last executing test programs:

20.229311189s ago: executing program 2 (id=4528):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x400, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x3, 0x9, 0x4, 0x4, 0x8}, @call={0x85, 0x0, 0x0, 0x8b92}, @generic={0x0, 0x2, 0x5, 0x5, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001840)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaa0000000008004500fde10300060000009078000000000000000000004e22004d907804000000eafcd3813600"/56], 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0)

20.216805537s ago: executing program 3 (id=4529):
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async, rerun: 64)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

20.135883701s ago: executing program 2 (id=4533):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async)
r2 = accept$netrom(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @bcast}, [@null, @remote, @remote, @bcast, @netrom, @default, @rose, @netrom]}, &(0x7f0000000540)=0x48)
accept$netrom(r2, &(0x7f0000000580)={{0x3, @default}, [@default, @rose, @remote, @null, @rose, @netrom, @null]}, &(0x7f0000000600)=0x48)
r3 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={<r4=>r1, 0xf, 0xf, 0x3})
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x24, &(0x7f0000000000), 0x4)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000480)=0x4)
getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000280)=""/244, &(0x7f0000000000)=0xf4) (async)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x24000884}, 0x48041)
r6 = accept$alg(r3, 0x0, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80082, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000003c0)={'team0\x00', <r9=>0x0})
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000400)=r9) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711096b8000000009500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="200000000c14010028bd7000fddbdf25080001000000000008003d"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x400c000)

20.039994223s ago: executing program 2 (id=4535):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c60000009f560725f5918d78a03e2a22e104ef00146c88a7feb3aa814129a83d4fc0e5cc4df8639c494224e53c424d1e90c22021e2a3df4fbd0061268d64918a66f10825f56de2f743fc65bb8f3bf060395baf64a5db5271aa9c8b8178186845b5619ec2c9cade9b69fe6dc0b19af0809b376e0466680822af9135aa45d00961558c6b50286bb4fbf227f8b8e74331320acc310bcfc38a0f1efb23950823b92d953425e3eb62e150", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250c0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800)

19.871521114s ago: executing program 2 (id=4541):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000f80)={'sit0\x00', <r2=>0x0, 0x80, 0x40, 0x3ff, 0x5, {{0x32, 0x4, 0x2, 0x32, 0xc8, 0x64, 0x0, 0xc5, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@lsrr={0x83, 0x1b, 0x35, [@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @broadcast]}, @ssrr={0x89, 0x17, 0xa3, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010100, @loopback]}, @lsrr={0x83, 0xb, 0x65, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ssrr={0x89, 0x1b, 0x69, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}]}, @timestamp_addr={0x44, 0x34, 0x85, 0x1, 0x2, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x334d}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010100, 0x8}, {@local, 0x7}]}, @timestamp={0x44, 0x14, 0x5a, 0x0, 0x5, [0x0, 0x1, 0xffffff01, 0x0]}, @end, @generic={0x7, 0xd, "450d863c3d7b187e317f5f"}, @ssrr={0x89, 0x3, 0xc4}, @end]}}}}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000000180), 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1c000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x31}}], 0xd0}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

19.868567969s ago: executing program 3 (id=4542):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c)
getpeername$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) (async)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

19.830494779s ago: executing program 2 (id=4543):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
r2 = socket$inet(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r6=>0x0, 0x2f, 0x3, 0x9, 0x80, 0x44, @dev={0xfe, 0x80, '\x00', 0x20}, @private2, 0x8010, 0x7800, 0x3, 0x7}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r7], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
r11 = socket(0x10, 0x3, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc8, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xf5afe679f15a1399}, 0x40800)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24720000020605000000000000400000000000000900020073797a3200000000040006"], 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x80)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

19.582479569s ago: executing program 2 (id=4552):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getstats={0x1c, 0x5e, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3}, ["", "", ""]}, 0x1c}}, 0x400c804) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41)

19.300219464s ago: executing program 1 (id=4558):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x8, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000305000000000000000000000000eb6bf02ae69013a5e11dc465085c21bde343af05f03376ba899b931a60fb1eb1fce17ab41193c475ec4e06dc49c912639733defa82bc851e6207b6096ff14967c8db5799ba4a3df095298655953e5a121b090b4941c6f3ab17ee5164529c19c3e9", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e0014000280100005800a0004000000000000000000"], 0x44}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})

19.195418018s ago: executing program 1 (id=4561):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100))
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
ioctl(r3, 0x42, &(0x7f0000000280)="8c075198c97b06505b11d7799e17b8cfc6eb7d6e97e629f12e164ca9a5e5bf709ba7683b0ef24bbb620b9b7cc90231d07b6d")
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x6}, {0x0}, &(0x7f0000004080)=[{&(0x7f0000004040)=""/44, 0x2c}], 0x1, 0x1e}}], 0x48}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5}}}}]}, 0x38}}, 0x0)

19.13350565s ago: executing program 1 (id=4563):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64)
r2 = socket$unix(0x1, 0x2, 0x0) (rerun: 64)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) (async, rerun: 32)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$nl_netfilter(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x4, 0x7, 0x3, 0x4177, 0x25dfdbfe, {0x2, 0x0, 0x5}}, 0x14}}, 0x8000)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r9 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) (async, rerun: 32)
sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x1f00, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x400dc05) (async, rerun: 32)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x24, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x24}}, 0x20048094) (async, rerun: 64)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x80000001}, 0x1c) (rerun: 64)

18.777678787s ago: executing program 3 (id=4568):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2d, 0xb, 0x0, 0xd2f, 0x40, @dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x20, 0x689f7241, 0x31f}})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x4, 0x8, 0x201, 0x0, 0x0, {0x4, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044884}, 0x0)

18.77644531s ago: executing program 1 (id=4569):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468305f746f5f62726964676500140003006772653000000000000000000000000014001680100001800c000700274d97e6"], 0x5c}}, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf250500000008000100", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x80)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r5)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9983804f5ecbd34499c08afdaf5cdb61"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8040) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0xbc, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xffffffe8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x22, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}}, 0x4000000)
sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0x155}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0)

18.772805559s ago: executing program 3 (id=4570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x0, 0xdf54, 0x8, 0x1, 0x89})
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_int(r1, 0x29, 0x6c, &(0x7f0000000100)=0x10001, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014001800000000000000000000000000000000010500160002000000040012000500170000000000"], 0x60}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd3c1f8faa8744b2a3c5c763047ba1585e2a94c0fd780100e7e144d6a8280d5f79b3d7bf5756687aff2574a38904d67872771946ac2d58027ffeb27c010705e1ba81f50aeb128a8ca3cf7cb4abe854ddb03d2f56ae3fc2af209fbe52c06714bbaa532d3a75a2d639081ce165e41d1d6a4f5e1533", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000240)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0xfffffffc, 0x0, 0xc, 0x3, 0x8, 0x0, 0x2]}})
r5 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0xa4, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004010}, 0x800)
setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000540)={0x0, 0x0, 0xa, 0x1, @vifc_lcl_addr=@broadcast, @local}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0091af76d027000000000008000a00a8"], 0x6c}}, 0x10)

18.621400914s ago: executing program 1 (id=4572):
r0 = socket(0xa, 0x3, 0x3a) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) (async)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)={0x28, r5, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1)
setsockopt(r7, 0x84, 0x18, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r5, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x38}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x24004841)
sendto$inet6(r2, 0x0, 0x0, 0x40800, &(0x7f0000000100)={0xa, 0x4e21, 0xbdb, @mcast1, 0x7}, 0x1c)

18.604239696s ago: executing program 1 (id=4573):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x123, 0x40000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='rdma.current\x00', 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x92000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r6, 0x608, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000400))
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)={0x28, r8, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x200cc004)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r13=>0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r2, 0x904, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1af}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xaa}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x2c8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c0c0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r15)
sendmsg$NET_DM_CMD_STOP(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r16, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r16, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x26, 0x1, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

18.56969568s ago: executing program 3 (id=4574):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="40e0000010004b0408000000feffffcc0000000076eef2620fabe5789b0b5b2811965bc027348a0c8f5f9df9af3979884b8bf0dfb3a42202", @ANYRES32=0x0, @ANYBLOB="00000000000000002000656437e7d4c530e3800b00010062726964988c02cdd6d686e75c6cdc9cf267650000100082"], 0x40}}, 0x0)

18.485614545s ago: executing program 3 (id=4576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100001800c000480"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64)
r5 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a0fc000680002c8b00005069078ac1e0101ffffffff4e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814)
r9 = socket(0x11, 0xa, 0x0) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000a0605d4290000001b0000000000000005000100070000000900020073797a3000000000040007"], 0x2c}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d02000000000000000000008b"], 0x0, 0x32, 0x0, 0x0, 0xfffffffe}, 0x11) (async, rerun: 32)
sendto$x25(r9, 0x0, 0x0, 0x85, &(0x7f0000000f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async, rerun: 32)
setsockopt$inet_tcp_int(r9, 0x6, 0x8, &(0x7f0000000080)=0x6, 0x4)

18.211823856s ago: executing program 4 (id=4583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) (async)

18.145602005s ago: executing program 4 (id=4584):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, 0x2, 0x9, 0x5}, 0x14}}, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x4, 0x7, 0x0, 0x80, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x2, 0xbc}, 0x10, 0x74ca, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000010000097c04f4fffcffffff04000000000040000000a548c6b3c579"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x140e, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x80)
r5 = socket$inet(0x2, 0x5, 0x6)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000006c0)={0x5, {{0x2, 0x4e21, @private=0xa010100}}}, 0x88)
syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@loopback, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8)

18.116538815s ago: executing program 4 (id=4586):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="00009e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018006000100", @ANYRES32=r3, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000)

18.043407087s ago: executing program 4 (id=4587):
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x2b, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) (async)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x84, 0x0, &(0x7f0000001080))
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25NOUID(r4, 0x89e3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f0000000440)=""/91, 0x5b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4072, 0xfe8}], 0x2}, 0x8}], 0x3, 0x2, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0)

17.129711477s ago: executing program 4 (id=4592):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000100000000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000002400128009000100626f6e64000000001400028008001c008c0400000500010004000000"], 0x44}}, 0x0)
r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x24, r3, 0x4, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000)
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
sendmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000040)=@file={0x3, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000180)="d8fd34ab570332105cfefaea919d7f84640f0188cf2798d8508c3a6bf4cba6bd40661a1d40855af4a829d5b429220b92304117d9e7824fc8998a3ad0c0101d088e6c0d147af19ebc5eac", 0x4a}, {&(0x7f0000000200)="c2189ab2bfcff02a1ce790075770c52167debc77db2d880bfb539113b6e46f9aec46a28badcabd08ed249781b93f4cdeedd6db0f2ceab653bbb9907aa540ec4a0a54f4d60e34fc73b548ce5042cd2c073e26c0ef3333878d467a31525a82da06ec184bf66b9013d2ca615baeb0f1e1cbc16828f8933a9c546ae83a1011f934ad4d8b594f22efd1359fec9bfea8284c69657db5d60df8177e6ff69ea44ebff87a35cdea53e588d21930f9d306593988645cf1ad3f4f8a5c929f8323897221543ce93a0699bbe2ca5417f29912b8ae707a425b0eadb03039c2f2f12c3b6f2b04592910eb5f", 0xe4}], 0x2, 0x0, 0x0, 0x40000}, 0x24040001)

17.113704194s ago: executing program 4 (id=4595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000100)={0x8, 0x2, 0x2, 0x1, 0x1}, 0x8)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c24b9baa5cbff4b58c87e402f0c4232777c062eebb171b53c0d7981f6bd775d0a06995513ac604dfb5983797dfb11d30a48408fbcc6738671bddc1f0b0a9eccc06488092371c7ab67c7c0ee9792a1f3165214", @ANYRESDEC, @ANYRESDEC=r4, @ANYRES16=r2, @ANYRES16=r1, @ANYRES64=r4], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'ipvlan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0xe50}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002240)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000826bd7045e928865d380e2625917b581035ca084f5372cf5474c1e1d579ac00fcdbdf25010000022401000000080003000000000008", @ANYRES32=r7, @ANYBLOB="580001801400020076657468315f746f5f7465616d0000001400020069705f76746930000000000000000000080003000300000014000200697036746e6c3000000000000000000008000100", @ANYRES32, @ANYBLOB="0800030000000000"], 0x90}, 0x1, 0x0, 0x0, 0x40c1}, 0x40804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r5, 0x0, 0x7f}, 0x18)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008800640000000010900010073797a30"], 0x10c}}, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r8, 0xff, 0x1, 0x0, &(0x7f0000000040))
r9 = socket(0x10, 0x80000, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r11=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f0000002180)=ANY=[@ANYBLOB="1800000000000000000000000000000018763b05eacc03334e2679110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r10}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x4)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ce73cf46b9c8cd3b1a474ba600fcaf00180000"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r13, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r13, &(0x7f0000000240), 0x0}, 0x20)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10, r9}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x1, 0xd, 0x9, 0x6, 0xfffffffffffffff8, 0x10}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x80, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x6c, '\x00', 0x0, @fallback=0x21, r3, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x10, 0x1, 0x2}, 0x10, r11, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[r12, r13, r14], &(0x7f0000000780)=[{0x0, 0x1, 0xe, 0x9}], 0x10, 0xd}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400, 0x5}, 0x10)
openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24)

15.749318006s ago: executing program 0 (id=4610):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0xe, &(0x7f0000001c40)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000001dc0)='syzkaller\x00'}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1e, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0xb, [@ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0x80, [{0x10, 0x5, 0x8000}, {0x1, 0x1, 0xffff521d}, {0x6, 0x4, 0x7}, {0xc, 0x1, 0x2}, {0xc, 0x0, 0x7}, {0x8, 0x4, 0x7}, {0xb, 0x0, 0x4}]}, @union={0xc, 0x7, 0x0, 0x5, 0x1, 0xfc, [{0x0, 0x3, 0xbd8}, {0x3, 0x4, 0x6}, {0x8, 0x3, 0x7f}, {0x6, 0x3, 0x1}, {0x0, 0x4, 0x800}, {0x1, 0x4, 0x2}, {0xb, 0x1, 0x9}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x5f, 0x46, 0x2e, 0x61, 0x61, 0x2e]}}, &(0x7f0000000080)=""/60, 0xef, 0x3c, 0x1, 0x2, 0x10000}, 0x28)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x4, 0x45b8, 0x8000, 0x28004, r0, 0x1, '\x00', r4, r5, 0x1, 0x0, 0x2, 0x0, @value=r6}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r7}, &(0x7f0000000480), &(0x7f00000004c0), 0x1000000}, 0x20)

15.745913784s ago: executing program 0 (id=4611):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x800000) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

15.725012335s ago: executing program 0 (id=4612):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write(r0, &(0x7f0000000080)="5b20bc9cc46a", 0x6) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0)

15.648645862s ago: executing program 0 (id=4613):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf"], 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r2, @ANYBLOB="800002000a0002"], 0x28}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148020000140ac1414bb0c000280"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

15.64828084s ago: executing program 0 (id=4614):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d000100000000000000000004000080450011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7aeb"], 0x5c}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10)

15.167496699s ago: executing program 0 (id=4615):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8)
sendto$inet6(r1, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000340)='#\x00\x00\x00', 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r6, 0xe4}, 0x18)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)=0x13fe4c102fd7fdb3)

4.056011185s ago: executing program 32 (id=4552):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getstats={0x1c, 0x5e, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3}, ["", "", ""]}, 0x1c}}, 0x400c804) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41)

3.04174048s ago: executing program 33 (id=4573):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x123, 0x40000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='rdma.current\x00', 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x92000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r6, 0x608, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000400))
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)={0x28, r8, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x200cc004)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r13=>0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r2, 0x904, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1af}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xaa}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x2c8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c0c0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r15)
sendmsg$NET_DM_CMD_STOP(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r16, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r16, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x26, 0x1, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

3.023022103s ago: executing program 34 (id=4576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100001800c000480"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64)
r5 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a0fc000680002c8b00005069078ac1e0101ffffffff4e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814)
r9 = socket(0x11, 0xa, 0x0) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000a0605d4290000001b0000000000000005000100070000000900020073797a3000000000040007"], 0x2c}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d02000000000000000000008b"], 0x0, 0x32, 0x0, 0x0, 0xfffffffe}, 0x11) (async, rerun: 32)
sendto$x25(r9, 0x0, 0x0, 0x85, &(0x7f0000000f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async, rerun: 32)
setsockopt$inet_tcp_int(r9, 0x6, 0x8, &(0x7f0000000080)=0x6, 0x4)

2.013541157s ago: executing program 35 (id=4595):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000100)={0x8, 0x2, 0x2, 0x1, 0x1}, 0x8)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c24b9baa5cbff4b58c87e402f0c4232777c062eebb171b53c0d7981f6bd775d0a06995513ac604dfb5983797dfb11d30a48408fbcc6738671bddc1f0b0a9eccc06488092371c7ab67c7c0ee9792a1f3165214", @ANYRESDEC, @ANYRESDEC=r4, @ANYRES16=r2, @ANYRES16=r1, @ANYRES64=r4], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'ipvlan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0xe50}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002240)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000826bd7045e928865d380e2625917b581035ca084f5372cf5474c1e1d579ac00fcdbdf25010000022401000000080003000000000008", @ANYRES32=r7, @ANYBLOB="580001801400020076657468315f746f5f7465616d0000001400020069705f76746930000000000000000000080003000300000014000200697036746e6c3000000000000000000008000100", @ANYRES32, @ANYBLOB="0800030000000000"], 0x90}, 0x1, 0x0, 0x0, 0x40c1}, 0x40804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r5, 0x0, 0x7f}, 0x18)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008800640000000010900010073797a30"], 0x10c}}, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r8, 0xff, 0x1, 0x0, &(0x7f0000000040))
r9 = socket(0x10, 0x80000, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r11=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f0000002180)=ANY=[@ANYBLOB="1800000000000000000000000000000018763b05eacc03334e2679110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r10}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x4)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ce73cf46b9c8cd3b1a474ba600fcaf00180000"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r13, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r13, &(0x7f0000000240), 0x0}, 0x20)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10, r9}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x1, 0xd, 0x9, 0x6, 0xfffffffffffffff8, 0x10}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x80, 0x1000, &(0x7f0000000a80)=""/4096, 0x0, 0x6c, '\x00', 0x0, @fallback=0x21, r3, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x10, 0x1, 0x2}, 0x10, r11, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[r12, r13, r14], &(0x7f0000000780)=[{0x0, 0x1, 0xe, 0x9}], 0x10, 0xd}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400, 0x5}, 0x10)
openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24)

0s ago: executing program 36 (id=4615):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8)
sendto$inet6(r1, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000340)='#\x00\x00\x00', 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r6, 0xe4}, 0x18)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)=0x13fe4c102fd7fdb3)

kernel console output (not intermixed with test programs):

327][T14255] bond11: (slave veth17): Enslaving as an active interface with a down link
[  162.379278][T14256] vlan2: entered allmulticast mode
[  162.398906][T14256] bond11: entered allmulticast mode
[  162.414509][T14256] bond11: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  162.454962][T14275] vlan2: entered allmulticast mode
[  162.462442][T14275] bond11: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  162.909352][T14328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.922179][T14328] syzkaller0: entered promiscuous mode
[  162.937712][T14328] syzkaller0: entered allmulticast mode
[  162.959570][T14328] tipc: Resetting bearer <eth:syzkaller0>
[  162.968990][T14326] tipc: Resetting bearer <eth:syzkaller0>
[  162.988001][T14326] tipc: Disabling bearer <eth:syzkaller0>
[  163.059113][T14341] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  163.088252][ T2958] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  163.127644][ T2958] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  163.161618][T11751] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  163.187036][T11751] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  163.248924][T14352] netlink: 'syz.0.2413': attribute type 11 has an invalid length.
[  163.372239][T14371] __nla_validate_parse: 42 callbacks suppressed
[  163.372258][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'.
[  163.531281][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'.
[  163.549607][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'.
[  163.572853][T14393] 8021q: adding VLAN 0 to HW filter on device bond9
[  163.581400][T14393] team0: Failed to send port change of device bond9 via netlink (err -105)
[  163.589132][T14398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2425'.
[  163.591090][T14393] team0: Failed to send options change via netlink (err -105)
[  163.605607][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'.
[  163.607646][T14393] team0: Port device bond9 added
[  163.628859][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'.
[  163.629962][T14400] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  163.679721][T14396] bond12: entered promiscuous mode
[  163.693994][T14396] bond12: entered allmulticast mode
[  163.702122][T14396] 8021q: adding VLAN 0 to HW filter on device bond12
[  163.763665][T14410] vxcan1 speed is unknown, defaulting to 1000
[  163.797053][T14417] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  163.820619][T14421] sctp: [Deprecated]: syz.1.2431 (pid 14421) Use of struct sctp_assoc_value in delayed_ack socket option.
[  163.820619][T14421] Use struct sctp_sack_info instead
[  163.991855][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2433'.
[  164.047387][T14410] hsr0 speed is unknown, defaulting to 1000
[  164.103461][T14444] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2436'.
[  164.112322][T14446] validate_nla: 7 callbacks suppressed
[  164.112339][T14446] netlink: 'syz.2.2438': attribute type 1 has an invalid length.
[  164.137368][T14446] netlink: 'syz.2.2438': attribute type 1 has an invalid length.
[  164.200406][T14454] tipc: Enabled bearer <udp:s>, priority 10
[  164.272931][T14456] netlink: 'syz.0.2441': attribute type 3 has an invalid length.
[  164.341105][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2441'.
[  164.350536][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2441'.
[  164.441367][T14470] netlink: 'syz.3.2444': attribute type 2 has an invalid length.
[  164.454327][T14470] netlink: 'syz.3.2444': attribute type 1 has an invalid length.
[  164.469858][T14478] netlink: 'syz.1.2449': attribute type 1 has an invalid length.
[  164.780079][ T5865] block nbd3: Receive control failed (result -32)
[  164.806496][T14494] bridge1: entered allmulticast mode
[  164.888822][T14493] bridge1: left allmulticast mode
[  165.174987][T14549] sock: sock_set_timeout: `syz.3.2474' (pid 14549) tries to set negative timeout
[  165.315648][ T5997] tipc: Node number set to 1399714358
[  165.789056][T14610] netlink: 'syz.0.2493': attribute type 5 has an invalid length.
[  165.956064][T14643] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  166.030071][T14650] netlink: 'syz.3.2505': attribute type 24 has an invalid length.
[  166.448214][T14669] vxcan1 speed is unknown, defaulting to 1000
[  166.882651][T14669] hsr0 speed is unknown, defaulting to 1000
[  167.187585][T14711] netlink: 'syz.4.2525': attribute type 6 has an invalid length.
[  167.199899][T14709] syzkaller1: entered promiscuous mode
[  167.213090][T14709] syzkaller1: entered allmulticast mode
[  167.221022][T14711] netlink: 'syz.4.2525': attribute type 6 has an invalid length.
[  167.230023][T14715] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  167.272249][T14715] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  167.288100][T14717] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  167.726200][T14763] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.940068][T14787] nft_compat: unsupported protocol 5
[  167.948663][T14787] nft_compat: unsupported protocol 5
[  167.955227][T14791] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  167.964975][T14787] nft_compat: unsupported protocol 5
[  167.971107][T14787] nft_compat: unsupported protocol 5
[  167.977284][T14791] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  167.984684][T14787] nft_compat: unsupported protocol 5
[  167.992380][T14787] nft_compat: unsupported protocol 5
[  168.001470][T14787] nft_compat: unsupported protocol 5
[  168.011097][T14787] nft_compat: unsupported protocol 5
[  168.022317][T14787] nft_compat: unsupported protocol 5
[  168.041285][T14787] nft_compat: unsupported protocol 5
[  168.055778][T14787] nft_compat: unsupported protocol 5
[  168.061340][T14787] nft_compat: unsupported protocol 5
[  168.067869][T14787] nft_compat: unsupported protocol 5
[  168.073423][T14787] nft_compat: unsupported protocol 5
[  168.079168][T14787] nft_compat: unsupported protocol 5
[  168.084695][T14787] nft_compat: unsupported protocol 5
[  168.104398][T14787] nft_compat: unsupported protocol 5
[  168.113646][T14787] nft_compat: unsupported protocol 5
[  168.120306][T14787] nft_compat: unsupported protocol 5
[  168.127715][T14787] nft_compat: unsupported protocol 5
[  168.133838][T14787] nft_compat: unsupported protocol 5
[  168.142834][T14787] nft_compat: unsupported protocol 5
[  168.150041][T14787] nft_compat: unsupported protocol 5
[  168.157336][T14787] nft_compat: unsupported protocol 5
[  168.162763][T14787] nft_compat: unsupported protocol 5
[  168.169427][T14787] nft_compat: unsupported protocol 5
[  168.174893][T14787] nft_compat: unsupported protocol 5
[  168.181648][T14787] nft_compat: unsupported protocol 5
[  168.188020][T14787] nft_compat: unsupported protocol 5
[  168.193570][T14787] nft_compat: unsupported protocol 5
[  168.202440][T14787] nft_compat: unsupported protocol 5
[  168.208903][T14787] nft_compat: unsupported protocol 5
[  168.214434][T14787] nft_compat: unsupported protocol 5
[  168.602760][T14853] xt_limit: Overflow, try lower: 271964/0
[  168.752181][T14867] __nla_validate_parse: 32 callbacks suppressed
[  168.752198][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2574'.
[  169.039404][T14900] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  169.080195][T14904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2586'.
[  169.112908][T14911] validate_nla: 4 callbacks suppressed
[  169.112925][T14911] netlink: 'syz.0.2588': attribute type 10 has an invalid length.
[  169.128910][T14911] 8021q: adding VLAN 0 to HW filter on device team0
[  169.137407][T14911] bond0: (slave team0): Enslaving as an active interface with an up link
[  169.150709][T14911] netlink: 'syz.0.2588': attribute type 10 has an invalid length.
[  169.175084][T14911] 8021q: adding VLAN 0 to HW filter on device bond14
[  169.189284][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'.
[  169.256530][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'.
[  169.380705][T14932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.405284][T14930] tipc: Disabling bearer <eth:syzkaller0>
[  169.777702][T14990] netlink: 'syz.1.2608': attribute type 33 has an invalid length.
[  169.796636][T14990] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2608'.
[  169.843617][T14992] netlink: 'syz.4.2611': attribute type 19 has an invalid length.
[  169.928069][T15003] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2614'.
[  170.241563][T15036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2620'.
[  170.285207][T15036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2620'.
[  170.530259][T15064] netlink: 'syz.2.2629': attribute type 1 has an invalid length.
[  170.538534][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'.
[  170.557017][T15065] svc: failed to register nfsdv3 RPC service (errno 111).
[  170.571920][T15065] svc: failed to register nfsaclv3 RPC service (errno 111).
[  170.609928][T15074] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2633'.
[  170.764697][T15093] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  170.777781][T15095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.035145][T15127] veth0_vlan: left allmulticast mode
[  171.047413][T15127] veth11: left allmulticast mode
[  171.054034][T15127] geneve2: left allmulticast mode
[  171.061395][T15127] veth13: left allmulticast mode
[  171.069320][T15130] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  171.071437][T15127] bond12: left allmulticast mode
[  171.089700][T15122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.099339][T15131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.451182][T15156] hsr_slave_1 (unregistering): left promiscuous mode
[  171.495725][T15153] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  171.503400][T15153] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  171.695643][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  171.703025][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  171.712630][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  171.720621][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  171.730190][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  171.742134][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  171.750602][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  171.758516][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  171.774179][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  171.783439][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  171.829038][T15161] vxcan1 speed is unknown, defaulting to 1000
[  171.940184][T15168] syz_tun: entered promiscuous mode
[  171.966459][T15168] syz_tun: left promiscuous mode
[  172.146624][T15175] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  172.209052][T15161] hsr0 speed is unknown, defaulting to 1000
[  172.494514][T15161] chnl_net:caif_netlink_parms(): no params data found
[  172.542288][T15202] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.551323][T15202] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.559549][T15202] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.570870][T15202] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.662004][T15161] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.680477][T15161] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.688463][T15161] bridge_slave_0: entered allmulticast mode
[  172.695416][T15161] bridge_slave_0: entered promiscuous mode
[  172.707812][T15161] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.728627][T15161] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.747255][T15161] bridge_slave_1: entered allmulticast mode
[  172.754244][T15161] bridge_slave_1: entered promiscuous mode
[  172.784626][T15223] netdevsim netdevsim3 : renamed from netdevsim0
[  172.796349][T15161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.808727][T15161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.848504][T15161] team0: Port device team_slave_0 added
[  172.869298][T15161] team0: Port device team_slave_1 added
[  172.922832][T15161] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.945897][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.992713][T15161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.029803][T15242] bond0: Device is already in use.
[  173.037822][T15161] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.044937][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.075245][T15161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.167370][T15161] hsr_slave_0: entered promiscuous mode
[  173.175423][T15161] hsr_slave_1: entered promiscuous mode
[  173.184634][T15161] debugfs: 'hsr0' already exists in 'hsr'
[  173.190881][T15161] Cannot create hsr debugfs directory
[  173.218504][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  173.377188][T15268] netlink: 'syz.4.2692': attribute type 1 has an invalid length.
[  173.387440][T15268] netlink: 'syz.4.2692': attribute type 4 has an invalid length.
[  173.399006][T15274] openvswitch: netlink: Multiple metadata blocks provided
[  173.460367][T15161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.519392][T15161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.583225][T15161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.631793][T15161] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.703021][T15161] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  173.714174][T15161] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  173.724121][T15161] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  173.738681][T15161] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  173.801106][T15161] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.819188][T15161] 8021q: adding VLAN 0 to HW filter on device team0
[  173.830012][T11743] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.837123][T11743] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.849370][T11743] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.856449][T11743] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.866155][ T5869] Bluetooth: hci3: command tx timeout
[  173.993227][T15161] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.040073][T15161] veth0_vlan: entered promiscuous mode
[  174.051867][T15161] veth1_vlan: entered promiscuous mode
[  174.088022][T15161] veth0_macvtap: entered promiscuous mode
[  174.098310][T15161] veth1_macvtap: entered promiscuous mode
[  174.120604][T15161] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.137919][T15161] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.152306][T11740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.161377][T11740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.172760][T11749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.182121][T11749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.221681][T11740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.231819][T11740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.243648][T11749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.252010][T11749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.519162][T15355] __nla_validate_parse: 42 callbacks suppressed
[  174.519180][T15355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'.
[  174.553283][T15355] ip6gretap2: entered promiscuous mode
[  174.584933][T15355] ip6gretap2: entered allmulticast mode
[  174.785771][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2725'.
[  174.808426][T15387] netlink: 'syz.2.2727': attribute type 21 has an invalid length.
[  174.816557][T15387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.884613][T15387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.893311][T15387] syzkaller0: entered promiscuous mode
[  174.899359][T15387] syzkaller0: entered allmulticast mode
[  174.913108][T15387] tipc: Resetting bearer <eth:syzkaller0>
[  174.933132][T15386] tipc: Resetting bearer <eth:syzkaller0>
[  174.960906][T15386] tipc: Disabling bearer <eth:syzkaller0>
[  174.978780][T15391] veth0: entered promiscuous mode
[  174.989145][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2729'.
[  175.021552][T15391] veth0 (unregistering): left promiscuous mode
[  175.062845][T15401] pim6reg1: entered promiscuous mode
[  175.082903][T15401] pim6reg1: entered allmulticast mode
[  175.224704][T15415] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2736'.
[  175.242858][T15415] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2736'.
[  175.291410][T15421] netlink: 'syz.4.2739': attribute type 1 has an invalid length.
[  175.312936][T15419] bond0: option ad_select: unable to set because the bond device is up
[  175.366993][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2740'.
[  175.383035][T15421] veth13: entered promiscuous mode
[  175.393695][T15421] bond10: (slave veth13): Enslaving as a backup interface with a down link
[  175.405100][T15429] netlink: 'syz.4.2739': attribute type 1 has an invalid length.
[  175.430266][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'.
[  175.456002][T15423] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[  175.474525][T15423] bond10: (slave vcan1): Error -95 calling set_mac_address
[  175.568978][T15446] netlink: 'syz.4.2744': attribute type 1 has an invalid length.
[  175.577585][T15446] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2744'.
[  175.594301][T15455] netlink: 'syz.3.2747': attribute type 10 has an invalid length.
[  175.672322][T15462] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2750'.
[  175.737768][T15466] syzkaller0: refused to change device tx_queue_len
[  175.769767][T15472] netlink: 'syz.0.2755': attribute type 1 has an invalid length.
[  175.778566][T15472] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2755'.
[  175.849999][T15470] veth0: entered promiscuous mode
[  175.858772][T15473] netlink: 'syz.2.2753': attribute type 23 has an invalid length.
[  175.884988][T15469] veth0: left promiscuous mode
[  175.946046][ T5869] Bluetooth: hci3: command tx timeout
[  176.177008][T15521] netlink: 'syz.2.2769': attribute type 178 has an invalid length.
[  176.185053][ T5866] IPVS: starting estimator thread 0...
[  176.256702][T15511] netlink: 'syz.4.2765': attribute type 29 has an invalid length.
[  176.287388][T15517] IPVS: using max 50 ests per chain, 120000 per kthread
[  176.370339][T15543] netlink: 'syz.0.2774': attribute type 1 has an invalid length.
[  176.449682][T15543] bond15: (slave bridge13): making interface the new active one
[  176.476685][T15543] bond15: (slave bridge13): Enslaving as an active interface with an up link
[  176.655176][T15572] openvswitch: netlink: IPv4 tunnel dst address is zero
[  176.687892][T15572] rdma_rxe: rxe_newlink: failed to add bond0
[  176.760945][T15572] 8021q: adding VLAN 0 to HW filter on device team0
[  176.778956][T15572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.843500][T15591] syzkaller0: mtu greater than device maximum
[  176.955742][T15594] nbd4: detected capacity change from 0 to 127
[  176.963160][ T5869] block nbd4: Receive control failed (result -32)
[  177.159841][T15612] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  177.514444][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.522239][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.531639][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.539837][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.549390][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.552526][T15629] pim6reg1: entered promiscuous mode
[  177.570170][T15629] pim6reg1: entered allmulticast mode
[  177.590671][T15626] vxcan1 speed is unknown, defaulting to 1000
[  177.680349][T15626] hsr0 speed is unknown, defaulting to 1000
[  177.793089][T15626] chnl_net:caif_netlink_parms(): no params data found
[  177.917535][T15626] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.924788][T15626] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.933972][T15626] bridge_slave_0: entered allmulticast mode
[  177.942136][T15626] bridge_slave_0: entered promiscuous mode
[  177.952366][T15626] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.959931][T15626] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.967822][T15626] bridge_slave_1: entered allmulticast mode
[  177.974908][T15626] bridge_slave_1: entered promiscuous mode
[  178.025779][ T5865] Bluetooth: hci3: command tx timeout
[  178.037673][T15626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.058557][T15626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.122049][T15626] team0: Port device team_slave_0 added
[  178.136514][T15626] team0: Port device team_slave_1 added
[  178.167929][T15626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.178570][T15626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.207368][T15626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.233667][T15626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.252978][T15626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.281462][T15626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.329864][T15659] Bluetooth: MGMT ver 1.23
[  178.368918][T15626] hsr_slave_0: entered promiscuous mode
[  178.375300][T15626] hsr_slave_1: entered promiscuous mode
[  178.384275][T15626] debugfs: 'hsr0' already exists in 'hsr'
[  178.390437][T15626] Cannot create hsr debugfs directory
[  178.591267][T15626] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  178.639596][T15626] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  178.659287][T15682] gre0: left promiscuous mode
[  178.693932][T15682] 8021q: adding VLAN 0 to HW filter on device team0
[  178.704409][T15682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.724263][T15626] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  178.792934][T15626] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  178.931822][T15626] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  178.944233][T15626] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  178.955839][T15626] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  178.967832][T15626] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  179.018265][T15718] bridge9: the hash_elasticity option has been deprecated and is always 16
[  179.028846][T15718] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  179.065018][T15626] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.081102][T15626] 8021q: adding VLAN 0 to HW filter on device team0
[  179.098191][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.105347][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.119973][T11743] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.127139][T11743] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.289096][T15626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.347271][T15626] veth0_vlan: entered promiscuous mode
[  179.362905][T15626] veth1_vlan: entered promiscuous mode
[  179.437549][T15626] veth0_macvtap: entered promiscuous mode
[  179.446948][T15626] veth1_macvtap: entered promiscuous mode
[  179.480556][T15626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.491669][T15626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.514511][T15753] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.527422][T15744] __nla_validate_parse: 16 callbacks suppressed
[  179.527435][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2834'.
[  179.548807][ T2966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.558407][ T2966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.577125][T11749] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.586089][T11749] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.626203][ T5869] Bluetooth: hci5: command tx timeout
[  179.631855][T11749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.653128][T11749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.690138][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.699278][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.740171][T15765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2800'.
[  179.817969][T15772] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2842'.
[  179.942892][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'.
[  179.943548][T15779] syzkaller1: entered promiscuous mode
[  179.959702][T15779] syzkaller1: entered allmulticast mode
[  180.106630][ T5869] Bluetooth: hci3: command tx timeout
[  180.138728][T15794] validate_nla: 6 callbacks suppressed
[  180.138746][T15794] netlink: 'syz.0.2850': attribute type 7 has an invalid length.
[  180.139978][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'.
[  180.144417][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2850'.
[  180.414330][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'.
[  180.493333][T15838] vxcan1 speed is unknown, defaulting to 1000
[  180.515130][T15837] netlink: 'syz.2.2861': attribute type 33 has an invalid length.
[  180.523523][T15837] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2861'.
[  180.546705][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2861'.
[  180.637115][T15850] netlink: 'syz.4.2865': attribute type 1 has an invalid length.
[  180.644957][T15850] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2865'.
[  180.659324][T15838] hsr0 speed is unknown, defaulting to 1000
[  180.982319][T15878] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585)
[  180.998772][T15878] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  181.269273][T15901] netem: change failed
[  181.299825][T15901] netem: change failed
[  181.486725][T15916] netlink: 'syz.0.2886': attribute type 10 has an invalid length.
[  181.511842][T15914] bond0: (slave wlan1): Releasing backup interface
[  181.551034][T15918] netlink: 'syz.3.2887': attribute type 5 has an invalid length.
[  181.559441][T15922] netlink: 'syz.0.2889': attribute type 3 has an invalid length.
[  181.611192][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.628570][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.636140][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.644436][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.652339][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.706328][ T5873] Bluetooth: hci5: command 0x041b tx timeout
[  181.718356][T15924] vxcan1 speed is unknown, defaulting to 1000
[  181.728484][T15934] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  181.810094][T15924] hsr0 speed is unknown, defaulting to 1000
[  181.851128][T15941] netlink: 'syz.3.2895': attribute type 4 has an invalid length.
[  181.964048][T15944] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  181.965490][ T5866] IPVS: starting estimator thread 0...
[  182.085576][T15950] IPVS: using max 43 ests per chain, 103200 per kthread
[  182.168149][T15924] chnl_net:caif_netlink_parms(): no params data found
[  182.316873][T15924] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.324052][T15924] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.335724][T15924] bridge_slave_0: entered allmulticast mode
[  182.343112][T15924] bridge_slave_0: entered promiscuous mode
[  182.351109][T15924] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.358336][T15924] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.365910][T15924] bridge_slave_1: entered allmulticast mode
[  182.372997][T15924] bridge_slave_1: entered promiscuous mode
[  182.406362][T15924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.420535][T15924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.460076][T15924] team0: Port device team_slave_0 added
[  182.472874][T15924] team0: Port device team_slave_1 added
[  182.513297][T15924] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.520512][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.548957][T15924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.560669][T15924] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.569125][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.600117][T15924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.674094][T15924] hsr_slave_0: entered promiscuous mode
[  182.682055][T15924] hsr_slave_1: entered promiscuous mode
[  182.696041][T15924] debugfs: 'hsr0' already exists in 'hsr'
[  182.712338][T15924] Cannot create hsr debugfs directory
[  182.919594][T15924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.930617][T15924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.991151][T15924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.001657][T15924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.044849][T16004] pimreg3: entered allmulticast mode
[  183.055650][T15924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.066803][T15924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.193489][T15924] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  183.208175][T15924] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  183.221554][T15924] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  183.245982][T15924] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  183.361089][T16030] hsr_slave_1 (unregistering): left promiscuous mode
[  183.372685][T15924] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.388836][T15924] 8021q: adding VLAN 0 to HW filter on device team0
[  183.409753][T11744] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.416929][T11744] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.432879][T11740] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.440016][T11740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.693914][T15924] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.709879][ T5865] Bluetooth: hci0: command tx timeout
[  183.759644][T16056] netlink: 'syz.0.2927': attribute type 39 has an invalid length.
[  183.762994][T15924] veth0_vlan: entered promiscuous mode
[  183.779996][T15924] veth1_vlan: entered promiscuous mode
[  183.786010][ T5865] Bluetooth: hci5: command 0x041b tx timeout
[  183.818746][T15924] veth0_macvtap: entered promiscuous mode
[  183.832345][T15924] veth1_macvtap: entered promiscuous mode
[  183.860749][T15924] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.875293][T15924] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.889815][T11743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.899707][T11743] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.908980][T16061] nbd5: detected capacity change from 0 to 127
[  183.911693][T11743] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.928252][T16061] sctp: [Deprecated]: syz.3.2928 (pid 16061) Use of int in max_burst socket option.
[  183.928252][T16061] Use struct sctp_assoc_value instead
[  183.953335][T11743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.965246][T16065] tipc: Resetting bearer <eth:syzkaller0>
[  184.053949][ T5865] block nbd5: Receive control failed (result -32)
[  184.134142][T16074] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  184.166262][T11740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.179156][T11740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.205012][T16079] netlink: 'syz.3.2932': attribute type 1 has an invalid length.
[  184.243674][T11743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.262988][T11743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.290660][T16086] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  184.301751][T16087] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  184.493386][T16104] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  184.559008][T16107] __nla_validate_parse: 26 callbacks suppressed
[  184.559007][T16110] netlink: 'syz.3.2934': attribute type 1 has an invalid length.
[  184.559024][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'.
[  184.586972][T11740] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.597359][T11740] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.621070][T11740] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.638937][T11740] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.643955][T16110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2934'.
[  184.915889][T16142] netem: unknown loss type 0
[  184.920856][T16142] netem: change failed
[  185.171895][T16167] Bluetooth: MGMT ver 1.23
[  185.233966][T16167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  185.334933][T16180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2960'.
[  185.354847][T16180] pimreg3: entered allmulticast mode
[  185.434947][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'.
[  185.450369][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2964'.
[  185.482760][T16193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2966'.
[  185.521381][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2964'.
[  185.551012][T16198] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2967'.
[  185.643361][T16206] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  185.725208][T16212] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2973'.
[  185.744559][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2973'.
[  185.778476][ T2966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  185.796769][ T5873] Bluetooth: hci0: command tx timeout
[  185.801044][ T2966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  185.811031][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  185.866259][ T5873] Bluetooth: hci5: command 0x041b tx timeout
[  185.941673][T16228] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  185.951772][T11744] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  185.965521][T16228] team0: Device ip6gre1 is of different type
[  186.025838][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  186.181003][T16263] validate_nla: 1 callbacks suppressed
[  186.181020][T16263] netlink: 'syz.4.2988': attribute type 7 has an invalid length.
[  186.298134][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  186.484431][T16283] netlink: 'syz.1.2992': attribute type 4 has an invalid length.
[  186.487670][T16288] netlink: 'syz.0.2994': attribute type 1 has an invalid length.
[  186.514819][T16288] netlink: 'syz.0.2994': attribute type 2 has an invalid length.
[  186.534537][T16290] netlink: 'syz.3.2995': attribute type 3 has an invalid length.
[  186.750810][T16308] team_slave_0: entered promiscuous mode
[  186.756548][T16308] team_slave_1: entered promiscuous mode
[  186.780175][T16308] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  186.796246][T16308] team0: Device macvtap1 is already an upper device of the team interface
[  186.814737][T16308] team_slave_0: left promiscuous mode
[  186.820233][T16308] team_slave_1: left promiscuous mode
[  187.115257][T16314] syzkaller1: entered promiscuous mode
[  187.131802][T16314] syzkaller1: entered allmulticast mode
[  187.273307][T16354] netlink: 'syz.3.3013': attribute type 1 has an invalid length.
[  187.300901][T16354] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  187.569363][T16384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.625253][T16386] netlink: 'syz.2.3019': attribute type 1 has an invalid length.
[  187.650777][T16386] netlink: 'syz.2.3019': attribute type 1 has an invalid length.
[  187.857300][T16402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.868174][ T5873] Bluetooth: hci0: command 0x040f tx timeout
[  187.877214][T16408] netlink: 'syz.2.3032': attribute type 1 has an invalid length.
[  187.949787][ T5873] Bluetooth: hci5: command 0x041b tx timeout
[  187.959841][T16402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.989625][T16420] netlink: 'syz.2.3033': attribute type 1 has an invalid length.
[  188.032385][T16402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.093838][T16402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.150370][T11743] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.162231][T11743] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.174083][ T2958] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.188373][T11743] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.348133][T16436] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  188.355358][T16436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.638277][T16435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.713874][T16439] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  188.817269][T16455] syzkaller1: entered promiscuous mode
[  188.828246][T16455] syzkaller1: entered allmulticast mode
[  188.898440][T16468] netlink: ct family unspecified
[  188.905194][T16468] openvswitch: netlink: Actions may not be safe on all matching packets
[  188.986238][T16473] netlink: 'syz.2.3050': attribute type 11 has an invalid length.
[  188.993606][T16480] syzkaller1: entered promiscuous mode
[  189.002545][T16480] syzkaller1: entered allmulticast mode
[  189.065803][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.140418][T16482] vxcan1 speed is unknown, defaulting to 1000
[  189.150255][T16494] syz_tun: entered allmulticast mode
[  189.172340][T16494] syz_tun: left allmulticast mode
[  189.360737][T16482] hsr0 speed is unknown, defaulting to 1000
[  189.526186][T16525] bond1: entered promiscuous mode
[  189.531515][T16525] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.591700][T16532] bond11: entered promiscuous mode
[  189.598360][T16532] bond11: entered allmulticast mode
[  189.604077][T16532] 8021q: adding VLAN 0 to HW filter on device bond11
[  189.634075][T16525] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.641383][T16525] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  189.652493][T16525] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  189.666712][T16525] bond1: (slave wireguard0): making interface the new active one
[  189.674612][T16525] wireguard0: entered promiscuous mode
[  189.681206][T16525] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  189.776567][T16543] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.852985][T16543] bond1: (slave gretap1): making interface the new active one
[  189.864527][T16543] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  189.875729][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  189.945881][ T5873] Bluetooth: hci0: command 0x040f tx timeout
[  190.050834][T16570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  190.111767][T16578] __nla_validate_parse: 29 callbacks suppressed
[  190.111784][T16578] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3083'.
[  190.185603][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  190.244940][T16590] pimreg: entered allmulticast mode
[  190.337431][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'.
[  190.343475][T16599] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3087'.
[  190.358095][T16600] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  190.384062][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'.
[  190.456610][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'.
[  190.465153][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3091'.
[  190.465883][T16607] sctp: [Deprecated]: syz.3.3092 (pid 16607) Use of struct sctp_assoc_value in delayed_ack socket option.
[  190.465883][T16607] Use struct sctp_sack_info instead
[  190.478374][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3091'.
[  190.510928][T16607] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3092'.
[  190.522783][T16607] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3092'.
[  190.584245][T16617] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3096'.
[  190.704255][T16624] syzkaller1: entered promiscuous mode
[  190.712073][T16624] syzkaller1: entered allmulticast mode
[  191.003052][T16663] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  191.191016][T16682] team_slave_0: entered promiscuous mode
[  191.196802][T16682] team_slave_1: entered promiscuous mode
[  191.698166][T16722] validate_nla: 7 callbacks suppressed
[  191.698184][T16722] netlink: 'syz.2.3131': attribute type 1 has an invalid length.
[  191.880983][T16717] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.888615][T16717] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.909105][T16717] team_slave_0: left promiscuous mode
[  191.914580][T16717] team_slave_1: left promiscuous mode
[  191.925405][T16673] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  191.932184][T16673] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  191.992798][T16717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.003212][T16717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.025771][ T5873] Bluetooth: hci0: command 0x040f tx timeout
[  192.071505][T16721] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.079010][T16721] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.108141][T16673] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  192.114080][T16673] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  192.115539][ T2966] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.157460][ T2966] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.168250][ T2966] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.181047][ T2966] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.194052][T16673] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  192.202207][T16673] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  192.215136][T16738] pim6reg: entered allmulticast mode
[  192.221754][ T2966] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.232909][ T2966] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.259521][ T2966] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.281641][ T2966] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.707264][T16771] netlink: 'syz.3.3149': attribute type 2 has an invalid length.
[  192.795745][T16778] tipc: Started in network mode
[  192.800650][T16778] tipc: Node identity ac1414aa, cluster identity 4711
[  192.810333][T16778] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  192.902994][T16784] netlink: 'syz.4.3154': attribute type 1 has an invalid length.
[  192.949478][T16791] netlink: 'syz.1.3155': attribute type 1 has an invalid length.
[  193.126414][T16811] netlink: 'syz.3.3162': attribute type 7 has an invalid length.
[  193.161772][T16816] netlink: 'syz.1.3161': attribute type 25 has an invalid length.
[  193.186180][T16811] netlink: 'syz.3.3162': attribute type 8 has an invalid length.
[  193.550654][T16872] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  193.560199][T16872] openvswitch: netlink: Duplicate key (type 0).
[  193.595314][T16880] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  193.629964][T16882] netlink: 'syz.2.3180': attribute type 12 has an invalid length.
[  193.690887][T16885] bridge_slave_1: left allmulticast mode
[  193.696952][T16885] bridge_slave_1: left promiscuous mode
[  193.702742][T16885] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.711229][T16885] bridge_slave_0: left allmulticast mode
[  193.717807][T16885] bridge_slave_0: left promiscuous mode
[  193.723713][T16885] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.185142][T16896] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  194.721405][T16900] netlink: 'syz.4.3187': attribute type 22 has an invalid length.
[  194.735129][T16902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.790385][T16902] tipc: Resetting bearer <eth:syzkaller0>
[  194.803062][T16899] tipc: Resetting bearer <eth:syzkaller0>
[  194.817777][T16900] netlink: 'syz.4.3187': attribute type 22 has an invalid length.
[  194.832321][T16899] tipc: Disabling bearer <eth:syzkaller0>
[  195.157395][T16943] __nla_validate_parse: 22 callbacks suppressed
[  195.157412][T16943] netlink: 53 bytes leftover after parsing attributes in process `syz.3.3199'.
[  195.174331][T16942] netlink: 53 bytes leftover after parsing attributes in process `syz.3.3199'.
[  195.615533][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.632793][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.641004][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.650711][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.659109][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.709143][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.716561][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.723892][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.737911][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.745770][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.872250][ T5858] bond0: (slave syz_tun): Releasing backup interface
[  195.889660][T16982] veth3: entered promiscuous mode
[  195.914087][T16981] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3205'.
[  195.950451][T16974] vxcan1 speed is unknown, defaulting to 1000
[  196.052488][T16995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3211'.
[  196.071836][T16995] : entered promiscuous mode
[  196.081885][T16998] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.098471][T16998] batadv_slave_0: entered promiscuous mode
[  196.125504][T16974] hsr0 speed is unknown, defaulting to 1000
[  196.202090][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3215'.
[  196.215904][T17006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3215'.
[  196.270807][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3213'.
[  196.281477][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3213'.
[  196.406415][T17017] tipc: Disabling bearer <eth:ipvlan0>
[  196.457125][T16974] chnl_net:caif_netlink_parms(): no params data found
[  196.467847][T17021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3217'.
[  196.612800][T16974] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.626604][T16974] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.635763][T16974] bridge_slave_0: entered allmulticast mode
[  196.642972][T16974] bridge_slave_0: entered promiscuous mode
[  196.651682][T16974] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.659101][T16974] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.666647][T16974] bridge_slave_1: entered allmulticast mode
[  196.673619][T16974] bridge_slave_1: entered promiscuous mode
[  196.759783][T17044] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  196.772069][T16974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.790904][T16974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.869221][T17054] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3226'.
[  196.941105][T16974] team0: Port device team_slave_0 added
[  196.964992][T16974] team0: Port device team_slave_1 added
[  197.012319][T17058] tipc: Started in network mode
[  197.018564][T17058] tipc: Node identity d269e71cf25e, cluster identity 4711
[  197.053314][T17058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.078036][T16974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.085309][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.114739][T16974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.130264][T17070] syzkaller0: entered promiscuous mode
[  197.136089][T17070] syzkaller0: entered allmulticast mode
[  197.143629][T16974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.153830][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.184505][T16974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.200252][T17070] tipc: Resetting bearer <eth:syzkaller0>
[  197.223034][T17057] tipc: Resetting bearer <eth:syzkaller0>
[  197.232487][T17057] tipc: Disabling bearer <eth:syzkaller0>
[  197.252661][T16974] hsr_slave_0: entered promiscuous mode
[  197.259014][T16974] hsr_slave_1: entered promiscuous mode
[  197.265017][T16974] debugfs: 'hsr0' already exists in 'hsr'
[  197.270819][T16974] Cannot create hsr debugfs directory
[  197.278072][T17090] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  197.370628][T17095] sctp: [Deprecated]: syz.2.3241 (pid 17095) Use of int in max_burst socket option.
[  197.370628][T17095] Use struct sctp_assoc_value instead
[  197.439192][T16974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.458458][T16974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.472486][T16974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  197.543146][T16974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.557675][T16974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.570170][T16974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  197.623146][T16974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.633725][T16974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.644226][T16974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  197.695711][T16974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.706315][T16974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.718738][T16974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  197.787054][ T5873] Bluetooth: hci1: command tx timeout
[  197.874946][T16974] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  197.886375][T16974] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  197.900394][T16974] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  197.921298][T16974] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  198.025543][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  198.052101][T17141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.064731][T16974] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.071035][T17143] validate_nla: 4 callbacks suppressed
[  198.071054][T17143] netlink: 'syz.1.3255': attribute type 10 has an invalid length.
[  198.112984][T17141] syzkaller0: entered promiscuous mode
[  198.118741][T17141] syzkaller0: entered allmulticast mode
[  198.124839][T17141] tipc: Resetting bearer <eth:syzkaller0>
[  198.142069][T17143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.151997][T17143] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  198.172489][T17139] tipc: Resetting bearer <eth:syzkaller0>
[  198.251977][T17139] tipc: Disabling bearer <eth:syzkaller0>
[  198.263728][T17150] gretap0: entered promiscuous mode
[  198.280306][T16974] 8021q: adding VLAN 0 to HW filter on device team0
[  198.345343][T11749] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.352489][T11749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.353824][T17158] netlink: 'syz.3.3260': attribute type 10 has an invalid length.
[  198.379572][T11749] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.386743][T11749] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.552786][T17168] syzkaller0: entered allmulticast mode
[  198.627182][T17168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.679971][T17168] tipc: Resetting bearer <eth:syzkaller0>
[  198.762545][T17168] tipc: Disabling bearer <eth:syzkaller0>
[  198.793867][T17196] veth1: entered allmulticast mode
[  198.802766][T17206] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  198.853123][T16974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.890646][T17211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.898698][T17211] syzkaller0: entered promiscuous mode
[  198.904188][T17211] syzkaller0: entered allmulticast mode
[  198.924068][T17211] tipc: Resetting bearer <eth:syzkaller0>
[  198.965288][T17209] tipc: Resetting bearer <eth:syzkaller0>
[  199.000529][T17209] tipc: Disabling bearer <eth:syzkaller0>
[  199.184716][T17243] netem: change failed
[  199.257233][T17251] netlink: 'syz.2.3284': attribute type 7 has an invalid length.
[  199.341661][T16974] veth0_vlan: entered promiscuous mode
[  199.388788][T16974] veth1_vlan: entered promiscuous mode
[  199.461806][T16974] veth0_macvtap: entered promiscuous mode
[  199.481678][T16974] veth1_macvtap: entered promiscuous mode
[  199.531043][T16974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.576441][T16974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.593765][ T2958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.695215][ T2958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.728086][ T2958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.794376][ T2958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.865680][ T5873] Bluetooth: hci1: command tx timeout
[  199.901464][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.924505][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.980638][T17289] IPVS: Error connecting to the multicast addr
[  199.994219][T17284] nbd: must specify at least one socket
[  200.006770][T11743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.020316][T11743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.190559][T17311] __nla_validate_parse: 18 callbacks suppressed
[  200.190578][T17311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3302'.
[  200.208823][T17311] siw: device registration error -23
[  200.288282][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'.
[  200.693940][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3307'.
[  200.724771][T17347] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.3308'.
[  200.736325][T17347] openvswitch: netlink: Message has 5 unknown bytes.
[  200.842187][T17366] netlink: 'syz.1.3313': attribute type 30 has an invalid length.
[  200.852175][T17366] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  200.862460][T17366] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  200.878671][T17366] openvswitch: netlink: EtherType 0 is less than min 600
[  200.886762][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3313'.
[  200.898457][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3313'.
[  201.020160][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'.
[  201.087680][T17392] netlink: 'syz.3.3321': attribute type 83 has an invalid length.
[  201.145147][T17396] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3324'.
[  201.492854][T17446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.543598][T17454] batadv_slave_0: entered promiscuous mode
[  201.623202][T17452] batadv_slave_0: left promiscuous mode
[  201.683228][T17472] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3345'.
[  201.742997][T17479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3348'.
[  201.880900][T17500] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  201.890395][ T2966] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  201.900058][ T2966] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  201.909291][ T2966] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  201.918199][ T2966] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  201.945645][ T5873] Bluetooth: hci1: command tx timeout
[  202.119164][T11743] tipc: Resetting bearer <eth:syzkaller0>
[  202.206650][T17436] tipc: Resetting bearer <eth:syzkaller0>
[  202.247299][T17436] tipc: Disabling bearer <eth:syzkaller0>
[  202.599068][T17527] batadv1: entered allmulticast mode
[  202.608472][T17527] 8021q: adding VLAN 0 to HW filter on device batadv1
[  202.618771][T17529] netem: change failed
[  202.710002][T17540] syzkaller0: entered promiscuous mode
[  202.715632][T17540] syzkaller0: entered allmulticast mode
[  202.727899][T17542] pim6reg: entered allmulticast mode
[  202.734416][T17542] pim6reg: left allmulticast mode
[  202.788238][T17543] netlink: 'syz.2.3364': attribute type 2 has an invalid length.
[  202.994163][T17564] openvswitch: netlink: Multiple metadata blocks provided
[  203.418991][T17615] bridge_slave_1: default FDB implementation only supports local addresses
[  203.440300][T17615] sctp: [Deprecated]: syz.2.3390 (pid 17615) Use of struct sctp_assoc_value in delayed_ack socket option.
[  203.440300][T17615] Use struct sctp_sack_info instead
[  203.537670][T17629] tunl0: entered promiscuous mode
[  203.584309][T17629] netlink: 'syz.1.3392': attribute type 3 has an invalid length.
[  203.703202][T17640] batman_adv: batadv0: Adding interface: dummy0
[  203.712934][T17640] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.742949][T17640] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  203.819288][T17645] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  204.009197][T17657] gretap0: entered promiscuous mode
[  204.022645][T17657] batadv_slave_1: entered promiscuous mode
[  204.025867][ T5873] Bluetooth: hci1: command tx timeout
[  204.040709][T17657] debugfs: 'hsr1' already exists in 'hsr'
[  204.061686][T17657] Cannot create hsr debugfs directory
[  204.066365][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  204.073829][T17657] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  204.074334][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  204.091854][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  204.096370][T17657] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  204.099499][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  204.118214][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  204.151838][T17660] vxcan1 speed is unknown, defaulting to 1000
[  204.181987][T11740] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  204.219165][T11740] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  204.248772][T17660] hsr0 speed is unknown, defaulting to 1000
[  204.248914][T11740] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  204.274754][T11740] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.526937][T17660] chnl_net:caif_netlink_parms(): no params data found
[  204.689264][T17660] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.698169][T17660] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.706483][T17660] bridge_slave_0: entered allmulticast mode
[  204.713614][T17660] bridge_slave_0: entered promiscuous mode
[  204.721948][T17660] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.730197][T17660] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.737539][T17660] bridge_slave_1: entered allmulticast mode
[  204.744579][T17660] bridge_slave_1: entered promiscuous mode
[  204.781609][T17711] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  204.791732][T17716] netlink: 'syz.4.3423': attribute type 11 has an invalid length.
[  204.816741][T17660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.837566][T17660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.883956][T17660] team0: Port device team_slave_0 added
[  204.892209][T17660] team0: Port device team_slave_1 added
[  204.931996][T17660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.940062][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.966909][T17660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.995155][T17660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.013319][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.042619][T17660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.127207][T17660] hsr_slave_0: entered promiscuous mode
[  205.137446][T17660] hsr_slave_1: entered promiscuous mode
[  205.153858][T17660] debugfs: 'hsr0' already exists in 'hsr'
[  205.163468][T17660] Cannot create hsr debugfs directory
[  205.283220][T17742] netlink: 'syz.4.3431': attribute type 11 has an invalid length.
[  205.751213][T17660] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  205.819612][T17807] __nla_validate_parse: 28 callbacks suppressed
[  205.819630][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3445'.
[  205.826612][T17660] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  205.872801][T17811] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3449'.
[  205.939159][T17660] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  205.991821][T17660] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  206.022440][T17821] netlink: 'syz.0.3454': attribute type 11 has an invalid length.
[  206.033622][T17821] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3454'.
[  206.108588][T17660] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.130982][T17660] 8021q: adding VLAN 0 to HW filter on device team0
[  206.156744][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.163907][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.188499][T11751] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.195666][ T5865] Bluetooth: hci4: command tx timeout
[  206.195717][T11751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.243540][T17839] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3457'.
[  206.257347][T17839] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  206.272742][T17839] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3457'.
[  206.291676][T17660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  206.395296][T17850] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  206.588759][T17660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.630491][T17660] veth0_vlan: entered promiscuous mode
[  206.642786][T17660] veth1_vlan: entered promiscuous mode
[  206.674099][T17660] veth0_macvtap: entered promiscuous mode
[  206.683804][T17660] veth1_macvtap: entered promiscuous mode
[  206.701646][T17660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.717381][T17660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.731925][T11743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.741497][T11743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.757313][T11744] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.766576][T11744] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.368218][T11744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.379060][T11744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.435182][T17893] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3470'.
[  207.491475][T11751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.508912][T11751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.601807][T17916] netlink: 'syz.1.3476': attribute type 7 has an invalid length.
[  207.614018][T17916] : entered promiscuous mode
[  207.625171][T17917] openvswitch: netlink: IP tunnel dst address not specified
[  207.678454][T17922] smc: net device erspan0 applied user defined pnetid SYZ0
[  207.811471][T17941] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3482'.
[  207.827596][T17942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3485'.
[  207.836140][T17939] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3482'.
[  207.996056][T17962] netlink: 'syz.3.3491': attribute type 1 has an invalid length.
[  208.029352][T17962] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3491'.
[  208.251736][T17986] syzkaller1: entered promiscuous mode
[  208.266853][T17986] syzkaller1: entered allmulticast mode
[  208.272490][ T5865] Bluetooth: hci4: command tx timeout
[  208.391625][T17997] syzkaller0: entered promiscuous mode
[  208.397848][T17997] syzkaller0: entered allmulticast mode
[  208.408065][T17997] tipc: Started in network mode
[  208.412991][T17997] tipc: Node identity , cluster identity 4711
[  208.420912][T17997] tipc: Failed to obtain node identity
[  208.438674][T17997] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  208.471932][T17997] tipc: Started in network mode
[  208.484805][T17997] tipc: Node identity , cluster identity 4711
[  208.498212][T17997] tipc: Failed to obtain node identity
[  208.503826][T17997] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  208.586072][T18014] netlink: 'syz.3.3508': attribute type 16 has an invalid length.
[  208.594101][T18014] netlink: 'syz.3.3508': attribute type 17 has an invalid length.
[  208.639856][T18014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.731636][T18018] netlink: 'syz.1.3507': attribute type 1 has an invalid length.
[  208.767733][T18007] syzkaller0: entered promiscuous mode
[  208.773422][T18007] syzkaller0: entered allmulticast mode
[  208.982144][T18042] syzkaller1: entered promiscuous mode
[  208.989946][T18042] syzkaller1: entered allmulticast mode
[  209.136219][T18057] netlink: 'syz.2.3518': attribute type 29 has an invalid length.
[  209.184627][T11751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.194733][T11751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.291790][T18075] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  209.300564][T18075] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  209.342579][T18077] netlink: 'syz.4.3527': attribute type 1 has an invalid length.
[  209.771427][T18118] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  209.833784][T18126] sctp: [Deprecated]: syz.1.3543 (pid 18126) Use of struct sctp_assoc_value in delayed_ack socket option.
[  209.833784][T18126] Use struct sctp_sack_info instead
[  210.054220][T18153] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  210.067814][T18149] netlink: 'syz.3.3547': attribute type 1 has an invalid length.
[  210.251945][T18164] vcan0: tx drop: invalid da for name 0x000003fffffffffc
[  210.340237][T18179] tipc: Trying to set illegal importance in message
[  210.355605][ T5865] Bluetooth: hci4: command tx timeout
[  211.367597][T18227] vxlan0: entered promiscuous mode
[  211.376680][T18227] vxlan0: entered allmulticast mode
[  211.382463][T11744] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  211.404599][T11744] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  211.427288][T11751] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  211.482428][T11744] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  211.533051][ T5926] hid-generic 0005:0B57:0000.0001: collection stack underflow
[  211.560191][ T5926] hid-generic 0005:0B57:0000.0001: item 0 0 0 12 parsing failed
[  211.579754][ T5926] hid-generic 0005:0B57:0000.0001: probe with driver hid-generic failed with error -22
[  212.213458][T18277] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  212.230547][T18277] __nla_validate_parse: 20 callbacks suppressed
[  212.230564][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'.
[  212.260304][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3588'.
[  212.426168][ T5865] Bluetooth: hci4: command tx timeout
[  212.457425][T18304] syz.4.3598 uses old SIOCAX25GETINFO
[  212.753558][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'.
[  212.778786][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'.
[  212.827750][T18336] tipc: Started in network mode
[  212.842867][T18336] tipc: Node identity , cluster identity 4711
[  212.856835][T18336] tipc: Failed to obtain node identity
[  212.862480][T18336] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  212.947675][T18349] syzkaller0: entered promiscuous mode
[  212.958401][T18349] syzkaller0: entered allmulticast mode
[  212.988273][T18348] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  213.096046][T18366] netlink: 'syz.2.3616': attribute type 58 has an invalid length.
[  213.114796][T18366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3616'.
[  213.246583][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'.
[  213.260419][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'.
[  213.386031][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  213.441811][T18394] netlink: 'syz.4.3625': attribute type 1 has an invalid length.
[  213.617571][T18422] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3634'.
[  213.636097][T18424] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3633'.
[  213.789053][T18441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3639'.
[  213.928522][T18450] netlink: 'syz.4.3642': attribute type 21 has an invalid length.
[  213.948103][T18450] netlink: 'syz.4.3642': attribute type 21 has an invalid length.
[  213.960979][T11740] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  213.970586][T11740] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  213.983267][T11740] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  213.992994][T11740] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  214.083365][T18466] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  214.100725][T18465] IPVS: stopping backup sync thread 18466 ...
[  214.107825][T18468] netdevsim netdevsim1: Direct firmware load for 	 failed with error -2
[  214.121172][T18468] netdevsim netdevsim1: Falling back to sysfs fallback for: 	
[  214.343878][T18481] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.354314][T18481] bridge_slave_1 (unregistering): left allmulticast mode
[  214.363024][T18481] bridge_slave_1 (unregistering): left promiscuous mode
[  214.370275][T18481] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.382514][T18478] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  214.401664][T18482] sctp: [Deprecated]: syz.0.3651 (pid 18482) Use of int in maxseg socket option.
[  214.401664][T18482] Use struct sctp_assoc_value instead
[  214.472260][T18490] netlink: 'syz.2.3654': attribute type 14 has an invalid length.
[  214.491190][T18490] netlink: 'syz.2.3654': attribute type 13 has an invalid length.
[  214.603487][T18502] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  214.613228][T18504] netlink: 'syz.0.3658': attribute type 9 has an invalid length.
[  214.619787][T18502] openvswitch: netlink: Message has 6332 unknown bytes.
[  214.685254][T18502] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.750193][T18502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.762125][T18502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.811369][T18502] vxlan0: left promiscuous mode
[  214.827505][T11740] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.841258][T11740] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.863665][T11740] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.880261][T11740] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.910444][T11740] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.943802][T11740] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.959702][T11740] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.979906][T11740] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.014742][T18522] netlink: 'syz.2.3666': attribute type 3 has an invalid length.
[  215.032902][T11740] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  215.053250][T11740] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  215.090810][T11740] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  215.110757][T11740] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.153631][T18541] netlink: 'syz.0.3670': attribute type 2 has an invalid length.
[  215.348363][T18557] syzkaller0: entered promiscuous mode
[  215.353869][T18557] syzkaller0: entered allmulticast mode
[  215.418906][T18568] netlink: 'syz.0.3678': attribute type 17 has an invalid length.
[  215.492965][T18574] netlink: 'syz.4.3681': attribute type 29 has an invalid length.
[  215.502202][T18575] netlink: 'syz.2.3679': attribute type 83 has an invalid length.
[  216.057357][T18649] tipc: Started in network mode
[  216.063396][T18649] tipc: Node identity ac14140f, cluster identity 4711
[  216.077853][T18649] tipc: New replicast peer: 255.255.255.255
[  216.084974][T18649] tipc: Enabled bearer <udp:syz2>, priority 10
[  216.129439][T18649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.141908][T18649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.152178][T18649] bond0 (unregistering): Released all slaves
[  216.516022][T18689] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  216.903142][T18726] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20001
[  216.982403][T18735] gre0: entered promiscuous mode
[  217.196294][   T10] tipc: Node number set to 2886997007
[  217.233528][T18761] gretap1: entered promiscuous mode
[  217.391945][T18787] __nla_validate_parse: 22 callbacks suppressed
[  217.391964][T18787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3749'.
[  217.460201][T18791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.562710][T18798] tipc: Started in network mode
[  217.568697][T18798] tipc: Node identity 2a8288239346, cluster identity 4711
[  217.579363][T18798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.628246][T18798] tipc: Disabling bearer <eth:syzkaller0>
[  217.664859][T18807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3757'.
[  217.679451][T18806] tipc: New replicast peer: 255.255.255.255
[  217.696690][T18806] tipc: Enabled bearer <udp:syz2>, priority 10
[  218.072654][T18834] veth5: entered promiscuous mode
[  218.085128][T18834] veth5: entered allmulticast mode
[  218.094388][T18842] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3767'.
[  218.110107][T18842] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3767'.
[  218.135230][T18842] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3767'.
[  218.364187][T18858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3772'.
[  218.401612][T18858] bond1: entered promiscuous mode
[  218.406824][T18858] bond1: entered allmulticast mode
[  218.412399][T18858] 8021q: adding VLAN 0 to HW filter on device bond1
[  218.483603][T18867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3774'.
[  218.504084][T18866] IPv6: NLM_F_CREATE should be specified when creating new route
[  218.581154][T18869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3776'.
[  218.655331][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3779'.
[  218.816514][   T24] tipc: Node number set to 540534556
[  218.940018][T18910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.953504][T18910] tipc: Disabling bearer <eth:syzkaller0>
[  219.179496][T18927] validate_nla: 7 callbacks suppressed
[  219.179514][T18927] netlink: 'syz.2.3799': attribute type 10 has an invalid length.
[  219.196996][T18927] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  219.204652][T18930] xt_policy: too many policy elements
[  219.398580][T18945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.689095][T18971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3807'.
[  219.704588][T18970] pimreg: left allmulticast mode
[  219.726899][T18976] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  219.743673][T18975] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  219.805823][T18990] netlink: 'syz.3.3812': attribute type 3 has an invalid length.
[  219.891849][T18999] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  220.228935][T19022] vlan1: entered promiscuous mode
[  220.270933][T19028] nbd: must specify a size in bytes for the device
[  220.344235][T19032] netlink: 'syz.3.3828': attribute type 11 has an invalid length.
[  220.421997][T19043] netlink: 'syz.3.3831': attribute type 1 has an invalid length.
[  220.470003][T19043] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  220.482717][T19043] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  220.493332][T19043] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  220.756834][T19065] NCSI netlink: No device for ifindex 0
[  221.168060][T19099] netlink: 'syz.2.3850': attribute type 4 has an invalid length.
[  221.178819][T19100] NCSI netlink: No device for ifindex 0
[  221.230172][T19106] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  221.239758][T19096] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  221.261714][T19096] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.273030][T19096] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.800129][T19164] netlink: 'syz.1.3873': attribute type 1 has an invalid length.
[  222.004325][T19182] bond0: entered promiscuous mode
[  222.010560][T19182] bond_slave_0: entered promiscuous mode
[  222.018634][T19182] bond_slave_1: entered promiscuous mode
[  222.031100][T19180] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  222.319438][T19216] syz_tun: entered allmulticast mode
[  222.365043][T19214] syz_tun: left allmulticast mode
[  222.400405][T19224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.430424][T19224] syzkaller0: entered promiscuous mode
[  222.446111][T19224] syzkaller0: entered allmulticast mode
[  222.475204][T19224] tipc: Resetting bearer <eth:syzkaller0>
[  222.499446][T19224] __nla_validate_parse: 88 callbacks suppressed
[  222.499463][T19224] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3894'.
[  222.523389][T19222] tipc: Resetting bearer <eth:syzkaller0>
[  222.547530][T19222] tipc: Disabling bearer <eth:syzkaller0>
[  222.587458][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3899'.
[  222.660861][T19247] netlink: 'syz.3.3901': attribute type 1 has an invalid length.
[  222.682517][T19247] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3901'.
[  222.770229][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3906'.
[  222.794941][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3906'.
[  222.852118][T19274] openvswitch: netlink: IP tunnel dst address not specified
[  222.908672][T19278] netlink: 'syz.3.3910': attribute type 17 has an invalid length.
[  222.926685][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3910'.
[  222.936514][T19278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3910'.
[  222.961796][T19278] gretap0: entered promiscuous mode
[  222.976576][T19278] gretap0: left promiscuous mode
[  223.189298][T19303] netlink: 'syz.0.3919': attribute type 9 has an invalid length.
[  223.240282][T19306] netlink: 'syz.2.3920': attribute type 2 has an invalid length.
[  223.442299][T19329] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3928'.
[  223.459961][T19329] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3928'.
[  223.565803][T19339] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3933'.
[  223.589526][T19347] batadv0: entered promiscuous mode
[  223.606356][T19347] batadv0: entered allmulticast mode
[  223.611860][T19347] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  224.423292][T19406] validate_nla: 2 callbacks suppressed
[  224.423311][T19406] netlink: 'syz.4.3951': attribute type 29 has an invalid length.
[  224.547816][T19415] xt_limit: Overflow, try lower: 271964/0
[  224.763997][T19427] syzkaller1: entered promiscuous mode
[  224.782534][T19427] syzkaller1: entered allmulticast mode
[  224.877294][ T2966] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d
[  224.932359][T19459] netlink: 'syz.0.3962': attribute type 1 has an invalid length.
[  224.942282][T19459] netlink: 'syz.0.3962': attribute type 2 has an invalid length.
[  224.944089][T19461] netlink: 'syz.4.3969': attribute type 8 has an invalid length.
[  224.963857][T19462] batadv_slave_0: entered promiscuous mode
[  225.058169][T19472] batadv_slave_0: left promiscuous mode
[  225.708807][T19491] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  225.868805][T19508] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  225.973203][T19523] netlink: 'syz.2.3985': attribute type 32 has an invalid length.
[  226.060473][T19526] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  226.319495][T19572] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  226.513408][ T5996] IPVS: starting estimator thread 0...
[  226.598439][T19603] macvlan0: entered promiscuous mode
[  226.603956][T19603] macvlan0: entered allmulticast mode
[  226.617315][T19594] IPVS: using max 76 ests per chain, 182400 per kthread
[  226.971496][T19610] vxcan1 speed is unknown, defaulting to 1000
[  226.976883][T19611] netlink: 'syz.0.4004': attribute type 12 has an invalid length.
[  227.187498][T19610] hsr0 speed is unknown, defaulting to 1000
[  227.268375][T19634] block nbd4: NBD_DISCONNECT
[  227.273021][T19634] block nbd4: Send disconnect failed -32
[  227.279055][T19634] block nbd4: shutting down sockets
[  227.398367][T19649] bridge_slave_0: left allmulticast mode
[  227.404056][T19649] bridge_slave_0: left promiscuous mode
[  227.419316][T19649] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.460176][T19649] bridge_slave_1: left allmulticast mode
[  227.506292][T19649] bridge_slave_1: left promiscuous mode
[  227.512362][T19649] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.550859][T19649] bond0: (slave bond_slave_0): Releasing backup interface
[  227.570272][T19649] bond0: (slave bond_slave_1): Releasing backup interface
[  227.599205][T19649] team0: Port device team_slave_0 removed
[  227.616444][T19649] team0: Port device team_slave_1 removed
[  227.627602][T19649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.635065][T19649] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.643878][T19649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.651555][T19649] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.824487][T19677] netlink: 'syz.2.4022': attribute type 4 has an invalid length.
[  227.849851][T19681] netlink: 'syz.1.4024': attribute type 11 has an invalid length.
[  227.860234][T19679] __nla_validate_parse: 25 callbacks suppressed
[  227.860252][T19679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4023'.
[  227.930122][T19688] nbd: nbd2 already in use
[  227.944241][T19688] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4026'.
[  227.976121][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4023'.
[  228.140088][T19684] vxcan1 speed is unknown, defaulting to 1000
[  228.179279][T19697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4028'.
[  228.239104][T19697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4028'.
[  228.272941][T19699] openvswitch: netlink: IP tunnel dst address not specified
[  228.297640][T19701] netlink: 'syz.1.4029': attribute type 21 has an invalid length.
[  228.320477][T19701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4029'.
[  228.528296][T19684] hsr0 speed is unknown, defaulting to 1000
[  228.756237][T19739] netlink: 'syz.2.4040': attribute type 10 has an invalid length.
[  228.764274][T19739] batman_adv: batadv0: Removing interface: dummy0
[  228.808269][T19739] team0: Port device dummy0 added
[  228.959411][T19763] netlink: 'syz.2.4050': attribute type 29 has an invalid length.
[  228.968841][T19763] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4050'.
[  229.196263][T19785] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4056'.
[  229.324817][T19799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4060'.
[  229.388724][T19806] tipc: Enabled bearer <eth:ip_vti0>, priority 0
[  229.425087][T19815] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4063'.
[  229.500505][T19819] validate_nla: 1 callbacks suppressed
[  229.500523][T19819] netlink: 'syz.4.4067': attribute type 1 has an invalid length.
[  229.761732][T19849] netlink: 'syz.1.4076': attribute type 32 has an invalid length.
[  229.814072][T19849] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  229.842640][T19858] netlink: 'syz.1.4076': attribute type 29 has an invalid length.
[  229.884504][T19862] batadv_slave_1: Device is already in use.
[  230.004869][T19874] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  230.009768][T19878] nbd: couldn't find a device at index -373156329
[  230.033180][T19880] team0: No ports can be present during mode change
[  230.274612][T19907] netlink: 'syz.2.4092': attribute type 1 has an invalid length.
[  230.313586][T19906] netlink: 'syz.4.4093': attribute type 83 has an invalid length.
[  230.443362][T19929] netlink: 'syz.2.4100': attribute type 1 has an invalid length.
[  230.505532][ T5919] tipc: Node number set to 3116664867
[  230.513149][T19934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  230.530976][T19936] 8021q: adding VLAN 0 to HW filter on device bond4
[  230.534082][T19939] netlink: zone id is out of range
[  230.553565][T19930] netlink: 'syz.3.4101': attribute type 4 has an invalid length.
[  230.561739][T19939] netlink: get zone limit has 8 unknown bytes
[  230.618567][T19930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.626108][T19941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.633508][T19941] syzkaller0: entered promiscuous mode
[  230.639057][T19941] syzkaller0: entered allmulticast mode
[  230.646995][T19922] tipc: Resetting bearer <eth:syzkaller0>
[  230.711493][T19922] tipc: Disabling bearer <eth:syzkaller0>
[  230.721023][T19946] netem: invalid attributes len -24
[  230.726690][T19946] netem: change failed
[  230.740581][T19941] tipc: Resetting bearer <eth:syzkaller0>
[  230.769948][T19940] tipc: Resetting bearer <eth:syzkaller0>
[  230.785125][T19940] tipc: Disabling bearer <eth:syzkaller0>
[  230.850441][T19954] netlink: 'syz.3.4109': attribute type 1 has an invalid length.
[  230.875211][T19954] 8021q: adding VLAN 0 to HW filter on device bond4
[  230.909329][T19954] bond4: (slave veth9): Enslaving as an active interface with a down link
[  230.941225][T19954] veth11: entered promiscuous mode
[  230.949184][T19954] bond4: (slave veth11): Enslaving as an active interface with a down link
[  231.040151][T19970] netlink: 'syz.3.4113': attribute type 30 has an invalid length.
[  231.168246][T19980] netlink: 'syz.1.4117': attribute type 15 has an invalid length.
[  231.228740][T19985] team0 (unregistering): Port device team_slave_0 removed
[  231.243535][T19985] team0 (unregistering): Port device team_slave_1 removed
[  231.270045][T19994] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  231.411584][T20011] pim6reg1: entered promiscuous mode
[  231.435588][T20011] pim6reg1: entered allmulticast mode
[  231.522195][T20024] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  231.768467][T20056] bond5: entered promiscuous mode
[  231.773535][T20056] bond5: entered allmulticast mode
[  231.780808][T20056] 8021q: adding VLAN 0 to HW filter on device bond5
[  231.817967][T20056] bond5 (unregistering): Released all slaves
[  231.876094][T20058] bond5: entered promiscuous mode
[  231.881223][T20058] bond5: entered allmulticast mode
[  231.887017][T20058] 8021q: adding VLAN 0 to HW filter on device bond5
[  231.900474][T20058] bond5 (unregistering): Released all slaves
[  232.130377][T20085] delete_channel: no stack
[  232.241659][T20091] GUP no longer grows the stack in syz.4.4151 (20091): 200000003000-20000000a000 (200000001000)
[  232.253505][T20091] CPU: 1 UID: 0 PID: 20091 Comm: syz.4.4151 Not tainted syzkaller #0 PREEMPT(full) 
[  232.253531][T20091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  232.253543][T20091] Call Trace:
[  232.253550][T20091]  <TASK>
[  232.253558][T20091]  dump_stack_lvl+0x189/0x250
[  232.253586][T20091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.253605][T20091]  ? __pfx__printk+0x10/0x10
[  232.253626][T20091]  ? find_vma+0xe7/0x160
[  232.253648][T20091]  ? unwind_next_frame+0xa5/0x2390
[  232.253675][T20091]  __get_user_pages+0x24d0/0x2ce0
[  232.253696][T20091]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  232.253724][T20091]  ? __gup_longterm_locked+0xc68/0x1660
[  232.253753][T20091]  ? rcu_is_watching+0x15/0xb0
[  232.253772][T20091]  __gup_longterm_locked+0xde9/0x1660
[  232.253796][T20091]  ? sanity_check_pinned_pages+0x123a/0x1300
[  232.253819][T20091]  gup_fast_fallback+0x1e6a/0x2010
[  232.253852][T20091]  ? __pfx_gup_fast_fallback+0x10/0x10
[  232.253872][T20091]  ? stack_trace_save+0x9c/0xe0
[  232.253891][T20091]  ? __pfx_stack_trace_save+0x10/0x10
[  232.253915][T20091]  ? pin_user_pages_fast+0x4d/0xb0
[  232.253937][T20091]  iov_iter_extract_pages+0x35a/0x5e0
[  232.253962][T20091]  extract_iter_to_sg+0xe46/0x24e0
[  232.253996][T20091]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  232.254029][T20091]  ? __asan_memset+0x22/0x50
[  232.254048][T20091]  af_alg_get_rsgl+0x436/0x810
[  232.254076][T20091]  aead_recvmsg+0x4cc/0x13f0
[  232.254117][T20091]  ? __pfx_aead_recvmsg+0x10/0x10
[  232.254142][T20091]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  232.254161][T20091]  ? security_socket_recvmsg+0x7e/0x2e0
[  232.254182][T20091]  ? __pfx_aead_recvmsg+0x10/0x10
[  232.254205][T20091]  sock_recvmsg_nosec+0x183/0x1c0
[  232.254228][T20091]  ____sys_recvmsg+0x3aa/0x460
[  232.254249][T20091]  ? __pfx_____sys_recvmsg+0x10/0x10
[  232.254271][T20091]  ? import_iovec+0x74/0xa0
[  232.254292][T20091]  ___sys_recvmsg+0x1b5/0x510
[  232.254311][T20091]  ? __pfx____sys_recvmsg+0x10/0x10
[  232.254327][T20091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  232.254351][T20091]  ? __fget_files+0x2a/0x420
[  232.254382][T20091]  ? rcu_is_watching+0x15/0xb0
[  232.254398][T20091]  ? lock_release+0x4b/0x3e0
[  232.254419][T20091]  ? __might_fault+0xcc/0x130
[  232.254442][T20091]  do_recvmmsg+0x307/0x770
[  232.254463][T20091]  ? __pfx_do_recvmmsg+0x10/0x10
[  232.254480][T20091]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  232.254512][T20091]  ? __pfx_do_futex+0x10/0x10
[  232.254540][T20091]  __x64_sys_recvmmsg+0x190/0x240
[  232.254560][T20091]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  232.254577][T20091]  ? rcu_is_watching+0x15/0xb0
[  232.254596][T20091]  ? rcu_is_watching+0x15/0xb0
[  232.254613][T20091]  do_syscall_64+0xfa/0x3b0
[  232.254638][T20091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.254656][T20091]  ? clear_bhb_loop+0x60/0xb0
[  232.254676][T20091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.254693][T20091] RIP: 0033:0x7fd77e78ebe9
[  232.254718][T20091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.254735][T20091] RSP: 002b:00007fd77c9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  232.254759][T20091] RAX: ffffffffffffffda RBX: 00007fd77e9b5fa0 RCX: 00007fd77e78ebe9
[  232.254773][T20091] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b
[  232.254784][T20091] RBP: 00007fd77e811e19 R08: 0000000000000000 R09: 0000000000000000
[  232.254795][T20091] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  232.254805][T20091] R13: 00007fd77e9b6038 R14: 00007fd77e9b5fa0 R15: 00007fff66f3c808
[  232.254825][T20091]  </TASK>
[  232.663942][T20105] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  232.758537][T20118] delete_channel: no stack
[  232.942977][T20128] 8021q: adding VLAN 0 to HW filter on device team0
[  232.983672][T20128] team0: entered promiscuous mode
[  233.002760][T20128] team_slave_0: entered promiscuous mode
[  233.011879][T20128] team_slave_1: entered promiscuous mode
[  233.021439][T20128] bond0: (slave team0): Enslaving as an active interface with an up link
[  233.045098][T20139] syzkaller1: entered allmulticast mode
[  233.090349][T20128] 8021q: adding VLAN 0 to HW filter on device bond4
[  233.494896][T20172] __nla_validate_parse: 34 callbacks suppressed
[  233.494916][T20172] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4175'.
[  233.569567][T20169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4175'.
[  233.900678][T20197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4182'.
[  233.912123][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4182'.
[  233.921173][T20197] openvswitch: netlink: Unknown nsh attribute 0
[  233.938327][T20197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.338515][T20234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4192'.
[  234.348023][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4192'.
[  234.831834][T20226] vxcan1 speed is unknown, defaulting to 1000
[  234.843743][T11744] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.886159][T11744] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.902319][T11744] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.915916][T11744] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.929201][T11744] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.967450][T11744] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.978767][T11744] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.989010][T11744] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.073922][T20226] hsr0 speed is unknown, defaulting to 1000
[  235.073922][T20244] vxcan1 speed is unknown, defaulting to 1000
[  235.090429][T20282] validate_nla: 7 callbacks suppressed
[  235.090446][T20282] netlink: 'syz.2.4202': attribute type 4 has an invalid length.
[  235.138774][T20288] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4205'.
[  235.267259][T20282] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4202'.
[  235.286811][T20286] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032
[  235.287497][T20244] hsr0 speed is unknown, defaulting to 1000
[  235.305055][T20298] netlink: 'syz.1.4207': attribute type 10 has an invalid length.
[  235.313145][T20298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4207'.
[  235.341255][T20298] team0: Port device geneve0 added
[  235.379612][T20302] netlink: 'syz.1.4207': attribute type 10 has an invalid length.
[  235.380922][T20300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.403691][T20302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4207'.
[  236.048857][T20352] team_slave_0: mtu greater than device maximum
[  236.278982][T20365] 8021q: adding VLAN 0 to HW filter on device bond3
[  236.814810][T20391] veth1_macvtap: entered allmulticast mode
[  236.962362][T20411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.016116][T20422] IPVS: ip_vs_edit_dest(): server weight less than zero
[  237.135033][T20435] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  237.192480][T20435] team0: Device wireguard1 is of different type
[  237.221983][T20257] IPVS: starting estimator thread 0...
[  237.288102][T20451] netlink: 'syz.4.4254': attribute type 1 has an invalid length.
[  237.323475][T20445] IPVS: using max 45 ests per chain, 108000 per kthread
[  237.358820][T20451] tipc: Started in network mode
[  237.372310][T20451] tipc: Node identity 080211000001, cluster identity 4711
[  237.391497][T20451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.400011][T20451] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode
[  237.408009][T20451] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode
[  237.425141][T20451] tipc: Resetting bearer <eth:syzkaller0>
[  237.519953][T20474] vxcan1 speed is unknown, defaulting to 1000
[  237.559099][T20478] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  237.596931][T20483] ipvlan3: entered promiscuous mode
[  237.686616][T20488] netlink: 'syz.2.4260': attribute type 12 has an invalid length.
[  237.773789][T20474] hsr0 speed is unknown, defaulting to 1000
[  238.075677][T16987] tipc: Node number set to 2886997162
[  238.088002][T20531] openvswitch: netlink: Flow actions attr not present in new flow.
[  238.202120][T20537] hsr_slave_0: left promiscuous mode
[  238.227709][T20537] hsr_slave_1: left promiscuous mode
[  238.341940][T20548] netlink: 'syz.1.4286': attribute type 1 has an invalid length.
[  238.406277][ T5997] tipc: Node number set to 134418688
[  238.547487][T20560] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  238.601209][T20560] netlink: 'syz.0.4290': attribute type 13 has an invalid length.
[  238.609217][T20560] netlink: 'syz.0.4290': attribute type 58 has an invalid length.
[  238.635686][T20560] __nla_validate_parse: 32 callbacks suppressed
[  238.635705][T20560] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4290'.
[  238.717239][T20579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4300'.
[  238.722621][T20575] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  238.795938][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4300'.
[  238.805897][T20579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4300'.
[  238.861695][T20593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4304'.
[  238.984773][T20601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4306'.
[  238.996742][T20603] netlink: 'syz.4.4309': attribute type 1 has an invalid length.
[  239.029346][T20603] 8021q: adding VLAN 0 to HW filter on device bond4
[  239.043191][T20604] bond4: (slave geneve2): making interface the new active one
[  239.052664][T20604] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  239.086554][T11751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.108332][T11740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.124341][T20617] netlink: 'syz.4.4311': attribute type 1 has an invalid length.
[  239.124521][T11740] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.162193][T20617] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4311'.
[  239.179266][T11740] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.184182][T20617] nbd: couldn't find device at index 1048576
[  239.233805][T20617] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4311'.
[  239.255270][T20617] nbd: couldn't find device at index 1048576
[  239.265188][T20617] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4311'.
[  239.274451][T20628] veth0: entered promiscuous mode
[  239.296776][T20617] nbd: couldn't find device at index 1048576
[  239.304741][T20627] veth0: left promiscuous mode
[  239.307104][T20617] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4311'.
[  239.346760][T20617] nbd: couldn't find device at index 1048576
[  239.372813][T20617] nbd: couldn't find device at index 1048576
[  239.382472][T20617] nbd: couldn't find device at index 1048576
[  239.389168][T20617] nbd: couldn't find device at index 1048576
[  239.409459][T20617] nbd: couldn't find device at index 1048576
[  239.431238][T20617] nbd: couldn't find device at index 1048576
[  239.441207][T20617] nbd: couldn't find device at index 1048576
[  239.451100][T20617] nbd: couldn't find device at index 1048576
[  239.460845][T20617] nbd: couldn't find device at index 1048576
[  239.481387][T20617] nbd: couldn't find device at index 1048576
[  239.490093][T20617] nbd: couldn't find device at index 1048576
[  239.496577][T20617] nbd: couldn't find device at index 1048576
[  239.502813][T20617] nbd: couldn't find device at index 1048576
[  239.516905][T20617] nbd: couldn't find device at index 1048576
[  239.523567][T20617] nbd: couldn't find device at index 1048576
[  239.558699][T20617] nbd: couldn't find device at index 1048576
[  239.589916][T20617] nbd: couldn't find device at index 1048576
[  239.613444][T20617] nbd: couldn't find device at index 1048576
[  239.633779][T20617] nbd: couldn't find device at index 1048576
[  239.648897][T20617] nbd: couldn't find device at index 1048576
[  239.661027][T20617] nbd: couldn't find device at index 1048576
[  239.671368][T20617] nbd: couldn't find device at index 1048576
[  239.678808][T20617] nbd: couldn't find device at index 1048576
[  239.689256][T20617] nbd: couldn't find device at index 1048576
[  239.768449][T20617] nbd: couldn't find device at index 1048576
[  239.778428][T20617] nbd: couldn't find device at index 1048576
[  239.808304][T20617] nbd: couldn't find device at index 1048576
[  239.830510][T20617] nbd: couldn't find device at index 1048576
[  239.843358][T20617] nbd: couldn't find device at index 1048576
[  239.867651][T20617] nbd: couldn't find device at index 1048576
[  239.920519][T20682] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.978359][T20682] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.985554][T20682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.004889][T20682] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  240.260844][T20717] block nbd0: NBD_DISCONNECT
[  240.266964][T20717] block nbd0: Send disconnect failed -32
[  240.272628][T20717] block nbd0: shutting down sockets
[  240.691062][T20770] validate_nla: 33 callbacks suppressed
[  240.691080][T20770] netlink: 'syz.1.4365': attribute type 1 has an invalid length.
[  240.710961][T20779] bridge: RTM_NEWNEIGH with invalid ether address
[  240.799707][T20786] netlink: 'syz.1.4368': attribute type 1 has an invalid length.
[  241.221986][T20845] netlink: 'syz.4.4382': attribute type 1 has an invalid length.
[  241.453659][T20871] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 3, id = 0
[  241.517674][T20876] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode
[  241.525252][T20876] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode
[  241.538100][T20876] tipc: Resetting bearer <eth:syzkaller0>
[  241.804956][T20893] vxcan1 speed is unknown, defaulting to 1000
[  241.904612][T20893] hsr0 speed is unknown, defaulting to 1000
[  241.944212][T20907] netem: change failed
[  242.055154][T20918] netlink: 'syz.0.4413': attribute type 1 has an invalid length.
[  242.437667][T20951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.452384][T20948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.465211][T20934] syzkaller0: entered promiscuous mode
[  242.487710][T20934] syzkaller0: entered allmulticast mode
[  242.511344][T20946] syzkaller0: MTU too low for tipc bearer
[  242.524761][T20946] tipc: Disabling bearer <eth:syzkaller0>
[  242.570893][T20934] tipc: Resetting bearer <eth:syzkaller0>
[  242.607413][T20933] tipc: Resetting bearer <eth:syzkaller0>
[  242.630770][T20933] tipc: Disabling bearer <eth:syzkaller0>
[  242.937245][T20998] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  242.988637][T21003] netlink: 'syz.1.4435': attribute type 2 has an invalid length.
[  243.839936][T21090] __nla_validate_parse: 52 callbacks suppressed
[  243.839955][T21090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4462'.
[  243.916986][T21090] dvmrp0: entered allmulticast mode
[  243.993296][T21102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4465'.
[  244.084499][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4468'.
[  244.136575][T21109] bridge_slave_1 (unregistering): left allmulticast mode
[  244.147099][T21109] bridge_slave_1 (unregistering): left promiscuous mode
[  244.154403][T21109] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.156422][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4469'.
[  244.213371][T21121] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  244.229300][T21121] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4471'.
[  244.394418][T21128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4473'.
[  244.404194][T21137] netlink: 'syz.2.4474': attribute type 2 has an invalid length.
[  244.428352][T21128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4473'.
[  244.470119][T21127] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4473'.
[  244.556753][T21145] 8021q: adding VLAN 0 to HW filter on device bond5
[  244.565223][T21145] team0: Failed to send port change of device bond5 via netlink (err -105)
[  244.574334][T21145] team0: Failed to send options change via netlink (err -105)
[  244.583019][T21145] team0: Port device bond5 added
[  244.696976][T21160] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4483'.
[  244.712605][T21159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4483'.
[  244.745702][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  244.871592][T21179] netlink: 'syz.1.4487': attribute type 3 has an invalid length.
[  245.018353][T21188] netlink: zone id is out of range
[  245.023780][T21188] netlink: zone id is out of range
[  245.035624][T21188] netlink: zone id is out of range
[  245.040886][T21188] netlink: get zone limit has 8 unknown bytes
[  245.123369][T21206] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.133630][T21204] netlink: 'syz.3.4496': attribute type 1 has an invalid length.
[  245.170697][T21204] 8021q: adding VLAN 0 to HW filter on device bond6
[  245.182627][T21213] vlan1: entered allmulticast mode
[  245.188206][T21213] bond0: entered allmulticast mode
[  245.193412][T21213] bond_slave_0: entered allmulticast mode
[  245.199385][T21213] bond_slave_1: entered allmulticast mode
[  245.205179][T21213] batadv0: entered allmulticast mode
[  245.211614][T21213] bridge0: entered allmulticast mode
[  245.258380][T21204] veth15: entered promiscuous mode
[  245.271083][T21204] bond6: (slave veth15): Enslaving as an active interface with an up link
[  245.284222][T21222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.300054][T21223] netlink: 'syz.2.4500': attribute type 22 has an invalid length.
[  245.308067][T21225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.319048][T21221] netlink: 'syz.2.4500': attribute type 22 has an invalid length.
[  245.704575][T21249] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  245.891801][T21262] bond0: (slave bridge0): Releasing backup interface
[  245.915219][T21262] bridge0: left allmulticast mode
[  245.926817][T21262] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.943165][T21262] bond0: (slave batadv0): Releasing backup interface
[  245.954927][T21262] batadv0: left allmulticast mode
[  245.973316][T21262] bridge_slave_0: left allmulticast mode
[  245.981240][T21262] bridge_slave_0: left promiscuous mode
[  245.987309][T21262] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.001612][T21262] bond0: (slave bond_slave_0): Releasing backup interface
[  246.010378][T21262] bond_slave_0: left allmulticast mode
[  246.024089][T21262] bond0: (slave bond_slave_1): Releasing backup interface
[  246.036352][T21262] bond_slave_1: left allmulticast mode
[  246.057708][T21262] team0: Port device team_slave_0 removed
[  246.072988][T21262] team0: Port device team_slave_1 removed
[  246.079793][T21262] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.088591][T21262] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.096243][T21262] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.114772][T21262] team0: Port device geneve0 removed
[  246.122502][T21262] bond2: (slave geneve2): Releasing backup interface
[  246.235298][T11744] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  246.282004][T11744] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  246.300261][T11751] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  246.331561][T11751] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  246.354765][T21301] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  246.369958][T21300] validate_nla: 1 callbacks suppressed
[  246.369974][T21300] netlink: 'syz.2.4521': attribute type 10 has an invalid length.
[  246.406160][T21307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.593748][T21328] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode
[  246.617409][T21328] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode
[  246.664355][T21334] netlink: 'syz.4.4532': attribute type 10 has an invalid length.
[  246.707460][T21334] team0: Port device dummy0 added
[  246.772544][T21346] netlink: 'syz.2.4535': attribute type 5 has an invalid length.
[  247.028468][T21368] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  247.071443][T21368] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode
[  247.085988][T21368] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode
[  247.191327][T21395] netlink: 'syz.0.4549': attribute type 33 has an invalid length.
[  247.234974][T21384] netlink: 'syz.0.4549': attribute type 1 has an invalid length.
[  247.530398][T21423] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  247.664568][T21431] netlink: 'syz.1.4563': attribute type 12 has an invalid length.
[  247.877814][T21375] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  247.883805][T21375] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  247.894565][T21375] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  247.900554][T21375] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  247.954146][T21449] IPVS: length: 8 != 1152
[  248.003203][T21451] net_ratelimit: 2 callbacks suppressed
[  248.003223][T21451] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  248.134181][T21458] 8021q: adding VLAN 0 to HW filter on device bond6
[  248.297332][T21481] team0: Port device dummy0 removed
[  248.513431][T21497] netlink: 'syz.4.4582': attribute type 17 has an invalid length.
[  248.675846][T21511] netlink: 'syz.4.4586': attribute type 1 has an invalid length.
[  248.683654][T21511] nbd: error processing sock list
[  248.689099][T21511] block nbd0: shutting down sockets
[  249.634484][T21533] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  249.649202][T21533] netlink: 'syz.0.4594': attribute type 10 has an invalid length.
[  249.657319][T21533] mac80211_hwsim hwsim28 wlan1: left allmulticast mode
[  249.706546][ T5866] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  249.763095][T21543] __nla_validate_parse: 24 callbacks suppressed
[  249.763112][T21543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4595'.
[  249.812793][T21548] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4598'.
[  249.822085][T20271] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  250.701351][T21553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4600'.
[  250.882389][T21574] bond6: entered promiscuous mode
[  250.889403][T21574] bond6: entered allmulticast mode
[  250.894826][T21574] 8021q: adding VLAN 0 to HW filter on device bond6
[  250.971162][T21581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4610'.
[  250.980319][T21581] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4610'.
[  251.033792][T21586] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  251.083476][T21591] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy��آ
�D��UD�w�}�z�'
[  251.096047][T21591] CPU: 1 UID: 0 PID: 21591 Comm: syz.0.4614 Not tainted syzkaller #0 PREEMPT(full) 
[  251.096080][T21591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  251.096104][T21591] Call Trace:
[  251.096111][T21591]  <TASK>
[  251.096119][T21591]  dump_stack_lvl+0x189/0x250
[  251.096147][T21591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.096168][T21591]  ? __pfx__printk+0x10/0x10
[  251.096190][T21591]  ? kernfs_root+0x1c/0x230
[  251.096211][T21591]  ? kernfs_path_from_node+0x2f/0x290
[  251.096229][T21591]  ? kernfs_path_from_node+0x250/0x290
[  251.096247][T21591]  ? kernfs_path_from_node+0x2f/0x290
[  251.096267][T21591]  sysfs_warn_dup+0x8e/0xa0
[  251.096285][T21591]  sysfs_do_create_link_sd+0xc0/0x110
[  251.096304][T21591]  device_add_class_symlinks+0x1cf/0x240
[  251.096325][T21591]  device_add+0x475/0xb50
[  251.096344][T21591]  wiphy_register+0x1ba6/0x28d0
[  251.096376][T21591]  ? __pfx_wiphy_register+0x10/0x10
[  251.096398][T21591]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  251.096420][T21591]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  251.096440][T21591]  ieee80211_register_hw+0x3425/0x4080
[  251.096466][T21591]  ? ieee80211_register_hw+0x1471/0x4080
[  251.096489][T21591]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  251.096508][T21591]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  251.096534][T21591]  ? __hrtimer_setup+0x187/0x210
[  251.096551][T21591]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  251.096577][T21591]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  251.096610][T21591]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  251.096628][T21591]  ? trace_kmalloc+0x1f/0xd0
[  251.096647][T21591]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  251.096668][T21591]  ? kstrndup+0xbf/0x160
[  251.096690][T21591]  hwsim_new_radio_nl+0xea4/0x1b10
[  251.096710][T21591]  ? __pfx___nla_validate_parse+0x10/0x10
[  251.096740][T21591]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  251.096765][T21591]  ? __nla_parse+0x40/0x60
[  251.096788][T21591]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  251.096810][T21591]  genl_family_rcv_msg_doit+0x215/0x300
[  251.096833][T21591]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  251.096859][T21591]  ? bpf_lsm_capable+0x9/0x20
[  251.096882][T21591]  ? security_capable+0x7e/0x2e0
[  251.096909][T21591]  genl_rcv_msg+0x60e/0x790
[  251.096932][T21591]  ? __pfx_genl_rcv_msg+0x10/0x10
[  251.096950][T21591]  ? __kasan_slab_alloc+0x6c/0x80
[  251.096971][T21591]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  251.096991][T21591]  ? __netlink_lookup+0xbd/0x810
[  251.097005][T21591]  ? rcu_is_watching+0x15/0xb0
[  251.097026][T21591]  netlink_rcv_skb+0x208/0x470
[  251.097049][T21591]  ? __pfx_genl_rcv_msg+0x10/0x10
[  251.097078][T21591]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  251.097107][T21591]  ? lock_release+0x4b/0x3e0
[  251.097132][T21591]  ? down_read+0x1ad/0x2e0
[  251.097149][T21591]  genl_rcv+0x28/0x40
[  251.097166][T21591]  netlink_unicast+0x82c/0x9e0
[  251.097190][T21591]  ? __pfx_netlink_unicast+0x10/0x10
[  251.097213][T21591]  ? netlink_sendmsg+0x642/0xb30
[  251.097235][T21591]  ? skb_put+0x11b/0x210
[  251.097252][T21591]  netlink_sendmsg+0x805/0xb30
[  251.097279][T21591]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.097304][T21591]  ? futex_unqueue+0x22/0x240
[  251.097322][T21591]  ? aa_sock_msg_perm+0xf1/0x1d0
[  251.097338][T21591]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  251.097357][T21591]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.097381][T21591]  __sock_sendmsg+0x21c/0x270
[  251.097404][T21591]  ____sys_sendmsg+0x505/0x830
[  251.097424][T21591]  ? __pfx_____sys_sendmsg+0x10/0x10
[  251.097446][T21591]  ? import_iovec+0x74/0xa0
[  251.097467][T21591]  ___sys_sendmsg+0x21f/0x2a0
[  251.097485][T21591]  ? __pfx____sys_sendmsg+0x10/0x10
[  251.097505][T21591]  ? futex_wait+0x285/0x360
[  251.097540][T21591]  ? __fget_files+0x2a/0x420
[  251.097564][T21591]  ? __fget_files+0x3a0/0x420
[  251.097593][T21591]  __x64_sys_sendmsg+0x19b/0x260
[  251.097611][T21591]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  251.097637][T21591]  ? rcu_is_watching+0x15/0xb0
[  251.097655][T21591]  do_syscall_64+0xfa/0x3b0
[  251.097680][T21591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.097697][T21591]  ? clear_bhb_loop+0x60/0xb0
[  251.097716][T21591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.097733][T21591] RIP: 0033:0x7fe32558ebe9
[  251.097748][T21591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.097763][T21591] RSP: 002b:00007fe32647c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  251.097782][T21591] RAX: ffffffffffffffda RBX: 00007fe3257b5fa0 RCX: 00007fe32558ebe9
[  251.097796][T21591] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  251.097807][T21591] RBP: 00007fe325611e19 R08: 0000000000000000 R09: 0000000000000000
[  251.097818][T21591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.097829][T21591] R13: 00007fe3257b6038 R14: 00007fe3257b5fa0 R15: 00007ffd00eba048
[  251.097850][T21591]  </TASK>
[  306.825546][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  322.186730][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.345689][   T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds.
[  398.353278][   T31]       Not tainted syzkaller #0
[  398.358265][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.367038][   T31] task:kworker/0:1     state:D stack:23112 pid:10    tgid:10    ppid:2      task_flags:0x4208060 flags:0x00004000
[  398.379140][   T31] Workqueue: events rfkill_sync_work
[  398.384468][   T31] Call Trace:
[  398.388108][   T31]  <TASK>
[  398.391066][   T31]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  398.395840][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  398.401239][   T31]  ? __pfx___schedule+0x10/0x10
[  398.406443][   T31]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  398.412010][   T31]  ? lock_release+0x4b/0x3e0
[  398.445660][   T31]  ? rcu_is_watching+0x15/0xb0
[  398.451385][   T31]  schedule+0x165/0x360
[  398.461697][   T31]  schedule_preempt_disabled+0x13/0x30
[  398.469595][   T31]  __mutex_lock+0x7e6/0x1350
[  398.474237][   T31]  ? __mutex_lock+0x5bb/0x1350
[  398.479843][   T31]  ? rfkill_sync_work+0x2e/0x200
[  398.484889][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  398.490117][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  398.495935][   T31]  ? rcu_is_watching+0x15/0xb0
[  398.500715][   T31]  ? lock_acquire+0x5f/0x360
[  398.505286][   T31]  rfkill_sync_work+0x2e/0x200
[  398.510328][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  398.516125][   T31]  process_scheduled_works+0xae1/0x17b0
[  398.521714][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  398.527764][   T31]  worker_thread+0x8a0/0xda0
[  398.532353][   T31]  kthread+0x70e/0x8a0
[  398.536509][   T31]  ? __pfx_worker_thread+0x10/0x10
[  398.541617][   T31]  ? __pfx_kthread+0x10/0x10
[  398.546405][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  398.551608][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.556878][   T31]  ? __pfx_kthread+0x10/0x10
[  398.561472][   T31]  ret_from_fork+0x3f9/0x770
[  398.566099][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  398.571205][   T31]  ? __switch_to_asm+0x39/0x70
[  398.576023][   T31]  ? __switch_to_asm+0x33/0x70
[  398.580785][   T31]  ? __pfx_kthread+0x10/0x10
[  398.585694][   T31]  ret_from_fork_asm+0x1a/0x30
[  398.590487][   T31]  </TASK>
[  398.593595][   T31] INFO: task kworker/1:4:5968 blocked for more than 143 seconds.
[  398.601375][   T31]       Not tainted syzkaller #0
[  398.606350][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.615004][   T31] task:kworker/1:4     state:D stack:21768 pid:5968  tgid:5968  ppid:2      task_flags:0x4208060 flags:0x00004000
[  398.627175][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  398.633869][   T31] Call Trace:
[  398.637209][   T31]  <TASK>
[  398.640139][   T31]  __schedule+0x1798/0x4cc0
[  398.644639][   T31]  ? do_raw_spin_lock+0x121/0x290
[  398.649694][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  398.655073][   T31]  ? __pfx___schedule+0x10/0x10
[  398.660003][   T31]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  398.665744][   T31]  ? lock_release+0x4b/0x3e0
[  398.670340][   T31]  ? rcu_is_watching+0x15/0xb0
[  398.675091][   T31]  schedule+0x165/0x360
[  398.679279][   T31]  schedule_preempt_disabled+0x13/0x30
[  398.684833][   T31]  __mutex_lock+0x7e6/0x1350
[  398.689634][   T31]  ? __mutex_lock+0x5bb/0x1350
[  398.694406][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  398.700687][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  398.705900][   T31]  ? lock_acquire+0x5f/0x360
[  398.710515][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  398.716267][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  398.722332][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  398.728071][   T31]  process_scheduled_works+0xae1/0x17b0
[  398.733623][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  398.739636][   T31]  worker_thread+0x8a0/0xda0
[  398.744226][   T31]  kthread+0x70e/0x8a0
[  398.748460][   T31]  ? __pfx_worker_thread+0x10/0x10
[  398.753582][   T31]  ? __pfx_kthread+0x10/0x10
[  398.758899][   T31]  ? rcu_is_watching+0x15/0xb0
[  398.763671][   T31]  ? __pfx_kthread+0x10/0x10
[  398.768810][   T31]  ret_from_fork+0x3f9/0x770
[  398.773412][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  398.778626][   T31]  ? __switch_to_asm+0x39/0x70
[  398.783404][   T31]  ? __switch_to_asm+0x33/0x70
[  398.788432][   T31]  ? __pfx_kthread+0x10/0x10
[  398.793022][   T31]  ret_from_fork_asm+0x1a/0x30
[  398.798623][   T31]  </TASK>
[  398.801663][   T31] INFO: task kworker/1:6:5997 blocked for more than 143 seconds.
[  398.809650][   T31]       Not tainted syzkaller #0
[  398.814590][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  398.823537][   T31] task:kworker/1:6     state:D stack:23272 pid:5997  tgid:5997  ppid:2      task_flags:0x4208060 flags:0x00004000
[  398.835834][   T31] Workqueue: events rfkill_sync_work
[  398.841134][   T31] Call Trace:
[  398.844384][   T31]  <TASK>
[  398.847372][   T31]  __schedule+0x1798/0x4cc0
[  398.851885][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  398.857277][   T31]  ? __pfx___schedule+0x10/0x10
[  398.862138][   T31]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  398.867906][   T31]  ? lock_release+0x4b/0x3e0
[  398.872576][   T31]  ? rcu_is_watching+0x15/0xb0
[  398.877428][   T31]  schedule+0x165/0x360
[  398.881589][   T31]  schedule_preempt_disabled+0x13/0x30
[  398.887138][   T31]  __mutex_lock+0x7e6/0x1350
[  398.891731][   T31]  ? __mutex_lock+0x5bb/0x1350
[  398.896547][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  398.901840][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  398.907134][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  398.913035][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  398.919430][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  398.925155][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  398.930292][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  398.936030][   T31]  rfkill_set_block+0x1cf/0x440
[  398.940884][   T31]  rfkill_sync_work+0x114/0x200
[  398.945822][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  398.951543][   T31]  process_scheduled_works+0xae1/0x17b0
[  398.957139][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  398.963116][   T31]  worker_thread+0x8a0/0xda0
[  398.967745][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  398.974074][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  398.980002][   T31]  ? __kthread_parkme+0x7b/0x200
[  398.984934][   T31]  kthread+0x70e/0x8a0
[  398.989410][   T31]  ? __pfx_worker_thread+0x10/0x10
[  398.994541][   T31]  ? __pfx_kthread+0x10/0x10
[  398.999171][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.003931][   T31]  ? __pfx_kthread+0x10/0x10
[  399.008540][   T31]  ret_from_fork+0x3f9/0x770
[  399.013129][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  399.018287][   T31]  ? __switch_to_asm+0x39/0x70
[  399.023044][   T31]  ? __switch_to_asm+0x33/0x70
[  399.027873][   T31]  ? __pfx_kthread+0x10/0x10
[  399.032463][   T31]  ret_from_fork_asm+0x1a/0x30
[  399.037300][   T31]  </TASK>
[  399.040397][   T31] INFO: task syz.2.4552:21391 blocked for more than 144 seconds.
[  399.050330][   T31]       Not tainted syzkaller #0
[  399.055252][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  399.063944][   T31] task:syz.2.4552      state:D stack:25224 pid:21391 tgid:21391 ppid:15924  task_flags:0x400040 flags:0x00004004
[  399.076092][   T31] Call Trace:
[  399.079371][   T31]  <TASK>
[  399.082280][   T31]  __schedule+0x1798/0x4cc0
[  399.089001][   T31]  ? kernel_text_address+0xa5/0xe0
[  399.094132][   T31]  ? __kernel_text_address+0xd/0x40
[  399.099341][   T31]  ? unwind_get_return_address+0x4d/0x90
[  399.104981][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  399.111354][   T31]  ? __pfx___schedule+0x10/0x10
[  399.116889][   T31]  ? schedule+0x91/0x360
[  399.121123][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.125945][   T31]  ? lock_release+0x4b/0x3e0
[  399.130544][   T31]  schedule+0x165/0x360
[  399.134682][   T31]  schedule_timeout+0x9a/0x270
[  399.139472][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  399.144844][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.150879][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.155926][   T31]  ? wait_for_completion+0x267/0x5d0
[  399.161230][   T31]  wait_for_completion+0x2bf/0x5d0
[  399.166397][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  399.172038][   T31]  ? lock_release+0x4b/0x3e0
[  399.177264][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.182019][   T31]  ? __flush_work+0xd2/0xbc0
[  399.186737][   T31]  __flush_work+0x9b9/0xbc0
[  399.191237][   T31]  ? __flush_work+0xd2/0xbc0
[  399.196129][   T31]  ? __pfx___flush_work+0x10/0x10
[  399.201154][   T31]  ? __mutex_lock+0x335/0x1350
[  399.207037][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  399.212326][   T31]  ? __pfx___cancel_work+0x10/0x10
[  399.217490][   T31]  ? nfc_genl_device_removed+0x23c/0x330
[  399.223121][   T31]  __cancel_work_sync+0xbe/0x110
[  399.230782][   T31]  rfkill_unregister+0x92/0x220
[  399.235714][   T31]  nfc_unregister_device+0x96/0x2a0
[  399.240911][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  399.246915][   T31]  virtual_ncidev_close+0x56/0x90
[  399.251946][   T31]  __fput+0x44c/0xa70
[  399.255970][   T31]  task_work_run+0x1d4/0x260
[  399.260576][   T31]  ? __pfx_task_work_run+0x10/0x10
[  399.266029][   T31]  ? __pfx___se_sys_close_range+0x10/0x10
[  399.271759][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.277945][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.282718][   T31]  exit_to_user_mode_loop+0xec/0x110
[  399.288057][   T31]  do_syscall_64+0x2bd/0x3b0
[  399.292787][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.298901][   T31]  ? clear_bhb_loop+0x60/0xb0
[  399.303574][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.310767][   T31] RIP: 0033:0x7f4abc58ebe9
[  399.315187][   T31] RSP: 002b:00007ffeb1236a98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  399.323623][   T31] RAX: 0000000000000000 RBX: 00007f4abc7b7da0 RCX: 00007f4abc58ebe9
[  399.331630][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  399.340230][   T31] RBP: 00007f4abc7b7da0 R08: 0000000000000000 R09: 00000007b1236d8f
[  399.348243][   T31] R10: 000000000003fda8 R11: 0000000000000246 R12: 000000000003c8b7
[  399.356255][   T31] R13: 00007ffeb1236b90 R14: ffffffffffffffff R15: 00007ffeb1236bb0
[  399.364231][   T31]  </TASK>
[  399.367914][   T31] INFO: task syz.1.4573:21466 blocked for more than 144 seconds.
[  399.376259][   T31]       Not tainted syzkaller #0
[  399.381280][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  399.390055][   T31] task:syz.1.4573      state:D stack:25192 pid:21466 tgid:21465 ppid:15161  task_flags:0x400140 flags:0x00004004
[  399.403132][   T31] Call Trace:
[  399.406455][   T31]  <TASK>
[  399.409385][   T31]  __schedule+0x1798/0x4cc0
[  399.413902][   T31]  ? __pfx___schedule+0x10/0x10
[  399.418911][   T31]  ? schedule+0x91/0x360
[  399.423156][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.428680][   T31]  ? lock_release+0x4b/0x3e0
[  399.433261][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  399.439173][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  399.445534][   T31]  schedule+0x165/0x360
[  399.449762][   T31]  schedule_preempt_disabled+0x13/0x30
[  399.455214][   T31]  __mutex_lock+0x7e6/0x1350
[  399.460913][   T31]  ? __mutex_lock+0x5bb/0x1350
[  399.465755][   T31]  ? rfkill_register+0x37/0x8e0
[  399.470603][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  399.475667][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  399.481038][   T31]  ? device_initialize+0x24b/0x440
[  399.486766][   T31]  rfkill_register+0x37/0x8e0
[  399.491436][   T31]  nfc_register_device+0x14a/0x320
[  399.496574][   T31]  nci_register_device+0x87f/0x9d0
[  399.501696][   T31]  ? __pfx_nci_register_device+0x10/0x10
[  399.507355][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  399.512638][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  399.519101][   T31]  virtual_ncidev_open+0x129/0x1a0
[  399.524220][   T31]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  399.529975][   T31]  misc_open+0x2bc/0x330
[  399.534219][   T31]  chrdev_open+0x4c9/0x5e0
[  399.538704][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.543653][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  399.550991][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.555966][   T31]  do_dentry_open+0x950/0x13f0
[  399.560726][   T31]  vfs_open+0x3b/0x340
[  399.564768][   T31]  ? path_openat+0x2ecd/0x3830
[  399.569552][   T31]  path_openat+0x2ee5/0x3830
[  399.574151][   T31]  ? arch_stack_walk+0xfc/0x150
[  399.579611][   T31]  ? stack_depot_save_flags+0x40/0x860
[  399.585061][   T31]  ? __pfx_path_openat+0x10/0x10
[  399.590021][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.596138][   T31]  do_filp_open+0x1fa/0x410
[  399.600642][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  399.606319][   T31]  ? _raw_spin_unlock+0x28/0x50
[  399.611160][   T31]  ? alloc_fd+0x64c/0x6c0
[  399.615515][   T31]  do_sys_openat2+0x121/0x1c0
[  399.620187][   T31]  ? __se_sys_futex+0x36f/0x400
[  399.625030][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  399.630407][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.635184][   T31]  __x64_sys_openat+0x138/0x170
[  399.641180][   T31]  do_syscall_64+0xfa/0x3b0
[  399.645727][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.651772][   T31]  ? clear_bhb_loop+0x60/0xb0
[  399.656483][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.662374][   T31] RIP: 0033:0x7f9c6df8ebe9
[  399.667385][   T31] RSP: 002b:00007f9c6edb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  399.675838][   T31] RAX: ffffffffffffffda RBX: 00007f9c6e1b5fa0 RCX: 00007f9c6df8ebe9
[  399.683811][   T31] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  399.691819][   T31] RBP: 00007f9c6e011e19 R08: 0000000000000000 R09: 0000000000000000
[  399.700314][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.708324][   T31] R13: 00007f9c6e1b6038 R14: 00007f9c6e1b5fa0 R15: 00007ffd49ea2b38
[  399.716348][   T31]  </TASK>
[  399.719373][   T31] INFO: task syz.3.4576:21477 blocked for more than 144 seconds.
[  399.727743][   T31]       Not tainted syzkaller #0
[  399.732668][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  399.741360][   T31] task:syz.3.4576      state:D stack:28304 pid:21477 tgid:21476 ppid:17660  task_flags:0x400040 flags:0x00004004
[  399.753416][   T31] Call Trace:
[  399.757824][   T31]  <TASK>
[  399.760762][   T31]  __schedule+0x1798/0x4cc0
[  399.765264][   T31]  ? kasan_save_free_info+0x46/0x50
[  399.770490][   T31]  ? tomoyo_check_open_permission+0x2c2/0x3b0
[  399.776609][   T31]  ? vfs_open+0x3b/0x340
[  399.780847][   T31]  ? path_openat+0x2ee5/0x3830
[  399.786317][   T31]  ? do_sys_openat2+0x121/0x1c0
[  399.791155][   T31]  ? __x64_sys_openat+0x138/0x170
[  399.796310][   T31]  ? do_syscall_64+0xfa/0x3b0
[  399.800984][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.807119][   T31]  ? __pfx___schedule+0x10/0x10
[  399.811965][   T31]  ? schedule+0x91/0x360
[  399.817685][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.822451][   T31]  ? lock_release+0x4b/0x3e0
[  399.827074][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  399.832963][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  399.839348][   T31]  schedule+0x165/0x360
[  399.843502][   T31]  schedule_preempt_disabled+0x13/0x30
[  399.849563][   T31]  __mutex_lock+0x7e6/0x1350
[  399.854141][   T31]  ? __mutex_lock+0x5bb/0x1350
[  399.859039][   T31]  ? misc_open+0x51/0x330
[  399.863386][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  399.868449][   T31]  misc_open+0x51/0x330
[  399.872613][   T31]  chrdev_open+0x4c9/0x5e0
[  399.878144][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.883094][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  399.889468][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  399.894411][   T31]  do_dentry_open+0x950/0x13f0
[  399.899200][   T31]  vfs_open+0x3b/0x340
[  399.903259][   T31]  ? path_openat+0x2ecd/0x3830
[  399.908616][   T31]  path_openat+0x2ee5/0x3830
[  399.913193][   T31]  ? arch_stack_walk+0xfc/0x150
[  399.918085][   T31]  ? stack_depot_save_flags+0x40/0x860
[  399.923548][   T31]  ? rcu_is_watching+0x15/0xb0
[  399.928350][   T31]  ? __pfx_path_openat+0x10/0x10
[  399.933300][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.939989][   T31]  do_filp_open+0x1fa/0x410
[  399.944478][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  399.949546][   T31]  ? _raw_spin_unlock+0x28/0x50
[  399.954390][   T31]  ? alloc_fd+0x64c/0x6c0
[  399.958752][   T31]  do_sys_openat2+0x121/0x1c0
[  399.963423][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  399.969374][   T31]  ? lock_release+0x4b/0x3e0
[  399.973959][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  399.979272][   T31]  __x64_sys_openat+0x138/0x170
[  399.984116][   T31]  do_syscall_64+0xfa/0x3b0
[  399.988653][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.994723][   T31]  ? clear_bhb_loop+0x60/0xb0
[  400.000495][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.006455][   T31] RIP: 0033:0x7f9a5638ebe9
[  400.010872][   T31] RSP: 002b:00007f9a5725d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  400.019317][   T31] RAX: ffffffffffffffda RBX: 00007f9a565b5fa0 RCX: 00007f9a5638ebe9
[  400.027855][   T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  400.035862][   T31] RBP: 00007f9a56411e19 R08: 0000000000000000 R09: 0000000000000000
[  400.043862][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.051876][   T31] R13: 00007f9a565b6038 R14: 00007f9a565b5fa0 R15: 00007ffe12280828
[  400.060380][   T31]  </TASK>
[  400.063392][   T31] INFO: task syz.4.4595:21535 blocked for more than 145 seconds.
[  400.071245][   T31]       Not tainted syzkaller #0
[  400.076320][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  400.084977][   T31] task:syz.4.4595      state:D stack:26024 pid:21535 tgid:21534 ppid:16974  task_flags:0x400140 flags:0x00004004
[  400.098015][   T31] Call Trace:
[  400.101307][   T31]  <TASK>
[  400.104220][   T31]  __schedule+0x1798/0x4cc0
[  400.108776][   T31]  ? kasan_save_free_info+0x46/0x50
[  400.113987][   T31]  ? tomoyo_check_open_permission+0x2c2/0x3b0
[  400.120100][   T31]  ? vfs_open+0x3b/0x340
[  400.124430][   T31]  ? path_openat+0x2ee5/0x3830
[  400.129863][   T31]  ? do_sys_openat2+0x121/0x1c0
[  400.134792][   T31]  ? __x64_sys_openat+0x138/0x170
[  400.139851][   T31]  ? do_syscall_64+0xfa/0x3b0
[  400.144527][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.150613][   T31]  ? __pfx___schedule+0x10/0x10
[  400.156579][   T31]  ? schedule+0x91/0x360
[  400.160833][   T31]  ? rcu_is_watching+0x15/0xb0
[  400.165634][   T31]  ? lock_release+0x4b/0x3e0
[  400.170225][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  400.176164][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  400.182502][   T31]  schedule+0x165/0x360
[  400.187354][   T31]  schedule_preempt_disabled+0x13/0x30
[  400.192811][   T31]  __mutex_lock+0x7e6/0x1350
[  400.197462][   T31]  ? __mutex_lock+0x5bb/0x1350
[  400.202232][   T31]  ? misc_open+0x51/0x330
[  400.206591][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  400.211623][   T31]  misc_open+0x51/0x330
[  400.216903][   T31]  chrdev_open+0x4c9/0x5e0
[  400.221329][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  400.226312][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  400.232727][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  400.237718][   T31]  do_dentry_open+0x950/0x13f0
[  400.242497][   T31]  vfs_open+0x3b/0x340
[  400.247234][   T31]  ? path_openat+0x2ecd/0x3830
[  400.251988][   T31]  path_openat+0x2ee5/0x3830
[  400.256606][   T31]  ? arch_stack_walk+0xfc/0x150
[  400.261455][   T31]  ? stack_depot_save_flags+0x40/0x860
[  400.269018][   T31]  ? __pfx_path_openat+0x10/0x10
[  400.273954][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.280733][   T31]  do_filp_open+0x1fa/0x410
[  400.285225][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  400.290290][   T31]  ? _raw_spin_unlock+0x28/0x50
[  400.295150][   T31]  ? alloc_fd+0x64c/0x6c0
[  400.299645][   T31]  do_sys_openat2+0x121/0x1c0
[  400.304330][   T31]  ? __se_sys_futex+0x36f/0x400
[  400.309819][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  400.315011][   T31]  ? rcu_is_watching+0x15/0xb0
[  400.319828][   T31]  __x64_sys_openat+0x138/0x170
[  400.324677][   T31]  do_syscall_64+0xfa/0x3b0
[  400.329204][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.335263][   T31]  ? clear_bhb_loop+0x60/0xb0
[  400.340583][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.346835][   T31] RIP: 0033:0x7fd77e78ebe9
[  400.351271][   T31] RSP: 002b:00007fd77c9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  400.359755][   T31] RAX: ffffffffffffffda RBX: 00007fd77e9b5fa0 RCX: 00007fd77e78ebe9
[  400.368404][   T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  400.376432][   T31] RBP: 00007fd77e811e19 R08: 0000000000000000 R09: 0000000000000000
[  400.384405][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.392414][   T31] R13: 00007fd77e9b6038 R14: 00007fd77e9b5fa0 R15: 00007fff66f3c808
[  400.400938][   T31]  </TASK>
[  400.403958][   T31] INFO: task syz.0.4615:21594 blocked for more than 145 seconds.
[  400.411821][   T31]       Not tainted syzkaller #0
[  400.416810][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  400.427000][   T31] task:syz.0.4615      state:D stack:26024 pid:21594 tgid:21592 ppid:15626  task_flags:0x400140 flags:0x00004004
[  400.438939][   T31] Call Trace:
[  400.442215][   T31]  <TASK>
[  400.445129][   T31]  __schedule+0x1798/0x4cc0
[  400.449658][   T31]  ? kasan_save_free_info+0x46/0x50
[  400.454855][   T31]  ? tomoyo_check_open_permission+0x2c2/0x3b0
[  400.461546][   T31]  ? vfs_open+0x3b/0x340
[  400.465806][   T31]  ? path_openat+0x2ee5/0x3830
[  400.470569][   T31]  ? do_sys_openat2+0x121/0x1c0
[  400.475463][   T31]  ? __x64_sys_openat+0x138/0x170
[  400.481632][   T31]  ? do_syscall_64+0xfa/0x3b0
[  400.486951][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.493041][   T31]  ? __pfx___schedule+0x10/0x10
[  400.497938][   T31]  ? schedule+0x91/0x360
[  400.502174][   T31]  ? rcu_is_watching+0x15/0xb0
[  400.507047][   T31]  ? lock_release+0x4b/0x3e0
[  400.511640][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  400.518787][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  400.525146][   T31]  schedule+0x165/0x360
[  400.529325][   T31]  schedule_preempt_disabled+0x13/0x30
[  400.534806][   T31]  __mutex_lock+0x7e6/0x1350
[  400.539452][   T31]  ? __mutex_lock+0x5bb/0x1350
[  400.544228][   T31]  ? misc_open+0x51/0x330
[  400.549198][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  400.554225][   T31]  misc_open+0x51/0x330
[  400.558443][   T31]  chrdev_open+0x4c9/0x5e0
[  400.562862][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  400.567817][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  400.574148][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  400.579710][   T31]  do_dentry_open+0x950/0x13f0
[  400.584471][   T31]  vfs_open+0x3b/0x340
[  400.588590][   T31]  ? path_openat+0x2ecd/0x3830
[  400.593356][   T31]  path_openat+0x2ee5/0x3830
[  400.598000][   T31]  ? arch_stack_walk+0xfc/0x150
[  400.602962][   T31]  ? stack_depot_save_flags+0x40/0x860
[  400.609116][   T31]  ? __pfx_path_openat+0x10/0x10
[  400.614049][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.620164][   T31]  do_filp_open+0x1fa/0x410
[  400.624675][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  400.629869][   T31]  ? _raw_spin_unlock+0x28/0x50
[  400.634731][   T31]  ? alloc_fd+0x64c/0x6c0
[  400.639735][   T31]  do_sys_openat2+0x121/0x1c0
[  400.644409][   T31]  ? __se_sys_futex+0x36f/0x400
[  400.650012][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  400.655305][   T31]  ? __pfx___se_sys_futex+0x10/0x10
[  400.660651][   T31]  ? rcu_is_watching+0x15/0xb0
[  400.666191][   T31]  __x64_sys_openat+0x138/0x170
[  400.671040][   T31]  do_syscall_64+0xfa/0x3b0
[  400.675676][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.681741][   T31]  ? clear_bhb_loop+0x60/0xb0
[  400.686515][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.692453][   T31] RIP: 0033:0x7fe32558ebe9
[  400.698082][   T31] RSP: 002b:00007fe32645b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  400.706555][   T31] RAX: ffffffffffffffda RBX: 00007fe3257b6090 RCX: 00007fe32558ebe9
[  400.714524][   T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  400.722552][   T31] RBP: 00007fe325611e19 R08: 0000000000000000 R09: 0000000000000000
[  400.731176][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.739290][   T31] R13: 00007fe3257b6128 R14: 00007fe3257b6090 R15: 00007ffd00eba048
[  400.747344][   T31]  </TASK>
[  400.750377][   T31] INFO: lockdep is turned off.
[  400.755129][   T31] NMI backtrace for cpu 1
[  400.755143][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  400.755154][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  400.755160][   T31] Call Trace:
[  400.755165][   T31]  <TASK>
[  400.755170][   T31]  dump_stack_lvl+0x189/0x250
[  400.755186][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  400.755197][   T31]  ? __pfx__printk+0x10/0x10
[  400.755212][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  400.755225][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  400.755236][   T31]  ? __pfx__printk+0x10/0x10
[  400.755249][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  400.755264][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  400.755275][   T31]  watchdog+0xf93/0xfe0
[  400.755289][   T31]  ? watchdog+0x1de/0xfe0
[  400.755302][   T31]  kthread+0x70e/0x8a0
[  400.755323][   T31]  ? __pfx_watchdog+0x10/0x10
[  400.755341][   T31]  ? __pfx_kthread+0x10/0x10
[  400.755358][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  400.755377][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.755396][   T31]  ? __pfx_kthread+0x10/0x10
[  400.755415][   T31]  ret_from_fork+0x3f9/0x770
[  400.755433][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  400.755452][   T31]  ? __switch_to_asm+0x39/0x70
[  400.755472][   T31]  ? __switch_to_asm+0x33/0x70
[  400.755498][   T31]  ? __pfx_kthread+0x10/0x10
[  400.755517][   T31]  ret_from_fork_asm+0x1a/0x30
[  400.755543][   T31]  </TASK>
[  400.895538][   T31] Sending NMI from CPU 1 to CPUs 0:
[  400.900913][    C0] NMI backtrace for cpu 0
[  400.900936][    C0] CPU: 0 UID: 0 PID: 11749 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) 
[  400.900954][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  400.900964][    C0] Workqueue: events_unbound toggle_allocation_gate
[  400.900998][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x11/0x90
[  400.901023][    C0] Code: 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 50 a0 92 <65> 8b 0d a8 a0 e0 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75
[  400.901036][    C0] RSP: 0018:ffffc9000490f978 EFLAGS: 00000246
[  400.901050][    C0] RAX: ffffffff818371b3 RBX: 0000000000000000 RCX: ffff88804f609e00
[  400.901061][    C0] RDX: ffff88804f609e00 RSI: 0000000000000000 RDI: 0000000000000000
[  400.901072][    C0] RBP: ffffc9000490fa70 R08: 0000000000000001 R09: 0000000000000000
[  400.901082][    C0] R10: dffffc0000000000 R11: fffffbfff1c4af34 R12: 1ffff92000921f34
[  400.901094][    C0] R13: ffff888026b75518 R14: dffffc0000000000 R15: dffffc0000000000
[  400.901106][    C0] FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  400.901119][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  400.901130][    C0] CR2: 00007f3005a4212f CR3: 000000000df36000 CR4: 00000000003526f0
[  400.901144][    C0] Call Trace:
[  400.901150][    C0]  <TASK>
[  400.901156][    C0]  cpus_read_lock+0x93/0x160
[  400.901180][    C0]  static_key_disable+0x12/0x20
[  400.901201][    C0]  toggle_allocation_gate+0x1a1/0x240
[  400.901221][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  400.901240][    C0]  ? rcu_is_watching+0x15/0xb0
[  400.901255][    C0]  ? lock_acquire+0x5f/0x360
[  400.901278][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  400.901293][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  400.901308][    C0]  process_scheduled_works+0xae1/0x17b0
[  400.901335][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  400.901357][    C0]  worker_thread+0x8a0/0xda0
[  400.901384][    C0]  kthread+0x70e/0x8a0
[  400.901402][    C0]  ? __pfx_worker_thread+0x10/0x10
[  400.901417][    C0]  ? __pfx_kthread+0x10/0x10
[  400.901436][    C0]  ? rcu_is_watching+0x15/0xb0
[  400.901451][    C0]  ? __pfx_kthread+0x10/0x10
[  400.901468][    C0]  ret_from_fork+0x3f9/0x770
[  400.901485][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  400.901503][    C0]  ? __switch_to_asm+0x39/0x70
[  400.901522][    C0]  ? __switch_to_asm+0x33/0x70
[  400.901539][    C0]  ? __pfx_kthread+0x10/0x10
[  400.901556][    C0]  ret_from_fork_asm+0x1a/0x30
[  400.901582][    C0]  </TASK>
[  400.902108][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  401.153432][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  401.162525][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  401.172560][   T31] Call Trace:
[  401.175841][   T31]  <TASK>
[  401.178758][   T31]  dump_stack_lvl+0x99/0x250
[  401.183351][   T31]  ? __asan_memcpy+0x40/0x70
[  401.187941][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  401.193132][   T31]  ? __pfx__printk+0x10/0x10
[  401.197717][   T31]  vpanic+0x281/0x750
[  401.201698][   T31]  ? __pfx_vpanic+0x10/0x10
[  401.206186][   T31]  ? preempt_schedule+0xae/0xc0
[  401.211027][   T31]  ? preempt_schedule_common+0x83/0xd0
[  401.216501][   T31]  panic+0xb9/0xc0
[  401.220209][   T31]  ? __pfx_panic+0x10/0x10
[  401.224607][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  401.229976][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  401.236113][   T31]  watchdog+0xfd2/0xfe0
[  401.240257][   T31]  ? watchdog+0x1de/0xfe0
[  401.245014][   T31]  kthread+0x70e/0x8a0
[  401.249067][   T31]  ? __pfx_watchdog+0x10/0x10
[  401.253742][   T31]  ? __pfx_kthread+0x10/0x10
[  401.258316][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  401.263501][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  401.268750][   T31]  ? __pfx_kthread+0x10/0x10
[  401.273324][   T31]  ret_from_fork+0x3f9/0x770
[  401.277899][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  401.282996][   T31]  ? __switch_to_asm+0x39/0x70
[  401.287744][   T31]  ? __switch_to_asm+0x33/0x70
[  401.292494][   T31]  ? __pfx_kthread+0x10/0x10
[  401.297073][   T31]  ret_from_fork_asm+0x1a/0x30
[  401.301831][   T31]  </TASK>
[  401.305076][   T31] Kernel Offset: disabled
[  401.309495][   T31] Rebooting in 86400 seconds..