last executing test programs:

21.419412115s ago: executing program 1 (id=4159):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$inet6(r2, &(0x7f0000002d40)={0xa, 0x4e25, 0x7, @remote, 0x6}, 0x15)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000001940)={r3, 0x1, 0x3})

21.308952932s ago: executing program 1 (id=4161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x1, 0x3, 0x2, 0x24206, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r0, &(0x7f0000000580)="50748847dcbc315a51b3bddf36779eff95d4f7ddb5fe77c93ca83b371023ea3d7a02e0182598c0f19c1cd6a5c88eac21dc060efded11f1cc9b1c200a7e093f36f72212a6819c43d7220b0a2a7441e9f5035bc4b662cffb630288bcb42aef0ae4f77630905e70c2efe99dd2a2b5cdb5a8b0c10cae97d4b7f789eb5b3ee4a8c78b7de5905c8b3651117e00226174e8116272b5e323f5cf9370b0d4d79abbcacbe78401d917e2058268085a7662e7b1263e29c781e5d9f05d356d8ea8f93ce6fd5b9e2badd3ae8b632f85cd3e09e02dc9087a095f9dc3d0fc293ba0babb763b9299d22e", &(0x7f0000000680)=""/58}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="0014dca1f0776e7e000100000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="0014dca1f0776e7e000100000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x1f, <r2=>0x0}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001000800000001", @ANYRESDEC=r3, @ANYRESHEX=r3, @ANYRES32=r4, @ANYRESOCT=r3, @ANYRES64=r1, @ANYRES64=r4], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001000800000001", @ANYRESDEC=r3, @ANYRESHEX=r3, @ANYRES32=r4, @ANYRESOCT=r3, @ANYRES64=r1, @ANYRES64=r4], 0x48)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a30000000000800410073697700140013"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x802, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178cdeb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="08002dbd0100"/22], 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x4008001)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fc, 0x100005, 0x1}, 0x1c)
connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10) (async)
connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000700)=0x1309000, 0x4)

21.18796295s ago: executing program 1 (id=4162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x77359405}]}}]}, 0x40}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x8, 0xc2, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x7dd, 0x1})
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

21.041648303s ago: executing program 1 (id=4164):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) (async)
sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x41d, @empty, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x8}}], 0x18}, 0x2000d880) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840)

20.879187367s ago: executing program 1 (id=4165):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x44084)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x20, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8009}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x97}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1e, 0x20}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0))

20.477629398s ago: executing program 4 (id=4167):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x5f, 0xd956ce61b30c7ab8]}}, 0x0, 0x28, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711074000000000095164db69d6ce389"], &(0x7f0000000480)='GPL\x00'}, 0x80)

20.156164678s ago: executing program 4 (id=4172):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0)
close(r0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="01d30600e7ff00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=r1, @ANYRES8=r2], 0x80}}, 0x20048000)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=<r3=>0x0, @ANYRES64=0x0, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90)
close(r1)
ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x10, 0x7800, 0x88b, 0x3, {{0x6, 0x4, 0x3, 0x8, 0x18, 0x65, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@noop]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', <r4=>0x0, 0x10, 0x7800, 0x88b, 0x3, {{0x6, 0x4, 0x3, 0x8, 0x18, 0x65, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@noop]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @sched_cls}, 0x94)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122f90716900009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122f90716900009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$alg(0x26, 0x5, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc100000", @ANYRES16, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40480d4) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc100000", @ANYRES16, @ANYBLOB="07020000000000000000030000002c01088044b3078008000680b300000008000500ff00000008000600e10000000800050040ef116808000600cd0035d008000600af00000008000500f712f706080006009600000034000780080006003c00004f08000500e2f05c100800050012c61f100800060066000000080005007118862e08000600fd0000001c00078008000500a156eb25080005000b608179080006007f0000003c000780080006009100000008000500a06ed02c6175060094000000080005004baa1d3f0800050038560852080005009889fe5708000601000000000000008008000600570000000800060059000000080006005a0000000800060097000000080006008300000008000500b252a030080006005000000008000600410000001400078008000500d9a9bc2c0875190a492c00048005000300010000000500030000000000050003000100000005000300000000000500030001000000080001"], 0x17c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40480d4)
bind$alg(r8, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
r10 = accept$alg(r8, 0x0, 0x0)
recvmmsg(r10, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000d80)=""/189, 0xbd}], 0x2}, 0x6}], 0x1, 0x2160, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa1000000b2d8dcbb010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xfec7, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xfec7, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="02000000000000000000030000004c0001800d000100737d982373797a4300000000380004001400010002004e22ac1e00010000000000000000200002000a00000000000000ff01000000000000000000000000000100000000"], 0xffffffffffffff94}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="02000000000000000000030000004c0001800d000100737d982373797a4300000000380004001400010002004e22ac1e00010000000000000000200002000a00000000000000ff01000000000000000000000000000100000000"], 0xffffffffffffff94}}, 0x0)

19.88966102s ago: executing program 4 (id=4176):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18)
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6a21}]}}}]}, 0x3c}}, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000300)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_xfrm(r4, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r6=>0x0})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES8=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYRESHEX=r3], 0x6f4}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30400000000900010073797a300000000030000380"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000)

19.70947111s ago: executing program 4 (id=4178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0xfffffbff, 0x9}, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r5}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f00000000c0)=0xfff, 0x4)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r8)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24008000", @ANYRES16=r9, @ANYBLOB="01002abd70000000000003000000100001800a00010069623a6c6f000000"], 0x24}}, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r11, 0x3, {0x2, 0xff, 0x392d39a281630aa1}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r12=>0x0})
r13 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r13, &(0x7f0000000080)={0x1d, r12, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r13, &(0x7f00000001c0)={&(0x7f0000000b00)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x3}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xef)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0xffffff75, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8c}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

19.435305466s ago: executing program 4 (id=4180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000700108802804"], 0x198}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000051101f000000000095000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
socket$inet(0xa, 0x801, 0x84)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x3)
epoll_wait(r7, &(0x7f0000000140)=[{}], 0x1, 0xffffffff)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)
write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff00", 0x1a)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
accept(r3, 0x0, 0x0)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000600)="cade19ec416150d327104c451744ae87fe7aca562d985a44c1962010ba85914fbf7b27e2b11ac7ec5682ff79b68399e3ac633aba6bb2a75dd631f353db3c7fc923292cf1a2056b381345a9936a6562bb280c68eb21dce54b1da9e118d6f1bfb9e17333c893aa6cdfbae437f6eea5da7b27d08305280357f4ca8219359c11c7d777ef015c7f", 0x85, 0x20008844, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x5}, 0x1c)
shutdown(r3, 0x2)

18.72331496s ago: executing program 3 (id=4187):
unshare(0x22020400)
unshare(0x2c060000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000500)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e140589a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a50ebb1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40881}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x42}, 0xff000000, 0xff, 'pimreg\x00', 'tunl0\x00', {0x7f}, {0xff}, 0x6c, 0x2, 0x28}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x2, 0xfffffffa, 0x51ea, 'syz1\x00', 'syz1\x00', {0x8000}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="46bb8fb869ec", 0x50b2, 0x5, [0x4, 0x31, 0x12, 0x24, 0xf, 0x22, 0x38, 0x14, 0x1a, 0x33, 0x21, 0x11, 0xd, 0x25, 0x12, 0x1], 0x1, 0xd59, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

18.420928502s ago: executing program 4 (id=4189):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8)
pwritev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="06c54587", 0x4}, {&(0x7f0000000280)="2ed1f515ea0991424c0d1aa8d4b0dafd9fb9d671868e9273320b940fd100", 0xffffff1a}], 0x2, 0x2c82, 0x3)

18.407432794s ago: executing program 3 (id=4190):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x9, "28aa87eca51544576f051a1abe6367a9"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x480dd}, 0x200000c4)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x0, 0x105}, 0x50)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000000c0)=0x1, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90)

18.253354442s ago: executing program 2 (id=4191):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000200"/27], 0x48)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x100, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @empty, [0x0, 0xff0000ff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xffffff00], 'veth1\x00', 'veth1_to_bridge\x00', {}, {}, 0x1e, 0xff, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6e, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x5, 0x3}, {0x1, 0x2, 0x3}, {0xffffffffffffffff, 0x2, 0x1}, 0x12c104ff, 0xffffffff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)
r2 = socket$netlink(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@noop, @timestamp_addr={0x44, 0x1c, 0x15, 0x1, 0x3, [{@rand_addr=0x64010100, 0x3}, {@private=0xa010101, 0x7640}, {@empty, 0xffff}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005500)={0x38, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0xf, 0xb, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="4cf19f"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048004}, 0x44)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4)
sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0)
recvmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000d40)=""/4087, 0xff7}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f0000001e00)=""/144, 0x90}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f00000008c0)=""/35, 0x23}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000300)=""/13, 0xd}], 0x9}, 0xad}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/33, 0x21}, {&(0x7f0000000bc0)=""/207, 0xcf}], 0x2, &(0x7f0000000780)=""/112, 0x70}}], 0x3, 0x40002002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

18.103137628s ago: executing program 2 (id=4192):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000340), &(0x7f0000000100)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64})

18.092037363s ago: executing program 3 (id=4193):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce287128"], 0xe0}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000006fb65960f3b6b6a29401b8949cf3cb359066d5c0e7ec334f76992ec0fee35b467bc365daf69db5518c914697762caf37e0487a9c299c326e9325585cb6fc3edcc6039d769dcf107f06509e27563e25f295a1e71e3a32e11df0757d2cdf5a2559c554585b013373f870d9e6d0b4faafeefa07b523db9f63182ecf63d30c8ed4442434d9ad664f77818cec6c02a104dc4ddff72db5a9b66e1cfb3f1f4a5a", @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001e40)={'tunl0\x00', &(0x7f0000001dc0)={'sit0\x00', 0x0, 0x10, 0x7800, 0x7, 0x8, {{0x5, 0x4, 0x1, 0x35, 0x14, 0x64, 0x0, 0x5, 0x2f, 0x0, @empty, @empty}}}}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

18.001747504s ago: executing program 2 (id=4194):
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5006000000000200000008000100000000000800010000000200080001000200000008000100010000000800010002000000080001000100000008000100f39800"/80], 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c814)

17.94053501s ago: executing program 2 (id=4195):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000140000001c0007800c00030005000000000000000c0004000000000000000000"], 0x30}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), 0x0}, 0x20)

17.780626217s ago: executing program 3 (id=4196):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x19, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x14, 0x6, "5e1b40bb16a50318bbef41c96fb44ef9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x60}}, 0x0) (async)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x1ff, @none, 0xfffa}, 0xe)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe00000000000029000000020c0008", 0xfe60) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="050080fd5194871aff14f1c4cdffff190000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async)
unshare(0x6a040000)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e7dfffff08300008a00000000000000010000000000000049060000000000000400000000000000000000000000000000000000000000000000000000000000b5ca000000ffffff070000000000000000000000000000000700000000000000ff0300"/320]) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x240408d4}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="00000000060000000a0003000000000000000000280012800b008000007036746e6c00001800028014000200fe8000000000000000000000000000aa"], 0x54}}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)={0x34, r7, 0x200, 0x70bd29, 0x8b, {{}, {@void, @val={0xc, 0x99, {0xe, 0x68}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x6)

17.51673238s ago: executing program 1 (id=4197):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = socket$inet6(0xa, 0x800, 0x35008000)
r3 = socket$inet6(0xa, 0x5, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x4}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2000) (async)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) (async)
r9 = socket$alg(0x26, 0x5, 0x0) (async)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000005880)=[{{&(0x7f0000000040)={0xa, 0x0, 0xc000000, @dev={0xfe, 0x80, '\x00', 0x26}, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="7318", 0x2}], 0x1}}], 0x1, 0x0)
shutdown(r10, 0x1)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xd2}, &(0x7f0000000340)=0x8) (async)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r11 = accept4(r9, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r11, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x4924bde, 0x40800)

16.953176763s ago: executing program 2 (id=4200):
r0 = socket(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) (async, rerun: 32)
r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000001500)=0x416, 0x4)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001ac0)={'sit0\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x20, 0x5, "b36285a9d3"}}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x20004011) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7ff}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa3}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)

16.613400616s ago: executing program 2 (id=4203):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000006c0)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4a8a5}, 0x44004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="016f0800010000000000200000004500003c00000000008c90783fffffffac1414aa00000000c254ff74f8ec374ec36464e3bb833c9caaaef982395fc045a9bd5b32db924ad5e5223b9978e8499398cd1c0b71d6b06e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="aa00070090780014090300050a00000000000000000005d588380000"], 0x4a)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="110000e703000000040000000900000000672cee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=<r2=>0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000000), &(0x7f00000004c0)=@tcp6, 0x3}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={0x0, 0x9, 0x2083, 0x1})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000600)=0x5, 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x5, 0x0, &(0x7f00000022c0))
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r2, @ANYRES8=0x0], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000d9", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x24040080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x40, 0x0, 0x501}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@deltaction={0x2a4, 0x31, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6283d3e7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdd4}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdac}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x2a4}}, 0x0)

16.468077527s ago: executing program 0 (id=4204):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async, rerun: 32)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) (async, rerun: 64)
r4 = socket(0x400000000010, 0x3, 0x0) (rerun: 64)
write(r4, &(0x7f0000000440)="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", 0xfb) (async)
close(r3) (async)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
close(r7) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0x2) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async, rerun: 64)
r8 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x709d29, 0x25dfdbff, "", [{{0x4, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x0, 0x2, 'syz1\x00'}, {0x0, 0x41, 'siw\x00'}, {0x0, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000010)
write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0xffdd)

16.309673302s ago: executing program 0 (id=4205):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0000001300010000002000ffdbdf2500000000", @ANYRES32=r0, @ANYBLOB="02080200000000000500270000ff000044001a80100002800c000180089b"], 0x6c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4000004)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000140)='tlb_flush\x00', r3}, 0x18)

16.292110709s ago: executing program 0 (id=4206):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) (async)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0) (async)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
accept(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2})

16.17032966s ago: executing program 0 (id=4207):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0x81, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c2000040042801c000180"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00010625bd7000fbdbdf250a0100000000000408000a"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044)

15.981531377s ago: executing program 0 (id=4208):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800f3ff000029d6fd244aaedfc5fc3f000080000000ce1734f3fa9eb0c42d5bafb48083c5790892686de8ac101f6a48e27714fd13c20ea54b270625467f9ef77d1b537b17599944c20ecefdd1e599a8464b8189477dbde4889e6032fa5fbe0adff054b5cc66e58cc534a861f9ffffc0b7ea9c3d3ee5673f70bfd52f63ef00f299d8b9b7613ac6584526c8be22020928", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000000e93100000000000000010500000010000000010000000000000e01000000000000000061"], 0x0, 0x53}, 0x28)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14, 0x0)
sendto$packet(r1, &(0x7f0000000e80)="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", 0x1000, 0x840, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)
r2 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffd, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000001af8ff00000000bfa180000000000007010000f8ffffffb702000008172f6eca3ae2c6d7d8d07fbb4f6bdc6539b3243d52990ed45798ae167b2b99b4c3b6f082a7d5b9b86bdf2bddeeeda1fab5dd5b0000000000000000000000000a7f2a8b1fef3304694a1e254b8b3bc6b59ee55161"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="24000000360007010300200000000002017c0000100003800c0008000010000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x1, &(0x7f0000000380), 0x54, 0x10}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003360000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
close(r4)
r8 = socket$kcm(0x11, 0xf, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000340)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000002880)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d039474d534e618", 0x56}, {&(0x7f00000016c0)="071cd289a39a3f01ed2affd0895bd7609db5749c6eeb091e8dc49819bd1cc6dc180463d6c1f4001a76121387fddfcf97887edfbd82f8f0406b131f694209901e95ab186efe41ffd0d0dfa9e30e2c4afde5b05c05c71d5e50b318db7520ff9df567b9fb", 0x63}, {&(0x7f0000001840)="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", 0xe91}], 0x3}, 0xc008)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000076000d0b0040000000000000030000edff00000008000a00010000000800010001"], 0x28}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r7, 0x0, 0x81)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)

15.981102967s ago: executing program 3 (id=4209):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = accept$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000280)=0x10)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000002c0)=0x8, 0x4)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x69}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800)
r4 = socket(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000700)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newnexthop={0x38, 0x68, 0x40d, 0x70bd25, 0x2, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}, @NHA_ENCAP_TYPE={0x6}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x200608a0}, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="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", 0x18f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001700)="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", 0x222}], 0x1}}], 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x8001, 0xa1})

15.927487131s ago: executing program 0 (id=4210):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0xf8, 0x10, 0x413, 0x0, 0x0, {{@in6=@local, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x5e23, 0x2, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x200, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x4, 0x20000000008}, {0x1000100000001, 0x8, 0xcc, 0x3}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@tfcpad={0x8, 0x16, 0xffffffff}]}, 0xf8}}, 0x804)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "94d1b05d7d18c796", "9c6963d50c8a233a1041476bc1e4b584", "298cb1b4", "c0ff1253d630e9be"}, 0x28)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
socket(0x840000000002, 0x800, 0x800)
socket$inet6(0xa, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
socket(0x400000000010, 0x3, 0x0)

15.137912613s ago: executing program 3 (id=4211):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @private2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118000000000000002900000003"], 0x40}, 0x24004800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x2, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
recvfrom$inet6(r5, 0x0, 0x0, 0x2002, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r12, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x1, 0x5, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0xc050}, 0x804)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x70bd2e, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x144}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)

3.104970302s ago: executing program 32 (id=4189):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8)
pwritev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="06c54587", 0x4}, {&(0x7f0000000280)="2ed1f515ea0991424c0d1aa8d4b0dafd9fb9d671868e9273320b940fd100", 0xffffff1a}], 0x2, 0x2c82, 0x3)

2.075026053s ago: executing program 33 (id=4197):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = socket$inet6(0xa, 0x800, 0x35008000)
r3 = socket$inet6(0xa, 0x5, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x4}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2000) (async)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) (async)
r9 = socket$alg(0x26, 0x5, 0x0) (async)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000005880)=[{{&(0x7f0000000040)={0xa, 0x0, 0xc000000, @dev={0xfe, 0x80, '\x00', 0x26}, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="7318", 0x2}], 0x1}}], 0x1, 0x0)
shutdown(r10, 0x1)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xd2}, &(0x7f0000000340)=0x8) (async)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r11 = accept4(r9, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r11, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x4924bde, 0x40800)

1.054726582s ago: executing program 34 (id=4203):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000006c0)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4a8a5}, 0x44004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="016f0800010000000000200000004500003c00000000008c90783fffffffac1414aa00000000c254ff74f8ec374ec36464e3bb833c9caaaef982395fc045a9bd5b32db924ad5e5223b9978e8499398cd1c0b71d6b06e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="aa00070090780014090300050a00000000000000000005d588380000"], 0x4a)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="110000e703000000040000000900000000672cee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=<r2=>0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000000), &(0x7f00000004c0)=@tcp6, 0x3}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={0x0, 0x9, 0x2083, 0x1})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000600)=0x5, 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x5, 0x0, &(0x7f00000022c0))
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r2, @ANYRES8=0x0], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000d9", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x24040080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x40, 0x0, 0x501}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@deltaction={0x2a4, 0x31, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6283d3e7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdd4}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdac}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x2a4}}, 0x0)

34.112471ms ago: executing program 35 (id=4210):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0xf8, 0x10, 0x413, 0x0, 0x0, {{@in6=@local, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x5e23, 0x2, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x200, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x4, 0x20000000008}, {0x1000100000001, 0x8, 0xcc, 0x3}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@tfcpad={0x8, 0x16, 0xffffffff}]}, 0xf8}}, 0x804)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "94d1b05d7d18c796", "9c6963d50c8a233a1041476bc1e4b584", "298cb1b4", "c0ff1253d630e9be"}, 0x28)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
socket(0x840000000002, 0x800, 0x800)
socket$inet6(0xa, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
socket(0x400000000010, 0x3, 0x0)

0s ago: executing program 36 (id=4211):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @private2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118000000000000002900000003"], 0x40}, 0x24004800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x2, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
recvfrom$inet6(r5, 0x0, 0x0, 0x2002, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r12, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x1, 0x5, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0xc050}, 0x804)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x70bd2e, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x144}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)

kernel console output (not intermixed with test programs):

s unknown, defaulting to 1000
[  565.001527][T17271] lo speed is unknown, defaulting to 1000
[  565.031948][T17271] wg1 speed is unknown, defaulting to 1000
[  565.939982][T17317] netlink: 'syz.3.2871': attribute type 13 has an invalid length.
[  567.347081][T17329] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2873'.
[  567.493912][T17317] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  567.779596][ T5918] wg1 speed is unknown, defaulting to 1000
[  567.781475][T17328] 8021q: adding VLAN 0 to HW filter on device bond1
[  567.789686][ T5918] syz: Port: 1 Link DOWN
[  567.802403][T17330] bond0: (slave `): Releasing backup interface
[  567.833308][T17330] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  567.871658][ T9928] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.881509][ T9928] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.891176][ T9928] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  567.990240][ T9928] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.999931][ T9928] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  568.010398][ T9928] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  568.020046][ T9928] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.030549][ T9928] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  568.040794][ T9928] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  568.052870][ T9928] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.077274][ T9928] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  568.085671][ T9928] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  568.132184][T17340] netlink: 'syz.3.2876': attribute type 21 has an invalid length.
[  568.178535][T17342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  568.187384][T17342] syzkaller0: entered promiscuous mode
[  568.197591][T17342] syzkaller0: entered allmulticast mode
[  568.427407][T17347] tipc: Resetting bearer <eth:syzkaller0>
[  568.625364][T17352] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  568.669771][T17352] bond1 (unregistering): Released all slaves
[  569.057267][T17341] tipc: Resetting bearer <eth:syzkaller0>
[  569.098141][T17341] tipc: Disabling bearer <eth:syzkaller0>
[  569.317747][T17367] netlink: 'syz.3.2882': attribute type 3 has an invalid length.
[  569.464179][T17369] veth1_to_hsr: entered promiscuous mode
[  569.471160][T17369] macvtap1: entered promiscuous mode
[  569.477640][T17369] macvtap1: entered allmulticast mode
[  569.483234][T17369] veth1_to_hsr: entered allmulticast mode
[  569.561316][T17374] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  569.664117][T17392] netlink: 1084 bytes leftover after parsing attributes in process `syz.0.2885'.
[  569.765432][T17394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  569.773938][T17399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2890'.
[  570.002139][T17394] tipc: Disabling bearer <eth:syzkaller0>
[  570.673186][T17415] xfrm0 speed is unknown, defaulting to 1000
[  571.066202][T17430] tipc: Resetting bearer <eth:ip6gre0>
[  571.257817][ T5917] IPVS: starting estimator thread 0...
[  571.281654][T17430] geneve0: left promiscuous mode
[  571.367353][T17444] IPVS: using max 25 ests per chain, 60000 per kthread
[  571.549545][T17453] xt_bpf: check failed: parse error
[  572.837881][T17415] lo speed is unknown, defaulting to 1000
[  572.844502][T17451] netlink: 'syz.0.2902': attribute type 3 has an invalid length.
[  572.853841][T17451] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2902'.
[  572.884369][T17463] syzkaller0: entered allmulticast mode
[  572.917451][T17469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  572.927868][ T1098] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  572.957337][ T1098] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  572.965853][T17415] wg1 speed is unknown, defaulting to 1000
[  572.988548][ T1098] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  573.013502][ T1098] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.028549][T17479] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2905'.
[  573.048963][ T1098] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  573.080104][ T1098] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.117173][ T1098] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  573.139076][ T1098] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.179070][T17469] tipc: Disabling bearer <eth:syzkaller0>
[  573.249308][T17492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2909'.
[  573.664511][T17495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2908'.
[  573.881519][T17498] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  573.974666][T17507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2912'.
[  574.095080][T17506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2912'.
[  574.355121][T17518] netlink: 'syz.2.2914': attribute type 3 has an invalid length.
[  574.684537][T17529] pimreg: tun_chr_ioctl cmd 1074025680
[  574.709991][T17528] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  575.206100][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'.
[  575.659021][T17559] openvswitch: netlink: Tunnel attr 152 out of range max 16
[  575.711087][T17562] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2926'.
[  575.809423][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'.
[  575.975288][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 330 seconds
[  575.987042][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 330 seconds
[  575.998772][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 330 seconds
[  576.010844][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 330 seconds
[  576.080794][T17573] netlink: 'syz.1.2929': attribute type 4 has an invalid length.
[  576.098231][T17573] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2929'.
[  576.355507][T17589] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.412723][T17589] 8021q: adding VLAN 0 to HW filter on device team0
[  576.459555][T17596] netlink: 'syz.2.2938': attribute type 3 has an invalid length.
[  576.469109][T17589] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  576.496422][T17596] netlink: 'syz.2.2938': attribute type 16 has an invalid length.
[  576.507141][T17596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2938'.
[  576.524700][T17588] xfrm0 speed is unknown, defaulting to 1000
[  576.555210][T17592] geneve4: entered promiscuous mode
[  576.592789][T17592] openvswitch: netlink: IP tunnel dst address not specified
[  576.626185][ T4980] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  576.635376][T17592] IPVS: dh: FWM 3 0x00000003 - no destination available
[  576.656549][ T4980] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  576.678241][ T6261] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  576.696347][ T6261] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  577.154678][T16804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  577.165858][T16804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  577.174557][T16804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  577.183151][T16804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  577.190972][T16804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  577.432461][T17588] lo speed is unknown, defaulting to 1000
[  577.438626][T17609] syzkaller0: entered promiscuous mode
[  577.438649][T17609] syzkaller0: entered allmulticast mode
[  577.463072][T17588] wg1 speed is unknown, defaulting to 1000
[  577.720254][T17606] xfrm0 speed is unknown, defaulting to 1000
[  577.751286][T13719] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.780019][T13719] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.889892][T13719] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.913696][T13719] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.124714][T13719] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.154660][T13719] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.282781][T13719] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.326364][T13719] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.428789][T17606] lo speed is unknown, defaulting to 1000
[  578.437147][T17606] wg1 speed is unknown, defaulting to 1000
[  578.762083][T13719] vlan1: left promiscuous mode
[  578.769681][T13719] bridge_slave_0: left promiscuous mode
[  578.788518][T13719] bridge0: port 1(vlan1) entered disabled state
[  578.852127][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'.
[  579.255101][T16804] Bluetooth: hci0: command tx timeout
[  580.047970][T13719] bond0 (unregistering): Released all slaves
[  580.143415][T13719] bond1 (unregistering): Released all slaves
[  580.157969][T13719] bond2 (unregistering): (slave veth6): Releasing active interface
[  580.168243][T13719] bond2 (unregistering): Released all slaves
[  580.262446][T13719] bond3 (unregistering): Released all slaves
[  580.278461][T13719] bond4 (unregistering): Released all slaves
[  580.303805][T17652] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  580.337046][T17652] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  580.366024][T17652] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  580.462675][T13719] tipc: Left network mode
[  580.647935][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'.
[  580.700077][ T6048] bond0: (slave dummy0): interface is now down
[  580.851539][ T4980] bond0: (slave dummy0): interface is now down
[  580.935106][T17692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2962'.
[  580.957286][T17606] chnl_net:caif_netlink_parms(): no params data found
[  581.007258][T13718] bond0: (slave dummy0): interface is now down
[  581.015519][T17692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2962'.
[  581.148479][ T6048] bond0: (slave dummy0): interface is now down
[  581.194431][T17695] can: request_module (can-proto-0) failed.
[  581.287098][ T4980] bond0: (slave dummy0): interface is now down
[  581.299912][T17709] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  581.323003][T17703] netlink: 'syz.3.2964': attribute type 29 has an invalid length.
[  581.337142][T16804] Bluetooth: hci0: command tx timeout
[  581.424207][T17703] netlink: 'syz.3.2964': attribute type 29 has an invalid length.
[  581.437224][ T4980] bond0: (slave dummy0): interface is now down
[  581.485455][T17606] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.499669][T17606] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.508558][T17606] bridge_slave_0: entered allmulticast mode
[  581.516513][T17606] bridge_slave_0: entered promiscuous mode
[  581.577127][ T6048] bond0: (slave dummy0): interface is now down
[  581.577582][T17715] syzkaller0: entered promiscuous mode
[  581.589256][T17715] syzkaller0: entered allmulticast mode
[  581.600602][T17606] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.612594][T17606] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.621387][T17606] bridge_slave_1: entered allmulticast mode
[  581.630176][T17606] bridge_slave_1: entered promiscuous mode
[  581.716968][ T9928] bond0: (slave dummy0): interface is now down
[  581.820603][T17606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  581.831471][T17724] batadv_slave_0: entered promiscuous mode
[  581.881617][ T9928] bond0: (slave dummy0): interface is now down
[  581.921747][T17606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  582.027200][ T9928] bond0: (slave dummy0): interface is now down
[  582.062233][T17736] netlink: 464 bytes leftover after parsing attributes in process `syz.0.2975'.
[  582.100238][T17606] team0: Port device team_slave_0 added
[  582.140411][T17606] team0: Port device team_slave_1 added
[  582.170045][T13718] bond0: (slave dummy0): interface is now down
[  582.319115][T13718] bond0: (slave dummy0): interface is now down
[  582.388210][T17749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2976'.
[  582.476872][ T1098] bond0: (slave dummy0): interface is now down
[  582.614550][T17606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  582.635712][ T9928] bond0: (slave dummy0): interface is now down
[  582.645809][T17606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  582.674363][T17606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  582.690994][T17606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  582.699913][T17606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  582.726868][T17606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  582.752777][T17764] netlink: 'syz.2.2983': attribute type 1 has an invalid length.
[  582.760839][T17764] netlink: 'syz.2.2983': attribute type 1 has an invalid length.
[  582.769785][T13719] hsr_slave_0: left promiscuous mode
[  582.779490][T17764] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2983'.
[  582.807583][ T4980] bond0: (slave dummy0): interface is now down
[  582.817515][T13719] batadv_slave_0: left promiscuous mode
[  582.823705][T13719] veth1_macvtap: left promiscuous mode
[  582.830191][T13719] veth0_macvtap: left promiscuous mode
[  582.946714][ T9928] bond0: (slave dummy0): interface is now down
[  583.096557][ T6048] bond0: (slave dummy0): interface is now down
[  583.237642][ T4980] bond0: (slave dummy0): interface is now down
[  583.387331][ T9928] bond0: (slave dummy0): interface is now down
[  583.417174][T16804] Bluetooth: hci0: command tx timeout
[  583.526927][T13718] bond0: (slave dummy0): interface is now down
[  583.667437][ T4980] bond0: (slave dummy0): interface is now down
[  583.819557][T13718] bond0: (slave dummy0): interface is now down
[  583.957311][ T6048] bond0: (slave dummy0): interface is now down
[  583.961666][T17606] hsr_slave_0: entered promiscuous mode
[  584.003830][T17606] hsr_slave_1: entered promiscuous mode
[  584.022708][T17786] netlink: 'syz.0.2985': attribute type 1 has an invalid length.
[  584.032304][T17606] debugfs: 'hsr0' already exists in 'hsr'
[  584.056994][T17606] Cannot create hsr debugfs directory
[  584.126988][ T1098] bond0: (slave dummy0): interface is now down
[  584.276416][T13718] bond0: (slave dummy0): interface is now down
[  584.360882][T13719] IPVS: stop unused estimator thread 0...
[  584.437239][ T6048] bond0: (slave dummy0): interface is now down
[  584.585921][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'.
[  584.595967][ T6048] bond0: (slave dummy0): interface is now down
[  584.610107][ T6048] bond0: now running without any active interface!
[  584.943356][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'.
[  585.069520][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3001'.
[  585.218009][T17849] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3004'.
[  585.234220][T17606] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  585.245861][T17851] netlink: 'syz.3.3005': attribute type 1 has an invalid length.
[  585.249693][T17606] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  585.271464][T17606] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  585.292395][T17606] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  585.322283][T17853] sctp: [Deprecated]: syz.0.3006 (pid 17853) Use of int in max_burst socket option.
[  585.322283][T17853] Use struct sctp_assoc_value instead
[  585.492909][T16804] Bluetooth: hci0: command tx timeout
[  585.622654][T17606] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.694708][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'.
[  585.716059][T17606] 8021q: adding VLAN 0 to HW filter on device team0
[  585.770086][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.777373][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state
[  585.780546][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'.
[  585.854330][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.861621][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state
[  585.898978][T17884] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:21
[  585.948938][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3014'.
[  585.966187][T17888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3014'.
[  585.977936][T17888] netlink: 'syz.0.3014': attribute type 20 has an invalid length.
[  586.097839][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3014'.
[  586.108307][T17888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3014'.
[  586.122578][T17888] netlink: 'syz.0.3014': attribute type 20 has an invalid length.
[  586.960652][T17606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  587.158918][   T30] audit: type=1804 audit(1765981038.368:10): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3025" name="/newroot/597/cgroup.controllers" dev="tmpfs" ino=3083 res=1 errno=0
[  587.243544][   T30] audit: type=1800 audit(1765981038.368:11): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3025" name="cgroup.controllers" dev="tmpfs" ino=3083 res=0 errno=0
[  587.725634][T17606] veth0_vlan: entered promiscuous mode
[  587.795610][T17606] veth1_vlan: entered promiscuous mode
[  588.005628][T17606] veth0_macvtap: entered promiscuous mode
[  588.047750][T17606] veth1_macvtap: entered promiscuous mode
[  588.141998][T17606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  588.169513][T17606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  588.183261][T17950] Bluetooth: MGMT ver 1.23
[  588.218527][T13719] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.238231][T13719] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.238484][T17952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3033'.
[  588.255729][T13719] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.277042][T17952] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3033'.
[  588.296581][T13719] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  588.353477][T17958] netlink: 'syz.0.3035': attribute type 10 has an invalid length.
[  588.368699][T17958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3035'.
[  588.429054][T17958] dummy0: entered promiscuous mode
[  588.452275][T17958] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  588.524202][T13718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.535432][T13718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.625765][T13719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.645426][T13719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.766522][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  588.795010][T17963] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3036'.
[  588.836563][T17965] netlink: 'syz.4.2936': attribute type 1 has an invalid length.
[  588.921020][T17965] 8021q: adding VLAN 0 to HW filter on device bond1
[  589.352961][T17975] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  589.371558][T17975] team0: Device ipvlan2 is already an upper device of the team interface
[  589.572624][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  589.583197][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  589.591876][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  589.601301][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  589.621671][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  589.733966][T17976] xfrm0 speed is unknown, defaulting to 1000
[  589.957470][T17992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  590.096091][T17996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  590.249187][T18001] geneve5: entered promiscuous mode
[  590.376191][T17983] xfrm0 speed is unknown, defaulting to 1000
[  590.390929][T17976] lo speed is unknown, defaulting to 1000
[  590.438523][T17976] wg1 speed is unknown, defaulting to 1000
[  590.793800][T18010] __nla_validate_parse: 3 callbacks suppressed
[  590.793820][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'.
[  590.837268][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'.
[  591.059083][T18014] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  591.067715][T17989] xfrm0 speed is unknown, defaulting to 1000
[  591.104171][T17983] lo speed is unknown, defaulting to 1000
[  591.134469][T17983] wg1 speed is unknown, defaulting to 1000
[  591.449364][T17976] chnl_net:caif_netlink_parms(): no params data found
[  591.722408][T17976] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.729981][ T5150] Bluetooth: hci1: command tx timeout
[  591.766497][T17976] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.787246][T17976] bridge_slave_0: entered allmulticast mode
[  591.809880][T17976] bridge_slave_0: entered promiscuous mode
[  591.840344][T17976] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.867927][T18035] netlink: 'syz.4.3053': attribute type 21 has an invalid length.
[  591.876007][T17976] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.887115][ T5150] Bluetooth: hci3: command 0x0405 tx timeout
[  591.897146][T17976] bridge_slave_1: entered allmulticast mode
[  591.919864][T17976] bridge_slave_1: entered promiscuous mode
[  592.010052][T18035] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3053'.
[  592.141136][T17976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  592.160369][T17976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  592.227160][T17989] lo speed is unknown, defaulting to 1000
[  592.431972][T17989] wg1 speed is unknown, defaulting to 1000
[  592.448191][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3055'.
[  592.467710][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3055'.
[  592.522241][T17976] team0: Port device team_slave_0 added
[  592.530980][T18042] netlink: 'syz.0.3055': attribute type 13 has an invalid length.
[  592.670217][T18042] batman_adv: batadv0: Interface deactivated: vxlan0
[  592.795775][T18042] batman_adv: batadv0: Interface deactivated: gretap1
[  592.845827][T17976] team0: Port device team_slave_1 added
[  592.948793][T18039] xfrm0 speed is unknown, defaulting to 1000
[  592.948815][ T1098] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  592.965592][ T1098] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  593.015852][ T1098] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  593.221404][ T1098] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  593.237202][ T1098] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  593.255900][ T1098] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  593.275314][ T1098] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  593.357081][ T1098] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  593.365831][ T1098] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  593.401331][T17976] batman_adv: batadv0: Adding interface: batadv_slave_0
[  593.410105][T17976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  593.441001][T17976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  593.460517][ T1098] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  593.470145][ T1098] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  593.488910][ T1098] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  593.586246][T17976] batman_adv: batadv0: Adding interface: batadv_slave_1
[  593.601765][T17976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  593.633719][T17976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.645546][T18039] lo speed is unknown, defaulting to 1000
[  593.668079][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'.
[  593.712826][T18039] wg1 speed is unknown, defaulting to 1000
[  593.766450][T18058] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3058'.
[  593.806391][ T5150] Bluetooth: hci1: command tx timeout
[  593.947681][T18066] Bluetooth: MGMT ver 1.23
[  594.022146][T17976] hsr_slave_0: entered promiscuous mode
[  594.039703][T17976] hsr_slave_1: entered promiscuous mode
[  594.057794][T17976] debugfs: 'hsr0' already exists in 'hsr'
[  594.063617][T17976] Cannot create hsr debugfs directory
[  595.887278][ T5150] Bluetooth: hci1: command tx timeout
[  596.024278][T18080] ip6tnl2: entered promiscuous mode
[  596.030533][T18080] ip6tnl2: entered allmulticast mode
[  596.330040][T18092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.417440][T18090] syzkaller1: entered promiscuous mode
[  596.429325][T18090] syzkaller1: entered allmulticast mode
[  596.532617][T18098] rdma_rxe: rxe_newlink: failed to add syz_tun
[  596.569990][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3069'.
[  596.728668][T17976] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  596.830986][T17976] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  596.879859][T17976] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  596.907580][T17976] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  596.945556][T18117] netlink: 'syz.4.3075': attribute type 1 has an invalid length.
[  597.005056][T18113] syzkaller0: entered promiscuous mode
[  597.036529][T18113] syzkaller0: entered allmulticast mode
[  597.279189][T18132] sctp: [Deprecated]: syz.4.3078 (pid 18132) Use of int in maxseg socket option.
[  597.279189][T18132] Use struct sctp_assoc_value instead
[  597.301655][T18135] veth0: entered promiscuous mode
[  597.328676][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  597.343659][T17976] 8021q: adding VLAN 0 to HW filter on device bond0
[  597.409555][T18135] veth0 (unregistering): left promiscuous mode
[  597.510741][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  597.522196][T17976] 8021q: adding VLAN 0 to HW filter on device team0
[  597.547514][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  597.562006][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.569344][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  597.611466][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  597.649565][T18147] xfrm0 speed is unknown, defaulting to 1000
[  597.651364][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.662809][ T9928] bridge0: port 2(bridge_slave_1) entered forwarding state
[  597.703970][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  597.741813][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  597.779326][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  597.831763][T18155] geneve0: entered promiscuous mode
[  597.854938][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  597.927544][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'.
[  597.967088][ T5150] Bluetooth: hci1: command tx timeout
[  598.368799][T18147] lo speed is unknown, defaulting to 1000
[  598.385116][T18147] wg1 speed is unknown, defaulting to 1000
[  598.397615][T18173] tc_dump_action: action bad kind
[  598.442094][T17976] 8021q: adding VLAN 0 to HW filter on device batadv0
[  598.629613][T17976] veth0_vlan: entered promiscuous mode
[  598.687537][T17976] veth1_vlan: entered promiscuous mode
[  598.758121][T17976] veth0_macvtap: entered promiscuous mode
[  598.773742][T17976] veth1_macvtap: entered promiscuous mode
[  598.849548][T17976] batman_adv: batadv0: Interface activated: batadv_slave_0
[  598.888138][T17976] batman_adv: batadv0: Interface activated: batadv_slave_1
[  598.918637][   T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.948278][   T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  598.970135][   T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.990051][   T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  599.239780][ T4980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.260282][ T4980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.362589][T13710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.397777][T13710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.953639][T18212] xfrm0 speed is unknown, defaulting to 1000
[  600.350721][T18224] netlink: 'syz.2.3101': attribute type 3 has an invalid length.
[  600.375660][T18224] netlink: 'syz.2.3101': attribute type 3 has an invalid length.
[  600.760633][T16804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  600.773238][T16804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  600.783764][T16804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  600.796412][T16804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  600.805988][T16804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  601.177561][T18212] lo speed is unknown, defaulting to 1000
[  601.202892][T18212] wg1 speed is unknown, defaulting to 1000
[  601.317233][T18235] xfrm0 speed is unknown, defaulting to 1000
[  601.656193][T18254] __nla_validate_parse: 60 callbacks suppressed
[  601.656230][T18254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3108'.
[  601.809250][T18226] xfrm0 speed is unknown, defaulting to 1000
[  601.915196][T18262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3111'.
[  601.928746][T18264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3111'.
[  602.043658][T18226] lo speed is unknown, defaulting to 1000
[  602.043851][T18253] xfrm0 speed is unknown, defaulting to 1000
[  602.070958][T18235] lo speed is unknown, defaulting to 1000
[  602.071545][T18226] wg1 speed is unknown, defaulting to 1000
[  602.125673][T18235] wg1 speed is unknown, defaulting to 1000
[  602.712215][T18254] xfrm0 speed is unknown, defaulting to 1000
[  602.732024][T18253] lo speed is unknown, defaulting to 1000
[  602.784328][T18253] wg1 speed is unknown, defaulting to 1000
[  602.851385][T16804] Bluetooth: hci5: command tx timeout
[  603.294209][T18226] chnl_net:caif_netlink_parms(): no params data found
[  603.348902][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3113'.
[  603.434751][T18254] lo speed is unknown, defaulting to 1000
[  603.454648][T18254] wg1 speed is unknown, defaulting to 1000
[  603.835698][T18226] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.851998][T18226] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.860851][T18226] bridge_slave_0: entered allmulticast mode
[  603.872300][T18226] bridge_slave_0: entered promiscuous mode
[  603.901110][T18226] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.913191][T18226] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.922228][T18226] bridge_slave_1: entered allmulticast mode
[  603.931386][T18226] bridge_slave_1: entered promiscuous mode
[  604.066097][T18226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.088751][T18226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.255774][T18226] team0: Port device team_slave_0 added
[  604.278019][T18226] team0: Port device team_slave_1 added
[  604.442789][T18226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.460405][T18226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.506168][T18226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.519279][T18226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  604.538307][T18226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.600426][T18226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.927675][T16804] Bluetooth: hci5: command tx timeout
[  605.226034][T18226] hsr_slave_0: entered promiscuous mode
[  605.233532][T18226] hsr_slave_1: entered promiscuous mode
[  605.241206][T18226] debugfs: 'hsr0' already exists in 'hsr'
[  605.248304][T18226] Cannot create hsr debugfs directory
[  605.436029][T18304] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3121'.
[  605.524276][T18300] xfrm0 speed is unknown, defaulting to 1000
[  605.870179][T18300] lo speed is unknown, defaulting to 1000
[  605.920147][T18310] gretap2: entered allmulticast mode
[  605.930446][T18300] wg1 speed is unknown, defaulting to 1000
[  606.050577][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 360 seconds
[  606.061967][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 360 seconds
[  606.073771][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 360 seconds
[  606.085147][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 360 seconds
[  606.236690][T18226] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  606.249603][T18226] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  606.264051][T18226] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  606.279044][T18226] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  606.631673][T18226] 8021q: adding VLAN 0 to HW filter on device bond0
[  606.688986][T18226] 8021q: adding VLAN 0 to HW filter on device team0
[  606.752392][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.759662][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state
[  606.858951][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.866167][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state
[  606.993480][T18320] syzkaller0: entered promiscuous mode
[  607.007138][T16804] Bluetooth: hci5: command tx timeout
[  607.009635][T18320] syzkaller0: entered allmulticast mode
[  607.593720][T18342] xfrm0 speed is unknown, defaulting to 1000
[  607.602909][T18352] netlink: 'syz.4.3132': attribute type 4 has an invalid length.
[  607.659191][T18226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  607.752671][T18226] veth0_vlan: entered promiscuous mode
[  607.777318][T18226] veth1_vlan: entered promiscuous mode
[  607.814595][T18360] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3135'.
[  607.863125][T18226] veth0_macvtap: entered promiscuous mode
[  607.885436][T18226] veth1_macvtap: entered promiscuous mode
[  607.932939][T18226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  607.958061][T18226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  608.034913][T13721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  608.043558][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3136'.
[  608.057819][T13721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  608.072050][T18364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3136'.
[  608.101049][T18364] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3136'.
[  608.125585][T18364] netlink: 540 bytes leftover after parsing attributes in process `syz.4.3136'.
[  608.634300][T13721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  608.670418][T13721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.683584][T18342] lo speed is unknown, defaulting to 1000
[  608.710044][T18342] wg1 speed is unknown, defaulting to 1000
[  608.867801][T18371] tipc: Started in network mode
[  608.876533][T18371] tipc: Node identity 2605bf81ed02, cluster identity 9
[  608.891840][T18371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  608.908381][ T9928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.916238][ T9928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.943517][T18373] syzkaller0: entered promiscuous mode
[  608.978011][   T30] audit: type=1107 audit(1765981060.188:12): pid=18374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  609.006460][T18373] syzkaller0: entered allmulticast mode
[  609.070337][T18371] tipc: Resetting bearer <eth:syzkaller0>
[  609.089921][T16804] Bluetooth: hci5: command tx timeout
[  609.112223][T18370] tipc: Resetting bearer <eth:syzkaller0>
[  609.227865][T18370] tipc: Disabling bearer <eth:syzkaller0>
[  609.272004][T13710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.316817][T13710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.702431][T18387] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8
[  610.735207][T18399] xfrm0 speed is unknown, defaulting to 1000
[  610.809882][T18409] syzkaller0: entered promiscuous mode
[  610.825056][T18409] syzkaller0: entered allmulticast mode
[  610.850004][T18407] tipc: Started in network mode
[  610.863502][T18407] tipc: Node identity 864307112f3d, cluster identity 4711
[  610.889470][T18407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  610.961789][T18407] tipc: Resetting bearer <eth:syzkaller0>
[  611.013848][T18407] tipc: Disabling bearer <eth:syzkaller0>
[  611.433214][T18431] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3153'.
[  611.448194][T18431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3153'.
[  611.462371][T18399] lo speed is unknown, defaulting to 1000
[  611.471002][T18399] wg1 speed is unknown, defaulting to 1000
[  611.550613][T18438] netlink: 'syz.2.3155': attribute type 1 has an invalid length.
[  611.715483][T18438] bond1: entered promiscuous mode
[  611.761469][T18438] 8021q: adding VLAN 0 to HW filter on device bond1
[  611.777925][T18439] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  611.790983][T18439] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  611.801289][T18439] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  611.989577][T18448] gretap1: entered promiscuous mode
[  612.584453][T18474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3165'.
[  613.177892][T18494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3172'.
[  613.281704][ T1332] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  613.302251][ T1332] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  613.312444][ T1332] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  613.321450][ T1332] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  613.448581][T18515] Bluetooth: MGMT ver 1.23
[  613.488753][T16804] Bluetooth: hci5: command tx timeout
[  613.875267][T18541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3184'.
[  613.900166][T18538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  613.907961][T18538] IPv6: NLM_F_CREATE should be set when creating new route
[  613.915240][T18538] IPv6: NLM_F_CREATE should be set when creating new route
[  613.949363][T18547] No such timeout policy "syz0"
[  614.033090][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3182'.
[  614.382482][T18572] netlink: 'syz.1.3190': attribute type 1 has an invalid length.
[  614.473339][T18572] veth3: entered promiscuous mode
[  614.660577][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'.
[  615.180633][T18598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  615.198470][T18598] syzkaller0: entered promiscuous mode
[  615.203999][T18598] syzkaller0: entered allmulticast mode
[  615.254926][T18597] tipc: Resetting bearer <eth:syzkaller0>
[  615.290472][T18597] tipc: Disabling bearer <eth:syzkaller0>
[  615.320952][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  615.335981][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  615.345258][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  615.360422][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  615.363701][T18608] netlink: 'syz.3.3202': attribute type 11 has an invalid length.
[  615.378309][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  615.383121][T18608] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3202'.
[  615.484193][ T5832] syz_tun (unregistering): left promiscuous mode
[  615.525792][T18612] netlink: 'syz.3.3204': attribute type 1 has an invalid length.
[  615.539058][T18610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'.
[  615.558048][T18612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3204'.
[  615.558494][T18613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3203'.
[  615.650693][ T5150] Bluetooth: hci5: command 0x0405 tx timeout
[  615.705578][T18603] xfrm0 speed is unknown, defaulting to 1000
[  616.032283][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3210'.
[  616.060948][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3210'.
[  616.081333][T18635] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  616.086842][T18633] netlink: 'syz.4.3210': attribute type 12 has an invalid length.
[  616.223017][T18639] xfrm0 speed is unknown, defaulting to 1000
[  616.224664][T18603] lo speed is unknown, defaulting to 1000
[  616.270963][T18603] wg1 speed is unknown, defaulting to 1000
[  616.362706][T18653] IPVS: length: 35 != 26904
[  616.386702][T18652] IPVS: length: 35 != 26904
[  616.399743][T18652] tipc: Resetting bearer <eth:syzkaller0>
[  616.579735][T18639] lo speed is unknown, defaulting to 1000
[  616.588766][T18639] wg1 speed is unknown, defaulting to 1000
[  617.018297][T13710] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  617.028741][T18670] xt_cgroup: xt_cgroup: no path or classid specified
[  617.037004][T13710] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.314151][T18603] chnl_net:caif_netlink_parms(): no params data found
[  617.489556][T16804] Bluetooth: hci4: command tx timeout
[  617.642372][T18691] netlink: 'syz.2.3225': attribute type 1 has an invalid length.
[  617.698264][T18691] 8021q: adding VLAN 0 to HW filter on device bond2
[  617.715498][T18708] openvswitch: netlink: Multiple metadata blocks provided
[  617.845128][T18603] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.853315][T18603] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.864926][T18603] bridge_slave_0: entered allmulticast mode
[  617.873153][T18603] bridge_slave_0: entered promiscuous mode
[  617.882976][T18603] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.890993][T18603] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.898591][T18603] bridge_slave_1: entered allmulticast mode
[  617.908029][T18603] bridge_slave_1: entered promiscuous mode
[  617.977162][T18717] openvswitch: netlink: EtherType 0 is less than min 600
[  618.139727][T18603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  618.213129][T18603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  618.352728][T18724] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  618.402215][T18603] team0: Port device team_slave_0 added
[  618.414852][T18724] __nla_validate_parse: 4 callbacks suppressed
[  618.414869][T18724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3232'.
[  618.448236][T18603] team0: Port device team_slave_1 added
[  618.488457][T18603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  618.495531][T18603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.523247][T18603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  618.541394][T18603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  618.550878][T18603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.578934][T18603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  618.729974][T18735] netlink: 'syz.2.3236': attribute type 2 has an invalid length.
[  618.760673][T18603] hsr_slave_0: entered promiscuous mode
[  618.780979][T18603] hsr_slave_1: entered promiscuous mode
[  618.800288][T18603] debugfs: 'hsr0' already exists in 'hsr'
[  618.806061][T18603] Cannot create hsr debugfs directory
[  618.820945][T18741] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3238'.
[  618.989919][T18744] xfrm0 speed is unknown, defaulting to 1000
[  619.374276][T18744] lo speed is unknown, defaulting to 1000
[  619.410708][T18744] wg1 speed is unknown, defaulting to 1000
[  619.569231][T16804] Bluetooth: hci4: command tx timeout
[  619.791954][T18781] netlink: 'syz.3.3245': attribute type 9 has an invalid length.
[  619.829960][T18781] netlink: 'syz.3.3245': attribute type 11 has an invalid length.
[  619.839657][T18781] netlink: 'syz.3.3245': attribute type 12 has an invalid length.
[  619.848184][T18781] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3245'.
[  619.858359][T18781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'.
[  619.891868][T18782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3245'.
[  620.060291][T18788] bridge_slave_0: default FDB implementation only supports local addresses
[  620.117973][T18603] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  620.174930][T18603] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  620.250896][T18603] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  620.302175][T18603] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  620.668985][T18813] veth4: entered promiscuous mode
[  620.835206][T18823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3254'.
[  620.884047][T18603] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.915169][T18603] 8021q: adding VLAN 0 to HW filter on device team0
[  620.941880][T13710] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.949113][T13710] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.973349][T13721] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.980572][T13721] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.044885][T18835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3256'.
[  621.093765][T18835] pim6reg: entered allmulticast mode
[  621.109840][T18835] pim6reg: left allmulticast mode
[  621.173945][T18842] netlink: 'syz.4.3256': attribute type 6 has an invalid length.
[  621.204585][T18842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3256'.
[  621.226794][T18835] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3256'.
[  621.240999][T18842] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.249591][T18842] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.451982][T18603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.566084][T18603] veth0_vlan: entered promiscuous mode
[  621.584010][T18603] veth1_vlan: entered promiscuous mode
[  621.627655][T18603] veth0_macvtap: entered promiscuous mode
[  621.640393][T18603] veth1_macvtap: entered promiscuous mode
[  621.650085][T16804] Bluetooth: hci4: command tx timeout
[  621.685214][T18603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.748075][T18603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  621.791269][T13719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.810965][T13719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.835169][T13719] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.848572][T13719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.873752][T18863] netlink: 'syz.3.3262': attribute type 1 has an invalid length.
[  621.891976][T18863] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3262'.
[  622.095758][T13710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.106068][T13710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.164610][T18870] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000
[  622.172134][T13710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.184691][T13710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.497434][T18890] netlink: 'syz.1.3270': attribute type 4 has an invalid length.
[  622.524655][T18890] netlink: 'syz.1.3270': attribute type 4 has an invalid length.
[  622.639686][T18885] hsr_slave_0: left promiscuous mode
[  622.648254][T18885] hsr_slave_1: left promiscuous mode
[  622.942405][T18893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  622.962300][T18893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  623.071861][T18893] geneve0: left promiscuous mode
[  623.175633][ T6261] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.202176][ T6261] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.220375][ T6261] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.230921][ T6261] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.504564][T18919] __nla_validate_parse: 5 callbacks suppressed
[  623.504582][T18919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'.
[  623.529743][T18919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3278'.
[  623.624362][T18921] C: entered promiscuous mode
[  623.630511][T18921] tunl0: entered promiscuous mode
[  623.636143][T18921] gre0: entered promiscuous mode
[  623.642388][T18921] gretap0: entered promiscuous mode
[  623.651203][T18921] erspan0: entered promiscuous mode
[  623.657756][T18921] ip_vti0: entered promiscuous mode
[  623.663570][T18921] ip6_vti0: entered promiscuous mode
[  623.670262][T18921] sit0: entered promiscuous mode
[  623.675887][T18921] ip6tnl0: entered promiscuous mode
[  623.689783][T18921] ip6gre0: entered promiscuous mode
[  623.696177][T18921] syz_tun: entered promiscuous mode
[  623.704766][T18921] ip6gretap0: entered promiscuous mode
[  623.711574][T18921] bridge0: entered promiscuous mode
[  623.721875][T18921] vcan0: entered promiscuous mode
[  623.727745][ T5150] Bluetooth: hci4: command tx timeout
[  623.735016][T18921] bond0: entered promiscuous mode
[  623.741796][T18921] bond_slave_0: entered promiscuous mode
[  623.742033][T18929] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3281'.
[  623.758797][T18921] bond_slave_1: entered promiscuous mode
[  623.765455][T18921] team0: entered promiscuous mode
[  623.771050][T18921] team_slave_0: entered promiscuous mode
[  623.779155][T18921] team_slave_1: entered promiscuous mode
[  623.785868][T18921] dummy0: entered promiscuous mode
[  623.792800][T18921] nlmon0: entered promiscuous mode
[  623.799659][T18921] caif0: entered promiscuous mode
[  623.804698][T18921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  624.560546][T18931] netlink: 'syz.2.3282': attribute type 2 has an invalid length.
[  624.722664][T18944] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3285'.
[  624.741333][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'.
[  624.750447][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3285'.
[  625.152416][T18963] vxcan5: entered allmulticast mode
[  625.802167][T18965] Cannot find set identified by id 0 to match
[  625.808754][ T5150] Bluetooth: hci4: command 0x0405 tx timeout
[  626.074765][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3301'.
[  626.954196][T19044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3313'.
[  627.087953][T17474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  627.354013][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3318'.
[  627.373154][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3318'.
[  627.478596][T19067] 8021q: adding VLAN 0 to HW filter on device bond1
[  627.525149][T19073] netlink: 'syz.0.3322': attribute type 1 has an invalid length.
[  627.678787][T19086] bond2: option ad_select: invalid value (34)
[  627.720176][T19086] bond2 (unregistering): Released all slaves
[  627.768598][T19100] block nbd8: Unsupported socket: should be TCP or UNIX.
[  627.808024][T13719] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  627.834248][T19102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  627.856178][T19098] syzkaller0: entered promiscuous mode
[  627.863324][T19098] syzkaller0: entered allmulticast mode
[  627.897463][T19102] syzkaller0: entered promiscuous mode
[  627.906451][T19102] syzkaller0: entered allmulticast mode
[  627.967291][T17474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  627.982554][T19101] tipc: Resetting bearer <eth:syzkaller0>
[  628.035748][T19101] tipc: Disabling bearer <eth:syzkaller0>
[  628.778594][T19137] __nla_validate_parse: 4 callbacks suppressed
[  628.778613][T19137] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3340'.
[  628.841904][T19137] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3340'.
[  628.871885][T19137] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3340'.
[  628.884599][ T6261] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  628.893471][ T6261] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  628.924722][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3338'.
[  628.954678][T19139] 0: reclassify loop, rule prio 0, protocol 800
[  629.091365][T19147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  629.347595][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'.
[  629.390345][T17474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  629.455272][T19170] netlink: 'syz.4.3348': attribute type 3 has an invalid length.
[  629.555121][T19170] macsec1: entered promiscuous mode
[  629.579740][T19170] dummy0: entered promiscuous mode
[  629.585081][T19170] macsec1: entered allmulticast mode
[  629.588503][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'.
[  629.600107][T19170] dummy0: entered allmulticast mode
[  629.607634][T19170] dummy0: left allmulticast mode
[  629.621516][T19170] dummy0: left promiscuous mode
[  629.695473][T19175] syzkaller0: entered promiscuous mode
[  629.708822][T19175] syzkaller0: entered allmulticast mode
[  629.951026][T19187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3354'.
[  630.190412][T19198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3356'.
[  630.394102][T19213] bond0: entered promiscuous mode
[  630.400166][T19213] bond_slave_0: entered promiscuous mode
[  630.407167][T19213] bond_slave_1: entered promiscuous mode
[  630.415523][T19213] batadv_slave_0: entered promiscuous mode
[  630.424638][T19213] batadv_slave_0: left promiscuous mode
[  630.471388][T19213] bond0: left promiscuous mode
[  630.476207][T19213] bond_slave_0: left promiscuous mode
[  630.504153][T19213] bond_slave_1: left promiscuous mode
[  630.547615][T19216] nbd: socks must be embedded in a SOCK_ITEM attr
[  630.559053][T19216] block nbd8: shutting down sockets
[  630.608285][T19219] netlink: 'syz.2.3363': attribute type 1 has an invalid length.
[  630.703289][T19219] 8021q: adding VLAN 0 to HW filter on device bond3
[  630.737686][T12806] IPVS: starting estimator thread 0...
[  630.799269][T19236] netlink: 'syz.3.3366': attribute type 2 has an invalid length.
[  630.835176][T19228] bond3: (slave veth3): Enslaving as an active interface with a down link
[  630.844585][T19234] IPVS: using max 30 ests per chain, 72000 per kthread
[  630.863536][T19219] bond3: entered allmulticast mode
[  630.886134][T19236] : entered promiscuous mode
[  630.979855][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3371'.
[  631.135142][T19256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.143241][T19256] syzkaller0: entered promiscuous mode
[  631.169543][T19256] syzkaller0: entered allmulticast mode
[  631.575650][T19271] netlink: 'syz.0.3377': attribute type 5 has an invalid length.
[  631.619030][T19253] tipc: Resetting bearer <eth:syzkaller0>
[  631.647704][T19253] tipc: Disabling bearer <eth:syzkaller0>
[  631.657923][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'.
[  631.954718][ T6013] IPVS: starting estimator thread 0...
[  632.048935][T19289] IPVS: using max 27 ests per chain, 64800 per kthread
[  632.058103][T19296] netlink: 'syz.1.3384': attribute type 1 has an invalid length.
[  632.172744][T19296] 8021q: adding VLAN 0 to HW filter on device bond2
[  632.222706][T19303] vlan2: entered allmulticast mode
[  632.254504][T19303] bond2: entered allmulticast mode
[  632.310405][T19302] bond2: option primary_reselect: invalid value (6)
[  632.315235][T19316] netlink: 'syz.0.3388': attribute type 1 has an invalid length.
[  632.329309][T19302] bond2 (unregistering): Released all slaves
[  632.339713][T19314] netlink: 'syz.3.3389': attribute type 1 has an invalid length.
[  632.385444][T19304] bond2: (slave gretap1): making interface the new active one
[  632.395561][T19304] gretap1: entered allmulticast mode
[  632.422069][T19304] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  632.896519][T19308] bond1: (slave veth3): Enslaving as an active interface with a down link
[  632.932725][T19320] bond1 (unregistering): (slave veth3): Releasing active interface
[  633.001841][T19320] bond1 (unregistering): Released all slaves
[  633.016708][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  633.194890][T19342] netlink: 'syz.3.3395': attribute type 20 has an invalid length.
[  633.244892][T19342] netlink: 'syz.3.3395': attribute type 21 has an invalid length.
[  633.300981][T19346] netlink: 'syz.3.3395': attribute type 1 has an invalid length.
[  633.754925][T19370] x_tables: duplicate underflow at hook 3
[  633.911992][T19380] __nla_validate_parse: 4 callbacks suppressed
[  633.912011][T19380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3403'.
[  633.961187][T19384] xt_TCPMSS: Only works on TCP SYN packets
[  633.991012][T19387] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3406'.
[  634.054221][T19391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3403'.
[  634.074825][T19391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3403'.
[  634.165756][T19395] netlink: 'syz.1.3407': attribute type 13 has an invalid length.
[  634.173619][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3408'.
[  634.178246][T19395] netlink: 'syz.1.3407': attribute type 17 has an invalid length.
[  634.285720][T19399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3407'.
[  634.473947][T17474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  634.764407][T19420] xfrm0 speed is unknown, defaulting to 1000
[  634.818103][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'.
[  634.853879][T19428] netlink: 'syz.4.3416': attribute type 4 has an invalid length.
[  634.905833][T19427] netlink: 'syz.4.3416': attribute type 4 has an invalid length.
[  635.247802][ T5945] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  635.380657][T19438] xfrm0 speed is unknown, defaulting to 1000
[  635.388385][T19420] lo speed is unknown, defaulting to 1000
[  635.401207][T19420] wg1 speed is unknown, defaulting to 1000
[  635.687854][T19438] lo speed is unknown, defaulting to 1000
[  635.695824][T19438] wg1 speed is unknown, defaulting to 1000
[  636.062376][T19462] netlink: 'syz.4.3423': attribute type 1 has an invalid length.
[  636.135869][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 390 seconds
[  636.148464][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 390 seconds
[  636.160157][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 390 seconds
[  636.171840][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 390 seconds
[  636.324364][T19469] openvswitch: netlink: Message has 4 unknown bytes.
[  636.544617][T19465] 8021q: adding VLAN 0 to HW filter on device bond2
[  636.695465][T19471] veth5: entered promiscuous mode
[  636.734821][T19471] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  637.024367][T19478] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3425'.
[  637.051585][T19475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  637.118163][T19475] syzkaller0: entered promiscuous mode
[  637.123841][T19475] syzkaller0: entered allmulticast mode
[  637.201625][T19475] tipc: Resetting bearer <eth:syzkaller0>
[  637.224933][T19473] tipc: Resetting bearer <eth:syzkaller0>
[  637.268440][T19473] tipc: Disabling bearer <eth:syzkaller0>
[  637.492313][T19488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  637.769407][T19490] syzkaller0: entered promiscuous mode
[  637.775707][T19490] syzkaller0: entered allmulticast mode
[  637.868194][T19499] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3431'.
[  637.898927][T19499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3431'.
[  638.130036][T19511] ip6gre1: entered promiscuous mode
[  638.153139][T19511] ip6gre1: entered allmulticast mode
[  638.395493][T19528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  638.445725][T19528] tipc: Resetting bearer <eth:syzkaller0>
[  638.682791][T19527] tipc: Disabling bearer <eth:syzkaller0>
[  639.212865][T19556] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  639.329259][T19561] xfrm0 speed is unknown, defaulting to 1000
[  639.441287][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3448'.
[  639.498849][T19567] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  640.055331][T19561] lo speed is unknown, defaulting to 1000
[  640.062101][T19569] xfrm0 speed is unknown, defaulting to 1000
[  640.089640][T19561] wg1 speed is unknown, defaulting to 1000
[  640.199351][T19588] IPVS: length: 4096 != 24
[  640.582399][T19585] xfrm0 speed is unknown, defaulting to 1000
[  640.594616][T19569] lo speed is unknown, defaulting to 1000
[  640.654944][T19569] wg1 speed is unknown, defaulting to 1000
[  640.714042][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'.
[  640.989993][T19585] lo speed is unknown, defaulting to 1000
[  641.037640][T19585] wg1 speed is unknown, defaulting to 1000
[  641.246511][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  641.606189][T19607] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  641.622181][T19607] bond3 (unregistering): Released all slaves
[  642.214940][T19623] xfrm0 speed is unknown, defaulting to 1000
[  645.117232][T19593] Set syz1 is full, maxelem 65536 reached
[  645.660788][T19623] lo speed is unknown, defaulting to 1000
[  645.827732][T19628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.883583][T19623] wg1 speed is unknown, defaulting to 1000
[  645.985672][T19628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.111555][T19628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.295513][T19628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.512794][T19648] tipc: Failed to remove unknown binding: 66,1,1/0:1952866777/1952866779
[  646.542483][T19648] tipc: Failed to remove unknown binding: 66,1,1/0:1952866777/1952866779
[  646.551804][T19648] tipc: Failed to remove unknown binding: 66,1,1/0:1952866777/1952866779
[  646.761400][ T6036] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  646.871709][ T6036] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  646.919911][ T6036] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  646.981336][ T6036] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  647.114410][T19655] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3467'.
[  647.260808][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'.
[  647.541496][T19670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3472'.
[  647.598028][T19673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3472'.
[  647.705756][T19681] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3476'.
[  647.719676][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'.
[  648.001519][T19692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3480'.
[  648.023735][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3478'.
[  648.452441][T19717] syzkaller0: entered promiscuous mode
[  648.466930][T19717] syzkaller0: entered allmulticast mode
[  648.478321][T19719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3487'.
[  648.524767][T19721] tipc: Started in network mode
[  648.532647][T19721] tipc: Node identity 72ce3fd8fe78, cluster identity 4711
[  648.544348][T19721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  648.583583][T19724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3489'.
[  649.934939][T19721] syzkaller0: entered promiscuous mode
[  649.940553][T19721] syzkaller0: entered allmulticast mode
[  649.970738][T19729] tipc: Resetting bearer <eth:syzkaller0>
[  650.060182][T19733] netlink: 'syz.1.3490': attribute type 1 has an invalid length.
[  650.068892][ T6013] tipc: Node number set to 2360754136
[  650.075545][T19726] tipc: Resetting bearer <eth:syzkaller0>
[  650.118705][T19726] tipc: Disabling bearer <eth:syzkaller0>
[  650.142795][T19733] gtp0: entered promiscuous mode
[  650.157948][T19733] gtp0: entered allmulticast mode
[  650.233687][T19745] netlink: 'syz.0.3494': attribute type 6 has an invalid length.
[  650.367693][T19750] block nbd8: shutting down sockets
[  650.411754][T19753] : entered promiscuous mode
[  650.418274][T19756] sctp: [Deprecated]: syz.0.3497 (pid 19756) Use of int in max_burst socket option.
[  650.418274][T19756] Use struct sctp_assoc_value instead
[  650.533913][T19759] tipc: Started in network mode
[  650.552786][T19759] tipc: Node identity 2aac498be2d6, cluster identity 4711
[  650.561799][T19759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  650.569921][T19759] syzkaller0: entered promiscuous mode
[  650.575633][T19759] syzkaller0: entered allmulticast mode
[  650.607836][T19759] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  650.680643][T19767] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  650.691919][T19763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  650.702743][T19763] syzkaller0: entered promiscuous mode
[  650.709839][T19763] syzkaller0: entered allmulticast mode
[  650.740337][T19763] tipc: Resetting bearer <eth:syzkaller0>
[  650.749005][T19762] tipc: Resetting bearer <eth:syzkaller0>
[  650.773835][T19762] tipc: Disabling bearer <eth:syzkaller0>
[  650.805070][T19767] tipc: Resetting bearer <eth:syzkaller0>
[  650.861373][T19767] tipc: Disabling bearer <eth:syzkaller0>
[  650.950698][T19776] tc_dump_action: action bad kind
[  651.306663][T19791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  651.476099][T19806] netlink: 'syz.3.3512': attribute type 181 has an invalid length.
[  651.486939][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.531631][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  651.541118][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.690095][T19815] geneve2: entered promiscuous mode
[  651.858374][T19832] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  651.949974][T19820] xfrm0 speed is unknown, defaulting to 1000
[  652.181734][T19842] __nla_validate_parse: 44 callbacks suppressed
[  652.181752][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3519'.
[  652.202792][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3519'.
[  652.277798][T19844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3521'.
[  652.488874][T19823] xfrm0 speed is unknown, defaulting to 1000
[  652.497733][T19820] lo speed is unknown, defaulting to 1000
[  652.537352][T19820] wg1 speed is unknown, defaulting to 1000
[  652.802313][T19823] lo speed is unknown, defaulting to 1000
[  652.810455][T19823] wg1 speed is unknown, defaulting to 1000
[  656.606725][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  666.208286][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 420 seconds
[  666.219784][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 420 seconds
[  666.231225][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 420 seconds
[  666.242661][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 420 seconds
[  683.486755][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.126986][T16804] Bluetooth: hci3: command 0x0405 tx timeout
[  688.606563][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  696.292242][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 450 seconds
[  696.303544][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 450 seconds
[  696.315083][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 450 seconds
[  696.326808][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 450 seconds
[  703.487088][T16804] Bluetooth: hci0: command 0x0406 tx timeout
[  718.847518][T16804] Bluetooth: hci1: command 0x0406 tx timeout
[  726.367464][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 480 seconds
[  726.378737][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 480 seconds
[  726.390373][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 480 seconds
[  726.401915][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 480 seconds
[  752.611556][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.450798][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 510 seconds
[  756.462037][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 510 seconds
[  756.473513][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 510 seconds
[  756.484914][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 510 seconds
[  757.727255][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  770.047249][ T5150] Bluetooth: hci4: command 0x0405 tx timeout
[  786.528945][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 540 seconds
[  786.541124][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 540 seconds
[  786.552768][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 540 seconds
[  786.564234][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 540 seconds
[  810.471747][T19865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'.
[  810.523914][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3526'.
[  810.590805][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3526'.
[  810.609147][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3526'.
[  810.619321][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3526'.
[  810.631664][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3526'.
[  810.641607][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3526'.
[  810.653352][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3526'.
[  810.663511][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3526'.
[  810.673844][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3526'.
[  810.715984][T19865] bridge_slave_1: left allmulticast mode
[  810.722812][T19865] bridge_slave_1: left promiscuous mode
[  810.736506][T19865] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.751311][T19865] bridge_slave_0: left allmulticast mode
[  810.757291][T19865] bridge_slave_0: left promiscuous mode
[  810.765443][T19865] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.051156][T19886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  811.063501][T19886] batadv_slave_1: mtu less than device minimum
[  811.530021][T19902] netlink: 'syz.4.3536': attribute type 9 has an invalid length.
[  811.969602][T19933] geneve3: entered promiscuous mode
[  812.003423][T19934] batadv1: entered promiscuous mode
[  812.017247][T13719] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 59705 - 0
[  812.039717][T13719] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 59705 - 0
[  812.043084][T19933] netlink: 'syz.0.3540': attribute type 8 has an invalid length.
[  812.078970][T13719] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 59705 - 0
[  812.104895][T13719] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 59705 - 0
[  812.328846][T19934] xfrm0 speed is unknown, defaulting to 1000
[  813.258707][T19977] netlink: 'syz.4.3553': attribute type 10 has an invalid length.
[  813.291382][T19977] team0: Port device dummy0 added
[  813.378806][T19984] IPv6: Can't replace route, no match found
[  813.387229][T19977] team0: Port device dummy0 removed
[  813.427591][T19977] bridge_slave_0: left allmulticast mode
[  813.443672][T19977] bridge_slave_0: left promiscuous mode
[  813.452892][T19977] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.471685][T19977] bridge_slave_1: left allmulticast mode
[  813.496952][T19977] bridge_slave_1: left promiscuous mode
[  813.502931][T19977] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.533289][T19977] bond0: (slave bond_slave_0): Releasing backup interface
[  813.555026][T19977] bond0: (slave bond_slave_1): Releasing backup interface
[  813.572955][T19977] team0: Port device team_slave_0 removed
[  813.586714][T19977] team0: Port device team_slave_1 removed
[  813.597836][T19977] batman_adv: batadv0: Removing interface: batadv_slave_0
[  813.624826][T19977] batman_adv: batadv0: Removing interface: batadv_slave_1
[  813.636462][T19977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  813.659957][T19934] lo speed is unknown, defaulting to 1000
[  813.678348][T19934] wg1 speed is unknown, defaulting to 1000
[  813.789730][T19999] No such timeout policy "syz0"
[  813.992555][T20005] xfrm0 speed is unknown, defaulting to 1000
[  814.337973][T20005] lo speed is unknown, defaulting to 1000
[  814.354961][T20005] wg1 speed is unknown, defaulting to 1000
[  815.043153][T20030] netlink: 'syz.3.3568': attribute type 1 has an invalid length.
[  815.288202][T20030] 8021q: adding VLAN 0 to HW filter on device bond1
[  815.395582][T20032] 8021q: adding VLAN 0 to HW filter on device bond1
[  815.398668][T20034] x_tables: duplicate underflow at hook 1
[  815.410672][T20026] SET target dimension over the limit!
[  815.422216][T20032] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  815.441708][T20032] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  815.481839][T20033] gretap1: entered promiscuous mode
[  816.178997][T20074] __nla_validate_parse: 88 callbacks suppressed
[  816.179015][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'.
[  816.485565][T20083] xfrm0 speed is unknown, defaulting to 1000
[  816.495700][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3580'.
[  816.631852][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 570 seconds
[  816.642961][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 570 seconds
[  816.654336][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 570 seconds
[  816.656064][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'.
[  816.667377][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 570 seconds
[  816.712097][T20085] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3578'.
[  816.895084][T20083] lo speed is unknown, defaulting to 1000
[  816.903634][T20083] wg1 speed is unknown, defaulting to 1000
[  817.262343][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3585'.
[  817.562489][T20107] xfrm0 speed is unknown, defaulting to 1000
[  817.633974][T20113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3588'.
[  817.710569][T20115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3588'.
[  817.978061][T20107] lo speed is unknown, defaulting to 1000
[  818.000830][T20107] wg1 speed is unknown, defaulting to 1000
[  818.872123][T20139] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  818.934909][T20149] netlink: 'syz.1.3597': attribute type 5 has an invalid length.
[  819.033784][T20134] sock: sock_set_timeout: `syz.4.3594' (pid 20134) tries to set negative timeout
[  819.150915][T20150] xfrm0 speed is unknown, defaulting to 1000
[  819.564923][T20150] lo speed is unknown, defaulting to 1000
[  819.594464][T20150] wg1 speed is unknown, defaulting to 1000
[  820.061500][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3603'.
[  820.236607][T20173] IPv6: addrconf: prefix option has invalid lifetime
[  820.243747][T20173] IPv6: addrconf: prefix option has invalid lifetime
[  820.322313][T20175] netlink: 'syz.2.3606': attribute type 1 has an invalid length.
[  820.961840][T20170] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  820.978185][T20170] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  821.011760][T20170] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  821.026344][T20170] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  821.069939][T20170] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  821.085777][T20170] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  821.144446][T20170] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  821.187704][T20170] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  821.261108][T20185] ip6gretap1: entered promiscuous mode
[  821.273257][T20170] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  821.287160][T20170] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  821.389740][T20189] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3611'.
[  821.438718][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'.
[  821.461407][T20189] netlink: 'syz.2.3611': attribute type 10 has an invalid length.
[  821.482216][T20189] bond0: (slave wlan1): Opening slave failed
[  821.544016][T20198] netlink: 'syz.4.3614': attribute type 1 has an invalid length.
[  821.555544][T20198] netlink: 'syz.4.3614': attribute type 11 has an invalid length.
[  821.565078][T20198] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3614'.
[  821.759622][T20214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3617'.
[  821.765315][T20211] xfrm0 speed is unknown, defaulting to 1000
[  821.793230][T20214] nbd: must specify at least one socket
[  821.807775][T20214] nbd: couldn't find device at index 1
[  822.155309][T20221] netlink: 'syz.1.3620': attribute type 21 has an invalid length.
[  822.177570][T20221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3620'.
[  822.179097][T20223] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3621'.
[  822.234764][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3621'.
[  822.282943][T20223] : entered promiscuous mode
[  822.297915][T20224] netlink: 'syz.3.3621': attribute type 1 has an invalid length.
[  822.374397][T20224] bond2: entered promiscuous mode
[  822.388778][T20224] 8021q: adding VLAN 0 to HW filter on device bond2
[  822.418348][T20211] lo speed is unknown, defaulting to 1000
[  822.474828][T20223] 8021q: adding VLAN 0 to HW filter on device bond2
[  822.492477][T20223] bond2: (slave gre1): The slave device specified does not support setting the MAC address
[  822.503312][T20223] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  822.514585][T20223] bond2: (slave gre1): Opening slave failed
[  822.552940][T20211] wg1 speed is unknown, defaulting to 1000
[  822.571406][T20232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3623'.
[  822.615023][T20230] xfrm0 speed is unknown, defaulting to 1000
[  822.736572][T20234] netlink: 'syz.2.3624': attribute type 1 has an invalid length.
[  822.780147][T20234] 8021q: adding VLAN 0 to HW filter on device bond4
[  822.849639][T20229] xfrm0 speed is unknown, defaulting to 1000
[  822.911597][T20230] lo speed is unknown, defaulting to 1000
[  822.954489][T20230] wg1 speed is unknown, defaulting to 1000
[  823.230941][T20243] netlink: 'syz.2.3627': attribute type 1 has an invalid length.
[  826.021880][T20255] pim6reg1: entered promiscuous mode
[  826.028613][T20255] pim6reg1: entered allmulticast mode
[  826.060979][T20236] xfrm0 speed is unknown, defaulting to 1000
[  826.126497][T20229] lo speed is unknown, defaulting to 1000
[  826.420785][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3632'.
[  826.458892][T20229] wg1 speed is unknown, defaulting to 1000
[  826.472651][T20270] SET target dimension over the limit!
[  826.481873][T20236] lo speed is unknown, defaulting to 1000
[  826.577805][T20236] wg1 speed is unknown, defaulting to 1000
[  826.620476][T20275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3633'.
[  827.166869][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3639'.
[  827.323651][T20305] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  827.464661][T20308] netlink: 'syz.2.3642': attribute type 3 has an invalid length.
[  827.579188][T20314] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3644'.
[  828.084611][T20333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3649'.
[  828.640049][T20344] xfrm0 speed is unknown, defaulting to 1000
[  828.784847][T20348] nbd: nbd4 already in use
[  828.805337][T20348] block nbd4: NBD_DISCONNECT
[  828.830749][T20348] block nbd4: Send disconnect failed -32
[  828.840500][T20348] block nbd4: shutting down sockets
[  828.917281][T20353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3655'.
[  829.082665][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3655'.
[  829.143009][T20350] syzkaller0: entered promiscuous mode
[  829.149113][T20350] syzkaller0: entered allmulticast mode
[  829.162726][T20355] netlink: 'syz.3.3655': attribute type 1 has an invalid length.
[  829.179259][T20355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3655'.
[  829.235158][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3654'.
[  829.279088][T20358] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3655'.
[  830.855994][T20358] bond3 (unregistering): Released all slaves
[  830.947262][T20344] lo speed is unknown, defaulting to 1000
[  830.977892][T20344] wg1 speed is unknown, defaulting to 1000
[  830.978942][T20364] xfrm0 speed is unknown, defaulting to 1000
[  831.658683][T20392] netlink: 'syz.1.3666': attribute type 15 has an invalid length.
[  831.666788][T20364] lo speed is unknown, defaulting to 1000
[  831.675279][T20389] netlink: 'syz.1.3666': attribute type 15 has an invalid length.
[  831.718617][T20364] wg1 speed is unknown, defaulting to 1000
[  831.724942][T20387] delete_channel: no stack
[  831.991100][T20398] xfrm0 speed is unknown, defaulting to 1000
[  832.364719][T20398] lo speed is unknown, defaulting to 1000
[  832.377811][T20398] wg1 speed is unknown, defaulting to 1000
[  832.570407][T20408] __nla_validate_parse: 1 callbacks suppressed
[  832.570535][T20408] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3671'.
[  832.600255][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3671'.
[  833.068244][T20418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3675'.
[  833.086926][T20418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3675'.
[  833.411168][T20420] netlink: 'syz.2.3676': attribute type 1 has an invalid length.
[  833.419199][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3676'.
[  833.448709][T20422] netlink: 'syz.2.3676': attribute type 1 has an invalid length.
[  833.462461][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3676'.
[  833.504888][T20425] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3677'.
[  833.903403][T20428] bridge0: port 2(bridge_slave_1) entered disabled state
[  833.911167][T20428] bridge0: port 1(bridge_slave_0) entered disabled state
[  834.132681][T20428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  834.160742][T20428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  834.259310][T20434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3680'.
[  834.299435][T13719] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  834.344917][T13719] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  834.381048][T13719] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  834.403050][T13719] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  834.465206][T20448] openvswitch: netlink: Flow key attr not present in new flow.
[  834.632648][T20460] netlink: 'syz.0.3686': attribute type 2 has an invalid length.
[  834.791456][T20473] syzkaller0: entered promiscuous mode
[  834.809654][T20473] syzkaller0: entered allmulticast mode
[  834.879049][T20471] xfrm0 speed is unknown, defaulting to 1000
[  835.042260][T20481] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3689'.
[  835.318261][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3696'.
[  835.593581][T20471] lo speed is unknown, defaulting to 1000
[  835.710698][T20471] wg1 speed is unknown, defaulting to 1000
[  837.513000][T20534] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  837.680819][T20542] __nla_validate_parse: 5 callbacks suppressed
[  837.680836][T20542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3706'.
[  837.698371][T20540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3705'.
[  837.718635][T20537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3704'.
[  837.718634][T20543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3704'.
[  837.784093][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3705'.
[  838.395564][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3713'.
[  838.424596][T20566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  838.564801][T20572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3714'.
[  838.575804][T20566] syzkaller0: entered promiscuous mode
[  838.594812][T20566] syzkaller0: entered allmulticast mode
[  838.666515][T20565] tipc: Resetting bearer <eth:syzkaller0>
[  838.732084][T20565] tipc: Disabling bearer <eth:syzkaller0>
[  838.830255][T20577] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  838.875858][T20577] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.883708][T20577] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.099327][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'.
[  839.137509][T20597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3723'.
[  839.179894][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3723'.
[  839.200413][T20599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  839.279339][T20598] tipc: Disabling bearer <eth:syzkaller0>
[  839.569687][T20619] netlink: 'syz.3.3728': attribute type 1 has an invalid length.
[  839.583396][T20615] xfrm0 speed is unknown, defaulting to 1000
[  840.196865][T20615] lo speed is unknown, defaulting to 1000
[  840.204747][T20615] wg1 speed is unknown, defaulting to 1000
[  840.643445][T20670] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  840.785974][T20676] syzkaller0: entered promiscuous mode
[  840.791755][T20676] syzkaller0: entered allmulticast mode
[  840.852110][T20676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  840.870302][T20673] tipc: Resetting bearer <eth:syzkaller0>
[  840.943350][T20673] tipc: Disabling bearer <eth:syzkaller0>
[  840.944140][T20682] netlink: 'syz.0.3743': attribute type 1 has an invalid length.
[  841.033735][T20680] C: left promiscuous mode
[  841.068740][T20680] tunl0: left promiscuous mode
[  841.095915][T20680] gre0: left promiscuous mode
[  841.115683][T20680] gretap0: left promiscuous mode
[  841.127836][T20686] netlink: 'syz.0.3744': attribute type 1 has an invalid length.
[  841.150808][T20680] erspan0: left promiscuous mode
[  841.162720][T20680] ip_vti0: left promiscuous mode
[  841.171916][T20680] ip6_vti0: left promiscuous mode
[  841.182532][T20680] sit0: left promiscuous mode
[  841.194324][T20680] ip6tnl0: left promiscuous mode
[  841.203709][T20680] ip6gre0: left promiscuous mode
[  841.212565][T20680] syz_tun: left promiscuous mode
[  841.223199][T20680] ip6gretap0: left promiscuous mode
[  841.232727][T20680] bridge0: left promiscuous mode
[  841.239692][T20680] vcan0: left promiscuous mode
[  841.252566][T20680] bond0: left promiscuous mode
[  841.258531][T20680] bond_slave_0: left promiscuous mode
[  841.264111][T20680] bond_slave_1: left promiscuous mode
[  841.281819][T20680] team0: left promiscuous mode
[  841.288612][T20680] team_slave_0: left promiscuous mode
[  841.294209][T20680] team_slave_1: left promiscuous mode
[  841.304931][T20680] dummy0: left promiscuous mode
[  841.322516][T20680] nlmon0: left promiscuous mode
[  841.350690][T20680] caif0: left promiscuous mode
[  841.422598][T20680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  841.438078][T20680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  841.539412][T20680] veth1_to_hsr: left allmulticast mode
[  841.545176][T20680] macvtap1: left promiscuous mode
[  841.557545][T20680] bond1: left promiscuous mode
[  841.603723][T20680] ip6gretap1: left promiscuous mode
[  841.818371][T20690] 8021q: adding VLAN 0 to HW filter on device bond3
[  841.853389][T20690] bond2: (slave bond3): making interface the new active one
[  841.864557][T20690] bond2: (slave bond3): Enslaving as an active interface with an up link
[  841.896277][ T4980] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  841.943926][ T4980] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  841.977321][ T4980] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  842.015371][T20700] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  842.038688][T20700] syzkaller0: entered promiscuous mode
[  842.043002][T20707] netlink: 'syz.0.3748': attribute type 1 has an invalid length.
[  842.044411][T20700] syzkaller0: entered allmulticast mode
[  842.062455][ T4980] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  843.879537][T20733] __nla_validate_parse: 5 callbacks suppressed
[  843.879557][T20733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3755'.
[  843.963734][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3758'.
[  844.004272][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3758'.
[  844.018936][T20743] xfrm0 speed is unknown, defaulting to 1000
[  844.120238][T20749] bond5: entered allmulticast mode
[  844.125832][T20749] 8021q: adding VLAN 0 to HW filter on device bond5
[  844.260622][T20759] netlink: 'syz.2.3761': attribute type 1 has an invalid length.
[  844.383453][T20743] lo speed is unknown, defaulting to 1000
[  844.391855][T20743] wg1 speed is unknown, defaulting to 1000
[  844.512386][T20770] syzkaller0: entered promiscuous mode
[  844.518679][T20770] syzkaller0: entered allmulticast mode
[  844.576809][T20774] IPVS: Error connecting to the multicast addr
[  844.878955][T20788] žÿ: renamed from team_slave_1 (while UP)
[  844.976602][T20791] delete_channel: no stack
[  845.204594][T20797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3771'.
[  845.204660][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3772'.
[  845.230710][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3772'.
[  845.525827][T20819] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000
[  845.544255][T20819] netlink: 'syz.2.3776': attribute type 13 has an invalid length.
[  845.552482][T20819] macvtap0: entered promiscuous mode
[  845.568006][T20819] macvtap0: refused to change device tx_queue_len
[  845.582542][T20819] netlink: zone id is out of range
[  845.596998][T20819] netlink: zone id is out of range
[  845.615627][T20819] netlink: zone id is out of range
[  845.625736][T20819] netlink: zone id is out of range
[  845.639924][T20819] netlink: zone id is out of range
[  845.645073][T20819] netlink: zone id is out of range
[  845.652043][T20824] netlink: 'syz.2.3776': attribute type 12 has an invalid length.
[  845.662046][T20824] netlink: 'syz.2.3776': attribute type 29 has an invalid length.
[  845.684309][T20819] netlink: zone id is out of range
[  845.694409][T20819] netlink: get zone limit has 4 unknown bytes
[  845.704601][T20824] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3776'.
[  846.010569][T20845] x_tables: ip_tables: osf match: only valid for protocol 6
[  846.082862][T20853] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3784'.
[  846.095481][T20853] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3784'.
[  846.221777][T20859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3787'.
[  846.259238][T20861] syzkaller1: entered promiscuous mode
[  846.264761][T20861] syzkaller1: entered allmulticast mode
[  846.358993][T20866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  846.359344][T20869] af_packet: tpacket_rcv: packet too big, clamped from 3960 to 3942. macoff=106
[  846.703739][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 600 seconds
[  846.716057][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 600 seconds
[  846.729662][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 600 seconds
[  846.742987][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 600 seconds
[  846.771299][T20893] netlink: 'syz.0.3795': attribute type 13 has an invalid length.
[  846.806210][T20893] netlink: 'syz.0.3795': attribute type 17 has an invalid length.
[  846.980172][T20893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  847.026123][T20906] xfrm0 speed is unknown, defaulting to 1000
[  847.042185][T20903] smc: adding net device geneve0 with user defined pnetid SYZ0
[  847.405641][T20898] xfrm0 speed is unknown, defaulting to 1000
[  847.409696][T20906] lo speed is unknown, defaulting to 1000
[  847.427069][T20906] wg1 speed is unknown, defaulting to 1000
[  847.862160][T20898] lo speed is unknown, defaulting to 1000
[  847.883522][T20898] wg1 speed is unknown, defaulting to 1000
[  848.216931][T20958] xfrm0 speed is unknown, defaulting to 1000
[  848.922025][T20985] __nla_validate_parse: 11 callbacks suppressed
[  848.922045][T20985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3817'.
[  848.954720][T20985] bridge_slave_1: left allmulticast mode
[  848.961503][T20985] bridge_slave_1: left promiscuous mode
[  848.967997][T20985] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.987998][T20985] bridge_slave_0: left allmulticast mode
[  848.993678][T20985] bridge_slave_0: left promiscuous mode
[  849.026564][T20985] bridge0: port 1(bridge_slave_0) entered disabled state
[  849.145733][T20958] lo speed is unknown, defaulting to 1000
[  849.163373][T20958] wg1 speed is unknown, defaulting to 1000
[  849.295609][T20996] xfrm0 speed is unknown, defaulting to 1000
[  849.427039][T20999] ip6tnl0: entered promiscuous mode
[  849.432449][T20999] ip6tnl0: entered allmulticast mode
[  850.097327][T20996] lo speed is unknown, defaulting to 1000
[  850.104745][T20996] wg1 speed is unknown, defaulting to 1000
[  850.210648][T21012] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3825'.
[  850.329551][T21014] openvswitch: netlink: nsh attribute has 65288 unknown bytes.
[  850.363633][T21014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  850.917619][T21044] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3833'.
[  850.977972][T21048] netlink: 'syz.4.3833': attribute type 3 has an invalid length.
[  851.397445][T21057] syzkaller0: entered promiscuous mode
[  851.402984][T21057] syzkaller0: entered allmulticast mode
[  851.470774][T21053] sch_tbf: peakrate 487729623 is lower than or equals to rate 2025907590907547489 !
[  851.843733][T21066] batadv1: entered promiscuous mode
[  851.997142][T21076] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3840'.
[  852.175898][T21076] xfrm0 speed is unknown, defaulting to 1000
[  852.230414][T21093] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3846'.
[  852.400989][T21076] lo speed is unknown, defaulting to 1000
[  852.407127][T21087] xfrm0 speed is unknown, defaulting to 1000
[  852.418305][T21076] wg1 speed is unknown, defaulting to 1000
[  852.648185][T21096] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3847'.
[  852.695912][T21089] xfrm0 speed is unknown, defaulting to 1000
[  852.711934][T21087] lo speed is unknown, defaulting to 1000
[  852.740924][T21087] wg1 speed is unknown, defaulting to 1000
[  853.133016][T21119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3853'.
[  853.220511][T21119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3853'.
[  853.307322][T21123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3854'.
[  853.564431][T21089] lo speed is unknown, defaulting to 1000
[  853.653645][T21089] wg1 speed is unknown, defaulting to 1000
[  854.578073][T21151] nbd: must specify at least one socket
[  854.649092][T21165] syzkaller0: entered promiscuous mode
[  854.655580][T21165] syzkaller0: entered allmulticast mode
[  855.020957][T21182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3865'.
[  855.244737][T21177] xfrm0 speed is unknown, defaulting to 1000
[  855.445596][T21196] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3869'.
[  856.081428][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3877'.
[  856.228498][T21177] lo speed is unknown, defaulting to 1000
[  856.244191][T21177] wg1 speed is unknown, defaulting to 1000
[  856.598356][T21235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'.
[  856.612584][T21235] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3883'.
[  856.804274][T21254] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3888'.
[  856.814825][T21254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  856.826069][T21254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3888'.
[  856.855270][T21246] syzkaller0: entered promiscuous mode
[  856.868726][T21259] netlink: 'syz.1.3889': attribute type 6 has an invalid length.
[  856.908919][T21246] syzkaller0: entered allmulticast mode
[  856.935670][T21264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  858.690057][T21269] ip6gre1: entered promiscuous mode
[  858.695343][T21269] ip6gre1: entered allmulticast mode
[  858.702682][ T4980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  858.712015][ T4980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  858.727253][T17476] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  858.788840][T21301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3898'.
[  858.850725][T17474] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  858.903436][T21301] 8021q: adding VLAN 0 to HW filter on device bond3
[  859.113927][T21313] xfrm0 speed is unknown, defaulting to 1000
[  859.123552][T21318] veth0: entered promiscuous mode
[  859.151148][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3904'.
[  859.201163][T21319] veth0 (unregistering): left promiscuous mode
[  859.461913][T21333] netlink: 211792 bytes leftover after parsing attributes in process `syz.4.3908'.
[  859.527131][T17474] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  859.607876][T21331] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  859.631535][T21331] bond4 (unregistering): Released all slaves
[  859.942867][T21342] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  860.022650][T21313] lo speed is unknown, defaulting to 1000
[  860.048882][T21313] wg1 speed is unknown, defaulting to 1000
[  860.298584][T21354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  860.683626][T21363] __nla_validate_parse: 2 callbacks suppressed
[  860.683645][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3916'.
[  860.795818][T21365] netlink: 'syz.2.3918': attribute type 29 has an invalid length.
[  860.838700][T21365] netlink: 'syz.2.3918': attribute type 29 has an invalid length.
[  861.055487][T21368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3919'.
[  861.227463][T21370] vxcan5: entered allmulticast mode
[  861.334197][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3925'.
[  861.536375][T21396] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3924'.
[  861.764143][T21375] Cannot find add_set index 2 as target
[  861.949584][T21402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3926'.
[  861.989356][T21404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3927'.
[  862.158405][T21414] netlink: 'syz.1.3931': attribute type 2 has an invalid length.
[  862.178018][T21414] netlink: 'syz.1.3931': attribute type 2 has an invalid length.
[  862.212894][T21414] netlink: 'syz.1.3931': attribute type 2 has an invalid length.
[  862.222992][T21410] bond3 (unregistering): Released all slaves
[  862.242717][T21414] netlink: 'syz.1.3931': attribute type 2 has an invalid length.
[  862.273028][T21414] netlink: 'syz.1.3931': attribute type 2 has an invalid length.
[  862.313292][T21414] netlink: 'syz.1.3931': attribute type 2 has an invalid length.
[  862.341793][T21414] netlink: 'syz.1.3931': attribute type 2 has an invalid length.
[  862.361126][T21414] netlink: 'syz.1.3931': attribute type 2 has an invalid length.
[  862.406879][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'.
[  862.417199][T21414] netlink: 'syz.1.3931': attribute type 2 has an invalid length.
[  862.425697][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'.
[  862.436033][T21414] netlink: 'syz.1.3931': attribute type 2 has an invalid length.
[  862.477755][T21434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3933'.
[  862.690679][T21447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3938'.
[  862.921300][T21459] xfrm0 speed is unknown, defaulting to 1000
[  862.927690][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  863.523992][T21473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  863.531975][T21459] lo speed is unknown, defaulting to 1000
[  863.548531][T21459] wg1 speed is unknown, defaulting to 1000
[  863.557282][T21470] syzkaller0: entered promiscuous mode
[  863.562827][T21470] syzkaller0: entered allmulticast mode
[  863.606126][T21472] tipc: Resetting bearer <eth:syzkaller0>
[  863.718757][T21469] tipc: Resetting bearer <eth:syzkaller0>
[  863.768678][T21469] tipc: Disabling bearer <eth:syzkaller0>
[  863.935544][T21482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  863.993619][T21481] tipc: Disabling bearer <eth:syzkaller0>
[  864.351275][T21511] ip6gre2: entered promiscuous mode
[  864.357420][T21511] ip6gre2: entered allmulticast mode
[  864.387156][T21508] xfrm0 speed is unknown, defaulting to 1000
[  865.090928][T21519] xfrm0 speed is unknown, defaulting to 1000
[  865.102932][T21508] lo speed is unknown, defaulting to 1000
[  865.124295][T21508] wg1 speed is unknown, defaulting to 1000
[  865.570449][T21519] lo speed is unknown, defaulting to 1000
[  865.606893][T21519] wg1 speed is unknown, defaulting to 1000
[  866.052412][T21575] svc: failed to register nfsdv3 RPC service (errno 111).
[  866.066993][T21575] svc: failed to register nfsaclv3 RPC service (errno 111).
[  866.566446][T21589] __nla_validate_parse: 6 callbacks suppressed
[  866.566467][T21589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3972'.
[  866.644289][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3972'.
[  866.874284][T21599] syzkaller0: entered promiscuous mode
[  866.904797][T21599] syzkaller0: entered allmulticast mode
[  867.417797][T21625] tipc: Started in network mode
[  867.422735][T21625] tipc: Node identity bbbbbb01, cluster identity 4711
[  867.432075][T21625] tipc: Enabled bearer <eth:rose0>, priority 10
[  867.484807][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3985'.
[  867.987759][T21662] validate_nla: 26 callbacks suppressed
[  867.987780][T21662] netlink: 'syz.1.3992': attribute type 10 has an invalid length.
[  868.017056][T21662] team0: Port device syz_tun added
[  868.253802][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'.
[  868.526363][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  868.546948][ T5904] tipc: Node number set to 3149642497
[  868.676941][T21696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4001'.
[  869.055602][T21708] 8021q: adding VLAN 0 to HW filter on device bond3
[  869.115228][T21707] xfrm0 speed is unknown, defaulting to 1000
[  869.312685][T21720] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4005'.
[  869.588465][T21724] team0: Failed to send port change of device syz_tun via netlink (err -105)
[  869.696062][T21724] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  869.715226][T21724] team0: Failed to send port change of device 
7
6žÿ via netlink (err -105)
[  869.733794][T21724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  869.749612][T21724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  870.681405][T21711] xfrm0 speed is unknown, defaulting to 1000
[  870.685600][T13710] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  870.727365][T13710] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  870.747966][T13710] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  870.776926][T13710] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  870.785934][T13710] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  870.827721][T13710] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  870.837787][T21707] lo speed is unknown, defaulting to 1000
[  870.844144][T21732] mac80211_hwsim hwsim48 ÿÿÿÿÿÿ: renamed from wlan1
[  870.865152][T21707] wg1 speed is unknown, defaulting to 1000
[  871.216950][T21738] xfrm0 speed is unknown, defaulting to 1000
[  871.235454][T21711] lo speed is unknown, defaulting to 1000
[  871.249769][T21711] wg1 speed is unknown, defaulting to 1000
[  871.517604][T21738] lo speed is unknown, defaulting to 1000
[  871.525198][T21738] wg1 speed is unknown, defaulting to 1000
[  871.646606][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  871.692180][T21741] syzkaller0: entered promiscuous mode
[  871.698432][T21741] syzkaller0: entered allmulticast mode
[  872.049631][T21750] x_tables: duplicate underflow at hook 2
[  872.073656][T21753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4015'.
[  872.172197][T21753] veth7: entered promiscuous mode
[  872.831172][T21784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4020'.
[  873.318604][T21804] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4025'.
[  873.469128][T13721] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  873.479009][T21805] syz.4.4024 (21805) used obsolete PPPIOCDETACH ioctl
[  873.496545][T17476] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  873.504329][T13721] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  873.661995][T17476] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  873.858724][T17476] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  873.923828][T21816] syzkaller1: entered promiscuous mode
[  873.954183][T21816] syzkaller1: entered allmulticast mode
[  874.320982][T21833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4032'.
[  874.418708][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4031'.
[  874.557999][T21840] xfrm0 speed is unknown, defaulting to 1000
[  874.958470][T21852] xfrm0 speed is unknown, defaulting to 1000
[  874.969968][T21840] lo speed is unknown, defaulting to 1000
[  874.999756][T21840] wg1 speed is unknown, defaulting to 1000
[  875.237528][T21872] netlink: 'syz.3.4041': attribute type 1 has an invalid length.
[  875.260546][T21872] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  875.414863][T21852] lo speed is unknown, defaulting to 1000
[  875.439089][T21852] wg1 speed is unknown, defaulting to 1000
[  875.898786][T21900] bond4: option packets_per_slave: invalid value (1048582)
[  875.907818][T21900] bond4: option packets_per_slave: allowed values 0 - 65535
[  875.939029][T21900] bond4 (unregistering): Released all slaves
[  875.997812][T21909] IPVS: length: 125 != 24
[  876.226798][T21923] netlink: 'syz.3.4052': attribute type 2 has an invalid length.
[  876.234975][T21923] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4052'.
[  876.459991][T21931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'.
[  876.744208][T21943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4058'.
[  876.772665][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 630 seconds
[  876.789419][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 630 seconds
[  876.800986][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 630 seconds
[  876.812178][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 630 seconds
[  876.842875][T21943] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4058'.
[  877.169530][T21962] netlink: 'syz.0.4064': attribute type 1 has an invalid length.
[  877.230031][T21962] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  877.419342][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4067'.
[  877.446040][T21977] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4069'.
[  877.459645][T21974] netlink: 'syz.4.4068': attribute type 3 has an invalid length.
[  877.486334][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  878.365532][T22011] xfrm0 speed is unknown, defaulting to 1000
[  878.715733][T22025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  878.741559][T22030] tipc: New replicast peer: 255.255.255.255
[  878.749456][T22030] tipc: Enabled bearer <udp:syz2>, priority 10
[  878.757318][T22030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4081'.
[  878.758753][T22011] lo speed is unknown, defaulting to 1000
[  878.769972][T22025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  878.790909][T22031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4080'.
[  878.791168][T22025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  878.832500][T22030] syzkaller1: entered promiscuous mode
[  878.838417][T22030] syzkaller1: entered allmulticast mode
[  878.845764][T22011] wg1 speed is unknown, defaulting to 1000
[  878.877186][T22030] 8021q: adding VLAN 0 to HW filter on device bond4
[  879.009033][T22037] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4084'.
[  879.415293][T22060] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4092'.
[  879.435498][T22060] nbd: couldn't find a device at index 0
[  879.442764][T22060] x_tables: duplicate underflow at hook 1
[  879.583712][T22066] xfrm0 speed is unknown, defaulting to 1000
[  879.621629][T22067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4093'.
[  879.880013][ T5904] tipc: Node number set to 3363457419
[  880.170983][T22069] xfrm0 speed is unknown, defaulting to 1000
[  880.180046][T22066] lo speed is unknown, defaulting to 1000
[  880.187850][T22066] wg1 speed is unknown, defaulting to 1000
[  880.517903][T22074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4096'.
[  880.710740][T22078] netlink: 'syz.4.4097': attribute type 1 has an invalid length.
[  880.811935][T22078] 8021q: adding VLAN 0 to HW filter on device bond4
[  880.837570][T22069] lo speed is unknown, defaulting to 1000
[  880.845238][T22069] wg1 speed is unknown, defaulting to 1000
[  881.053508][T22092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.071529][T22093] netlink: 'syz.4.4101': attribute type 11 has an invalid length.
[  881.121963][T17476] IPVS: starting estimator thread 0...
[  881.217690][T22097] IPVS: using max 29 ests per chain, 69600 per kthread
[  881.543202][T22114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4106'.
[  881.969564][T22135] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  882.079788][T22135] syzkaller0: entered promiscuous mode
[  882.085391][T22135] syzkaller0: entered allmulticast mode
[  882.093219][T22135] tipc: Resetting bearer <eth:syzkaller0>
[  882.158647][T22134] tipc: Resetting bearer <eth:syzkaller0>
[  883.776123][T22134] tipc: Disabling bearer <eth:syzkaller0>
[  883.786726][T22151] 8021q: VLANs not supported on caif0
[  883.811568][ T5904] tipc: Node number set to 3406282625
[  883.890539][T22156] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4115'.
[  884.411605][T22191] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4123'.
[  884.444596][T22187] netlink: 'syz.3.4123': attribute type 33 has an invalid length.
[  884.470460][T22187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4123'.
[  884.488812][T22187] `: renamed from team0
[  884.519015][T22199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4127'.
[  884.744348][T22215] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  884.910724][T22229] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  884.932476][T22229] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  884.942932][T22229] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  885.395147][T22252] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003
[  885.485705][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4143'.
[  885.726887][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.728424][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  886.061944][T22281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4148'.
[  886.090317][T22281] netlink: 'syz.4.4148': attribute type 3 has an invalid length.
[  886.192329][T22276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4145'.
[  886.202351][T22276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4145'.
[  886.315280][T22290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4151'.
[  886.449412][T22294] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  886.571539][T22304] ¾x9ÿ: renamed from bridge_slave_0
[  886.692406][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4157'.
[  886.848978][T22317] batman_adv: batadv0: Removing interface: batadv_slave_1
[  887.072291][T22332] x_tables: duplicate underflow at hook 2
[  887.348989][T22334] xfrm0 speed is unknown, defaulting to 1000
[  887.961655][T22355] netem: change failed
[  888.135217][T22334] lo speed is unknown, defaulting to 1000
[  888.141956][T22347] xfrm0 speed is unknown, defaulting to 1000
[  888.162804][T22367] netlink: 'syz.2.4174': attribute type 1 has an invalid length.
[  888.170152][T22334] wg1 speed is unknown, defaulting to 1000
[  888.375827][T22367] 8021q: adding VLAN 0 to HW filter on device bond6
[  888.622970][T22347] lo speed is unknown, defaulting to 1000
[  888.630990][T22347] wg1 speed is unknown, defaulting to 1000
[  888.857418][T22396] syzkaller0: entered promiscuous mode
[  888.863036][T22396] syzkaller0: entered allmulticast mode
[  889.475869][T22419] x_tables: duplicate underflow at hook 3
[  889.566672][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  889.792248][T22427] __nla_validate_parse: 9 callbacks suppressed
[  889.792268][T22427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4190'.
[  889.882071][T22434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  889.935077][T22434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4191'.
[  890.417506][T22449] xfrm0 speed is unknown, defaulting to 1000
[  890.681350][T22454] xfrm0 speed is unknown, defaulting to 1000
[  890.682928][T22449] lo speed is unknown, defaulting to 1000
[  890.706319][T22449] wg1 speed is unknown, defaulting to 1000
[  890.757837][T22466] netlink: 'syz.0.4198': attribute type 29 has an invalid length.
[  890.772790][T22466] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4198'.
[  891.235165][T22472] geneve3: entered promiscuous mode
[  891.277348][T22472] geneve3: entered allmulticast mode
[  891.514155][T22454] lo speed is unknown, defaulting to 1000
[  891.533921][T22454] wg1 speed is unknown, defaulting to 1000
[  892.119728][T22515] netlink: 'syz.0.4208': attribute type 3 has an invalid length.
[  892.201035][T22514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4209'.
[  902.366477][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  906.847808][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 660 seconds
[  906.859051][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 660 seconds
[  906.870576][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 660 seconds
[  906.882302][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 660 seconds
[  925.406660][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  936.287076][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  936.937186][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 690 seconds
[  936.948405][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 690 seconds
[  936.959912][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 690 seconds
[  936.971378][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 690 seconds
[  967.016882][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 720 seconds
[  967.028108][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 720 seconds
[  967.039503][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 720 seconds
[  967.050561][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 720 seconds
[  997.087100][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 750 seconds
[  997.098452][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 750 seconds
[  997.110043][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 750 seconds
[  997.121559][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 750 seconds
[ 1003.486351][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1003.494073][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1027.167430][   T11] block nbd2: Possible stuck request ffff888024da5080: control (read@0,1024B). Runtime 780 seconds
[ 1027.178734][   T11] block nbd2: Possible stuck request ffff888024da5240: control (read@1024,1024B). Runtime 780 seconds
[ 1027.190322][   T11] block nbd2: Possible stuck request ffff888024da5400: control (read@2048,1024B). Runtime 780 seconds
[ 1027.201773][   T11] block nbd2: Possible stuck request ffff888024da55c0: control (read@3072,1024B). Runtime 780 seconds
[ 1039.328812][   T31] INFO: task kworker/1:3:17474 blocked for more than 143 seconds.
[ 1039.336955][   T31]       Not tainted syzkaller #0
[ 1039.341898][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1039.351199][   T31] task:kworker/1:3     state:D stack:23736 pid:17474 tgid:17474 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1039.363359][   T31] Workqueue: events rfkill_sync_work
[ 1039.368719][   T31] Call Trace:
[ 1039.372019][   T31]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1039.374956][   T31]  __schedule+0x14bc/0x5000
[ 1039.379972][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1039.385765][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1039.392479][   T31]  ? preempt_schedule+0xae/0xc0
[ 1039.397779][   T31]  ? preempt_schedule+0xae/0xc0
[ 1039.402675][   T31]  ? __pfx___schedule+0x10/0x10
[ 1039.408260][   T31]  ? schedule+0x91/0x360
[ 1039.412545][   T31]  schedule+0x165/0x360
[ 1039.416828][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1039.422325][   T31]  __mutex_lock+0x7e6/0x1350
[ 1039.427161][   T31]  ? look_up_lock_class+0x74/0x150
[ 1039.432403][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1039.438025][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[ 1039.443359][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1039.448837][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[ 1039.454078][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1039.460192][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1039.467264][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[ 1039.473028][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[ 1039.478284][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[ 1039.484042][   T31]  rfkill_set_block+0x1d2/0x440
[ 1039.488982][   T31]  rfkill_sync_work+0x114/0x200
[ 1039.493868][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 1039.500535][   T31]  process_scheduled_works+0xad1/0x1770
[ 1039.506472][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1039.512517][   T31]  worker_thread+0x8a0/0xda0
[ 1039.517282][   T31]  ? __kthread_parkme+0x7b/0x200
[ 1039.522258][   T31]  kthread+0x711/0x8a0
[ 1039.527020][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1039.532158][   T31]  ? __pfx_kthread+0x10/0x10
[ 1039.536866][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1039.542091][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[ 1039.556816][   T31]  ? __pfx_kthread+0x10/0x10
[ 1039.561475][   T31]  ret_from_fork+0x599/0xb30
[ 1039.586815][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1039.592015][   T31]  ? __switch_to_asm+0x39/0x70
[ 1039.606421][   T31]  ? __switch_to_asm+0x33/0x70
[ 1039.617193][   T31]  ? __pfx_kthread+0x10/0x10
[ 1039.621844][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1039.628208][   T31]  </TASK>
[ 1039.631326][   T31] INFO: task kworker/1:9:17476 blocked for more than 143 seconds.
[ 1039.639469][   T31]       Not tainted syzkaller #0
[ 1039.644428][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1039.656182][   T31] task:kworker/1:9     state:D stack:24664 pid:17476 tgid:17476 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1039.668278][   T31] Workqueue: events rfkill_global_led_trigger_worker
[ 1039.674967][   T31] Call Trace:
[ 1039.678847][   T31]  <TASK>
[ 1039.681798][   T31]  __schedule+0x14bc/0x5000
[ 1039.686485][   T31]  ? __pfx___schedule+0x10/0x10
[ 1039.691403][   T31]  ? schedule+0x91/0x360
[ 1039.695662][   T31]  schedule+0x165/0x360
[ 1039.699874][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1039.705347][   T31]  __mutex_lock+0x7e6/0x1350
[ 1039.710440][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1039.715247][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[ 1039.721972][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1039.727087][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 1039.732821][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 1039.739278][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[ 1039.745381][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 1039.751205][   T31]  process_scheduled_works+0xad1/0x1770
[ 1039.756947][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1039.762973][   T31]  worker_thread+0x8a0/0xda0
[ 1039.768112][   T31]  ? __kthread_parkme+0x7b/0x200
[ 1039.773060][   T31]  kthread+0x711/0x8a0
[ 1039.777190][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1039.782305][   T31]  ? __pfx_kthread+0x10/0x10
[ 1039.786965][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1039.792181][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[ 1039.797935][   T31]  ? __pfx_kthread+0x10/0x10
[ 1039.802538][   T31]  ret_from_fork+0x599/0xb30
[ 1039.807213][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1039.812346][   T31]  ? __switch_to_asm+0x39/0x70
[ 1039.817150][   T31]  ? __switch_to_asm+0x33/0x70
[ 1039.821919][   T31]  ? __pfx_kthread+0x10/0x10
[ 1039.827150][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1039.831939][   T31]  </TASK>
[ 1039.835004][   T31] INFO: task syz.4.4189:22425 blocked for more than 143 seconds.
[ 1039.842856][   T31]       Not tainted syzkaller #0
[ 1039.847877][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1039.857108][   T31] task:syz.4.4189      state:D stack:24888 pid:22425 tgid:22425 ppid:17606  task_flags:0x400040 flags:0x00080002
[ 1039.869079][   T31] Call Trace:
[ 1039.872354][   T31]  <TASK>
[ 1039.875287][   T31]  __schedule+0x14bc/0x5000
[ 1039.879862][   T31]  ? stack_trace_save+0x9c/0xe0
[ 1039.884737][   T31]  ? __pfx___schedule+0x10/0x10
[ 1039.890687][   T31]  ? schedule+0x91/0x360
[ 1039.894958][   T31]  schedule+0x165/0x360
[ 1039.899224][   T31]  schedule_timeout+0x9a/0x270
[ 1039.904028][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1039.909472][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1039.914673][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[ 1039.920312][   T31]  ? wait_for_completion+0x267/0x5d0
[ 1039.925606][   T31]  wait_for_completion+0x2bf/0x5d0
[ 1039.930783][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1039.936476][   T31]  ? __flush_work+0xd2/0xbc0
[ 1039.941088][   T31]  ? __flush_work+0xd2/0xbc0
[ 1039.945678][   T31]  __flush_work+0x9b9/0xbc0
[ 1039.950628][   T31]  ? __flush_work+0xd2/0xbc0
[ 1039.955242][   T31]  ? __pfx___flush_work+0x10/0x10
[ 1039.960376][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[ 1039.965706][   T31]  ? __pfx___cancel_work+0x10/0x10
[ 1039.970983][   T31]  ? nfc_genl_device_removed+0x23c/0x330
[ 1039.977334][   T31]  ? __cancel_work_sync+0x5c/0x110
[ 1039.982480][   T31]  __cancel_work_sync+0xbe/0x110
[ 1039.987484][   T31]  rfkill_unregister+0x92/0x220
[ 1039.992344][   T31]  nfc_unregister_device+0x96/0x2a0
[ 1039.997601][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[ 1040.003324][   T31]  virtual_ncidev_close+0x56/0x90
[ 1040.008867][   T31]  __fput+0x44c/0xa70
[ 1040.012864][   T31]  task_work_run+0x1d4/0x260
[ 1040.017504][   T31]  ? __pfx_task_work_run+0x10/0x10
[ 1040.022618][   T31]  ? __se_sys_close_range+0x4ed/0x650
[ 1040.028057][   T31]  ? exit_to_user_mode_loop+0x55/0x4f0
[ 1040.033540][   T31]  exit_to_user_mode_loop+0xff/0x4f0
[ 1040.039273][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1040.044046][   T31]  do_syscall_64+0x2e3/0xf80
[ 1040.048841][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.054934][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1040.059715][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.065628][   T31] RIP: 0033:0x7f2f8638f749
[ 1040.070539][   T31] RSP: 002b:00007ffdafbc0988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1040.079014][   T31] RAX: 0000000000000000 RBX: 00000000000d9363 RCX: 00007f2f8638f749
[ 1040.087041][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1040.095024][   T31] RBP: 00007f2f865e7da0 R08: 0000000000000001 R09: 00000005afbc0c7f
[ 1040.103477][   T31] R10: 0000001b2f620000 R11: 0000000000000246 R12: 00007f2f865e5fac
[ 1040.111542][   T31] R13: 00007f2f865e5fa0 R14: ffffffffffffffff R15: 00007ffdafbc0aa0
[ 1040.119569][   T31]  </TASK>
[ 1040.122604][   T31] INFO: task syz.1.4197:22458 blocked for more than 144 seconds.
[ 1040.131280][   T31]       Not tainted syzkaller #0
[ 1040.136338][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1040.145025][   T31] task:syz.1.4197      state:D stack:25064 pid:22458 tgid:22457 ppid:18226  task_flags:0x400140 flags:0x00080002
[ 1040.157468][   T31] Call Trace:
[ 1040.160754][   T31]  <TASK>
[ 1040.163703][   T31]  __schedule+0x14bc/0x5000
[ 1040.168297][   T31]  ? __pfx___schedule+0x10/0x10
[ 1040.173163][   T31]  ? schedule+0x91/0x360
[ 1040.177554][   T31]  schedule+0x165/0x360
[ 1040.181746][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1040.187707][   T31]  __mutex_lock+0x7e6/0x1350
[ 1040.192307][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1040.197141][   T31]  ? rfkill_register+0x37/0x8e0
[ 1040.201998][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1040.207156][   T31]  ? __init_waitqueue_head+0xa9/0x150
[ 1040.212588][   T31]  ? device_initialize+0x24b/0x440
[ 1040.218564][   T31]  rfkill_register+0x37/0x8e0
[ 1040.223307][   T31]  nfc_register_device+0x14a/0x320
[ 1040.228493][   T31]  nci_register_device+0x87f/0x9d0
[ 1040.233617][   T31]  ? __pfx_nci_register_device+0x10/0x10
[ 1040.239307][   T31]  ? __raw_spin_lock_init+0x45/0x100
[ 1040.244602][   T31]  ? __init_waitqueue_head+0xa9/0x150
[ 1040.250449][   T31]  virtual_ncidev_open+0x129/0x1a0
[ 1040.255565][   T31]  ? __pfx_virtual_ncidev_open+0x10/0x10
[ 1040.261260][   T31]  misc_open+0x2d5/0x350
[ 1040.265509][   T31]  chrdev_open+0x4cc/0x5e0
[ 1040.270007][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1040.274949][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1040.281762][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1040.287067][   T31]  do_dentry_open+0x7ce/0x1420
[ 1040.291894][   T31]  vfs_open+0x3b/0x340
[ 1040.295963][   T31]  ? path_openat+0x33f3/0x3dd0
[ 1040.300777][   T31]  path_openat+0x340e/0x3dd0
[ 1040.305401][   T31]  ? do_sys_openat2+0xbc/0x200
[ 1040.310615][   T31]  ? __x64_sys_openat+0x138/0x170
[ 1040.315640][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1040.320682][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[ 1040.325656][   T31]  do_filp_open+0x1fa/0x410
[ 1040.330233][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1040.335294][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1040.340708][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1040.345067][   T31]  do_sys_openat2+0x121/0x200
[ 1040.349809][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1040.355026][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1040.359879][   T31]  __x64_sys_openat+0x138/0x170
[ 1040.364759][   T31]  do_syscall_64+0xfa/0xf80
[ 1040.369840][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.375915][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1040.380681][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.386651][   T31] RIP: 0033:0x7f2e9fb8f749
[ 1040.391083][   T31] RSP: 002b:00007f2ea0aaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1040.399953][   T31] RAX: ffffffffffffffda RBX: 00007f2e9fde5fa0 RCX: 00007f2e9fb8f749
[ 1040.407964][   T31] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 1040.415937][   T31] RBP: 00007f2e9fc13f91 R08: 0000000000000000 R09: 0000000000000000
[ 1040.423945][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1040.432384][   T31] R13: 00007f2e9fde6038 R14: 00007f2e9fde5fa0 R15: 00007ffee8ef3cf8
[ 1040.440446][   T31]  </TASK>
[ 1040.443499][   T31] INFO: task syz.2.4203:22492 blocked for more than 144 seconds.
[ 1040.451351][   T31]       Not tainted syzkaller #0
[ 1040.457015][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1040.465706][   T31] task:syz.2.4203      state:D stack:28152 pid:22492 tgid:22489 ppid:16801  task_flags:0x400040 flags:0x00080002
[ 1040.477745][   T31] Call Trace:
[ 1040.481033][   T31]  <TASK>
[ 1040.483974][   T31]  __schedule+0x14bc/0x5000
[ 1040.489028][   T31]  ? __pfx___schedule+0x10/0x10
[ 1040.493919][   T31]  ? schedule+0x91/0x360
[ 1040.498262][   T31]  schedule+0x165/0x360
[ 1040.502443][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1040.508036][   T31]  __mutex_lock+0x7e6/0x1350
[ 1040.512641][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[ 1040.518064][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1040.522871][   T31]  ? misc_open+0x51/0x350
[ 1040.527267][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1040.532315][   T31]  misc_open+0x51/0x350
[ 1040.536553][   T31]  chrdev_open+0x4cc/0x5e0
[ 1040.541014][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1040.545991][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1040.552818][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1040.557841][   T31]  do_dentry_open+0x7ce/0x1420
[ 1040.562616][   T31]  vfs_open+0x3b/0x340
[ 1040.566734][   T31]  ? path_openat+0x33f3/0x3dd0
[ 1040.571518][   T31]  path_openat+0x340e/0x3dd0
[ 1040.576621][   T31]  ? do_sys_openat2+0xbc/0x200
[ 1040.581390][   T31]  ? __x64_sys_openat+0x138/0x170
[ 1040.586475][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1040.591443][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[ 1040.596443][   T31]  do_filp_open+0x1fa/0x410
[ 1040.600955][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1040.605995][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1040.611629][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1040.615998][   T31]  do_sys_openat2+0x121/0x200
[ 1040.620791][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1040.626166][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1040.630986][   T31]  __x64_sys_openat+0x138/0x170
[ 1040.635859][   T31]  do_syscall_64+0xfa/0xf80
[ 1040.640868][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.646999][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1040.651687][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.657934][   T31] RIP: 0033:0x7fc1b278f749
[ 1040.662356][   T31] RSP: 002b:00007fc1b3640038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1040.671244][   T31] RAX: ffffffffffffffda RBX: 00007fc1b29e6090 RCX: 00007fc1b278f749
[ 1040.679459][   T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c
[ 1040.687892][   T31] RBP: 00007fc1b2813f91 R08: 0000000000000000 R09: 0000000000000000
[ 1040.695869][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1040.704375][   T31] R13: 00007fc1b29e6128 R14: 00007fc1b29e6090 R15: 00007ffe49bc6248
[ 1040.712403][   T31]  </TASK>
[ 1040.715454][   T31] INFO: task syz.0.4210:22517 blocked for more than 144 seconds.
[ 1040.723304][   T31]       Not tainted syzkaller #0
[ 1040.728736][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1040.737476][   T31] task:syz.0.4210      state:D stack:25816 pid:22517 tgid:22516 ppid:18603  task_flags:0x400140 flags:0x00080002
[ 1040.749459][   T31] Call Trace:
[ 1040.752755][   T31]  <TASK>
[ 1040.755698][   T31]  __schedule+0x14bc/0x5000
[ 1040.760735][   T31]  ? __pfx___schedule+0x10/0x10
[ 1040.765611][   T31]  ? schedule+0x91/0x360
[ 1040.769935][   T31]  schedule+0x165/0x360
[ 1040.774135][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1040.779685][   T31]  __mutex_lock+0x7e6/0x1350
[ 1040.784285][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[ 1040.789699][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1040.794477][   T31]  ? misc_open+0x51/0x350
[ 1040.798920][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1040.803969][   T31]  misc_open+0x51/0x350
[ 1040.808236][   T31]  chrdev_open+0x4cc/0x5e0
[ 1040.812687][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1040.818105][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1040.824439][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1040.829435][   T31]  do_dentry_open+0x7ce/0x1420
[ 1040.834238][   T31]  vfs_open+0x3b/0x340
[ 1040.838373][   T31]  ? path_openat+0x33f3/0x3dd0
[ 1040.843143][   T31]  path_openat+0x340e/0x3dd0
[ 1040.848259][   T31]  ? do_sys_openat2+0xbc/0x200
[ 1040.853028][   T31]  ? __x64_sys_openat+0x138/0x170
[ 1040.858128][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1040.863076][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[ 1040.868099][   T31]  do_filp_open+0x1fa/0x410
[ 1040.872616][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1040.878213][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1040.883070][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1040.887478][   T31]  do_sys_openat2+0x121/0x200
[ 1040.892172][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1040.897448][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1040.902251][   T31]  __x64_sys_openat+0x138/0x170
[ 1040.907667][   T31]  do_syscall_64+0xfa/0xf80
[ 1040.912190][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.918328][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1040.923016][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.929571][   T31] RIP: 0033:0x7f700318f749
[ 1040.934025][   T31] RSP: 002b:00007f7003f9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1040.942941][   T31] RAX: ffffffffffffffda RBX: 00007f70033e5fa0 RCX: 00007f700318f749
[ 1040.950988][   T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c
[ 1040.959039][   T31] RBP: 00007f7003213f91 R08: 0000000000000000 R09: 0000000000000000
[ 1040.967691][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1040.975689][   T31] R13: 00007f70033e6038 R14: 00007f70033e5fa0 R15: 00007ffd4f16aa18
[ 1040.983759][   T31]  </TASK>
[ 1040.986861][   T31] INFO: task syz.3.4211:22521 blocked for more than 145 seconds.
[ 1040.994604][   T31]       Not tainted syzkaller #0
[ 1041.000036][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1041.008821][   T31] task:syz.3.4211      state:D stack:27608 pid:22521 tgid:22520 ppid:17976  task_flags:0x400040 flags:0x00080002
[ 1041.020828][   T31] Call Trace:
[ 1041.024144][   T31]  <TASK>
[ 1041.027586][   T31]  __schedule+0x14bc/0x5000
[ 1041.032128][   T31]  ? __pfx___schedule+0x10/0x10
[ 1041.037076][   T31]  ? schedule+0x91/0x360
[ 1041.041352][   T31]  schedule+0x165/0x360
[ 1041.045516][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1041.051134][   T31]  __mutex_lock+0x7e6/0x1350
[ 1041.055761][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[ 1041.061179][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1041.065960][   T31]  ? misc_open+0x51/0x350
[ 1041.070354][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1041.075430][   T31]  misc_open+0x51/0x350
[ 1041.079775][   T31]  chrdev_open+0x4cc/0x5e0
[ 1041.084222][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1041.089769][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1041.096174][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1041.101145][   T31]  do_dentry_open+0x7ce/0x1420
[ 1041.105952][   T31]  vfs_open+0x3b/0x340
[ 1041.110086][   T31]  ? path_openat+0x33f3/0x3dd0
[ 1041.114880][   T31]  path_openat+0x340e/0x3dd0
[ 1041.119970][   T31]  ? do_sys_openat2+0xbc/0x200
[ 1041.124766][   T31]  ? __x64_sys_openat+0x138/0x170
[ 1041.129856][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1041.134805][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[ 1041.139809][   T31]  do_filp_open+0x1fa/0x410
[ 1041.144323][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1041.149981][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1041.154874][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1041.159307][   T31]  do_sys_openat2+0x121/0x200
[ 1041.164001][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1041.169266][   T31]  ? exc_page_fault+0x82/0x100
[ 1041.174060][   T31]  __x64_sys_openat+0x138/0x170
[ 1041.179662][   T31]  do_syscall_64+0xfa/0xf80
[ 1041.184212][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1041.190345][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1041.195038][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1041.200995][   T31] RIP: 0033:0x7f266c18f749
[ 1041.205415][   T31] RSP: 002b:00007f266d0d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1041.214342][   T31] RAX: ffffffffffffffda RBX: 00007f266c3e5fa0 RCX: 00007f266c18f749
[ 1041.222441][   T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c
[ 1041.230479][   T31] RBP: 00007f266c213f91 R08: 0000000000000000 R09: 0000000000000000
[ 1041.238924][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1041.247131][   T31] R13: 00007f266c3e6038 R14: 00007f266c3e5fa0 R15: 00007fff72f8e3f8
[ 1041.255198][   T31]  </TASK>
[ 1041.258319][   T31] 
[ 1041.258319][   T31] Showing all locks held in the system:
[ 1041.266044][   T31] 1 lock held by khungtaskd/31:
[ 1041.271636][   T31]  #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1041.281577][   T31] 2 locks held by kworker/u8:5/68:
[ 1041.286771][   T31]  #0: ffff88801a069148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1041.299303][   T31]  #1: ffffc9000212fb80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1041.312181][   T31] 2 locks held by getty/5589:
[ 1041.316979][   T31]  #0: ffff888033add0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1041.327657][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1041.337896][   T31] 1 lock held by udevd/5838:
[ 1041.342496][   T31]  #0: ffff888024cb5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 1041.351844][   T31] 4 locks held by kworker/1:3/17474:
[ 1041.357612][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1041.368746][   T31]  #1: ffffc900030f7b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1041.381200][   T31]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[ 1041.391710][   T31]  #3: ffff8880925de100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[ 1041.401450][   T31] 3 locks held by kworker/1:9/17476:
[ 1041.406805][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1041.418315][   T31]  #1: ffffc90012fdfb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1041.431919][   T31]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[ 1041.443390][   T31] 1 lock held by syz.4.4189/22425:
[ 1041.448971][   T31]  #0: ffff8880925de100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[ 1041.458855][   T31] 3 locks held by syz.1.4197/22458:
[ 1041.464054][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.472594][   T31]  #1: ffff88807d696100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[ 1041.482664][   T31]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[ 1041.492831][   T31] 1 lock held by syz.2.4203/22492:
[ 1041.497981][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.507064][   T31] 1 lock held by syz.0.4210/22517:
[ 1041.512268][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.520891][   T31] 1 lock held by syz.3.4211/22521:
[ 1041.525994][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.534504][   T31] 1 lock held by syz-executor/22529:
[ 1041.540247][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.548751][   T31] 1 lock held by syz-executor/22531:
[ 1041.554034][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.562581][   T31] 1 lock held by syz-executor/22533:
[ 1041.568624][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.577234][   T31] 1 lock held by syz-executor/22536:
[ 1041.582536][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.591066][   T31] 1 lock held by syz-executor/22537:
[ 1041.597022][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.605536][   T31] 1 lock held by syz-executor/22539:
[ 1041.610862][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.619374][   T31] 1 lock held by syz-executor/22541:
[ 1041.624655][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.633612][   T31] 1 lock held by syz-executor/22543:
[ 1041.638953][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.647820][   T31] 1 lock held by syz-executor/22546:
[ 1041.653116][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.662020][   T31] 1 lock held by syz-executor/22547:
[ 1041.667439][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.675906][   T31] 1 lock held by syz-executor/22549:
[ 1041.681305][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.692719][   T31] 1 lock held by syz-executor/22551:
[ 1041.698060][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.706586][   T31] 1 lock held by syz-executor/22553:
[ 1041.711898][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.720874][   T31] 1 lock held by syz-executor/22556:
[ 1041.726647][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.735166][   T31] 1 lock held by syz-executor/22557:
[ 1041.740567][   T31]  #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 1041.749613][   T31] 
[ 1041.751959][   T31] =============================================
[ 1041.751959][   T31] 
[ 1041.760496][   T31] NMI backtrace for cpu 1
[ 1041.760511][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1041.760527][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1041.760536][   T31] Call Trace:
[ 1041.760542][   T31]  <TASK>
[ 1041.760549][   T31]  dump_stack_lvl+0x189/0x250
[ 1041.760572][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1041.760588][   T31]  ? __pfx__printk+0x10/0x10
[ 1041.760618][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1041.760636][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1041.760654][   T31]  ? __pfx__printk+0x10/0x10
[ 1041.760677][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1041.760700][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1041.760718][   T31]  watchdog+0xf3c/0xf80
[ 1041.760740][   T31]  ? watchdog+0x1e2/0xf80
[ 1041.760763][   T31]  kthread+0x711/0x8a0
[ 1041.760784][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1041.760801][   T31]  ? __pfx_kthread+0x10/0x10
[ 1041.760821][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1041.760837][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[ 1041.760855][   T31]  ? __pfx_kthread+0x10/0x10
[ 1041.760873][   T31]  ret_from_fork+0x599/0xb30
[ 1041.760897][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1041.760927][   T31]  ? __switch_to_asm+0x39/0x70
[ 1041.760943][   T31]  ? __switch_to_asm+0x33/0x70
[ 1041.760960][   T31]  ? __pfx_kthread+0x10/0x10
[ 1041.760978][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1041.761008][   T31]  </TASK>
[ 1041.761014][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1041.908832][    C0] NMI backtrace for cpu 0
[ 1041.908849][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1041.908868][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1041.908879][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1041.908905][    C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1041.908921][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[ 1041.908936][    C0] RAX: 78a8f82d4ce2a000 RBX: ffffffff8197438a RCX: 78a8f82d4ce2a000
[ 1041.908949][    C0] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660
[ 1041.908960][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3
[ 1041.908973][    C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70
[ 1041.908986][    C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000
[ 1041.908997][    C0] FS:  0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000
[ 1041.909011][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1041.909022][    C0] CR2: 000055730d78e000 CR3: 000000000dd3a000 CR4: 00000000003526f0
[ 1041.909037][    C0] Call Trace:
[ 1041.909044][    C0]  <TASK>
[ 1041.909050][    C0]  default_idle+0x13/0x20
[ 1041.909075][    C0]  default_idle_call+0x73/0xb0
[ 1041.909099][    C0]  do_idle+0x1ea/0x520
[ 1041.909115][    C0]  ? irqentry_exit+0x5ba/0x660
[ 1041.909139][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1041.909164][    C0]  cpu_startup_entry+0x44/0x60
[ 1041.909181][    C0]  rest_init+0x2de/0x300
[ 1041.909197][    C0]  start_kernel+0x3ae/0x410
[ 1041.909214][    C0]  x86_64_start_reservations+0x24/0x30
[ 1041.909253][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1041.909275][    C0]  common_startup_64+0x13e/0x147
[ 1041.909318][    C0]  </TASK>