last executing test programs:

23.793798731s ago: executing program 2 (id=1613):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1405, 0x400, 0x70bd25, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)

22.884075058s ago: executing program 2 (id=1635):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
recvfrom$rose(r1, &(0x7f0000000180)=""/245, 0xf5, 0x2, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r4 = socket(0x1e, 0x4, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, &(0x7f0000000040))
sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000084) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r0, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "088435", 0x14, 0x6, 0x45d5e05ff8f6b6be, @remote, @loopback, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4}}}}}}}, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000280)={@local, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "60c1", "b162c9", 0x88f5, "8cc62f82a1b2d61387e1300c6acbd76e9be20ab1bff5bd27916f450743d6c24acc6afd4e30dcc3a7a1d774da36fbfb3fca6a411082660d6df59115d6f0cd6684034ef70917514ee0fef2b6"}}}}}, 0x0) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x3, @local, 0x8001}], 0x3c)

21.911279271s ago: executing program 2 (id=1652):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000)
unshare(0x44000000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) (async)
r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e)
accept$unix(r4, &(0x7f0000000240), &(0x7f00000002c0)=0x6e)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000008000000000000000000000300000000010000000200000000000000009ac55a50"], 0x0, 0x52}, 0x20)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x28}}, 0x0)

21.734553548s ago: executing program 3 (id=1654):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1ac, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a80ed85}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x779b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa076}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb273}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33de7124}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x817d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bbd2af}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75f1d908}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29af}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa30a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x754c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f1e467a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf4c0995}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1760f9fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3687}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x130a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bac0db5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dbb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x581cad9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31561c73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fc02e87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51e6b967}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9114d65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe019a6e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x157d2916}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x499b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b19}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cb2a2a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ee683ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d23b02f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffff5}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ff853f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63b3cd4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x273cf3e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1832}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x477d3cd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x148aa142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19b8246b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34ce}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8d1d964}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20044010) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1ac, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a80ed85}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x779b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa076}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb273}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33de7124}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x817d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bbd2af}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75f1d908}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29af}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa30a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x754c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f1e467a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf4c0995}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1760f9fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3687}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x130a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bac0db5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dbb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x581cad9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31561c73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fc02e87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51e6b967}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9114d65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe019a6e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x157d2916}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x499b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b19}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cb2a2a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ee683ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d23b02f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffff5}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ff853f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63b3cd4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x273cf3e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1832}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x477d3cd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x148aa142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19b8246b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34ce}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8d1d964}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20044010)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null]}, 0x48) (async)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null]}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xc80, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xc80, 0x0)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x80000000)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={'veth1_to_bridge\x00', {0x2, 0x4e22, @rand_addr=0x64010102}})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) (async)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x40080)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000580)={'pimreg\x00', @remote})
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan1\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x41) (async)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x41)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800), &(0x7f0000000840)=0xc) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={<r7=>0x0}, &(0x7f0000000840)=0xc)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001c80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c40)={&(0x7f0000000880)={0x13bc, 0x12, 0x800, 0x70bd2c, 0x25dfdbfe, {0x9, 0xf1, 0xd, 0x5, {0x4e22, 0x4e23, [0x3, 0x75, 0xffffffff, 0x7], [0x5c2, 0xff, 0x5, 0x593], r7, [0x9, 0x167]}, 0x6, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "3ce1c45a1fd428fd416118e3c3960b9689a1a7382be53512eaa2594f515154229b9ec6c07987787909370dcc55fc7fb32b5df166469fc5109a94bdfc9f00d025354af12b3cef1998102149c24a854651ef55cb68eefb1744efeaae90127c4723fd613024b4406f2d4ac1a04d7f6755ef7c49c4de9d34004665487bfe90d519a52c839ae08940cd7a9e95d87f3f429cf8a89f4702d78312337cc79603e76e8eff505d1c8f50385611e869a9f4ebb05329b3fa9ad694928b54"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "7245c7e0ffa6a3e978fb19a19c6e0ab84db690ab9e9d3bb30c5abafb903ea777b76bcf66da3c2824d18f135092e78a1f6feb2913159294baad18d53083d422cf0d4f50200a3a95bcad9a8fca"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "2a4e739c675d92244b8b8bc5ededebee620b2db8bb470d1050d68a7dc8ea9177f15eb96c2678bca63459ab8b4207c2bd6a4971528199978a145c0578acea443fafc7d00115279c330244281ba288ece9c8ab290b95ba8075997b73dd7b488cb2574aa68eca06a1a1dc8c2af12ad802976d396947ac7095c78f17d45079f9"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "1be80ef5634dde0ba4e8a0c1e369f2816c5d933aed1d898cef6b9d8fe0105ffbc94ae637142f1c3faf077f1943f6ecb829160b6c0421f9261ba6947b7e8059663e5a9d058498173242603c66575a435466eae90a21dc4fac17a392fa5979d3b20372383caea2f9e2051057038f903ac468258f6050"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "9166778c48e108c8d5ff245554e7abcf08d44894e7590444066d555475245aa458c70a72f38529c44cfd775f48435879c95ea831b276f9c9109fc002e29932d6764a7cfe42aae749ea1a0f549b871b9f14e24d65aaed401448801e"}]}, 0x13bc}}, 0x4014)
accept$inet(0xffffffffffffffff, &(0x7f0000001cc0)={0x2, 0x0, @initdev}, &(0x7f0000001d00)=0x10) (async)
r8 = accept$inet(0xffffffffffffffff, &(0x7f0000001cc0)={0x2, 0x0, @initdev}, &(0x7f0000001d00)=0x10)
getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000001e40)={'filter\x00', 0x0, 0x3, 0x98, [0x8, 0x4, 0xb7c, 0x80, 0x7ff, 0x50bc6d48000000], 0x3, &(0x7f0000001d40)=[{}, {}, {}], &(0x7f0000001d80)=""/152}, &(0x7f0000001ec0)=0x78)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x5)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000002000)={@none, 0x9})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0x8c, r11, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xea}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x33}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x88d4)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000002240), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002280)=<r13=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000022c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000022c0)=<r14=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x10020400}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x24, r12, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x84)

21.617257687s ago: executing program 2 (id=1656):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0)

21.4738882s ago: executing program 3 (id=1658):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x50}}, 0x0)

21.414430103s ago: executing program 3 (id=1659):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000206030000000000000000000000000010000300686173683a69702c6d6163000900020073797a31000000000c00078008000640000072f1050005000200000005000400000000000d0001000700000002a2e7b4c883aa72123155c499733dfcae9e5fb6d94be37bb9ad151ea1c6bd18f87bbe97d0b66aa1085cbf7787bdecdfe2892e4d5757efc2c4f88e17f935427c"], 0x54}}, 0x4040000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x220c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x3)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x60000040)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x9)
r10 = socket(0xa, 0x1, 0x0)
listen(r10, 0x7f)
listen(0xffffffffffffffff, 0x0)
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)

21.328314886s ago: executing program 2 (id=1661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x201, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x3b32569671e33a1e}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, r7, 0x200, 0x9, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x104}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x792f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x95e4}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd064}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040}, 0x15)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, @val=@tcx}, 0x1c)
bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r8}, 0x8)

21.321775851s ago: executing program 3 (id=1662):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20008000)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5], 0x1c0}, 0x1, 0x0, 0x0, 0x40080c4}, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x140e, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0xc084)
ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201)
close(0x3)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=ANY=[@ANYBLOB="202700002c0007012bbd7000ffdbdf25047c0000280301802103dd802001e98008004600", @ANYRES32, @ANYBLOB="1401ba80040079800400c180d15806e759d3c3f646a8da9670688629e2bb6399b4987b58df9f74930c23deafc677fe2aa5a6b67e2adacde02ec5b5e461115f3288ae4ac28cca1c9b2996f76f1025c2a5d1a26a1ad57dfcd4650286dbf5cf7b1105042b41f72d0391157514cc9b360f3395a70ee8ed5ed190270e6c43fbc6e61fd0f65211d97c51d9496ee0d36d8ee881dd0b7c0a8319efa114f4085cd077236b3c8b1a9a5c8cb8b81a2984840f741c8816af01ea4ad03cef18e000876b332532067bca3d3c35e47b1c1b5e1c94a8731be24dbe10f3bf3cfa49b3bf76968c4cb32cc6e7af47607f9a6157e020011d9b4fd8eca028c3cb7f4d19ec78496ca01c46768c7619f9dd5d9f0c006f000400000000000000ae014180d06869f78652a94a6f6ffdbb17a5dd1b1557160bd4f80a77e454fcebc11ec2bb2b24b0a040795a213fd5528fe94f25b0714ce43829fec955021fde36b00ca70cbeb1fcbf8ebebfe9c862bbc070fe60e5aa4444ea00e5aee6c4167c7d0ce9bf2d0f8291e2875b7950372bab9c393b6ebf929dbe58b9fa8827e1113a228f7d71fb2cc418cf57f63ff3e7c97e981a7d1df5f9c232ac4848e9b9e63446b12f8b7b18c3d4f3fd2d3160e2f13b49f430fc32ea670196532a8f3e67d9899631ce431d9ef051c706ec1d66b8bfb2e9d04ec18308b4cc9c9d901935b3397b8612a6d9888e83baf346998bd00e5ce3234d5ae3ed182c4f696d4e1aa29863737f50042f5041e45ecc4b59d6043380fb234434c50036c390590f0c67e1c129eac0898d489de7995faee3d2c5ebf3290e7b98dcac4e5eead30d9dcee3189b1e13e43d1b694949b6912fe52329c61625de8aa3177545dbdf7af158748143ba9a60e4926c0888f40a61ff0f548c7a94a658dacaedf2c466f3f4e68e02fe81ee376755d69756890cce7d7ca059c94b2b10a08b52d6feb29f0e9ed20845f7120a75c51e0e336a0d8fcee20800b000", @ANYRES32, @ANYBLOB="0000227082d57c5848d403e212111b7355941a4abee53192f9ad0ca4033342783801144c6ba1ea7845071729e825b33f1a20fe09b8762b86d910fab7e0264c14550e4b91c89f69764109add4c2854f000000e42303800c0001"], 0x2720}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0)

21.10799327s ago: executing program 3 (id=1666):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket(0x11, 0x2, 0x0)
setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10)
close(r2)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)

20.965461271s ago: executing program 3 (id=1670):
r0 = socket$key(0xf, 0x3, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300021c0000000000000000000000120008003804000045ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42ab7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db3900030006000000000002000000ac14140000000000000000000200010000000000000006fc0000000003000500000000000200"/218], 0xe0}, 0x1, 0x7}, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080))

20.905251043s ago: executing program 2 (id=1671):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000000e06010200000000000000400c000009"], 0x14}}, 0x28000000)
close(0x3)

20.873229751s ago: executing program 1 (id=1672):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000080)="fdf01518f028641237a010d777b2d9590b2b558b3e313c50c8f983c217a30ea9017a6107e047dbd42009c5276b203a249af8fc5b03545f16854a9176eb205c5f833d7e8058d8bce1ba2e7be39cbd067101d071c7c958cebdfb2d2e936119b38d610e36caf8fa5de971824849e4054dcef321307ad3326cc45b4eaa5edd1d65c2af910dd6fd3ac326b430ae4ff1f5161a11f2c7a8e4f4dd539eba3e82d2cda77e5faf013c11c1749f77371b", 0xab)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast1}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0)

20.740669357s ago: executing program 1 (id=1674):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x0)
read(r2, &(0x7f0000000300)=""/93, 0x5d)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r4=>0x0})
pipe(0x0)
setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x38, r3, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x69}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0x5, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x29}, 0x28)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x49, 0x6, 0x3, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x5, 0x8, 0xf, 0x0, [0x4006, 0x6]}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x8, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={<r10=>0x0, 0x5244, 0x2, 0x5}, &(0x7f0000000080)=0x10)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000540)={0x1100, 0x204, 0x52, 0x10000})
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000100)={r10, 0xbca7, 0x361}, 0x8)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r7, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}, 0x1, 0x0, 0x0, 0x300008c5}, 0x4004850)
socket$nl_route(0x10, 0x3, 0x0)

20.578147838s ago: executing program 1 (id=1676):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r1=>0x0, 0x0, 0x10, 0x0, 0xbe, 0x0, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x401, 0x7fff}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r2=>0x0})
sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="fca49c5b9ad8fc5175745ccdd2c3f52ec9b0df256f0966f2e68ecdb8c3038c9d98bcc396206a3d2aa4e4047e55947305457068a528629fe053a1c3791610d4bc7e913639b710c157952afc77da063e3bcfe1b84767677cb47bcd8855026c71b3771f2b5b40", 0x65}, {&(0x7f0000000100)="bf21de56cd798c813d802cc9b0004e552068ac05d5ab5113a4f0042aa96ed50f66ae9d2b850572b6b9b2", 0x2a}, {&(0x7f0000000140)="8994c00e8e591acba2852423b2ee2f82cbe21f2631bea28afa08a0298c9267095ca884fd6f4dea413d7f94779991db7fe3222cceef57a35f06544bb5a8f4480a583b5f9a5fb16472c2920ac14ddc984573ded7ce5df2e8f2d899db6f73c9cad5d4695c2c62323d5c0ed0034600183039ca6483651c9103952e961de09565d9547cf2e4684661fcee5b0cc9c9d313dabf956ee2559d908310e1a4befd4b317c20db6bffe4f40466c8eb", 0xa9}], 0x3, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x32, {@private0, r1}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x21, 0x16, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x6, [0x80000001, 0x7ff]}}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x10}, @generic={0x3, 0x81, "0153600675a769e374afb032f14d5eec8417f88d2b616800e8342e59206942b3c74bf07d2313b9e4181298176e66b9ba01fe58eacd5159c6d8a8cfd5d6d4407d78ca3883dc6a239dd96f5e89d3adb9588743cb713117155773e041fdab89d37382fd85d6b4166fe998966f383fd9cc943a529478c96cc4b642595813143f22e79c"}, @enc_lim={0x4, 0x1, 0x4}]}}}, @dstopts={{0x40, 0x29, 0x37, {0x33, 0x4, '\x00', [@pad1, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x10}, @pad1, @jumbo={0xc2, 0x4, 0xffffff50}]}}}], 0x160}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x6}}, 0x9}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000500)="f788d4d8e84d463491c149d72679736b30baa84d489c1fd4dd9df76eda4cc380e0cf5fae7adbfcf7df7731d0d190be7b5e9c6da12ed312a80fdfbc607ac041708956c86f142242a835385611b90ea4a02c6f562b6862f0caf7e881452686e7462c0a850d57e14850ec0e95e772223cc69db4edb93b24aad570156385fbc738b79297456c206967b15423a0a49928db7fc929f22425067d1cb81194e6dd2b229689d7e97ea28fda44ce465159cbe3c99c0848827406e3010aafa1fd977ef7aa06c9d286459f582b4578ec4b207406db38d52cfd6ed460b83b", 0xd8}, {&(0x7f0000000600)="bb6c3175", 0x4}, {&(0x7f0000000640)="c95afea0b2637c5e8678df03b41217bf2a4c20c66cbc7e22c7fa27ceea4be12b750c7dcae66ebf8eca953190cfb46a8656839d2639800f4437e9f6bb946c0736be96f7e0f72d04741d", 0x49}, {&(0x7f00000006c0)="67468266b2dd2b4102eeb4f8ad32b16b7a78816a339e12c8f41983cea87adadaa1b971a4c0837f10fd", 0x29}, {&(0x7f0000000700)="c9a588ad64580a3ee81192f5d82645b147008051644b34270d41def480cbe3921f05c797b360a6bca6409e198489447a6fbb1b677be32eee0878aa9ef53033567600ab0fcf44633ed8a3571754dc093c288c73098d8b96720b18d7c2f81cf7959142d7eff68381205a1a8b7449bac5b09f56824c4804cca17a561b762d6bc3f1b784a45170fed5af9c5bf7a70d71947546cf2c9d498acfc52a0a58aa2986d7ff5b0b4e931923fcb056998460a03851b9755c72f0", 0xb4}, {&(0x7f00000007c0)="2384", 0x2}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="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", 0xfe}, {&(0x7f0000001900)="c6947717ca5c1b9f1ca454828b9aaec27493476208249dce110ee7fdaeadea93192d0edb63bcf062e042e1c5eae157f47fede8a6706051b63ef9e4058f06b614263f571cdb3791b1f9d93d3ba8588caf98780c1c9992e6e5d7f68a36c1d87ce115caa8d25d86fb8957efc1520bb94bc87906f2a7525d7d31767a7a192f2c2b64aa1efe277b657a59a7b2be45951f15a581ecbfdb0799cdcce7806b2d67c297fa4cf2bd222837d1eb2da516a23a19fdef0ac66179c6a98be3fd38352bc93156c4e36a080d6468076f083be6f4df1baa9704d7b37605d6742b2215b29913fe9f44c43ed3f8477700", 0xe7}, {&(0x7f0000001a00)="2723cded465a407943d1a780b10ab2e92737c05c0a1d333d27a1cd849b40a5b7c84e021b", 0x24}], 0xa}}], 0x2, 0x4)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001c00)={0x4, 0x7, 0x9, 0x200}, 0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001c40)={0x0, 0x20}, &(0x7f0000001c80)=0x8) (async)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001c40)={<r4=>0x0, 0x20}, &(0x7f0000001c80)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000001cc0)={r4, 0x3}, &(0x7f0000001d00)=0x8) (async)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000001cc0)={<r5=>r4, 0x3}, &(0x7f0000001d00)=0x8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x74, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x24044400)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x7c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8759, 0x5f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4800)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000001, 0x4000010, r6, 0x20442000)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000002000)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x301, @local}, 0x2, {0x2, 0x4e24, @broadcast}, 'ipvlan1\x00'}) (async)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000002000)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x301, @local}, 0x2, {0x2, 0x4e24, @broadcast}, 'ipvlan1\x00'})
connect$inet(0xffffffffffffffff, &(0x7f0000002080)={0x2, 0x4e20, @local}, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r6)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1020050}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x44, r8, 0x709, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4e}}}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="78a685a8aa23a7b1c210b1558783c766"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bbbac99d31e1db85"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4008005) (async)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1020050}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x44, r8, 0x709, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4e}}}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="78a685a8aa23a7b1c210b1558783c766"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bbbac99d31e1db85"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4008005)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000002240)={'filter\x00', 0x0, [0x303, 0x4, 0x1]}, &(0x7f00000022c0)=0x44)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002300), 0x4) (async)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002300), 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002340)=r9, 0x4)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000023c0)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x138, 0x0, 0x238, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000002380), {[{{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@srh={{0x30}, {0x21, 0x5, 0x5, 0x82, 0xa, 0x2091, 0x31a9}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xffffffff, 0xff000000, 0x0, 0xff000000], 0x4e24, 0x4e22, 0x4e20, 0x4e21, 0x2e, 0x0, 0x5, 0xc, 0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0x0, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffffff, 0xff000000, 0xff], 'ip6tnl0\x00', 'syzkaller1\x00', {}, {0xff}, 0x1, 0x34, 0x0, 0x20}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e22], [0x4e22, 0x4e24], 0x3, 0x62, 0x0, 0x4}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x14, 0xb, 0x1}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xb, "8221", 0x1}}, @common=@dst={{0x48}, {0x2, 0x3, 0x1, [0x7, 0x88, 0x8, 0x6, 0x8000, 0x7, 0x439, 0x21, 0x2, 0x27cf, 0x401, 0x2, 0x4, 0x3, 0xfbff, 0xb], 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x64, r8, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2303607122156997d397b7a734"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x64}}, 0x40) (async)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x64, r8, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2303607122156997d397b7a734"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x64}}, 0x40)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000029c0)={<r11=>r10})
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r11, 0x84, 0x5, &(0x7f0000002a00)={r5, @in6={{0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}}}, 0x84)
syz_genetlink_get_family_id$wireguard(&(0x7f0000002ac0), r11)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b40)={0xbc, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3a}}}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9c0}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x2]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xefd1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3344}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5b17}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffe}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000880}, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(r11, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x2180044}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x800) (async)
sendmsg$IPSET_CMD_GET_BYINDEX(r11, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x2180044}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x800)

20.446900459s ago: executing program 1 (id=1680):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff000000, 0x29}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5ee8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000014}, 0x1)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x14)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$qrtr(r3, &(0x7f0000001580)={&(0x7f0000000400)={0x2a, 0x2, 0x8000}, 0xc, &(0x7f0000000440), 0x0, &(0x7f0000000480)=[{0x1010, 0x102, 0x8, "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"}, {0xb8, 0x195, 0x5c88, "f555fa23c1a02c76f1273687f34d3e54e9849078448e2ae3a1b86e78882f7430ff0a5f3c7568f67fa87795f0ef34bdc30250e839330cba41b2ba1151ff7089fa064ea7a3e4f9630c26fc6ce87408105b80212f4139e8dd14b2fb0a0b8258efb5aa1cb054ec2ccf16113cd906d165bf0d1d37b2fc9b82d3a59cd7ab8885bbc761e8e9d651480aff2e43f7782e94879af4d35d5997234cc3a4fba5687cda5e27a041e1fd"}], 0x10c8, 0x44000}, 0x38)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r0)
sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, r5, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x72}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000002}, 0x8094)
r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000001800)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001840)=0x1c)
recvfrom$l2tp6(r6, &(0x7f0000001880)=""/179, 0xb3, 0x12040, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24000804)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001a40), 0x8)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r0)
sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000001d00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x184, r8, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfbf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffe525}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a015e7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @private0, 0x400}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004810)
accept4$netrom(r7, &(0x7f0000001d40)={{0x3, @null}, [@remote, @remote, @remote, @null, @bcast, @netrom, @default, @netrom]}, &(0x7f0000001dc0)=0x48, 0x80000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001e40)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x28, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffffffff, 0x79}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f80), r4)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x24, r10, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffc2b4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x24}}, 0x4000)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r11, 0x0, 0xd4, &(0x7f0000002080)=0x8, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x80, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x400}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x34, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xf}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xecc}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x8001}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x6}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xd4}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x5}]}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x800}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0xb0)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x24, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000000)

20.321283623s ago: executing program 1 (id=1682):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000000000000800004000001000000e0000000"], 0x1c}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x220c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x60000040)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x7)
r9 = socket(0xa, 0x1, 0x0)
listen(r9, 0x7f)
listen(0xffffffffffffffff, 0x0)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'team0\x00'})
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
ioctl$FITRIM(r2, 0x40305829, 0x0)

20.297535066s ago: executing program 1 (id=1683):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '+{'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '-:]%\\K%'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4010)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000001c0))
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'ip_vti0\x00', <r5=>0x0, 0x40, 0x40, 0x5, 0xe9, {{0x23, 0x4, 0x3, 0x33, 0x8c, 0x65, 0x0, 0xd, 0x4, 0x0, @private=0xa010101, @private=0xa010101, {[@timestamp_prespec={0x44, 0x2c, 0x35, 0x3, 0x2, [{@broadcast, 0x80000000}, {@remote, 0x5b3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1}, {@multicast1, 0x6}, {@rand_addr=0x64010100, 0x8}]}, @end, @end, @timestamp={0x44, 0x8, 0xdd, 0x0, 0x2, [0x9]}, @rr={0x7, 0x13, 0xfa, [@multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0xd0, 0x3, 0x5, [{@empty, 0xfff}, {@remote, 0xfffffffd}, {@local, 0x7}, {@broadcast, 0x2}, {@broadcast, 0x4}]}]}}}}})
connect$packet(r4, &(0x7f0000000340)={0x11, 0x18, r5, 0x1, 0xf2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r9, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x4}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r0)
r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r11, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20008010)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000007c0)={0x3, 0x9, 0x8, 0xff}, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan1\x00', <r13=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r12, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48840)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000980)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000bc0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x80, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r8)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r7, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x19c, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_KEY={0x180, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f00acff6dd9566ab91fe01618c86149ec7f65274a582e4b0cf67ec350a1a02e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f67f72e52dc132ecfc947ebe194ebabcebf535c29bb61cf9910da43ccb28d95c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20040840}, 0x20008811)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000000)

19.748472839s ago: executing program 0 (id=1694):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000040), 0x10000000000000e6, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x100}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10d00, 0xf)
pipe(&(0x7f0000000480)) (async)
vmsplice(r0, &(0x7f0000000040), 0x10000000000000e6, 0x1) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x100}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) (async)
splice(r0, 0x0, r1, 0x0, 0x10d00, 0xf) (async)

19.723706952s ago: executing program 0 (id=1695):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'hsr0\x00', {}, 0x5})
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98)
recvmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0, 0x11, &(0x7f0000004a80)=""/9, 0x9}, 0x5}], 0x1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r5, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x4, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="addeffffff7f000000007dbcc4c662d597a1830e490b9c07a43e468104ecab", @ANYRES16=r5, @ANYBLOB="00082bbd7000fedbdf250e000000140001800600020062000000060001000a00000074000180090006006c626c6300000000060004004e20000006000200160000000c000700200000001600000014000300ac1414aa00000000000000000000000014000300ff01000000000000000000000000000108000b0073697000070006007272000008000b0073697000070006006e7100000800060009000000080005000c050000"], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x48000)
setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

19.675566705s ago: executing program 0 (id=1696):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@srh={0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x51}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

19.601039885s ago: executing program 0 (id=1697):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

19.600374277s ago: executing program 0 (id=1698):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48)

19.581435313s ago: executing program 0 (id=1699):
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}]}, 0x1c}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

15.954427366s ago: executing program 4 (id=1721):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0xcb5)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xe}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000880}, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x3, @none, 0xc133, 0x1}, 0xe)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="183db04077d0bc2f3ee7f90000", @ANYRES64=<r7=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff009b26c681000000bfa200000000000007020000f8ffffffb703000000000000b704000000009500"/69], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r4, @ANYRES8, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRES8=r3, @ANYRES64=r5, @ANYRES64=r0, @ANYRESOCT=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4050000000000006110a4000000000063010d00000000009500090100000000c38d9fb62d015cde6f5fa11316aa5969b8fe1d1212bd4f5a5ec4150c833a68d6f23d7dbafadadd923968c777e2fac9d3aca4f1bbbcac09bd9f7d4c6cfdb18cb178da213be1521aed63d1db2c720c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000b00)=""/195, 0x0, 0x31, '\x00', 0x0, @sched_cls=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1000000}, 0x10}, 0x94)
sendmsg$nl_xfrm(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
getsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8)

15.788175859s ago: executing program 4 (id=1722):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}], 0x1}, 0x0) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x0, 0x81}) (async)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)

15.70936562s ago: executing program 4 (id=1723):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4)

15.708466479s ago: executing program 4 (id=1724):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r4 = socket(0x14, 0x4, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24040824}, 0x48014)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan0\x00'})
r5 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r5, 0x11e, 0x17, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000180)=0x8)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1)
sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f00000800030003000000130001"], 0x1ac}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

15.441224848s ago: executing program 4 (id=1725):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0)
r0 = socket(0x8, 0x3, 0x0)
ioctl$SIOCAX25DELFWD(r0, 0x40106183, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

15.156919742s ago: executing program 4 (id=1726):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000fa"], 0xe) (rerun: 64)

5.128458747s ago: executing program 32 (id=1683):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '+{'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '-:]%\\K%'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4010)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000001c0))
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'ip_vti0\x00', <r5=>0x0, 0x40, 0x40, 0x5, 0xe9, {{0x23, 0x4, 0x3, 0x33, 0x8c, 0x65, 0x0, 0xd, 0x4, 0x0, @private=0xa010101, @private=0xa010101, {[@timestamp_prespec={0x44, 0x2c, 0x35, 0x3, 0x2, [{@broadcast, 0x80000000}, {@remote, 0x5b3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1}, {@multicast1, 0x6}, {@rand_addr=0x64010100, 0x8}]}, @end, @end, @timestamp={0x44, 0x8, 0xdd, 0x0, 0x2, [0x9]}, @rr={0x7, 0x13, 0xfa, [@multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0xd0, 0x3, 0x5, [{@empty, 0xfff}, {@remote, 0xfffffffd}, {@local, 0x7}, {@broadcast, 0x2}, {@broadcast, 0x4}]}]}}}}})
connect$packet(r4, &(0x7f0000000340)={0x11, 0x18, r5, 0x1, 0xf2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r9, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x4}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r0)
r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r11, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20008010)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000007c0)={0x3, 0x9, 0x8, 0xff}, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan1\x00', <r13=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r12, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48840)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000980)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000bc0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x80, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r8)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r7, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x19c, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_KEY={0x180, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f00acff6dd9566ab91fe01618c86149ec7f65274a582e4b0cf67ec350a1a02e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f67f72e52dc132ecfc947ebe194ebabcebf535c29bb61cf9910da43ccb28d95c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20040840}, 0x20008811)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000000)

5.10048825s ago: executing program 33 (id=1671):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000000e06010200000000000000400c000009"], 0x14}}, 0x28000000)
close(0x3)

5.056077659s ago: executing program 34 (id=1670):
r0 = socket$key(0xf, 0x3, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300021c0000000000000000000000120008003804000045ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42ab7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db3900030006000000000002000000ac14140000000000000000000200010000000000000006fc0000000003000500000000000200"/218], 0xe0}, 0x1, 0x7}, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080))

4.024641249s ago: executing program 35 (id=1699):
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}]}, 0x1c}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

0s ago: executing program 36 (id=1726):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000fa"], 0xe) (rerun: 64)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts.
[   71.560715][ T5815] cgroup: Unknown subsys name 'net'
[   71.715147][ T5815] cgroup: Unknown subsys name 'cpuset'
[   71.723907][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.174662][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   77.085029][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.088627][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.093734][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.108651][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.112973][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.143532][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.152930][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.160676][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.164340][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.168418][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   77.176683][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.183254][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.196968][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.203337][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.206944][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.218409][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.222575][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.226711][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   77.240192][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.249939][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.258249][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.273299][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.282384][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.292976][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.302125][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.966062][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   78.000599][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   78.060002][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   78.122306][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   78.207466][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   78.324082][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.331333][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.339381][ T5825] bridge_slave_0: entered allmulticast mode
[   78.347312][ T5825] bridge_slave_0: entered promiscuous mode
[   78.378665][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.386051][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.393548][ T5827] bridge_slave_0: entered allmulticast mode
[   78.400642][ T5827] bridge_slave_0: entered promiscuous mode
[   78.430847][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.438402][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.446071][ T5825] bridge_slave_1: entered allmulticast mode
[   78.453084][ T5825] bridge_slave_1: entered promiscuous mode
[   78.466032][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.473576][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.480758][ T5826] bridge_slave_0: entered allmulticast mode
[   78.488161][ T5826] bridge_slave_0: entered promiscuous mode
[   78.495361][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.502799][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.510268][ T5827] bridge_slave_1: entered allmulticast mode
[   78.517386][ T5827] bridge_slave_1: entered promiscuous mode
[   78.565117][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.572346][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.579982][ T5826] bridge_slave_1: entered allmulticast mode
[   78.588969][ T5826] bridge_slave_1: entered promiscuous mode
[   78.617736][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.627092][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.635510][ T5830] bridge_slave_0: entered allmulticast mode
[   78.643044][ T5830] bridge_slave_0: entered promiscuous mode
[   78.682807][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.692737][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.700050][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.708146][ T5830] bridge_slave_1: entered allmulticast mode
[   78.715792][ T5830] bridge_slave_1: entered promiscuous mode
[   78.726188][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.749749][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.762622][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.798690][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.824114][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.882428][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.889748][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.897439][ T5840] bridge_slave_0: entered allmulticast mode
[   78.905051][ T5840] bridge_slave_0: entered promiscuous mode
[   78.924885][ T5827] team0: Port device team_slave_0 added
[   78.932769][ T5826] team0: Port device team_slave_0 added
[   78.941284][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.961300][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.968572][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.976351][ T5840] bridge_slave_1: entered allmulticast mode
[   78.983632][ T5840] bridge_slave_1: entered promiscuous mode
[   78.992399][ T5826] team0: Port device team_slave_1 added
[   79.000056][ T5827] team0: Port device team_slave_1 added
[   79.008113][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.019154][ T5825] team0: Port device team_slave_0 added
[   79.077119][ T5825] team0: Port device team_slave_1 added
[   79.146705][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.157242][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.165101][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.191586][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.204525][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.211490][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.237741][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.251207][ T5830] team0: Port device team_slave_0 added
[   79.270568][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.280654][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.287711][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.313813][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.325995][ T5837] Bluetooth: hci2: command tx timeout
[   79.332391][ T5848] Bluetooth: hci4: command tx timeout
[   79.332485][ T5831] Bluetooth: hci0: command tx timeout
[   79.341360][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.343781][ T5838] Bluetooth: hci1: command tx timeout
[   79.350624][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.382518][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.395531][ T5830] team0: Port device team_slave_1 added
[   79.402453][ T5838] Bluetooth: hci3: command tx timeout
[   79.408356][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.415378][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.441896][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.509180][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.516527][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.542456][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.562758][ T5840] team0: Port device team_slave_0 added
[   79.595032][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.602520][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.630866][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.643639][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.650961][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.677055][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.691533][ T5840] team0: Port device team_slave_1 added
[   79.713646][ T5826] hsr_slave_0: entered promiscuous mode
[   79.720068][ T5826] hsr_slave_1: entered promiscuous mode
[   79.800899][ T5827] hsr_slave_0: entered promiscuous mode
[   79.809437][ T5827] hsr_slave_1: entered promiscuous mode
[   79.816143][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   79.822138][ T5827] Cannot create hsr debugfs directory
[   79.856101][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.863696][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.890337][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.903664][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.910736][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.937977][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.980975][ T5825] hsr_slave_0: entered promiscuous mode
[   79.987513][ T5825] hsr_slave_1: entered promiscuous mode
[   79.993789][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   79.999537][ T5825] Cannot create hsr debugfs directory
[   80.049493][ T5830] hsr_slave_0: entered promiscuous mode
[   80.057480][ T5830] hsr_slave_1: entered promiscuous mode
[   80.064120][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   80.069892][ T5830] Cannot create hsr debugfs directory
[   80.249667][ T5840] hsr_slave_0: entered promiscuous mode
[   80.257367][ T5840] hsr_slave_1: entered promiscuous mode
[   80.263893][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   80.269627][ T5840] Cannot create hsr debugfs directory
[   80.712873][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.725396][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.737274][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.757032][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.820900][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.852578][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.874346][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.885653][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.938661][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.952381][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.973196][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.003908][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.086665][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.115931][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.126649][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.139612][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.158957][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.258644][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   81.284391][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.296145][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.310417][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.333856][  T997] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.341072][  T997] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.350997][  T997] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.358201][  T997] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.367631][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.402249][ T5838] Bluetooth: hci1: command tx timeout
[   81.407813][ T5838] Bluetooth: hci0: command tx timeout
[   81.413395][ T5831] Bluetooth: hci2: command tx timeout
[   81.413486][ T5837] Bluetooth: hci4: command tx timeout
[   81.482351][ T5837] Bluetooth: hci3: command tx timeout
[   81.525782][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.565997][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.600845][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   81.639206][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   81.687506][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.695263][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.705965][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.713148][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.734671][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.775183][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.782460][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.796621][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.803886][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.829473][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   81.926719][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.934007][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.952410][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.959592][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.001748][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.036144][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.126534][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   82.196568][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.203883][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.263470][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.270642][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.304504][ T5827] veth0_vlan: entered promiscuous mode
[   82.398593][ T5827] veth1_vlan: entered promiscuous mode
[   82.565548][ T5827] veth0_macvtap: entered promiscuous mode
[   82.598306][ T5827] veth1_macvtap: entered promiscuous mode
[   82.695955][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.735276][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.788996][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.807468][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.839612][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.857083][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.879801][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.889853][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.900202][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.916624][ T5830] veth0_vlan: entered promiscuous mode
[   82.935104][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.991835][ T5830] veth1_vlan: entered promiscuous mode
[   83.045677][ T5825] veth0_vlan: entered promiscuous mode
[   83.114307][ T5825] veth1_vlan: entered promiscuous mode
[   83.154554][ T5826] veth0_vlan: entered promiscuous mode
[   83.199083][ T5830] veth0_macvtap: entered promiscuous mode
[   83.205402][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.225117][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.270125][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.270193][ T5825] veth0_macvtap: entered promiscuous mode
[   83.286169][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.292648][ T5826] veth1_vlan: entered promiscuous mode
[   83.306918][ T5825] veth1_macvtap: entered promiscuous mode
[   83.330937][ T5830] veth1_macvtap: entered promiscuous mode
[   83.366994][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.377402][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.403192][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   83.414279][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.435008][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.485214][ T5837] Bluetooth: hci4: command tx timeout
[   83.485577][ T5831] Bluetooth: hci0: command tx timeout
[   83.490672][ T5837] Bluetooth: hci2: command tx timeout
[   83.496505][ T5838] Bluetooth: hci1: command tx timeout
[   83.523584][ T5826] veth0_macvtap: entered promiscuous mode
[   83.531184][ T1337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.545835][ T5950] trusted_key: syz.0.1 sent an empty control message without MSG_MORE.
[   83.553662][ T1337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.563485][ T5838] Bluetooth: hci3: command tx timeout
[   83.569162][ T1337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.579809][ T1337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.605853][ T1337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.622037][  T997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.633220][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.657683][ T5840] veth0_vlan: entered promiscuous mode
[   83.675140][ T5826] veth1_macvtap: entered promiscuous mode
[   83.685331][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.751409][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.764022][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.781107][ T5840] veth1_vlan: entered promiscuous mode
[   83.830511][ T1337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.841431][ T1337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.879862][ T1337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.890217][ T1337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.906565][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.918017][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.950866][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.963395][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.010998][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.022214][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.056503][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.060646][ T5840] veth0_macvtap: entered promiscuous mode
[   84.071052][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.099044][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.118457][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.127745][ T5840] veth1_macvtap: entered promiscuous mode
[   84.179453][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.193198][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.244081][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.304420][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.339261][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   84.360802][ T5963] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2'.
[   84.371579][ T5962] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2'.
[   84.432459][ T4599] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.448696][ T4599] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.496944][ T4599] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.530568][ T4599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.546926][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'.
[   84.619772][ T5969] bond1: entered promiscuous mode
[   84.625060][ T5969] bond1: entered allmulticast mode
[   84.630612][ T5969] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.755747][ T5972] vlan2: entered promiscuous mode
[   84.761009][ T5972] bridge0: entered promiscuous mode
[   84.956213][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.981973][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.989823][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.031671][ T5983] warning: `syz.0.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.126869][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.138902][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.258222][ T5991] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5'.
[   85.267454][ T5991] netem: invalid attributes len -24
[   85.273546][ T5991] netem: change failed
[   85.562525][ T5838] Bluetooth: hci2: command tx timeout
[   85.565841][ T5837] Bluetooth: hci1: command tx timeout
[   85.567967][ T5838] Bluetooth: hci0: command tx timeout
[   85.574808][ T5831] Bluetooth: hci4: command tx timeout
[   85.642156][ T5831] Bluetooth: hci3: command tx timeout
[   86.569712][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'.
[   86.745884][ T6009] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   86.799634][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'.
[   86.864839][  T917] cfg80211: failed to load regulatory.db
[   87.071494][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.227528][ T6039] tipc: Started in network mode
[   87.232515][ T6039] tipc: Node identity ac1414aa, cluster identity 4711
[   87.240557][ T6039] tipc: Enabled bearer <udp:s>, priority 10
[   87.248716][ T5833] IPVS: starting estimator thread 0...
[   87.362023][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[   87.371086][ T6045] IPVS: using max 36 ests per chain, 86400 per kthread
[   87.425421][ T6050] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   87.441360][ T6054] netlink: 'syz.1.32': attribute type 83 has an invalid length.
[   87.497482][ T6055] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET)
[   87.868358][ T6072] wg1: entered promiscuous mode
[   87.873415][ T6072] wg1: entered allmulticast mode
[   88.214957][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41'.
[   88.241952][ T5922] tipc: Node number set to 2886997162
[   88.431367][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.45'.
[   88.768101][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.856191][ T6120] syzkaller0: entered promiscuous mode
[   88.862500][ T6120] syzkaller0: entered allmulticast mode
[   88.876845][ T6120] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[   88.888521][ T6127] Zero length message leads to an empty skb
[   89.063054][ T6126] bond1: option xmit_hash_policy: invalid value (64)
[   89.109080][ T6126] bond1 (unregistering): Released all slaves
[   89.177646][ T6141] bridge1: entered promiscuous mode
[   89.201943][ T6141] bridge1: entered allmulticast mode
[   89.280822][ T6141] netlink: 'syz.1.55': attribute type 1 has an invalid length.
[   89.426178][ T6148] netlink: 'syz.2.57': attribute type 1 has an invalid length.
[   89.538610][ T6150] __nla_validate_parse: 3 callbacks suppressed
[   89.538636][ T6150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.58'.
[   89.604691][ T6150] tipc: Invalid UDP bearer configuration
[   89.604750][ T6150] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   89.660789][ T6153] netlink: 'syz.4.58': attribute type 12 has an invalid length.
[   89.685166][ T6162] Bluetooth: MGMT ver 1.23
[   89.714347][ T6150] Cannot find set identified by id 65534 to match
[   89.762548][ T6157] nbd0: detected capacity change from 0 to 127
[   89.788881][ T6150] netlink: 'syz.4.58': attribute type 23 has an invalid length.
[   89.817643][ T5831] block nbd0: Receive control failed (result -32)
[   89.825917][ T5985] block nbd0: Send control failed (result -32)
[   89.832567][ T5985] block nbd0: Request send failed, requeueing
[   89.841148][   T57] block nbd0: Dead connection, failed to find a fallback
[   89.848321][   T57] block nbd0: shutting down sockets
[   89.853836][   T57] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.863892][ T5985] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.873257][   T57] Buffer I/O error on dev nbd0, logical block 0, async page read
[   89.881160][ T5985] Buffer I/O error on dev nbd0, logical block 1, async page read
[   89.887719][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'.
[   89.890176][ T5985] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.907649][ T5985] Buffer I/O error on dev nbd0, logical block 2, async page read
[   89.916573][ T5985] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.925673][ T5985] Buffer I/O error on dev nbd0, logical block 3, async page read
[   89.933684][ T5985] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.942816][ T5985] Buffer I/O error on dev nbd0, logical block 0, async page read
[   89.951197][ T5985] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.961180][ T5985] Buffer I/O error on dev nbd0, logical block 1, async page read
[   89.971497][ T5985] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.980636][ T5985] Buffer I/O error on dev nbd0, logical block 2, async page read
[   89.989465][ T5985] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.998593][ T5985] Buffer I/O error on dev nbd0, logical block 3, async page read
[   90.006553][ T5985] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.019774][ T5985] Buffer I/O error on dev nbd0, logical block 0, async page read
[   90.034543][ T5985] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.069419][ T5985] Buffer I/O error on dev nbd0, logical block 1, async page read
[   90.084637][ T5985] ldm_validate_partition_table(): Disk read failed.
[   90.100205][ T5985] Dev nbd0: unable to read RDB block 0
[   90.111557][ T5985]  nbd0: unable to read partition table
[   90.129018][ T5985] ldm_validate_partition_table(): Disk read failed.
[   90.162193][ T5985] Dev nbd0: unable to read RDB block 0
[   90.194015][ T5985]  nbd0: unable to read partition table
[   90.213940][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'.
[   90.217943][ T6187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.70'.
[   90.335611][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'.
[   90.344713][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'.
[   90.392109][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'.
[   90.422443][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'.
[   90.440953][ T6205] SET target dimension over the limit!
[   90.542453][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'.
[   90.795968][ T6227] netlink: 'syz.0.82': attribute type 9 has an invalid length.
[   90.817877][ T6226] netlink: 14740 bytes leftover after parsing attributes in process `syz.2.81'.
[   91.054176][ T6232] tipc: Started in network mode
[   91.059182][ T6232] tipc: Node identity 5e5d691442c5, cluster identity 4711
[   91.067303][ T6232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.087067][ T6232] +
: renamed from syzkaller0
[   91.132830][ T6232] tipc: Disabling bearer <eth:syzkaller0>
[   91.246357][ T6244] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   91.253030][ T6244] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   91.306371][ T6246] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   91.312883][ T6246] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   91.763713][ T6261] syzkaller0: entered promiscuous mode
[   91.769717][ T6261] syzkaller0: entered allmulticast mode
[   91.872536][ T6276] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[   92.214580][ T6301] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   92.228288][ T6301] Cannot find add_set index 0 as target
[   93.226163][ T6305] veth0: entered promiscuous mode
[   93.287414][ T6304] veth0: left promiscuous mode
[   93.523777][ T6320] dvmrp0: entered allmulticast mode
[   93.925539][  T917] IPVS: starting estimator thread 0...
[   94.048840][ T6349] IPVS: using max 29 ests per chain, 69600 per kthread
[   94.165808][ T6351] 8021q: VLANs not supported on ipvlan1
[   94.633075][ T6387] __nla_validate_parse: 5 callbacks suppressed
[   94.633092][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'.
[   94.648572][ T6387] veth1_to_team: entered promiscuous mode
[   94.684068][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'.
[   94.699556][ T6390] bridge2: the hash_elasticity option has been deprecated and is always 16
[   94.928221][ T6393] bond1: option packets_per_slave: invalid value (18446744073709551615)
[   94.937511][ T6393] bond1: option packets_per_slave: allowed values 0 - 65535
[   94.955929][ T6393] bond1 (unregistering): Released all slaves
[   94.998328][ T6398] netlink: 'syz.0.128': attribute type 5 has an invalid length.
[   95.068400][ T6396] sctp: [Deprecated]: syz.3.129 (pid 6396) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.068400][ T6396] Use struct sctp_sack_info instead
[   95.699933][ T6423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.737021][ T6427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.137'.
[   96.038707][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'.
[   96.104270][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[   96.124559][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'.
[   96.214080][ T6452] netlink: 'syz.0.149': attribute type 1 has an invalid length.
[   96.231063][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'.
[   96.504414][ T6471] ieee802154 phy0 wpan0: encryption failed: -22
[   96.929723][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'.
[   96.954467][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'.
[   96.972091][ T6491] bridge_slave_1: left allmulticast mode
[   96.977877][ T6491] bridge_slave_1: left promiscuous mode
[   96.992599][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.022925][ T6491] bridge_slave_0: left allmulticast mode
[   97.028752][ T6491] bridge_slave_0: left promiscuous mode
[   97.035080][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.146962][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.163'.
[   97.295273][ T6514] netlink: 'syz.0.166': attribute type 1 has an invalid length.
[   97.310111][ T6514] netlink: 'syz.0.166': attribute type 2 has an invalid length.
[   97.389863][ T6518] syzkaller0: entered promiscuous mode
[   97.399020][ T6518] syzkaller0: entered allmulticast mode
[   97.419242][ T6512] Illegal XDP return value 4272176579 on prog  (id 37) dev N/A, expect packet loss!
[   98.469526][ T6566] syzkaller0: entered promiscuous mode
[   98.477155][ T6577] netlink: 'syz.0.184': attribute type 32 has an invalid length.
[   98.495554][ T6566] syzkaller0: entered allmulticast mode
[   98.573571][ T6579] block nbd1: server does not support multiple connections per device.
[   98.592298][ T6577] bond1: option coupled_control: invalid value (52)
[   98.599607][ T6579] block nbd1: shutting down sockets
[   98.614465][ T6577] bond1 (unregistering): Released all slaves
[   99.162853][ T6610] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   99.346454][ T6615] 8021q: VLANs not supported on ip6tnl0
[   99.517500][ T6626] bond2 (unregistering): Released all slaves
[   99.729743][ T6642] __nla_validate_parse: 15 callbacks suppressed
[   99.729763][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'.
[   99.811472][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'.
[   99.812395][ T6645] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[   99.835085][ T6645] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   99.857848][ T6644] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[   99.867515][ T6644] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  100.031317][ T6654] lo: entered allmulticast mode
[  100.057382][ T6656] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  100.216431][ T6664] sctp: [Deprecated]: syz.1.210 (pid 6664) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.216431][ T6664] Use struct sctp_sack_info instead
[  100.605141][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'.
[  100.910658][ T6675] hsr_slave_0 (unregistering): left promiscuous mode
[  101.051566][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'.
[  101.434780][ T6687] netdevsim0: mtu less than device minimum
[  101.450566][ T6694] gtp0: entered promiscuous mode
[  101.460360][ T6694] gtp0: entered allmulticast mode
[  101.732649][ T6702] netlink: 'syz.3.223': attribute type 3 has an invalid length.
[  101.923814][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'.
[  102.283748][ T6731] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  102.297095][ T6730] netlink: 80 bytes leftover after parsing attributes in process `syz.3.233'.
[  102.468487][ T6736] ip6gre1: entered allmulticast mode
[  102.603748][ T6741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.236'.
[  102.629563][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'.
[  102.905191][ T6751] 
: renamed from bridge_slave_0 (while UP)
[  103.289318][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'.
[  103.411385][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'.
[  103.911050][ T6808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.029751][ T6807] syzkaller0: entered allmulticast mode
[  104.037311][ T6807] netlink: 'syz.2.252': attribute type 2 has an invalid length.
[  104.637302][ T6848] openvswitch: netlink: Message has 131 unknown bytes.
[  104.925999][ T6865] netlink: 'syz.4.272': attribute type 1 has an invalid length.
[  104.975026][ T6867] __nla_validate_parse: 4 callbacks suppressed
[  104.975043][ T6867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.271'.
[  105.027860][ T6870] netlink: 256 bytes leftover after parsing attributes in process `syz.3.274'.
[  105.028140][ T6864] macvtap1: entered promiscuous mode
[  105.043418][ T6864] vlan0: entered promiscuous mode
[  105.048974][ T6864] macvtap1: entered allmulticast mode
[  105.054868][ T6864] vlan0: entered allmulticast mode
[  105.059991][ T6864] veth0_vlan: entered allmulticast mode
[  105.227929][ T6876] netlink: 64 bytes leftover after parsing attributes in process `syz.1.276'.
[  105.595627][ T6896] netlink: 49 bytes leftover after parsing attributes in process `syz.4.284'.
[  105.656550][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[  105.835762][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'.
[  106.080975][ T6932] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  106.351348][ T6947] netlink: 1 bytes leftover after parsing attributes in process `syz.2.301'.
[  106.376036][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'.
[  106.467482][ T6954] bond0: entered promiscuous mode
[  106.495568][ T6954] bond_slave_0: entered promiscuous mode
[  106.514989][ T6954] bond_slave_1: entered promiscuous mode
[  106.535814][ T6954] bond0: left promiscuous mode
[  106.544455][ T6954] bond_slave_0: left promiscuous mode
[  106.563149][ T6954] bond_slave_1: left promiscuous mode
[  106.603013][ T6962] x_tables: duplicate underflow at hook 3
[  106.610189][ T6960] netlink: 'syz.3.303': attribute type 10 has an invalid length.
[  106.619292][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.303'.
[  106.632803][ T6960] dummy0: entered promiscuous mode
[  106.652532][ T6960] bridge0: port 3(dummy0) entered blocking state
[  106.662047][ T6960] bridge0: port 3(dummy0) entered disabled state
[  106.668821][ T6960] dummy0: entered allmulticast mode
[  106.698384][ T6960] bridge0: port 3(dummy0) entered blocking state
[  106.705112][ T6960] bridge0: port 3(dummy0) entered forwarding state
[  106.766829][ T6964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.304'.
[  106.766845][ T6965] netlink: 'syz.1.304': attribute type 1 has an invalid length.
[  106.897345][ T6981] netlink: 'syz.2.307': attribute type 1 has an invalid length.
[  106.945944][ T6981] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  107.040203][ T6989] x_tables: duplicate underflow at hook 2
[  107.358193][ T7007] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[  107.776021][ T7035] veth0: entered promiscuous mode
[  107.843786][ T7034] veth0: left promiscuous mode
[  108.254757][ T7064] C: renamed from lo (while UP)
[  108.717297][ T7085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.905970][ T7092] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  108.987911][ T7103] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  109.010217][ T5925] IPVS: starting estimator thread 0...
[  109.016846][ T7091] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  109.131915][ T7104] IPVS: using max 30 ests per chain, 72000 per kthread
[  132.924714][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.931038][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  144.884907][ T7189] xt_hashlimit: overflow, try lower: 3/0
[  145.030442][ T7206] __nla_validate_parse: 11 callbacks suppressed
[  145.030462][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'.
[  145.078457][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'.
[  145.158226][ T7213] IPv6: sit1: Disabled Multicast RS
[  145.178613][ T7215] sctp: [Deprecated]: syz.4.355 (pid 7215) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.178613][ T7215] Use struct sctp_sack_info instead
[  145.251117][ T7208] vlan2: left promiscuous mode
[  145.283151][ T7208] bridge0: left promiscuous mode
[  145.289631][ T7208] bridge1: left promiscuous mode
[  145.326522][ T7208] gtp0: left promiscuous mode
[  145.341260][ T7221] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.357'.
[  145.613042][ T7231] block nbd1: server does not support multiple connections per device.
[  145.625241][ T7231] block nbd1: shutting down sockets
[  145.696094][ T7244] netlink: 'syz.4.363': attribute type 3 has an invalid length.
[  145.987189][ T7260] sctp: [Deprecated]: syz.0.369 (pid 7260) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.987189][ T7260] Use struct sctp_sack_info instead
[  146.255643][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'.
[  146.289556][ T7254] netlink: 68 bytes leftover after parsing attributes in process `syz.3.364'.
[  146.366851][ T7280] netlink: 80 bytes leftover after parsing attributes in process `syz.4.373'.
[  146.496082][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'.
[  146.518219][ T7287] netlink: 96 bytes leftover after parsing attributes in process `syz.4.377'.
[  146.709935][ T7299] netlink: 'syz.3.379': attribute type 10 has an invalid length.
[  146.737951][ T7299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.379'.
[  146.779486][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'.
[  146.847861][ T7299] team0: Port device geneve0 added
[  146.863339][ T7313] netlink: 'syz.1.383': attribute type 1 has an invalid length.
[  146.944209][ T7313] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  147.021680][ T7321] netlink: 'syz.1.385': attribute type 1 has an invalid length.
[  147.257592][ T7330] bond1: (slave bridge4): making interface the new active one
[  147.274317][ T7330] bond1: (slave bridge4): Enslaving as an active interface with an up link
[  147.487018][ T7357] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  147.991626][ T7382] x_tables: duplicate underflow at hook 2
[  147.996356][ T7383] nbd: socks must be embedded in a SOCK_ITEM attr
[  148.067273][ T7385] Bluetooth: MGMT ver 1.23
[  148.369595][ T7408] sctp: [Deprecated]: syz.3.408 (pid 7408) Use of struct sctp_assoc_value in delayed_ack socket option.
[  148.369595][ T7408] Use struct sctp_sack_info instead
[  148.679316][ T7424] team_slave_0: entered promiscuous mode
[  148.685276][ T7424] team_slave_1: entered promiscuous mode
[  148.703476][ T7424] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  148.735784][ T7378] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  148.749659][ T7378] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  148.831905][ T7378] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  148.852764][ T7378] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  148.955291][ T7378] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  148.961254][ T7378] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  149.029847][ T7378] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  149.047884][ T7378] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  149.097121][ T7378] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  149.118319][ T7378] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  149.123358][ T7455] netlink: 'syz.3.419': attribute type 29 has an invalid length.
[  149.298778][ T7460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.392675][ T7443] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  149.623794][ T7475] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.879133][ T7487] vlan2: entered promiscuous mode
[  149.916034][ T7487] bridge0: entered promiscuous mode
[  149.943891][ T7490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.236632][ T7512] __nla_validate_parse: 5 callbacks suppressed
[  150.236650][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'.
[  150.262836][ T7512] bridge_slave_1: left allmulticast mode
[  150.268525][ T7512] bridge_slave_1: left promiscuous mode
[  150.310073][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.357766][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'.
[  150.425699][ T7512] bridge_slave_0: left allmulticast mode
[  150.431392][ T7512] bridge_slave_0: left promiscuous mode
[  150.471366][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.479964][ T7529] netlink: 'syz.0.436': attribute type 11 has an invalid length.
[  150.487950][ T7529] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.436'.
[  151.802118][ T7603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.943317][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[  151.959601][ T7616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.459'.
[  151.987748][ T7616] geneve2: entered promiscuous mode
[  151.993447][ T7616] geneve2: entered allmulticast mode
[  152.100904][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.461'.
[  152.155937][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.463'.
[  152.195093][ T7623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.462'.
[  152.206911][ T7623] sctp: [Deprecated]: syz.4.462 (pid 7623) Use of int in max_burst socket option deprecated.
[  152.206911][ T7623] Use struct sctp_assoc_value instead
[  152.357798][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'.
[  152.547542][   T30] audit: type=1107 audit(1764621534.708:2): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='q’ÎÌ?£öU“M\_	'|'
[  152.991530][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'.
[  153.786253][ T7661] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  153.836809][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  153.874485][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  154.037224][ T7691] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  154.059266][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  154.079758][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  154.180011][ T7699] netlink: 'syz.1.478': attribute type 1 has an invalid length.
[  154.199660][ T7691] macvtap1: entered allmulticast mode
[  154.205223][ T7691] veth0_macvtap: entered allmulticast mode
[  154.235238][ T7688] syzkaller0: entered promiscuous mode
[  154.247173][ T7688] syzkaller0: entered allmulticast mode
[  154.255495][ T7702] nbd: must specify a device to reconfigure
[  154.385907][ T7694] pim6reg1: entered promiscuous mode
[  154.391245][ T7694] pim6reg1: entered allmulticast mode
[  154.477496][ T7713] sit0: entered promiscuous mode
[  154.497102][ T7713] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[  154.739765][ T7731] xt_TCPMSS: Only works on TCP SYN packets
[  155.027402][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.047280][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.117574][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.141863][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.195390][ T7760] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  155.393622][ T7771] __nla_validate_parse: 6 callbacks suppressed
[  155.393641][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.501'.
[  155.419810][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'.
[  155.574712][ T7783] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  155.729667][ T7796] netlink: 'syz.0.507': attribute type 4 has an invalid length.
[  155.768791][ T7786] lo speed is unknown, defaulting to 1000
[  155.779303][ T7786] lo speed is unknown, defaulting to 1000
[  155.843575][ T7786] lo speed is unknown, defaulting to 1000
[  156.567154][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'.
[  156.585765][ T7786] infiniband s
z1: set active
[  156.592214][  T917] lo speed is unknown, defaulting to 1000
[  156.598529][ T7786] infiniband s
z1: added lo
[  156.629850][ T7786] s
z1: rxe_create_cq: returned err = -12
[  156.636858][ T7786] infiniband s
z1: Couldn't create ib_mad CQ
[  156.643417][ T7786] infiniband s
z1: Couldn't open port 1
[  156.677757][ T7847] netlink: 'syz.0.520': attribute type 2 has an invalid length.
[  156.798904][ T7786] RDS/IB: s
z1: added
[  156.814714][ T7786] smc: adding ib device s
z1 with port count 1
[  156.844185][ T7786] smc:    ib device s
z1 port 1 has no pnetid
[  156.863512][ T5833] lo speed is unknown, defaulting to 1000
[  156.879555][ T7786] lo speed is unknown, defaulting to 1000
[  156.962565][ T7868] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  156.983595][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'.
[  157.085699][ T7872] tipc: Started in network mode
[  157.090645][ T7872] tipc: Node identity 42b76a5baea, cluster identity 4711
[  157.102667][ T7872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.117806][ T7872] syzkaller0: entered promiscuous mode
[  157.119846][ T7873] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  157.128461][ T7872] syzkaller0: entered allmulticast mode
[  157.160375][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.526'.
[  157.201473][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'.
[  157.214906][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'.
[  157.218820][ T7872] tipc: Resetting bearer <eth:syzkaller0>
[  157.231061][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'.
[  157.247414][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.526'.
[  157.272261][ T7871] tipc: Resetting bearer <eth:syzkaller0>
[  157.306400][ T7871] tipc: Disabling bearer <eth:syzkaller0>
[  157.480442][ T7786] lo speed is unknown, defaulting to 1000
[  157.592143][ T7900] openvswitch: netlink: IP tunnel dst address not specified
[  157.662238][ T7891] nbd1: detected capacity change from 0 to 127
[  157.774373][ T5831] block nbd1: Receive control failed (result -104)
[  158.156414][ T7786] lo speed is unknown, defaulting to 1000
[  158.190010][ T7928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.195233][ T7926] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  158.263421][ T7937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.547'.
[  158.658851][ T7967] x_tables: duplicate underflow at hook 3
[  158.791247][ T7973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.940755][ T7786] lo speed is unknown, defaulting to 1000
[  158.991483][ T7984] sctp: [Deprecated]: syz.0.560 (pid 7984) Use of int in maxseg socket option.
[  158.991483][ T7984] Use struct sctp_assoc_value instead
[  159.293208][ T7995] netlink: 'syz.4.563': attribute type 8 has an invalid length.
[  159.467053][ T7786] lo speed is unknown, defaulting to 1000
[  159.506773][ T8000] xt_CT: You must specify a L4 protocol and not use inversions on it
[  160.469363][ T8051] __nla_validate_parse: 7 callbacks suppressed
[  160.469383][ T8051] netlink: 160 bytes leftover after parsing attributes in process `syz.4.578'.
[  160.670863][ T8059] netlink: 'syz.1.582': attribute type 1 has an invalid length.
[  160.723569][ T8059] netlink: 'syz.1.582': attribute type 1 has an invalid length.
[  160.738567][ T8059] netlink: 224 bytes leftover after parsing attributes in process `syz.1.582'.
[  160.876854][ T8066] netlink: 'syz.4.585': attribute type 1 has an invalid length.
[  160.927506][ T8069] TCP: TCP_TX_DELAY enabled
[  160.929840][ T8072] netlink: 'syz.2.586': attribute type 10 has an invalid length.
[  160.940033][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'.
[  160.959337][ T8066] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.968134][ T8074] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  160.990487][ T8074] bond1: entered allmulticast mode
[  160.993690][ T8069] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000
[  161.049426][ T8078] netlink: 'syz.2.589': attribute type 10 has an invalid length.
[  161.123118][ T8079] bond2: entered promiscuous mode
[  161.150004][ T8073] netlink: 'syz.0.588': attribute type 13 has an invalid length.
[  161.161370][ T8079] bond2: entered allmulticast mode
[  161.196689][ T8079] 8021q: adding VLAN 0 to HW filter on device bond2
[  161.221087][ T8078] bridge0: port 3(team0) entered blocking state
[  161.239984][ T8078] bridge0: port 3(team0) entered disabled state
[  161.260345][ T8078] team0: entered allmulticast mode
[  161.280348][ T8078] team_slave_0: entered allmulticast mode
[  161.290473][ T8078] team_slave_1: entered allmulticast mode
[  161.313751][ T8078] team0: entered promiscuous mode
[  161.318909][ T8078] team_slave_0: entered promiscuous mode
[  161.327987][ T8078] team_slave_1: entered promiscuous mode
[  161.336950][ T8078] bridge0: port 3(team0) entered blocking state
[  161.343408][ T8078] bridge0: port 3(team0) entered forwarding state
[  161.715730][ T8110] netlink: 'syz.2.600': attribute type 1 has an invalid length.
[  161.942201][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'.
[  161.951335][ T8126] IPv6: NLM_F_REPLACE set, but no existing node found!
[  162.129371][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'.
[  162.236144][ T8141] delete_channel: no stack
[  162.406074][ T8147] syzkaller0: entered promiscuous mode
[  162.411589][ T8147] syzkaller0: entered allmulticast mode
[  162.634279][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.616'.
[  162.702377][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[  162.736442][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'.
[  162.777454][ T8161] netlink: 'syz.0.617': attribute type 12 has an invalid length.
[  162.786091][ T8161] netlink: 'syz.0.617': attribute type 11 has an invalid length.
[  163.039387][ T8190] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  163.157857][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'.
[  163.181997][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'.
[  163.228141][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.237242][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.246115][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.256716][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.415113][ T8210] veth0: entered promiscuous mode
[  163.427888][ T8211] veth0: left promiscuous mode
[  163.435167][ T8207] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  163.647411][ T8220] block nbd3: NBD_DISCONNECT
[  164.319703][ T8257] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2
[  164.726346][ T8285] bridge2: entered allmulticast mode
[  165.303935][ T8328] validate_nla: 1 callbacks suppressed
[  165.303964][ T8328] netlink: 'syz.1.671': attribute type 39 has an invalid length.
[  165.340533][ T8330] netlink: 'syz.3.672': attribute type 1 has an invalid length.
[  165.410964][ T8330] 8021q: adding VLAN 0 to HW filter on device bond2
[  165.427858][ T8335] gretap1: entered promiscuous mode
[  165.438486][ T8335] bond2: (slave gretap1): making interface the new active one
[  165.450122][ T8335] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  165.477381][ T8332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.701761][ T8348] __nla_validate_parse: 13 callbacks suppressed
[  165.701779][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'.
[  165.788396][ T8348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.807363][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'.
[  165.949605][ T8348] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.440989][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'.
[  166.839365][ T8430] 8021q: adding VLAN 0 to HW filter on device bond3
[  166.999636][ T8444] netlink: 'syz.3.699': attribute type 2 has an invalid length.
[  167.011428][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'.
[  167.190265][ T8454] Cannot find map_set index 0 as target
[  167.755456][ T8489] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.704'.
[  167.939105][ T8499] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004
[  168.089576][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'.
[  168.266145][ T8520] netlink: 'syz.3.713': attribute type 4 has an invalid length.
[  168.292091][ T8520] netlink: 17 bytes leftover after parsing attributes in process `syz.3.713'.
[  168.510595][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'.
[  168.562930][ T8544] netlink: 40 bytes leftover after parsing attributes in process `syz.4.716'.
[  168.817467][ T8564] netlink: 48 bytes leftover after parsing attributes in process `syz.0.724'.
[  169.022873][ T8564] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  169.053669][ T8564] bond1 (unregistering): Released all slaves
[  169.116477][ T8584] openvswitch: netlink: Invalid MD length 60718 for MD type 0
[  169.129452][ T8584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.148477][ T8586] netlink: 'syz.3.727': attribute type 3 has an invalid length.
[  169.454355][ T8606] netlink: 'syz.4.733': attribute type 11 has an invalid length.
[  169.741700][ T8626] netlink: 'syz.0.742': attribute type 1 has an invalid length.
[  170.173832][ T8662] netlink: 'syz.3.751': attribute type 1 has an invalid length.
[  170.295627][ T8668] bond4: (slave ip6gretap1): making interface the new active one
[  170.304965][ T8668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  170.314053][ T8668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  170.323549][ T8668] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  170.333783][ T8666] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  170.587757][ T8696] netlink: 'syz.2.759': attribute type 1 has an invalid length.
[  170.607068][ T8695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.619781][ T8698] netlink: 'syz.2.759': attribute type 1 has an invalid length.
[  170.709060][ T8697] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.732757][ T8695] netlink: 'syz.1.760': attribute type 12 has an invalid length.
[  170.747486][ T8707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.903979][ T8697] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.017082][ T8722] netlink: 'syz.0.766': attribute type 21 has an invalid length.
[  171.047803][ T8722] netlink: 'syz.0.766': attribute type 22 has an invalid length.
[  171.086816][ T8722] netlink: 'syz.0.766': attribute type 23 has an invalid length.
[  171.087186][ T8697] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.111937][ T8722] netlink: 'syz.0.766': attribute type 25 has an invalid length.
[  171.119982][ T8722] __nla_validate_parse: 102 callbacks suppressed
[  171.119996][ T8722] netlink: 96 bytes leftover after parsing attributes in process `syz.0.766'.
[  171.143454][ T8727] netlink: 'syz.4.767': attribute type 27 has an invalid length.
[  171.194550][ T8730] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.279144][ T8697] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.348433][ T8730] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.349751][ T8737] netlink: 'syz.0.770': attribute type 22 has an invalid length.
[  171.560296][ T8730] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.669311][ T8759] netlink: 184 bytes leftover after parsing attributes in process `syz.2.775'.
[  171.680647][ T8730] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.699120][   T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.723597][ T1337] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.756664][   T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.776783][ T8759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.775'.
[  171.786412][   T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.795333][ T8761] syz_tun: entered allmulticast mode
[  171.835438][ T8760] syz_tun: left allmulticast mode
[  171.901587][ T1337] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.937319][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'.
[  171.998265][ T8776] bond2: entered allmulticast mode
[  172.015675][ T8776] 8021q: adding VLAN 0 to HW filter on device bond2
[  172.025551][ T8776] bridge0: port 4(bond2) entered blocking state
[  172.032569][ T8776] bridge0: port 4(bond2) entered disabled state
[  172.037755][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'.
[  172.042997][ T8776] bond2: entered promiscuous mode
[  172.061585][ T8776] bridge0: port 4(bond2) entered blocking state
[  172.068018][ T8776] bridge0: port 4(bond2) entered forwarding state
[  172.088723][   T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.117740][ T8786] veth0: entered promiscuous mode
[  172.162371][   T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.189393][   T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.200282][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'.
[  172.219560][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'.
[  172.367319][ T8800] netlink: 'syz.0.788': attribute type 11 has an invalid length.
[  172.415453][ T8800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'.
[  172.536433][   T36] bridge0: port 4(bond2) entered disabled state
[  172.568065][ T8812] netlink: 192 bytes leftover after parsing attributes in process `syz.1.791'.
[  172.618013][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'.
[  172.648138][ T8814] vxcan0: entered allmulticast mode
[  172.665569][ T8819] netlink: 'syz.2.792': attribute type 1 has an invalid length.
[  172.701521][ T8819] 8021q: adding VLAN 0 to HW filter on device bond3
[  172.764116][ T8772] veth0: left promiscuous mode
[  172.820695][ T8826] vlan3: entered allmulticast mode
[  172.826864][ T8826] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  172.847257][ T8824] bond3: (slave ip6erspan0): making interface the new active one
[  172.875120][ T8824] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[  172.964991][ T8838] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  173.312999][ T8842] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  173.489402][ T8862] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  173.693365][ T8880] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  174.009643][ T8898] tipc: Enabled bearer <ib:caif0>, priority 13
[  174.026806][ T8898] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  174.251048][ T8915] pim6reg: entered allmulticast mode
[  174.471331][ T8928] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  174.642535][ T8936] veth3: entered promiscuous mode
[  174.790757][ T8948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.819178][ T8948] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  174.832472][ T8948] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  174.840379][ T8948] gretap1: entered promiscuous mode
[  174.849622][ T8948] gretap1: entered allmulticast mode
[  174.864186][ T8954] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  174.872747][ T8954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.125241][   T10] tipc: Node number set to 479750420
[  175.232560][ T5925] IPVS: starting estimator thread 0...
[  175.337583][ T8976] IPVS: using max 31 ests per chain, 74400 per kthread
[  175.432975][ T8986] syzkaller0: entered promiscuous mode
[  175.438684][ T8986] syzkaller0: entered allmulticast mode
[  175.629045][ T8995] validate_nla: 5 callbacks suppressed
[  175.629063][ T8995] netlink: 'syz.3.843': attribute type 1 has an invalid length.
[  175.779074][ T9014] netlink: 'syz.4.847': attribute type 1 has an invalid length.
[  175.872963][ T9019] xt_TCPMSS: Only works on TCP SYN packets
[  175.891609][ T9021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  175.898870][ T9021] IPv6: NLM_F_CREATE should be set when creating new route
[  175.906244][ T9021] IPv6: NLM_F_CREATE should be set when creating new route
[  175.913456][ T9021] IPv6: NLM_F_CREATE should be set when creating new route
[  175.921663][ T9022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  175.945797][ T9022] netlink: 'syz.4.851': attribute type 1 has an invalid length.
[  176.229171][ T9041] workqueue: name exceeds WQ_NAME_LEN. Truncating to: {„QSY…F›µé&A´È‡¶£òØ„±›¯ô<ml
[  176.686978][ T9075] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20003
[  176.693643][ T9074] netlink: 'syz.1.864': attribute type 29 has an invalid length.
[  176.713690][ T9074] __nla_validate_parse: 21 callbacks suppressed
[  176.713707][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'.
[  176.769980][ T9080] netlink: 'syz.1.864': attribute type 29 has an invalid length.
[  176.864067][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'.
[  176.999826][ T9091] netlink: 'syz.0.867': attribute type 10 has an invalid length.
[  177.046221][ T9091] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  177.575760][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'.
[  177.584953][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'.
[  177.647037][ T9125] bridge0: port 5(vlan3) entered blocking state
[  177.668740][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'.
[  177.677558][ T9125] bridge0: port 5(vlan3) entered disabled state
[  177.685242][ T9125] vlan3: entered allmulticast mode
[  177.690506][ T9125] bridge0: entered allmulticast mode
[  177.699399][ T9125] vlan3: left allmulticast mode
[  177.704478][ T9125] bridge0: left allmulticast mode
[  177.721293][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.877'.
[  177.749170][ T9126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.881383][ T9126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.016682][ T9160] netlink: 'syz.0.884': attribute type 2 has an invalid length.
[  178.366762][ T9171] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  178.405347][ T9171] bond3 (unregistering): Released all slaves
[  178.460360][ T9186] mac80211_hwsim hwsim17 ÿ
: renamed from wlan1
[  178.477005][ T9191] netlink: 'syz.2.883': attribute type 3 has an invalid length.
[  178.485088][ T9191] netlink: 666 bytes leftover after parsing attributes in process `syz.2.883'.
[  178.498733][ T9183] tc_dump_action: action bad kind
[  178.523631][ T9188] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  178.901419][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'.
[  178.966996][ T9220] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  179.083787][ T9226] netlink: 'syz.2.904': attribute type 1 has an invalid length.
[  179.193791][ T9237] bond0: entered allmulticast mode
[  179.207875][ T9237] bond_slave_0: entered allmulticast mode
[  179.233358][ T9237] bond_slave_1: entered allmulticast mode
[  179.285514][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.299745][ T9244] netlink: 'syz.4.910': attribute type 32 has an invalid length.
[  179.330635][ T9237] bond0: (slave rose0): Enslaving as an active interface with an up link
[  179.348502][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'.
[  179.473750][ T9244] bond3: Setting coupled_control to off (0)
[  179.535540][ T9262] netlink: 96 bytes leftover after parsing attributes in process `syz.2.913'.
[  179.578433][ T9264] xt_l2tp: invalid flags combination: 0
[  179.850794][ T9279] lo speed is unknown, defaulting to 1000
[  181.470686][ T9376] block nbd2: not configured, cannot reconfigure
[  182.324995][ T9421] validate_nla: 4 callbacks suppressed
[  182.325014][ T9421] netlink: 'syz.1.950': attribute type 1 has an invalid length.
[  182.425881][ T9421] 8021q: adding VLAN 0 to HW filter on device bond3
[  182.553246][ T9428] bond3: (slave veth7): Enslaving as an active interface with a down link
[  182.669157][ T9439] __nla_validate_parse: 7 callbacks suppressed
[  182.669176][ T9439] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.953'.
[  182.705442][ T9421] veth9: entered promiscuous mode
[  182.723524][ T9421] bond3: (slave veth9): Enslaving as an active interface with a down link
[  182.759341][ T9433] vlan3: entered allmulticast mode
[  182.765389][ T9433] bond3: entered allmulticast mode
[  182.776068][ T9433] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  183.126888][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'.
[  183.136118][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'.
[  183.186473][ T9473] syzkaller0: entered promiscuous mode
[  183.194710][ T9473] syzkaller0: entered allmulticast mode
[  183.279067][ T9479] netlink: 'syz.2.963': attribute type 1 has an invalid length.
[  183.293103][ T9473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.961'.
[  183.447804][ T9479] 8021q: adding VLAN 0 to HW filter on device bond4
[  183.455866][ T9491] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  183.470333][ T9496] netlink: 'syz.3.968': attribute type 1 has an invalid length.
[  183.510011][ T9491] bond4: entered allmulticast mode
[  183.581489][ T9494] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link
[  183.663991][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.965'.
[  183.748603][ T9509] bond4: Invalid ad_actor_system MAC address.
[  183.755321][ T9509] bond4: option ad_actor_system: invalid value (1)
[  183.771265][ T9509] bond4 (unregistering): Released all slaves
[  183.777282][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'.
[  183.834505][ T9514] bond2: entered promiscuous mode
[  183.840116][ T9514] 8021q: adding VLAN 0 to HW filter on device bond2
[  183.918031][ T9525] 8021q: adding VLAN 0 to HW filter on device bond2
[  183.926539][ T9525] bond2: (slave gtp0): The slave device specified does not support setting the MAC address
[  183.979295][ T9525] bond2: (slave gtp0): Error -95 calling set_mac_address
[  184.032151][ T9536] netlink: 88 bytes leftover after parsing attributes in process `syz.3.975'.
[  184.340475][ T9548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.458895][ T5833] lo speed is unknown, defaulting to 1000
[  184.846267][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'.
[  184.997731][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.992'.
[  185.206966][ T9616] netlink: 'syz.2.999': attribute type 10 has an invalid length.
[  185.247481][ T9616] team0: Device veth1_macvtap failed to register rx_handler
[  185.289983][ T9622] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1001'.
[  185.527089][ T9637] team0: Device ip6gre1 is up. Set it down before adding it as a team port
[  185.553849][ T9645] netlink: 'syz.0.1004': attribute type 21 has an invalid length.
[  185.639153][ T9649] netlink: 'syz.2.1008': attribute type 10 has an invalid length.
[  185.666052][ T9649] bridge0: port 3(team0) entered disabled state
[  185.683392][ T9649] team0: left allmulticast mode
[  185.688341][ T9649] team_slave_0: left allmulticast mode
[  185.704383][ T9649] team_slave_1: left allmulticast mode
[  185.719866][ T9649] team0: left promiscuous mode
[  185.729702][ T9649] team_slave_0: left promiscuous mode
[  185.756618][ T9649] team_slave_1: left promiscuous mode
[  185.781609][ T9649] bridge0: port 3(team0) entered disabled state
[  185.807026][ T9649] 8021q: adding VLAN 0 to HW filter on device team0
[  185.846520][ T9649] bond0: (slave team0): Enslaving as an active interface with an up link
[  186.412866][ T9704] netdevsim netdevsim4: Direct firmware load for 	 failed with error -2
[  186.432302][ T9704] netdevsim netdevsim4: Falling back to sysfs fallback for: 	
[  186.539652][ T9712] bridge0: port 3(dummy0) entered disabled state
[  186.692082][ T9727] netlink: 'syz.3.1030': attribute type 1 has an invalid length.
[  186.700775][ T9727] netlink: 'syz.3.1030': attribute type 2 has an invalid length.
[  186.710738][ T9727] netlink: 'syz.3.1030': attribute type 1 has an invalid length.
[  186.719196][ T9727] netlink: 'syz.3.1030': attribute type 2 has an invalid length.
[  186.895845][ T9745] openvswitch: netlink: Message has 536 unknown bytes.
[  186.902979][ T9745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.986037][ T9747] bond5: entered promiscuous mode
[  186.991766][ T9747] 8021q: adding VLAN 0 to HW filter on device bond5
[  187.233315][ T9758] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  187.596200][ T9797] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.654356][ T9803] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[  187.664321][ T9803] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[  187.896707][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.904545][ T9804] bridge0: port 1(
) entered disabled state
[  187.964448][   T51] block nbd1: Possible stuck request ffff8880253fe000: control (read@0,1024B). Runtime 30 seconds
[  187.976453][   T51] block nbd1: Possible stuck request ffff8880253fe1c0: control (read@1024,1024B). Runtime 30 seconds
[  187.987970][   T51] block nbd1: Possible stuck request ffff8880253fe380: control (read@2048,1024B). Runtime 30 seconds
[  187.999124][   T51] block nbd1: Possible stuck request ffff8880253fe540: control (read@3072,1024B). Runtime 30 seconds
[  188.077837][ T9804] A link change request failed with some changes committed already. Interface 
 may have been left with an inconsistent configuration, please check.
[  188.103077][ T9797] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.188725][ T9797] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.248199][ T9797] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.277627][ T9824] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  188.353531][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.423632][ T8482] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.438387][ T9831] __nla_validate_parse: 7 callbacks suppressed
[  188.438404][ T9831] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1059'.
[  188.456568][ T9831] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  188.481587][ T8482] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.514267][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.543758][ T9831] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  188.551358][ T9831] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  188.685482][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1065'.
[  188.895994][ T9860] validate_nla: 1 callbacks suppressed
[  188.896011][ T9860] netlink: 'syz.0.1069': attribute type 8 has an invalid length.
[  188.920431][ T9861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1067'.
[  189.014706][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'.
[  189.241716][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'.
[  189.252203][ T9891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1073'.
[  189.614295][ T9915] sctp: [Deprecated]: syz.1.1083 (pid 9915) Use of int in maxseg socket option.
[  189.614295][ T9915] Use struct sctp_assoc_value instead
[  189.752841][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'.
[  189.967488][ T9943] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  189.984237][ T9943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1091'.
[  190.022193][ T9939] syzkaller1: entered promiscuous mode
[  190.027880][ T9939] syzkaller1: entered allmulticast mode
[  190.036269][ T9948] syzkaller0: entered promiscuous mode
[  190.043580][ T9948] syzkaller0: entered allmulticast mode
[  190.310314][ T5925] IPVS: starting estimator thread 0...
[  190.423675][ T9967] IPVS: using max 28 ests per chain, 67200 per kthread
[  190.472802][ T9979] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1098'.
[  190.486776][ T9979] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1098'.
[  190.646033][ T9987] netlink: 'syz.2.1103': attribute type 1 has an invalid length.
[  191.186830][T10015] netlink: 'syz.3.1111': attribute type 24 has an invalid length.
[  191.430639][T10043] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  191.440079][T10043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.677487][T10057] netlink: 'syz.0.1123': attribute type 12 has an invalid length.
[  191.701680][T10059] netlink: 'syz.2.1124': attribute type 2 has an invalid length.
[  191.755921][T10053] netlink: 'syz.1.1122': attribute type 1 has an invalid length.
[  191.794004][T10053] 8021q: adding VLAN 0 to HW filter on device bond4
[  191.922248][T10074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.946438][T10074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.036710][T10080] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  192.045108][T10080] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  192.094705][T10080] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  192.107485][T10080] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  192.201100][T10096] Cannot find set identified by id 1 to match
[  192.348243][T10105] bridge0: port 1(syz_tun) entered blocking state
[  192.361373][T10105] bridge0: port 1(syz_tun) entered disabled state
[  192.368374][T10105] syz_tun: entered allmulticast mode
[  192.378264][T10105] syz_tun: entered promiscuous mode
[  192.389663][T10105] bridge0: port 1(syz_tun) entered blocking state
[  192.396486][T10105] bridge0: port 1(syz_tun) entered forwarding state
[  192.909009][T10139] netlink: 'syz.1.1147': attribute type 13 has an invalid length.
[  192.918485][T10139] netlink: 'syz.1.1147': attribute type 58 has an invalid length.
[  192.945101][T10136] sctp: [Deprecated]: syz.3.1146 (pid 10136) Use of int in max_burst socket option.
[  192.945101][T10136] Use struct sctp_assoc_value instead
[  193.298089][T10165] lo: entered allmulticast mode
[  193.322345][T10165] lo: left allmulticast mode
[  193.476141][T10181] __nla_validate_parse: 44 callbacks suppressed
[  193.476157][T10181] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1158'.
[  193.493079][T10182] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1158'.
[  193.634937][T10192] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1160'.
[  193.796485][T10206] netlink: 'syz.0.1166': attribute type 3 has an invalid length.
[  193.809329][T10208] netlink: 'syz.1.1165': attribute type 1 has an invalid length.
[  193.960480][T10215] bridge0: port 3(veth0_to_bridge) entered blocking state
[  193.972411][T10215] bridge0: port 3(veth0_to_bridge) entered disabled state
[  193.980562][T10215] veth0_to_bridge: entered allmulticast mode
[  193.989743][T10215] veth0_to_bridge: entered promiscuous mode
[  194.012494][T10213] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.1167'.
[  194.020011][T10217] --map-set only usable from mangle table
[  194.032918][T10215] netlink: 'syz.1.1168': attribute type 13 has an invalid length.
[  194.373796][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.420089][T10235] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  194.431164][T10235] syzkaller0: entered promiscuous mode
[  194.438207][T10235] syzkaller0: entered allmulticast mode
[  194.497909][T10215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.650342][T10214] tipc: Resetting bearer <eth:syzkaller0>
[  194.705373][T10214] tipc: Disabling bearer <eth:syzkaller0>
[  194.775696][T10272] netlink: 'syz.2.1182': attribute type 3 has an invalid length.
[  195.198035][T10293] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1188'.
[  195.248217][T10293] block nbd0: Unsupported socket: should be TCP or UNIX.
[  195.406345][T10293] lo speed is unknown, defaulting to 1000
[  195.653440][T10311] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.919152][T10328] bond0: entered allmulticast mode
[  195.950909][T10328] bond_slave_0: entered allmulticast mode
[  195.994084][T10328] bond_slave_1: entered allmulticast mode
[  196.081210][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'.
[  196.096541][T10328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1196'.
[  196.110307][T10328] netlink: zone id is out of range
[  196.110639][T10339] bond2: left promiscuous mode
[  196.115558][T10328] netlink: zone id is out of range
[  196.126209][T10328] netlink: zone id is out of range
[  196.131338][T10328] netlink: zone id is out of range
[  196.137023][T10339] bridge0: port 4(bond2) entered disabled state
[  196.142218][T10328] netlink: zone id is out of range
[  196.148399][T10328] netlink: zone id is out of range
[  196.182227][T10339] bridge_slave_1: left allmulticast mode
[  196.183283][T10328] netlink: zone id is out of range
[  196.201295][T10339] bridge_slave_1: left promiscuous mode
[  196.209322][T10328] netlink: zone id is out of range
[  196.215381][T10339] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.231732][T10339] bridge_slave_0: left allmulticast mode
[  196.252026][T10339] bridge_slave_0: left promiscuous mode
[  196.260846][T10339] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.456121][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'.
[  196.488506][T10362] net_ratelimit: 14 callbacks suppressed
[  196.488524][T10362] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  196.505757][T10362] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1207'.
[  196.562293][T10362] netlink: 'syz.1.1207': attribute type 1 has an invalid length.
[  196.775587][T10377] C: Caught tx_queue_len zero misconfig
[  196.831198][T10375] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1212'.
[  196.900091][T10379] vlan2: entered allmulticast mode
[  196.918554][T10379] bridge_slave_0: entered allmulticast mode
[  197.200004][T10398] netlink: 'syz.1.1221': attribute type 9 has an invalid length.
[  197.285904][T10400] 8021q: VLANs not supported on xfrm0
[  197.716287][T10413] team0 (unregistering): Port device team_slave_0 removed
[  197.745329][T10413] team0 (unregistering): Port device team_slave_1 removed
[  197.797478][T10413] team0 (unregistering): Port device geneve0 removed
[  198.210547][T10456] syzkaller0: refused to change device tx_queue_len
[  198.239176][T10461] netlink: 'syz.1.1240': attribute type 1 has an invalid length.
[  198.969406][T10508] syzkaller1: entered promiscuous mode
[  198.975066][T10508] syzkaller1: entered allmulticast mode
[  199.054158][T10513] netlink: 'syz.4.1254': attribute type 4 has an invalid length.
[  199.117353][T10513] __nla_validate_parse: 11 callbacks suppressed
[  199.117370][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1254'.
[  199.489250][T10525] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  199.520458][T10525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.581448][T10539] netlink: 'syz.2.1260': attribute type 1 has an invalid length.
[  199.631512][T10538] netlink: 'syz.4.1261': attribute type 3 has an invalid length.
[  199.637310][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1260'.
[  199.763052][T10539] 8021q: adding VLAN 0 to HW filter on device bond5
[  199.885334][T10541] bond5: (slave veth3): Enslaving as an active interface with a down link
[  199.943550][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'.
[  200.115154][T10545] veth5: entered promiscuous mode
[  200.159729][T10545] bond5: (slave veth5): Enslaving as an active interface with a down link
[  200.220787][T10539] vlan2: entered allmulticast mode
[  200.231993][T10539] bond5: entered allmulticast mode
[  200.239274][T10539] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  200.330286][T10569] netlink: 'syz.4.1268': attribute type 1 has an invalid length.
[  200.391488][T10548] bond6: option min_links: invalid value (18446744073709551582)
[  200.402294][T10548] bond6: option min_links: allowed values 0 - 2147483647
[  200.436140][T10548] bond6 (unregistering): Released all slaves
[  200.982698][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'.
[  201.042660][T10606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1281'.
[  201.095242][T10609] netlink: 'syz.3.1282': attribute type 1 has an invalid length.
[  201.158679][T10609] bond6: entered promiscuous mode
[  201.164712][T10609] 8021q: adding VLAN 0 to HW filter on device bond6
[  201.233085][T10620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1285'.
[  201.250389][T10617] bond6: (slave bridge4): making interface the new active one
[  201.261431][T10617] bridge4: entered promiscuous mode
[  201.268379][T10617] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  201.365765][T10628] netlink: 'syz.0.1287': attribute type 1 has an invalid length.
[  201.399753][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'.
[  201.486261][T10634] syzkaller0: entered promiscuous mode
[  201.492210][T10634] syzkaller0: entered allmulticast mode
[  201.711273][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1292'.
[  201.780217][T10655] netlink: 'syz.3.1293': attribute type 5 has an invalid length.
[  201.889219][T10661] netlink: 'syz.3.1297': attribute type 32 has an invalid length.
[  201.987937][T10667] Cannot find add_set index 65532 as target
[  202.149482][T10681] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  202.164393][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'.
[  202.248450][T10686] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  202.290905][T10688] netlink: 'syz.4.1307': attribute type 2 has an invalid length.
[  202.336404][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'.
[  202.406276][T10699] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  202.416953][T10699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.617200][T10714] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  202.650558][T10714] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  203.020201][ T9882] tipc: Subscription rejected, illegal request
[  203.058593][T10740] syzkaller1: entered promiscuous mode
[  203.077343][T10740] syzkaller1: entered allmulticast mode
[  203.133533][T10749] bond5: entered promiscuous mode
[  203.139136][T10749] 8021q: adding VLAN 0 to HW filter on device bond5
[  203.155841][T10740] bridge0: port 1(syz_tun) entered disabled state
[  203.184841][T10755] xt_CT: You must specify a L4 protocol and not use inversions on it
[  203.248603][T10754] 8021q: adding VLAN 0 to HW filter on device bond5
[  203.257054][T10754] bond5: (slave gtp1): The slave device specified does not support setting the MAC address
[  203.268592][T10754] bond5: (slave gtp1): Error -95 calling set_mac_address
[  203.510966][T10777] netlink: 'syz.3.1329': attribute type 33 has an invalid length.
[  203.980314][T10813] smc: net device vcan0 applied user defined pnetid SYZ1
[  204.065076][T10814] syzkaller1: entered promiscuous mode
[  204.070584][T10814] syzkaller1: entered allmulticast mode
[  204.161980][T10826] __nla_validate_parse: 7 callbacks suppressed
[  204.161997][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1344'.
[  204.402077][T10848] netlink: 'syz.0.1350': attribute type 23 has an invalid length.
[  204.445896][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'.
[  204.645762][T10865] ip6tnl0: Caught tx_queue_len zero misconfig
[  204.943956][T10869] bond0: entered promiscuous mode
[  204.964028][T10869] bond_slave_0: entered promiscuous mode
[  204.973299][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'.
[  204.982682][T10869] bond_slave_1: entered promiscuous mode
[  204.998317][T10869] bond0: left allmulticast mode
[  205.022220][T10869] bond_slave_0: left allmulticast mode
[  205.029372][T10869] bond_slave_1: left allmulticast mode
[  205.352472][T10896] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  205.476767][T10902] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1367'.
[  205.477557][T10901] IPVS: Error connecting to the multicast addr
[  205.686381][T10923] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1372'.
[  205.993302][T10942] syzkaller1: entered promiscuous mode
[  206.009120][T10942] syzkaller1: entered allmulticast mode
[  206.095846][T10955] ieee802154 phy1 wpan1: encryption failed: -22
[  206.164714][T10963] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1383'.
[  206.329829][T10975] netlink: 'syz.3.1387': attribute type 10 has an invalid length.
[  206.343337][T10966] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1385'.
[  206.385450][T10975] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.403125][T10975] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  206.404294][T10981] netlink: 'syz.4.1390': attribute type 1 has an invalid length.
[  206.426209][T10981] netlink: 'syz.4.1390': attribute type 2 has an invalid length.
[  206.443144][T10966] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  206.455399][T10981] netlink: 'syz.4.1390': attribute type 1 has an invalid length.
[  206.473831][T10987] netlink: 'syz.3.1387': attribute type 10 has an invalid length.
[  206.481998][T10981] netlink: 'syz.4.1390': attribute type 2 has an invalid length.
[  206.497938][T10987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1387'.
[  206.505769][T10985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.519437][T10987] batadv0: entered promiscuous mode
[  206.545276][T10987] batadv0: entered allmulticast mode
[  206.615639][T10987] bond0: (slave batadv0): Releasing backup interface
[  206.644932][T10987] bridge0: port 4(batadv0) entered blocking state
[  206.659282][T10987] bridge0: port 4(batadv0) entered disabled state
[  206.720597][T10997] netlink: 'syz.4.1392': attribute type 18 has an invalid length.
[  206.776079][ T9881] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  206.806859][ T9881] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  206.837847][ T9881] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  206.878451][ T9881] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.022798][ T8482] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  207.032448][ T8482] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  207.042349][T11020] Bluetooth: MGMT ver 1.23
[  207.175156][T11035] tc_dump_action: action bad kind
[  207.194493][T11040] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  207.243257][T11046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1403'.
[  207.277764][T11044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1403'.
[  208.665736][T11121] bridge10: entered promiscuous mode
[  208.671084][T11121] bridge10: entered allmulticast mode
[  209.102761][T11149] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  209.541763][T11163] __nla_validate_parse: 5 callbacks suppressed
[  209.541781][T11163] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1433'.
[  209.598718][T11163] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2
[  209.776248][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'.
[  209.788788][T11169] netlink: 'syz.2.1434': attribute type 30 has an invalid length.
[  209.826738][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'.
[  210.089290][T11187] netlink: 'syz.4.1441': attribute type 10 has an invalid length.
[  210.101121][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'.
[  210.162128][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'.
[  210.249965][T11196] netlink: 'syz.2.1444': attribute type 1 has an invalid length.
[  210.639310][T11201] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  210.755884][T11226] netlink: 'syz.4.1450': attribute type 10 has an invalid length.
[  210.818099][T11226] dummy0: entered promiscuous mode
[  210.863672][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'.
[  210.864629][T11226] team0: Port device dummy0 added
[  210.880950][T11235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1452'.
[  210.894148][T11234] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1453'.
[  210.925374][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'.
[  211.144588][T11251] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1461'.
[  211.348088][T11261] lo speed is unknown, defaulting to 1000
[  212.001968][T11285] lo speed is unknown, defaulting to 1000
[  212.493287][T11311] netlink: 'syz.1.1475': attribute type 13 has an invalid length.
[  212.710985][T11317] tipc: Started in network mode
[  212.716524][T11317] tipc: Node identity 080211, cluster identity 4711
[  212.726569][T11317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.750551][T11317] lo: entered allmulticast mode
[  213.061376][T11332] 8021q: adding VLAN 0 to HW filter on device bond5
[  213.231544][T11354] netlink: 'syz.4.1488': attribute type 2 has an invalid length.
[  213.243731][T11353] xfrm1: entered promiscuous mode
[  213.248798][T11353] xfrm1: entered allmulticast mode
[  213.573554][T11371] netlink: 'syz.1.1492': attribute type 10 has an invalid length.
[  213.652417][T11373] macsec0: entered promiscuous mode
[  213.667872][T11373] macsec0: entered allmulticast mode
[  213.843285][   T10] tipc: Node number set to 134353152
[  214.139817][T11396] syzkaller0: entered promiscuous mode
[  214.145977][T11396] syzkaller0: entered allmulticast mode
[  214.867142][T11435] __nla_validate_parse: 13 callbacks suppressed
[  214.867159][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1510'.
[  214.947801][T11440] Bluetooth: hci1: too big key_count value 32778
[  215.065424][T11449] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  215.140563][T11453] ip6gretap0: entered promiscuous mode
[  215.408741][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'.
[  215.604301][T11484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1522'.
[  215.718430][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1522'.
[  216.686816][T11491] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1523'.
[  216.876871][T11517] netlink: 'syz.1.1529': attribute type 11 has an invalid length.
[  217.095014][T11531] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1532'.
[  217.098023][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'.
[  217.194368][T11534] bond3: Unable to set down delay as MII monitoring is disabled
[  217.248060][T11534] bond3 (unregistering): Released all slaves
[  217.351060][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'.
[  217.658698][T11547] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  217.695561][T11547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.736649][T11548] smc: net device gre0 applied user defined pnetid SYZ1
[  217.780913][T11547] smc: net device vcan0 erased user defined pnetid SYZ1
[  217.793849][T11547] smc: net device gre0 erased user defined pnetid SYZ1
[  217.953756][T11560] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1541'.
[  217.963383][T11560] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1541'.
[  218.002396][T11560] netlink: 'syz.0.1541': attribute type 5 has an invalid length.
[  218.021845][T11560] netlink: 'syz.0.1541': attribute type 6 has an invalid length.
[  218.038458][T11560] netlink: 'syz.0.1541': attribute type 5 has an invalid length.
[  218.042828][   T51] block nbd1: Possible stuck request ffff8880253fe000: control (read@0,1024B). Runtime 60 seconds
[  218.049128][T11560] netlink: 'syz.0.1541': attribute type 6 has an invalid length.
[  218.057074][   T51] block nbd1: Possible stuck request ffff8880253fe1c0: control (read@1024,1024B). Runtime 60 seconds
[  218.075822][   T51] block nbd1: Possible stuck request ffff8880253fe380: control (read@2048,1024B). Runtime 60 seconds
[  218.087976][   T51] block nbd1: Possible stuck request ffff8880253fe540: control (read@3072,1024B). Runtime 60 seconds
[  218.207191][T11550] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  219.444175][T11575] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  220.146785][T11623] syzkaller1: entered promiscuous mode
[  220.155193][T11623] syzkaller1: entered allmulticast mode
[  220.172584][T11623] netlink: 'syz.4.1556': attribute type 5 has an invalid length.
[  220.580286][T11663] __nla_validate_parse: 7 callbacks suppressed
[  220.580304][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1565'.
[  220.748625][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'.
[  220.904782][T11683] netlink: 'syz.4.1573': attribute type 63 has an invalid length.
[  221.031497][T11689] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  221.324281][T11713] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  221.342450][T11713] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  221.455396][T11719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1583'.
[  221.486913][T11714] dummy0: left promiscuous mode
[  221.495766][T11714] team0: Port device dummy0 removed
[  221.508309][T11714] batman_adv: batadv0: Adding interface: dummy0
[  221.518372][T11714] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.576433][T11714] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  221.920572][T11719] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  221.934193][T11719] bond6 (unregistering): Released all slaves
[  222.549789][T11724] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1584'.
[  222.747085][T11735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1588'.
[  222.761035][T11736] netlink: 'syz.0.1586': attribute type 1 has an invalid length.
[  222.784202][T11736] netlink: 'syz.0.1586': attribute type 2 has an invalid length.
[  222.912651][T11735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1588'.
[  222.991744][T11752] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1592'.
[  223.050746][T11752] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1592'.
[  223.523442][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1598'.
[  223.705901][T11807] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1604'.
[  223.706496][T11808] netlink: 'syz.4.1603': attribute type 21 has an invalid length.
[  223.715482][T11807] nbd: illegal input index -8454144
[  223.762391][T11810] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  223.818936][T11821] netlink: 'syz.3.1602': attribute type 2 has an invalid length.
[  224.784399][T11884] netlink: 'syz.1.1628': attribute type 23 has an invalid length.
[  225.073538][T11902] netlink: 'syz.4.1634': attribute type 1 has an invalid length.
[  225.820705][T11935] openvswitch: netlink: ERSPAN option length err (len 1192, max 255).
[  226.014480][T11945] __nla_validate_parse: 4 callbacks suppressed
[  226.014498][T11945] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1649'.
[  226.050830][T11947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.182815][T11960] netlink: 'syz.1.1653': attribute type 1 has an invalid length.
[  226.203922][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'.
[  226.283034][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1655'.
[  226.402262][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'.
[  226.436290][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'.
[  226.478193][T11977] netlink: 'syz.2.1656': attribute type 1 has an invalid length.
[  226.489832][T11977] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1656'.
[  226.556812][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'.
[  226.640691][T11985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1662'.
[  226.676638][T11985] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1662'.
[  226.697248][T11985] netlink: 'syz.3.1662': attribute type 1 has an invalid length.
[  226.709773][T11985] netlink: 'syz.3.1662': attribute type 1 has an invalid length.
[  226.717988][T11985] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.1662'.
[  226.729812][T11988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.739902][T11988] syzkaller0: entered promiscuous mode
[  226.750711][T11988] syzkaller0: entered allmulticast mode
[  226.797054][T11988] tipc: Resetting bearer <eth:syzkaller0>
[  226.829978][T11987] tipc: Resetting bearer <eth:syzkaller0>
[  226.881636][T11987] tipc: Disabling bearer <eth:syzkaller0>
[  227.153617][T12025] syzkaller1: entered promiscuous mode
[  227.159242][T12025] syzkaller1: entered allmulticast mode
[  227.815954][T12067] validate_nla: 2 callbacks suppressed
[  227.815966][T12067] netlink: 'syz.0.1686': attribute type 10 has an invalid length.
[  227.830088][T12067] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  227.837808][T12067] bond0: (slave wlan1): Opening slave failed
[  228.058293][T12081] netlink: 'syz.0.1691': attribute type 1 has an invalid length.
[  228.088711][T12081] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.229105][T12097] netlink: 'syz.0.1695': attribute type 1 has an invalid length.
[  229.851149][T12149] netlink: 'syz.4.1711': attribute type 1 has an invalid length.
[  229.876437][T12149] 8021q: adding VLAN 0 to HW filter on device bond6
[  229.895821][T12149] bond6: (slave geneve3): making interface the new active one
[  229.904654][T12149] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  230.011561][T12158] netlink: 'syz.4.1714': attribute type 10 has an invalid length.
[  230.020435][T12158] team_slave_0: left promiscuous mode
[  230.027029][T12158] team_slave_1: left promiscuous mode
[  230.673147][ T5198] udevd[5198]: worker [7187] /devices/virtual/block/nbd1 is taking a long time
[  231.938929][T12174] __nla_validate_parse: 10 callbacks suppressed
[  231.938941][T12174] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1720'.
[  231.955596][T12174] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1720'.
[  232.038488][T12176] netlink: 'syz.4.1721': attribute type 13 has an invalid length.
[  232.159899][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'.
[  232.411613][T12186] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1724'.
[  232.421636][T12186] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1724'.
[  232.546557][T12192] lo speed is unknown, defaulting to 1000
[  248.132237][   T51] block nbd1: Possible stuck request ffff8880253fe000: control (read@0,1024B). Runtime 90 seconds
[  248.143007][   T51] block nbd1: Possible stuck request ffff8880253fe1c0: control (read@1024,1024B). Runtime 90 seconds
[  248.153987][   T51] block nbd1: Possible stuck request ffff8880253fe380: control (read@2048,1024B). Runtime 90 seconds
[  248.165176][   T51] block nbd1: Possible stuck request ffff8880253fe540: control (read@3072,1024B). Runtime 90 seconds
[  255.805731][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  278.202994][   T51] block nbd1: Possible stuck request ffff8880253fe000: control (read@0,1024B). Runtime 120 seconds
[  278.213913][   T51] block nbd1: Possible stuck request ffff8880253fe1c0: control (read@1024,1024B). Runtime 120 seconds
[  278.224994][   T51] block nbd1: Possible stuck request ffff8880253fe380: control (read@2048,1024B). Runtime 120 seconds
[  278.236488][   T51] block nbd1: Possible stuck request ffff8880253fe540: control (read@3072,1024B). Runtime 120 seconds
[  308.288889][   T51] block nbd1: Possible stuck request ffff8880253fe000: control (read@0,1024B). Runtime 150 seconds
[  308.299836][   T51] block nbd1: Possible stuck request ffff8880253fe1c0: control (read@1024,1024B). Runtime 150 seconds
[  308.310924][   T51] block nbd1: Possible stuck request ffff8880253fe380: control (read@2048,1024B). Runtime 150 seconds
[  308.322106][   T51] block nbd1: Possible stuck request ffff8880253fe540: control (read@3072,1024B). Runtime 150 seconds
[  317.245382][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  338.329701][ T5198] udevd[5198]: worker [7187] /devices/virtual/block/nbd1 timeout; kill it
[  338.341552][ T5198] udevd[5198]: seq 12793 '/devices/virtual/block/nbd1' killed
[  338.365828][   T51] block nbd1: Possible stuck request ffff8880253fe000: control (read@0,1024B). Runtime 180 seconds
[  338.376700][   T51] block nbd1: Possible stuck request ffff8880253fe1c0: control (read@1024,1024B). Runtime 180 seconds
[  338.388156][   T51] block nbd1: Possible stuck request ffff8880253fe380: control (read@2048,1024B). Runtime 180 seconds
[  338.399231][   T51] block nbd1: Possible stuck request ffff8880253fe540: control (read@3072,1024B). Runtime 180 seconds
[  368.453146][   T51] block nbd1: Possible stuck request ffff8880253fe000: control (read@0,1024B). Runtime 210 seconds
[  368.464081][   T51] block nbd1: Possible stuck request ffff8880253fe1c0: control (read@1024,1024B). Runtime 210 seconds
[  368.475429][   T51] block nbd1: Possible stuck request ffff8880253fe380: control (read@2048,1024B). Runtime 210 seconds
[  368.486754][   T51] block nbd1: Possible stuck request ffff8880253fe540: control (read@3072,1024B). Runtime 210 seconds
[  378.687209][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  378.688514][   T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds.
[  378.701821][   T31]       Not tainted syzkaller #0
[  378.706766][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  378.716000][   T31] task:kworker/0:0     state:D stack:20728 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00080000
[  378.729018][   T31] Workqueue: events rfkill_sync_work
[  378.734468][   T31] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  378.737751][   T31]  <TASK>
[  378.740833][   T31]  __schedule+0x1798/0x4cc0
[  378.746515][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  378.752129][   T31]  ? __pfx___schedule+0x10/0x10
[  378.757029][   T31]  ? schedule+0x91/0x360
[  378.761304][   T31]  schedule+0x165/0x360
[  378.765716][   T31]  schedule_preempt_disabled+0x13/0x30
[  378.789423][   T31]  __mutex_lock+0x7e6/0x1350
[  378.811146][   T31]  ? __mutex_lock+0x5bb/0x1350
[  378.816381][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  378.822265][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  378.827319][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.841584][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  378.848257][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  378.854718][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  378.860449][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  378.865729][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  378.871546][   T31]  rfkill_set_block+0x1d2/0x440
[  378.877048][   T31]  rfkill_sync_work+0x114/0x200
[  378.881975][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  378.887708][   T31]  process_scheduled_works+0xae1/0x17b0
[  378.893414][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  378.899599][   T31]  worker_thread+0x8a0/0xda0
[  378.904657][   T31]  kthread+0x711/0x8a0
[  378.908728][   T31]  ? __pfx_worker_thread+0x10/0x10
[  378.913951][   T31]  ? __pfx_kthread+0x10/0x10
[  378.918561][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.924747][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.929992][   T31]  ? __pfx_kthread+0x10/0x10
[  378.935095][   T31]  ret_from_fork+0x4bc/0x870
[  378.939694][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  378.945076][   T31]  ? __switch_to_asm+0x39/0x70
[  378.949859][   T31]  ? __switch_to_asm+0x33/0x70
[  378.954691][   T31]  ? __pfx_kthread+0x10/0x10
[  378.959303][   T31]  ret_from_fork_asm+0x1a/0x30
[  378.964535][   T31]  </TASK>
[  378.967582][   T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds.
[  378.975357][   T31]       Not tainted syzkaller #0
[  378.980377][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  378.989128][   T31] task:kworker/1:0     state:D stack:24184 pid:24    tgid:24    ppid:2      task_flags:0x4208060 flags:0x00080000
[  379.001644][   T31] Workqueue: events rfkill_sync_work
[  379.007274][   T31] Call Trace:
[  379.010571][   T31]  <TASK>
[  379.013668][   T31]  __schedule+0x1798/0x4cc0
[  379.018195][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  379.023775][   T31]  ? __pfx___schedule+0x10/0x10
[  379.028648][   T31]  ? schedule+0x91/0x360
[  379.033290][   T31]  schedule+0x165/0x360
[  379.037460][   T31]  schedule_preempt_disabled+0x13/0x30
[  379.042997][   T31]  __mutex_lock+0x7e6/0x1350
[  379.047602][   T31]  ? __mutex_lock+0x5bb/0x1350
[  379.052951][   T31]  ? rfkill_sync_work+0x2e/0x200
[  379.057911][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  379.063002][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  379.068734][   T31]  rfkill_sync_work+0x2e/0x200
[  379.073563][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  379.079315][   T31]  process_scheduled_works+0xae1/0x17b0
[  379.085472][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  379.091471][   T31]  worker_thread+0x8a0/0xda0
[  379.096133][   T31]  kthread+0x711/0x8a0
[  379.100379][   T31]  ? __pfx_worker_thread+0x10/0x10
[  379.105738][   T31]  ? __pfx_kthread+0x10/0x10
[  379.110365][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.116134][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.121353][   T31]  ? __pfx_kthread+0x10/0x10
[  379.125994][   T31]  ret_from_fork+0x4bc/0x870
[  379.130596][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  379.135799][   T31]  ? __switch_to_asm+0x39/0x70
[  379.140571][   T31]  ? __switch_to_asm+0x33/0x70
[  379.145781][   T31]  ? __pfx_kthread+0x10/0x10
[  379.150524][   T31]  ret_from_fork_asm+0x1a/0x30
[  379.155436][   T31]  </TASK>
[  379.158592][   T31] INFO: task kworker/0:4:5925 blocked for more than 143 seconds.
[  379.166614][   T31]       Not tainted syzkaller #0
[  379.172439][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  379.181122][   T31] task:kworker/0:4     state:D stack:22992 pid:5925  tgid:5925  ppid:2      task_flags:0x4208060 flags:0x00080000
[  379.193397][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  379.200091][   T31] Call Trace:
[  379.203787][   T31]  <TASK>
[  379.206722][   T31]  __schedule+0x1798/0x4cc0
[  379.211226][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  379.216670][   T31]  ? __pfx___schedule+0x10/0x10
[  379.221539][   T31]  ? schedule+0x91/0x360
[  379.225867][   T31]  schedule+0x165/0x360
[  379.230036][   T31]  schedule_preempt_disabled+0x13/0x30
[  379.236105][   T31]  __mutex_lock+0x7e6/0x1350
[  379.240870][   T31]  ? __mutex_lock+0x5bb/0x1350
[  379.245697][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  379.252020][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  379.257045][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  379.263276][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  379.268999][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  379.275115][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  379.280838][   T31]  process_scheduled_works+0xae1/0x17b0
[  379.286571][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  379.292851][   T31]  worker_thread+0x8a0/0xda0
[  379.297448][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  379.304024][   T31]  ? __kthread_parkme+0x7b/0x200
[  379.309002][   T31]  kthread+0x711/0x8a0
[  379.313121][   T31]  ? __pfx_worker_thread+0x10/0x10
[  379.318254][   T31]  ? __pfx_kthread+0x10/0x10
[  379.323503][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.328724][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.333979][   T31]  ? __pfx_kthread+0x10/0x10
[  379.338608][   T31]  ret_from_fork+0x4bc/0x870
[  379.343322][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  379.348456][   T31]  ? __switch_to_asm+0x39/0x70
[  379.353715][   T31]  ? __switch_to_asm+0x33/0x70
[  379.358706][   T31]  ? __pfx_kthread+0x10/0x10
[  379.363475][   T31]  ret_from_fork_asm+0x1a/0x30
[  379.368364][   T31]  </TASK>
[  379.371575][   T31] INFO: task syz.2.1671:12015 blocked for more than 144 seconds.
[  379.382256][   T31]       Not tainted syzkaller #0
[  379.387230][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  379.396469][   T31] task:syz.2.1671      state:D stack:23080 pid:12015 tgid:12013 ppid:5826   task_flags:0x400140 flags:0x00080002
[  379.408531][   T31] Call Trace:
[  379.412331][   T31]  <TASK>
[  379.415276][   T31]  __schedule+0x1798/0x4cc0
[  379.419792][   T31]  ? validate_chain+0x897/0x2140
[  379.425346][   T31]  ? __lock_acquire+0xab9/0xd20
[  379.430212][   T31]  ? __pfx___schedule+0x10/0x10
[  379.435156][   T31]  ? schedule+0x91/0x360
[  379.439467][   T31]  schedule+0x165/0x360
[  379.444032][   T31]  schedule_timeout+0x9a/0x270
[  379.448801][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  379.454266][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.459476][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.464747][   T31]  ? wait_for_completion+0x267/0x5d0
[  379.470051][   T31]  wait_for_completion+0x2bf/0x5d0
[  379.475745][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  379.481425][   T31]  ? __flush_work+0xd2/0xbc0
[  379.486250][   T31]  ? __flush_work+0xd2/0xbc0
[  379.491044][   T31]  __flush_work+0x9b9/0xbc0
[  379.495601][   T31]  ? __flush_work+0xd2/0xbc0
[  379.500204][   T31]  ? __pfx___flush_work+0x10/0x10
[  379.505632][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  379.510921][   T31]  ? __pfx___cancel_work+0x10/0x10
[  379.516064][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  379.522239][   T31]  __cancel_work_sync+0xbe/0x110
[  379.527213][   T31]  rfkill_unregister+0x92/0x220
[  379.532560][   T31]  wiphy_unregister+0x238/0xae0
[  379.537421][   T31]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  379.543484][   T31]  ? __pfx_wiphy_unregister+0x10/0x10
[  379.548872][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.554372][   T31]  ? ieee80211_unregister_hw+0x144/0x2c0
[  379.560031][   T31]  ieee80211_unregister_hw+0x1e2/0x2c0
[  379.566000][   T31]  mac80211_hwsim_del_radio+0x275/0x460
[  379.571564][   T31]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  379.577702][   T31]  mac80211_hwsim_netlink_notify+0xfc2/0x1320
[  379.583879][   T31]  ? mac80211_hwsim_netlink_notify+0x3c7/0x1320
[  379.590192][   T31]  ? __pfx_mac80211_hwsim_netlink_notify+0x10/0x10
[  379.597238][   T31]  ? _raw_spin_unlock+0x28/0x50
[  379.602171][   T31]  ? nl80211_netlink_notify+0x74/0x840
[  379.607647][   T31]  notifier_call_chain+0x1b6/0x3e0
[  379.612870][   T31]  blocking_notifier_call_chain+0x6a/0x90
[  379.618701][   T31]  netlink_release+0x1280/0x1b40
[  379.624084][   T31]  ? netlink_release+0x108/0x1b40
[  379.629234][   T31]  ? __pfx_netlink_release+0x10/0x10
[  379.634608][   T31]  ? down_write+0x162/0x1f0
[  379.639289][   T31]  ? __pfx_down_write+0x10/0x10
[  379.644340][   T31]  ? do_raw_spin_lock+0x121/0x290
[  379.649381][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  379.655402][   T31]  sock_close+0xc3/0x240
[  379.659764][   T31]  ? __pfx_sock_close+0x10/0x10
[  379.665302][   T31]  __fput+0x44c/0xa70
[  379.669314][   T31]  task_work_run+0x1d4/0x260
[  379.673985][   T31]  ? __pfx_task_work_run+0x10/0x10
[  379.679393][   T31]  ? exit_to_user_mode_loop+0x40/0x130
[  379.685359][   T31]  exit_to_user_mode_loop+0xe9/0x130
[  379.690868][   T31]  do_syscall_64+0x2bd/0xfa0
[  379.695526][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.700757][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.706936][   T31]  ? clear_bhb_loop+0x60/0xb0
[  379.711627][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.718282][   T31] RIP: 0033:0x7f4e6278f749
[  379.722878][   T31] RSP: 002b:00007f4e636df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  379.731304][   T31] RAX: 0000000000000018 RBX: 00007f4e629e5fa0 RCX: 00007f4e6278f749
[  379.739338][   T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003
[  379.747620][   T31] RBP: 00007f4e62813f91 R08: 0000000000000000 R09: 0000000000000000
[  379.755650][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.763677][   T31] R13: 00007f4e629e6038 R14: 00007f4e629e5fa0 R15: 00007ffc6b00add8
[  379.771654][   T31]  </TASK>
[  379.775176][   T31] INFO: task syz.3.1670:12016 blocked for more than 144 seconds.
[  379.782976][   T31]       Not tainted syzkaller #0
[  379.787952][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  379.796853][   T31] task:syz.3.1670      state:D stack:27904 pid:12016 tgid:12016 ppid:5830   task_flags:0x400040 flags:0x00080002
[  379.809309][   T31] Call Trace:
[  379.812647][   T31]  <TASK>
[  379.815591][   T31]  __schedule+0x1798/0x4cc0
[  379.820136][   T31]  ? validate_chain+0x897/0x2140
[  379.825223][   T31]  ? __lock_acquire+0xab9/0xd20
[  379.830085][   T31]  ? __pfx___schedule+0x10/0x10
[  379.835501][   T31]  ? schedule+0x91/0x360
[  379.839777][   T31]  schedule+0x165/0x360
[  379.844008][   T31]  schedule_timeout+0x9a/0x270
[  379.848907][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  379.854335][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.859641][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.865264][   T31]  ? wait_for_completion+0x267/0x5d0
[  379.870546][   T31]  wait_for_completion+0x2bf/0x5d0
[  379.875724][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  379.881465][   T31]  ? __flush_work+0xd2/0xbc0
[  379.886410][   T31]  ? __flush_work+0xd2/0xbc0
[  379.891026][   T31]  __flush_work+0x9b9/0xbc0
[  379.895948][   T31]  ? __flush_work+0xd2/0xbc0
[  379.900532][   T31]  ? __pfx___flush_work+0x10/0x10
[  379.905594][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  379.910892][   T31]  ? __pfx___cancel_work+0x10/0x10
[  379.916035][   T31]  ? nfc_genl_device_removed+0x23c/0x330
[  379.921709][   T31]  __cancel_work_sync+0xbe/0x110
[  379.927089][   T31]  rfkill_unregister+0x92/0x220
[  379.932054][   T31]  nfc_unregister_device+0x96/0x2a0
[  379.937282][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  379.943083][   T31]  virtual_ncidev_close+0x56/0x90
[  379.948199][   T31]  __fput+0x44c/0xa70
[  379.952789][   T31]  task_work_run+0x1d4/0x260
[  379.957414][   T31]  ? __pfx_task_work_run+0x10/0x10
[  379.962965][   T31]  ? exit_to_user_mode_loop+0x40/0x130
[  379.968453][   T31]  exit_to_user_mode_loop+0xe9/0x130
[  379.973804][   T31]  do_syscall_64+0x2bd/0xfa0
[  379.978406][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.984046][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.990129][   T31]  ? clear_bhb_loop+0x60/0xb0
[  379.994965][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.000864][   T31] RIP: 0033:0x7f13ceb8f749
[  380.005317][   T31] RSP: 002b:00007ffdb2837348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  380.014028][   T31] RAX: 0000000000000000 RBX: 00000000000376ad RCX: 00007f13ceb8f749
[  380.022058][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  380.030046][   T31] RBP: 00007f13cede7da0 R08: 0000000000000001 R09: 00000005b283763f
[  380.038097][   T31] R10: 0000001b2ff20000 R11: 0000000000000246 R12: 00007f13cede5fac
[  380.049528][   T31] R13: 00007f13cede5fa0 R14: ffffffffffffffff R15: 00007ffdb2837460
[  380.057633][   T31]  </TASK>
[  380.060674][   T31] INFO: task syz.1.1683:12055 blocked for more than 144 seconds.
[  380.068593][   T31]       Not tainted syzkaller #0
[  380.074121][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  380.082865][   T31] task:syz.1.1683      state:D stack:26592 pid:12055 tgid:12054 ppid:5825   task_flags:0x400140 flags:0x00080002
[  380.094837][   T31] Call Trace:
[  380.098128][   T31]  <TASK>
[  380.101067][   T31]  __schedule+0x1798/0x4cc0
[  380.106155][   T31]  ? __lock_acquire+0xab9/0xd20
[  380.111025][   T31]  ? __lock_acquire+0xab9/0xd20
[  380.115985][   T31]  ? __pfx___schedule+0x10/0x10
[  380.120870][   T31]  ? schedule+0x91/0x360
[  380.125197][   T31]  schedule+0x165/0x360
[  380.129580][   T31]  schedule_preempt_disabled+0x13/0x30
[  380.135547][   T31]  __mutex_lock+0x7e6/0x1350
[  380.140158][   T31]  ? __mutex_lock+0x5bb/0x1350
[  380.145013][   T31]  ? rfkill_register+0x37/0x8e0
[  380.149883][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  380.154982][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  380.160371][   T31]  ? device_initialize+0x24b/0x440
[  380.165943][   T31]  rfkill_register+0x37/0x8e0
[  380.170645][   T31]  nfc_register_device+0x14a/0x320
[  380.175871][   T31]  nci_register_device+0x87f/0x9d0
[  380.181007][   T31]  ? __pfx_nci_register_device+0x10/0x10
[  380.187401][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  380.193104][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  380.198504][   T31]  virtual_ncidev_open+0x129/0x1a0
[  380.204009][   T31]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  380.209699][   T31]  misc_open+0x2d5/0x350
[  380.214002][   T31]  chrdev_open+0x4cc/0x5e0
[  380.218445][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  380.223840][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  380.230188][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  380.235175][   T31]  do_dentry_open+0x953/0x13f0
[  380.239956][   T31]  vfs_open+0x3b/0x340
[  380.244064][   T31]  ? path_openat+0x2ecd/0x3830
[  380.248859][   T31]  path_openat+0x2ee5/0x3830
[  380.253894][   T31]  ? __pfx_path_openat+0x10/0x10
[  380.258847][   T31]  do_filp_open+0x1fa/0x410
[  380.263398][   T31]  ? __lock_acquire+0xab9/0xd20
[  380.268253][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  380.273363][   T31]  ? _raw_spin_unlock+0x28/0x50
[  380.278296][   T31]  ? alloc_fd+0x64c/0x6c0
[  380.283268][   T31]  do_sys_openat2+0x121/0x1c0
[  380.287966][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  380.293209][   T31]  ? __pfx___se_sys_futex+0x10/0x10
[  380.298421][   T31]  __x64_sys_openat+0x138/0x170
[  380.303323][   T31]  do_syscall_64+0xfa/0xfa0
[  380.307836][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  380.313597][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.319665][   T31]  ? clear_bhb_loop+0x60/0xb0
[  380.324412][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.330400][   T31] RIP: 0033:0x7f48a938f749
[  380.334968][   T31] RSP: 002b:00007f48aa142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  380.344246][   T31] RAX: ffffffffffffffda RBX: 00007f48a95e5fa0 RCX: 00007f48a938f749
[  380.352278][   T31] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  380.360963][   T31] RBP: 00007f48a9413f91 R08: 0000000000000000 R09: 0000000000000000
[  380.369027][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  380.377403][   T31] R13: 00007f48a95e6038 R14: 00007f48a95e5fa0 R15: 00007fffd3ef6e68
[  380.385441][   T31]  </TASK>
[  380.388488][   T31] INFO: task syz.1.1683:12059 blocked for more than 145 seconds.
[  380.396296][   T31]       Not tainted syzkaller #0
[  380.401231][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  380.410357][   T31] task:syz.1.1683      state:D stack:27016 pid:12059 tgid:12054 ppid:5825   task_flags:0x400140 flags:0x00080002
[  380.422351][   T31] Call Trace:
[  380.425644][   T31]  <TASK>
[  380.428586][   T31]  __schedule+0x1798/0x4cc0
[  380.433426][   T31]  ? security_file_open+0xb1/0x270
[  380.438537][   T31]  ? __lock_acquire+0xab9/0xd20
[  380.443478][   T31]  ? __lock_acquire+0xab9/0xd20
[  380.448330][   T31]  ? __pfx___schedule+0x10/0x10
[  380.453304][   T31]  ? schedule+0x91/0x360
[  380.457572][   T31]  schedule+0x165/0x360
[  380.461770][   T31]  schedule_preempt_disabled+0x13/0x30
[  380.467798][   T31]  __mutex_lock+0x7e6/0x1350
[  380.472447][   T31]  ? __mutex_lock+0x5bb/0x1350
[  380.477222][   T31]  ? misc_open+0x51/0x350
[  380.481546][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  380.486614][   T31]  misc_open+0x51/0x350
[  380.490778][   T31]  chrdev_open+0x4cc/0x5e0
[  380.495639][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  380.500675][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  380.507090][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  380.512085][   T31]  do_dentry_open+0x953/0x13f0
[  380.516876][   T31]  vfs_open+0x3b/0x340
[  380.520931][   T31]  ? path_openat+0x2ecd/0x3830
[  380.526949][   T31]  path_openat+0x2ee5/0x3830
[  380.531590][   T31]  ? __pfx_path_openat+0x10/0x10
[  380.536621][   T31]  do_filp_open+0x1fa/0x410
[  380.541150][   T31]  ? __lock_acquire+0xab9/0xd20
[  380.546098][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  380.551163][   T31]  ? _raw_spin_unlock+0x28/0x50
[  380.556401][   T31]  ? alloc_fd+0x64c/0x6c0
[  380.560744][   T31]  do_sys_openat2+0x121/0x1c0
[  380.565505][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  380.570724][   T31]  ? rcu_is_watching+0x15/0xb0
[  380.575980][   T31]  __x64_sys_openat+0x138/0x170
[  380.581019][   T31]  do_syscall_64+0xfa/0xfa0
[  380.585945][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  380.591142][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.597325][   T31]  ? clear_bhb_loop+0x60/0xb0
[  380.602216][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.608117][   T31] RIP: 0033:0x7f48a938f749
[  380.613012][   T31] RSP: 002b:00007f48a75f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  380.621425][   T31] RAX: ffffffffffffffda RBX: 00007f48a95e6090 RCX: 00007f48a938f749
[  380.629466][   T31] RDX: 0000000000000080 RSI: 0000200000000c00 RDI: ffffffffffffff9c
[  380.637474][   T31] RBP: 00007f48a9413f91 R08: 0000000000000000 R09: 0000000000000000
[  380.645849][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  380.653900][   T31] R13: 00007f48a95e6128 R14: 00007f48a95e6090 R15: 00007fffd3ef6e68
[  380.661950][   T31]  </TASK>
[  380.665009][   T31] INFO: task syz.0.1699:12105 blocked for more than 145 seconds.
[  380.673236][   T31]       Not tainted syzkaller #0
[  380.678202][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  380.686933][   T31] task:syz.0.1699      state:D stack:28296 pid:12105 tgid:12104 ppid:5827   task_flags:0x400040 flags:0x00080002
[  380.698912][   T31] Call Trace:
[  380.702696][   T31]  <TASK>
[  380.705633][   T31]  __schedule+0x1798/0x4cc0
[  380.710128][   T31]  ? security_file_open+0xb1/0x270
[  380.715278][   T31]  ? __lock_acquire+0xab9/0xd20
[  380.720143][   T31]  ? __lock_acquire+0xab9/0xd20
[  380.725184][   T31]  ? __pfx___schedule+0x10/0x10
[  380.730057][   T31]  ? schedule+0x91/0x360
[  380.734788][   T31]  schedule+0x165/0x360
[  380.738943][   T31]  schedule_preempt_disabled+0x13/0x30
[  380.744489][   T31]  __mutex_lock+0x7e6/0x1350
[  380.749094][   T31]  ? __mutex_lock+0x5bb/0x1350
[  380.753915][   T31]  ? misc_open+0x51/0x350
[  380.758255][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  380.763863][   T31]  misc_open+0x51/0x350
[  380.768035][   T31]  chrdev_open+0x4cc/0x5e0
[  380.772558][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  380.777510][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  380.784184][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  380.789123][   T31]  do_dentry_open+0x953/0x13f0
[  380.794313][   T31]  vfs_open+0x3b/0x340
[  380.798372][   T31]  ? path_openat+0x2ecd/0x3830
[  380.803233][   T31]  path_openat+0x2ee5/0x3830
[  380.807850][   T31]  ? __pfx_path_openat+0x10/0x10
[  380.812830][   T31]  do_filp_open+0x1fa/0x410
[  380.817337][   T31]  ? __lock_acquire+0xab9/0xd20
[  380.822745][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  380.827796][   T31]  ? _raw_spin_unlock+0x28/0x50
[  380.832705][   T31]  ? alloc_fd+0x64c/0x6c0
[  380.837049][   T31]  do_sys_openat2+0x121/0x1c0
[  380.841722][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  380.847138][   T31]  ? rcu_is_watching+0x15/0xb0
[  380.852271][   T31]  __x64_sys_openat+0x138/0x170
[  380.857123][   T31]  do_syscall_64+0xfa/0xfa0
[  380.861616][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  380.866886][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.873001][   T31]  ? clear_bhb_loop+0x60/0xb0
[  380.877755][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.884156][   T31] RIP: 0033:0x7f51d158f749
[  380.888630][   T31] RSP: 002b:00007f51d2490038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  380.897089][   T31] RAX: ffffffffffffffda RBX: 00007f51d17e5fa0 RCX: 00007f51d158f749
[  380.905457][   T31] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  380.913953][   T31] RBP: 00007f51d1613f91 R08: 0000000000000000 R09: 0000000000000000
[  380.922080][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  380.930065][   T31] R13: 00007f51d17e6038 R14: 00007f51d17e5fa0 R15: 00007ffda464d8b8
[  380.938112][   T31]  </TASK>
[  380.941146][   T31] INFO: task syz.4.1726:12197 blocked for more than 145 seconds.
[  380.949312][   T31]       Not tainted syzkaller #0
[  380.954305][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  380.962996][   T31] task:syz.4.1726      state:D stack:28296 pid:12197 tgid:12196 ppid:5840   task_flags:0x400040 flags:0x00080002
[  380.975332][   T31] Call Trace:
[  380.978650][   T31]  <TASK>
[  380.981572][   T31]  __schedule+0x1798/0x4cc0
[  380.986278][   T31]  ? security_file_open+0xb1/0x270
[  380.991402][   T31]  ? __lock_acquire+0xab9/0xd20
[  380.996319][   T31]  ? __lock_acquire+0xab9/0xd20
[  381.001173][   T31]  ? __pfx___schedule+0x10/0x10
[  381.006557][   T31]  ? schedule+0x91/0x360
[  381.010815][   T31]  schedule+0x165/0x360
[  381.015030][   T31]  schedule_preempt_disabled+0x13/0x30
[  381.020504][   T31]  __mutex_lock+0x7e6/0x1350
[  381.025151][   T31]  ? __mutex_lock+0x5bb/0x1350
[  381.029922][   T31]  ? misc_open+0x51/0x350
[  381.034808][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  381.039853][   T31]  misc_open+0x51/0x350
[  381.044100][   T31]  chrdev_open+0x4cc/0x5e0
[  381.048523][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  381.053518][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  381.059852][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  381.065194][   T31]  do_dentry_open+0x953/0x13f0
[  381.069960][   T31]  vfs_open+0x3b/0x340
[  381.074069][   T31]  ? path_openat+0x2ecd/0x3830
[  381.078839][   T31]  path_openat+0x2ee5/0x3830
[  381.083708][   T31]  ? __pfx_path_openat+0x10/0x10
[  381.088686][   T31]  do_filp_open+0x1fa/0x410
[  381.093385][   T31]  ? __lock_acquire+0xab9/0xd20
[  381.098244][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  381.103562][   T31]  ? _raw_spin_unlock+0x28/0x50
[  381.108408][   T31]  ? alloc_fd+0x64c/0x6c0
[  381.112888][   T31]  do_sys_openat2+0x121/0x1c0
[  381.117573][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  381.122841][   T31]  ? exc_page_fault+0x82/0x100
[  381.127623][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  381.133268][   T31]  __x64_sys_openat+0x138/0x170
[  381.138138][   T31]  do_syscall_64+0xfa/0xfa0
[  381.142742][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.148080][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.154468][   T31]  ? clear_bhb_loop+0x60/0xb0
[  381.160075][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.166412][   T31] RIP: 0033:0x7f8f6498f749
[  381.170846][   T31] RSP: 002b:00007f8f658f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  381.179698][   T31] RAX: ffffffffffffffda RBX: 00007f8f64be5fa0 RCX: 00007f8f6498f749
[  381.188151][   T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  381.196605][   T31] RBP: 00007f8f64a13f91 R08: 0000000000000000 R09: 0000000000000000
[  381.204657][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  381.212672][   T31] R13: 00007f8f64be6038 R14: 00007f8f64be5fa0 R15: 00007ffd429cf618
[  381.220848][   T31]  </TASK>
[  381.224397][   T31] 
[  381.224397][   T31] Showing all locks held in the system:
[  381.232183][   T31] 4 locks held by kworker/0:0/9:
[  381.237168][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  381.248370][   T31]  #1: ffffc900000e7ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  381.261588][   T31]  #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  381.271934][   T31]  #3: ffff8880243a4100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  381.281625][   T31] 3 locks held by kworker/1:0/24:
[  381.287164][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  381.298210][   T31]  #1: ffffc900001e7ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  381.310621][   T31]  #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  381.320952][   T31] 1 lock held by khungtaskd/31:
[  381.325846][   T31]  #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  381.335791][   T31] 2 locks held by getty/5588:
[  381.340452][   T31]  #0: ffff88803331c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  381.350671][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  381.360863][   T31] 3 locks held by kworker/0:4/5925:
[  381.366134][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  381.377612][   T31]  #1: ffffc900046cfba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  381.391378][   T31]  #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  381.403176][   T31] 1 lock held by udevd/7187:
[  381.407771][   T31]  #0: ffff888024bf4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  381.417061][   T31] 2 locks held by syz.2.1671/12015:
[  381.422344][   T31]  #0: ffff888072b07508 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  381.432946][   T31]  #1: ffffffff8f330310 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  381.444161][   T31] 1 lock held by syz.3.1670/12016:
[  381.449266][   T31]  #0: ffff8880243a4100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  381.459077][   T31] 3 locks held by syz.1.1683/12055:
[  381.464580][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.473124][   T31]  #1: ffff888078718100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  381.482762][   T31]  #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  381.493229][   T31] 1 lock held by syz.1.1683/12059:
[  381.498346][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.506906][   T31] 1 lock held by syz.0.1699/12105:
[  381.512076][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.520543][   T31] 1 lock held by syz.4.1726/12197:
[  381.526170][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.534700][   T31] 1 lock held by syz-executor/12209:
[  381.539969][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.548492][   T31] 1 lock held by syz-executor/12210:
[  381.554126][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.562889][   T31] 1 lock held by syz-executor/12211:
[  381.568184][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.576894][   T31] 1 lock held by syz-executor/12213:
[  381.582606][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.591071][   T31] 1 lock held by syz-executor/12215:
[  381.596399][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.604939][   T31] 1 lock held by syz-executor/12221:
[  381.610211][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.619180][   T31] 1 lock held by syz-executor/12222:
[  381.624517][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.633064][   T31] 1 lock held by syz-executor/12223:
[  381.638343][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.647363][   T31] 1 lock held by syz-executor/12225:
[  381.652703][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.661129][   T31] 1 lock held by syz-executor/12228:
[  381.666464][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.675249][   T31] 1 lock held by syz-executor/12232:
[  381.680524][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.689033][   T31] 1 lock held by syz-executor/12233:
[  381.694362][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.703228][   T31] 1 lock held by syz-executor/12234:
[  381.708499][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.717019][   T31] 1 lock held by syz-executor/12236:
[  381.722360][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.730857][   T31] 1 lock held by syz-executor/12241:
[  381.736644][   T31]  #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  381.745195][   T31] 
[  381.747519][   T31] =============================================
[  381.747519][   T31] 
[  381.755999][   T31] NMI backtrace for cpu 1
[  381.756021][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  381.756039][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  381.756048][   T31] Call Trace:
[  381.756054][   T31]  <TASK>
[  381.756062][   T31]  dump_stack_lvl+0x189/0x250
[  381.756088][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.756109][   T31]  ? __pfx__printk+0x10/0x10
[  381.756135][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  381.756157][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  381.756180][   T31]  ? __pfx__printk+0x10/0x10
[  381.756200][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  381.756227][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  381.756251][   T31]  watchdog+0xf60/0xfa0
[  381.756274][   T31]  ? watchdog+0x1e2/0xfa0
[  381.756298][   T31]  kthread+0x711/0x8a0
[  381.756324][   T31]  ? __pfx_watchdog+0x10/0x10
[  381.756341][   T31]  ? __pfx_kthread+0x10/0x10
[  381.756365][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  381.756387][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.756408][   T31]  ? __pfx_kthread+0x10/0x10
[  381.756430][   T31]  ret_from_fork+0x4bc/0x870
[  381.756450][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  381.756476][   T31]  ? __switch_to_asm+0x39/0x70
[  381.756489][   T31]  ? __switch_to_asm+0x33/0x70
[  381.756502][   T31]  ? __pfx_kthread+0x10/0x10
[  381.756524][   T31]  ret_from_fork_asm+0x1a/0x30
[  381.756556][   T31]  </TASK>
[  381.756563][   T31] Sending NMI from CPU 1 to CPUs 0:
[  381.902902][    C0] NMI backtrace for cpu 0
[  381.902930][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  381.902947][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  381.902956][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  381.902982][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 81 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  381.902995][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  381.903009][    C0] RAX: 000cc6eff14f4d00 RBX: ffffffff81967b47 RCX: 000cc6eff14f4d00
[  381.903021][    C0] RDX: 0000000000000001 RSI: ffffffff8d70ed5a RDI: ffffffff8bbf08e0
[  381.903032][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb
[  381.903043][    C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cf470
[  381.903054][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40
[  381.903064][    C0] FS:  0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000
[  381.903076][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  381.903086][    C0] CR2: 00005588530d6000 CR3: 000000000dd38000 CR4: 00000000003526f0
[  381.903100][    C0] Call Trace:
[  381.903107][    C0]  <TASK>
[  381.903112][    C0]  default_idle+0x13/0x20
[  381.903126][    C0]  default_idle_call+0x73/0xb0
[  381.903141][    C0]  do_idle+0x1e7/0x510
[  381.903159][    C0]  ? __pfx_do_idle+0x10/0x10
[  381.903181][    C0]  cpu_startup_entry+0x44/0x60
[  381.903203][    C0]  rest_init+0x2de/0x300
[  381.903219][    C0]  start_kernel+0x3ae/0x410
[  381.903237][    C0]  x86_64_start_reservations+0x24/0x30
[  381.903257][    C0]  x86_64_start_kernel+0x143/0x1c0
[  381.903277][    C0]  common_startup_64+0x13e/0x147
[  381.903302][    C0]  </TASK>