached
[  909.206815][T13962] xt_policy: output policy not valid in PREROUTING and INPUT
[  909.336846][T13979] delete_channel: no stack
[  909.533576][T13998]  speed is unknown, defaulting to 1000
[  909.536584][T13998] ip6_vti0 speed is unknown, defaulting to 1000
[  909.602393][T14000] 8021q: adding VLAN 0 to HW filter on device bond50
[  909.858677][T14003] bond50 (unregistering): Released all slaves
[  909.873070][T14000] workqueue: Failed to create a rescuer kthread for wq "bond50": -EINTR
[  909.957088][T14009] validate_nla: 5 callbacks suppressed
[  909.957101][T14009] netlink: 'syz.3.13935': attribute type 4 has an invalid length.
[  909.986596][T14010] netlink: 'syz.3.13935': attribute type 4 has an invalid length.
[  910.018512][T14009] netlink: 'syz.3.13935': attribute type 4 has an invalid length.
[  910.028729][T14010] netlink: 'syz.3.13935': attribute type 4 has an invalid length.
[  910.075843][T13998] wg1 speed is unknown, defaulting to 1000
[  910.160084][T14022] pim6reg1: entered promiscuous mode
[  910.164579][T14022] pim6reg1: entered allmulticast mode
[  910.265077][T14028] netlink: 'syz.1.13941': attribute type 1 has an invalid length.
[  910.288695][T14028] bond99: entered promiscuous mode
[  910.296796][T14028] 8021q: adding VLAN 0 to HW filter on device bond99
[  910.329871][T14034] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  910.367466][T14034] netem: change failed
[  910.523282][T14053] netlink: 'syz.1.13945': attribute type 1 has an invalid length.
[  910.559745][T14053] 8021q: adding VLAN 0 to HW filter on device bond100
[  910.603593][T14052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  910.649308][T14063] netlink: 'syz.1.13950': attribute type 2 has an invalid length.
[  910.652524][T14063] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  910.661170][T14063] tipc: Resetting bearer <eth:syzkaller0>
[  910.666848][T14065] netlink: 'syz.0.13951': attribute type 10 has an invalid length.
[  910.668791][T14063] netlink: 'syz.1.13950': attribute type 1 has an invalid length.
[  910.741257][T14052] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  910.754687][T14052] : renamed from wg2
[  910.760579][T14072] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  910.894486][T14074] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  910.907288][T14069] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  910.937878][T11315] ip6_vti0 speed is unknown, defaulting to 1000
[  910.941536][T11315] syz2: Port: 1 Link DOWN
[  910.977698][T11317] wg1 speed is unknown, defaulting to 1000
[  910.981323][T11315] ip6_vti0 speed is unknown, defaulting to 1000
[  910.987262][T11317] syz: Port: 1 Link DOWN
[  911.040402][T14076]  speed is unknown, defaulting to 1000
[  911.044190][T14076] ip6_vti0 speed is unknown, defaulting to 1000
[  911.287561][T14076] wg1 speed is unknown, defaulting to 1000
[  911.344969][T14098] pim6reg: entered allmulticast mode
[  911.374274][T14098] pim6reg: left allmulticast mode
[  911.414942][T14104] netlink: 'syz.3.13961': attribute type 1 has an invalid length.
[  911.599276][T14110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  911.683327][T14116] rdma_rxe: rxe_newlink: failed to add xfrm0
[  911.776540][T14121] gre0: entered promiscuous mode
[  911.778071][T14121] gre0: entered allmulticast mode
[  911.881951][T14128] syzkaller0: left promiscuous mode
[  911.884696][T14128] syzkaller0: left allmulticast mode
[  912.117389][T14153] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  912.171612][T14157] workqueue: Failed to create a rescuer kthread for wq "bond52": -EINTR
[  912.264718][T14166] block nbd6: shutting down sockets
[  912.377133][T14187]  speed is unknown, defaulting to 1000
[  912.379952][T14187] ip6_vti0 speed is unknown, defaulting to 1000
[  912.403379][T14184] 8021q: adding VLAN 0 to HW filter on device bond0
[  912.515275][T14193] sctp: [Deprecated]: syz.3.13987 (pid 14193) Use of struct sctp_assoc_value in delayed_ack socket option.
[  912.515275][T14193] Use struct sctp_sack_info instead
[  912.629249][T14187] wg1 speed is unknown, defaulting to 1000
[  913.155674][T14209] 8021q: adding VLAN 0 to HW filter on device bond116
[  913.178965][T14207] bond101: option arp_validate: invalid value (18446744073491447809)
[  913.184239][T14207] bond101 (unregistering): Released all slaves
[  913.214760][T14212] tipc: Resetting bearer <eth:syzkaller0>
[  913.302724][T14220] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  913.306614][T14220] vlan0: entered allmulticast mode
[  913.308378][T14220] 1{X: entered allmulticast mode
[  913.406047][T14226] syzkaller0: entered promiscuous mode
[  913.409139][T14226] syzkaller0: entered allmulticast mode
[  913.415666][T14226] tipc: Resetting bearer <eth:syzkaller0>
[  913.470946][T14224] bond0: (slave rose0): Error: Device can not be enslaved while up
[  913.678558][T14242] 8021q: adding VLAN 0 to HW filter on device bond52
[  913.751015][T14248] tipc: Resetting bearer <eth:veth0_to_team>
[  914.377483][T14261]  speed is unknown, defaulting to 1000
[  914.382916][T14261] ip6_vti0 speed is unknown, defaulting to 1000
[  914.700379][T14261] wg1 speed is unknown, defaulting to 1000
[  914.708064][T14269] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  914.826163][T14280] __nla_validate_parse: 39 callbacks suppressed
[  914.826174][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14011'.
[  914.875085][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14013'.
[  914.902547][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14012'.
[  914.975992][T14292] validate_nla: 5 callbacks suppressed
[  914.976009][T14292] netlink: 'syz.1.14015': attribute type 10 has an invalid length.
[  915.096358][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14017'.
[  915.216994][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14020'.
[  915.235184][T14310] macsec1: entered promiscuous mode
[  915.237738][T14310] macsec1: entered allmulticast mode
[  915.440824][T14319] gtp8: entered promiscuous mode
[  915.445281][T14319] gtp8: entered allmulticast mode
[  915.718597][T14335] netlink: 'syz.0.14027': attribute type 39 has an invalid length.
[  915.721614][T14335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14027'.
[  915.726837][T14335] netlink: 43 bytes leftover after parsing attributes in process `syz.0.14027'.
[  915.729544][T14335] netlink: 'syz.0.14027': attribute type 5 has an invalid length.
[  915.732599][T14335] netlink: 43 bytes leftover after parsing attributes in process `syz.0.14027'.
[  915.740357][T14335] vlan1: entered allmulticast mode
[  915.869413][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14028'.
[  915.958136][T14347] netlink: 'syz.1.14030': attribute type 1 has an invalid length.
[  915.960919][T14346] workqueue: Failed to create a rescuer kthread for wq "bond101": -EINTR
[  915.966804][T14347] workqueue: Failed to create a rescuer kthread for wq "bond101": -EINTR
[  915.980300][T14342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14029'.
[  916.216938][T14365] netlink: 'syz.0.14036': attribute type 11 has an invalid length.
[  916.318700][T14372] vxcan1: entered allmulticast mode
[  916.524679][T14388] SET target dimension over the limit!
[  916.527243][T14387] SET target dimension over the limit!
[  916.559052][T14390] bond117: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  916.571018][T14390] bond117 (unregistering): Released all slaves
[  916.587550][T14395] netlink: 'syz.3.14045': attribute type 1 has an invalid length.
[  916.785361][T14407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  917.368631][T14450] geneve0: left promiscuous mode
[  917.383295][T14453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  917.420982][T14455] nicvf0: left allmulticast mode
[  917.433888][T14455] bond0: (slave gre0): Error: Device type is different from other slaves
[  917.511864][T14465] 8021q: adding VLAN 0 to HW filter on device bond117
[  917.521687][T14468] netlink: 'syz.1.14071': attribute type 3 has an invalid length.
[  917.558149][T14468] 8021q: adding VLAN 0 to HW filter on device bond101
[  917.667422][T14476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  917.716951][T14480] bond102: option lacp_active: invalid value (8)
[  917.723152][T14480] bond102 (unregistering): Released all slaves
[  917.840756][T11315] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured!
[  917.946868][ T5867] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  917.950236][ T5867] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  917.954247][T14503] IPVS: Unknown mcast interface: vcan0
[  917.964996][T14503] netlink: 'syz.1.14084': attribute type 9 has an invalid length.
[  917.972719][T11315] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  918.034234][T14509] netlink: 'syz.1.14086': attribute type 1 has an invalid length.
[  918.152227][T11317] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  918.210548][T14522] netlink: 'syz.0.14089': attribute type 1 has an invalid length.
[  918.212332][ T5867] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured!
[  918.217821][T14522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  918.218311][T14523] netlink: 'syz.1.14090': attribute type 1 has an invalid length.
[  918.248967][T14523] bond102: entered promiscuous mode
[  918.250936][T14523] 8021q: adding VLAN 0 to HW filter on device bond102
[  918.271001][T14523] bond102: (slave ipvlan10): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  918.275405][T14523] bond102: (slave ipvlan10): The slave device specified does not support setting the MAC address
[  918.288954][T14523] bond102: (slave ipvlan10): Setting fail_over_mac to active for active-backup mode
[  918.296956][T14523] 8021q: adding VLAN 0 to HW filter on device ipvlan10
[  918.347652][T14513] gretap0: entered promiscuous mode
[  918.349889][T14513] batman_adv: batadv0: Adding interface: gretap0
[  918.355019][T14513] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568.
[  918.363398][T14513] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active
[  918.832932][T11315] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  918.912242][T11315] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured!
[  919.232778][   T12] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured!
[  919.236011][   T12] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured!
[  919.558326][T14581] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  919.570487][T14581] !: entered promiscuous mode
[  919.623160][T14583] syzkaller1: entered promiscuous mode
[  919.625095][T14583] syzkaller1: entered allmulticast mode
[  919.958431][T14608] __nla_validate_parse: 34 callbacks suppressed
[  919.958441][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14114'.
[  919.988309][T14609] validate_nla: 5 callbacks suppressed
[  919.988320][T14609] netlink: 'syz.1.14115': attribute type 9 has an invalid length.
[  920.002650][T14609] netlink: 'syz.1.14115': attribute type 6 has an invalid length.
[  920.115853][T14616] bond1: option mode: unable to set because the bond device has slaves
[  920.119062][T14616] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  920.127396][T14616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  920.148401][T14618] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  920.215818][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14121'.
[  920.234581][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14120'.
[  920.256560][T14624] 8021q: adding VLAN 0 to HW filter on device bond103
[  920.298391][T14624]  speed is unknown, defaulting to 1000
[  920.302237][T14624] ip6_vti0 speed is unknown, defaulting to 1000
[  920.326963][T14629] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  920.357310][T14626]  speed is unknown, defaulting to 1000
[  920.475538][T14637] bond0: (slave rose0): Error: Device can not be enslaved while up
[  920.497145][T14635]  speed is unknown, defaulting to 1000
[  920.520855][T14639] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14124'.
[  920.554165][T14626] ip6_vti0 speed is unknown, defaulting to 1000
[  920.741650][T14635] ip6_vti0 speed is unknown, defaulting to 1000
[  920.784140][T14624] wg1 speed is unknown, defaulting to 1000
[  920.969140][T14626] wg1 speed is unknown, defaulting to 1000
[  921.090803][T14635] wg1 speed is unknown, defaulting to 1000
[  921.094690][T14642] siw: device registration error -23
[  921.421352][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14127'.
[  921.576701][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14130'.
[  921.580322][T14659] netlink: 312 bytes leftover after parsing attributes in process `syz.3.14130'.
[  921.593332][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14130'.
[  921.604198][T14659] openvswitch: netlink: Multiple metadata blocks provided
[  921.648785][T14659] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14130'.
[  921.759819][T14661] netlink: 'syz.3.14131': attribute type 3 has an invalid length.
[  921.940144][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14133'.
[  922.200110][T14686] netlink: 'syz.1.14139': attribute type 8 has an invalid length.
[  922.717945][T14697] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  922.760899][T14701] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  922.838792][T14705] gre0: left promiscuous mode
[  922.840463][T14705] gre0: left allmulticast mode
[  922.849639][T14705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  922.975547][T14712] netlink: 'syz.0.14147': attribute type 12 has an invalid length.
[  923.050610][T14718]  speed is unknown, defaulting to 1000
[  923.056470][T14718] ip6_vti0 speed is unknown, defaulting to 1000
[  923.071963][    C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  923.071981][    C0] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured!
[  923.093439][T14719] veth0: entered promiscuous mode
[  923.144606][T14719] netlink: 'syz.0.14148': attribute type 16 has an invalid length.
[  923.148214][T14719] netlink: 'syz.0.14148': attribute type 17 has an invalid length.
[  923.159226][T14719] 1{X: left promiscuous mode
[  923.161325][T14719] 1{X: entered promiscuous mode
[  923.179964][T14719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  923.190322][T11327] ip6_vti0 speed is unknown, defaulting to 1000
[  923.196202][T11327] syz2: Port: 1 Link ACTIVE
[  923.200514][T11327] ip6_vti0 speed is unknown, defaulting to 1000
[  923.315821][T14718] wg1 speed is unknown, defaulting to 1000
[  923.399388][T14719] veth0: left promiscuous mode
[  923.527423][T14728] syzkaller0: left promiscuous mode
[  923.529523][T14728] syzkaller0: left allmulticast mode
[  923.648565][T14735] netlink: 'syz.0.14152': attribute type 1 has an invalid length.
[  923.707068][T14743] netlink: 'syz.1.14155': attribute type 16 has an invalid length.
[  923.709683][T14743] netlink: 'syz.1.14155': attribute type 17 has an invalid length.
[  923.744446][T14743] tipc: Resetting bearer <eth:syzkaller0>
[  923.857608][T14745] 8021q: adding VLAN 0 to HW filter on device bond120
[  924.464046][T14780]  speed is unknown, defaulting to 1000
[  924.468268][T14780] ip6_vti0 speed is unknown, defaulting to 1000
[  924.716741][T14780] wg1 speed is unknown, defaulting to 1000
[  925.164281][T14809] __nla_validate_parse: 19 callbacks suppressed
[  925.164294][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14171'.
[  925.169009][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14171'.
[  925.171719][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14171'.
[  925.176403][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14171'.
[  925.180120][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14171'.
[  925.184842][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14171'.
[  925.188427][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14171'.
[  925.192546][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14171'.
[  925.196196][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14171'.
[  925.199703][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14171'.
[  925.337814][T14821] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  925.526895][T14830] validate_nla: 4 callbacks suppressed
[  925.526911][T14830] netlink: 'syz.3.14177': attribute type 62 has an invalid length.
[  925.866996][T14838] bond54: entered promiscuous mode
[  925.869236][T14838] bond54: entered allmulticast mode
[  925.872081][T14838] 8021q: adding VLAN 0 to HW filter on device bond54
[  926.172890][T14856] siw: device registration error -23
[  926.239598][T14856] netlink: 'syz.0.14186': attribute type 1 has an invalid length.
[  926.385774][T14877] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  926.430740][T14879] netlink: 'syz.1.14194': attribute type 1 has an invalid length.
[  926.454715][T14879] 8021q: adding VLAN 0 to HW filter on device bond104
[  926.470090][T14879] 8021q: adding VLAN 0 to HW filter on device batadv5
[  926.476370][T14879] bond104: (slave batadv5): making interface the new active one
[  926.480760][T14879] bond104: (slave batadv5): Enslaving as an active interface with an up link
[  926.687701][T14879] bond104 (unregistering): (slave batadv5): Releasing active interface
[  926.699828][T14879] bond104 (unregistering): Released all slaves
[  926.910077][T14896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.957696][T14903] netlink: 'syz.1.14201': attribute type 4 has an invalid length.
[  926.964531][T14903] netlink: 'syz.1.14201': attribute type 4 has an invalid length.
[  927.057733][T14911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  927.456002][T14941]  speed is unknown, defaulting to 1000
[  927.459888][T14941] ip6_vti0 speed is unknown, defaulting to 1000
[  927.690969][T14941] wg1 speed is unknown, defaulting to 1000
[  927.875540][T14977] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  927.885089][T14977] syzkaller0: entered promiscuous mode
[  927.887005][T14977] syzkaller0: entered allmulticast mode
[  927.977679][T14985] bridge97: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  928.112199][T14995] dvmrp12: entered allmulticast mode
[  928.116299][T14994] dvmrp12: left allmulticast mode
[  928.351203][T15013] bond104: option lacp_active: invalid value (8)
[  928.356724][T15013] bond104 (unregistering): Released all slaves
[  928.417662][T15022]  speed is unknown, defaulting to 1000
[  928.420646][T15022] ip6_vti0 speed is unknown, defaulting to 1000
[  928.650418][T15022] wg1 speed is unknown, defaulting to 1000
[  928.664770][T15042] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  928.694277][T15044] syzkaller0: left promiscuous mode
[  928.695996][T15044] syzkaller0: left allmulticast mode
[  928.801110][T15058] netlink: 'syz.3.14245': attribute type 14 has an invalid length.
[  928.805882][T15058] netlink: 'syz.3.14245': attribute type 13 has an invalid length.
[  928.985506][T15069] netlink: 'syz.0.14250': attribute type 1 has an invalid length.
[  929.043806][T15069] 8021q: adding VLAN 0 to HW filter on device bond122
[  929.062632][T15073] team0: Device gtp3 is up. Set it down before adding it as a team port
[  929.118624][T15074] 8021q: adding VLAN 0 to HW filter on device bond122
[  929.122322][T15074] bond122: (slave vxcan7): The slave device specified does not support setting the MAC address
[  929.127939][T15074] bond122: (slave vxcan7): Error -95 calling set_mac_address
[  929.151629][T15069] veth65: entered promiscuous mode
[  929.157262][T15069] bond122: (slave veth65): Enslaving as an active interface with a down link
[  929.231987][    C1] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  929.296731][T15078] bond55: (slave ip_vti0): Device is not bonding slave
[  929.299076][T15078] bond55: option active_slave: invalid value (ip_vti0)
[  929.306278][T15078] bond55 (unregistering): Released all slaves
[  929.447687][T15105] netlink: 'syz.3.14259': attribute type 8 has an invalid length.
[  929.712714][T15124] siw: device registration error -23
[  929.827097][T15136] netlink: 'syz.3.14269': attribute type 1 has an invalid length.
[  929.858273][T15137] bond123: entered allmulticast mode
[  929.860269][T15137] 8021q: adding VLAN 0 to HW filter on device bond123
[  930.158704][T15168] RDS: rds_bind could not find a transport for ::ffff:172.20.20.45, load rds_tcp or rds_rdma?
[  930.217085][T15171] __nla_validate_parse: 527 callbacks suppressed
[  930.217101][T15171] netlink: 220 bytes leftover after parsing attributes in process `syz.3.14277'.
[  930.345429][T15174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  930.348860][T15174] mac80211_hwsim hwsim122 wlan0: entered promiscuous mode
[  930.351410][T15174] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  930.403726][T15167] bond105: option arp_missed_max: invalid value (0)
[  930.405835][T15167] bond105: option arp_missed_max: allowed values 1 - 255
[  930.409530][T15167] bond105 (unregistering): Released all slaves
[  930.430667][T15179] 8021q: adding VLAN 0 to HW filter on device bond1
[  930.796695][T15198] validate_nla: 4 callbacks suppressed
[  930.796707][T15198] netlink: 'syz.3.14284': attribute type 83 has an invalid length.
[  931.151923][    C0] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured!
[  931.295414][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14289'.
[  931.327752][T15214] ip6_vti0: Caught tx_queue_len zero misconfig
[  931.669456][T15202] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  931.671530][T15202] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  932.468496][T15232] x_tables: duplicate underflow at hook 3
[  932.471679][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14294'.
[  932.477438][T15232] netlink: 'syz.0.14294': attribute type 7 has an invalid length.
[  932.480081][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14294'.
[  932.573100][T15243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14296'.
[  932.627597][T15244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14296'.
[  932.635851][ T5867] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  933.628706][T15254] ip6tnl0: Caught tx_queue_len zero misconfig
[  933.747992][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14301'.
[  936.591992][    C1] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  943.952112][    C1] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  945.232006][    C1] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  947.152110][    C0] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured!
[  962.512090][    C1] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  972.752218][    C1] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  979.152028][    C0] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured!
[  997.712248][    C1] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[ 1034.192091][    C1] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[ 1049.552449][    C0] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured!
[ 1075.152354][    C1] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[ 1093.072453][   T34] INFO: task kworker/0:2:30619 blocked for more than 143 seconds.
[ 1093.075680][   T34]       Not tainted syzkaller #0
[ 1093.079014][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1093.082768][   T34] task:kworker/0:2     state:D stack:25952 pid:30619 tgid:30619 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1093.087624][   T34] Workqueue: events rfkill_global_led_trigger_worker
[ 1093.090323][   T34] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1093.091689][   T34]  <TASK>
[ 1093.093730][   T34]  __schedule+0x1798/0x4cc0
[ 1093.095649][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1093.097862][   T34]  ? __pfx___schedule+0x10/0x10
[ 1093.099888][   T34]  ? schedule+0x91/0x360
[ 1093.101667][   T34]  schedule+0x165/0x360
[ 1093.103801][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1093.106042][   T34]  __mutex_lock+0x7e6/0x1350
[ 1093.107959][   T34]  ? __mutex_lock+0x5bb/0x1350
[ 1093.109905][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[ 1093.112530][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1093.114582][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[ 1093.116887][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[ 1093.119205][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[ 1093.121685][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[ 1093.124299][   T34]  process_scheduled_works+0xae1/0x17b0
[ 1093.126583][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1093.129019][   T34]  worker_thread+0x8a0/0xda0
[ 1093.130964][   T34]  ? __kthread_parkme+0x7b/0x200
[ 1093.133130][   T34]  kthread+0x711/0x8a0
[ 1093.134847][   T34]  ? __pfx_worker_thread+0x10/0x10
[ 1093.136922][   T34]  ? __pfx_kthread+0x10/0x10
[ 1093.138730][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1093.140852][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1093.143607][   T34]  ? __pfx_kthread+0x10/0x10
[ 1093.145514][   T34]  ret_from_fork+0x4bc/0x870
[ 1093.147408][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1093.149513][   T34]  ? __switch_to_asm+0x39/0x70
[ 1093.151454][   T34]  ? __switch_to_asm+0x33/0x70
[ 1093.153734][   T34]  ? __pfx_kthread+0x10/0x10
[ 1093.155567][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1093.157471][   T34]  </TASK>
[ 1093.158810][   T34] INFO: task syz.1.14275:15158 blocked for more than 143 seconds.
[ 1093.161968][   T34]       Not tainted syzkaller #0
[ 1093.163874][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1093.167149][   T34] task:syz.1.14275     state:D stack:24104 pid:15158 tgid:15158 ppid:5805   task_flags:0x400040 flags:0x00080002
[ 1093.172087][   T34] Call Trace:
[ 1093.173483][   T34]  <TASK>
[ 1093.174721][   T34]  __schedule+0x1798/0x4cc0
[ 1093.176578][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.178565][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.180526][   T34]  ? __pfx___schedule+0x10/0x10
[ 1093.182789][   T34]  ? schedule+0x91/0x360
[ 1093.185527][   T34]  schedule+0x165/0x360
[ 1093.187657][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1093.189773][   T34]  __mutex_lock+0x7e6/0x1350
[ 1093.191539][   T34]  ? __mutex_lock+0x5bb/0x1350
[ 1093.202021][   T34]  ? rfkill_unregister+0xc8/0x220
[ 1093.212015][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1093.214028][   T34]  ? __pfx_device_del+0x10/0x10
[ 1093.222039][   T34]  rfkill_unregister+0xc8/0x220
[ 1093.224080][   T34]  nfc_unregister_device+0x96/0x2a0
[ 1093.226200][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[ 1093.228531][   T34]  virtual_ncidev_close+0x56/0x90
[ 1093.230491][   T34]  __fput+0x44c/0xa70
[ 1093.233991][   T34]  task_work_run+0x1d4/0x260
[ 1093.235888][   T34]  ? __pfx_task_work_run+0x10/0x10
[ 1093.237928][   T34]  ? exit_to_user_mode_loop+0x40/0x130
[ 1093.240010][   T34]  exit_to_user_mode_loop+0xe9/0x130
[ 1093.242305][   T34]  do_syscall_64+0x2bd/0xfa0
[ 1093.244181][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.246492][   T34]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1093.248972][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.251316][   T34] RIP: 0033:0x7efd50b8f7c9
[ 1093.253291][   T34] RSP: 002b:00007ffcf2bee9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1093.256569][   T34] RAX: 0000000000000000 RBX: 00007efd50de7da0 RCX: 00007efd50b8f7c9
[ 1093.259701][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1093.262937][   T34] RBP: 00007efd50de7da0 R08: 00000000000001fc R09: 0000001df2beecaf
[ 1093.266106][   T34] R10: 00007efd50de7cb0 R11: 0000000000000246 R12: 00000000000e33c7
[ 1093.269291][   T34] R13: 00007efd50de6180 R14: ffffffffffffffff R15: 00007ffcf2beead0
[ 1093.272642][   T34]  </TASK>
[ 1093.273963][   T34] INFO: task syz.3.14286:15202 blocked for more than 143 seconds.
[ 1093.277088][   T34]       Not tainted syzkaller #0
[ 1093.279126][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1093.282826][   T34] task:syz.3.14286     state:D stack:27824 pid:15202 tgid:15201 ppid:2273   task_flags:0x400040 flags:0x00080003
[ 1093.287583][   T34] Call Trace:
[ 1093.288984][   T34]  <TASK>
[ 1093.290223][   T34]  __schedule+0x1798/0x4cc0
[ 1093.291725][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.293591][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.295505][   T34]  ? __pfx___schedule+0x10/0x10
[ 1093.297395][   T34]  ? schedule+0x91/0x360
[ 1093.299038][   T34]  schedule+0x165/0x360
[ 1093.300680][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1093.302692][   T34]  __mutex_lock+0x7e6/0x1350
[ 1093.304330][   T34]  ? __mutex_lock+0x5bb/0x1350
[ 1093.306117][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[ 1093.307738][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1093.309396][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1093.311360][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1093.313784][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1093.315939][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[ 1093.318131][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[ 1093.319909][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[ 1093.322360][   T34]  rfkill_set_block+0x1d2/0x440
[ 1093.324131][   T34]  rfkill_fop_write+0x44b/0x570
[ 1093.325730][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[ 1093.327391][   T34]  ? security_kernfs_init_security+0x260/0x290
[ 1093.329389][   T34]  ? rw_verify_area+0x255/0x4d0
[ 1093.331257][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.333234][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[ 1093.335246][   T34]  vfs_write+0x27e/0xb30
[ 1093.336893][   T34]  ? __pfx_vfs_write+0x10/0x10
[ 1093.338421][   T34]  ? __fget_files+0x2a/0x420
[ 1093.339865][   T34]  ? __fget_files+0x2a/0x420
[ 1093.341237][   T34]  ? __fget_files+0x3a0/0x420
[ 1093.342927][   T34]  ? __fget_files+0x2a/0x420
[ 1093.344687][   T34]  ksys_write+0x145/0x250
[ 1093.346329][   T34]  ? __pfx_ksys_write+0x10/0x10
[ 1093.348199][   T34]  ? do_syscall_64+0xbe/0xfa0
[ 1093.350014][   T34]  do_syscall_64+0xfa/0xfa0
[ 1093.351863][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1093.353886][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.356223][   T34]  ? exc_page_fault+0xab/0x100
[ 1093.357751][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.359568][   T34] RIP: 0033:0x7f533778f7c9
[ 1093.360951][   T34] RSP: 002b:00007f533864d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1093.363645][   T34] RAX: ffffffffffffffda RBX: 00007f53379e5fa0 RCX: 00007f533778f7c9
[ 1093.366061][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004
[ 1093.368446][   T34] RBP: 00007f53377f297f R08: 0000000000000000 R09: 0000000000000000
[ 1093.370873][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1093.373464][   T34] R13: 00007f53379e6038 R14: 00007f53379e5fa0 R15: 00007ffc1cc857a8
[ 1093.376282][   T34]  </TASK>
[ 1093.377484][   T34] INFO: task syz.0.14302:15262 blocked for more than 143 seconds.
[ 1093.380127][   T34]       Not tainted syzkaller #0
[ 1093.381718][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1093.384543][   T34] task:syz.0.14302     state:D stack:26088 pid:15262 tgid:15261 ppid:5810   task_flags:0x400140 flags:0x00080002
[ 1093.388151][   T34] Call Trace:
[ 1093.389186][   T34]  <TASK>
[ 1093.390114][   T34]  __schedule+0x1798/0x4cc0
[ 1093.391541][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.393136][   T34]  ? __pfx___schedule+0x10/0x10
[ 1093.394694][   T34]  ? schedule+0x91/0x360
[ 1093.396086][   T34]  schedule+0x165/0x360
[ 1093.397328][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1093.399008][   T34]  __mutex_lock+0x7e6/0x1350
[ 1093.400415][   T34]  ? __mutex_lock+0x5bb/0x1350
[ 1093.402195][   T34]  ? rfkill_fop_open+0x12d/0x820
[ 1093.403858][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1093.405460][   T34]  ? __raw_spin_lock_init+0x45/0x100
[ 1093.407076][   T34]  ? __init_waitqueue_head+0xa9/0x150
[ 1093.408736][   T34]  rfkill_fop_open+0x12d/0x820
[ 1093.410221][   T34]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1093.412052][   T34]  misc_open+0x2d5/0x350
[ 1093.413368][   T34]  chrdev_open+0x4cc/0x5e0
[ 1093.414792][   T34]  ? __pfx_chrdev_open+0x10/0x10
[ 1093.416377][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1093.418597][   T34]  ? __pfx_chrdev_open+0x10/0x10
[ 1093.420139][   T34]  do_dentry_open+0x953/0x13f0
[ 1093.421680][   T34]  vfs_open+0x3b/0x340
[ 1093.423144][   T34]  ? path_openat+0x2ecd/0x3830
[ 1093.424642][   T34]  path_openat+0x2ee5/0x3830
[ 1093.426092][   T34]  ? __pfx_path_openat+0x10/0x10
[ 1093.427641][   T34]  do_filp_open+0x1fa/0x410
[ 1093.429104][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.430554][   T34]  ? __pfx_do_filp_open+0x10/0x10
[ 1093.432218][   T34]  ? _raw_spin_unlock+0x28/0x50
[ 1093.433691][   T34]  ? alloc_fd+0x64c/0x6c0
[ 1093.435059][   T34]  do_sys_openat2+0x121/0x1c0
[ 1093.436582][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1093.438209][   T34]  ? rcu_is_watching+0x15/0xb0
[ 1093.439885][   T34]  __x64_sys_openat+0x138/0x170
[ 1093.441538][   T34]  do_syscall_64+0xfa/0xfa0
[ 1093.443171][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1093.444836][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.446875][   T34]  ? exc_page_fault+0xab/0x100
[ 1093.448498][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.450340][   T34] RIP: 0033:0x7f7f2658f7c9
[ 1093.451685][   T34] RSP: 002b:00007f7f274ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1093.454346][   T34] RAX: ffffffffffffffda RBX: 00007f7f267e5fa0 RCX: 00007f7f2658f7c9
[ 1093.456796][   T34] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 1093.459328][   T34] RBP: 00007f7f265f297f R08: 0000000000000000 R09: 0000000000000000
[ 1093.461997][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1093.464445][   T34] R13: 00007f7f267e6038 R14: 00007f7f267e5fa0 R15: 00007ffc95540428
[ 1093.466977][   T34]  </TASK>
[ 1093.467991][   T34] INFO: task syz-executor:15266 blocked for more than 143 seconds.
[ 1093.470486][   T34]       Not tainted syzkaller #0
[ 1093.472151][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1093.474806][   T34] task:syz-executor    state:D stack:28008 pid:15266 tgid:15266 ppid:1      task_flags:0x400040 flags:0x00080000
[ 1093.478414][   T34] Call Trace:
[ 1093.479530][   T34]  <TASK>
[ 1093.480470][   T34]  __schedule+0x1798/0x4cc0
[ 1093.482064][   T34]  ? security_file_open+0xb1/0x270
[ 1093.483660][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.485113][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.486558][   T34]  ? __pfx___schedule+0x10/0x10
[ 1093.488114][   T34]  ? schedule+0x91/0x360
[ 1093.489559][   T34]  schedule+0x165/0x360
[ 1093.490985][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1093.493055][   T34]  __mutex_lock+0x7e6/0x1350
[ 1093.494549][   T34]  ? __mutex_lock+0x5bb/0x1350
[ 1093.496036][   T34]  ? misc_open+0x51/0x350
[ 1093.497418][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1093.499048][   T34]  misc_open+0x51/0x350
[ 1093.500361][   T34]  chrdev_open+0x4cc/0x5e0
[ 1093.501712][   T34]  ? __pfx_chrdev_open+0x10/0x10
[ 1093.503444][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1093.505975][   T34]  ? __pfx_chrdev_open+0x10/0x10
[ 1093.507766][   T34]  do_dentry_open+0x953/0x13f0
[ 1093.509865][   T34]  vfs_open+0x3b/0x340
[ 1093.511411][   T34]  ? path_openat+0x2ecd/0x3830
[ 1093.513157][   T34]  path_openat+0x2ee5/0x3830
[ 1093.514766][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[ 1093.516499][   T34]  ? count_memcg_event_mm+0x21/0x260
[ 1093.518198][   T34]  ? __pfx_path_openat+0x10/0x10
[ 1093.520083][   T34]  ? __pfx___up_read+0x10/0x10
[ 1093.522261][   T34]  ? do_user_addr_fault+0xbbc/0x1380
[ 1093.524489][   T34]  do_filp_open+0x1fa/0x410
[ 1093.526288][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.528201][   T34]  ? __pfx_do_filp_open+0x10/0x10
[ 1093.530184][   T34]  ? _raw_spin_unlock+0x28/0x50
[ 1093.532215][   T34]  ? alloc_fd+0x64c/0x6c0
[ 1093.533619][   T34]  do_sys_openat2+0x121/0x1c0
[ 1093.535099][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1093.536730][   T34]  ? fd_install+0x97/0x540
[ 1093.538126][   T34]  ? fd_install+0x30d/0x540
[ 1093.539502][   T34]  __x64_sys_openat+0x138/0x170
[ 1093.540975][   T34]  do_syscall_64+0xfa/0xfa0
[ 1093.542578][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1093.544266][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.546636][   T34]  ? exc_page_fault+0xab/0x100
[ 1093.548539][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.550827][   T34] RIP: 0033:0x7f693cf8df91
[ 1093.552702][   T34] RSP: 002b:00007ffe7de258d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1093.555326][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f693cf8df91
[ 1093.557824][   T34] RDX: 0000000000000002 RSI: 00007f693cff0d1b RDI: 00000000ffffff9c
[ 1093.560330][   T34] RBP: 00007f693cff0d1b R08: 0000000000000000 R09: 00007f693dd1d6c0
[ 1093.562996][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[ 1093.565583][   T34] R13: 0000000000000003 R14: 00007ffe7de25ca8 R15: 0000000000000000
[ 1093.568699][   T34]  </TASK>
[ 1093.569952][   T34] INFO: task syz-executor:15267 blocked for more than 143 seconds.
[ 1093.573145][   T34]       Not tainted syzkaller #0
[ 1093.575020][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1093.577973][   T34] task:syz-executor    state:D stack:28008 pid:15267 tgid:15267 ppid:1      task_flags:0x400040 flags:0x00080000
[ 1093.582626][   T34] Call Trace:
[ 1093.583968][   T34]  <TASK>
[ 1093.585119][   T34]  __schedule+0x1798/0x4cc0
[ 1093.586935][   T34]  ? security_file_open+0xb1/0x270
[ 1093.588956][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.590853][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.592893][   T34]  ? __pfx___schedule+0x10/0x10
[ 1093.594771][   T34]  ? schedule+0x91/0x360
[ 1093.596403][   T34]  schedule+0x165/0x360
[ 1093.598037][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1093.600121][   T34]  __mutex_lock+0x7e6/0x1350
[ 1093.602127][   T34]  ? __mutex_lock+0x5bb/0x1350
[ 1093.603997][   T34]  ? misc_open+0x51/0x350
[ 1093.605528][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1093.607246][   T34]  misc_open+0x51/0x350
[ 1093.608558][   T34]  chrdev_open+0x4cc/0x5e0
[ 1093.609941][   T34]  ? __pfx_chrdev_open+0x10/0x10
[ 1093.611513][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1093.613582][   T34]  ? __pfx_chrdev_open+0x10/0x10
[ 1093.615180][   T34]  do_dentry_open+0x953/0x13f0
[ 1093.616772][   T34]  vfs_open+0x3b/0x340
[ 1093.618041][   T34]  ? path_openat+0x2ecd/0x3830
[ 1093.619535][   T34]  path_openat+0x2ee5/0x3830
[ 1093.621077][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[ 1093.623370][   T34]  ? count_memcg_event_mm+0x21/0x260
[ 1093.625395][   T34]  ? __pfx_path_openat+0x10/0x10
[ 1093.627201][   T34]  ? __pfx___up_read+0x10/0x10
[ 1093.628940][   T34]  ? do_user_addr_fault+0xbbc/0x1380
[ 1093.630619][   T34]  do_filp_open+0x1fa/0x410
[ 1093.632243][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.634136][   T34]  ? __pfx_do_filp_open+0x10/0x10
[ 1093.636153][   T34]  ? _raw_spin_unlock+0x28/0x50
[ 1093.637898][   T34]  ? alloc_fd+0x64c/0x6c0
[ 1093.639666][   T34]  do_sys_openat2+0x121/0x1c0
[ 1093.641571][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1093.643813][   T34]  ? fd_install+0x97/0x540
[ 1093.645533][   T34]  ? fd_install+0x30d/0x540
[ 1093.647268][   T34]  __x64_sys_openat+0x138/0x170
[ 1093.649130][   T34]  do_syscall_64+0xfa/0xfa0
[ 1093.650913][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1093.653132][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.655483][   T34]  ? exc_page_fault+0xab/0x100
[ 1093.657332][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.659583][   T34] RIP: 0033:0x7fd56b78df91
[ 1093.661187][   T34] RSP: 002b:00007ffe179f1690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1093.664645][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd56b78df91
[ 1093.667598][   T34] RDX: 0000000000000002 RSI: 00007fd56b7f0d1b RDI: 00000000ffffff9c
[ 1093.670651][   T34] RBP: 00007fd56b7f0d1b R08: 0000000000000000 R09: 00007fd56c51d6c0
[ 1093.673740][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[ 1093.676662][   T34] R13: 0000000000000003 R14: 00007ffe179f1a68 R15: 0000000000000000
[ 1093.679538][   T34]  </TASK>
[ 1093.680813][   T34] INFO: task syz-executor:15269 blocked for more than 143 seconds.
[ 1093.684845][   T34]       Not tainted syzkaller #0
[ 1093.686774][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1093.690162][   T34] task:syz-executor    state:D stack:27112 pid:15269 tgid:15269 ppid:1      task_flags:0x400040 flags:0x00080000
[ 1093.693973][   T34] Call Trace:
[ 1093.695053][   T34]  <TASK>
[ 1093.696021][   T34]  __schedule+0x1798/0x4cc0
[ 1093.697454][   T34]  ? security_file_open+0xb1/0x270
[ 1093.699053][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.700586][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.702313][   T34]  ? __pfx___schedule+0x10/0x10
[ 1093.703865][   T34]  ? schedule+0x91/0x360
[ 1093.705222][   T34]  schedule+0x165/0x360
[ 1093.706539][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1093.708232][   T34]  __mutex_lock+0x7e6/0x1350
[ 1093.709904][   T34]  ? __mutex_lock+0x5bb/0x1350
[ 1093.712042][   T34]  ? misc_open+0x51/0x350
[ 1093.713750][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1093.715338][   T34]  misc_open+0x51/0x350
[ 1093.716678][   T34]  chrdev_open+0x4cc/0x5e0
[ 1093.718110][   T34]  ? __pfx_chrdev_open+0x10/0x10
[ 1093.719695][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1093.721663][   T34]  ? __pfx_chrdev_open+0x10/0x10
[ 1093.723389][   T34]  do_dentry_open+0x953/0x13f0
[ 1093.724894][   T34]  vfs_open+0x3b/0x340
[ 1093.726161][   T34]  ? path_openat+0x2ecd/0x3830
[ 1093.727668][   T34]  path_openat+0x2ee5/0x3830
[ 1093.729085][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[ 1093.730786][   T34]  ? count_memcg_event_mm+0x21/0x260
[ 1093.732537][   T34]  ? __pfx_path_openat+0x10/0x10
[ 1093.734080][   T34]  ? __pfx___up_read+0x10/0x10
[ 1093.735602][   T34]  ? do_user_addr_fault+0xbbc/0x1380
[ 1093.737244][   T34]  do_filp_open+0x1fa/0x410
[ 1093.738662][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1093.740145][   T34]  ? __pfx_do_filp_open+0x10/0x10
[ 1093.741635][   T34]  ? _raw_spin_unlock+0x28/0x50
[ 1093.743223][   T34]  ? alloc_fd+0x64c/0x6c0
[ 1093.744611][   T34]  do_sys_openat2+0x121/0x1c0
[ 1093.746068][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1093.747678][   T34]  ? fd_install+0x97/0x540
[ 1093.749059][   T34]  ? fd_install+0x30d/0x540
[ 1093.750511][   T34]  __x64_sys_openat+0x138/0x170
[ 1093.752143][   T34]  do_syscall_64+0xfa/0xfa0
[ 1093.753620][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1093.755253][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.757091][   T34]  ? exc_page_fault+0xab/0x100
[ 1093.758553][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.760352][   T34] RIP: 0033:0x7f471e78df91
[ 1093.761969][   T34] RSP: 002b:00007ffc40bf59f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1093.764493][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f471e78df91
[ 1093.766922][   T34] RDX: 0000000000000002 RSI: 00007f471e7f0d1b RDI: 00000000ffffff9c
[ 1093.769370][   T34] RBP: 00007f471e7f0d1b R08: 0000000000000000 R09: 00007f471f51d6c0
[ 1093.771992][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[ 1093.774447][   T34] R13: 0000000000000003 R14: 00007ffc40bf5dc8 R15: 0000000000000000
[ 1093.776927][   T34]  </TASK>
[ 1093.777943][   T34] 
[ 1093.777943][   T34] Showing all locks held in the system:
[ 1093.780307][   T34] 1 lock held by khungtaskd/34:
[ 1093.781981][   T34]  #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1093.784918][   T34] 2 locks held by getty/5638:
[ 1093.786321][   T34]  #0: ffff8881136c80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1093.789200][   T34]  #1: ffffc900033102f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1093.792282][   T34] 2 locks held by kworker/u10:3/25809:
[ 1093.794008][   T34]  #0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1093.797466][   T34]  #1: ffffc9000850fba0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1093.801238][   T34] 3 locks held by kworker/0:2/30619:
[ 1093.802976][   T34]  #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1093.806366][   T34]  #1: ffffc9000a95fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1093.810316][   T34]  #2: ffffffff8f5aea28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[ 1093.814914][   T34] 2 locks held by syz.1.14275/15158:
[ 1093.817079][   T34]  #0: ffff888161aa0100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[ 1093.820994][   T34]  #1: ffffffff8f5aea28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[ 1093.825167][   T34] 2 locks held by syz.3.14286/15202:
[ 1093.827277][   T34]  #0: ffffffff8f5aea28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[ 1093.830694][   T34]  #1: ffff888161aa0100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[ 1093.833821][   T34] 2 locks held by syz.0.14302/15262:
[ 1093.835446][   T34]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1093.838004][   T34]  #1: ffffffff8f5aea28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[ 1093.841506][   T34] 1 lock held by syz-executor/15266:
[ 1093.843626][   T34]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1093.846304][   T34] 1 lock held by syz-executor/15267:
[ 1093.847928][   T34]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1093.850492][   T34] 1 lock held by syz-executor/15269:
[ 1093.852298][   T34]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1093.854815][   T34] 1 lock held by syz-executor/15272:
[ 1093.856363][   T34]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1093.858845][   T34] 1 lock held by syz-executor/15273:
[ 1093.860394][   T34]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1093.863256][   T34] 1 lock held by syz-executor/15275:
[ 1093.864855][   T34]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1093.867600][   T34] 1 lock held by syz-executor/15277:
[ 1093.869291][   T34]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1093.872215][   T34] 1 lock held by syz-executor/15279:
[ 1093.873985][   T34]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1093.876526][   T34] 1 lock held by syz-executor/15281:
[ 1093.878160][   T34]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1093.880817][   T34] 
[ 1093.881626][   T34] =============================================
[ 1093.881626][   T34] 
[ 1093.885135][   T34] NMI backtrace for cpu 0
[ 1093.885151][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1093.885167][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1093.885175][   T34] Call Trace:
[ 1093.885180][   T34]  <TASK>
[ 1093.885186][   T34]  dump_stack_lvl+0x189/0x250
[ 1093.885207][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1093.885218][   T34]  ? __pfx__printk+0x10/0x10
[ 1093.885230][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1093.885243][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1093.885255][   T34]  ? __pfx__printk+0x10/0x10
[ 1093.885264][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1093.885277][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1093.885289][   T34]  watchdog+0xf60/0xfa0
[ 1093.885298][   T34]  ? watchdog+0x1e2/0xfa0
[ 1093.885307][   T34]  kthread+0x711/0x8a0
[ 1093.885318][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1093.885325][   T34]  ? __pfx_kthread+0x10/0x10
[ 1093.885335][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1093.885343][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1093.885352][   T34]  ? __pfx_kthread+0x10/0x10
[ 1093.885361][   T34]  ret_from_fork+0x4bc/0x870
[ 1093.885370][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1093.885379][   T34]  ? __switch_to_asm+0x39/0x70
[ 1093.885385][   T34]  ? __switch_to_asm+0x33/0x70
[ 1093.885390][   T34]  ? __pfx_kthread+0x10/0x10
[ 1093.885400][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1093.885411][   T34]  </TASK>
[ 1093.885414][   T34] Sending NMI from CPU 0 to CPUs 1:
[ 1093.933359][    C1] NMI backtrace for cpu 1
[ 1093.933378][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1093.933391][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1093.933399][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1093.933418][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 c1 1f 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1093.933452][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 00000286
[ 1093.933463][    C1] RAX: c0bd2e0b50cb3600 RBX: ffffffff81967b47 RCX: c0bd2e0b50cb3600
[ 1093.933471][    C1] RDX: 0000000000000001 RSI: ffffffff8d714253 RDI: ffffffff8bbf08e0
[ 1093.933478][    C1] RBP: ffffc90000197f10 R08: ffff88823c632fdb R09: 1ffff110478c65fb
[ 1093.933486][    C1] R10: dffffc0000000000 R11: ffffed10478c65fc R12: ffffffff8f7d1e70
[ 1093.933494][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102c1d1000
[ 1093.933501][    C1] FS:  0000000000000000(0000) GS:ffff8882a9f31000(0000) knlGS:0000000000000000
[ 1093.933510][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1093.933517][    C1] CR2: 00007ffc89f39fc8 CR3: 000000000dd38000 CR4: 00000000000006f0
[ 1093.933554][    C1] Call Trace:
[ 1093.933563][    C1]  <TASK>
[ 1093.933568][    C1]  default_idle+0x13/0x20
[ 1093.933584][    C1]  default_idle_call+0x73/0xb0
[ 1093.933602][    C1]  do_idle+0x1e7/0x510
[ 1093.933618][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1093.933636][    C1]  cpu_startup_entry+0x44/0x60
[ 1093.933650][    C1]  start_secondary+0x101/0x110
[ 1093.933668][    C1]  common_startup_64+0x13e/0x147
[ 1093.933690][    C1]  </TASK>
