last executing test programs:

28.370128701s ago: executing program 2 (id=3001):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESOCT=0x0], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="050003"], 0x28}}, 0x80) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000140), 0x10) (async, rerun: 32)
sendmsg$can_bcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004a76"], 0x48}}, 0x0) (rerun: 32)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 64)
setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r8 = socket(0x8, 0x0, 0x8000) (async, rerun: 32)
ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, 0x0, 0x0) (async)
sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x48}}, 0x0)
write(r5, &(0x7f0000000040)="05000000010001", 0x7)

27.868251575s ago: executing program 2 (id=3006):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
listen(r0, 0xa1)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0xe, 0x4, 0x1, 0x6, 0xb9, 0x68, 0x0, 0xff, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x1f, 0x8b, [@private=0xa010102, @multicast2, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}, {0x14, 0x1, 0x0, @local, "c6975072cfd871f86f2dc034f64abd929ce0cc1d27cc836ac7657032adfd8520803fcf77760210e3530651365ce9d63b0db2852cc6bb28cfc5c6e4a671b2af79866cbc04397ebc780e249dbe0188b4569ea6485c8d3a3c5b69239a776910578cd576500ec3d7e2c21208a0110e01bbe6eaba004de184c06a1b"}}}, 0xc7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x6414, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

27.302858638s ago: executing program 2 (id=3015):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000280)=0x4, 0x4)

27.096359248s ago: executing program 2 (id=3016):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000001090104000000000000000000000000300002002c00018014000300fc000000000000000000000000000000140004079a1f90ac1f9581972b25da0000000000000000000000000000000001251c30967bfd2778"], 0x44}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r3)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x28, 0x5, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = socket$inet6(0xa, 0xa, 0x5)
sendmmsg(r5, &(0x7f0000000300)=[{{&(0x7f0000000180)=@isdn={0x22, 0xe8, 0x6, 0x4, 0x4}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r5], 0x108}}], 0x2, 0xc040)
unshare(0x2000400)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c1425a08105481f0000", @ANYRES16=r7, @ANYBLOB="000428bd7000fcdbdf2505000000050006007f0000002c0001801400020076657468300000000000000000000000140002006e657464657673696d30000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0)

26.642115677s ago: executing program 2 (id=3018):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r1=>0x0, 0x3}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x7}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

26.405999226s ago: executing program 2 (id=3021):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r1}, 0x20) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r7=>0x0}) (async, rerun: 64)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x0, <r8=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="ff0000000000000000181b000000000000000000000000000000000084f135a1fcb552210a26f93adac0bab9e47fca9c234befc24c8489b0568d81743798da89a86f63f1ffc5499ee09898e3a9a3b65c74258c8ee952c13ec9071ad37d0bcecaa6114c4ed9d0614ccb141d5f9e8fbb975aa5fcfc473436", @ANYRES32=r5, @ANYBLOB="0000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c60900008500000006000000185d00"/88], &(0x7f00000000c0)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x1, '\x00', r7, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, r1, 0x5, 0x0, &(0x7f0000000500)=[{0x3, 0x5, 0x6, 0xc}, {0x2, 0x2, 0xb, 0x9}, {0x1, 0x3, 0x8, 0x3}, {0x3, 0x2, 0xe, 0x2}, {0x4, 0x1, 0x8, 0x1}], 0x10, 0xdfc93928}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) (async)
r10 = accept4(r9, 0x0, 0x0, 0x80800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)={0x1a8, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x194, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004014) (async, rerun: 32)
ioctl$sock_bt_hci(r6, 0x400448c9, &(0x7f0000000040)="b4c003990000000008") (async)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6c, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x3d, 0xff, 0xf}, 0x2c) (rerun: 64)

25.344856893s ago: executing program 1 (id=3032):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x101)
r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0xc00)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x218, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x54, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, "a96b61abb18746b0679b56142804dae8db0ccab82927f10bbfc0290ef55328461898d77a43cecc8a6de2ea557486084de16750a6defcf164bccf1f2e903a95707214309ebe060d0950e20729"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xdc, 0x84, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffffff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8000}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x875c}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9a}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xcfdc}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x101}, @NL80211_BAND_LC={0x8, 0x5, 0x40}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, @random="df5f46c5b9993bd37d"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1f1d}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7fff}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xac, 0x84, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7fff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xb200}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffff6f9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xc}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x500c3984}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x100}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xa3b}, @NL80211_BAND_LC={0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x800}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffa}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xe}, @NL80211_BAND_LC={0x8, 0x5, 0x8}]}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x8010}, 0x28004001)
poll(&(0x7f0000000400)=[{r1, 0x8400}, {r0, 0x1060}, {r1, 0x8000}, {r0, 0x20}, {r1, 0x2000}, {r0, 0x100}, {r0, 0x29}, {r1, 0x40}, {r0, 0x3004}, {r1, 0x2440}], 0xa, 0x5)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/180, 0xb4, 0x1, &(0x7f0000000540)=""/171, 0xab}, &(0x7f0000000640)=0x40)
sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x48}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc054}, 0x91)
close(r1)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd27, 0x25dfdbff, 0x401, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r1)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008081}, 0x1)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000a00)=0x5)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x7c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8811}, 0x4844)
r4 = accept4$bt_l2cap(r1, &(0x7f0000000b80)={0x1f, 0x0, @none}, &(0x7f0000000bc0)=0xe, 0x80000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000c00)=0x2)
sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0xc0854}, 0xc, &(0x7f00000010c0)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2e4, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x87, 0xc, "8ca0cae6b56d96feb900e70717989dacbc540cf0e763c770203a48615fccd1995def7460dc0b5dd840a947a76a421856f3373068d5968511cd67eadf0ac5a228e8a35403cee0b55b19373b910dd597ba856586fd61d62e1500db867b7cc41aa4c9dca3a07923b9f9866caa4d7799220da4b1f0175741079c0b057293f6663a87d66314"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x88, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xef15f26}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521883f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5a6bf6b1}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0xef, 0xc, "7af782eb830e81ac40e94ff696434def5604798224ea90f6dfe3aaf877e4287b6cc2922a26d40132efefc8a04f45ec88f25ea92c8ee4ce8598f5b5c628033c48caf34223ccd93fbcf3d30bbfccdbc31ad8f49e2cc85ba2f97f79a22f78f64fdabbd0889bea62b5adb62a1342cbd2e836df85350fc7a658a479e037287f8b0564e3ee98d6382895923880244e05d70241b653de8bce90c9d9d19d014d142a5d53dabb6fc575115cdbec23484669a824aa732cbae2d59370b701b19801a7487dfc5aee3a1c9d19983e98232a8c53e8b7f8be5b45824e6bf9199548cf77b5ae227371c23d4b93cd13bd3f0cab"}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'rose0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5fd5eedc}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}]}]}, @NFT_MSG_DELCHAIN={0x124, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_USERDATA={0xe6, 0xc, "43d37ac4813b31358736cd454338a9f3d8c309d88ab3165032a1102c1d5ee09b2ab48ad600d4ed932f630b8575b01281ea9fdc230f209adb5bfcca9cecc65432485872b31c94f2cb0d81a640ab9078d4d43bdf1255cb515f465963ddf3984cf6e762c777a1925f3b630f3911803bdf19a407628dbcaf51f4d6427847bbf6e8ea6e524c78ae420d703defcbab480e862fbc2dad04fabcc569329ef41fb914e745311cc45a98377eff7bd5d8a3670ce1f2855a5f138ac80444e89ed385513572e6e794467a871210986e297d68d3b21166466dc0f45c8c8d521c21d44a0b83a1910819"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x430}}, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x34, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x13, 0x5, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20040084)
recvmmsg(r4, &(0x7f0000008a80)=[{{&(0x7f0000001280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001300)=""/5, 0x5}, {&(0x7f0000001340)=""/146, 0x92}, {&(0x7f0000001400)=""/146, 0x92}, {&(0x7f00000014c0)=""/146, 0x92}, {&(0x7f0000001580)=""/45, 0x2d}], 0x5, &(0x7f0000001640)=""/236, 0xec}, 0x5}, {{&(0x7f0000001740)=@caif, 0x80, &(0x7f0000002cc0)=[{&(0x7f00000017c0)=""/65, 0x41}, {&(0x7f0000001840)=""/246, 0xf6}, {&(0x7f0000001940)=""/174, 0xae}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/85, 0x55}, {&(0x7f0000002a80)=""/191, 0xbf}, {&(0x7f0000002b40)=""/124, 0x7c}, {&(0x7f0000002bc0)=""/11, 0xb}, {&(0x7f0000002c00)=""/167, 0xa7}], 0x9, &(0x7f0000002d80)=""/43, 0x2b}, 0xfffffffe}, {{&(0x7f0000002dc0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005240)=[{&(0x7f0000002e40)=""/168, 0xa8}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/109, 0x6d}, {&(0x7f0000003f80)=""/244, 0xf4}, {&(0x7f0000004080)=""/17, 0x11}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/1, 0x1}, {&(0x7f0000005100)=""/50, 0x32}, {&(0x7f0000005140)=""/96, 0x60}, {&(0x7f00000051c0)=""/92, 0x5c}], 0xa, &(0x7f0000005300)=""/201, 0xc9}, 0x8}, {{&(0x7f0000005400)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005480)=""/233, 0xe9}, {&(0x7f0000005580)=""/87, 0x57}, {&(0x7f0000005600)=""/76, 0x4c}, {&(0x7f0000005680)=""/143, 0x8f}, {&(0x7f0000005740)=""/185, 0xb9}, {&(0x7f0000005800)=""/169, 0xa9}], 0x6, &(0x7f0000005940)=""/40, 0x28}, 0x7}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005980)=""/226, 0xe2}, {&(0x7f0000005a80)=""/159, 0x9f}, {&(0x7f0000005b40)=""/233, 0xe9}, {&(0x7f0000005c40)=""/112, 0x70}], 0x4, &(0x7f0000005d00)=""/213, 0xd5}, 0x276e}, {{&(0x7f0000005e00)=@qipcrtr, 0x80, &(0x7f0000007140)=[{&(0x7f0000005e80)=""/252, 0xfc}, {&(0x7f0000005f80)=""/45, 0x2d}, {&(0x7f0000005fc0)=""/117, 0x75}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/222, 0xde}], 0x5, &(0x7f00000071c0)=""/22, 0x16}, 0xfffeffff}, {{&(0x7f0000007200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000008900)=[{&(0x7f0000007280)=""/4096, 0x1000}, {&(0x7f0000008280)=""/225, 0xe1}, {&(0x7f0000008380)=""/93, 0x5d}, {&(0x7f0000008400)=""/33, 0x21}, {&(0x7f0000008440)=""/178, 0xb2}, {&(0x7f0000008500)=""/146, 0x92}, {&(0x7f00000085c0)=""/204, 0xcc}, {&(0x7f00000086c0)=""/125, 0x7d}, {&(0x7f0000008740)=""/211, 0xd3}, {&(0x7f0000008840)=""/162, 0xa2}], 0xa, &(0x7f00000089c0)=""/156, 0x9c}, 0x80}], 0x7, 0xa001, &(0x7f0000008c40)={0x0, 0x3938700})
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000008c80)={0x1, @null, @rose={'rose', 0x0}, 0x2, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, 0x7, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]})
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000008d40)={0x5, 0x38, [0x1, 0x1000, 0x8000000000000001], &(0x7f0000008d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000008d80))
bind$inet6(r6, &(0x7f0000008e00)={0xa, 0x4e20, 0x3, @remote, 0x3}, 0x1c)
sendto$inet6(r6, &(0x7f0000008e40)="7ad6bf230f38d1cade36", 0xa, 0x20000000, &(0x7f0000008e80)={0xa, 0x4e21, 0xd049, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000008ec0)={0x7, 0x7, 0x1}, &(0x7f0000008f00)=0x28)
socket$inet(0x2, 0x5, 0x4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000008f40)={'vxcan1\x00'})

25.220466198s ago: executing program 3 (id=3034):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', <r1=>0x0})
r2 = gettid()
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0)

24.809669353s ago: executing program 1 (id=3038):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r2, 0xffff}, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

24.715918039s ago: executing program 3 (id=3039):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r2 = socket$packet(0x11, 0x3, 0x300)
read(r2, &(0x7f0000000200)=""/67, 0x43) (async)
read(r2, &(0x7f0000000200)=""/67, 0x43)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73) (async)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x0, 0x1c8, 0x98, 0x0, 0x98, 0x328, 0x328, 0x328, 0x328, 0x328, 0x6, 0x0, {[{{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xffffffff, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0xd, 0x3, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x34, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x2, 0xf8}, {0x0, 0x8}, {0x1, 0x9}]}]}, 0x34}}, 0x4000) (async)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x34, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x2, 0xf8}, {0x0, 0x8}, {0x1, 0x9}]}]}, 0x34}}, 0x4000)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r8, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) (async)
sendto$inet6(r8, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe)
setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4)
shutdown(r8, 0x1)
recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (async)
recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x38, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8fbd}, @NL80211_ATTR_STA_FLAGS2={0x0, 0x43, {0x2, 0xc}}, @NL80211_ATTR_STA_PLINK_STATE={0x0, 0x74, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040001)
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)

24.542210306s ago: executing program 3 (id=3041):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}, "a815a23da43974ff"}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x44, r1, 0x10, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x268, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x88c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x525}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x34bb1a24}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d2aff1e}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4044}, 0x40050)

24.397044732s ago: executing program 3 (id=3044):
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000000)="804995a4c5e4929e552bede128be4be44940c3a917470ca07a6d9332a890cf50cdb90918e13b46660e29f7ee832d7d7561a7b2df934d073d5bfbae86cd2354920541e9ae811da1c40a9364e7bdad06e451662a4a4640c9ed5409d3ef4dcefdb9aa5bfb18168b6462d48524f2967f0f4f0dac5449fe8f4d8cc2b5a250c0fdd9e5a5ca66de5b0c1d661bb3f5325657f20db9e80c70e88a2200420e468cc479c30d8dc9f55dda45da8b580731fb820b6214d4a1c8d25c16a38328df1dd6dc2deedf67130f01ba2fb5baba97b362f33c20c31ab50cd2b1485baf1f21aa14a1874a9f70", 0xe1, 0x20001000, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10)
r0 = socket$inet(0x2, 0x5, 0x1)
r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@l2, &(0x7f00000001c0)=0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000400)={{r1}, r2, 0x4, @unused=[0x4, 0x67f3, 0xa, 0x3], @subvolid=0xc3})
getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000001400)=""/174, &(0x7f00000014c0)=0xae)
r3 = socket(0xa, 0xa, 0xa)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001500)={'vcan0\x00', <r4=>0x0})
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000001540)={0x0, 0x0, 0x1e, r4, 0xba6}, 0xc)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001580)={'batadv_slave_1\x00'})
recvmsg$can_bcm(r1, &(0x7f00000017c0)={&(0x7f00000015c0)=@generic, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/104, 0x68}], 0x1, &(0x7f0000001700)=""/191, 0xbf}, 0x2)
getsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000001800), &(0x7f0000001840))
sendmsg$nl_route(r3, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)=@ipv6_getroute={0x38, 0x1a, 0x100, 0x70bd27, 0x25dfdbfd, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x4}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x0, 0xd, r4}}, @RTA_MARK={0x8, 0x10, 0x47}, @RTA_PREF={0x5, 0x14, 0x70}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4801)
connect$bt_l2cap(r3, &(0x7f0000001980)={0x1f, 0x4, @none, 0x4c39, 0x2}, 0xe)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000003900)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000038c0)={&(0x7f0000001a00)={0x1e80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x32}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x40, 0x80, [@mic={0x8c, 0x10, {0x78c, "e18f7d853b5f", @short="6a115b7466d037d3"}}, @challenge={0x10, 0x1, 0x23}, @prep={0x83, 0x1f, {{}, 0xeb, 0x1, @device_b, 0xe, @void, 0xd60, 0x3, @device_b}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x67, 0x8, 0x7}}]}, @NL80211_ATTR_BEACON_HEAD={0x16b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @broadcast, @from_mac=@broadcast, {0xb, 0x9}}, 0x4, @default, 0x8, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x0, 0x2, 0x0, {0xf398d96, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x2}, 0x400, 0x9, 0xff}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x40, 0x26, 0x7}}, [{0xdd, 0x19, "2f0da937507c4101c72e8321e85ba1ab1647847b5be678dee3"}, {0xdd, 0x95, "e3e6c063d1b5dddebcad4984adbff39983bd34faccec66114afe5f64464b8cead8a356cf7d0b7a6c4a256d24754b44e148434056b219d3f8b28abc567335d31adcac14b20b70755bae48ab107ff3c27cab04635f1aa7023df216a53de242043adf87d0cbd467f8e8b392c315110ddede51f5676431a8b361947211dd21c9a99a576ba695e080dfdd81c214757ff1bba62639184f48"}, {0xdd, 0x55, "7923b6d4ee544385111657f6b5b918e74532fd1dbf699319ae6c6060bd28ac01717a82a93df34b18f2337746f998804bfd44fb09f5add18e9e2f975d6b11d96d56c01d28822248ab9625538ebb4d4de91bd2ab3c32"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x1b2, 0x80, [@random={0x6, 0xad, "1a1c75953cb0172c28140a3d87d932e621c59b4ca3a50bc753c63e25fe2ef99e3cc609e91eb825cded9f0c2761cce182d209cce36a580442d33bb9cb46e69cce7e67c17c7a2b17c62fca92d9ff53c59cd6a8d879b976b581005e6dbc2afb3abcbbc56f41e60bde47d8cd9b7b7e47a7fb9183460d6095ce6eca41615bce354f0b4555992ed4fab1b2bfa5e79d522c40466cd41da0312d976ec815f5c74428eaa3165d8e5857ab7c8a5a267b33c3"}, @random={0x5, 0x7d, "2e6a80dbcd12aba12ddc78b83d8b37792aa5f10be507c6c3de977c5717637297ef300b4907aac84a8fbfde00b1dcd26b2fc52968ae8d27618669571a8d7fb8f7bc9e2518a7293201c2cb23383af82034c2c265b7aa64403ad1ece0a6d724f5c32c98f23962c31f47227abb7c70d47929f95e8a9dead5630e0f12351d26"}, @random={0x1, 0x76, "e9fe78f4b18ee5364497178768034963029762ddcf4696449d6286b871461216545b3a3d7ab942e0319c5d76e4d2144a9be6a88440698563da6ac81342a4ba028cc846075fd7cfd3f73839253d474cdcc8185bbc2fbaa0de101c3df20872bfbb9505b6fc9ce009f0bb0ed9ab21d3866a22f37096b495"}, @mesh_chsw={0x76, 0x6, {0x6a, 0x5, 0x3d, 0x2f7f}}]}, @NL80211_ATTR_PROBE_RESP={0x2e3, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x100c, 0x80, [@measure_req={0x26, 0x1003, {0x40, 0x7, 0x6, "5ba49a324dcedcc9c3742397a53052c01cf52c3ae885a4b1d8db7adcf88356eb6025303c33f08de7babd73f0db5a4b390375c581f7b00f2f1f0e76219d2f08cb862b09b0f849ce46b1ef5a0e882568716f4d8447d4b89060487c838c281e386caf8134b88a2e63f9572760826afc79f2b7358c736e719b0d65b69c6852756fca8efefef8367b3406afde03fac26c1e347f8f2e58bfc47db33802ae5e277223481d8fdef3e1f09340d20221cb349742d36700623830206c1c8f061a84391ee7e9cb05283cea81ec871508b5c4f950a931318a06a974735363e99a7f243bf4f79329dc7a069b960b94ef0f12d4608dff89e4f3cbbce4246e7e7d2f03ea40c504d2c2e5f55a37998db930d6513e6d01240c68197071c27cadc290c50f351eac53de89be01f2a0fed6f88be5a57d0aae9c9e4d5dcd269e32c3d06b9ecd1d49f1846f7bba957fb6cb2da00f74c145d33d495163a372f10584a9922d259c78e7b4bd77535fe265cf855ab528d6a9eb14a633458cbff9eb19766d140b50f0280b3f18159348f5217977ad3dc7ec070d61c25a0d2fc99c855f0c9c49562ed678fcd62c3f5ba28db08c6cc271893f3b80d17c710495482607dfed8d3a25a7611a0443ee726ab377b36f76084307b97eaf0c9c0d286b4d228f364cd3a79e79d955319c60cf2fa871d0e2318f930d53dda975992dd7ee12d01ba732e05ef18bc9a6a73d3553e64ff4ce7221e03a90342e8ce250696674117a14e780eded5611d35e13740f48ec70485bef5874b69d3fd0a5f67618459ab200577dce6efad7cd83d01d0069860ae13e19f72ebe681f6f109a0beaedb911b8b7900de2543ae1bd45f8ad7563a5f6fed6bfbfe24d6d0651bc41a93a74da6c8099caeb73373291a3b2a26e6b91946bbcfc2cdba65e27d17e40cc8357791c8b58c9ecd188a6cd4c3e0da43d6a8ee039387995cf2d524e38b03c5f9d65479b8de0e962691ccd0bed0ccb649f0ae82185ca01b03542e6e5628529cb167e35a6a7f626e5240b846ef9a422d0247c679c266945590b6b538286a2749cc24fd0df5f5e0131955fe5c896bbb1041b98e14a66cd06b10b3a73b2601257fe3ee9119c53488724efde3e7041aab968aac93a346b9c4e6496d40703f50cd6ccaebca541d2f319bdce43bc5d511c640b9aed09412214b89ced88625e09e9a1e35d1c8a4e7ad59d223e66ac3b98235a51600fbcaf9e0612ee299b9b851033fbb2f9d282ccbe6770983c6da4de321586dbeefc19fe996e7339c9c16cc2183720bd500b09dff238e29a5f9e77c9c69f9b8abd08c7f5d720d880b8fe29b6420e83e1e187bbf284ac297f1979bf8074d42924145bdd9bfa6f46b8e7c3d2f5e197f8df0ad34f74e07fb51a27a257f13652ae350b2f94c9ee9c189f5cd2494b5b01b284937e8a9665c3efa565a7b4a9b15d1a7172ee8f2c82ec0e8d9d58d06e07d13c82808d9d76938cd4e59f9975985ac12d5c412c5b7b50cbfbf79bf822462abf59c605b8f2a5828e2b85b1697ca57cce6107690f8cd4ea44c3fbee5ed6c9b02ec6d9a4c7c5f854f3305fcecee754e9d3904821926f709d6ea40f441ea03d70c7af3ca2c97530c1191bfa6e1688f297e3910f26091a6f3c07c25ff0b123421d03bb7d510642b3b09ac5f00838bb438f9b073dbdba9214c03051dac91e079739d63aa775abc1d8ad8eb0e6620d380b7388063057452cb2f05a6be86166e6c6d23016d35f8836491b943a312c1ff664989439674a9b67bb31ddab91c186ca2870771e318c844c1f22b789ea2803a0958968a5efee225fc3cfdf58bfd2b8f6ed5aeebcb8d6ba8a1d0c6b4f77aa6a63be7ad335db8c69ae2341943d0a28857ed71e848d44da77d3037277b020031f671bea4c907e436c54190fc7e837f104eb0247f06b235739efec33eb75595bd3276c856232e17286112bc55aa53b9a4280476740d1ce32322fc3b9249393ee828ee2e82a2f5a06dcfee1cc107eb1cf76197dfe6db040cccc4bed6255c491a2ac0f745e820e556b5a4864c86836b3796b96c52d317f645948080cea5e538f4175599fbb94279ab6325b60dfbf7dd981fd93493e6f3a0002da11eb1961f2a856064419dc580c04d07887d0b88ece04f298e10e9bb9518a72547b5af313780b2f395090c80c02dc3a53792340fa3741e952b9e2a30d4a8776aa14e36ff85e723892396ac28413d114b356858d5224373b7d60455573b33faedcde8fa2f6af65ad7f77b52accb998736f40c2a08b170df24c6bc21c9dd023fccd03badcff6d4ddfa6ae9d5f6262dd11e76671d9417813b12c422f3dc1e4b36f0ffda4b89a3f44d510dbdb08949c12fb8eae808eb51c2e8b10c8b8a141f03412f8818070f8962f1a4b1c964c5f75194f59a135312651b3f07976c0a3245bb31d30539c57f8c8058160bf7f98be7aa1f7c8b9a57b8e6e97aee2b3ca666ad0c9632b621d79fab9ecef09f02a2ccf7f61091c494ef3dcc0e35a7a48621c98d65d0b132c386b7e7fd63caedc71aaa2f60f4405693c8b44ee412937d08a6702b37788fb2c26b2f0e09a4f225d2d6aaa3da1cda35c053edbe1c0d91f590b9bd958725a4bfd7119c884515631e1f9da8fdafddb16970f6c4e8771eb78a8e72c48fe451dbf8f62792975401192e1f52ac28cbf465c90d29935be3f06d593098b1c1a38989c0472dd28b9237e15eabc02729d711d1d323e38f6a468c954e7f95f96d87789cf9121f73fd51f4ef22cb30531c033a16711914858308734064e6487b782cd533f45d420a77fac8718e5fb22d606ce3a2e5c18f6fc34634802a726c06a8cacd3278b72ca0e215d1a3cc49bf496c5d7a6620d2f2df7ab88630987ee98dd0f4b2e550aaca4b86d639069eea7e42bee41b85377f4a0a231f841d27409a22a0750574d12539aded42fb683d68b1e8f9c69a9e35c0be62fca6298e26b9c9ca5aa407bdf8f7666308438c61e393664a7de29ebe11bb500e7cc77e937407db22c194d5256718a23e459b7aa3c0870f32e25389997e3cf5db16b5e92cb758502754a036a5a3f00cbf7a7f7d23f3f558e9eee2eebee2191c5025ff4a0de5a4030b5b24c4dfbadd534e85b52e7400912c6182f4ce6ca9132ac0f4cc76bbab44950d655bd01a421ee90b5a50f2de3a4adc6e99594b4b9b01e1699bb30d8c94723bd068975dd37d314b33641097323ddb0bb5d7d883b82a71a27e73dad6de3f565dde5cbd8cf27e37d28c327c6d37f9fd34d0ef65fa5cf8a3bd2f56b5edc062992cc40df0b720bf0cfed69a8b35900520dc71ccbff1810f38de109758211694d3df6ef5800950c01d6059f1cb96c880c986c1c07b45dc52d82532713deb20e8055ce3a04e93c171987337fbd0825c6a9eb20a83b5e52bb92fccf112583ee7bc67073a6a6ad34c5be95bf3e4cba81f0f8df2f401618a7c6607ddbadb780162b4bda2ee6114879e9603a594a53b52682d835cf0ab38d63e40b1923bc5947ca9028355bc45e4d0c752d0a5b224f5e5a4db0df0cdd959c199177bb234ef5ace4c0ed2fcae0212d30b92c8e46d0bc3946c3864a965a78a79310750c0b589e0a5d5a1c3d4793d50657cda39f59fc068ca09a97fa979d196c3fe1b92bd5584a5ccd22e3268ad0db4a9eeba3abe352a2f376c2024c68d20e193ace24e6cc21ccf0b60027137754c99f26a483be9c036690bfd50442d4bbc6ff62a23c2eceb1287fc3f376a5757c6835096771d13ac18ba348a1b56581bd7cbd3db30bba296578ffdb99cf4b1527f893ac640e2cdaa440dc06c507e4ff0f104f9191d1a4c48aa1e49cec8c9585da8092f7363dc7ae5fe57e9e4f61af810d10fc2a959e602226c13ded66ff8a61e95706e3d46f2efe7c730384d3011c6480fdf8e4ef458bbcc781e229d0d2b25557e1fff7589142b2cb46c7eb23167bceb80f0d1c524af290a6c45d18a004b6ff48a7c5a340e5aaf467aa864b676de25576e0bcd0e8ff50afa6c4724655e4e7d0ed5a1a1161cf49e17b67783f71cfaa0f1f658f034f0aba459e827bbdbde6bf53f248ec500de3d71c0d2b3f1393b1e270f4dd0522cebeaaa5d9b1d473b43be2279f939526461f65f2f577fcfe62c7c4b36cdb0d0494a244c7a61f68aa723382a661c8efc82d83f923d218d1ff2da69768e12611a49ff2f035502651465303fed45810a65b9267d644e0440d6ca984f8b18c8edd5724b891eec23e978c1fa530ea86f64c13441dd2dfe02ee603965120339d48aac275d03f4023ff627f4a4374c30a2e32bea28405c9098202d321af02f36c6f88c657d66def6a4c5cf336fe4562df0189f67c8da43ce45bebe0f0d6d3c1b3d60aaaae5a08664dae7416749cc8a7b4c3ec32fef35b73fe041fbff635f0c5668973ac881cf398d7274c392ca19a8b304d96482fdd508a02d8c83f43077d19cb99dcfdc61aee30bb18899a30d0f97646fb34d2c56e18a7ab66516e0bafd27f400cd377df71f4bd3d51451ee28851958eb67af8a84086966999952bacbe9b54b57a03bded144f1af0c2cfd227411eeb32814db6275d8ef39ce0e6274b96d7b99a57724898c135886d5f0701e34efa7419c19844c9f6f35279668638428527ed664334001ffe463757df0a80d3e267472c30f40fd1a2abe381000628862f4283d359bfc38f47498f6aed1fee60b735dc73fe66be041e85cdd4e9eaac55e6805272dc2b1e95ddafcafd214951e07b38bd18b9b9de19dd5885da51324718900048a4aca8db7789b022f4e12def92a98a48a66580cc3ecacfbede9f126f4fa86f539a3e69e893216ef74f5ff06943fa07c5c1903c1de3700e55da4164f0071326705602cc1dd2161dbe6b1eada652f27fc0d95b1d344729536f25b591b6ee8c9771fa1ebac90262852419e55653116b118e9da2cb10a0c5305d462fd5628309b212c937a31b75d10368a470549a622dbd774d307eb868fdb32b00695e69c8a702665027c62de70dbd9971e110f96bc42b88b6550c61831822185028df38276a4b496e3ed59401c1d8fb0ad3465a2b84039a9479b5522a668c2ad3785ac9735868c16b51568b76950d470b6b750a5285d00649bef06f3b67bc90f9e425dfa300aed505c37b2faf581d7c853cd07d8a8c530a77d66b4b5f7c53b9a5f7b44f9f949cf6b72e2cd8a3abba3a0b3b92496d950b4f542334e676375e52523a3fe14017bbba9ccb3aeb77ecd65c044e58d88dcfbadb334234ca112d891cc28adda4dc43b8e6494d07a6513ac12a9771eebe578918c8bf9067e9a753ec87fde1249a5b8e85dd277a9f912a8ff5ec75d0ca06337d80f80efd0a698a8d78afcef6df5f4a35acfe8321a75e2a5dbbf07d458741f11a3d901dca206e6d6ea32732070cbdb80719e102b913f975d33312db1ffa067945567dcabcf4fcf290b574dbf0fa92f0033e9ef106c24d1360eef98ada793d186dcd82820496208169e786ad92a4b88f797237497dbe0f6e829f14700364f8c10b48db06f9d24cd25a3b9e7c8b6457adcd1026643799fa93a80bbea7c4e61406d47110f51dec30f628798e23f5e7e72fede77d2c8042c9c325025b749b8b1f5c78d4d37455aa54c9cf71b1ae379670688d185f88dc1dab53c1507efef07a6f4d668b5e4bca19467021f99fcaa9e13e66c7dcb2062979fa0b164a3be6ed4b67946254466d6497820139e5cf2ddac0d2195aedd6fada1bdc80a74ce4cd7b9d3152caf58659a156ee877ecde1a60efc76cd898c37afd79423d0f293bc0c895a1e28c995b783cec9b4bea6307a42b1827e102b581fb56ed869cef5f8"}}, @challenge={0x10, 0x1, 0x5}]}, @NL80211_ATTR_PROBE_RESP={0x80e, 0x91, "e84442e51ad41ea948317e2d3e035968be8c0f7dbb01298c55df4228909bf03d4f3c8c630d54b719db8ed40eaa554571c3e690dbb167a4a01a89c4611fd3df36018d596d6f95dd614ca863c6046f85fa9900396d00f4313c1cef7e3180b6fb3f997b2f200b4ed997ef8559ace64bf7ed7fb521fcbb988f36f3277d28a67af575b23f1904ea5d438d78a2bdf22b5b04da5cf34fd3721631d63b10ef3269699d7626ce8c7e4f1df012a8500e6ed896e91e86b24da2d43621192fa42c0a09c40f6faa2079750ab03fd46147a72948a9645295cc53ffe6514bc816c13c76bd79909e3023b5adaea7bd32235ff443b393a64a0db7b6fc9024671dc0d762f747a4c750c490d5916cacfdad76ceea8806b80834ea29355c23abf1e9c9b79eecd1653560757b4417979c04e2a04f54155ca3760f3856b5d2b98a1f730dd88064c31f31366c55d6931a4f59ab63689d244f185dbab03fa5c73bf118e1f76c29cdad8a1d179e528fb3e0373eaffb2c5d00d19526ffa4923d3a68e654d3693c57b4e885c88252d662ee0de2fdc6d0eeba26346422ba5bc746ed75fa52607aa899e56bba7efac244233dbbf042b11905d31534c5dd3902462b0453239146bcfc19dee0894420b5f61adbba34befd36dbf8ed5b88c2ffe91a6de00169fb09eda8b8c822e8730e34d3331adb9958754211cd53c1f9607dea98b71801f51422c9a6612e2982c0800adfd111e9671e41389d570a442b7243edf6e29f86f3059e0365556955e75e163060f7bfe85a5ac87eec88907f8d72bfbb93a40eac4e20d2ac540dfb46d6e62892b767e12ad9408d4b77a6755d1d0462c1c914840da61ec96b8eb364b03e7b45fef225bf9b5a9b6112759a68d006f3dba4aecf4bb409c3948e3e55ee9cc1d3763b30f54a8e1f0030613e4a02092ef78b68e2b21356b1831750944fd9f9139b2347b535b583525c9f09dd6e9d55f0b418fafcb22332ec2c5fa1973654cc300477b4316637522cba81cb16a90029d777c4d5d6f3d6744a6ab224b4039f6850fe753f031e583d44f773acaa9ae32427c3d00184a6a5310d6f9385324436bc5f6f874c76170735f208bd72d8143ac512a147325881a6470a804de665a761ce539b1c63676bed4fc6c767e5ab8e9e12ba3af3e3845fdd113423718abb63460a0f2ca3e2704153b56a804332a098c08eec20f3df48b3f80592f70065ae6fed1a246ec9f2975a81300b5494975516ba1db973666f344f486b8d436518b1616bce06676956e8c566e7b8eb64e3e353b19113d00bccf102afd5ad930d08e2a20e223b6464e03f76cc63b05de680eeb99ff256cd4b62ed7c71a79b34530c33ab1c287208536a8aaf925a709c288bff9807e9f22fa909f26ccf1da70024bd23ca9186f25aca9a38c401b971113ba0deda37048a0b593c85f1945390a5711c4690059da322851425c1629574be8999584778fc9a9972cd787b6a2ac638c4b98bb6f5c40933563e4d343cda0507b729df5202ea90528437d1476d574bd0b40f9e74b18686c86fc6169f3b7669a96682570e253f6a8d163c9a894248ca8c4ae993cfc1434f6d2bd3b1599d5f24d32f9ebdb8b3198c685cbfd537e17436aa58faedbf6ca17bcfa3c667f337a3c556c152a042e1f941c622fdfbf672b5078b97b8f0df9987783b63c334d32d88163bde85af57ff2c269d252df5c384738179c87533526add6e9ccb3e88ad18cb42fd47c9a69c7c231c4eac0239d6639c1e042a67e0ed34c9bc696bd9ff3cfaee1ed862620825d4bf7e7dc3ac4d4c1bb23c8961d0efb8d34ba0ae520f723a74e7af2fae4f8be3e6f652bb1d81c748f44fc2d36020cfad13a901114da334afce97e44704db628be0cc3bce092d3224a88645b72b6b2c7fbb53e8059287562a85b14ebf7c5faa8198d94a56caf36dbcd148e6fd2f98c68eca85aff1da8d53a1be355187fe22fecd94d4e5979f835457a1a8e072b994451e8607b4a9cbc42bc287a73b9d9003898bd226dc6fb3282644046cc737e07cb6e64cf026e4a8933e4eacdc354bbd3851b16d86a86b1bac772cd8bf7f16a08df59d71249aef90bd8777f38fc816111e8cee6f2350d40bff8dd018a50fa816f82b126a828a85a594c8a0be1c8782e80dba927f489ac8355cdcae12a8812be0440416471023e25e022319afcb1023094f8a8eab2919ec11408be4e1101b033be2faa80c59fea525a83059a364ebeb5f5fb8d79606d8aa1b401003cd7698090527a5f412d227056841f233dd1a9880580a456483465e42421778ea7d1556c0dcc3f0af1f3bfbcf6befb5d05145076f9688df3f8a651e22bf5209bdcb856d15418ad9f3919e073bd5edb89032a6af989b99e74809165a39e09d0b981ad378f0ad2e783b1258ee4b36cac761bb6e162db9378bdc26b77e3c20431c809776698034510813f4bdf3d33fcc06158cfd93afb55d45a9b6fe8cf7af65f469eb293a2010feddf88febf3f49a72f3c574defcd1fab73a0c0bac48ad82a08b3a55c6a81f3bd9ec5419f883fd8c6a2f0a3728e360b1909c04426eae490f54c6a78d3144d8983da2f46c19c6e42a99eda4af240d62cde27e77cb28a7aaa85f7e94f6c2691552404deda1536f43841a7c0af2eb4efa6b0d4d7ab39050eab2b58d0de619a4f95048c319af24f4b151b451edd12d45050f68a7d6a571f618503238a91f141967906635f3e98b766cc5f402d754b0cc72f1a416b9c0cd6c116807116017785edb03c818a39cf11becc136c790496892f55057b010145cafb93ea48698a9a26b45c580c65661d6a958ca74e5dbb6e8fe67a2321e9ce7d95493579324a7bd6c6f4d44fb7ccbb06ba758bbda287b1127c7ca249a89af1f6c5aa61cc0b7f7313b15dd4eb19d86fd3190f140c1ee37178b1165588d8a"}]}, 0x1e80}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000003940)="5af8f4e9fa56ae4c3f70ff3cb07e4451230dd2cd353b1ba5a061c98eb374172f3f7023")
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000003980)={<r6=>r1, 0xa, 0x100, 0x1})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000039c0)={'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000003ac0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x8000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003c00)={@map=r6, 0x1e, 0x1, 0x800, &(0x7f0000003b00)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000003b40)=[0x0, 0x0, 0x0], &(0x7f0000003b80)=[0x0, 0x0, 0x0], &(0x7f0000003bc0)=[0x0, 0x0]}, 0x40)
ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000003c40))
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000003c80)={0x0, 0x40}, 0x8)
r7 = socket$kcm(0x29, 0x5, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f0000003cc0)={0x6, 0x8, 0x2})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003d40), r1)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000003e00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x2c, r8, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2c}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000003e40))
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000003e80)={'filter\x00', 0x1000, "9156d68f75a9abef5eff0150b40d90e7cb7612deab3b9af2de833d2758b2ce48fccfae19f923de78781c0332263443f2db03c3df13bef50db56a3cae2959e2aba5d935b8f61bc370edea9e4461762719cf6db4b3b673c5fa16ffe70174db92f209e6cc08242faaf7584f7b318b238f307b7bc600e2c9435e8ce36b1a3a0fa61c77b8945fd2cb2795037b9b222b8bc05a5b1e411745cdf325d617a6a4d0e39f62ab8825dfa36d8d43e7134751575fe9fedabdab9dec70e0eba7cf936b12c49994557df9721bff2f857d31c1cf507c53d96c81ececc9642f52ff9ab8dcaa5bfaa0e000ff5cd35037a8d377f9f924d170eaa9d05a7c28d45bd2112bea6e934f7f0c57cb991b6bedda299f8537776e96e3fc5be9a543938090d733e3e10cf53d02585a0ec49cf6203437c77a8a4bdfea23b26a7036f681c938b8053d5a7fa1d76aa13460b144eb597556ae34830b44ccc591c3c8df9120eafdf6c1d1f753196e1a2219865126290ec89818d2fdf2b3fc206a6fe8ca1298eb0a40fd59e4be34bc105adcd07e1f9e63f453c078a82553e21e7687786f2c359c8b030a6a7ed343ac8e74d8b88c5fe61ab8e0f41a9eb0520a837fe4f4e0312fa1d1f3c4c3f01ea017db29135c5b23bd3d29f62187eefd71cd72c2754038955a40de1696c9ea9da2d50734428d890b951363d8b5db5a9789306e50c8d372eb020c2896c080b83c22a01f51883cbd5295cb3e5e6bbb081d5b52ac2cb8dd2dc6b15ad1e35e8603df77edc7766d98b9528c9c548ea7135adf035bfcbeb016b9a61b5eecdde4b1724112d51f1b2f36860884af1913e7f4d84153dafd84d92cce5e2c99d24a52368def6e310356e89a57553bcbd95bf6c221ab61aa56e6982c65fc61c301a71b55f956a481451c3a1d01c4367764835c008b0af378aeeb5d9faf92de9470a9befd27d17e358dc44fbc316548f80c78eda8aedf4a6ac55de28c6b42d2ab15cfdfdb1b138be5fc8c65b0fd0461da992a4240f47b422f4756a4da5d3eec019cb5d98da1280c17eae97a0a9f0b6181d6e19131ec15286230635283a4ced889393af05b802b7a29921ad9eeb31659904f10aa08d20f9b0c9ff90e34daa9c276b7e52dff261be2f4e601a9b15049c5e1e04f151f55545bcbc633f7598482b6bbee532960f0053bfefcddbfaf738df75207c054ddab961382c0c9ec8ab3afdddf822b3fd2636c91d3e754507248394b07c272d08aadfc86522d5f3f8dddebd6cba30c3fd7ce17e86302b1f45dc85b1d96fac921a6a0d840c734b08c7013838d6f2f69c1b67f2ce25e19e34c0fe39bec53ea1edd41096b9e43c6518c2e4e515045efce4ae4fcc84e658cdfe434b395519b432da1dccece10ac4f6b7430c396f06c1a968327ff2937538a232622fafca1e0545c2e82b2f50a2b8d7162ea36d5a7ec84e04b10052fc2b7d7091bdee28ae990692d548f0bd335fea9760fb920e3b82b8314d39a2772277735b3566a5798e7eb6cd86c1bfc98e954b65b42e247aa8aa4f87618ffbdf72963ff08c181641a961a93a32f84f77a36a94ec4b1329a76991fe9c8410d19cd3732d34806a9dc487a1b3eeee648efbebe3dff9f317e39fa941deb21f9d36925e94ec89af7f9df69872a5a4b209ab6d272e522b3c8ae03e3ba0a73de7a94e8b3ae60e363e613799732a783175e9af8d307dfe3f3101a6e0f34be9e3d546b31779ca19aafebe4838a1d29a1e6916c905d73a54b250c4a31145853425f839a33725056c9898976f4f90d54f076970e31f3a2e63fe8c3d6b5d890128a135a5654312a97efdd2e934f7eceb4657289faf04f9a8815b9968721b536fe60490970a297b8328a0e270cbe81bd5155c554c81569a26ecdda8db4a9439983a146650e4409afd33d3165e2eda92b60868aa80414e55a5ac6518c654f3da3d05484ffb0af72a3c8c327b36448f406e83093d0131cb5dad62ce27ce0529ebf31016bed0d63d1b2a43fa95181c7fedc746c00414e27c5f0af82c0f37b7c9624767d84ab11a0f2d06ec3e2623c3bfb36c1cac8bc252bfc356e29cfed9ac25777b5d2c2e9c10689a6ee3433665854ba17f7316ec70267b7c9ca01da3cc8cf5a56c136e1bd5f8379c176574082d5a64eab531c64062473743a840656fa9df982693dbeb12d163b1451bcc98bf7a671a12c7a31685563c1f275f1e97c0c7ce59fc3be82b05786c33fb42667f9ed491c73507a2c0126d73fb344079eff3eeaa2afeed7e8d8ec54f14cbd2c92f4fd88b04b24eee0d0c818044f343d45a01b9cb79595b041d19aae34d79d3163e2306ef038ce0dfea9130b83e5704c3fd2e1d348001f89fd032ef786432c1089824dd4793a8a2c0a6e87eaa54c266900818c992c52a3d4eb85fffe465129efb84341589512b0b81aad08a38bd69b1e337414fdb2d41b1f890cd5d5f3632f09b72f79cae23d72b5a3b90bd980c4c7a68e66b29f53e9d802182a42312750069265f8d31c315784b00c577b7432f65ee4291fee86b860581e3296f8efd722d41de8ed6973352c2aec541c4b26ea42f434afd9a666b6a660cab886d386db5e940fa1d460900603c965a4141ce8e336e4004c74441e5e75c793d9b09c594a8f0a0d91287533e4b004de4e7fe71e479432fc1455cbb260405dae013b261c492ee7231b73336b1a8549fb23cbcc8afece5fb2ebf96a522326372e560719b6a33b18fb5b66dfa0550552744f51cc436128b2faeb1736f61812bd2c72707dccf35420649b6664794258b2295e948a14e4a1acef4044a8919539e3043c195db8152f9f5f46e7d95df1b9bd4bb35a20f28bce395bec3410cc69a26e742191c66eab33690750e0e87a9e2f5d4503597969f617008852597450b256cd0235b8681b66026522c68c5b2981ef2223e6eebc24eb0d90feedd6872bcbace2fdaf3ede51af903128681632fb21ce9d913880883a3ea42995eadd9d30ea5dc400466174a061a5ac3b41ce49ea6d09c9e3f7e0d410cd841410638bc56fb54dedc28f7b9623339950fc880cfc3d538dbb8f16569ee80fbe20d0a027f0190bde43ccab7b518fc9b3f5c7acd84286c674a1642f7cdf586ae743b7fa9a51814f43dc3a4d3ca6bd901e5545efe89fe7413c009efc3b88811b27926504b7021b0ed809f4fbf843beeb81d30fd271b399ca6346e1ad5024e19d857cde3227ba215e1043ba4ee151a635b7dec3de39088906f4ce79e2a87b6bbbd19c6a89dc7914cc410449ca0358c0bb2007b9cb93b10a62630ee8af3d5bf4f202209996db890dfe9d0eac30bcc4af871a16482d66a06a683d6285b6ba175e167736c08f1ab585e4f9d0b5bc7ab1b08a44378e8dbeface886e0dd157c1d6a696c08ad65b2f55024ac527fb7af0cfac32a2a2fcfeccfffb9cdf3a41dfdaa2806627cd00d62e73b3e3b4577315eadd7947a3cec1a401b7f71cd543e7e0c86334c6aeb4413bf0f7a0fc8d087a14ccd629e874f4d5df70ce353153212bba355bee52c31a699bba9b00279feb02d92257d2b0024badd838231da058d32cbfc783418d4b34be093cc3d7c001929ce8c706c81db681d74511c80f26b085920c1a24b2cfe8b2cadb1530219cc42040e95f756fc0db3538d1ed55bb6c7f6a62de54183c61671047fe7425474346684b010df57123916167806f387bc7bce8c20650ae4f7ec176037d3e32090cd7b283177c29c291807e86a0779553b5423fd30f35e4a8c88bcc89e7020ead2556704289c0dd3da8fce25063b659d7f16de90eea3614bab9c3a08fd286f8caa77edde97fbd2c511198503516082a9481804590f39e241c1e7038b99f4131a154e0d58a495469c4da73eaf51084da64aac570005be8dca4adfc845761a5e083831e16b0a751598e87a2bfa27697f7ef8de32e0259780a6690d1d2ebd5c9512efbe4257fa710564df48312e0974cc3894b6165c219c82070af606d7b729792175203ebd3cfb3d8b5d0242da1b37afc725d9d631d7b71e19096534139efd40864937573655b211303be3477e2b8b10defab8a27169b26ee93f69f70938e3a90978c0a7737a357f6e3075c85543d86c839feda50952c92e8e4942eeb0763198b6195b98c09d767f5a0c8cf44981d990c7110343e2080e5b4cf3fc995782cedc45874001919caafe69cd5d00ccdf672f160080a0493a4971c43c84858df50cb8e0f8e5236010ba54faf6155ffc6779a10b91062b12c4c20fa0084644945246586252ad1c1eaf12a950e464ff8832361a07c63bd60f68b49d2bfb654a295d1e94adba3e55644ec37f251095e9277ec8cc06d043fcc05480a451dfba8c54dd18eecbf1654dc7a8eeff108e4a3364dec40ccc46b742ea6082ba12b78ea8ec85b4e7b2311499f3c3fd3449192e2001a7113f1a9bd67a2332cde63a14ff3f3801f7c88cef03d2610dda1ee0b4a7777b5a4564ab747119d8452c80ac6ccb92760696da764fd1e1b3af4a102a8c0c966bcf4b8d4f8e1ff1c6a5eefa45707d816420c42e150b7787f3f2d7656d761a13015e865688b145cc2206978fe655d4bd3890c287cfe38bb8d1b0fcd5aadc447cff857e51f4352cd264537ef4e173a2edfe7c98647360f81a53bed295da3fc67b5adfb7e3d779313e0ab2105e54ed2e6dfca0a1b2c48fb40a6e0b4b89ae357078ab89efb7dcc5be9754ae3115311c2421832b91e2e144ed9c9155ab1cf2090e59ed5d1acf39785875437626a939f0569fb97f3ccc450e28225d6f761b928cd378d0460533e0806404cf8b54a39d46264ced5e3c242ec8ee2e74a43832b572461d48acce205d42f56ff40d8fd129e6cb7f3ea4c376e9dba33e46c372b7ddaeaf95adada66df0501603b97acd53198fb01025690fd1d686e5565778c72f3638c7fbbcff419318cdade8e1a661b0a4d77d135bf4f79fcf4958c936677605c05c2e2a0100fd4627ad88950baaef7b1eedcaf4e3211e247b5fdded7fdad2c8f17e67fc6fc80d5f7586a4da12520a1f99c6c91e0e29abfd6b178ad2dab5a08a2ba1fdeb4d53dfb7c3453ffd44b77d0fc632cafe6db842c0b0c1e92eb80f032c0b567c1098fcdc9d73f760006163555b25484da2bc23b58d21e6946724562f779daeefded1ff89449280d4378b01fc921707d70cd5fedab2ee2ed5d85382fa89c4333f5dbbb62a330462c5ae82f5489a12700eaaea519b9a21c280cd08e30c906f642a205df2b19fbda11e9d9ed97d856f5c578c2b628568af14ea19d7b6af067c47bfc1b746982a7dacf10889256ef1342567fffda4c7ce722c901ee6cbc542754c5ef86da169a3044063210e62e812628bfe942097eb7395f99f4c3455cb0a071b7426c43ebe6db29b4194935ec518497effdc2d23f6126afd1e98dcf9c76795a3e9ca6c847034aeb0e3bcd9723596dff05f267c0febaf9b5f0e11ae318d17ec0aafba83dc1a46f5dd944d7226f3e4afbe346a8d2151500e7c01b3bf34093f8aebb3a87264079d0653249f2934b47464cc0cec8f73b24dc4469b4232d69baad797708286b5a6b778acc62a8684983b95e864b2895d991b77e1ff67042e124a9310d9fbf80510c5028a37c4433f8c4680c603d3af8acef69de5d36bfd04f5101232d537d2209675e91329b9953c5a4c4c9284ad2fe37ab6f35bdb65acc16824738a32a09ccbd52501779c941c76acff3930cb8d9d3118537eb77eb9f4711ac5c112219c31d705ebc3bc0d58b6f1a8e499b73ba99fd41094e497e1a90d5a8dfb51016abcdb6ec71ee008e5f04f3eba6c3f12b735cf64144f8e077a2a145f7805f2fe2a503779560"}, &(0x7f0000004ec0)=0x1024)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000004f00)={0x1, 'veth0_to_bond\x00', {}, 0x2})

24.244342457s ago: executing program 4 (id=3045):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000480)='GPL\x00'}, 0x94)
ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000040)={0x2, 0x4})

24.15501407s ago: executing program 4 (id=3046):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000800), 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000004000000a5c485400060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000405000300070000000900010073797a30000000000900020073797a32"], 0x84}}, 0x20000008)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x50, 0x24, 0x8, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xc}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}]}, 0x50}}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x7c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0xfffffcca, 0x20, [0xffffff00, 0xff, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x5d}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x65f2947dda0b9d36}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", ""]}, 0x14}}, 0x8)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r11 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}}], 0x1, 0x40044)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c00028008000340000000160800014000"], 0x110}}, 0x40040)

24.049948707s ago: executing program 3 (id=3047):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x637, 0x0, 0x2, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x2}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x54}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x9005}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x48004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r11 = socket$inet6(0xa, 0x3, 0x3)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r12=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r10, r12, 0x25, 0x2, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000440), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000380)={<r17=>0x0, <r18=>0x0, <r19=>0x0}, &(0x7f00000003c0)=0xc)
r20 = syz_open_procfs$namespace(r17, &(0x7f0000001780)='ns/ipc\x00')
ioctl$BTRFS_IOC_SNAP_CREATE(r15, 0x50009401, &(0x7f0000001c40)={{r16}, "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"})
r21 = getpid()
sendmmsg$unix(r16, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r17, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r17, 0x0, r19}}}, @cred={{0x1c, 0x1, 0x2, {r21, r18}}}, @rights={{0x18, 0x1, 0x1, [r20, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@delpolicy={0x7d8, 0x14, 0x200, 0x70bd29, 0x25dfdbfc, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x0, 0x4e24, 0x8001, 0xa, 0x20, 0xa0, 0x24, 0x0, r3}, 0x6e6bb7, 0x1}, [@algo_comp={0x11c, 0x3, {{'lzs\x00'}, 0x6a0, "cbe8d90f094ca62296d3c71e057625ed878289d809f168bcf941af6f6b453a6a9172e225d9372d5f9a2fdc84d3323f121ead299ce06bad17d3f41ffe9b430ef14b9493f201ad342f6edaa2ed148bfb80eeb947ffaaaeada3b3ad6506bd8b8233425501aa3c9c75faff6cc732fa37fac66da2065b8dee197b323e4275695a708a679fe8cf0df18387169a5be0e1f69bfd4821f625ca45888b339735d846070cacbbe30ba3a501ca557935579ad0c72ec81fd84505dbf77d842c8ac3686599c7ef0598c36e3df92b21cda330ea7a87ae8b6cb84fb3"}}, @algo_crypt={0x123, 0x2, {{'cbc-twofish-avx\x00'}, 0x6d8, "129140ce4badfe372a9a1d5a5d2ed169b6dd43ad04d48125b5d189674920ca8a5614959bdb785de086954a9654fd0e2e7c922d5906b4cd5021155ceb7ea027982145e6da1aa31b958c3f17791941253b687dd86cb8430b1b779566582e5f06ff39be499a87c96af56acd8371342bc76dd0e045bfdf7e09608412be80fbca343198318aa5c97e40e1321cb94386932d6d4ac22dd90ac5f00e56a63177aed1379db8a71f51c4a763d08d88def4de220d72c0b158d24fd16b6e769da5b2cdb1a2b504db6f4cc25540d137db2f73538b7e10500668bbb43ee47a211e92"}}, @algo_comp={0x11c, 0x3, {{'deflate\x00'}, 0x6a0, "35851a28b7f95146d949f6ad5c79c51de2654d155549acd64b9770a55b04bb7587bf29c0ce7ee55a89b9fc430fb4cddd04cfb7b544aa106a99ab487e355f56a776e1093817c5483a4061d887e338ae611da8b81254651bb59816743496c5aa545a72c6bbf84bf024f37ad308512f2614fc67bfb1d0ef8b7912549d57b27b694facee12b90e055a8bbfb8dd76ec8d08394206a47660477c1449c8a1f2ab1d30674b198ac857196ad1b8e017ce9152370e56772c4c0718eb2484763dc8439cd990fd976b7da715e78ed49011ddaebc71ebe7326f71"}}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x0, 0xa}}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@empty, 0x4e20, 0x2, 0x4e22, 0x3, 0xa, 0x0, 0x80, 0x0, r5, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0xfe}, @in=@multicast2, {0x6, 0x1, 0xff, 0x0, 0x8000000000000001, 0x1, 0x5, 0x7}, {0x8, 0x0, 0x4, 0x5}, {0x400, 0x8, 0x400006}, 0x70bd2d, 0x3501, 0x2, 0x1}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e22, @in=@empty}}, @tmpl={0x104, 0x5, [{{@in=@loopback, 0x4d3, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x3, 0x4, 0x0, 0x7}, {{@in=@multicast1, 0x4d2}, 0xa, @in6=@remote, 0x3501, 0x0, 0x0, 0xd7, 0xfffffffa, 0xffffffff, 0x40}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3500, 0x4, 0x3, 0x9, 0xf, 0x7, 0x4}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3501, 0x6, 0x2, 0x9, 0x4, 0x8}]}, @algo_auth={0xf1, 0x1, {{'rmd320-generic\x00'}, 0x548, "53bd61bfdaf1e8de735e28a49d70828509deeeac07ce344766324030b663201b611aa34fc85ee43b1683fd2d9453c857f544131daa95c807785242c97035d4e907902747116ae8fa26d71590386dc00aa9789703412533e2f0701fb293aa308f15e0a927c5cd2a4724f879b370895894b1871bd21360fd06102012de5ba34f66a7fd02851d7cb0d2d0fbee32a381733f7a9f591c4f077068fee5d42cdf5625176afc25059722430de3"}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2d, 0x70bd2a, 0x70bd27, 0x70bd26, 0x7, [0x1f9, 0x7]}}, @sa={0xe4, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4000, 0x4e20, 0x800, 0xa, 0x80, 0x40, 0x2b, r14, r18}, {@in6=@private0, 0x4d2, 0x32}, @in=@local, {0x9, 0x7fffffffffffffff, 0x7fff, 0x2, 0x8, 0x200, 0x4, 0x80000001}, {0x1, 0xc39, 0x9, 0x4}, {0x80000001, 0xfff, 0x8000}, 0x70bd26, 0x34ff, 0x2, 0x1, 0x8, 0xc6}}]}, 0x7d8}}, 0x0)

23.853586689s ago: executing program 1 (id=3049):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@mcast1]}}}]}, 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x6}}]}, 0x2c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x3c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x27}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x14, r10, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000200), 0xffffffc1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r11, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r11, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

20.885007586s ago: executing program 1 (id=3050):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r1, 0xcb}, 0x8)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'erspan0\x00', {0xfff}, 0x2})
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r4, 0xb03}, 0x14}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000022}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x13c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "86f4f7e61950996256382a96ba10cf33c8c01f4b65bb669999e9cffbe01509a7970d0770"}}, @TIPC_NLA_NODE_ID={0x79, 0x3, "06a0e774ff519b3a35f339692f515b44104caa9ab0d674d31dad0c83d0063822c456af3ff6942fe1fdb9fa5d7280d738907e09a22338e7cfca64e599dbc776b5b85f15cdd972c1f6f438c80cabb44cdb9097695b6869303d7a14e6fe277b2f58e264221d86c65a4e36ef61c061442a527636aab1c4"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x35e8}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "64bb40db408f3fc7836e124c47046dd096bc31c13e2004"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

20.804334896s ago: executing program 4 (id=3051):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000013c0)={'team0\x00', &(0x7f00000012c0)=@ethtool_drvinfo={0x3, "b1015904849180e9a33bba5c09d84bcfaaf125ea71d525c3ca8d29f38ca7de3d", "3e905dc5345719d6c26ae7d6869eafe1308fbe9ec3937a088353ecc234c1b270", "e27209058368b97e07c6a36bd71bf50faaaa4cc459b461563d96fcf43cef9556", "cb2da74058cb8d204d1fcfe681724ba1c43f448a6dd17bc66b6ca749694f6aba", "942b254fd347c27ba8eac26cb159a5d6fca9f2ebd5f690c7d1aae8c50669cfb9", "5fc03157508709b83ecd0a7b"}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff0000000108000700263a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socket$nl_audit(0x10, 0x3, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r6, 0xc08ba000)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map, r5, 0x26, 0x7, 0x0, @void, @value=r1}, 0x20)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0)
socket$unix(0x1, 0x2, 0x0)

20.625380379s ago: executing program 3 (id=3052):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x7, 0x0, &(0x7f0000000480)="01003840501d6f3655e3f4ed473569364cc5933d21232b298abff4134be23606a7367ada2b14a8bd3edf3b3a3c57fbb9c64c93e43d38b271fdcd9d476a3cbda606", 0x41)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r11=>0xffffffffffffffff})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r1, @ANYRESDEC=r2, @ANYBLOB="000400ffffff7f00000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c851}, 0x4)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r13, @ANYRES16, @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0xc0dd}, 0x8004)
r16 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r17)
ioctl$IOCTL_GET_NCIDEV_IDX(r16, 0x0, &(0x7f00000000c0)=<r19=>0x0)
sendmsg$NFC_CMD_DEV_UP(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r18, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r19], 0x1c}}, 0x0)
sendmsg$NFC_CMD_VENDOR(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r15, @ANYBLOB="000227bd7000fcdbdf251d00000008001d000900000008001e000700000008000100", @ANYRESDEC=r17, @ANYBLOB="08000100", @ANYRESHEX, @ANYBLOB="08001d000000000045001f00823999209e27d44908aad9694ffc76b1f787f19bb7061ee4247693917b008613f0c5ca58a0d6cd14cb92c7d20c06adad47e7308ae2633b4100e4534fb8bf8aa61300000008001d0005000000a32b1e4634a4481376109ff0f82dab728313e4936b7ec2ce77325134ecd1119eccb96c75ff76347cf8410609761b321b0d04bf28c40428af0dbdff5e7612bbc05f5e"], 0x8c}, 0x1, 0x0, 0x0, 0x1000}, 0x80)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1ca80000e0576dad070182cb52c6aaa89eea8350a8a067fd4e46dbc8fe5f91e1f0b6e1233f8c79430ea90d91a445e6ba03ad22772fab9783c2d1c9c3915be6dfdb6368b2c4878e441fc172e85581a0a0870dc33b478f08f4998c6c660c750a2224872a915acf39bebd6f654dc184ec2ad782a365add993f7a3e55a9870aefbd00e77d2f2938a26958db7c437dc48c9f897ff19ba274f67a2472f8d7145f0539b195c7f4867dc191612cd00000000000072b86996823954bfbcc2acf26860cab2acc30411", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r20 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r20, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000001100000000ff0000080001"], 0x20}, 0x1, 0x200000000000000}, 0x0)

20.588102765s ago: executing program 1 (id=3053):
socket(0x10, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0) (async)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0x14, @random="ced6b9ac6872", 'macsec0\x00'}}, 0x1e)
close(0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) (async)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000001c0)="0d202c89f3fcbec464f88f3350b22134c7b2a63838578d61cf5a77bcefd4682e9aa0a1", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f80)="f3138b9b6db511b9ae21807c4364c367ff850b1557ddb77e2fa847dfa0a27912685e340b1d95a2e1c3addecbf7a512de6097b533e3cf913ea96f5d06a31493065fadb6210eb6f6f4b006f2f75096712422ee025c27deefdc9ffcbdd83b51926f1b5de8bd3d1e9ab11afa319762ae7521c064efb2ffa39059b20550a0ebf6859987b77b6a6a85693ee11994af3a79ce73ce4b160f5104a6d5fa212c843569f462aead57c373cb0e383ce375f9fba4f50283a33e3860a5b3d4c0ddbc6351483ebc21a43cd296c4a4136ae6df95223595d23ed726132a4a9704771c0016458836b2e78972e9e296f484351efad3b0b703ddafb1780d6cb634d6e1", 0xf9}, {&(0x7f0000001e80)="ab", 0x1}], 0x2, 0x0, 0x0, 0x4004000}}], 0x2, 0x0)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000280)) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4018000) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) (async)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x64, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="797c59e26088"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x0) (async)
bind$bt_hci(r1, &(0x7f0000000500)={0x1f, 0x1}, 0x6) (async)
write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03210a4c19040a00000000000008"], 0xe)

20.400296216s ago: executing program 1 (id=3054):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271b, 0x0, &(0x7f0000000340))
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x22021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x40000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048000}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r7, @ANYRES16=r7, @ANYRESOCT=r0, @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1400c8c0)
write$nci(r5, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x4, @v={0x6, 0x3, 0x1, 0x6, 0x9, 0xab, 0x6, {0x6, 0xf5, "cc16fa5e933ec65f"}, 0x18, 0x9, 0x1, 0x7f, 0x48, "aeebb0165d2eb90222d67317f0af029c7a166653ea95013ee16cfaa7fbd35215db519170bbd6e99236be1f9810f98b250d5defbc7a5eb267dedbb1e48e3cfc8993c887ebede52430"}}, 0x61)

20.378706256s ago: executing program 4 (id=3055):
r0 = socket(0x28, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x0)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000240)=r4, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a0000272d"], 0x1c}}, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r6, 0x111, 0x8, 0x0, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f00000005c0)=@ethtool_ringparam={0x10, 0x3, 0x951, 0x5775, 0xa, 0x9, 0x52a, 0x346, 0x5}})
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000005200010200000000e1ff0000020300000f004300be43e7115afb5c40c6dcff00"], 0x24}}, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r7, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="a84c1b78055df95a2031d7ce797b6029e07984389adbddfd685641d4fbec266a7fbc8311f178fbf22b0ec59fb3767275ea86e15c5ac0b274ebcf1f7924e7a12a77efd1fb9f5fbe24b6ad424f8bffd452451bb9472970e19676cdc26b63fb0195328627de7b9e53b088c27acae0", 0x6d}, {&(0x7f00000002c0)="0271f6d5ff84a7cecabe54de0ae03bfa20f88fbc111326b29ae622a48de1d0c867a5b8ece69c3f0a373356e1f7ac4da0956a87edbd6e09708eec6fe129c806a9220499c0831628155a201c02a749671cf7c90cd0cd13e7b2456f41e670280e76206aee44bbc587117fb7dfce7df258facf2ac50dfc7d4fda4c67880d1f75bc640495b4372a821f4f2f31b82a12a38cbca128278e5f592825c4fe8e35d19e848c74a97f90a0228b619bab0784a424f0fc501ab63e2b6a6146b3ead7eb82cfe90defb12fe237f968cf7af9d1f749f430d04b4ab1636f8caac8fdf143c2ce2f110cc428b5c3cd1c", 0xe6}, {&(0x7f00000003c0)="26077a635cff1d1dbf281c608d3a3f4fea854ee9271c5d6bfd419df5e4da2e60a803e50d6c1da512f358ca8a214721523415bba16d486b1b677ac439fe8f5a1f33fafc75476618955b90d9c666213e465ca127176c644aefb67b73c1c43d247d71be4058cdd4d0b760bcde862bc2d7b420a698460b1a885be57bc81472635197e9bb4c8237f0d22bff06f1307f59a5808b3f49cfab3eee56e44ffec0186cbc15e5f24ba636c1aed9b673999fba33b4cd4dbf16cb43a5eb8ccd7218b05e4eac88f0c56de9bdfd", 0xc6}], 0x3}}, {{&(0x7f00000005c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000600)="7bb270668b", 0x5}], 0x1}}], 0x2, 0x480e0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000300))

19.373018942s ago: executing program 4 (id=3056):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000180), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x5279, 0x800, 0x3, 0x1, 0x7f}, 0x14)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="7538736d00ff37838b57f777409f7df4a05c55d700230c89360a8ba1b83da54696815fe2f20234ad5e05d5b1aa45314d87b3569973e027b6f4bb1473c0b9a849ed0d78e0fffb0b8611a79fad6d458543db1d43977520a7ba5ce9b4d14cdd18fd", 0x60, 0x24044885, &(0x7f0000000000)={0x11, 0x88a8, r4, 0x1, 0xfe, 0x6, @broadcast}, 0x14)

19.173277472s ago: executing program 4 (id=3057):
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x5)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000400), 0xffffffffffffff71)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000088000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
socket$nl_xfrm(0x10, 0x3, 0x6)
connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @mcast2}, 0x1c)

16.320573357s ago: executing program 0 (id=3068):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = epoll_create(0x7)
syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "d2"}]}]}}}}}}}, 0x0)
epoll_pwait(r1, &(0x7f0000000380)=[{}], 0x1, 0x3f38, &(0x7f00000002c0), 0x8)
ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3)

16.229873535s ago: executing program 0 (id=3069):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r2, 0x0, 0xd0, 0x0, &(0x7f0000000080))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r4, r3, 0x2c, 0x10, 0x0, @void, @value=r3}, 0x20)
pipe(0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r5, &(0x7f0000000380)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @null}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x6, 0x0, 0x1, 0xc8, 0x3, 0x3300}, ["", "", "", "", "", ""]}, 0x1c}}, 0x10)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000010000100000000000000000056b0e68ef41efe2b000a01010000afa2000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000fc0800010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001400000000014", @ANYRESHEX, @ANYRES64=r6], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0xc885)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000980)="ad2bae88af70e1469afba7112350e4db60397b48fd6a09f65e28310f11b5309d4064acc4c1e3d6026caae3a39621713e36e2df3add2a49b8f620a94aef17c518d3a5b5026ae2800703a41ca8d5caad46082d8fddc7fcd95981eeb760128e2339e969c356eb653114cbff5dad8c8d80700ddacd5fdaf62d043319bbfac38d751ad7add6a0e9100a754cea52ae4bab3a1e0530714d909067027c62b99721850fe522bb8d579af0d368d1bfe9ac311077e07784bb9df264674cdca250e515b696be03a903f63edfc901d7ababd0a1a2c07bbe55c9a152ae2a7ff8758a49b92fe54cdf11bf19a3927e653e83de5f8f890b1c4157ec2c70dc4225714e77a13a99a485e808ddc23dc3012f4b89e48136d28838688c69936841050615aa03a3e266691aed3fdb0d86c794adf2cf42d06caebf2b93137a1ea7f2cf4cf3c78c1479db591c587848cacb85357ff14c8a6cb21c6ccaa45137d338f70413f6f05dae9a7a2f1d5de7f9840729c5f9a3a0d21d3f9ce17b7bbda8aab7021558bc93825dc61a01d76bb003c3be153b6a945f1ba077671fdf5e1e7cb819932c102411f99f91d30e65b889de8f59b4d1275f8317811bbb17162828d875b6b1c471f86f2180164a6c3e9b27414b856add0b197fe4763971c966a0fad406e9b302b8dec8c6028e194f4e9d71d7e79da54ed43bcf91bfe6549e258ff3ee83765972ee123fbc23c318f4cfa249c57c7eebc939a2cb30f9212e3e545f44c6e5b9ad124214f1d169310ce6e74ed552a5c101f60ce4e82f6088fc91ee093e34f3a1e4bdb29eaf4da41108b51147ef7fb94007ca307711db42e32af631ec6420420db86e37bf6ad9bae040c419f653dae6441a3e9e0e9e0180ff7f568f56d92ff7ef111f2422d5b0e3d3703a22df27826a8e8e048102a036197f385837b94aebe1ed07ce318a3da90ab83d80f2841420e69a9a9b2fb540b9ce693f1917934767a58b320e531517e32a0f3ef4017fec7ec3dbe8c59070561cae0d97bb791869861c41b36f1124d47aa804af8ba013769abd17f4284ea3317612aec837547e0fbf687704a8cb37f567b345f539c0e11d4a89744ac143adfcebee343af86b545ee6b7e0e537a6dcf2b146afb8ec42fe633a05c483aeeaeec0c2720cf287a43c1876a554ec81ef826f31e8906e497000c858d8861f49fb357d0edd2e1d24f768341cf096822c3c7feeb216dc87afde3aca265d060ee8b9c0a4eb108d69782da55fe64228492053481242e3e6699944cf31e6b6be83be11f364a51d92929bcd365a45295c5ddbf8488eb4b0f4d854b0b00215b6662387c07e15a95c2724072544bbe759dd9fad912012ef5449985c76fe8ccc6fcf502cb1f4e83423c6f1ba6fbe289636c5f0408223f3b3e3c80e6e272a1c2c45327d1e03703f75f110238eeabe902fb45144044d609cd008e5bd2eefde5d9e181d492b074f4e76826e5c0b62e9b992013a39bbbab3ce7c0239a078949396a96c22bef05026c069eab7781f8c3cd26924b8c73b8db2b5c3508b5b4124161400134aa3c0bcbe142e183c2e93d864ef4ccf31f80d5c3af2a0d2f522edc7402eb19bdb60bcce07afe8d4441bdc0f2301afe00b1951fcab920d1d1d7451c702f805a8441e56053b7872cae07857a2830424879a7b365cc14109b72548a3e3bdb6148530278e520924d197daeb0a4115d045226fd55b462a58d08a9cec3dfd791fa22b731b3ebc302192eed39f28b24f2e84bb80ef754e87a4cc079300149a96419325c5ca7143235a0c331c2046277116fd1a4d01afa9411a4a2d2f901613fedf76c94eec73ba8e1a6a3a47fed4c1374603294a2b9c411e337986c1625e8b4e687c6ee900ca2c11cf7d8a99f51a91fd1ab2eb1f92cf1524a0686d9a42193303d7908018e116debe28c77119c3afc034d57d7717f36ff7b225c7740d76ef74f6ae78c119f33cbb5826e1d40dee8e412527e69181120698c1b9f5978c305dda725e067463b9033fbd6d04190fa4198ee0799d5a94c50ed9746d60023829e9586bdcdcaba6e4776bdad01e38d44a3f0b18d9a6aa085d640d41bc3aad1f8aca450b3c2e4b30578e1bea16695ef41519e35d6062cb75946f87ce720478576de4f8e435e5423f3e0069b32cc25f992ece4af4db6af083a1c2bad2d70a010b71d1f62a86cc643ed5c12dbeeb77715137b65bcfe6385469fc7e93cc7d6eb4d3a375d34e03b5d27a77dd9029535640777cd11cb4e59f425e2983ed1fc5b34598071c45ae2a60e5683d96405599927891282dd7c3338be1c41d2e767b8f30ac2e48b38e1dd2ee9ac043fbbe4628a835d119d9d92e88afb3fad4aeef8ad5281a75868222d7cf93085072632d582aa4ad10abbd99addc82bf3b9e47b5f480be907451c930a2e08ce8fd5482cceda3859d31cc024d47b8ab0ea3b441b25e7aa2145ac111803ac975810ac52b6cbd29907fc8fc99ed46ba1c396482543aadf73386d245dd1cdb6308a6eacb9aaaff413de4f1af1067fc08bd7fbd759bc2aabce4e8a73c128b0008619b1811f4ccdea46fe5ed16b2e6c76fa93c39991bec868e75145e8e352f7b7212ac70a7b8afb55e6c4254fb56c401d2bf35c1f0c56435f65bea418c16685d470b650cd06da7472cf8cf66df2f8d5bac44aee617e6d75b9fc6c108a83c2bb639fddace38d7bd90e6c978ab030aebd420fb38c55d8419f1c0ae6a982fa42842abf698b4c400bfbf075fc20f9017803c8abab39a1f8787cdc1983ef029dec1703d5d9aa0517d05debcf1d8542411fd061f57a4db6c4c34f2b51793142141f8fcc079c401df709ad83f4faf02e90336a8205bf694115dec25b2c11cb025d60c4c4d2e7ff368c111a8b211432aecd3bd9679bd9d6cf8a40e186043760eda077b43d8b4646435e07592c9f4b932e7482a65a7b36af87c1e358819518e70b85cbd22f6bbd994c8b40602efec69297872928fdd3d8740df2e8621b9d7c4af38f33afae715fe74c2597991f755f41910d70b44c8378e06cf8a407e522e044037d6591428108283a745a5c2d21118f8be040b11ef8e66d64dcca33bff9a9c1b20d658ef8af376afa2edae6d480025e66a4b590ee1ed55c238b22085724df8c92bd5c6aa9d6f23f13060dc215f3929661d01a2f4fc1e22b7cfc8f8950f68202007b32ecff4ba18e7d62b925d9beae8acedfa6f80ac737399afcffb6f015ac535850bda053c29ab68f73eb617c960d1c86ebf83e9ce0d6a1e3a1db69166438694f41c769e2361bbf1efc491b19efe754210274e33eee65719a5e73fef35de4f7a436883f3da28bd2f24e8db5f1899198b09a6a3783e301f5be80262fe3575bfaf07954df697842752da8a2ec85f9ec873c0a0ef43b866d3730f84043575dffc312b9bd713a563509ffa9b69e4ed381b1bf21e9dc9bd644a1b9e94cc3338e76fa62dee7f7d239bfe0e8efc8202a741ee9871e5d82baec0b566750722a4c83242b2fdd2a9a11947fa2630dffa4d7d42b3d7f9b93172ee4b563bd808bb7be82042d2a349b8dcf1d7ed5b8e8c58de5e8714232af2874fcb2c7f756cf01d520b05831750153c1a774428389a6f8e03cfc369554d054865c0f0c4caef7f0c77af0750fba72f2fc14669adbc9b40fc73833e97aaa5f22296f5c73d283e24b747c93112968308240facb3e837893fc07f3fe4e0387e7910a34ed1bdcf8d100e8e2035493f6216f2f0a7be23881dfaaa150f79a0ab82c42bc6b334f01ff7e9a28e0bd5aca37b3ce3c8f71ccb08548417ce2a2f12e47a55017ec7105cccbd302383357ca8d477b041948497f912d0a496bb20a111e819c07d5cbaaadcdd3c151e3bd96bf1268bacdfbf41ad3477bfef981af9bd4b5289081672d9a74dcab1705e4c7b8182ebad53cd598371cefe807dca8e8d001901d6ae5aa76a57ad3a2832c75879fba334fa83e2124341dc22631a5e665331eced63aa241e08cd0761eabaf40150c78d952b14afe5d4e3e1f42bcca16bb1d86e6efc49232cdf68217d8494d50bdca35e9f5dd4c216500eaf1453d0815231b2dd0091f389d082204c980685afc1d9041a6543587f4cccf939b40e4428d7eef2fdb7fee6ffc1fe12dc5ea5d48c1158950d95c7f9624e286f26e0e4899b418c8117bccbca70d2af4e3570ef94744cac79a9554cfd49dca7854080b5998f3c1c4f08b17a1a2980c4a4f3e11533a2cc31df51187d66b714e0e2fdb7676bdd7ddaa2dfb1c67bef9826142044fcc4250efaf6ef77ed611cbcd6294748661a544b84979c75094b1c8abece8d6c924db10275fca747ef562c7e4368653c36aa346f996793141ad3ae90d2f8a8522a85be269895e3e9bf0d4b3d6503f33740e4077243049f874e5c869e302b1fbafde647898cf3ab11b7b4261503ccc3b00add733493f0c78992e5248e43d0841b0571238c58b4ca2e16cd0e0115ab58e60794887e85425a686b8cbd403d90c429341abcd7df3feda5e72ea7462aacce789fa2470f4ff040b387ea8f5815669765049bd064729f179bc5efd91d869786bfb0b013b4318cb228cf5ca198ad6454cd91c327b071658f6ac86c0bd03ee72c10dcc049b245d28ad4dda82d6a49d101f4a00af9e95286465aedaa44e6b4f11c75c913924f3d0cda6accefe0e3cc32f505788a9e8ac82c6b14264bdfa022b7e15e112808d1a486e4c0086cb2e7291f46a25254e50edb8b8e1ec1f993ef3d076f6741c2a0b8e4e4e76cf1d68024e5b3cda5a79e3183f4c5f04dda1cb60a10fe29a038c875d489a6f481c0125c906db107ebe2d235ed2f3625c20c74f767cf20f2e73563d777bd44a12dd83aec16ce1c0c43a1fc95d94613d8857c1b7192241e85eff5d5856db04eade9ef0a5a87ae4b29520d74ae24b3ae8f9e874901e067c57aeb3685ee011750a0a88f4ebf5c3dd22f8c445f72ecb84bf2f6804fa96e91e7196311b99b16a36f1d8d50c82d09e21b46d2e568d1a148536752cd40f656d970b1e57d3b4b866b6a4311255d7df335e9620c093e603ec9e761266816cb87680cb2ab9e08c6bad9d0dee52f4fcba4451599f691b4f53ab1f69e6227bf8193c927d6ad0d30d1c0b1ba3c559ab092b9045e4b6b2c66d19aaed45bd5cd0e92564d2cfb33c0fceab61a913bfa98f6a774d89d6bbcede9cbead131ede3d7ed909ff9d2ee3d951641cf54c24b3f95bb05ca5f78731c6df48a700ca12d613b2378511ac2544d27a96fd9dee59a26e203baa2be43d982d63d5e12615b60649e15205e5472fb333081a841147b372184acd744b0ebe07f5c591246b6e17eb6769d4fd40796b93721cdddf72f13b45e823e8fe6fe56114e7dce907b55901504bbf70e58b5b193e5742d7821928806ee3c5d990cbc71d5b5814da0bd2682060800fe7b038bbba812bc1cf291cb7b0f318309ae79ecbdda446fc6b93820683ba7523a20098c712675b7da663a0c3bca7b0a552acb64ca1b77b7071a2446f7152affde9746ab20d4157fbeb60ea6893e28c4adf15f88433174be5e86b3e385a561457897c92cbafb7de5f5bb6f70b6f1f5508ad4babf3f7540917b251c5ae3e10c3928ab43d1cedfb5df0dac6f54f40d1f37bb485d05e867fcec592c639ece327442980ecaa1e8e3114b4b12e8b855dd2076fba68d0f5b5edd06656ed877393d44967c13a765a3d316e334d0cf8a580f57f163b41ef114d95b34b7a6240b07983179f4d1b40584460723033b40c9037a040f167ebda3df03a15a22512cd021278e383d3d00d1375c0b3b6f4fb70ec62b9557c05ab8d6ba48ed722e08abddbe7290802d77", 0x1000}], 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1000, 0x7, [0x8, 0x6, 0xd78, 0x8, 0x81, 0x100, 0x9]}, 0x16)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfffffffffffffc33)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

16.120462721s ago: executing program 0 (id=3070):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="000002000000240a0001801400018008000100e000000108000200e00000010c00028005000100000000002400080001000000000008000200ac1e00010c00028005000100000000000800074000000000000000000092cf494544e677771a7eb0096539954dcbcfa7d3e6d3b9d38c6e2d7fe513e0ac76b223457750e4d38edb49a3b52971be2ff9ec136875b304a3ae85b1be3e10c17dd9d5669b4b668b64aee828909bea9a5d232a66401bfad680062176a195d67bde89769f8900269d1880ed012abd9a9b4a94747b1b23a77cbbe34942dc84266149f2f30393fe0f63ecf4600719c10d54e69fdc4a53", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0xd1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x40}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x2, 0x9}], 0x10, 0x1}, 0x94)
socket$kcm(0x29, 0x5, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4)

15.295441504s ago: executing program 0 (id=3071):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d042abd7000fbdbdf2500000000b3c5cc2bfc54954cb23edd5fc06e6a1a75c5eeb0f0b700ef6c476ca9fd0b4e3cb290bf577e805486946c79c612e8ce01c39666cd4f6990f203b40b4f7ce638f931e0064be7854cffffffffffffff7faef526c0e0c6", @ANYRES32, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r2, 0x0, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x3a}, {0x18, 0x110, 0xe, "025f0dc359"}], 0x28}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000)
r7 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r11, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2)
syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00030e220016909889a9345490fe2a00ffb00afe4e70"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)

15.218978002s ago: executing program 0 (id=3072):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
socket$packet(0x11, 0x3, 0x300)

15.128319802s ago: executing program 0 (id=3073):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5911f0600002300000000000000", 0x11)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000140)=0x8, 0x4)
r2 = socket(0x840000000002, 0x3, 0x100)
setsockopt$inet_msfilter(r2, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
close(r4)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0xba2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2b1}, @in={0x2, 0x4e21, @multicast1}], 0xb)
sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)

5.101833985s ago: executing program 32 (id=3054):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271b, 0x0, &(0x7f0000000340))
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x22021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x40000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048000}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r7, @ANYRES16=r7, @ANYRESOCT=r0, @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1400c8c0)
write$nci(r5, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x4, @v={0x6, 0x3, 0x1, 0x6, 0x9, 0xab, 0x6, {0x6, 0xf5, "cc16fa5e933ec65f"}, 0x18, 0x9, 0x1, 0x7f, 0x48, "aeebb0165d2eb90222d67317f0af029c7a166653ea95013ee16cfaa7fbd35215db519170bbd6e99236be1f9810f98b250d5defbc7a5eb267dedbb1e48e3cfc8993c887ebede52430"}}, 0x61)

5.064992952s ago: executing program 33 (id=3052):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x7, 0x0, &(0x7f0000000480)="01003840501d6f3655e3f4ed473569364cc5933d21232b298abff4134be23606a7367ada2b14a8bd3edf3b3a3c57fbb9c64c93e43d38b271fdcd9d476a3cbda606", 0x41)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r11=>0xffffffffffffffff})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r1, @ANYRESDEC=r2, @ANYBLOB="000400ffffff7f00000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c851}, 0x4)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r13, @ANYRES16, @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0xc0dd}, 0x8004)
r16 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r17)
ioctl$IOCTL_GET_NCIDEV_IDX(r16, 0x0, &(0x7f00000000c0)=<r19=>0x0)
sendmsg$NFC_CMD_DEV_UP(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r18, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r19], 0x1c}}, 0x0)
sendmsg$NFC_CMD_VENDOR(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r15, @ANYBLOB="000227bd7000fcdbdf251d00000008001d000900000008001e000700000008000100", @ANYRESDEC=r17, @ANYBLOB="08000100", @ANYRESHEX, @ANYBLOB="08001d000000000045001f00823999209e27d44908aad9694ffc76b1f787f19bb7061ee4247693917b008613f0c5ca58a0d6cd14cb92c7d20c06adad47e7308ae2633b4100e4534fb8bf8aa61300000008001d0005000000a32b1e4634a4481376109ff0f82dab728313e4936b7ec2ce77325134ecd1119eccb96c75ff76347cf8410609761b321b0d04bf28c40428af0dbdff5e7612bbc05f5e"], 0x8c}, 0x1, 0x0, 0x0, 0x1000}, 0x80)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1ca80000e0576dad070182cb52c6aaa89eea8350a8a067fd4e46dbc8fe5f91e1f0b6e1233f8c79430ea90d91a445e6ba03ad22772fab9783c2d1c9c3915be6dfdb6368b2c4878e441fc172e85581a0a0870dc33b478f08f4998c6c660c750a2224872a915acf39bebd6f654dc184ec2ad782a365add993f7a3e55a9870aefbd00e77d2f2938a26958db7c437dc48c9f897ff19ba274f67a2472f8d7145f0539b195c7f4867dc191612cd00000000000072b86996823954bfbcc2acf26860cab2acc30411", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r20 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r20, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000001100000000ff0000080001"], 0x20}, 0x1, 0x200000000000000}, 0x0)

4.031463084s ago: executing program 34 (id=3057):
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x5)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000400), 0xffffffffffffff71)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000088000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
socket$nl_xfrm(0x10, 0x3, 0x6)
connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @mcast2}, 0x1c)

0s ago: executing program 35 (id=3073):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5911f0600002300000000000000", 0x11)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000140)=0x8, 0x4)
r2 = socket(0x840000000002, 0x3, 0x100)
setsockopt$inet_msfilter(r2, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
close(r4)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0xba2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2b1}, @in={0x2, 0x4e21, @multicast1}], 0xb)
sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)

kernel console output (not intermixed with test programs):

abled state
[  171.702768][ T9319] bridge0: left allmulticast mode
[  171.710849][ T9319] bridge0: left promiscuous mode
[  171.854796][ T9327] Cannot find set identified by id 65534 to match
[  171.974105][ T9334] macvtap1: entered promiscuous mode
[  171.990545][ T9334] vlan0: entered promiscuous mode
[  171.996076][ T9334] macvtap1: entered allmulticast mode
[  171.999778][ T9340] __nla_validate_parse: 9 callbacks suppressed
[  171.999794][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'.
[  172.008211][ T9334] vlan0: entered allmulticast mode
[  172.026222][ T9334] veth0_vlan: entered allmulticast mode
[  172.112287][ T9342] macvtap2: entered promiscuous mode
[  172.117650][ T9342] macvtap2: entered allmulticast mode
[  172.224854][ T9357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.236818][ T9338] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  172.293828][ T9338] tipc: Resetting bearer <eth:syzkaller0>
[  172.345994][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'.
[  172.600637][ T9337] tipc: Disabling bearer <eth:syzkaller0>
[  172.622004][ T9378] netlink: 'syz.1.954': attribute type 1 has an invalid length.
[  172.634473][ T9378] netlink: 224 bytes leftover after parsing attributes in process `syz.1.954'.
[  172.696980][ T9378] sock: sock_set_timeout: `syz.1.954' (pid 9378) tries to set negative timeout
[  172.951206][ T9394] gretap0: entered promiscuous mode
[  173.216217][ T9408] team0: Device wireguard0 is of different type
[  173.320595][ T9416] openvswitch: netlink: Missing key (keys=40, expected=100)
[  173.541773][ T9430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.970'.
[  173.984428][ T9458] IPVS: length: 170 != 8
[  174.081262][ T9462] netlink: 56 bytes leftover after parsing attributes in process `syz.4.979'.
[  174.119245][ T9461] netlink: 56 bytes leftover after parsing attributes in process `syz.4.979'.
[  174.325399][ T9481] IPv6: NLM_F_CREATE should be specified when creating new route
[  175.035842][ T9517] pim6reg1: entered promiscuous mode
[  175.045871][ T9517] pim6reg1: entered allmulticast mode
[  175.055971][ T9523] netlink: 404 bytes leftover after parsing attributes in process `syz.2.994'.
[  175.065906][ T9523] netlink: 'syz.2.994': attribute type 15 has an invalid length.
[  175.197399][ T9527] pim6reg: entered allmulticast mode
[  175.234820][ T9531] pim6reg: left allmulticast mode
[  175.313497][ T9540] netlink: 128 bytes leftover after parsing attributes in process `syz.2.999'.
[  175.336383][ T9535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.345168][ T9529] syzkaller0: entered promiscuous mode
[  175.357075][ T9529] syzkaller0: entered allmulticast mode
[  175.431855][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'.
[  175.455775][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.997'.
[  175.573027][ T9554] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003
[  175.583622][ T9529] tipc: Resetting bearer <eth:syzkaller0>
[  175.609380][ T9528] tipc: Resetting bearer <eth:syzkaller0>
[  175.626625][ T9559] netlink: 'syz.0.1002': attribute type 83 has an invalid length.
[  175.629332][ T9528] tipc: Disabling bearer <eth:syzkaller0>
[  175.878507][ T9571] netlink: 'syz.4.1006': attribute type 2 has an invalid length.
[  177.328988][ T9580] veth1_macvtap: left promiscuous mode
[  177.334530][ T9580] macsec0: entered promiscuous mode
[  177.344305][ T9580] macsec0: entered allmulticast mode
[  177.374355][ T9581] veth1_macvtap: entered promiscuous mode
[  177.393287][ T9581] veth1_macvtap: entered allmulticast mode
[  177.409562][ T9581] macsec0: left promiscuous mode
[  177.419215][ T9581] macsec0: left allmulticast mode
[  177.424288][ T9581] veth1_macvtap: left allmulticast mode
[  177.472363][ T9584] team0: Device vti0 is of different type
[  177.511350][ T9591] netdevsim netdevsim1: Direct firmware load for 	 failed with error -2
[  177.543241][ T9591] netdevsim netdevsim1: Falling back to sysfs fallback for: 	
[  177.734993][ T9608] __nla_validate_parse: 1 callbacks suppressed
[  177.735014][ T9608] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1016'.
[  177.849265][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'.
[  177.956573][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'.
[  177.973498][ T9620] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1022'.
[  178.107886][ T9631] x_tables: ip6_tables: mh match: only valid for protocol 135
[  178.155377][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'.
[  178.206422][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1023'.
[  178.270750][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'.
[  178.571809][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'.
[  178.582185][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1030'.
[  178.679538][ T9656] netlink: 212352 bytes leftover after parsing attributes in process `syz.0.1032'.
[  178.808535][ T9667] x_tables: duplicate entry at hook 3
[  178.983234][ T9684] batman_adv: batadv0: Removing interface: veth3
[  178.990940][ T9684] batman_adv: batadv0: Removing interface: veth5
[  179.046764][ T9688] netlink: 'syz.0.1039': attribute type 2 has an invalid length.
[  179.750775][ T9718] syzkaller1: entered promiscuous mode
[  179.756540][ T9718] syzkaller1: entered allmulticast mode
[  179.807852][ T9730] netlink: 'syz.3.1052': attribute type 8 has an invalid length.
[  179.882491][ T9730] bond0: entered promiscuous mode
[  179.887790][ T9730] bond_slave_0: entered promiscuous mode
[  179.894725][ T9730] bond_slave_1: entered promiscuous mode
[  179.906798][ T9730] gretap0: entered promiscuous mode
[  179.914083][ T9730] veth0_to_batadv: entered promiscuous mode
[  179.922052][ T9730] hsr1: entered promiscuous mode
[  179.973810][ T9722] syzkaller0: entered promiscuous mode
[  179.985546][ T9722] syzkaller0: entered allmulticast mode
[  180.006224][ T9731] ������Z7nz>RA� speed is unknown, defaulting to 1000
[  181.252222][ T9786] block nbd0: Unsupported socket: should be TCP or UNIX.
[  181.380596][ T9792] netlink: 'syz.2.1068': attribute type 30 has an invalid length.
[  182.419987][ T9852] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  182.840314][ T9889] __nla_validate_parse: 19 callbacks suppressed
[  182.840333][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'.
[  182.842458][ T9882] syzkaller0: entered promiscuous mode
[  182.861860][ T9882] syzkaller0: entered allmulticast mode
[  182.875415][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1099'.
[  182.911036][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'.
[  182.941001][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  182.977621][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  183.006313][ T9895] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1099'.
[  183.026971][ T9895] xt_l2tp: missing protocol rule (udp|l2tpip)
[  183.265014][ T9900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1103'.
[  183.583502][ T9898] vlan4: entered promiscuous mode
[  183.590067][ T9898] bond0: entered promiscuous mode
[  183.595248][ T9898] bond_slave_0: entered promiscuous mode
[  183.618030][ T9898] bond_slave_1: entered promiscuous mode
[  183.880753][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1107'.
[  183.979863][ T9931] netlink: 'syz.0.1110': attribute type 2 has an invalid length.
[  183.997842][ T9931] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1110'.
[  184.026524][ T9928] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1109'.
[  184.502459][ T9966] sctp: [Deprecated]: syz.2.1121 (pid 9966) Use of int in maxseg socket option.
[  184.502459][ T9966] Use struct sctp_assoc_value instead
[  184.504650][   T24] hid-generic 0005:0B57:0002.0002: item fetching failed at offset 0/1
[  184.619208][   T24] hid-generic 0005:0B57:0002.0002: probe with driver hid-generic failed with error -22
[  184.669452][ T9970] geneve2: entered promiscuous mode
[  184.674721][ T9970] geneve2: entered allmulticast mode
[  184.700334][ T3007] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  184.715084][ T3007] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  184.796969][ T3007] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  184.871195][ T9970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.915252][ T9991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.355191][T10018] 8021q: adding VLAN 0 to HW filter on device bond6
[  185.522720][T10028] netlink: 'syz.1.1139': attribute type 1 has an invalid length.
[  186.325367][ T9970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.336519][ T9970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  186.423292][ T9970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.433964][ T9970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  186.493707][ T9970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.504193][ T9970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  186.610053][ T3007] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  186.618539][ T3007] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  186.632988][ T3007] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  186.641611][ T3007] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  186.659912][ T3007] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  186.668544][ T3007] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  186.685879][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  186.694399][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  209.561688][T10044] __nla_validate_parse: 8 callbacks suppressed
[  209.561708][T10044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1145'.
[  210.360065][T10076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  210.495110][T10089] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1156'.
[  210.536824][T10091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1155'.
[  210.987147][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'.
[  211.064818][T10105] netlink: 'syz.1.1160': attribute type 13 has an invalid length.
[  211.074120][T10105] netlink: 'syz.1.1160': attribute type 17 has an invalid length.
[  211.101028][T10116] tap0: tun_chr_ioctl cmd 1074025672
[  211.106650][T10116] tap0: ignored: set checksum disabled
[  211.160515][T10105] syz_tun: left promiscuous mode
[  211.193346][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1165'.
[  211.203245][T10105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  211.204729][   T30] audit: type=1107 audit(1763034445.834:4): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='F�C��֒�������I��'
[  211.233248][T10116] tap0: tun_chr_ioctl cmd 1074025677
[  211.243104][T10116] tap0: linktype set to 65534
[  211.251712][T10119] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  211.341802][T10133] netlink: 'syz.1.1166': attribute type 1 has an invalid length.
[  211.441820][T10133] bridge0: Device is already in use.
[  211.449965][T10133] bridge0: Device is already in use.
[  211.457142][T10138] netlink: 'syz.0.1168': attribute type 2 has an invalid length.
[  211.474445][T10138] �9: entered promiscuous mode
[  211.691326][T10155] nft_compat: unsupported protocol 0
[  211.697686][T10155] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1173'.
[  211.843827][T10162] netlink: 'syz.4.1176': attribute type 1 has an invalid length.
[  211.854460][T10162] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1176'.
[  211.932267][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  211.932348][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  211.944433][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[  212.117595][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'.
[  212.229950][T10181] netlink: 'syz.0.1182': attribute type 12 has an invalid length.
[  212.693632][T10204] netlink: 'syz.0.1190': attribute type 11 has an invalid length.
[  212.702715][T10204] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1190'.
[  214.053791][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'.
[  214.069977][T10213] hsr0 speed is unknown, defaulting to 1000
[  214.108821][T10219] C: renamed from team_slave_0 (while UP)
[  214.121865][T10219] netlink: 'syz.1.1194': attribute type 1 has an invalid length.
[  214.147085][T10219] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  214.176128][T10213] hsr0 speed is unknown, defaulting to 1000
[  214.189060][T10213] hsr0 speed is unknown, defaulting to 1000
[  214.234968][T10213] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  214.287091][T10225] syzkaller1: entered promiscuous mode
[  214.296938][T10225] syzkaller1: entered allmulticast mode
[  214.314949][T10213] hsr0 speed is unknown, defaulting to 1000
[  214.396713][T10213] hsr0 speed is unknown, defaulting to 1000
[  214.415072][T10230] netlink: 'syz.0.1199': attribute type 4 has an invalid length.
[  214.417820][T10213] hsr0 speed is unknown, defaulting to 1000
[  214.425579][T10230] netlink: 'syz.0.1199': attribute type 4 has an invalid length.
[  214.461356][T10213] hsr0 speed is unknown, defaulting to 1000
[  214.480195][T10213] hsr0 speed is unknown, defaulting to 1000
[  214.830819][T10244] bridge2: entered promiscuous mode
[  214.836347][T10244] bridge2: entered allmulticast mode
[  215.058967][T10260] syzkaller0: entered promiscuous mode
[  215.072065][T10260] syzkaller0: entered allmulticast mode
[  215.736980][T10295] Cannot find del_set index 4 as target
[  215.771040][T10297] ipt_rpfilter: unknown options
[  216.137757][T10318] __nla_validate_parse: 1 callbacks suppressed
[  216.137778][T10318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1226'.
[  216.165891][T10325] ������Z7nz>RA� speed is unknown, defaulting to 1000
[  216.179299][T10325] hsr0 speed is unknown, defaulting to 1000
[  216.260271][T10336] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1228'.
[  216.273454][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1228'.
[  216.291553][T10336] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1228'.
[  216.301614][T10336] netlink: 'syz.3.1228': attribute type 3 has an invalid length.
[  216.312544][T10336] netlink: 'syz.3.1228': attribute type 2 has an invalid length.
[  216.320743][T10336] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1228'.
[  216.476634][T10342] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1229'.
[  216.545606][T10344] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000
[  216.562271][T10344] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002
[  216.640005][T10346] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  216.902244][T10359] vlan2: entered promiscuous mode
[  216.924152][T10359] vlan2: entered allmulticast mode
[  216.943134][T10359] hsr_slave_1: entered allmulticast mode
[  216.990582][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'.
[  217.049243][T10359] ������Z7nz>RA� speed is unknown, defaulting to 1000
[  217.151893][T10359] hsr0 speed is unknown, defaulting to 1000
[  217.338580][T10382] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1242'.
[  217.432992][T10391] sctp: [Deprecated]: syz.4.1243 (pid 10391) Use of int in max_burst socket option deprecated.
[  217.432992][T10391] Use struct sctp_assoc_value instead
[  217.549646][T10398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.583825][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'.
[  217.600550][T10398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.627860][T10398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.649615][T10398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.672130][T10398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.687741][T10398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.710462][T10398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.731521][T10398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.753519][T10398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.772698][T10398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.994021][T10416] netlink: 'syz.1.1251': attribute type 1 has an invalid length.
[  218.043984][T10416] bond4: (slave gretap2): making interface the new active one
[  218.053050][T10416] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  218.214416][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'.
[  218.417426][T10431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.446988][T10440] netlink: 'syz.3.1257': attribute type 2 has an invalid length.
[  218.459756][T10440] netlink: 'syz.3.1257': attribute type 1 has an invalid length.
[  218.577193][T10446] syzkaller0: entered promiscuous mode
[  218.585678][T10446] syzkaller0: entered allmulticast mode
[  218.651154][T10430] tipc: Disabling bearer <eth:syzkaller0>
[  218.995118][T10476] xt_CT: You must specify a L4 protocol and not use inversions on it
[  219.193107][T10481] netlink: 'syz.2.1266': attribute type 9 has an invalid length.
[  219.493107][T10494] netlink: 'syz.1.1268': attribute type 4 has an invalid length.
[  219.974953][T10523] sctp: [Deprecated]: syz.0.1277 (pid 10523) Use of struct sctp_assoc_value in delayed_ack socket option.
[  219.974953][T10523] Use struct sctp_sack_info instead
[  220.441488][T10549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  220.448852][T10549] IPv6: NLM_F_CREATE should be set when creating new route
[  220.469566][T10549] netlink: 'syz.1.1286': attribute type 3 has an invalid length.
[  220.492466][T10549] vlan0: entered promiscuous mode
[  220.499168][T10549] vlan0: entered allmulticast mode
[  220.499876][ T5842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  220.504741][T10549] veth0_vlan: entered allmulticast mode
[  220.783458][ T1038] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9e
[  221.717354][T10597] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002
[  221.733129][T10600] __nla_validate_parse: 10 callbacks suppressed
[  221.733150][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1295'.
[  222.020551][T10617] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1305'.
[  222.267326][T10632] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1307'.
[  222.317081][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'.
[  222.365599][T10635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1309'.
[  222.531695][T10645] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1313'.
[  222.579258][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'.
[  222.714272][T10660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.770717][T10661] tipc: Resetting bearer <eth:syzkaller0>
[  222.807414][T10658] tipc: Disabling bearer <eth:syzkaller0>
[  223.531340][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'.
[  223.729511][T10685] netlink: 'syz.4.1320': attribute type 11 has an invalid length.
[  223.737843][T10685] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1320'.
[  224.133235][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'.
[  224.429087][T10750] pim6reg1: entered promiscuous mode
[  224.440876][T10750] pim6reg1: entered allmulticast mode
[  224.591358][T10755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  224.602624][T10754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  225.189468][T10795] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  225.344580][T10801] nbd: must specify an index to disconnect
[  225.434053][T10811] net_ratelimit: 27 callbacks suppressed
[  225.434074][T10811] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  225.485167][T10811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.527047][T10818] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  225.540959][T10822] openvswitch: netlink: Flow key attribute not present in set flow.
[  225.813294][T10838] netlink: 'syz.1.1375': attribute type 1 has an invalid length.
[  226.097251][T10856] netlink: 'syz.2.1381': attribute type 10 has an invalid length.
[  226.113672][T10858] netlink: 'syz.0.1382': attribute type 4 has an invalid length.
[  226.705886][T10894] netlink: 'syz.4.1394': attribute type 11 has an invalid length.
[  226.820700][T10900] __nla_validate_parse: 10 callbacks suppressed
[  226.820732][T10900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'.
[  226.989655][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'.
[  227.008826][T10910] nbd: device at index 64 is going down
[  227.157564][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'.
[  227.253934][T10935] sch_fq: defrate 0 ignored.
[  227.339270][T10941] netlink: 'syz.1.1409': attribute type 4 has an invalid length.
[  227.355964][T10941] netlink: 159824 bytes leftover after parsing attributes in process `syz.1.1409'.
[  227.381229][T10941] vlan3: entered promiscuous mode
[  227.654687][T10938] xt_CT: No such helper "snmp_trap"
[  227.956516][T10965] netlink: 'syz.3.1413': attribute type 1 has an invalid length.
[  227.976903][T10965] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1413'.
[  228.271009][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'.
[  228.280562][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'.
[  228.301421][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'.
[  228.306777][ T1038] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  228.310380][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'.
[  228.331626][ T1167] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  228.371790][ T1167] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  228.399803][ T1167] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  228.657304][T11000] 8021q: adding VLAN 0 to HW filter on device bond2
[  228.667035][T11000] bond2: entered promiscuous mode
[  228.674291][T11000] bond0: (slave bond2): Enslaving as an active interface with an up link
[  228.690981][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'.
[  228.895172][T11019] gtp1: entered promiscuous mode
[  228.907706][T11019] gtp1: entered allmulticast mode
[  228.992709][T11026] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  229.086327][T11037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.118906][T11035] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.159200][T11037] syzkaller0: entered promiscuous mode
[  229.164758][T11037] syzkaller0: entered allmulticast mode
[  229.262771][T11035] tipc: Resetting bearer <eth:syzkaller0>
[  229.308949][T11034] tipc: Resetting bearer <eth:syzkaller0>
[  229.359892][T11034] tipc: Disabling bearer <eth:syzkaller0>
[  229.369811][T11049] sctp: [Deprecated]: syz.1.1440 (pid 11049) Use of int in maxseg socket option.
[  229.369811][T11049] Use struct sctp_assoc_value instead
[  229.417417][T11049] sctp: [Deprecated]: syz.1.1440 (pid 11049) Use of int in maxseg socket option.
[  229.417417][T11049] Use struct sctp_assoc_value instead
[  229.531900][T11061] wg0: entered promiscuous mode
[  229.575872][T11065] syzkaller1: entered promiscuous mode
[  229.582025][T11065] syzkaller1: entered allmulticast mode
[  229.901937][T11090] netlink: 'syz.3.1451': attribute type 2 has an invalid length.
[  229.955420][T11090] : entered promiscuous mode
[  230.421023][T11125] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  230.433410][T11125] bond3 (unregistering): Released all slaves
[  230.475217][T11129] netlink: 'syz.4.1465': attribute type 10 has an invalid length.
[  230.490779][T11129] bridge0: port 3(syz_tun) entered disabled state
[  230.505731][T11129] syz_tun: left allmulticast mode
[  230.518512][T11129] bridge0: port 3(syz_tun) entered disabled state
[  230.556042][T11129] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  230.645285][T11131] veth9: entered allmulticast mode
[  230.895900][T11151] No such timeout policy "syz0"
[  231.010922][T11163] netlink: 'syz.0.1474': attribute type 1 has an invalid length.
[  231.208811][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  231.290081][T11179] pim6reg: entered allmulticast mode
[  231.419968][T11188] netlink: 'syz.4.1481': attribute type 12 has an invalid length.
[  231.463643][T11188] bond4: option primary_reselect: invalid value (255)
[  231.473865][T11188] bond4 (unregistering): Released all slaves
[  231.825423][T11215] vlan3: entered allmulticast mode
[  232.021278][T11225] netlink: 'syz.4.1493': attribute type 3 has an invalid length.
[  232.049013][T11225] netlink: 'syz.4.1493': attribute type 3 has an invalid length.
[  232.131724][T11232] __nla_validate_parse: 17 callbacks suppressed
[  232.131738][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'.
[  232.193007][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'.
[  232.468273][T11239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1496'.
[  232.590385][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'.
[  232.777706][T11247] delete_channel: no stack
[  232.809248][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'.
[  233.033148][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'.
[  233.196587][T11256] 8021q: adding VLAN 0 to HW filter on device bond5
[  233.257287][T11266] vlan2: entered allmulticast mode
[  233.298255][T11266] bond5: entered allmulticast mode
[  233.535406][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'.
[  233.599789][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'.
[  233.619671][T11298] netlink: 'syz.0.1510': attribute type 10 has an invalid length.
[  233.634947][T11298] Bluetooth: MGMT ver 1.23
[  233.737761][T11304] netlink: 'syz.2.1511': attribute type 1 has an invalid length.
[  233.764041][T11303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1512'.
[  233.777778][T11303] netlink: 'syz.1.1512': attribute type 7 has an invalid length.
[  233.788326][T11304] nbd: illegal input index 2958377
[  233.812528][T11303] netlink: 'syz.1.1512': attribute type 8 has an invalid length.
[  233.850754][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'.
[  234.037198][T11285] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  234.672975][T11351] vlan2: entered promiscuous mode
[  234.682113][T11351] geneve1: entered promiscuous mode
[  234.687646][T11351] vlan2: entered allmulticast mode
[  234.718346][T11351] geneve1: entered allmulticast mode
[  234.861703][T11368] xt_CT: You must specify a L4 protocol and not use inversions on it
[  234.902077][T11371] xt_hashlimit: invalid rate
[  235.010064][T11366] bond8 (unregistering): Released all slaves
[  235.070326][T11379] gretap1: entered promiscuous mode
[  235.368681][ T5842] Bluetooth: hci3: command 0x0406 tx timeout
[  235.864647][T11426] netlink: 'syz.1.1544': attribute type 1 has an invalid length.
[  235.879639][T11427] bridge0: Device is already in use.
[  235.965295][T11431] syzkaller0: entered promiscuous mode
[  235.972025][T11431] syzkaller0: entered allmulticast mode
[  236.281211][T11454] netlink: 'syz.1.1550': attribute type 12 has an invalid length.
[  236.326037][T11454] netlink: 'syz.1.1550': attribute type 29 has an invalid length.
[  236.351108][T11454] netlink: 'syz.1.1550': attribute type 2 has an invalid length.
[  236.369948][T11454] netlink: 'syz.1.1550': attribute type 3 has an invalid length.
[  236.398592][T11458] netlink: 'syz.0.1551': attribute type 12 has an invalid length.
[  236.589904][T11458] bond6: option primary_reselect: invalid value (255)
[  236.610604][T11458] bond6 (unregistering): Released all slaves
[  237.245298][T11488] A link change request failed with some changes committed already. Interface ������ may have been left with an inconsistent configuration, please check.
[  237.365624][T11497] sctp: [Deprecated]: syz.2.1564 (pid 11497) Use of struct sctp_assoc_value in delayed_ack socket option.
[  237.365624][T11497] Use struct sctp_sack_info instead
[  237.439763][T11497] netlink: 'syz.2.1564': attribute type 3 has an invalid length.
[  237.645134][T11510] __nla_validate_parse: 7 callbacks suppressed
[  237.645157][T11510] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1566'.
[  237.714559][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'.
[  238.057791][T11536] netlink: 'syz.3.1573': attribute type 5 has an invalid length.
[  238.086989][ T2978] nci: nci_rsp_packet: unknown rsp opcode 0x8
[  238.210073][T11550] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1577'.
[  238.969630][T11569] netlink: 'syz.2.1586': attribute type 38 has an invalid length.
[  239.086119][T11576] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  239.203653][T11583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  239.210964][T11583] IPv6: NLM_F_CREATE should be set when creating new route
[  239.218414][T11583] IPv6: NLM_F_CREATE should be set when creating new route
[  239.225682][T11583] IPv6: NLM_F_CREATE should be set when creating new route
[  239.327768][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1591'.
[  239.340035][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1591'.
[  239.350741][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1591'.
[  239.360709][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1591'.
[  239.370333][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1591'.
[  239.380884][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1591'.
[  239.388019][T11593] netlink: 'syz.0.1591': attribute type 8 has an invalid length.
[  239.399200][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'.
[  240.633167][T11593] bond0: entered promiscuous mode
[  240.638925][T11593] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  240.649884][T11593] gretap0: entered promiscuous mode
[  240.656356][T11593] veth0_to_batadv: entered promiscuous mode
[  240.666100][T11593] debugfs: 'hsr1' already exists in 'hsr'
[  240.673810][T11593] Cannot create hsr debugfs directory
[  240.680173][T11593] hsr1: entered promiscuous mode
[  240.880634][  T917] IPVS: starting estimator thread 0...
[  241.018246][T11610] IPVS: using max 24 ests per chain, 57600 per kthread
[  241.095153][T11618] pim6reg: entered allmulticast mode
[  241.762323][T11663] netlink: 'syz.1.1614': attribute type 1 has an invalid length.
[  241.821931][T11663] netlink: 'syz.1.1614': attribute type 2 has an invalid length.
[  241.843947][T11661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.853238][T11661] syzkaller0: entered promiscuous mode
[  241.868676][T11661] syzkaller0: entered allmulticast mode
[  241.935344][T11661] tipc: Resetting bearer <eth:syzkaller0>
[  241.964889][T11660] tipc: Resetting bearer <eth:syzkaller0>
[  242.068854][T11660] tipc: Disabling bearer <eth:syzkaller0>
[  242.177912][T11696] openvswitch: netlink: nsh attribute has 65492 unknown bytes.
[  242.195939][T11696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.312749][T11704] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  242.325863][T11704] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  242.337524][T11704] gretap3: entered promiscuous mode
[  242.344248][T11704] gretap3: entered allmulticast mode
[  242.394352][T11710] 0: reclassify loop, rule prio 0, protocol 800
[  242.514012][T11719] netlink: 'syz.0.1627': attribute type 4 has an invalid length.
[  242.910037][T11741] Cannot find add_set index 2 as target
[  243.051343][T11750] __nla_validate_parse: 3 callbacks suppressed
[  243.051365][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1637'.
[  243.143274][T11753] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  244.231094][T11758] sit1: left promiscuous mode
[  244.236139][T11758] sit1: left allmulticast mode
[  244.277915][T11758] vlan2: left promiscuous mode
[  244.286883][T11758] bridge0: left promiscuous mode
[  244.341269][T11758] bond4: left promiscuous mode
[  244.348356][T11758] bond4: left allmulticast mode
[  244.441291][ T1038] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.456482][ T1038] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.478743][ T1038] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.498768][ T1038] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.554579][T11805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1643'.
[  244.589456][ T2978] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.604275][ T2978] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.615246][ T2978] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.625809][ T2978] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.709500][T11808] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  244.897096][T11826] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  245.080165][T11846] netlink: 'syz.4.1653': attribute type 13 has an invalid length.
[  245.209608][ T5842] Bluetooth: hci0: command tx timeout
[  245.224827][T11783] hsr0 speed is unknown, defaulting to 1000
[  245.427294][T11859] bridge0: entered allmulticast mode
[  245.435290][T11859] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  245.811532][T11863] netlink: 'syz.3.1656': attribute type 1 has an invalid length.
[  245.821591][T11863] netlink: 'syz.3.1656': attribute type 3 has an invalid length.
[  245.830085][T11863] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1656'.
[  245.934814][T11864] netlink: 'syz.3.1656': attribute type 10 has an invalid length.
[  245.943360][T11864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1656'.
[  245.978902][T11864] geneve0: entered promiscuous mode
[  245.994722][T11864] team0: Port device geneve0 added
[  246.362174][T11891] netlink: 'syz.4.1665': attribute type 63 has an invalid length.
[  246.374723][T11891] netlink: 'syz.4.1665': attribute type 63 has an invalid length.
[  246.411509][T11891] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1665'.
[  246.595765][T11900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.596304][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'.
[  246.612352][T11901] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.628145][T11906] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1669'.
[  246.652502][T11899] tipc: Disabling bearer <eth:syzkaller0>
[  246.777647][T11918] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  246.881169][T11922] netlink: 'syz.0.1673': attribute type 10 has an invalid length.
[  246.918002][T11922] netlink: 'syz.0.1673': attribute type 1 has an invalid length.
[  246.939593][T11929] netlink: 'syz.2.1676': attribute type 1 has an invalid length.
[  246.942244][T11922] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1673'.
[  247.037126][T11934] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  247.050813][T11934] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  247.085316][T11929] gretap2: entered promiscuous mode
[  247.100323][T11929] bond8: (slave gretap2): making interface the new active one
[  247.112598][T11929] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  247.139159][T11929] macvlan2: entered promiscuous mode
[  247.144677][T11929] macvlan2: entered allmulticast mode
[  247.151663][T11929] bond8: entered promiscuous mode
[  247.159065][T11929] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  247.200984][T11929] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  247.267532][T11929] bond8: left promiscuous mode
[  247.394982][T11947] syzkaller0: entered promiscuous mode
[  247.411214][T11947] syzkaller0: entered allmulticast mode
[  247.427180][T11947] 0: reclassify loop, rule prio 0, protocol 800
[  247.519462][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'.
[  247.812999][T11975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1687'.
[  247.914680][T11983] netlink: 'syz.3.1690': attribute type 3 has an invalid length.
[  248.170308][T12002] __nla_validate_parse: 1 callbacks suppressed
[  248.170332][T12002] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1696'.
[  248.397320][T12014] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1700'.
[  248.590364][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'.
[  248.590928][T12028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1702'.
[  248.636016][T12028] syzkaller1: entered promiscuous mode
[  248.643866][T12028] syzkaller1: entered allmulticast mode
[  248.933818][T12050] netlink: 'syz.2.1710': attribute type 1 has an invalid length.
[  249.017530][T12050] bond9 (unregistering): Released all slaves
[  249.072492][T12056] ip6tnl2: entered promiscuous mode
[  249.078784][T12056] ip6tnl2: entered allmulticast mode
[  249.407658][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'.
[  249.626559][T12093] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1722'.
[  249.671129][T12093] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1722'.
[  249.974774][T12114] netlink: 'syz.2.1727': attribute type 5 has an invalid length.
[  249.978023][T12111] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1726'.
[  250.022740][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'.
[  250.043263][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1729'.
[  250.163318][ T1038] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  250.185891][ T1038] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  250.233095][ T1038] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  250.261406][ T1038] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  250.338203][T12132] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  250.431598][T12141] netlink: 'syz.0.1735': attribute type 10 has an invalid length.
[  250.483117][T12141] 8021q: adding VLAN 0 to HW filter on device team0
[  250.511191][T12141] team0: entered promiscuous mode
[  250.517820][T12141] bond0: (slave team0): Enslaving as an active interface with a down link
[  251.356414][ T1038] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.398699][ T1038] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.407753][ T1038] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.468450][ T1038] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.795282][T12222] netlink: 'syz.2.1759': attribute type 13 has an invalid length.
[  251.881831][T12222] gretap0: left promiscuous mode
[  251.943410][T12222] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.953847][T12222] 8021q: adding VLAN 0 to HW filter on device team0
[  251.979193][T12222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  252.263433][T12232] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  252.342294][T12240] ������Z7nz>RA� speed is unknown, defaulting to 1000
[  252.352418][T12240] hsr0 speed is unknown, defaulting to 1000
[  253.039996][T12284] ������Z7nz>RA� speed is unknown, defaulting to 1000
[  253.068451][T12284] hsr0 speed is unknown, defaulting to 1000
[  253.163166][T12300] netlink: 'syz.2.1778': attribute type 1 has an invalid length.
[  253.370373][T12314] __nla_validate_parse: 8 callbacks suppressed
[  253.370393][T12314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1780'.
[  253.702038][T12323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1784'.
[  280.173192][T12339] netlink: 'syz.1.1786': attribute type 1 has an invalid length.
[  280.441271][T12339] 8021q: adding VLAN 0 to HW filter on device bond6
[  280.485787][T12343] bond6: (slave geneve2): making interface the new active one
[  280.495422][T12343] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  280.507983][T12355] A link change request failed with some changes committed already. Interface ������Z7nz>RA� may have been left with an inconsistent configuration, please check.
[  280.635205][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1795'.
[  281.089325][T12404] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  281.264489][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'.
[  281.483369][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'.
[  281.577982][T12437] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1815'.
[  281.736091][T12443] gtp0: entered promiscuous mode
[  281.747008][T12445] netlink: 'syz.1.1817': attribute type 2 has an invalid length.
[  281.750053][T12443] gtp0: entered allmulticast mode
[  281.785260][T12445] �9: entered promiscuous mode
[  281.792998][T12448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1818'.
[  281.964185][T12455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.991343][T12455] syzkaller0: entered promiscuous mode
[  282.024347][T12455] syzkaller0: entered allmulticast mode
[  282.131927][T12464] tipc: Resetting bearer <eth:syzkaller0>
[  282.531616][T12453] tipc: Resetting bearer <eth:syzkaller0>
[  282.591353][T12453] tipc: Disabling bearer <eth:syzkaller0>
[  282.621227][T12494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'.
[  282.649558][T12497] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1832'.
[  282.893628][T12508] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1834'.
[  282.958892][T12511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1835'.
[  283.012653][T12515] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1836'.
[  283.039734][T12515] nbd: illegal input index -8454144
[  283.402140][T12552] netlink: 'syz.3.1842': attribute type 1 has an invalid length.
[  283.466500][T12552] 8021q: adding VLAN 0 to HW filter on device bond5
[  283.530026][T12556] 8021q: adding VLAN 0 to HW filter on device bond5
[  283.537593][T12556] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  283.551240][T12556] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  283.616883][T12552] veth5: entered promiscuous mode
[  283.626810][T12552] bond5: (slave veth5): Enslaving as an active interface with a down link
[  283.647610][T12504] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  283.699082][T12562] vlan3: entered allmulticast mode
[  283.713395][T12562] bond5: entered allmulticast mode
[  284.112876][T12579] vxcan2: entered allmulticast mode
[  284.496827][T12608] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20004
[  284.605500][T12612] syz.4.1852 uses old SIOCAX25GETINFO
[  285.096615][T12639] team0: Device gtp1 is of different type
[  286.695210][T12743] syzkaller0: entered promiscuous mode
[  286.703507][T12743] syzkaller0: entered allmulticast mode
[  286.743696][T12743] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  287.197242][T12773] __nla_validate_parse: 8 callbacks suppressed
[  287.197264][T12773] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1893'.
[  287.291004][T11793] IPVS: starting estimator thread 0...
[  287.402338][T12777] IPVS: using max 25 ests per chain, 60000 per kthread
[  287.508831][T12786] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1897'.
[  287.784932][T12802] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  287.814681][T12807] x_tables: ip6_tables: mh match: only valid for protocol 135
[  288.013726][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'.
[  288.049737][T12818] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  288.181181][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'.
[  288.318858][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'.
[  288.540919][T12846] netlink: 'syz.4.1912': attribute type 2 has an invalid length.
[  288.623199][T12846] �9: entered promiscuous mode
[  289.285258][T12882] syzkaller0: entered promiscuous mode
[  289.368481][T12882] syzkaller0: entered allmulticast mode
[  289.784826][T12903] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1924'.
[  289.794125][ T2978] tipc: Subscription rejected, illegal request
[  289.865910][T12909] netlink: 'syz.0.1925': attribute type 29 has an invalid length.
[  289.927827][T12913] netlink: 'syz.3.1927': attribute type 1 has an invalid length.
[  289.955788][T12913] netlink: 'syz.3.1927': attribute type 1 has an invalid length.
[  290.005348][T12913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1927'.
[  290.050997][T12913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'.
[  290.070548][T12913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'.
[  290.091738][T12920] netlink: 294 bytes leftover after parsing attributes in process `syz.0.1930'.
[  290.103040][T12920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.280921][T12928] netlink: 'syz.2.1933': attribute type 33 has an invalid length.
[  290.456716][T12941] netlink: 'syz.0.1935': attribute type 23 has an invalid length.
[  292.115102][T13001] syzkaller1: entered promiscuous mode
[  292.143822][T13001] syzkaller1: entered allmulticast mode
[  292.826016][T13027] __nla_validate_parse: 36 callbacks suppressed
[  292.826038][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'.
[  292.866210][T13029] netlink: 'syz.4.1960': attribute type 1 has an invalid length.
[  292.899609][T13029] netlink: 'syz.4.1960': attribute type 3 has an invalid length.
[  292.921116][T13029] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1960'.
[  293.348024][T13050] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1965'.
[  293.371843][T13050] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1965'.
[  293.385037][T13050] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1965'.
[  293.574006][T13058] netlink: 'syz.3.1968': attribute type 1 has an invalid length.
[  293.617424][T13058] bond6: entered promiscuous mode
[  293.624766][T13058] bond6: entered allmulticast mode
[  293.631741][T13058] 8021q: adding VLAN 0 to HW filter on device bond6
[  293.650640][T13062] macvlan0: entered promiscuous mode
[  293.655984][T13062] macvlan0: entered allmulticast mode
[  293.703462][T13062] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  293.990541][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'.
[  294.053409][T13074] netlink: 'syz.4.1971': attribute type 4 has an invalid length.
[  294.065530][T13074] netlink: 'syz.4.1971': attribute type 4 has an invalid length.
[  294.261223][T13085] netlink: 'syz.3.1973': attribute type 21 has an invalid length.
[  294.297312][T13085] IPv6: NLM_F_CREATE should be specified when creating new route
[  294.579888][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1976'.
[  294.605137][T13075] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.613206][T13075] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.959934][T12841] Set syz1 is full, maxelem 65536 reached
[  295.081110][T13075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.102015][T13075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.237826][T13075] vlan0: left allmulticast mode
[  295.243226][T13075] veth0_vlan: left allmulticast mode
[  295.249622][T13075] vlan0: left promiscuous mode
[  295.349605][T11789] hsr0 speed is unknown, defaulting to 1000
[  295.358283][ T2978] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.370274][ T2978] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.392151][T11789] syz1: Port: 1 Link DOWN
[  295.414849][ T2978] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  295.448795][ T2978] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.457731][ T2978] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.499949][ T2978] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  295.532685][ T2978] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.543744][T13106] syz.1.1979 (13106) used greatest stack depth: 17832 bytes left
[  295.559661][ T2978] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.571506][ T2978] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  295.587432][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1980'.
[  295.658236][ T2978] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.718355][ T2978] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.727373][ T2978] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  295.729028][T13119] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1986'.
[  295.753949][T13119] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  295.784949][T13122] netlink: 'syz.1.1985': attribute type 3 has an invalid length.
[  295.793494][T13122] netlink: 'syz.1.1985': attribute type 1 has an invalid length.
[  295.802697][T13122] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1985'.
[  295.893156][T13125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.945882][T13125] tipc: Resetting bearer <eth:syzkaller0>
[  295.961195][T13123] tipc: Disabling bearer <eth:syzkaller0>
[  295.984989][T13133] netlink: 'syz.1.1991': attribute type 62 has an invalid length.
[  296.297991][T13143] netlink: zone id is out of range
[  296.332304][T13143] netlink: zone id is out of range
[  296.337663][T13143] netlink: zone id is out of range
[  296.357732][T13143] netlink: zone id is out of range
[  296.364722][T13143] netlink: zone id is out of range
[  296.370701][T13143] netlink: zone id is out of range
[  296.376012][T13143] netlink: zone id is out of range
[  296.403245][T13143] netlink: zone id is out of range
[  296.410880][T13159] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  296.796386][T13181] netlink: 'syz.4.2004': attribute type 33 has an invalid length.
[  296.825630][T13181] bond0: (slave dummy0): Releasing backup interface
[  296.851207][T13184] netlink: 'syz.1.2005': attribute type 1 has an invalid length.
[  296.942648][T13185] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  296.966396][T13185] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  297.219805][T13206] netlink: 'syz.0.2010': attribute type 1 has an invalid length.
[  297.702093][T13241] bridge4: entered promiscuous mode
[  297.707383][T13241] bridge4: entered allmulticast mode
[  297.804702][T13243] tap0: tun_chr_ioctl cmd 1074025676
[  297.811054][T13243] tap0: owner set to 0
[  298.103936][T13271] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  298.113399][T13271] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  298.207294][T13280] __nla_validate_parse: 7 callbacks suppressed
[  298.207316][T13280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2032'.
[  298.380213][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'.
[  298.434577][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'.
[  298.580556][T13303] validate_nla: 1 callbacks suppressed
[  298.580578][T13303] netlink: 'syz.4.2040': attribute type 1 has an invalid length.
[  298.597500][T13301] netlink: 'syz.0.2039': attribute type 1 has an invalid length.
[  298.606006][T13301] netlink: 'syz.0.2039': attribute type 4 has an invalid length.
[  298.614223][T13301] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.2039'.
[  298.797527][T13326] unsupported nla_type 52263
[  298.817826][T13318] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  298.829592][T13318] team0: Device macvtap2 is already an upper device of the team interface
[  298.951338][T13334] macvtap1: entered promiscuous mode
[  298.952478][T13336] netlink: 'syz.0.2050': attribute type 7 has an invalid length.
[  298.956829][T13334] macvtap1: entered allmulticast mode
[  298.966714][T13336] netlink: 'syz.0.2050': attribute type 8 has an invalid length.
[  298.977956][T13334] gretap0: entered allmulticast mode
[  298.997401][T13334] gretap0: entered promiscuous mode
[  299.005591][T13334] team0: Device macvtap1 failed to register rx_handler
[  299.013868][T13334] gretap0: left allmulticast mode
[  299.020017][T13334] gretap0: left promiscuous mode
[  299.068951][T13338] IPv6: sit2: Disabled Multicast RS
[  299.075870][T13338] sit2: entered allmulticast mode
[  299.114229][T13344] netlink: 'syz.0.2053': attribute type 10 has an invalid length.
[  299.126738][T13344] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  299.135042][T13344] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  299.145429][T13343] netem: incorrect ge model size
[  299.151600][T13344] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2053'.
[  299.161498][T13343] netem: change failed
[  299.165855][T13344] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2053'.
[  299.523499][T13370] netlink: 'syz.4.2062': attribute type 1 has an invalid length.
[  299.603470][T13374] xt_HMARK: proto mask must be zero with L3 mode
[  299.858544][T13392] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2068'.
[  299.892517][T13397] sctp: [Deprecated]: syz.1.2069 (pid 13397) Use of int in maxseg socket option.
[  299.892517][T13397] Use struct sctp_assoc_value instead
[  300.130132][T13389] netlink: 'syz.0.2067': attribute type 1 has an invalid length.
[  300.667863][T13440] netlink: 'syz.0.2081': attribute type 7 has an invalid length.
[  300.943384][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'.
[  300.965524][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'.
[  300.987953][T13464] netlink: 'syz.2.2088': attribute type 10 has an invalid length.
[  301.001086][T13464] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  301.215011][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'.
[  301.224840][T13478] erspan0: entered allmulticast mode
[  301.396034][T13487] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  301.489385][T13487] team1: entered promiscuous mode
[  301.501576][T13487] team1: entered allmulticast mode
[  301.554963][T13493] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  301.577659][T13493] bond6: (slave lo): Enslaving as a backup interface with an up link
[  301.592310][T13493] net_ratelimit: 19 callbacks suppressed
[  301.592328][T13493] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  301.661860][T13505] syzkaller0: entered promiscuous mode
[  301.667632][T13505] syzkaller0: entered allmulticast mode
[  301.692996][T13505] sock: sock_set_timeout: `syz.4.2101' (pid 13505) tries to set negative timeout
[  302.169867][T13499] mac80211_hwsim hwsim5 �
: renamed from wlan1
[  303.044376][T13570] ip6erspan1: entered promiscuous mode
[  303.053062][T13571] vxcan1: entered allmulticast mode
[  303.410004][T13585] tipc: Can't bind to reserved service type 1
[  303.490748][T13594] netlink: zone id is out of range
[  303.496026][T13594] netlink: zone id is out of range
[  303.503069][T13594] netlink: zone id is out of range
[  303.508957][T13594] netlink: zone id is out of range
[  303.514287][T13594] netlink: zone id is out of range
[  303.520042][T13594] netlink: zone id is out of range
[  303.525325][T13594] netlink: zone id is out of range
[  303.531968][T13594] netlink: zone id is out of range
[  303.669323][T13603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.676994][T13603] syzkaller0: entered promiscuous mode
[  303.687204][T13603] syzkaller0: entered allmulticast mode
[  303.710925][T13603] __nla_validate_parse: 9 callbacks suppressed
[  303.710947][T13603] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2131'.
[  303.742897][T13603] tipc: Resetting bearer <eth:syzkaller0>
[  303.832009][T13602] tipc: Resetting bearer <eth:syzkaller0>
[  303.872901][T13602] tipc: Disabling bearer <eth:syzkaller0>
[  304.041488][T13626] validate_nla: 2 callbacks suppressed
[  304.041510][T13626] netlink: 'syz.0.2137': attribute type 10 has an invalid length.
[  304.055904][T13626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2137'.
[  304.070704][T13626] geneve0: entered promiscuous mode
[  304.078587][T13626] team0: Port device geneve0 added
[  304.085087][   T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.094912][   T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.116135][   T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.138165][   T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.644407][T13650] syzkaller0: entered allmulticast mode
[  306.079628][T13657] vlan3: entered allmulticast mode
[  306.084783][T13657] bridge_slave_0: entered allmulticast mode
[  306.302063][T13683] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2147'.
[  306.316224][T13679] bridge0: port 1(ipvlan2) entered blocking state
[  306.323615][T13679] bridge0: port 1(ipvlan2) entered disabled state
[  306.340072][T13679] ipvlan2: entered allmulticast mode
[  306.349641][T13679] ipvlan2: left allmulticast mode
[  306.706069][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'.
[  306.737695][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'.
[  306.760449][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2158'.
[  308.314092][T13718] sctp: [Deprecated]: syz.3.2160 (pid 13718) Use of int in max_burst socket option deprecated.
[  308.314092][T13718] Use struct sctp_assoc_value instead
[  308.367640][T13718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2160'.
[  308.428202][T13718] bridge0: port 3(ipvlan0) entered blocking state
[  308.435035][T13718] bridge0: port 3(ipvlan0) entered disabled state
[  308.452452][T13730] x_tables: duplicate underflow at hook 2
[  308.457413][T13731] IPVS: ip_vs_edit_dest(): server weight less than zero
[  308.467513][T13718] ipvlan0: entered allmulticast mode
[  308.483392][T13718] bridge0: entered allmulticast mode
[  308.500737][T13718] ipvlan0: left allmulticast mode
[  308.517704][T13718] bridge0: left allmulticast mode
[  308.622821][T13744] netlink: 'syz.2.2165': attribute type 3 has an invalid length.
[  309.025940][T13765] netlink: 'syz.4.2174': attribute type 1 has an invalid length.
[  309.095407][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2174'.
[  309.217837][T13784] netlink: 'syz.3.2177': attribute type 1 has an invalid length.
[  309.232123][T13776] 8021q: VLANs not supported on syzkaller1
[  309.241777][T13768] netlink: 'syz.1.2175': attribute type 11 has an invalid length.
[  309.274171][T13768] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2175'.
[  309.347575][T13786] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  309.358997][T13786] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  309.403135][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2177'.
[  310.135723][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2193'.
[  310.151971][T13846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2195'.
[  310.178777][T13846] netlink: 'syz.0.2195': attribute type 7 has an invalid length.
[  310.214017][T13846] netlink: 'syz.0.2195': attribute type 8 has an invalid length.
[  310.248854][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'.
[  310.258371][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'.
[  310.331980][T13857] net_ratelimit: 21 callbacks suppressed
[  310.331999][T13857] sock: sock_set_timeout: `syz.3.2194' (pid 13857) tries to set negative timeout
[  310.505607][T13867] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2201'.
[  310.717226][T13871] syzkaller0: entered promiscuous mode
[  310.752278][T13871] syzkaller0: entered allmulticast mode
[  311.326917][T13918] delete_channel: no stack
[  312.999753][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'.
[  313.010568][T13946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2220'.
[  313.042966][T13948] xt_hashlimit: size too large, truncated to 1048576
[  313.369075][ T2978] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82
[  313.377079][ T5842] Bluetooth: hci4: link tx timeout
[  313.384912][ T5842] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  313.520302][T13975] A link change request failed with some changes committed already. Interface ������Z7nz>RA� may have been left with an inconsistent configuration, please check.
[  313.554223][T11795] ������Z7nz>RA� speed is unknown, defaulting to 1000
[  313.565011][T11795] syz2: Port: 1 Link DOWN
[  313.601525][T13983] netlink: 'syz.4.2228': attribute type 21 has an invalid length.
[  313.881602][T13991] !
: renamed from dummy0
[  314.474394][T14022] netlink: 'syz.2.2238': attribute type 2 has an invalid length.
[  314.482938][T14022] netlink: 'syz.2.2238': attribute type 2 has an invalid length.
[  314.493344][T14022] __nla_validate_parse: 1 callbacks suppressed
[  314.493364][T14022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2238'.
[  314.613860][T14037] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2242'.
[  314.806074][T14046] netlink: 'syz.0.2245': attribute type 142 has an invalid length.
[  314.816774][T14046] netlink: 'syz.0.2245': attribute type 142 has an invalid length.
[  314.832099][T14046] netlink: 'syz.0.2245': attribute type 142 has an invalid length.
[  314.834243][T14044] syzkaller1: entered promiscuous mode
[  314.846895][T14046] netlink: 'syz.0.2245': attribute type 142 has an invalid length.
[  314.847145][T14044] syzkaller1: entered allmulticast mode
[  314.860058][T14046] netlink: 'syz.0.2245': attribute type 142 has an invalid length.
[  314.871144][T14046] netlink: 'syz.0.2245': attribute type 142 has an invalid length.
[  314.880053][T14046] netlink: 'syz.0.2245': attribute type 142 has an invalid length.
[  314.900050][T14046] netlink: 'syz.0.2245': attribute type 142 has an invalid length.
[  314.908834][T14057] syzkaller0: entered promiscuous mode
[  314.923389][T14057] syzkaller0: entered allmulticast mode
[  314.992824][T14060] xt_hashlimit: size too large, truncated to 1048576
[  315.249855][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2253'.
[  315.276469][T14075] x_tables: duplicate underflow at hook 1
[  315.282578][T14071] vlan4: entered allmulticast mode
[  315.282605][T14071] hsr0: entered allmulticast mode
[  315.282619][T14071] hsr_slave_0: entered allmulticast mode
[  315.282634][T14071] hsr_slave_1: entered allmulticast mode
[  315.284132][T14073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2253'.
[  315.448679][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  315.526371][ T3017] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  315.546076][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'.
[  315.605664][T14098] : entered promiscuous mode
[  315.676914][T14098] x_tables: duplicate underflow at hook 1
[  315.800489][T14108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2261'.
[  316.074431][T14113] syzkaller0: entered promiscuous mode
[  316.102756][T14113] syzkaller0: entered allmulticast mode
[  316.232703][T14088] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2256'.
[  317.630431][T14091] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �&��%����Q�0@æj��ʫ�����}
[  317.851721][T14129] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2269'.
[  317.866079][T14129] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2269'.
[  317.887806][T14132] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  317.967356][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'.
[  318.035318][T14140] IPVS: set_ctl: invalid protocol: 255 172.30.1.1:20003
[  318.040082][T14136] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address
[  318.053319][T14136] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  318.066115][T14136] bond5: (slave xfrm1): making interface the new active one
[  318.075238][T14136] bond5: (slave xfrm1): Enslaving as an active interface with an up link
[  318.103531][T14127] bond5 (unregistering): (slave xfrm1): Releasing backup interface
[  318.118796][T14143] sctp: [Deprecated]: syz.3.2271 (pid 14143) Use of int in maxseg socket option.
[  318.118796][T14143] Use struct sctp_assoc_value instead
[  318.140708][T14127] bond5 (unregistering): Released all slaves
[  318.436142][T14154] bond8: entered promiscuous mode
[  318.442266][T14154] macvlan5: entered promiscuous mode
[  318.447704][T14154] macvlan5: entered allmulticast mode
[  318.455277][T14154] bond8: entered allmulticast mode
[  318.462697][T14154] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  318.496384][T14154] bond8: left promiscuous mode
[  318.830453][T14197] FAULT_INJECTION: forcing a failure.
[  318.830453][T14197] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  318.843703][T14197] CPU: 1 UID: 0 PID: 14197 Comm: syz.3.2289 Not tainted syzkaller #0 PREEMPT(full) 
[  318.843731][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  318.843743][T14197] Call Trace:
[  318.843753][T14197]  <TASK>
[  318.843763][T14197]  dump_stack_lvl+0x189/0x250
[  318.843795][T14197]  ? __pfx____ratelimit+0x10/0x10
[  318.843823][T14197]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.843849][T14197]  ? __pfx__printk+0x10/0x10
[  318.843871][T14197]  ? __might_fault+0xb0/0x130
[  318.843912][T14197]  should_fail_ex+0x414/0x560
[  318.843948][T14197]  _copy_from_iter+0x1de/0x1790
[  318.843978][T14197]  ? rcu_is_watching+0x15/0xb0
[  318.844005][T14197]  ? kmalloc_reserve+0xbd/0x290
[  318.844025][T14197]  ? __pfx__copy_from_iter+0x10/0x10
[  318.844049][T14197]  ? __build_skb_around+0x262/0x3f0
[  318.844082][T14197]  ? netlink_sendmsg+0x642/0xb30
[  318.844099][T14197]  ? skb_put+0x11b/0x210
[  318.844123][T14197]  netlink_sendmsg+0x6b2/0xb30
[  318.844168][T14197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.844189][T14197]  ? __lock_acquire+0xab9/0xd20
[  318.844205][T14197]  ? aa_sock_msg_perm+0xf1/0x1d0
[  318.844232][T14197]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  318.844250][T14197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.844271][T14197]  __sock_sendmsg+0x21c/0x270
[  318.844300][T14197]  ____sys_sendmsg+0x505/0x830
[  318.844327][T14197]  ? __pfx_____sys_sendmsg+0x10/0x10
[  318.844360][T14197]  ? import_iovec+0x74/0xa0
[  318.844387][T14197]  ___sys_sendmsg+0x21f/0x2a0
[  318.844411][T14197]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.844475][T14197]  ? __fget_files+0x2a/0x420
[  318.844493][T14197]  ? __fget_files+0x3a0/0x420
[  318.844524][T14197]  __x64_sys_sendmsg+0x19b/0x260
[  318.844548][T14197]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  318.844580][T14197]  ? __pfx_ksys_write+0x10/0x10
[  318.844612][T14197]  ? do_syscall_64+0xbe/0xfa0
[  318.844644][T14197]  do_syscall_64+0xfa/0xfa0
[  318.844670][T14197]  ? lockdep_hardirqs_on+0x9c/0x150
[  318.844697][T14197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.844716][T14197]  ? clear_bhb_loop+0x60/0xb0
[  318.844740][T14197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.844758][T14197] RIP: 0033:0x7f52b7f8f6c9
[  318.844776][T14197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.844793][T14197] RSP: 002b:00007f52b8de2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.844815][T14197] RAX: ffffffffffffffda RBX: 00007f52b81e5fa0 RCX: 00007f52b7f8f6c9
[  318.844830][T14197] RDX: 0000000000008800 RSI: 0000200000000100 RDI: 0000000000000003
[  318.844842][T14197] RBP: 00007f52b8de2090 R08: 0000000000000000 R09: 0000000000000000
[  318.844854][T14197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.844866][T14197] R13: 00007f52b81e6038 R14: 00007f52b81e5fa0 R15: 00007ffcb8ee1fc8
[  318.844901][T14197]  </TASK>
[  319.447593][T14216] bond9: Invalid ad_actor_system MAC address.
[  319.454385][T14216] bond9: option ad_actor_system: invalid value (1)
[  319.464324][T14216] bond9 (unregistering): Released all slaves
[  319.517790][T14222] syz_tun: entered promiscuous mode
[  319.563594][T14222] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  319.574868][T14226] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  319.601841][T14235] __nla_validate_parse: 8 callbacks suppressed
[  319.601866][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'.
[  319.642490][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'.
[  319.739537][T14240] FAULT_INJECTION: forcing a failure.
[  319.739537][T14240] name failslab, interval 1, probability 0, space 0, times 1
[  319.756062][T14240] CPU: 0 UID: 0 PID: 14240 Comm: syz.1.2302 Not tainted syzkaller #0 PREEMPT(full) 
[  319.756091][T14240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  319.756103][T14240] Call Trace:
[  319.756111][T14240]  <TASK>
[  319.756120][T14240]  dump_stack_lvl+0x189/0x250
[  319.756161][T14240]  ? __pfx____ratelimit+0x10/0x10
[  319.756188][T14240]  ? __pfx_dump_stack_lvl+0x10/0x10
[  319.756215][T14240]  ? __pfx__printk+0x10/0x10
[  319.756242][T14240]  ? __lock_acquire+0xab9/0xd20
[  319.756271][T14240]  should_fail_ex+0x414/0x560
[  319.756307][T14240]  should_failslab+0xa8/0x100
[  319.756330][T14240]  kmem_cache_alloc_noprof+0x74/0x6e0
[  319.756357][T14240]  ? skb_clone+0x212/0x3a0
[  319.756386][T14240]  skb_clone+0x212/0x3a0
[  319.756411][T14240]  __netlink_deliver_tap+0x404/0x850
[  319.756447][T14240]  ? netlink_deliver_tap+0x2e/0x1b0
[  319.756470][T14240]  netlink_deliver_tap+0x19c/0x1b0
[  319.756491][T14240]  netlink_unicast+0x7fa/0x9e0
[  319.756530][T14240]  ? __pfx_netlink_unicast+0x10/0x10
[  319.756561][T14240]  ? netlink_sendmsg+0x642/0xb30
[  319.756587][T14240]  netlink_sendmsg+0x805/0xb30
[  319.756619][T14240]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.756642][T14240]  ? __lock_acquire+0xab9/0xd20
[  319.756659][T14240]  ? aa_sock_msg_perm+0xf1/0x1d0
[  319.756691][T14240]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  319.756710][T14240]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.756732][T14240]  __sock_sendmsg+0x21c/0x270
[  319.756762][T14240]  ____sys_sendmsg+0x505/0x830
[  319.756792][T14240]  ? __pfx_____sys_sendmsg+0x10/0x10
[  319.756825][T14240]  ? import_iovec+0x74/0xa0
[  319.756855][T14240]  ___sys_sendmsg+0x21f/0x2a0
[  319.756879][T14240]  ? __pfx____sys_sendmsg+0x10/0x10
[  319.756947][T14240]  ? __fget_files+0x2a/0x420
[  319.756966][T14240]  ? __fget_files+0x3a0/0x420
[  319.756998][T14240]  __x64_sys_sendmsg+0x19b/0x260
[  319.757023][T14240]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  319.757058][T14240]  ? __pfx_ksys_write+0x10/0x10
[  319.757091][T14240]  ? do_syscall_64+0xbe/0xfa0
[  319.757124][T14240]  do_syscall_64+0xfa/0xfa0
[  319.757148][T14240]  ? lockdep_hardirqs_on+0x9c/0x150
[  319.757183][T14240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.757203][T14240]  ? clear_bhb_loop+0x60/0xb0
[  319.757228][T14240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.757247][T14240] RIP: 0033:0x7f71a4b8f6c9
[  319.757264][T14240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.757280][T14240] RSP: 002b:00007f71a5a20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.757302][T14240] RAX: ffffffffffffffda RBX: 00007f71a4de5fa0 RCX: 00007f71a4b8f6c9
[  319.757316][T14240] RDX: 0000000000008800 RSI: 0000200000000100 RDI: 0000000000000003
[  319.757329][T14240] RBP: 00007f71a5a20090 R08: 0000000000000000 R09: 0000000000000000
[  319.757340][T14240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.757352][T14240] R13: 00007f71a4de6038 R14: 00007f71a4de5fa0 R15: 00007ffc35862398
[  319.757389][T14240]  </TASK>
[  320.068225][T14241] validate_nla: 31 callbacks suppressed
[  320.068248][T14241] netlink: 'syz.2.2301': attribute type 32 has an invalid length.
[  320.082268][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'.
[  320.101202][T14244] netlink: 'syz.2.2301': attribute type 32 has an invalid length.
[  320.136979][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'.
[  320.142313][T14241] bond9: option coupled_control: invalid value (52)
[  320.205661][T14241] bond9 (unregistering): Released all slaves
[  320.291466][T14244] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  320.385251][T14260] tunl0: Caught tx_queue_len zero misconfig
[  320.732884][T14276] nbd0: detected capacity change from 0 to 127
[  320.828921][T14277] nbd1: detected capacity change from 0 to 127
[  320.838771][ T5837] block nbd1: Receive control failed (result -32)
[  320.842635][ T5842] block nbd0: Receive control failed (result -32)
[  320.932465][T14291] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2313'.
[  321.186260][T14314] syzkaller0: entered promiscuous mode
[  321.193850][T14314] syzkaller0: entered allmulticast mode
[  321.353894][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'.
[  321.364246][T14320] netlink: 'syz.2.2322': attribute type 1 has an invalid length.
[  321.388596][T14320] netlink: 'syz.2.2322': attribute type 2 has an invalid length.
[  321.684213][T14345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2331'.
[  321.699883][ T3007] bond0: (slave bond2): link status definitely down, disabling slave
[  321.923584][T14356] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2333'.
[  321.936121][T14357] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2334'.
[  322.030371][T14364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2334'.
[  322.062672][T14368] sctp: [Deprecated]: syz.0.2338 (pid 14368) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.062672][T14368] Use struct sctp_sack_info instead
[  322.087799][T14368] sctp: [Deprecated]: syz.0.2338 (pid 14368) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.087799][T14368] Use struct sctp_sack_info instead
[  322.205519][T14362] team0 (unregistering): Port device team_slave_0 removed
[  322.214285][T14362] team0 (unregistering): Port device team_slave_1 removed
[  322.393850][T14384] netem: incorrect gi model size
[  322.401215][T14384] netem: change failed
[  322.415583][T14386] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  322.429431][T14386] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  322.491398][T14392] syzkaller0: entered promiscuous mode
[  322.497559][T14392] syzkaller0: entered allmulticast mode
[  322.533624][T14395] team0: Cannot enslave team device to itself
[  323.276848][T14415] netlink: 'syz.0.2350': attribute type 1 has an invalid length.
[  323.520195][T14415] 8021q: adding VLAN 0 to HW filter on device bond7
[  323.575868][T14419] 8021q: adding VLAN 0 to HW filter on device bond7
[  323.584930][T14419] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  323.597747][T14419] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  323.723426][T14422] veth11: entered promiscuous mode
[  323.743012][T14422] bond7: (slave veth11): Enslaving as an active interface with a down link
[  323.763941][T14426] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.794068][T14415] vlan3: entered allmulticast mode
[  323.799480][T14415] bond7: entered allmulticast mode
[  323.994152][T14461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.032720][T14461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.756988][T14515] __nla_validate_parse: 5 callbacks suppressed
[  324.757008][T14515] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2375'.
[  324.796387][T14516] netlink: 'syz.0.2376': attribute type 2 has an invalid length.
[  324.809248][T14516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  351.652169][T14589] pimreg3: entered allmulticast mode
[  351.658721][T14596] bridge_slave_1: left allmulticast mode
[  351.664446][T14596] bridge_slave_1: left promiscuous mode
[  351.672907][T14596] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.686389][T14596] bridge_slave_0: left allmulticast mode
[  351.692894][T14596] bridge_slave_0: left promiscuous mode
[  351.747411][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2391'.
[  351.747619][T14596] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.957242][T14604] bond0: entered allmulticast mode
[  351.970106][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2391'.
[  351.979287][T14604] bond_slave_0: entered allmulticast mode
[  351.979315][T14604] bond_slave_1: entered allmulticast mode
[  352.027155][T14619] netlink: 'syz.1.2395': attribute type 10 has an invalid length.
[  352.039099][T14619] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.047462][T14619] bridge_slave_1: left allmulticast mode
[  352.057958][T14602] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2391'.
[  352.060268][T14619] bridge_slave_1: left promiscuous mode
[  352.083713][T14619] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.119403][T14619] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  352.277279][T14602] bond8: entered promiscuous mode
[  352.298707][T14602] bond8: entered allmulticast mode
[  352.309235][T14602] 8021q: adding VLAN 0 to HW filter on device bond8
[  352.331311][T14639] netlink: 'syz.4.2398': attribute type 2 has an invalid length.
[  352.403040][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2398'.
[  352.643377][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2404'.
[  352.665138][T14654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.942843][T14654] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.592395][T14683] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2411'.
[  353.636139][T14683] nbd: must specify at least one socket
[  353.652452][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2412'.
[  353.970805][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'.
[  354.000677][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'.
[  354.070258][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'.
[  354.234508][T14727] macvtap2: entered promiscuous mode
[  354.242278][T14727] macvtap2: entered allmulticast mode
[  354.276901][T14722] netlink: 'syz.3.2422': attribute type 21 has an invalid length.
[  354.291241][T14722] netlink: 'syz.3.2422': attribute type 21 has an invalid length.
[  354.321458][T14722] netlink: 'syz.3.2422': attribute type 21 has an invalid length.
[  354.348439][T14722] netlink: 'syz.3.2422': attribute type 21 has an invalid length.
[  354.835984][T14758] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.897067][T14758] tipc: Disabling bearer <eth:syzkaller0>
[  355.445593][T14777] xt_connbytes: Forcing CT accounting to be enabled
[  355.879915][T14788] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  355.932451][T14788] bond9 (unregistering): Released all slaves
[  356.001000][T14803] netlink: 'syz.1.2446': attribute type 22 has an invalid length.
[  356.104737][T14809] netlink: 'syz.0.2448': attribute type 15 has an invalid length.
[  356.114247][T14809] netlink: 'syz.0.2448': attribute type 1 has an invalid length.
[  356.537610][T14822] gtp1: entered promiscuous mode
[  356.674153][T14831] lo: entered allmulticast mode
[  356.690124][T14831] pimreg: entered allmulticast mode
[  356.948573][T14830] lo: left allmulticast mode
[  357.269428][T14853] syzkaller0: entered promiscuous mode
[  357.296532][T14853] syzkaller0: entered allmulticast mode
[  357.346761][T14860] __nla_validate_parse: 9 callbacks suppressed
[  357.346785][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2460'.
[  357.662963][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2467'.
[  357.730204][T14883] syzkaller1: entered promiscuous mode
[  357.735739][T14883] syzkaller1: entered allmulticast mode
[  357.860690][T14895] netlink: 'syz.2.2471': attribute type 24 has an invalid length.
[  358.039488][T14904] netlink: 'syz.3.2473': attribute type 2 has an invalid length.
[  358.058209][T14904] netlink: 'syz.3.2473': attribute type 1 has an invalid length.
[  358.070964][T14905] 8021q: VLANs not supported on ip6_vti0
[  358.077787][T14907] netlink: 'syz.3.2473': attribute type 2 has an invalid length.
[  358.087942][T14907] netlink: 'syz.3.2473': attribute type 1 has an invalid length.
[  358.191016][T14912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.213531][T14912] syzkaller0: entered promiscuous mode
[  358.226179][T14912] syzkaller0: entered allmulticast mode
[  358.286252][T14912] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  358.352901][T14924] netlink: 'syz.1.2480': attribute type 10 has an invalid length.
[  358.363744][T14913] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2476'.
[  358.409216][T14924] team0: Device ipvlan1 failed to register rx_handler
[  358.532824][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2482'.
[  358.610118][T14931] 8021q: adding VLAN 0 to HW filter on device bond9
[  358.689009][T14944] netlink: 'syz.0.2487': attribute type 1 has an invalid length.
[  358.710633][T14946] netlink: 'syz.0.2487': attribute type 1 has an invalid length.
[  358.740048][T14950] xt_hashlimit: size too large, truncated to 1048576
[  358.862475][T14955] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  358.958495][T14910] tipc: Resetting bearer <eth:syzkaller0>
[  358.979847][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'.
[  359.050880][T14910] tipc: Disabling bearer <eth:syzkaller0>
[  359.317003][T14981] netlink: 'syz.2.2497': attribute type 29 has an invalid length.
[  359.334265][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'.
[  360.081404][T15023] netlink: 'syz.2.2507': attribute type 2 has an invalid length.
[  360.228654][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'.
[  360.242567][T15029] bridge_slave_1: entered allmulticast mode
[  360.317839][T15038] : entered promiscuous mode
[  360.610448][T15045] gretap1: entered promiscuous mode
[  360.927513][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'.
[  360.955018][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'.
[  361.123663][T15073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2523'.
[  361.136283][T15074] delete_channel: no stack
[  361.473191][T15088] IPVS: persistence engine module ip_vs_pe_ not found
[  361.555633][T15088] can: request_module (can-proto-0) failed.
[  362.008767][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  363.239408][T15137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2540'.
[  363.244687][T15138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2540'.
[  363.351686][T15146] validate_nla: 1 callbacks suppressed
[  363.351708][T15146] netlink: 'syz.1.2543': attribute type 33 has an invalid length.
[  363.385383][T15146] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2543'.
[  363.572056][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'.
[  363.615491][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2548'.
[  363.626067][T15162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2548'.
[  363.657389][T15165] gtp2: entered promiscuous mode
[  363.666127][T15165] gtp2: entered allmulticast mode
[  363.885187][T15178] syzkaller1: entered promiscuous mode
[  363.892177][T15178] syzkaller1: entered allmulticast mode
[  363.903642][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'.
[  363.913705][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2552'.
[  363.924828][T15178] netlink: 'syz.1.2552': attribute type 1 has an invalid length.
[  363.981381][T15181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2553'.
[  363.991775][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'.
[  364.002700][T15181] netlink: 'syz.2.2553': attribute type 15 has an invalid length.
[  364.024222][T15181] sctp: [Deprecated]: syz.2.2553 (pid 15181) Use of int in max_burst socket option deprecated.
[  364.024222][T15181] Use struct sctp_assoc_value instead
[  364.265485][T15193] vlan6: entered allmulticast mode
[  364.278632][T15193] erspan0: entered allmulticast mode
[  364.474329][T15197] bond10: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  364.881457][T15225] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  365.528924][T15280] A link change request failed with some changes committed already. Interface ������Z7nz>RA� may have been left with an inconsistent configuration, please check.
[  365.713155][T15294] veth1_to_hsr: entered promiscuous mode
[  365.719857][T15294] veth1_to_hsr: entered allmulticast mode
[  366.273802][T15315] bridge7: entered promiscuous mode
[  366.290075][T15315] bridge7: entered allmulticast mode
[  366.454593][T15326] netlink: 'syz.4.2594': attribute type 10 has an invalid length.
[  366.481979][T15330] block nbd0: reconnected socket
[  366.491199][T15326] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  366.836915][T15356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.863830][T15356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.125398][T15372] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  367.170849][ T5842] block nbd0: Receive control failed (result -32)
[  367.397878][T15386] pimreg: left allmulticast mode
[  367.710400][T15407] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  367.948888][   T36] bond0: (slave bridge_slave_1): link status definitely down, disabling slave
[  367.999214][T15422] Cannot find del_set index 49151 as target
[  368.101705][T15428] openvswitch: netlink: Missing key (keys=40, expected=80)
[  368.410399][T15458] __nla_validate_parse: 14 callbacks suppressed
[  368.410424][T15458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'.
[  368.439317][T15458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'.
[  368.690361][T15474] vcan0: entered allmulticast mode
[  368.763843][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2641'.
[  368.935331][T15488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2645'.
[  369.033741][T15488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2645'.
[  369.581803][T15516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.649722][T15521] syzkaller0: entered promiscuous mode
[  369.662167][T15521] syzkaller0: entered allmulticast mode
[  369.733622][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'.
[  369.814258][T15535] 8021q: adding VLAN 0 to HW filter on device bond11
[  369.846125][T15537] bond11: entered allmulticast mode
[  369.866799][T15521] tipc: Resetting bearer <eth:syzkaller0>
[  369.924289][T15515] tipc: Resetting bearer <eth:syzkaller0>
[  369.936543][T15545] IPv6: NLM_F_CREATE should be specified when creating new route
[  369.981357][T15515] tipc: Disabling bearer <eth:syzkaller0>
[  370.342151][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2665'.
[  370.462327][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2665'.
[  370.513456][T15577] $H�: renamed from bond0
[  370.544622][T15577] $H�: entered promiscuous mode
[  370.587286][T15577] bond_slave_0: entered promiscuous mode
[  370.607540][T15577] bond_slave_1: entered promiscuous mode
[  370.630299][T15577] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  370.679728][T15573] dvmrp0: entered allmulticast mode
[  370.714607][T15573] dvmrp0: left allmulticast mode
[  370.732981][T15573] pimreg: left allmulticast mode
[  370.896989][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'.
[  370.918615][T15594] netlink: 'syz.0.2673': attribute type 5 has an invalid length.
[  370.943098][T15594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2673'.
[  371.157447][T15594] geneve3: entered promiscuous mode
[  371.163710][T15594] geneve3: entered allmulticast mode
[  371.225288][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  371.236136][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  371.237811][T15606] netlink: 'syz.1.2676': attribute type 1 has an invalid length.
[  371.277315][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  371.286618][T15606] netlink: 'syz.1.2676': attribute type 11 has an invalid length.
[  371.298464][ T1167] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  371.326422][T15604] can: request_module (can-proto-0) failed.
[  371.783005][T15636] bond9: entered promiscuous mode
[  371.788389][T15636] bond9: entered allmulticast mode
[  371.794140][T15636] 8021q: adding VLAN 0 to HW filter on device bond9
[  372.121714][T15650] ipt_REJECT: TCP_RESET invalid for non-tcp
[  372.214572][T15660] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  372.234033][T15660] syzkaller0: entered promiscuous mode
[  372.240112][T15660] syzkaller0: entered allmulticast mode
[  372.327320][T15671] pim6reg1: entered promiscuous mode
[  372.333598][T15671] pim6reg1: entered allmulticast mode
[  373.122875][T15706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.557073][T15722] netlink: 'syz.0.2711': attribute type 1 has an invalid length.
[  373.651406][T15722] bond10: entered promiscuous mode
[  373.669555][T15722] 8021q: adding VLAN 0 to HW filter on device bond10
[  373.677745][T15729] __nla_validate_parse: 6 callbacks suppressed
[  373.677763][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'.
[  373.717226][T15729] netlink: 'syz.0.2711': attribute type 5 has an invalid length.
[  373.803225][T15729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2711'.
[  373.850459][T15725] 8021q: adding VLAN 0 to HW filter on device bond10
[  373.857848][T15725] bond10: (slave gre2): The slave device specified does not support setting the MAC address
[  373.879251][T15725] bond10: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  373.900229][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2712'.
[  373.911090][T15725] bond10: (slave gre2): making interface the new active one
[  373.918649][T15725] gre2: entered promiscuous mode
[  373.925632][T15725] bond10: (slave gre2): Enslaving as an active interface with an up link
[  373.964039][T15737] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2714'.
[  374.028731][T15737] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2714'.
[  374.137852][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2717'.
[  374.198918][T15742] netlink: 'syz.0.2717': attribute type 6 has an invalid length.
[  374.788677][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'.
[  374.921511][T15797] netlink: 'syz.1.2733': attribute type 1 has an invalid length.
[  375.135654][T15812] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2737'.
[  375.283044][T15821] netlink: 'syz.0.2740': attribute type 1 has an invalid length.
[  375.327508][T15824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2741'.
[  375.349252][T15824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2741'.
[  375.409564][T15830] netlink: 'syz.0.2742': attribute type 1 has an invalid length.
[  375.427646][T15831] netlink: 'syz.0.2742': attribute type 1 has an invalid length.
[  375.495739][T15830] 8021q: adding VLAN 0 to HW filter on device bond11
[  375.523050][T15836] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.564795][T15837] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.579996][T15836] syzkaller0: entered promiscuous mode
[  375.585690][T15836] syzkaller0: entered allmulticast mode
[  375.605935][T15836] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  375.667441][T15836] tipc: Resetting bearer <eth:syzkaller0>
[  375.699594][T15835] tipc: Resetting bearer <eth:syzkaller0>
[  375.735909][T15835] tipc: Disabling bearer <eth:syzkaller0>
[  376.416359][T15897] ip6t_REJECT: ECHOREPLY is not supported
[  376.516288][T15909] netlink: 'syz.1.2764': attribute type 1 has an invalid length.
[  376.566950][T15909] syzkaller0: entered promiscuous mode
[  376.572737][T15909] syzkaller0: entered allmulticast mode
[  376.656493][T15913] ip6tnl0: Caught tx_queue_len zero misconfig
[  376.756937][T15918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.052190][T15940] netlink: 'syz.0.2773': attribute type 2 has an invalid length.
[  377.061412][T15932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.146504][T15919] tipc: Resetting bearer <eth:syzkaller0>
[  378.918871][T15919] tipc: Disabling bearer <eth:syzkaller0>
[  378.937307][T15950] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  378.948318][T15960] netlink: 'syz.0.2775': attribute type 11 has an invalid length.
[  378.956283][T15960] __nla_validate_parse: 16 callbacks suppressed
[  378.956294][T15960] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2775'.
[  379.103592][T15958] syzkaller0: entered promiscuous mode
[  379.110353][T15958] syzkaller0: entered allmulticast mode
[  379.119339][T15981] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2778'.
[  379.136342][T11791] tipc: Node number set to 145089742
[  380.892716][T15995] bridge7: entered promiscuous mode
[  380.898319][T15995] bridge7: entered allmulticast mode
[  381.065774][T16021] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2786'.
[  381.074817][T16023] sctp: [Deprecated]: syz.1.2787 (pid 16023) Use of struct sctp_assoc_value in delayed_ack socket option.
[  381.074817][T16023] Use struct sctp_sack_info instead
[  381.075404][T16023] syzkaller1: entered promiscuous mode
[  381.118239][T16023] syzkaller1: entered allmulticast mode
[  381.143598][T16030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2790'.
[  381.189736][T16032] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  381.206342][T16027] lo: entered allmulticast mode
[  381.211793][T16027] lo: left allmulticast mode
[  381.218959][T16025] only policy match revision 0 supported
[  381.218982][T16025] unable to load match
[  381.396866][T16047] IPVS: length: 8 != 1152
[  381.424912][T16047] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2794'.
[  381.908857][T16070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.916470][T16070] syzkaller0: entered promiscuous mode
[  381.928814][T16070] syzkaller0: entered allmulticast mode
[  381.939114][T16070] netlink: 'syz.4.2800': attribute type 5 has an invalid length.
[  381.974210][T16070] tipc: Resetting bearer <eth:syzkaller0>
[  382.001765][T16066] tipc: Resetting bearer <eth:syzkaller0>
[  382.042633][T16066] tipc: Disabling bearer <eth:syzkaller0>
[  382.060742][T16076] netlink: 'syz.2.2805': attribute type 30 has an invalid length.
[  382.096614][T16076] bond10: option arp_missed_max: invalid value (0)
[  382.104002][T16076] bond10: option arp_missed_max: allowed values 1 - 255
[  382.114251][T16076] bond10 (unregistering): Released all slaves
[  382.160059][T16082] veth0: entered promiscuous mode
[  382.199815][T16075] veth0: left promiscuous mode
[  382.250465][T16089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.755362][T16117] netlink: 528 bytes leftover after parsing attributes in process `syz.1.2814'.
[  382.765219][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2814'.
[  382.990477][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2816'.
[  383.012229][T16128] bond2: left promiscuous mode
[  383.024105][T16128] bridge0: port 4(bond2) entered disabled state
[  383.056458][T16128] bridge_slave_1: left allmulticast mode
[  383.066886][T16128] bridge_slave_1: left promiscuous mode
[  383.074733][T16128] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.089280][T16128] bridge_slave_0: left promiscuous mode
[  383.112426][T16128] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.193940][T16144] x_tables: duplicate underflow at hook 2
[  383.530153][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2826'.
[  383.570766][T16161] veth7: entered allmulticast mode
[  383.605075][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'.
[  383.605503][T16163] veth9: entered allmulticast mode
[  383.992440][T16191] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  384.109394][T16202] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20001
[  384.183171][T16202] IPVS: set_ctl: invalid protocol: 51 172.20.20.34:20004
[  384.312932][T16221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2842'.
[  384.365420][T16224] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2842'.
[  384.539041][T16227] SET target dimension over the limit!
[  384.546634][T16229] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2846'.
[  384.554105][T16227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2844'.
[  384.574148][T16229] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2846'.
[  384.578745][T16227] netlink: 'syz.1.2844': attribute type 23 has an invalid length.
[  384.682954][T16236] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2847'.
[  384.924495][T16251] netlink: 'syz.1.2850': attribute type 1 has an invalid length.
[  385.501671][T16274] can: request_module (can-proto-0) failed.
[  385.618205][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'.
[  385.642890][T16282] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  386.045866][T16309] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2863'.
[  386.214768][T16315] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  386.246611][T16315] bond12 (unregistering): Released all slaves
[  386.391716][T16328] netlink: 'syz.3.2871': attribute type 10 has an invalid length.
[  386.402635][T16328] veth1_macvtap: left promiscuous mode
[  386.937892][T16353] netlink: 'syz.2.2883': attribute type 2 has an invalid length.
[  386.974387][T16353] siw: device registration error -23
[  387.237383][T16371] dvmrp0: entered allmulticast mode
[  387.250069][T16371] dvmrp0: left allmulticast mode
[  387.255312][T16371] dvmrp6: left allmulticast mode
[  387.930808][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  387.941811][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  387.950993][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  387.955880][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.970963][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  387.981704][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  387.989570][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  388.016539][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2896'.
[  388.230606][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.241323][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  388.284407][T16416] syzkaller0: entered promiscuous mode
[  388.301119][T16416] syzkaller0: entered allmulticast mode
[  388.372562][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.390112][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  388.439779][T16433] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2904'.
[  388.460843][T16394] ������Z7nz>RA� speed is unknown, defaulting to 1000
[  388.503682][   T36] bond0: (slave netdevsim0): Releasing backup interface
[  388.515989][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.532624][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  388.550310][T16394] hsr0 speed is unknown, defaulting to 1000
[  388.633042][T16433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.694024][T16433] syzkaller0: entered promiscuous mode
[  388.702315][T16433] syzkaller0: entered allmulticast mode
[  388.872605][T16438] tipc: Resetting bearer <eth:syzkaller0>
[  389.264770][T16428] tipc: Resetting bearer <eth:syzkaller0>
[  389.347947][T16428] tipc: Disabling bearer <eth:syzkaller0>
[  389.462560][T16454] ������: renamed from wg2 (while UP)
[  389.723391][T16475] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  389.825325][T16480] __nla_validate_parse: 4 callbacks suppressed
[  389.825344][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2916'.
[  390.111459][ T5837] Bluetooth: hci0: command tx timeout
[  390.205677][   T36] gretap0 (unregistering): left promiscuous mode
[  390.223454][   T36] bond2 (unregistering): (slave gretap1): Releasing active interface
[  390.246934][   T36] bond4 (unregistering): (slave gretap2): Releasing active interface
[  390.304192][   T36] bond10 (unregistering): (slave gre2): Releasing backup interface
[  390.313513][   T36] gre2 (unregistering): left promiscuous mode
[  390.380684][   T36] bond3 (unregistering): (slave geneve2): Releasing active interface
[  390.416059][   T36] geneve0 (unregistering): left promiscuous mode
[  390.425427][   T36] team0: Port device geneve0 removed
[  390.767380][   T36] bond0 (unregistering): left promiscuous mode
[  390.773875][   T36] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  390.781349][   T36] team0: left promiscuous mode
[  390.787967][   T36] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  390.797918][   T36] bond0 (unregistering): (slave team0): Releasing backup interface
[  390.809891][   T36] bond0 (unregistering): Released all slaves
[  390.916566][   T36] bond1 (unregistering): Released all slaves
[  390.930878][   T36] bond2 (unregistering): Released all slaves
[  391.032820][   T36] bond3 (unregistering): Released all slaves
[  391.046274][   T36] bond4 (unregistering): Released all slaves
[  391.150388][   T36] bond5 (unregistering): Released all slaves
[  391.164660][   T36] bond6 (unregistering): (slave lo): Releasing backup interface
[  391.173205][   T36] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  391.184875][   T36] bond6 (unregistering): Released all slaves
[  391.287330][   T36] bond7 (unregistering): (slave veth11): Releasing active interface
[  391.299717][   T36] bond7 (unregistering): Released all slaves
[  391.313175][   T36] bond8 (unregistering): Released all slaves
[  391.414920][   T36] bond9 (unregistering): Released all slaves
[  391.514517][   T36] bond10 (unregistering): Released all slaves
[  391.614189][   T36] bond11 (unregistering): Released all slaves
[  391.627660][   T36] bond12 (unregistering): Released all slaves
[  391.904857][T16506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2921'.
[  391.956765][T16394] chnl_net:caif_netlink_parms(): no params data found
[  391.965263][T16511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2924'.
[  391.975637][T16513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2921'.
[  392.027644][T16514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.044546][T16510] syzkaller0: entered promiscuous mode
[  392.058674][T16510] syzkaller0: entered allmulticast mode
[  392.083782][T16500] bond0: (slave bond_slave_0): Releasing backup interface
[  392.093689][T16510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2923'.
[  392.139412][T16500] bond_slave_0: left promiscuous mode
[  392.161144][T16500] bond_slave_0: left allmulticast mode
[  392.169593][ T5837] Bluetooth: hci0: command tx timeout
[  392.175819][T16500] bond0: (slave bond_slave_1): Releasing backup interface
[  392.185365][T16500] bond_slave_1: left promiscuous mode
[  392.193480][T16500] bond_slave_1: left allmulticast mode
[  392.207558][T16500] team0: Port device team_slave_0 removed
[  392.219803][T16500] team0: Port device team_slave_1 removed
[  392.236746][T16500] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  392.267529][T16528] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2923'.
[  392.320373][T16513] team0: Mode changed to "roundrobin"
[  392.332401][T16521] tipc: Resetting bearer <eth:syzkaller0>
[  392.377200][T16505] tipc: Resetting bearer <eth:syzkaller0>
[  392.417578][T16535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2927'.
[  392.455057][T16505] tipc: Disabling bearer <eth:syzkaller0>
[  392.646641][T16394] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.688806][T16394] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.696118][T16394] bridge_slave_0: entered allmulticast mode
[  392.704430][T16394] bridge_slave_0: entered promiscuous mode
[  392.716879][T16549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2931'.
[  392.720282][T16394] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.733642][T16394] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.751108][T16394] bridge_slave_1: entered allmulticast mode
[  392.773579][T16394] bridge_slave_1: entered promiscuous mode
[  392.966321][T16394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.991540][T16394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.139632][T16577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  393.170066][T16394] team0: Port device team_slave_0 added
[  393.205465][T16577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  393.206179][T16394] team0: Port device team_slave_1 added
[  393.229132][T16579] syzkaller0: entered promiscuous mode
[  393.234655][T16579] syzkaller0: entered allmulticast mode
[  393.259623][T16584] sctp: [Deprecated]: syz.4.2939 (pid 16584) Use of struct sctp_assoc_value in delayed_ack socket option.
[  393.259623][T16584] Use struct sctp_sack_info instead
[  393.372476][   T36] �9: left promiscuous mode
[  393.393930][T16394] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.412122][T16394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.448526][T16394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.503891][   T36] tipc: Disabling bearer <udp:s>
[  393.511102][   T36] tipc: Left network mode
[  393.518567][T16394] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.545031][T16394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.573200][T16394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.707724][T16593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.746210][T16596] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  393.793056][T16593] tipc: Resetting bearer <eth:syzkaller0>
[  394.019627][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2945'.
[  394.248285][ T5837] Bluetooth: hci0: command tx timeout
[  395.492159][T16593] tipc: Disabling bearer <eth:syzkaller0>
[  395.561507][T11786] tipc: Node number set to 1947580204
[  395.655283][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'.
[  395.697012][T16394] hsr_slave_0: entered promiscuous mode
[  395.722529][T16394] hsr_slave_1: entered promiscuous mode
[  395.751728][T16394] debugfs: 'hsr0' already exists in 'hsr'
[  395.757528][T16394] Cannot create hsr debugfs directory
[  396.183554][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2951'.
[  396.194492][   T36] veth0_to_batadv: left promiscuous mode
[  396.244367][   T36] hsr_slave_0: left promiscuous mode
[  396.256788][   T36] hsr_slave_1: left promiscuous mode
[  396.312459][   T36] pimreg3 (unregistering): left allmulticast mode
[  396.334915][ T5837] Bluetooth: hci0: command tx timeout
[  396.442006][T16644] netlink: 'syz.4.2955': attribute type 6 has an invalid length.
[  396.504564][   T36] pimreg (unregistering): left allmulticast mode
[  396.791608][T16648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2956'.
[  397.380957][T16653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2956'.
[  397.604710][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'.
[  397.621256][T16664] netlink: 'syz.1.2960': attribute type 12 has an invalid length.
[  397.744394][T16664] bond12: option primary_reselect: invalid value (255)
[  397.755541][T16664] bond12 (unregistering): Released all slaves
[  397.757724][T16674] xt_CT: You must specify a L4 protocol and not use inversions on it
[  398.042678][   T36] IPVS: stop unused estimator thread 0...
[  398.048956][T16687] netlink: 'syz.4.2968': attribute type 1 has an invalid length.
[  398.048983][T16687] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2968'.
[  398.058279][T16689] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2970'.
[  398.161576][T16692] netlink: 'syz.2.2972': attribute type 1 has an invalid length.
[  398.286584][T16697] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2974'.
[  398.302248][T16698] 8021q: adding VLAN 0 to HW filter on device bond12
[  398.330954][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2975'.
[  398.797418][T16394] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  398.842345][T16394] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  398.892026][T16394] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  398.934658][T16394] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  399.006817][T16732] syzkaller0: entered promiscuous mode
[  399.038288][T16732] syzkaller0: entered allmulticast mode
[  399.337072][T16755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2989'.
[  399.413584][T16394] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.485737][T16394] 8021q: adding VLAN 0 to HW filter on device team0
[  399.561066][T16764] veth1: entered allmulticast mode
[  399.574220][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.581460][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.604885][T16773] netlink: 'syz.4.2994': attribute type 1 has an invalid length.
[  399.616162][T16773] netlink: 'syz.4.2994': attribute type 3 has an invalid length.
[  399.636732][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.644010][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.236527][T16805] xfrm1: entered promiscuous mode
[  400.318891][T16805] xfrm1: entered allmulticast mode
[  400.530229][T16394] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.599476][T16821] block nbd2: Unsupported socket: should be TCP or UNIX.
[  400.656609][T16821] syzkaller1: entered promiscuous mode
[  400.663360][T16821] syzkaller1: entered allmulticast mode
[  400.680873][T16394] veth0_vlan: entered promiscuous mode
[  400.695181][T16394] veth1_vlan: entered promiscuous mode
[  400.966828][T16394] veth0_macvtap: entered promiscuous mode
[  400.994040][T16394] veth1_macvtap: entered promiscuous mode
[  401.092934][T16394] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.171188][T16394] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.210133][ T3017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.242281][ T3017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.269783][ T3017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.311171][ T3017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.388792][T16857] netlink: 'syz.2.3016': attribute type 1 has an invalid length.
[  401.470723][T16861] netlink: 'syz.2.3016': attribute type 39 has an invalid length.
[  401.622658][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.650271][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.810705][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.828135][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.974536][T16881] __nla_validate_parse: 5 callbacks suppressed
[  401.974557][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3020'.
[  402.043799][T16881] netlink: 'syz.3.3020': attribute type 22 has an invalid length.
[  402.072672][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'.
[  402.173044][ T2978] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  402.208612][ T2978] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  402.221592][ T2978] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  402.241461][ T2978] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  402.434953][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3023'.
[  402.560554][T16902] bond0: (slave bond_slave_1): Releasing backup interface
[  402.655266][T16908] ipvlan2: entered promiscuous mode
[  402.940129][T16921] Bluetooth: MGMT ver 1.23
[  403.015935][T16921] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  403.236864][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  403.247229][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  403.266707][T16940] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3034'.
[  403.295029][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  403.317660][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  403.342223][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  403.643403][T16933] ������Z7nz>RA� speed is unknown, defaulting to 1000
[  403.670629][T16933] hsr0 speed is unknown, defaulting to 1000
[  403.890754][T16975] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3042'.
[  405.453609][ T5842] Bluetooth: hci2: command tx timeout
[  406.024879][   T12] bond3 (unregistering): (slave gretap1): Releasing active interface
[  406.052210][   T12] bond8 (unregistering): (slave gretap2): Releasing active interface
[  406.606948][   T12] bond0 (unregistering): Released all slaves
[  406.633707][   T12] bond1 (unregistering): Released all slaves
[  406.672846][   T12] bond2 (unregistering): Released all slaves
[  406.693213][   T12] bond3 (unregistering): Released all slaves
[  406.834468][   T12] bond4 (unregistering): Released all slaves
[  406.854475][   T12] bond5 (unregistering): Released all slaves
[  407.005704][   T12] bond6 (unregistering): Released all slaves
[  407.025844][   T12] bond7 (unregistering): Released all slaves
[  407.045780][   T12] bond8 (unregistering): Released all slaves
[  407.207914][   T12] bond9 (unregistering): Released all slaves
[  407.383844][T17005] tipc: Enabled bearer <udp:syz2>, priority 10
[  407.419423][T17018] A link change request failed with some changes committed already. Interface ������Z7nz>RA� may have been left with an inconsistent configuration, please check.
[  407.513672][   T12] tipc: Left network mode
[  407.534512][ T5842] Bluetooth: hci2: command tx timeout
[  407.839285][T16933] chnl_net:caif_netlink_parms(): no params data found
[  408.081634][T17056] Cannot find del_set index 49151 as target
[  408.148416][T17056] dvmrp6: entered allmulticast mode
[  408.241543][T16933] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.261501][T16933] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.281964][T16933] bridge_slave_0: entered allmulticast mode
[  408.296920][T16933] bridge_slave_0: entered promiscuous mode
[  408.313005][T16933] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.326694][T16933] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.339712][T16933] bridge_slave_1: entered allmulticast mode
[  408.354459][T16933] bridge_slave_1: entered promiscuous mode
[  408.361783][   T36] bond0: (slave bond_slave_0): interface is now up
[  408.370170][   T36] bond0: (slave bridge_slave_1): interface is now up
[  408.442829][T16933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.457711][T16933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.533793][T11782] tipc: Node number set to 694739590
[  408.573699][T16933] team0: Port device team_slave_0 added
[  408.591964][T16933] team0: Port device team_slave_1 added
[  408.689501][T16933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.706715][T16933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  408.748727][T16933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.770626][T16933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.777616][T16933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  408.838342][T16933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  408.859672][T17048] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  408.866733][T17048] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  408.907494][T17048] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  408.913697][T17048] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  408.930124][T17048] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  408.936117][T17048] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  408.959563][T16933] hsr_slave_0: entered promiscuous mode
[  408.966608][T16933] hsr_slave_1: entered promiscuous mode
[  408.978383][T16933] debugfs: 'hsr0' already exists in 'hsr'
[  408.984786][T16933] Cannot create hsr debugfs directory
[  408.993305][T17048] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  408.999350][T17048] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  409.159957][T17048] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  409.165935][T17048] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  409.670088][T16933] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  409.683776][T16933] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  409.696220][T16933] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  409.717686][T16933] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  409.844405][T16933] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.875862][T16933] 8021q: adding VLAN 0 to HW filter on device team0
[  409.894368][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.901621][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.920379][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.927657][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.246716][T16933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.315164][T16933] veth0_vlan: entered promiscuous mode
[  410.336803][T16933] veth1_vlan: entered promiscuous mode
[  410.377302][T16933] veth0_macvtap: entered promiscuous mode
[  410.393186][T16933] veth1_macvtap: entered promiscuous mode
[  410.425559][T16933] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.446001][T16933] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.465089][ T3007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.474461][ T3007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.482494][T17096] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  410.493815][ T3007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.496543][T17096] netlink: 'syz.0.3060': attribute type 24 has an invalid length.
[  410.511223][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'.
[  410.517828][ T2978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.531110][T17098] netlink: zone id is out of range
[  411.536302][T17098] netlink: zone id is out of range
[  411.542158][T17098] netlink: zone id is out of range
[  411.547332][T17098] netlink: zone id is out of range
[  411.553523][T17098] netlink: zone id is out of range
[  411.559344][T17098] netlink: zone id is out of range
[  411.564482][T17098] netlink: zone id is out of range
[  411.569965][T17098] netlink: zone id is out of range
[  411.575094][T17098] netlink: zone id is out of range
[  411.798254][T17107] xt_CT: No such helper "snmp_trap"
[  412.154832][T17123] netlink: 'syz.0.3069': attribute type 1 has an invalid length.
[  412.163198][T17123] netlink: 'syz.0.3069': attribute type 4 has an invalid length.
[  412.172027][T17123] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.3069'.
[  412.270608][T17126] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  413.104508][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3071'.
[  413.161545][T17132] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3072'.
[  554.168407][   T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds.
[  554.176451][   T31]       Not tainted syzkaller #0
[  554.181590][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  554.190649][   T31] task:kworker/u8:0    state:D stack:21992 pid:12    tgid:12    ppid:2      task_flags:0x4208160 flags:0x00080000
[  554.202797][   T31] Workqueue: netns cleanup_net
[  554.207773][   T31] Call Trace:
[  554.211126][   T31]  <TASK>
[  554.214147][   T31]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  554.219356][   T31]  ? __lock_acquire+0xab9/0xd20
[  554.224693][   T31]  ? __lock_acquire+0xab9/0xd20
[  554.229848][   T31]  ? __pfx___schedule+0x10/0x10
[  554.234761][   T31]  ? schedule+0x91/0x360
[  554.239245][   T31]  schedule+0x165/0x360
[  554.243442][   T31]  schedule_preempt_disabled+0x13/0x30
[  554.279039][   T31]  __mutex_lock+0x7e6/0x1350
[  554.283748][   T31]  ? __mutex_lock+0x5bb/0x1350
[  554.302375][   T31]  ? rfkill_unregister+0xc8/0x220
[  554.307511][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  554.321976][   T31]  ? __pfx_device_del+0x10/0x10
[  554.326918][   T31]  rfkill_unregister+0xc8/0x220
[  554.333560][   T31]  wiphy_unregister+0x238/0xae0
[  554.339553][   T31]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  554.345589][   T31]  ? __pfx_wiphy_unregister+0x10/0x10
[  554.351340][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.356597][   T31]  ? ieee80211_unregister_hw+0x144/0x2c0
[  554.362328][   T31]  ieee80211_unregister_hw+0x1e2/0x2c0
[  554.367810][   T31]  mac80211_hwsim_del_radio+0x275/0x460
[  554.374028][   T31]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  554.380267][   T31]  hwsim_exit_net+0xef4/0xfb0
[  554.384974][   T31]  ? hwsim_exit_net+0x333/0xfb0
[  554.389950][   T31]  ? __pfx_hwsim_exit_net+0x10/0x10
[  554.395272][   T31]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  554.401669][   T31]  ops_undo_list+0x49a/0x990
[  554.406287][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  554.411484][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  554.416707][   T31]  cleanup_net+0x4d8/0x820
[  554.421233][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  554.426197][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  554.431806][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  554.437528][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  554.443342][   T31]  process_scheduled_works+0xae1/0x17b0
[  554.448983][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  554.455056][   T31]  worker_thread+0x8a0/0xda0
[  554.460278][   T31]  kthread+0x711/0x8a0
[  554.464396][   T31]  ? __pfx_worker_thread+0x10/0x10
[  554.469603][   T31]  ? __pfx_kthread+0x10/0x10
[  554.474231][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  554.479575][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.484800][   T31]  ? __pfx_kthread+0x10/0x10
[  554.490086][   T31]  ret_from_fork+0x4bc/0x870
[  554.494716][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  554.499972][   T31]  ? __switch_to_asm+0x39/0x70
[  554.504770][   T31]  ? __switch_to_asm+0x33/0x70
[  554.509818][   T31]  ? __pfx_kthread+0x10/0x10
[  554.514430][   T31]  ret_from_fork_asm+0x1a/0x30
[  554.519582][   T31]  </TASK>
[  554.522725][   T31] INFO: task kworker/1:8:11786 blocked for more than 143 seconds.
[  554.530708][   T31]       Not tainted syzkaller #0
[  554.535658][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  554.544859][   T31] task:kworker/1:8     state:D stack:23880 pid:11786 tgid:11786 ppid:2      task_flags:0x4208060 flags:0x00080000
[  554.557400][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  554.564405][   T31] Call Trace:
[  554.567792][   T31]  <TASK>
[  554.570827][   T31]  __schedule+0x1798/0x4cc0
[  554.575403][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  554.581527][   T31]  ? __pfx___schedule+0x10/0x10
[  554.586453][   T31]  ? schedule+0x91/0x360
[  554.590784][   T31]  schedule+0x165/0x360
[  554.594964][   T31]  schedule_preempt_disabled+0x13/0x30
[  554.600626][   T31]  __mutex_lock+0x7e6/0x1350
[  554.605259][   T31]  ? __mutex_lock+0x5bb/0x1350
[  554.610564][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  554.616847][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  554.622262][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  554.628099][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  554.633821][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  554.640397][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  554.646156][   T31]  process_scheduled_works+0xae1/0x17b0
[  554.651915][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  554.658086][   T31]  worker_thread+0x8a0/0xda0
[  554.662804][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  554.669640][   T31]  ? __kthread_parkme+0x7b/0x200
[  554.674607][   T31]  kthread+0x711/0x8a0
[  554.678791][   T31]  ? __pfx_worker_thread+0x10/0x10
[  554.683924][   T31]  ? __pfx_kthread+0x10/0x10
[  554.688624][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  554.693938][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.699603][   T31]  ? __pfx_kthread+0x10/0x10
[  554.704232][   T31]  ret_from_fork+0x4bc/0x870
[  554.709045][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  554.714393][   T31]  ? __switch_to_asm+0x39/0x70
[  554.719323][   T31]  ? __switch_to_asm+0x33/0x70
[  554.724154][   T31]  ? __pfx_kthread+0x10/0x10
[  554.729716][   T31]  ret_from_fork_asm+0x1a/0x30
[  554.734527][   T31]  </TASK>
[  554.737585][   T31] INFO: task syz-executor:16933 blocked for more than 143 seconds.
[  554.747232][   T31]       Not tainted syzkaller #0
[  554.752362][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  554.761087][   T31] task:syz-executor    state:D stack:21672 pid:16933 tgid:16933 ppid:1      task_flags:0x400140 flags:0x00080002
[  554.773122][   T31] Call Trace:
[  554.776438][   T31]  <TASK>
[  554.779501][   T31]  __schedule+0x1798/0x4cc0
[  554.784032][   T31]  ? security_file_open+0xb1/0x270
[  554.789238][   T31]  ? __lock_acquire+0xab9/0xd20
[  554.794113][   T31]  ? __lock_acquire+0xab9/0xd20
[  554.799124][   T31]  ? __pfx___schedule+0x10/0x10
[  554.804011][   T31]  ? schedule+0x91/0x360
[  554.808466][   T31]  schedule+0x165/0x360
[  554.812649][   T31]  schedule_preempt_disabled+0x13/0x30
[  554.818287][   T31]  __mutex_lock+0x7e6/0x1350
[  554.823108][   T31]  ? __mutex_lock+0x5bb/0x1350
[  554.827878][   T31]  ? misc_open+0x51/0x350
[  554.832417][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  554.837519][   T31]  misc_open+0x51/0x350
[  554.841845][   T31]  chrdev_open+0x4cc/0x5e0
[  554.846291][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  554.851319][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  554.857692][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  554.862787][   T31]  do_dentry_open+0x953/0x13f0
[  554.867595][   T31]  vfs_open+0x3b/0x340
[  554.871733][   T31]  ? path_openat+0x2ecd/0x3830
[  554.876587][   T31]  path_openat+0x2ee5/0x3830
[  554.881356][   T31]  ? fput_close_sync+0x119/0x200
[  554.886326][   T31]  ? __pfx_path_openat+0x10/0x10
[  554.891353][   T31]  do_filp_open+0x1fa/0x410
[  554.895875][   T31]  ? __lock_acquire+0xab9/0xd20
[  554.900811][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  554.905874][   T31]  ? _raw_spin_unlock+0x28/0x50
[  554.910838][   T31]  ? alloc_fd+0x64c/0x6c0
[  554.915215][   T31]  do_sys_openat2+0x121/0x1c0
[  554.919963][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  554.925187][   T31]  ? fput_close_sync+0x119/0x200
[  554.930202][   T31]  ? dnotify_flush+0x1db/0x5e0
[  554.934990][   T31]  ? __pfx_fput_close_sync+0x10/0x10
[  554.940354][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  554.945622][   T31]  __x64_sys_openat+0x138/0x170
[  554.950586][   T31]  do_syscall_64+0xfa/0xfa0
[  554.955116][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.960410][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.966494][   T31]  ? clear_bhb_loop+0x60/0xb0
[  554.971231][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.977238][   T31] RIP: 0033:0x7f2c5838df10
[  554.981742][   T31] RSP: 002b:00007ffec1452780 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  554.990235][   T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2c5838df10
[  554.998291][   T31] RDX: 0000000000000002 RSI: 00007f2c58412a62 RDI: 00000000ffffff9c
[  555.006324][   T31] RBP: 00007f2c58412a62 R08: 0000000000000000 R09: 0000000000000000
[  555.014351][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  555.022399][   T31] R13: 0000000000000003 R14: 00007ffec1452b58 R15: 0000000000000000
[  555.030455][   T31]  </TASK>
[  555.033533][   T31] INFO: task syz.3.3052:17032 blocked for more than 144 seconds.
[  555.048216][   T31]       Not tainted syzkaller #0
[  555.053280][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  555.063224][   T31] task:syz.3.3052      state:D stack:25960 pid:17032 tgid:17032 ppid:5840   task_flags:0x400040 flags:0x00080003
[  555.075576][   T31] Call Trace:
[  555.079034][   T31]  <TASK>
[  555.082077][   T31]  __schedule+0x1798/0x4cc0
[  555.086591][   T31]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  555.093199][   T31]  ? __lock_acquire+0xab9/0xd20
[  555.098214][   T31]  ? __pfx___schedule+0x10/0x10
[  555.103125][   T31]  ? schedule+0x91/0x360
[  555.107368][   T31]  schedule+0x165/0x360
[  555.111651][   T31]  schedule_preempt_disabled+0x13/0x30
[  555.117143][   T31]  __mutex_lock+0x7e6/0x1350
[  555.122269][   T31]  ? __mutex_lock+0x5bb/0x1350
[  555.127077][   T31]  ? rfkill_unregister+0xc8/0x220
[  555.132553][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  555.137710][   T31]  ? __pfx_device_del+0x10/0x10
[  555.142719][   T31]  rfkill_unregister+0xc8/0x220
[  555.147631][   T31]  nfc_unregister_device+0x96/0x2a0
[  555.152887][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  555.158700][   T31]  virtual_ncidev_close+0x56/0x90
[  555.163744][   T31]  __fput+0x44c/0xa70
[  555.167726][   T31]  task_work_run+0x1d4/0x260
[  555.172422][   T31]  ? __pfx_task_work_run+0x10/0x10
[  555.177572][   T31]  ? exit_to_user_mode_loop+0x40/0x130
[  555.183326][   T31]  exit_to_user_mode_loop+0xe9/0x130
[  555.188666][   T31]  do_syscall_64+0x2bd/0xfa0
[  555.193260][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.199440][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  555.205606][   T31]  ? clear_bhb_loop+0x60/0xb0
[  555.210560][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.216531][   T31] RIP: 0033:0x7f52b7f8f6c9
[  555.221373][   T31] RSP: 002b:00007ffcb8ee2128 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  555.229896][   T31] RAX: 0000000000000000 RBX: 00007f52b81e7da0 RCX: 00007f52b7f8f6c9
[  555.237885][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  555.245920][   T31] RBP: 00007f52b81e7da0 R08: 0000000000000210 R09: 0000001eb8ee241f
[  555.254064][   T31] R10: 00007f52b81e7cb0 R11: 0000000000000246 R12: 0000000000063c1b
[  555.262363][   T31] R13: 00007f52b81e6180 R14: ffffffffffffffff R15: 00007ffcb8ee2240
[  555.270556][   T31]  </TASK>
[  555.273624][   T31] INFO: task syz.1.3054:17048 blocked for more than 144 seconds.
[  555.281595][   T31]       Not tainted syzkaller #0
[  555.286664][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  555.295652][   T31] task:syz.1.3054      state:D stack:25480 pid:17048 tgid:17045 ppid:5833   task_flags:0x400140 flags:0x00080003
[  555.307715][   T31] Call Trace:
[  555.311072][   T31]  <TASK>
[  555.314021][   T31]  __schedule+0x1798/0x4cc0
[  555.318622][   T31]  ? __lock_acquire+0xab9/0xd20
[  555.323499][   T31]  ? __lock_acquire+0xab9/0xd20
[  555.328516][   T31]  ? __pfx___schedule+0x10/0x10
[  555.333401][   T31]  ? schedule+0x91/0x360
[  555.337642][   T31]  schedule+0x165/0x360
[  555.341907][   T31]  schedule_preempt_disabled+0x13/0x30
[  555.347391][   T31]  __mutex_lock+0x7e6/0x1350
[  555.352041][   T31]  ? __mutex_lock+0x5bb/0x1350
[  555.356940][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  555.362475][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  555.367529][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  555.372958][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  555.379001][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  555.385412][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  555.391313][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  555.396453][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  555.403635][   T31]  rfkill_set_block+0x1d2/0x440
[  555.408622][   T31]  rfkill_fop_write+0x44b/0x570
[  555.413498][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  555.419068][   T31]  ? security_file_permission+0x10/0x290
[  555.424727][   T31]  ? rw_verify_area+0x255/0x4d0
[  555.429968][   T31]  ? __lock_acquire+0xab9/0xd20
[  555.434815][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  555.440350][   T31]  vfs_write+0x27e/0xb30
[  555.444652][   T31]  ? __pfx_vfs_write+0x10/0x10
[  555.449583][   T31]  ? __fget_files+0x2a/0x420
[  555.454422][   T31]  ? __fget_files+0x2a/0x420
[  555.459625][   T31]  ? __fget_files+0x3a0/0x420
[  555.464602][   T31]  ? __fget_files+0x2a/0x420
[  555.469288][   T31]  ksys_write+0x145/0x250
[  555.473647][   T31]  ? __pfx_ksys_write+0x10/0x10
[  555.478631][   T31]  ? do_syscall_64+0xbe/0xfa0
[  555.483337][   T31]  do_syscall_64+0xfa/0xfa0
[  555.487849][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  555.493142][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.499417][   T31]  ? clear_bhb_loop+0x60/0xb0
[  555.504121][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.510133][   T31] RIP: 0033:0x7f71a4b8f6c9
[  555.514570][   T31] RSP: 002b:00007f71a5a20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  555.523211][   T31] RAX: ffffffffffffffda RBX: 00007f71a4de5fa0 RCX: 00007f71a4b8f6c9
[  555.531351][   T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004
[  555.539594][   T31] RBP: 00007f71a4c11f91 R08: 0000000000000000 R09: 0000000000000000
[  555.547626][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  555.556075][   T31] R13: 00007f71a4de6038 R14: 00007f71a4de5fa0 R15: 00007ffc35862398
[  555.564159][   T31]  </TASK>
[  555.567208][   T31] INFO: task syz.1.3054:17056 blocked for more than 144 seconds.
[  555.575034][   T31]       Not tainted syzkaller #0
[  555.580364][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  555.589183][   T31] task:syz.1.3054      state:D stack:26344 pid:17056 tgid:17045 ppid:5833   task_flags:0x400140 flags:0x00080002
[  555.601289][   T31] Call Trace:
[  555.604591][   T31]  <TASK>
[  555.607532][   T31]  __schedule+0x1798/0x4cc0
[  555.612722][   T31]  ? __lock_acquire+0xab9/0xd20
[  555.617750][   T31]  ? __lock_acquire+0xab9/0xd20
[  555.622962][   T31]  ? __pfx___schedule+0x10/0x10
[  555.627867][   T31]  ? schedule+0x91/0x360
[  555.632291][   T31]  schedule+0x165/0x360
[  555.636476][   T31]  schedule_preempt_disabled+0x13/0x30
[  555.642551][   T31]  __mutex_lock+0x7e6/0x1350
[  555.647195][   T31]  ? __mutex_lock+0x5bb/0x1350
[  555.652106][   T31]  ? rfkill_register+0x37/0x8e0
[  555.657008][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  555.662125][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  555.667537][   T31]  ? device_initialize+0x24b/0x440
[  555.673112][   T31]  rfkill_register+0x37/0x8e0
[  555.677801][   T31]  nfc_register_device+0x14a/0x320
[  555.682977][   T31]  nci_register_device+0x87f/0x9d0
[  555.688216][   T31]  ? __pfx_nci_register_device+0x10/0x10
[  555.693874][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  555.699639][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  555.705054][   T31]  virtual_ncidev_open+0x129/0x1a0
[  555.710296][   T31]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  555.716001][   T31]  misc_open+0x2d5/0x350
[  555.720498][   T31]  chrdev_open+0x4cc/0x5e0
[  555.724943][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  555.730495][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  555.736850][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  555.741904][   T31]  do_dentry_open+0x953/0x13f0
[  555.746716][   T31]  vfs_open+0x3b/0x340
[  555.750859][   T31]  ? path_openat+0x2ecd/0x3830
[  555.755651][   T31]  path_openat+0x2ee5/0x3830
[  555.760773][   T31]  ? __pfx_path_openat+0x10/0x10
[  555.765764][   T31]  do_filp_open+0x1fa/0x410
[  555.770666][   T31]  ? __lock_acquire+0xab9/0xd20
[  555.775549][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  555.780682][   T31]  ? _raw_spin_unlock+0x28/0x50
[  555.785571][   T31]  ? alloc_fd+0x64c/0x6c0
[  555.790405][   T31]  do_sys_openat2+0x121/0x1c0
[  555.795106][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  555.800381][   T31]  ? rcu_is_watching+0x15/0xb0
[  555.805167][   T31]  __x64_sys_openat+0x138/0x170
[  555.810081][   T31]  do_syscall_64+0xfa/0xfa0
[  555.814620][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  555.820247][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.826314][   T31]  ? clear_bhb_loop+0x60/0xb0
[  555.831029][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.836959][   T31] RIP: 0033:0x7f71a4b8f6c9
[  555.841716][   T31] RSP: 002b:00007f71a59ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  555.850711][   T31] RAX: ffffffffffffffda RBX: 00007f71a4de6090 RCX: 00007f71a4b8f6c9
[  555.858970][   T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  555.866970][   T31] RBP: 00007f71a4c11f91 R08: 0000000000000000 R09: 0000000000000000
[  555.875031][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  555.883409][   T31] R13: 00007f71a4de6128 R14: 00007f71a4de6090 R15: 00007ffc35862398
[  555.891500][   T31]  </TASK>
[  555.894552][   T31] INFO: task syz.4.3057:17073 blocked for more than 145 seconds.
[  555.902773][   T31]       Not tainted syzkaller #0
[  555.907743][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  555.917121][   T31] task:syz.4.3057      state:D stack:28296 pid:17073 tgid:17071 ppid:5828   task_flags:0x400140 flags:0x00080002
[  555.929324][   T31] Call Trace:
[  555.932631][   T31]  <TASK>
[  555.935561][   T31]  __schedule+0x1798/0x4cc0
[  555.940593][   T31]  ? security_file_open+0xb1/0x270
[  555.945717][   T31]  ? __lock_acquire+0xab9/0xd20
[  555.950824][   T31]  ? __lock_acquire+0xab9/0xd20
[  555.955701][   T31]  ? __pfx___schedule+0x10/0x10
[  555.960635][   T31]  ? schedule+0x91/0x360
[  555.964906][   T31]  schedule+0x165/0x360
[  555.969509][   T31]  schedule_preempt_disabled+0x13/0x30
[  555.974975][   T31]  __mutex_lock+0x7e6/0x1350
[  555.979718][   T31]  ? __mutex_lock+0x5bb/0x1350
[  555.984603][   T31]  ? misc_open+0x51/0x350
[  555.989031][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  555.994160][   T31]  misc_open+0x51/0x350
[  555.998738][   T31]  chrdev_open+0x4cc/0x5e0
[  556.003182][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  556.008417][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  556.014796][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  556.019842][   T31]  do_dentry_open+0x953/0x13f0
[  556.024674][   T31]  vfs_open+0x3b/0x340
[  556.029289][   T31]  ? path_openat+0x2ecd/0x3830
[  556.034154][   T31]  path_openat+0x2ee5/0x3830
[  556.038948][   T31]  ? __pfx_path_openat+0x10/0x10
[  556.043955][   T31]  do_filp_open+0x1fa/0x410
[  556.048532][   T31]  ? __lock_acquire+0xab9/0xd20
[  556.053412][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  556.059249][   T31]  ? _raw_spin_unlock+0x28/0x50
[  556.064154][   T31]  ? alloc_fd+0x64c/0x6c0
[  556.068728][   T31]  do_sys_openat2+0x121/0x1c0
[  556.073432][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  556.078685][   T31]  ? rcu_is_watching+0x15/0xb0
[  556.083476][   T31]  __x64_sys_openat+0x138/0x170
[  556.089064][   T31]  do_syscall_64+0xfa/0xfa0
[  556.093625][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  556.098895][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.105010][   T31]  ? clear_bhb_loop+0x60/0xb0
[  556.109769][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.115793][   T31] RIP: 0033:0x7fdbda58f6c9
[  556.120662][   T31] RSP: 002b:00007fdbdb3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  556.129140][   T31] RAX: ffffffffffffffda RBX: 00007fdbda7e6090 RCX: 00007fdbda58f6c9
[  556.137126][   T31] RDX: 0000000000000302 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  556.145197][   T31] RBP: 00007fdbda611f91 R08: 0000000000000000 R09: 0000000000000000
[  556.153832][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  556.161903][   T31] R13: 00007fdbda7e6128 R14: 00007fdbda7e6090 R15: 00007fff5c3cef38
[  556.170564][   T31]  </TASK>
[  556.173628][   T31] 
[  556.173628][   T31] Showing all locks held in the system:
[  556.182233][   T31] 4 locks held by kworker/u8:0/12:
[  556.187392][   T31]  #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  556.198519][   T31]  #1: ffffc90000117ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  556.209310][   T31]  #2: ffffffff8f2be870 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820
[  556.218878][   T31]  #3: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  556.229053][   T31] 1 lock held by khungtaskd/31:
[  556.234072][   T31]  #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  556.244285][   T31] 2 locks held by getty/5591:
[  556.249159][   T31]  #0: ffff88814d0fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  556.259275][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  556.270199][   T31] 3 locks held by kworker/1:8/11786:
[  556.275555][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  556.287269][   T31]  #1: ffffc9000afdfba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  556.300857][   T31]  #2: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  556.312608][   T31] 1 lock held by syz-executor/16933:
[  556.317894][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.326518][   T31] 2 locks held by syz.3.3052/17032:
[  556.332129][   T31]  #0: ffff88804f037100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  556.342251][   T31]  #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  556.352407][   T31] 2 locks held by syz.1.3054/17048:
[  556.357614][   T31]  #0: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  556.367834][   T31]  #1: ffff88804f037100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  556.377856][   T31] 3 locks held by syz.1.3054/17056:
[  556.383141][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.391999][   T31]  #1: ffff88807f150100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  556.402127][   T31]  #2: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  556.412451][   T31] 1 lock held by syz.4.3057/17073:
[  556.417671][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.426172][   T31] 1 lock held by syz.0.3073/17134:
[  556.431597][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.440104][   T31] 1 lock held by syz-executor/17139:
[  556.445399][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.453918][   T31] 1 lock held by syz-executor/17140:
[  556.459552][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.468066][   T31] 1 lock held by syz-executor/17142:
[  556.473359][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.481885][   T31] 1 lock held by syz-executor/17144:
[  556.487178][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.496079][   T31] 1 lock held by syz-executor/17149:
[  556.501639][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.510186][   T31] 1 lock held by syz-executor/17152:
[  556.515499][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.524470][   T31] 1 lock held by syz-executor/17153:
[  556.529802][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.538430][   T31] 1 lock held by syz-executor/17155:
[  556.543714][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.552760][   T31] 1 lock held by syz-executor/17157:
[  556.558155][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.566651][   T31] 1 lock held by syz-executor/17162:
[  556.572133][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.581233][   T31] 1 lock held by syz-executor/17165:
[  556.586539][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.595123][   T31] 1 lock held by syz-executor/17166:
[  556.600553][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.609944][   T31] 1 lock held by syz-executor/17168:
[  556.615252][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.623776][   T31] 1 lock held by syz-executor/17170:
[  556.629107][   T31]  #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  556.637626][   T31] 
[  556.640536][   T31] =============================================
[  556.640536][   T31] 
[  556.649015][   T31] NMI backtrace for cpu 1
[  556.649027][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  556.649047][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  556.649054][   T31] Call Trace:
[  556.649058][   T31]  <TASK>
[  556.649063][   T31]  dump_stack_lvl+0x189/0x250
[  556.649083][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  556.649098][   T31]  ? __pfx__printk+0x10/0x10
[  556.649116][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  556.649131][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  556.649145][   T31]  ? __pfx__printk+0x10/0x10
[  556.649158][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  556.649175][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  556.649190][   T31]  watchdog+0xf60/0xfa0
[  556.649203][   T31]  ? watchdog+0x1e2/0xfa0
[  556.649218][   T31]  kthread+0x711/0x8a0
[  556.649233][   T31]  ? __pfx_watchdog+0x10/0x10
[  556.649244][   T31]  ? __pfx_kthread+0x10/0x10
[  556.649258][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  556.649273][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  556.649286][   T31]  ? __pfx_kthread+0x10/0x10
[  556.649300][   T31]  ret_from_fork+0x4bc/0x870
[  556.649314][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  556.649329][   T31]  ? __switch_to_asm+0x39/0x70
[  556.649337][   T31]  ? __switch_to_asm+0x33/0x70
[  556.649346][   T31]  ? __pfx_kthread+0x10/0x10
[  556.649360][   T31]  ret_from_fork_asm+0x1a/0x30
[  556.649378][   T31]  </TASK>
[  556.649383][   T31] Sending NMI from CPU 1 to CPUs 0:
[  556.796588][    C0] NMI backtrace for cpu 0
[  556.796606][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  556.796624][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  556.796633][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  556.796659][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  556.796672][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  556.796688][    C0] RAX: 5f3d2e2bf135e000 RBX: ffffffff81967bf7 RCX: 5f3d2e2bf135e000
[  556.796699][    C0] RDX: 0000000000000001 RSI: ffffffff8d70dd33 RDI: ffffffff8bbf0760
[  556.796710][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb
[  556.796721][    C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce470
[  556.796732][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40
[  556.796742][    C0] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[  556.796755][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  556.796766][    C0] CR2: 000055ee9022e000 CR3: 000000000dd38000 CR4: 00000000003526f0
[  556.796782][    C0] Call Trace:
[  556.796789][    C0]  <TASK>
[  556.796795][    C0]  default_idle+0x13/0x20
[  556.796810][    C0]  default_idle_call+0x73/0xb0
[  556.796827][    C0]  do_idle+0x1e7/0x510
[  556.796847][    C0]  ? __pfx_do_idle+0x10/0x10
[  556.796870][    C0]  cpu_startup_entry+0x44/0x60
[  556.796885][    C0]  rest_init+0x2de/0x300
[  556.796902][    C0]  start_kernel+0x3ae/0x410
[  556.796920][    C0]  x86_64_start_reservations+0x24/0x30
[  556.796939][    C0]  x86_64_start_kernel+0x143/0x1c0
[  556.796958][    C0]  common_startup_64+0x13e/0x147
[  556.796985][    C0]  </TASK>