last executing test programs:

3m51.94660542s ago: executing program 0 (id=966):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m51.19226791s ago: executing program 0 (id=968):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x2000000, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x48, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xcf8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '('}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000840)

3m51.062356115s ago: executing program 0 (id=972):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20008041)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
r4 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="4c39cd24a1d50250b7be895ac57c4b837afd1c66d27e109608dcdcec4032090d5c265c6089726514c79ffad5bed17451e19b37ad0300"/65, @ANYRES32=r4, @ANYRES64=r2, @ANYRESDEC=r3], 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000e1ff000000080000010000770dee30514ddec144ee9a170000060000567268a06e1f9b3039d3531f76597fba95", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x10, 0x21, 0x70bd29, 0x0, {0x3}, [@nested={0x7, 0x1, 0x0, 0x1, [@generic="24de95"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000400009dd34e042f30a6aef4d2a3f9aef0c222df150000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1422eb235ee7535, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
shutdown(r3, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
shutdown(r2, 0x1)
socket$packet(0x11, 0x2, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)

3m50.696432035s ago: executing program 1 (id=975):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r4=>0x0})
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4)
recvmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/17, 0x11}, 0x7fffffff}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
unshare(0x6020480)
r7 = socket(0x2a, 0x2, 0x0)
bind$xdp(r7, &(0x7f00000002c0)={0x2c, 0x5, 0x0, 0x16, r7}, 0x10)
sendto$inet6(r5, 0x0, 0x0, 0x44, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x3, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)

3m50.152034236s ago: executing program 0 (id=979):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r2=>r0, 0x6, 0x1, 0x1c00000})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000833000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x7518c000)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000300)=0x7, 0x8)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x3000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000833000/0x13000)=nil, 0x13000, 0x300000c, 0x12, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r7, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
sendmsg$802154_raw(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000280)={&(0x7f0000000180)="0ce6dfc6ec903414fad0a88eddfae8cb28d74b8ac7931802473cd4d700deceea186fad4222ffefd66b928d752bafbdde7e231af2523b515ffc912866ff0903b087c23ce5e0af2b55d9f79cd79f64ededf8a157083739554e1685c48365b8cdf48c79cf2d952ac781b93a79cefca7f1493bfd46a16e4ed8a1bf8bcdb435f5c630d071a2810ea5f64c7b6068fe70cd3304efaa2015ed5204245b6806e999d802acae9dee23837f0415c47b5728d53855161b8e7513954c33e3bdddaef02bf866b0f05a1a555f0192fb024ec6ee911729c07cde8139370cbc18ab1972434b344dcb4c7cb8b1dbf8ec39ff5d4f497b6030", 0xef}, 0x1, 0x0, 0x0, 0xc000}, 0x4004000)
socket$netlink(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x1, 0x1c00000}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000833000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x7518c000) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000300)=0x7, 0x8) (async)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x3000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000833000/0x13000)=nil, 0x13000, 0x300000c, 0x12, r6, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r7, 0x0) (async)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) (async)
sendmsg$802154_raw(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000280)={&(0x7f0000000180)="0ce6dfc6ec903414fad0a88eddfae8cb28d74b8ac7931802473cd4d700deceea186fad4222ffefd66b928d752bafbdde7e231af2523b515ffc912866ff0903b087c23ce5e0af2b55d9f79cd79f64ededf8a157083739554e1685c48365b8cdf48c79cf2d952ac781b93a79cefca7f1493bfd46a16e4ed8a1bf8bcdb435f5c630d071a2810ea5f64c7b6068fe70cd3304efaa2015ed5204245b6806e999d802acae9dee23837f0415c47b5728d53855161b8e7513954c33e3bdddaef02bf866b0f05a1a555f0192fb024ec6ee911729c07cde8139370cbc18ab1972434b344dcb4c7cb8b1dbf8ec39ff5d4f497b6030", 0xef}, 0x1, 0x0, 0x0, 0xc000}, 0x4004000) (async)

3m49.788700619s ago: executing program 1 (id=981):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003a00290200000000000000000a0000004900332311cb7dbbe35c6dc30e7e281b00c2083347e3f4662918c4ca6fdba93bd249e279ffcd48ccd6e28ebdf28debdd4b5f7abce543d8b9262f0203cd5a31a032c0d06c36c7434def8479f95493b2ffe715bc9ad0d105c39dc698d375e15d1027a6cc51abedc9967e58c5eb42bee92143dde7f5ed5904f8577a688dfc54038beecf258b4fa429a3bb4f3b2161bc8e3688cc6cb91c3038380121640b830f7d6cadf6346ea8"], 0x18}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'lo\x00'})

3m49.787695618s ago: executing program 1 (id=982):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt(r0, 0x80000001, 0x0, &(0x7f00000001c0)="df159b112d11fb83c888f42fdbd0803ba1b7e9d525d702a93d7b1037e25e91e6f67f538d20b509e7cc04368e46b256f42ce43dfaa5d1ee5b283229177305909ed4c50454c30fdfe79429c045a160226c80d7dc5ce28ac2a9f3a81b0d", 0x5c) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000100)={0x0, 0x4d3, 0x4, 0x1, 0x1, 0x0, [{0x6, 0x6, 0x100000, '\x00', 0x80}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd48040ffff0300080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)

3m49.713376299s ago: executing program 1 (id=983):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000000)=0x3, 0x4)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
readv(r3, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000580), 0x4)
sendmmsg$inet6(r2, &(0x7f0000005400), 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006f40)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000005900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000005980)=""/39, 0x27}, {&(0x7f00000059c0)=""/209, 0xd1}, {&(0x7f0000005ac0)=""/148, 0x94}, {&(0x7f0000005b80)=""/219, 0xdb}, {&(0x7f0000005c80)=""/75, 0x4b}, {&(0x7f0000005d00)=""/4096, 0x1000}, {&(0x7f0000006d00)=""/204, 0xcc}], 0x7, &(0x7f0000006e80)=""/133, 0x85}, 0xe6ce}], 0x2, 0x12141, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000007000)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x404c894)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000007040)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006fc0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000001ca31413ad094763caca99943e3e3bd4b60eb4fbf5d68d91a2643842fb1ef33f4c10b1", @ANYRES32=0x0, @ANYBLOB="002000000018000014001280090001007663616e000000000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f00000058c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005880)=0xfffffc6d)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="400000001000070425bd7000000037db29b9b9353cb9294f461ae53a6d25043e44d78a589b51487a44019720b6fa0c8098c997220c34b25e21e3cb6f7c3077aefa85f2d0f6c2a46a3ff9345ef7d411e9c50536b506150e2f12558d426076060c4e6d70729aed8f121097a5ddffadba94dcb16f3f6b708a84a4aea1bb2a28ad44b961ae592e1a9aec767d7e860b91b7ef867e64d920bb02d20d06c8ea233033ffffd9d07147973fd825d82c9a24f8781756e953e1f093c5116e11014c4bc5cad0e200"/204, @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r10, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)

3m49.04496908s ago: executing program 0 (id=986):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x40}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x7fff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004)
close(r0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x10}, {0x8}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x7}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80000000}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0x6}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xbd80000, 0x6, 0x9, 0x4012, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x8}, 0x50)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f00000003c0)={&(0x7f0000000380)=""/56, 0x38})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r4=>0x0})
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000480)={'ip6gre0\x00', @multicast})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x8100}, 0x20008001)
recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f00000005c0)=@alg, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/178, 0xb2}, {&(0x7f0000000700)=""/139, 0x8b}], 0x2, &(0x7f0000000800)=""/18, 0x12}, 0x6}], 0x1, 0x0, &(0x7f0000000880))
ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl0\x00', <r8=>r4, 0x2f, 0x8, 0x80, 0x7f, 0x68, @private1, @mcast2, 0x80, 0x20, 0x6, 0x2}})
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000980), 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000a00)={<r9=>0x0, <r10=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x1d, r8}, 0x10, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2, 0x702, 0x6, {r9, r10/1000+10000}, {0x77359400}, {0x1, 0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "3455269b5b5237a7"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd4, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x14)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendfile(r5, 0xffffffffffffffff, &(0x7f0000000d00)=0x7fffffff, 0x9)
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40)={r6}, 0x8)
sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x7c, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xdb7, 0x45}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x40, {0x2, 0xee, 0x0, 0x9e9e}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x1, 0x6, 0x0, {0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xb4, 0x6}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x4000080)
r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
accept4$rose(r12, &(0x7f0000000ec0)=@full={0xb, @remote, @rose, 0x0, [@rose, @rose, @default, @remote, @bcast, @rose]}, &(0x7f0000000f00)=0x40, 0x800)
ioctl(r12, 0xffff0001, &(0x7f0000000f40)="3505166665ca64e9fb334b087ab4a8dd88cfab183ef4e919d2a98b58c4cdb07f79f3d5b2ae1ec9eedceacf9d3ea6a421")

3m48.963672434s ago: executing program 0 (id=987):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2})
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0xa0000000})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe1)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0xfff}, 0x1c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff088a81fffffe1000040", 0x0, 0x104, 0x6000000000000000, 0xc9, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688", 0x0}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000206010c0007800800010006000000050005eb0900000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x50}}, 0x8000000)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x1)
recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02000000000001000005000010"], 0x14}}, 0x0)

3m48.86208744s ago: executing program 32 (id=987):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2})
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0xa0000000})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe1)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0xfff}, 0x1c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff088a81fffffe1000040", 0x0, 0x104, 0x6000000000000000, 0xc9, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688", 0x0}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000206010c0007800800010006000000050005eb0900000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x50}}, 0x8000000)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x1)
recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02000000000001000005000010"], 0x14}}, 0x0)

3m48.814875889s ago: executing program 1 (id=989):
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) (async)
socket$inet(0x2, 0x2, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
socket$inet(0x2, 0x2, 0x0) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0)

3m48.586420738s ago: executing program 1 (id=990):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1000, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x6c010102, @in=@loopback, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e20, @in=@multicast2}}]}, 0xbc}}, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)=r5}, 0x20) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) (async, rerun: 64)
socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async, rerun: 32)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

3m48.585505394s ago: executing program 33 (id=990):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1000, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x6c010102, @in=@loopback, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e20, @in=@multicast2}}]}, 0xbc}}, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)=r5}, 0x20) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) (async, rerun: 64)
socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async, rerun: 32)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

20.327063176s ago: executing program 4 (id=3569):
pipe(&(0x7f00000007c0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800), 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000080), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000)
socket$phonet(0x23, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff00", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f00000003c0)=""/182, &(0x7f0000000080)=0xb6)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x0, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r6 = socket(0x2b, 0x80801, 0x1)
shutdown(r6, 0xfffffffffffffffd)
syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
getsockopt$netlink(r5, 0x10e, 0x4, &(0x7f0000000340)=""/101, &(0x7f0000000540)=0x65)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0)

20.116758683s ago: executing program 4 (id=3573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf}}]}}]}, 0x3c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000"], 0x0, 0x6e, 0x0, 0x1}, 0x28)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000010000c800c00"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r10}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r10}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r10, &(0x7f00000001c0)="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", &(0x7f0000000040)=""/30}, 0x20)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r9)
sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0})
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffc01, 0x0, 0x9, 0x100, 0x5c3})
r12 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000000400000000000000", @ANYRES32=r13, @ANYBLOB="00000000001404002800128009000100766574680000000018004462ae98d6f21bae7b91028014000100725b5244", @ANYRES32=r13, @ANYBLOB="0000000043030000"], 0x48}}, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000002ce3ec5cccb808233d7f3b08eaf12989ef22d20b68410a8110f68ce144ec3bcd45ae3e852bbe7f0f348c8ae921ac2d4b79406792cdc275ea8660bac672d93f9e9e8c6b3dd218ad5f2decb730480d87bcfaaa6e06fd66da80b67beeca3ad5124f4e2964dbe3128201b3843f2b521419cc1ef2f97ac9e22256056de89173c041289828bca31213e21c8b11f278bc4666ec02d626493bcfe4f622db3db7cd87e88c7585bd142157a5b34c41204e3020f69e642088f8b884567d0a6efcf42fa9f0ab575eb39471d42cffd39bce7b7686d4c82308f9e2350b98c00a53d344229df1a2c11718742bbbdf", @ANYRES16=r11, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

19.963805831s ago: executing program 4 (id=3574):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = getpid()
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000400010002", 0x7)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x9)
r7 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)=0x10)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xe000200d})
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000fc0)={'geneve1\x00', &(0x7f0000000f40)=@ethtool_dump={0x40, 0x4, 0x2}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)

19.697653414s ago: executing program 4 (id=3576):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006d21f6be5c0e10000104000000000000", @ANYRES32=r1, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

19.23694209s ago: executing program 2 (id=3585):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x25, 0x800, 0x7fffffff, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000fcfab5f0fb34f935dcdb8a174640188800", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400001c0016801800018014000b00044c0000000000000300000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x44844}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0x3, 0x3}, 0x6)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
getgid()
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000180))
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x62, @private=0xa010102, 0x4e24, 0x4, 'lc\x00', 0x4, 0x9, 0x3}, 0x2c)

19.141188171s ago: executing program 2 (id=3586):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffff8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004840}, 0x800)

19.097383479s ago: executing program 2 (id=3587):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r3, 0x201, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000044)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c)
r5 = syz_init_net_socket$x25(0x3, 0x5, 0x3)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x6b, 0xa238, 0x7, 0x6, 0x2, 0x81})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'vlan0\x00', {0x800}, 0xff4f})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0x1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0)

19.006136448s ago: executing program 2 (id=3588):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x44}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
close(0x4)

18.925703411s ago: executing program 2 (id=3590):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001600000827bd7000fcdbdf250000000059c99bfb83a6e098b7526cd64c1ca6"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001600000827bd7000fcdbdf250000000059c99bfb83a6e098b7526cd64c1ca6"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)
socket$inet6_sctp(0xa, 0x5, 0x84)
gettid() (async)
r2 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000007c0)) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000007c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r4=>0x0}, 0x0)
sendmmsg$unix(r1, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf143618ed03c9519e2efca62fafe78d484", 0x3f}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1", 0x55}, {&(0x7f00000005c0)="b6bff468fdf50b74d64c709601cdc77272af1dbce95d84763065c1d9c93c5145c943b9cc5d2e30cb6295b478d137", 0x2e}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x4044005}}], 0x1, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtaction={0x118, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x104, 0x1, [@m_vlan={0x100, 0xf, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcad}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x108}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xa4, 0x6, "f5cffc79cc56f74cabdcc9a3c62a317132a331ea87509d283d47c2d63d55e664b7b9a8ffa216f91d331c50aa676f99d920af1987849b3a91ff1c7e7745959427b9abc0ae371d5fdabc61e9b0838a0717a5535f6fdb41e9f84489f874e035338b4b930d5300cb735110d2154881d8f57614e1c4d929a6f206c366557f1da4f424cc7ba9e622b6fe277b96e088a9060113026142d6fa587f00b054281aa6e81d5b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtaction={0x118, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x104, 0x1, [@m_vlan={0x100, 0xf, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcad}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x108}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xa4, 0x6, "f5cffc79cc56f74cabdcc9a3c62a317132a331ea87509d283d47c2d63d55e664b7b9a8ffa216f91d331c50aa676f99d920af1987849b3a91ff1c7e7745959427b9abc0ae371d5fdabc61e9b0838a0717a5535f6fdb41e9f84489f874e035338b4b930d5300cb735110d2154881d8f57614e1c4d929a6f206c366557f1da4f424cc7ba9e622b6fe277b96e088a9060113026142d6fa587f00b054281aa6e81d5b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_delrule={0x64, 0x21, 0x800, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x20, 0x5, 0x9, 0x0, 0x0, 0x4, 0x6}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x7fff}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'dvmrp0\x00'}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x8}, @FRA_FLOW={0x8, 0xb, 0xc97}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_delrule={0x64, 0x21, 0x800, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x20, 0x5, 0x9, 0x0, 0x0, 0x4, 0x6}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x7fff}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'dvmrp0\x00'}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x8}, @FRA_FLOW={0x8, 0xb, 0xc97}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = getpid()
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
write$cgroup_pid(r6, 0x0, 0x0)

18.768939131s ago: executing program 4 (id=3594):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x24000084)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x8800)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24000811}, 0x40810)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d0021"], 0x1c}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000b3381aa97a65798300000000000039000000a32bba56", @ANYBLOB="1c005a8018000080140005007f00a50fc4030000ff0f030002"], 0x38}}, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x8090}, 0x4005814)
pipe(&(0x7f0000000480))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8)

18.685463338s ago: executing program 4 (id=3596):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x3ac, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x36c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0x10}}, @TCA_ROUTE4_ACT={0x104, 0x6, [@m_vlan={0x100, 0x0, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe3e}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0xe, 0x20000000, 0xdd, 0x400}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x5, 0x3, 0x9, 0x108}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x5b, 0x6, "1680f862e4d0f53705ded07315ae0f1e28c7ad8f84bd9bb2a11085986691862024f13022d92946a43433b925c49ff56851d1b0497dcf2a9415f770adff9682d7ea64ca4c85333b642b45e7df51cd9791c6ed2860801a67"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xdf}, @TCA_ROUTE4_TO={0x8, 0x2, 0xb8}, @TCA_ROUTE4_ACT={0x23c, 0x6, [@m_vlan={0xc0, 0x1e, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7fff, 0xc, 0x8, 0x40, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf12}]}, {0x67, 0x6, "4708fb2ce61a8b61f58c1670fdf22a55ead8e39d1d16e3b59388bc9801fc9b8105ee4d4dbea20b49c233e02a034ba3971856ea4663e3b86163149178804336cee5dbd904f5ec5171ddb22ce6203ec2097800736901752c77721df8deeec4b18d9ee677"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_csum={0xd4, 0x9, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x2, 0xba07, 0x1}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffd1fc, 0x9, 0x1, 0x7, 0xe60}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x100009, 0x6, 0x3, 0x1}, 0x1e}}]}, {0x52, 0x6, "e07b1acb7576272f20660c0f7c5e4d99c9a48ca5a2d28ab75bb7055fc19ae9db1ea397b2debfe12e07f7282e89ee195ddab1126b393abf77ec86f2e9d0cc810d571bb0bebba662495c328e8a7e6e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0xa4, 0x1a, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x0, 0xe1, 0x8}, {0x9e, 0x4, 0x9a, 0xe}, {0x23d, 0xd1, 0xf, 0xa}, {0x4, 0x20, 0x1, 0x8}, {0xfffb, 0x5, 0x6, 0x8}, {0xfffd, 0x6, 0x9, 0x401}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc0, 0x3, 0x0, 0x6}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}]}, {0x1a, 0x6, "4b34c9468301b1de443f361907cd24e96c872cfe8aad"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000280), 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0xfffefffd, 0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051)
sendmsg$inet(r2, &(0x7f0000001080)={0x0, 0x35, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x4000850)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002609000000dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
write$nci(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="71030907040609f34002b72cfef4195e1b02"], 0x12)
r7 = socket$l2tp(0x2, 0x2, 0x73)
pwritev(r7, 0x0, 0x0, 0x1, 0xf597)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r9, 0x1, 0x6, 0x0, 0x0)

18.517243636s ago: executing program 2 (id=3597):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x3, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r4}, 0x8)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

16.46626396s ago: executing program 3 (id=3605):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x10000}, 0x1c, 0x0}}], 0x1, 0x20004094)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x67)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0xffffffffffffffff, &(0x7f0000000500)=0x89)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRES8=r4, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7020000140000000000008500000083000000bf09000008a1e8562000000000bf910000000000000085000000b700000000000000950000000000aab185ddf344272feb2db53fd6418bf44d0bb653cfbbf3cab49dbf00000046bc3d2c"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x100})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x8000}, 0x2e)

16.208464316s ago: executing program 3 (id=3606):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800eefffffffffffedbdf25020000040004fd050000000006001500040000000c00168008000600ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x4d0}, 0x4000050) (async)
close(r4) (async, rerun: 32)
r6 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 32)
socket$kcm(0x2, 0x3, 0x2) (async, rerun: 32)
socket$unix(0x1, 0x1, 0x0) (async)
socket$inet6(0xa, 0x6, 0x10) (async, rerun: 64)
socket(0x10, 0x3, 0x0) (async, rerun: 64)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))

16.207520251s ago: executing program 3 (id=3607):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff00001e0001ff000000000000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$inet6(r7, &(0x7f0000002d40)={0xa, 0x4e25, 0x7, @remote, 0x6}, 0x15)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000040)=0x3, 0x4)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0)

16.137051587s ago: executing program 3 (id=3608):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0)
ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x48, 0x0, 0x0, 0x0, 0xf6b, 0x0, 0x5, 0x5, 0x9})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x0, 0x2, 0x9, 0x200, 0x6}, &(0x7f0000000240)=0x20)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000002530603677c00000000001000000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05001c0012800e00010069703665727370616e000000080002800400120008001f0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20044060)

15.276792641s ago: executing program 3 (id=3609):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x8, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x38}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', <r5=>r2, 0x29, 0x1, 0x18, 0xffffffff, 0x11, @empty, @mcast1, 0x10, 0x8000, 0x1d0f, 0x2}})
socket$isdn(0x22, 0x3, 0x23)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xb0, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x10)

15.196931101s ago: executing program 3 (id=3610):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380"], 0x38}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r4, &(0x7f0000000000)={0x10, @short}, 0x2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r5=>0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x54, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000855}, 0x8010)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r7], 0x64}}, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000440)={'wg2\x00', &(0x7f00000000c0)=@ethtool_eeprom={0xa, 0x407, 0x4}})
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1804000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r12, &(0x7f0000000780)}, 0x20)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r13, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010101, 0x4e20, 0x4, 0xa, 0x80012d58, 0x12d5c}}, 0x44)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r13, 0x0, 0x485, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x9, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}}, 0x0)

3.042268686s ago: executing program 34 (id=3596):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x3ac, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x36c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0x10}}, @TCA_ROUTE4_ACT={0x104, 0x6, [@m_vlan={0x100, 0x0, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe3e}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0xe, 0x20000000, 0xdd, 0x400}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x5, 0x3, 0x9, 0x108}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x5b, 0x6, "1680f862e4d0f53705ded07315ae0f1e28c7ad8f84bd9bb2a11085986691862024f13022d92946a43433b925c49ff56851d1b0497dcf2a9415f770adff9682d7ea64ca4c85333b642b45e7df51cd9791c6ed2860801a67"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xdf}, @TCA_ROUTE4_TO={0x8, 0x2, 0xb8}, @TCA_ROUTE4_ACT={0x23c, 0x6, [@m_vlan={0xc0, 0x1e, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7fff, 0xc, 0x8, 0x40, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf12}]}, {0x67, 0x6, "4708fb2ce61a8b61f58c1670fdf22a55ead8e39d1d16e3b59388bc9801fc9b8105ee4d4dbea20b49c233e02a034ba3971856ea4663e3b86163149178804336cee5dbd904f5ec5171ddb22ce6203ec2097800736901752c77721df8deeec4b18d9ee677"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_csum={0xd4, 0x9, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x2, 0xba07, 0x1}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffd1fc, 0x9, 0x1, 0x7, 0xe60}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x100009, 0x6, 0x3, 0x1}, 0x1e}}]}, {0x52, 0x6, "e07b1acb7576272f20660c0f7c5e4d99c9a48ca5a2d28ab75bb7055fc19ae9db1ea397b2debfe12e07f7282e89ee195ddab1126b393abf77ec86f2e9d0cc810d571bb0bebba662495c328e8a7e6e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0xa4, 0x1a, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x0, 0xe1, 0x8}, {0x9e, 0x4, 0x9a, 0xe}, {0x23d, 0xd1, 0xf, 0xa}, {0x4, 0x20, 0x1, 0x8}, {0xfffb, 0x5, 0x6, 0x8}, {0xfffd, 0x6, 0x9, 0x401}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc0, 0x3, 0x0, 0x6}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}]}, {0x1a, 0x6, "4b34c9468301b1de443f361907cd24e96c872cfe8aad"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000280), 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0xfffefffd, 0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051)
sendmsg$inet(r2, &(0x7f0000001080)={0x0, 0x35, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x4000850)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002609000000dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
write$nci(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="71030907040609f34002b72cfef4195e1b02"], 0x12)
r7 = socket$l2tp(0x2, 0x2, 0x73)
pwritev(r7, 0x0, 0x0, 0x1, 0xf597)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r9, 0x1, 0x6, 0x0, 0x0)

2.984572515s ago: executing program 35 (id=3597):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x3, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r4}, 0x8)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

0s ago: executing program 36 (id=3610):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380"], 0x38}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r4, &(0x7f0000000000)={0x10, @short}, 0x2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r5=>0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x54, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000855}, 0x8010)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r7], 0x64}}, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000440)={'wg2\x00', &(0x7f00000000c0)=@ethtool_eeprom={0xa, 0x407, 0x4}})
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1804000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r12, &(0x7f0000000780)}, 0x20)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r13, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010101, 0x4e20, 0x4, 0xa, 0x80012d58, 0x12d5c}}, 0x44)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r13, 0x0, 0x485, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x9, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}}, 0x0)

kernel console output (not intermixed with test programs):

5] syzkaller0: entered allmulticast mode
[  259.252046][   T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.262868][   T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.266187][   T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.278879][T15142] netlink: 'syz.3.2369': attribute type 10 has an invalid length.
[  259.280251][T15135] tipc: Resetting bearer <eth:syzkaller0>
[  259.316244][T15133] tipc: Resetting bearer <eth:syzkaller0>
[  259.336964][T15133] tipc: Disabling bearer <eth:syzkaller0>
[  260.270878][T15168] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.327317][T15173] netlink: 'syz.3.2378': attribute type 32 has an invalid length.
[  260.330448][T15173] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  260.539889][T15188] bond36: entered promiscuous mode
[  260.571431][T15194] batadv0: entered promiscuous mode
[  260.765456][T15218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.855178][T15219] tipc: Disabling bearer <eth:syzkaller0>
[  260.965852][T15238] __nla_validate_parse: 19 callbacks suppressed
[  260.965868][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'.
[  261.031157][T15239] veth0: entered promiscuous mode
[  261.050390][T15237] veth0: left promiscuous mode
[  261.119380][ T4177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.127351][ T4177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.195345][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'.
[  261.201941][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'.
[  261.210678][T15260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2397'.
[  261.216097][T15265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2399'.
[  261.216413][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2399'.
[  261.246916][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'.
[  261.249749][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'.
[  261.285814][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'.
[  261.291040][T15260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2397'.
[  261.298457][T15269] netlink: 'syz.2.2400': attribute type 4 has an invalid length.
[  261.374308][T15276] syzkaller1: entered promiscuous mode
[  261.379944][T15276] syzkaller1: entered allmulticast mode
[  261.482268][T15278] vlan1: entered promiscuous mode
[  261.484369][T15278] 0{X: entered promiscuous mode
[  261.491330][T15283] syzkaller1: entered promiscuous mode
[  261.498849][T15283] syzkaller1: entered allmulticast mode
[  261.528043][T15288] netlink: 'syz.3.2406': attribute type 32 has an invalid length.
[  261.538937][T15288] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  261.677704][T15297] tipc: Resetting bearer <eth:team0>
[  261.695843][T15297] vlan0: left promiscuous mode
[  261.719097][T15297] geneve5: left promiscuous mode
[  261.722076][T15297] geneve5: left allmulticast mode
[  261.729625][T15297] batman_adv: batadv0: Interface deactivated: ip6gretap4
[  261.769665][T15297] vlan1: left promiscuous mode
[  261.772997][T15297] 0{X: left promiscuous mode
[  261.775672][   T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.779291][   T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 34025 - 0
[  261.785444][   T12] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 58382 - 0
[  261.791485][   T12] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  261.799867][   T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.811908][   T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 34025 - 0
[  261.821909][   T12] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 58382 - 0
[  261.824825][   T12] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  261.827406][   T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.829974][   T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 34025 - 0
[  261.833514][   T12] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 58382 - 0
[  261.836950][   T12] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  261.840956][   T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.857460][   T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 34025 - 0
[  261.872478][   T12] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 58382 - 0
[  261.875826][   T12] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  261.971477][T15309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.975861][T15310] syzkaller0: entered promiscuous mode
[  261.978005][T15310] syzkaller0: entered allmulticast mode
[  261.996595][T15310] tipc: Resetting bearer <eth:syzkaller0>
[  262.022822][T15310] tipc: Disabling bearer <eth:syzkaller0>
[  262.040122][T15315] netlink: 'syz.4.2414': attribute type 10 has an invalid length.
[  262.043799][T15315] bond0: (slave wlan1): refused to change device type
[  262.294030][T15329] lo speed is unknown, defaulting to 1000
[  262.928087][T15378] macvtap0: entered promiscuous mode
[  262.930016][T15378] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode
[  262.941167][T15378] mac80211_hwsim hwsim37 wlan1: left promiscuous mode
[  263.031613][T15380] lo speed is unknown, defaulting to 1000
[  263.088744][T15383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.361152][T15390] lo speed is unknown, defaulting to 1000
[  263.427496][T15397] netlink: 'syz.3.2433': attribute type 10 has an invalid length.
[  263.742985][T15409] netlink: 'syz.2.2437': attribute type 1 has an invalid length.
[  263.745708][T15409] NCSI netlink: No device for ifindex 0
[  263.805005][T15406] syzkaller0: entered promiscuous mode
[  263.807018][T15406] syzkaller0: entered allmulticast mode
[  265.345848][T15418] tipc: Enabled bearer <udp:syz0>, priority 10
[  265.379077][T15418] 8021q: adding VLAN 0 to HW filter on device bond47
[  265.383686][T15418] team0: Port device bond47 added
[  265.527451][T15423] netlink: 'syz.3.2442': attribute type 39 has an invalid length.
[  265.677110][T15432] netlink: 'syz.3.2444': attribute type 1 has an invalid length.
[  265.746967][T15432] 8021q: adding VLAN 0 to HW filter on device bond26
[  265.827254][T15445] sch_tbf: peakrate 1474472280539587135 is lower than or equals to rate 5628977692805006585 !
[  265.921043][T15462] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.928020][T15462] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  265.931115][T15462] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  265.987553][T15469] __nla_validate_parse: 17 callbacks suppressed
[  265.987573][T15469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2452'.
[  266.010608][T15466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'.
[  266.014957][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'.
[  266.187486][T15466] lo speed is unknown, defaulting to 1000
[  266.275619][T15485] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  266.683938][T15507] IPv6: sit6: Disabled Multicast RS
[  266.691402][T15507] sit6: entered allmulticast mode
[  266.769907][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'.
[  266.792426][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'.
[  266.849966][T15518] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2462'.
[  266.971559][T15522] netlink: 'syz.3.2463': attribute type 1 has an invalid length.
[  267.000255][T15522] 8021q: adding VLAN 0 to HW filter on device bond27
[  267.234021][T15527] syzkaller0: entered allmulticast mode
[  267.240881][T15527] syzkaller0 (unregistering): left allmulticast mode
[  267.461507][T15540] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2466'.
[  267.540486][T15544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2468'.
[  267.763928][T15567] netlink: 'syz.4.2474': attribute type 1 has an invalid length.
[  267.768614][T15568] netlink: 'syz.4.2474': attribute type 1 has an invalid length.
[  267.800544][T15567] 8021q: adding VLAN 0 to HW filter on device bond37
[  267.843614][T15568] 8021q: adding VLAN 0 to HW filter on device bond38
[  267.866296][T15563] bond0 (unregistering): Released all slaves
[  267.889661][T15575] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2474'.
[  267.893988][T15567] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2474'.
[  267.975858][T15586] syz.3.2478 uses old SIOCAX25GETINFO
[  267.984534][T15586] vlan5: entered promiscuous mode
[  267.986624][T15586] bridge0: entered promiscuous mode
[  268.341004][ T5874] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.344158][ T5874] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.346939][ T5874] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.349941][ T5874] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.383998][T15614] 0{X: entered promiscuous mode
[  268.386871][T15614] 1{X: renamed from 30{X
[  268.390988][T15614] 1{X: left promiscuous mode
[  268.396693][T15614] 1{X: entered allmulticast mode
[  268.405552][T15614] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  268.507729][T15618] netlink: 'syz.3.2488': attribute type 10 has an invalid length.
[  268.725539][T15632] netlink: 'syz.3.2492': attribute type 1 has an invalid length.
[  268.920084][T15636] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.328479][T15660] netlink: 'syz.4.2498': attribute type 5 has an invalid length.
[  269.357216][T15662] 0{X: renamed from 31{X (while UP)
[  269.367893][T15662] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  269.444076][T15667] syzkaller1: entered promiscuous mode
[  269.446196][T15667] syzkaller1: entered allmulticast mode
[  269.815656][T15724] netlink: 'syz.2.2512': attribute type 1 has an invalid length.
[  270.017870][T15742] netlink: 'syz.4.2514': attribute type 6 has an invalid length.
[  270.116662][T15748] openvswitch: netlink: Flow key attr not present in new flow.
[  270.119816][T15748] openvswitch: netlink: Flow key attr not present in new flow.
[  270.124879][T15748] openvswitch: netlink: Flow key attr not present in new flow.
[  270.129421][T15748] openvswitch: netlink: Flow key attr not present in new flow.
[  270.135665][T15748] openvswitch: netlink: Flow key attr not present in new flow.
[  270.138120][T15748] openvswitch: netlink: Flow key attr not present in new flow.
[  270.140746][T15748] openvswitch: netlink: Flow key attr not present in new flow.
[  270.144276][T15748] openvswitch: netlink: Flow key attr not present in new flow.
[  270.201141][T15753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.220974][T15753] syzkaller0: entered promiscuous mode
[  270.223580][T15753] syzkaller0: entered allmulticast mode
[  270.226359][T15756] bridge0: port 1(erspan0) entered blocking state
[  270.228554][T15756] bridge0: port 1(erspan0) entered disabled state
[  270.230818][T15756] erspan0: entered allmulticast mode
[  270.234029][T15756] erspan0: left allmulticast mode
[  270.296345][T15753] tipc: Resetting bearer <eth:syzkaller0>
[  270.324914][T15759] bridge0: port 1(erspan0) entered blocking state
[  270.331046][T15759] bridge0: port 1(erspan0) entered disabled state
[  270.334519][T15759] erspan0: entered allmulticast mode
[  270.338205][T15759] erspan0: left allmulticast mode
[  270.348881][T15752] tipc: Resetting bearer <eth:syzkaller0>
[  270.365702][T15752] tipc: Disabling bearer <eth:syzkaller0>
[  270.376238][T15766] syzkaller0: entered promiscuous mode
[  270.388109][T15766] syzkaller0: entered allmulticast mode
[  270.456752][T15772] veth13: entered promiscuous mode
[  270.483698][T15774] netlink: 'syz.2.2523': attribute type 1 has an invalid length.
[  270.640132][T15786] netlink: 'syz.4.2526': attribute type 1 has an invalid length.
[  270.736906][T15790] team0: Port device bond47 removed
[  270.744481][T15796] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[  270.750860][T15796] bond29: (slave gretap5): Releasing active interface
[  270.759175][T15796] bond30: (slave bridge56): Releasing active interface
[  270.769704][T15796] netlink: 'syz.4.2528': attribute type 10 has an invalid length.
[  270.772632][T15796] mac80211_hwsim hwsim19 wlan1: left allmulticast mode
[  270.775236][T15796] bond0: (slave wlan1): refused to change device type
[  270.779329][T15796] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  270.786727][T15796] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  270.796140][T15798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.799631][T15798] syzkaller0: entered promiscuous mode
[  270.801958][T15798] syzkaller0: entered allmulticast mode
[  270.810783][T15797] tipc: Resetting bearer <eth:syzkaller0>
[  270.827996][T15797] tipc: Disabling bearer <eth:syzkaller0>
[  271.074977][T15809] pim6reg0: tun_chr_ioctl cmd 1074025677
[  271.077080][T15809] pim6reg0: linktype set to 768
[  271.164285][T15811] __nla_validate_parse: 57 callbacks suppressed
[  271.164304][T15811] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2534'.
[  271.170427][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'.
[  271.175117][T15811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2534'.
[  271.286774][T15813] lo speed is unknown, defaulting to 1000
[  271.537708][T15818] _Z`Ԁ@: entered promiscuous mode
[  271.586022][T15820] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2537'.
[  271.749875][T15833] netlink: 'syz.2.2542': attribute type 1 has an invalid length.
[  271.826451][T15839] netlink: 'syz.2.2544': attribute type 29 has an invalid length.
[  271.843081][T15839] netlink: 488 bytes leftover after parsing attributes in process `syz.2.2544'.
[  272.226026][T15871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2552'.
[  272.244211][T15867] geneve3: entered promiscuous mode
[  272.246062][T15867] geneve3: entered allmulticast mode
[  272.248884][ T5910] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 58896 - 0
[  272.251566][ T5910] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 34013 - 0
[  272.256361][ T5910] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 58896 - 0
[  272.259454][ T5910] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 34013 - 0
[  272.265759][ T5910] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 58896 - 0
[  272.269640][ T5910] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 34013 - 0
[  272.274616][ T5910] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 58896 - 0
[  272.277647][ T5910] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 34013 - 0
[  272.417646][T15882] lo speed is unknown, defaulting to 1000
[  272.428183][T15886] veth9: entered allmulticast mode
[  272.584737][T15890] macvtap0: entered allmulticast mode
[  272.586651][T15890] bridge0: entered allmulticast mode
[  272.594873][T15890] bridge0: port 1(macvtap0) entered blocking state
[  272.597794][T15890] bridge0: port 1(macvtap0) entered disabled state
[  272.611311][T15890] bridge0: left allmulticast mode
[  272.673404][T15893] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2559'.
[  272.676619][T15893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2559'.
[  272.727189][T15897] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  272.740799][T15899] team0: Mode changed to "broadcast"
[  272.819119][T15899] vlan0: entered promiscuous mode
[  272.821078][T15899] veth1: entered promiscuous mode
[  272.824850][T15899] tipc: Enabled bearer <eth:team0>, priority 0
[  273.005619][T15907] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2563'.
[  273.010656][T15907] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2563'.
[  273.566654][T15920] 8021q: adding VLAN 0 to HW filter on device bond40
[  273.574815][T15922] validate_nla: 3 callbacks suppressed
[  273.574830][T15922] netlink: 'syz.2.2567': attribute type 4 has an invalid length.
[  273.580406][T15922] netlink: 'syz.2.2567': attribute type 4 has an invalid length.
[  273.614767][    T9] lo speed is unknown, defaulting to 1000
[  273.616665][    T9] syz0: Port: 1 Link ACTIVE
[  273.618239][    T9] lo speed is unknown, defaulting to 1000
[  273.724946][T15935] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  273.727295][T15935] net_ratelimit: 26 callbacks suppressed
[  273.727306][T15935] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  273.789653][T15939] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.810918][T15944] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.835392][T15939] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.863268][T15945] netlink: 'syz.3.2572': attribute type 5 has an invalid length.
[  273.888178][T15945] geneve7: entered promiscuous mode
[  273.890235][T15945] geneve7: entered allmulticast mode
[  273.896256][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  273.899609][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  273.916444][T15939] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.920205][T15939] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  274.007421][T15939] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  274.011386][T15939] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  274.027985][T15950] netlink: 'syz.4.2576': attribute type 13 has an invalid length.
[  274.031513][T15950] gretap0: refused to change device tx_queue_len
[  274.034957][T15950] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  274.077716][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  274.080727][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  274.101096][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  274.103915][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  274.118948][ T5874] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.123214][ T5874] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  274.136397][ T5874] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  274.139890][ T5874] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  274.250192][T15962] netlink: 'syz.3.2580': attribute type 10 has an invalid length.
[  274.285267][T15963] lo speed is unknown, defaulting to 1000
[  274.435636][T15973] geneve8: entered promiscuous mode
[  274.438242][   T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  274.440812][   T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  274.458019][   T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  274.460986][   T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  274.713801][T15983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.716802][T15983] syzkaller0: entered promiscuous mode
[  274.718718][T15983] syzkaller0: entered allmulticast mode
[  274.740698][T15983] tipc: Resetting bearer <eth:syzkaller0>
[  274.745671][T15982] tipc: Resetting bearer <eth:syzkaller0>
[  274.758280][T15982] tipc: Disabling bearer <eth:syzkaller0>
[  276.206026][T16043] __nla_validate_parse: 16 callbacks suppressed
[  276.206045][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'.
[  276.301947][T16045] netlink: 'syz.4.2603': attribute type 10 has an invalid length.
[  276.339219][T16047] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.346718][T16047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2604'.
[  276.359634][T16047] macvtap0: entered promiscuous mode
[  276.361881][T16047] dummy0: entered promiscuous mode
[  276.364664][T16047] macvtap0: entered allmulticast mode
[  276.367248][T16047] dummy0: entered allmulticast mode
[  276.415689][T16049] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.586966][T16057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2608'.
[  276.678575][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2609'.
[  276.719938][T16061] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2610'.
[  276.850343][T16066] sctp: [Deprecated]: syz.4.2612 (pid 16066) Use of int in max_burst socket option.
[  276.850343][T16066] Use struct sctp_assoc_value instead
[  276.856842][T16067] sctp: [Deprecated]: syz.4.2612 (pid 16067) Use of int in max_burst socket option.
[  276.856842][T16067] Use struct sctp_assoc_value instead
[  276.996499][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2614'.
[  277.237411][T16085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2617'.
[  277.241175][T16085] openvswitch: netlink: Flow actions attr not present in new flow.
[  277.807679][T16091] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2620'.
[  278.449266][T16100] lo speed is unknown, defaulting to 1000
[  278.703991][T16109] team0: Refused to change device type
[  278.815396][T16115] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  279.065611][T16127] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  279.086923][T16127] syzkaller0: entered promiscuous mode
[  279.089076][T16127] syzkaller0: entered allmulticast mode
[  279.620222][T16137] netlink: 'syz.4.2631': attribute type 10 has an invalid length.
[  279.624423][T16137] netlink: 'syz.4.2631': attribute type 10 has an invalid length.
[  281.512652][T16175] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode
[  281.664802][T16182] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  281.668784][T16182] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  281.674616][T16182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.677854][T16182] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  281.680513][T16182] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  281.748158][T16186] netlink: 'syz.3.2642': attribute type 1 has an invalid length.
[  281.775916][T16188] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2643'.
[  281.779126][T16188] gretap0: entered promiscuous mode
[  281.783526][T16188] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2643'.
[  281.786413][T16188] 0{X: renamed from gretap0
[  281.790471][T16188] 0{X: left promiscuous mode
[  281.792753][T16188] 0{X: entered allmulticast mode
[  281.797059][T16188] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  281.804062][T16189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2642'.
[  281.809058][T16186] erspan0: entered allmulticast mode
[  281.848744][T16193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2644'.
[  281.888128][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'.
[  281.891063][T16195] netlink: 'syz.4.2646': attribute type 30 has an invalid length.
[  281.898651][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'.
[  281.898981][   T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  281.901544][T16195] netlink: 'syz.4.2646': attribute type 30 has an invalid length.
[  281.917375][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'.
[  281.920491][   T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  281.926080][   T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  281.929049][   T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  282.968827][  T300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.971432][  T300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.068468][T16215] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2651'.
[  283.081503][T16215] netlink: 'syz.4.2651': attribute type 10 has an invalid length.
[  283.088412][T16215] bond0: (slave wlan1): refused to change device type
[  283.428589][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2656'.
[  283.441798][T16237] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  283.459591][T16237] batman_adv: batadv0: Removing interface: ip6gretap4
[  283.479489][T16237] batadv2: left allmulticast mode
[  283.481589][T16237] batadv2: left promiscuous mode
[  283.489041][T16237] bridge0: port 1(batadv2) entered disabled state
[  283.505307][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2656'.
[  283.513655][T16237] bond23: (slave geneve6): Releasing active interface
[  283.591741][T16237] netlink: 'syz.3.2657': attribute type 10 has an invalid length.
[  283.609647][T16237] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  283.615449][T16237] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  283.657500][T16243] lo speed is unknown, defaulting to 1000
[  284.219603][T16249] netlink: 'syz.4.2659': attribute type 1 has an invalid length.
[  284.239749][T16249] 8021q: adding VLAN 0 to HW filter on device bond41
[  284.254103][T16249] 8021q: adding VLAN 0 to HW filter on device bond41
[  284.256862][T16249] bond41: (slave vcan0): The slave device specified does not support setting the MAC address
[  284.261075][T16249] bond41: (slave vcan0): Error -95 calling set_mac_address
[  284.307471][T16249] macvlan0: entered promiscuous mode
[  284.309787][T16249] macvlan0: entered allmulticast mode
[  284.316686][T16249] bond41: entered promiscuous mode
[  284.319129][T16249] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  284.325756][T16249] bond41: left promiscuous mode
[  284.440803][T16261] lo speed is unknown, defaulting to 1000
[  284.446438][T16262] netlink: 'syz.3.2661': attribute type 7 has an invalid length.
[  284.449033][T16262] netlink: 'syz.3.2661': attribute type 8 has an invalid length.
[  284.453813][T16246] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  284.757108][T16273] lo speed is unknown, defaulting to 1000
[  284.767639][T16282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.829531][T16284] Bluetooth: MGMT ver 1.23
[  285.239556][T16296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.344953][T16296] tipc: Disabling bearer <eth:syzkaller0>
[  285.546587][T16327] lo speed is unknown, defaulting to 1000
[  285.866949][T16355] netlink: 'syz.2.2674': attribute type 1 has an invalid length.
[  286.475338][T16374] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  286.774724][T16395] netlink: 'syz.3.2682': attribute type 1 has an invalid length.
[  286.814852][T16395] 8021q: adding VLAN 0 to HW filter on device bond28
[  286.832510][T16396] __nla_validate_parse: 9 callbacks suppressed
[  286.832534][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2682'.
[  286.838633][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2682'.
[  287.036666][T16406] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2685'.
[  287.158354][T16408] macsec0: entered promiscuous mode
[  287.160214][T16408] macsec0: entered allmulticast mode
[  287.302879][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'.
[  287.305826][T16428] netlink: 'syz.4.2691': attribute type 12 has an invalid length.
[  287.308440][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'.
[  287.311424][T16428] netlink: 'syz.4.2691': attribute type 12 has an invalid length.
[  287.361258][T16436] netlink: 'syz.3.2693': attribute type 4 has an invalid length.
[  287.378150][T16436] netlink: 'syz.3.2693': attribute type 4 has an invalid length.
[  287.457880][T16440] bpq0: left promiscuous mode
[  287.520090][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'.
[  287.544136][T16453] bpq0: entered promiscuous mode
[  287.552248][T16453] bpq0: entered allmulticast mode
[  287.571142][T16453] bpq0: left promiscuous mode
[  287.573669][T16453] bpq0: left allmulticast mode
[  287.695819][T16463] sctp: [Deprecated]: syz.3.2700 (pid 16463) Use of struct sctp_assoc_value in delayed_ack socket option.
[  287.695819][T16463] Use struct sctp_sack_info instead
[  287.715412][T16463] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  287.721356][T16463] CPU: 1 UID: 0 PID: 16463 Comm: syz.3.2700 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  287.721373][T16463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.721380][T16463] Call Trace:
[  287.721394][T16463]  <TASK>
[  287.721404][T16463]  dump_stack_lvl+0x189/0x250
[  287.721425][T16463]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.721436][T16463]  ? __pfx__printk+0x10/0x10
[  287.721451][T16463]  ? kernfs_path_from_node+0x2f/0x290
[  287.721462][T16463]  ? kernfs_path_from_node+0x250/0x290
[  287.721473][T16463]  ? kernfs_path_from_node+0x2f/0x290
[  287.721491][T16463]  sysfs_warn_dup+0x8e/0xa0
[  287.721507][T16463]  sysfs_do_create_link_sd+0xc0/0x110
[  287.721524][T16463]  device_add_class_symlinks+0x1cf/0x240
[  287.721542][T16463]  device_add+0x475/0xb50
[  287.721556][T16463]  wiphy_register+0x1ba6/0x28d0
[  287.721588][T16463]  ? __pfx_wiphy_register+0x10/0x10
[  287.721606][T16463]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  287.721633][T16463]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  287.721658][T16463]  ieee80211_register_hw+0x3425/0x4080
[  287.721686][T16463]  ? ieee80211_register_hw+0x1421/0x4080
[  287.721707][T16463]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  287.721722][T16463]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  287.721745][T16463]  ? __hrtimer_setup+0x187/0x210
[  287.721758][T16463]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  287.721783][T16463]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  287.721821][T16463]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  287.721837][T16463]  ? trace_kmalloc+0x1f/0xd0
[  287.721853][T16463]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  287.721872][T16463]  ? kstrndup+0xbf/0x160
[  287.721924][T16463]  hwsim_new_radio_nl+0xea4/0x1b10
[  287.721945][T16463]  ? __pfx___nla_validate_parse+0x10/0x10
[  287.721993][T16463]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  287.722013][T16463]  ? __nla_parse+0x40/0x60
[  287.722028][T16463]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  287.722043][T16463]  genl_family_rcv_msg_doit+0x215/0x300
[  287.722056][T16463]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  287.722072][T16463]  ? bpf_lsm_capable+0x9/0x20
[  287.722084][T16463]  ? security_capable+0x7e/0x2e0
[  287.722115][T16463]  genl_rcv_msg+0x60e/0x790
[  287.722129][T16463]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.722137][T16463]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  287.722155][T16463]  netlink_rcv_skb+0x208/0x470
[  287.722167][T16463]  ? __lock_acquire+0xab9/0xd20
[  287.722179][T16463]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.722188][T16463]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.722208][T16463]  ? down_read+0x1ad/0x2e0
[  287.722217][T16463]  genl_rcv+0x28/0x40
[  287.722225][T16463]  netlink_unicast+0x82f/0x9e0
[  287.722240][T16463]  ? __pfx_netlink_unicast+0x10/0x10
[  287.722251][T16463]  ? netlink_sendmsg+0x642/0xb30
[  287.722260][T16463]  ? skb_put+0x11b/0x210
[  287.722270][T16463]  netlink_sendmsg+0x805/0xb30
[  287.722287][T16463]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.722301][T16463]  ? aa_sock_msg_perm+0xf1/0x1d0
[  287.722314][T16463]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.722323][T16463]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.722335][T16463]  __sock_sendmsg+0x21c/0x270
[  287.722347][T16463]  ____sys_sendmsg+0x505/0x830
[  287.722358][T16463]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.722371][T16463]  ? import_iovec+0x74/0xa0
[  287.722382][T16463]  ___sys_sendmsg+0x21f/0x2a0
[  287.722391][T16463]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.722418][T16463]  ? __fget_files+0x2a/0x420
[  287.722426][T16463]  ? __fget_files+0x3a0/0x420
[  287.722438][T16463]  __x64_sys_sendmsg+0x19b/0x260
[  287.722447][T16463]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  287.722461][T16463]  ? rcu_is_watching+0x15/0xb0
[  287.722473][T16463]  ? do_syscall_64+0xbe/0x3b0
[  287.722487][T16463]  do_syscall_64+0xfa/0x3b0
[  287.722497][T16463]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.722507][T16463]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.722515][T16463]  ? exc_page_fault+0x9f/0xf0
[  287.722526][T16463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.722534][T16463] RIP: 0033:0x7fdd2038ebe9
[  287.722544][T16463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.722551][T16463] RSP: 002b:00007fdd21144038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.722561][T16463] RAX: ffffffffffffffda RBX: 00007fdd205b5fa0 RCX: 00007fdd2038ebe9
[  287.722567][T16463] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  287.722573][T16463] RBP: 00007fdd20411e19 R08: 0000000000000000 R09: 0000000000000000
[  287.722578][T16463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.722583][T16463] R13: 00007fdd205b6038 R14: 00007fdd205b5fa0 R15: 00007ffc6b16d098
[  287.722598][T16463]  </TASK>
[  287.966453][T16468] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  287.970692][T16468] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  288.039202][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2703'.
[  288.114128][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2702'.
[  288.366087][T16490] lo speed is unknown, defaulting to 1000
[  288.414066][T16492] pim6reg1: entered promiscuous mode
[  288.415981][T16492] pim6reg1: entered allmulticast mode
[  288.795575][T16512] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[  288.828955][T16512] netlink: 'syz.4.2711': attribute type 10 has an invalid length.
[  288.832680][T16512] mac80211_hwsim hwsim19 wlan1: left allmulticast mode
[  288.835695][T16512] bond0: (slave wlan1): refused to change device type
[  288.853640][T16512] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  288.856751][T16512] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  289.043304][T16520] netlink: 'syz.3.2713': attribute type 1 has an invalid length.
[  289.069316][T16520] bond29: (slave bridge49): making interface the new active one
[  289.074687][T16520] bond29: (slave bridge49): Enslaving as an active interface with an up link
[  289.304465][T16523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2714'.
[  289.308038][T16523] netlink: 'syz.2.2714': attribute type 7 has an invalid length.
[  289.310812][T16523] netlink: 'syz.2.2714': attribute type 8 has an invalid length.
[  289.313708][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2714'.
[  289.997282][T16566] syzkaller1: entered promiscuous mode
[  289.999532][T16566] syzkaller1: entered allmulticast mode
[  290.309904][T16582] veth1_to_bond: entered allmulticast mode
[  290.315114][T16581] veth1_to_bond: left allmulticast mode
[  290.560708][T16599] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  290.667298][T16600] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  290.670434][T16600] macsec0: entered promiscuous mode
[  290.673427][T16600] macsec0: entered allmulticast mode
[  290.675564][T16600] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  290.813993][T16602] bond29: (slave bridge49): Releasing active interface
[  291.118892][T16616] : renamed from bond_slave_0
[  291.217942][T16625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.221018][T16625] syzkaller0: entered promiscuous mode
[  291.223049][T16625] syzkaller0: entered allmulticast mode
[  291.251317][T16627] syz0: rxe_newlink: already configured on lo
[  291.251398][T16628] syz0: rxe_newlink: already configured on lo
[  291.254379][T16625] tipc: Resetting bearer <eth:syzkaller0>
[  291.266351][T16627] 1{X: left allmulticast mode
[  291.277200][T16627] 8021q: adding VLAN 0 to HW filter on device team0
[  291.279541][T16627] tipc: Resetting bearer <eth:team0>
[  291.281349][T16627] tipc: Resetting bearer <eth:team0>
[  291.285440][T16627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.291777][T16624] tipc: Resetting bearer <eth:syzkaller0>
[  291.321445][T16624] tipc: Disabling bearer <eth:syzkaller0>
[  291.338970][T16632] lo speed is unknown, defaulting to 1000
[  291.480946][T16644] tipc: Failed to remove unknown binding: 66,1,1/3049036342:2138636073/2138636075
[  291.559874][T16644] pim6reg1: entered promiscuous mode
[  291.562486][T16644] pim6reg1: entered allmulticast mode
[  291.819223][T16656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.848015][T16649] tipc: Disabling bearer <eth:syzkaller0>
[  291.869967][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.873565][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.918087][T16665] validate_nla: 6 callbacks suppressed
[  291.918106][T16665] netlink: 'syz.2.2760': attribute type 6 has an invalid length.
[  291.936180][T16665] netlink: 'syz.2.2760': attribute type 6 has an invalid length.
[  291.956786][T16665] __nla_validate_parse: 21 callbacks suppressed
[  291.956807][T16665] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2760'.
[  291.991421][T16667] netlink: 'syz.3.2761': attribute type 4 has an invalid length.
[  292.003232][T16667] netlink: 'syz.3.2761': attribute type 4 has an invalid length.
[  292.034119][T16671] netlink: 'syz.2.2763': attribute type 10 has an invalid length.
[  292.037265][T16671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2763'.
[  292.103816][T16673] netlink: 'syz.3.2764': attribute type 10 has an invalid length.
[  292.114240][T16679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2766'.
[  292.165877][T16684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2768'.
[  292.195090][T16686] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2769'.
[  292.197974][T16686] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  292.225839][T16688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.231109][T16681] tipc: Disabling bearer <eth:syzkaller0>
[  292.271743][T16690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2771'.
[  292.313935][T16698] netlink: 'syz.2.2772': attribute type 6 has an invalid length.
[  292.323100][T16699] netlink: 'syz.4.2773': attribute type 11 has an invalid length.
[  292.388322][T16703] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2775'.
[  292.393938][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'.
[  292.400930][T16703] bond0: entered promiscuous mode
[  292.404358][T16703] bond0: left promiscuous mode
[  292.420060][T16704] lo speed is unknown, defaulting to 1000
[  292.742702][T16727] pim6reg9: entered allmulticast mode
[  293.117580][T16731] bond0: default FDB implementation only supports local addresses
[  293.167090][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2780'.
[  293.188559][T16739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.289507][T16744] netlink: zone id is out of range
[  293.291345][T16744] netlink: zone id is out of range
[  293.293345][T16744] netlink: zone id is out of range
[  293.295050][T16744] netlink: zone id is out of range
[  293.296759][T16744] netlink: zone id is out of range
[  293.298503][T16744] netlink: zone id is out of range
[  293.307170][T16737] tipc: Disabling bearer <eth:syzkaller0>
[  293.309702][T16744] netlink: zone id is out of range
[  293.444572][T16725] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  293.492448][T16752] netlink: 'syz.2.2785': attribute type 7 has an invalid length.
[  293.521706][T16748] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.669611][T16775] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  293.684835][T16778] tipc: Resetting bearer <eth:team0>
[  293.690188][T16777] tipc: Resetting bearer <eth:team0>
[  293.704537][T16781] netlink: 'syz.3.2791': attribute type 29 has an invalid length.
[  293.759765][T16790] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2790'.
[  293.765224][T16781] netlink: 'syz.3.2791': attribute type 29 has an invalid length.
[  293.963780][T16807] 8021q: adding VLAN 0 to HW filter on device bond42
[  293.999106][T16807] 8021q: adding VLAN 0 to HW filter on device bond42
[  294.003981][T16807] bond42: (slave vxcan1): The slave device specified does not support setting the MAC address
[  294.008296][T16807] bond42: (slave vxcan1): Error -95 calling set_mac_address
[  294.037221][T16809] veth11: entered promiscuous mode
[  294.040763][T16809] erspan0: entered allmulticast mode
[  294.167891][T16813] 8021q: adding VLAN 0 to HW filter on device bond44
[  294.174495][T16813] bond43: (slave bond44): making interface the new active one
[  294.178545][T16813] bond43: (slave bond44): Enslaving as an active interface with an up link
[  294.194884][T16813] bond43: (slave gretap0): Enslaving as a backup interface with an up link
[  294.203764][T16813] 8021q: adding VLAN 0 to HW filter on device bond43
[  294.327718][T16822] lo speed is unknown, defaulting to 1000
[  294.703353][T16838] nbd: must specify at least one socket
[  294.854368][T16844] bond43: (slave bond44): Releasing backup interface
[  294.856714][T16844] bond43: (slave bond44): the permanent HWaddr of slave - 86:3a:70:4c:51:45 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  294.869155][T16844] bond43: (slave gretap0): making interface the new active one
[  294.887531][T16844] bond43: (slave gretap0): Releasing backup interface
[  294.935613][T16847] tipc: Resetting bearer <eth:team0>
[  295.049572][T16852] vlan0: entered promiscuous mode
[  295.051411][T16852] bond26: entered promiscuous mode
[  295.053898][T16852] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  295.251685][T16862] dummy0: entered promiscuous mode
[  295.255657][T16862] dummy0: entered allmulticast mode
[  295.258842][T16861] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  295.429375][T16874] pim6reg: entered allmulticast mode
[  295.433073][T16874] pim6reg: left allmulticast mode
[  295.560735][T16880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.566838][T16880] tipc: Resetting bearer <eth:syzkaller0>
[  295.711228][T16891] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.716975][T16891] syzkaller0: entered promiscuous mode
[  295.718788][T16891] syzkaller0: entered allmulticast mode
[  295.882881][T16907] erspan0: left allmulticast mode
[  296.587518][T16953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.647328][T16953] syzkaller0: entered promiscuous mode
[  296.649486][T16953] syzkaller0: entered allmulticast mode
[  296.665454][T16953] tipc: Resetting bearer <eth:syzkaller0>
[  296.667388][T16953] syzkaller0: tun_net_xmit 90
[  296.671265][T16952] tipc: Resetting bearer <eth:syzkaller0>
[  296.691706][T16952] tipc: Disabling bearer <eth:syzkaller0>
[  297.038045][T16980] net_ratelimit: 20 callbacks suppressed
[  297.038091][T16980] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  297.108540][T16992] __nla_validate_parse: 33 callbacks suppressed
[  297.108556][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2843'.
[  297.132824][T16992] macvlan0: entered promiscuous mode
[  297.135024][T16992] macvlan0: entered allmulticast mode
[  297.137998][T16992] bond30: (slave macvlan0): Opening slave failed
[  297.261626][T16997] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  297.293311][T17002] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2846'.
[  297.382886][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2849'.
[  297.409226][T17012] validate_nla: 89 callbacks suppressed
[  297.409240][T17012] netlink: 'syz.4.2850': attribute type 10 has an invalid length.
[  297.428016][T17012] bond0: (slave wlan1): refused to change device type
[  297.433017][T17012] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  297.437138][T17012] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  297.519717][T17019] netlink: 8872 bytes leftover after parsing attributes in process `syz.3.2853'.
[  297.528009][T17019] erspan0: entered promiscuous mode
[  297.633245][T17021] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  297.879770][T17036] netlink: 'syz.2.2857': attribute type 4 has an invalid length.
[  297.888563][ T5877] lo speed is unknown, defaulting to 1000
[  297.891550][ T5877] syz0: Port: 1 Link DOWN
[  297.896229][ T5877] lo speed is unknown, defaulting to 1000
[  298.243007][T17041] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2859'.
[  298.247769][T17041] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2859'.
[  298.347712][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2860'.
[  298.512522][ T6876] wlan0: Trigger new scan to find an IBSS to join
[  298.664849][T17055] netlink: 'syz.4.2863': attribute type 1 has an invalid length.
[  298.693544][T17055] 8021q: adding VLAN 0 to HW filter on device bond47
[  298.719880][T17055] 8021q: adding VLAN 0 to HW filter on device bond47
[  298.723320][T17055] bond47: (slave vxcan1): The slave device specified does not support setting the MAC address
[  298.729038][T17055] bond47: (slave vxcan1): Error -95 calling set_mac_address
[  298.783521][T17059] veth13: entered promiscuous mode
[  298.789200][T17059] bond47: (slave veth13): Enslaving as an active interface with a down link
[  298.795522][T17058] syzkaller1: entered promiscuous mode
[  298.800599][T17058] syzkaller1: entered allmulticast mode
[  298.974599][T17075] netlink: 'syz.4.2868': attribute type 39 has an invalid length.
[  299.099646][T17081] tipc: Resetting bearer <eth:team0>
[  299.122540][T17081] tipc: Resetting bearer <eth:team0>
[  299.125136][T17081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  299.130128][ T5877] lo speed is unknown, defaulting to 1000
[  299.130213][T17085] mac80211_hwsim hwsim34 wlan1: left allmulticast mode
[  299.133243][ T5877] syz0: Port: 1 Link ACTIVE
[  299.137709][ T5877] lo speed is unknown, defaulting to 1000
[  299.200004][T17096] netlink: 'syz.3.2872': attribute type 10 has an invalid length.
[  299.244606][T17099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2875'.
[  299.285400][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2875'.
[  299.288409][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2875'.
[  299.420903][T17110] macsec2: entered promiscuous mode
[  299.425282][T17110] macsec2: entered allmulticast mode
[  299.446504][T17113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  299.451798][T17120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  299.705633][T17140] netlink: 'syz.2.2883': attribute type 7 has an invalid length.
[  299.709805][T17140] netlink: 'syz.2.2883': attribute type 8 has an invalid length.
[  299.937147][T17150] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  300.181296][T17152] lo speed is unknown, defaulting to 1000
[  300.331140][T17160] pim6reg1: entered promiscuous mode
[  300.335880][T17160] pim6reg1: entered allmulticast mode
[  300.440306][T17160] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  300.452655][T17160] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  300.508951][T17160] bond48 (unregistering): Released all slaves
[  300.669726][T17169] netlink: 'syz.4.2890': attribute type 32 has an invalid length.
[  300.677088][T17169] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  300.700528][T17171] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.787938][T17175] netlink: 'syz.3.2892': attribute type 1 has an invalid length.
[  300.946780][T17199] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  301.003370][T17203] tipc: Resetting bearer <eth:team0>
[  301.019097][T17203] tipc: Resetting bearer <eth:team0>
[  301.135620][T17209] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.138856][T17209] syzkaller0: left promiscuous mode
[  301.140813][T17209] syzkaller0: left allmulticast mode
[  301.291598][T17222] tipc: Resetting bearer <eth:team0>
[  301.298823][T17222] bridge_slave_0: left promiscuous mode
[  301.318346][T17222] vlan0: left promiscuous mode
[  301.320353][T17222] veth1: left promiscuous mode
[  301.327199][T17222] bond41: left promiscuous mode
[  301.337044][T17222] mac80211_hwsim hwsim35 wlan0: left promiscuous mode
[  301.350931][T17222] veth9: left allmulticast mode
[  301.367488][ T5877] lo speed is unknown, defaulting to 1000
[  301.370018][ T5877] syz0: Port: 1 Link DOWN
[  301.371701][ T5877] lo speed is unknown, defaulting to 1000
[  301.818072][T17201] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  301.927436][T17242] 8021q: VLANs not supported on ip6tnl0
[  302.176763][T17266] __nla_validate_parse: 24 callbacks suppressed
[  302.176779][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2918'.
[  302.202209][T17268] netlink: 'syz.3.2919': attribute type 13 has an invalid length.
[  302.210225][T17266] bridge63: port 1(veth17) entered blocking state
[  302.216380][T17266] bridge63: port 1(veth17) entered disabled state
[  302.219086][T17266] veth17: entered allmulticast mode
[  302.229067][T17266] veth17: entered promiscuous mode
[  302.234933][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'.
[  302.247774][T17266] bridge63: port 2(veth0_to_bond) entered blocking state
[  302.250851][T17266] bridge63: port 2(veth0_to_bond) entered disabled state
[  302.257455][T17266] veth0_to_bond: entered allmulticast mode
[  302.261482][T17266] veth0_to_bond: entered promiscuous mode
[  302.267461][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2917'.
[  302.273796][T17273] : entered promiscuous mode
[  302.280986][T17266] vlan1: entered allmulticast mode
[  302.285560][T17266] veth1: entered allmulticast mode
[  302.287400][T17266] bridge63: port 3(vlan1) entered blocking state
[  302.289545][T17266] bridge63: port 3(vlan1) entered disabled state
[  302.296186][T17266] vlan1: entered promiscuous mode
[  302.298623][T17266] veth1: entered promiscuous mode
[  302.409713][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2923'.
[  302.416104][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2924'.
[  302.448108][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2924'.
[  302.461139][T17282] macvlan0: entered promiscuous mode
[  302.463607][T17282] macvlan0: entered allmulticast mode
[  302.465972][T17282] bond32: (slave macvlan0): Opening slave failed
[  302.486431][T17283] validate_nla: 2 callbacks suppressed
[  302.486443][T17283] netlink: 'syz.4.2924': attribute type 1 has an invalid length.
[  302.992748][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[  303.026839][T17303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2928'.
[  303.145357][T17305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2928'.
[  304.068993][T17296] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.072601][T17297] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  304.075079][T17297] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  304.119279][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2930'.
[  304.133612][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2930'.
[  304.165010][T17316] netlink: 'syz.3.2931': attribute type 1 has an invalid length.
[  304.234313][T17327] netlink: 'syz.4.2934': attribute type 2 has an invalid length.
[  304.236540][T17329] netlink: 'syz.3.2935': attribute type 1 has an invalid length.
[  304.260940][T17327] 0{X: left allmulticast mode
[  304.272667][T17327] erspan0: left allmulticast mode
[  304.289509][T17327] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.293545][T17327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  304.333234][T17329] 8021q: adding VLAN 0 to HW filter on device bond34
[  304.339152][T17329] bond33: (slave bond34): making interface the new active one
[  304.349942][T17329] bond33: (slave bond34): Enslaving as an active interface with an up link
[  304.369640][T17331] 8021q: adding VLAN 0 to HW filter on device bond33
[  304.468267][T17341] 8021q: adding VLAN 0 to HW filter on device bond35
[  304.491854][T17341] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  304.497510][T17341] bond35: (slave macvlan0): Enslaving as a backup interface with a down link
[  304.545587][T17354] netlink: 'syz.3.2940': attribute type 10 has an invalid length.
[  304.548974][T17354] netlink: 'syz.3.2940': attribute type 10 has an invalid length.
[  304.669030][T17368] batadv0 (unregistering): left promiscuous mode
[  304.681249][T17367] netlink: 'syz.4.2943': attribute type 1 has an invalid length.
[  304.786003][T17379] netlink: 'syz.3.2948': attribute type 10 has an invalid length.
[  304.789759][T17379] dummy0: left promiscuous mode
[  304.791418][T17379] dummy0: left allmulticast mode
[  304.799848][T17379] team0: Port device dummy0 added
[  304.808880][T17379] ip6_vti0: mtu greater than device maximum
[  304.840726][T17381] netlink: 'syz.2.2949': attribute type 6 has an invalid length.
[  304.847340][T17381] netlink: 'syz.2.2949': attribute type 5 has an invalid length.
[  304.925637][T17386] ip6gretap6: entered promiscuous mode
[  304.965265][T17390] 8021q: adding VLAN 0 to HW filter on device bond51
[  305.014227][T17396] syzkaller0: entered promiscuous mode
[  305.018538][T17396] syzkaller0: entered allmulticast mode
[  305.082731][T17401] team0: entered promiscuous mode
[  305.084810][T17401] dummy0: entered promiscuous mode
[  305.094454][T17399] team0: left promiscuous mode
[  305.098025][T17399] dummy0: left promiscuous mode
[  305.136802][T17400] lo speed is unknown, defaulting to 1000
[  305.155704][T17403] 0{X: left allmulticast mode
[  305.220261][T17403] 8021q: adding VLAN 0 to HW filter on device team0
[  305.225180][T17403] tipc: Resetting bearer <eth:team0>
[  305.228295][T17403] tipc: Resetting bearer <eth:team0>
[  305.234601][T17403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  305.688992][T17416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  305.869629][T17427] k*]: entered promiscuous mode
[  306.076426][T17431] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[  306.097835][T17431] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  306.101584][T17431] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  306.205864][T17433] vlan5: entered promiscuous mode
[  306.208037][T17433] bond0: entered promiscuous mode
[  306.209819][T17433] vlan5: entered allmulticast mode
[  306.211445][T17433] bond0: entered allmulticast mode
[  306.245147][T17437] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  306.795741][T17462] pim6reg1: entered promiscuous mode
[  306.798143][T17462] pim6reg1: entered allmulticast mode
[  307.506215][T17485] validate_nla: 9 callbacks suppressed
[  307.506227][T17485] netlink: 'syz.2.2980': attribute type 1 has an invalid length.
[  307.527962][T17485] 8021q: adding VLAN 0 to HW filter on device bond50
[  307.594948][T17490] __nla_validate_parse: 22 callbacks suppressed
[  307.594965][T17490] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2982'.
[  307.611320][T17490] netlink: 'syz.2.2982': attribute type 10 has an invalid length.
[  307.657410][T17490] netlink: 'syz.2.2982': attribute type 10 has an invalid length.
[  307.660192][T17490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2982'.
[  307.703957][T17496] netlink: 'syz.4.2983': attribute type 1 has an invalid length.
[  307.721874][T17496] 8021q: adding VLAN 0 to HW filter on device bond52
[  307.739598][T17496] 8021q: adding VLAN 0 to HW filter on device bond52
[  307.742540][T17496] bond52: (slave vxcan5): The slave device specified does not support setting the MAC address
[  307.746836][T17496] bond52: (slave vxcan5): Error -95 calling set_mac_address
[  307.757597][T17495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2984'.
[  307.802972][T17501] veth19: entered promiscuous mode
[  307.836878][T17496] erspan0: entered allmulticast mode
[  307.936710][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2986'.
[  307.980357][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'.
[  307.985406][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2989'.
[  308.003347][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2991'.
[  308.138754][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2996'.
[  308.188978][T17548] netlink: 'syz.4.2997': attribute type 1 has an invalid length.
[  308.230130][T17548] 8021q: adding VLAN 0 to HW filter on device bond53
[  308.293109][T17548] vlan4: entered promiscuous mode
[  308.294753][T17548] bond53: entered promiscuous mode
[  308.296721][T17548] vlan4: entered allmulticast mode
[  308.298357][T17548] bond53: entered allmulticast mode
[  308.327099][T17563] netlink: ct family unspecified
[  308.328873][T17563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.344911][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'.
[  308.550773][T17571] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  308.558614][T17571] tipc: Resetting bearer <eth:team0>
[  308.564172][T17571] team0: Port device dummy0 removed
[  308.569688][T17571] bond33: (slave bond34): Releasing backup interface
[  308.575836][T17571] bond35: (slave macvlan0): Releasing backup interface
[  308.603470][T17571] netlink: 'syz.3.3003': attribute type 10 has an invalid length.
[  308.609920][T17571] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  308.614126][T17571] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  309.299349][T17575] lo speed is unknown, defaulting to 1000
[  309.472656][T17580] netlink: 'syz.2.3006': attribute type 1 has an invalid length.
[  309.558082][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3005'.
[  309.678991][T17587] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  309.682889][T17585] netlink: 'syz.2.3007': attribute type 9 has an invalid length.
[  309.874438][T17597] netlink: 'syz.2.3010': attribute type 1 has an invalid length.
[  309.890824][T17597] 8021q: adding VLAN 0 to HW filter on device bond51
[  310.146712][T17608] netlink: 'syz.2.3014': attribute type 4 has an invalid length.
[  310.290692][T17616] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.294034][T17616] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  310.298282][T17616] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  310.358860][T17616] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.363298][T17616] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  310.367275][T17616] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  310.400662][T17616] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.404324][T17616] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  310.407544][T17616] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  310.447885][T17616] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.450976][T17616] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  310.465599][T17616] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  310.515874][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  310.520411][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.523204][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  310.525799][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  310.528481][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.531278][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  310.549091][ T5694] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  310.555773][ T5694] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.562733][ T5694] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  310.571691][ T5694] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  310.580706][ T5694] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.584493][ T5694] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  310.658911][T17631] openvswitch: netlink: IP tunnel TTL not specified.
[  310.777349][T17643] macvlan0: entered allmulticast mode
[  311.433923][T17658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.437217][T17658] syzkaller0: entered promiscuous mode
[  311.439521][T17658] syzkaller0: entered allmulticast mode
[  311.466154][T17658] tipc: Resetting bearer <eth:syzkaller0>
[  311.469894][T17657] tipc: Resetting bearer <eth:syzkaller0>
[  311.480533][T17657] tipc: Disabling bearer <eth:syzkaller0>
[  311.686705][T17662] block nbd2: shutting down sockets
[  311.711524][T17663] ipvlan0: entered promiscuous mode
[  311.713777][T17663] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  311.775987][T17668] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.865658][T17673] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.156533][T17685] bridge0: failed insert local address into bridge forwarding table
[  312.438189][T17695] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  312.646785][T17702] __nla_validate_parse: 20 callbacks suppressed
[  312.646796][T17702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3040'.
[  312.684309][T17704] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3041'.
[  312.687305][T17704] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3041'.
[  312.690453][T17704] pimreg: left allmulticast mode
[  312.736248][T17707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3042'.
[  312.759699][T17704] rdma_rxe: rxe_newlink: failed to add lo
[  312.759700][T17705] rdma_rxe: rxe_newlink: failed to add lo
[  312.773087][T17704] erspan0: left allmulticast mode
[  312.786316][T17704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  312.824697][T17717] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3045'.
[  312.918472][T17728] IPVS: Error connecting to the multicast addr
[  312.921086][T17729] IPVS: Error connecting to the multicast addr
[  312.925503][T17728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3046'.
[  312.933147][T17728] validate_nla: 8 callbacks suppressed
[  312.933157][T17728] netlink: 'syz.4.3046': attribute type 16 has an invalid length.
[  312.937963][T17728] netlink: 'syz.4.3046': attribute type 17 has an invalid length.
[  312.941346][T17728] netlink: 'syz.4.3046': attribute type 5 has an invalid length.
[  312.957199][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'.
[  312.973721][T17731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3048'.
[  313.061197][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3049'.
[  313.065145][T17733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3049'.
[  313.102827][T17735] netlink: 'syz.2.3050': attribute type 11 has an invalid length.
[  313.767027][T17748] 8021q: adding VLAN 0 to HW filter on device bond54
[  314.280711][T17764] netlink: 'syz.4.3060': attribute type 10 has an invalid length.
[  314.283542][T17764] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  314.347583][T17767] tipc: Resetting bearer <eth:team0>
[  314.459270][T17775] netlink: 'syz.3.3065': attribute type 4 has an invalid length.
[  314.462965][T17777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.596001][T17781] netlink: 'syz.2.3066': attribute type 10 has an invalid length.
[  314.728655][T17786] lo speed is unknown, defaulting to 1000
[  314.801956][T17788] 8021q: adding VLAN 0 to HW filter on device bond52
[  314.978883][T17794] netlink: 'syz.2.3069': attribute type 1 has an invalid length.
[  315.008196][T17794] 8021q: adding VLAN 0 to HW filter on device bond53
[  315.039635][T17794] 8021q: adding VLAN 0 to HW filter on device bond53
[  315.046600][T17794] bond53: (slave vxcan1): The slave device specified does not support setting the MAC address
[  315.051128][T17794] bond53: (slave vxcan1): Error -95 calling set_mac_address
[  315.377482][T17803] netlink: 'syz.3.3072': attribute type 13 has an invalid length.
[  315.380662][T17803] netlink: 'syz.3.3072': attribute type 27 has an invalid length.
[  315.490386][T17805] netlink: 'syz.3.3073': attribute type 1 has an invalid length.
[  315.561487][T17805] bond36: (slave gretap0): making interface the new active one
[  315.566769][T17805] bond36: (slave gretap0): Enslaving as an active interface with an up link
[  315.830047][T17820] dvmrp0: entered allmulticast mode
[  316.315826][T17841] 8021q: adding VLAN 0 to HW filter on device bond55
[  316.331382][T17841] 8021q: adding VLAN 0 to HW filter on device bond55
[  316.339043][T17841] bond55: (slave vxcan5): The slave device specified does not support setting the MAC address
[  316.344625][T17841] bond55: (slave vxcan5): Error -95 calling set_mac_address
[  316.381549][T17845] macvlan3: entered promiscuous mode
[  316.385325][T17845] macvlan3: entered allmulticast mode
[  316.387801][T17845] bond55: entered promiscuous mode
[  316.389846][T17845] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  316.396022][T17845] bond55: left promiscuous mode
[  316.506104][T17850] hsr_slave_0: left promiscuous mode
[  316.563994][T17853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.582642][T17853] tipc: Disabling bearer <eth:syzkaller0>
[  316.745448][T17867] tipc: Resetting bearer <eth:team0>
[  316.922807][T17881] bpq0: entered promiscuous mode
[  316.924843][T17881] bpq0: entered allmulticast mode
[  316.943826][T17881] bpq0: left promiscuous mode
[  316.945623][T17881] bpq0: left allmulticast mode
[  317.115545][T17894] pimreg: entered allmulticast mode
[  317.119316][T17894] pimreg: left allmulticast mode
[  317.327950][T17915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  317.633418][ T5849] Bluetooth: hci1: command 0x0405 tx timeout
[  317.685832][T17939] __nla_validate_parse: 24 callbacks suppressed
[  317.685847][T17939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3108'.
[  317.693690][T17939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3108'.
[  317.771115][T17952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3113'.
[  317.794024][T17955] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3114'.
[  317.943100][T17970] can: request_module (can-proto-4) failed.
[  317.989490][T17986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3122'.
[  318.119957][T18000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  318.122522][T18000] IPv6: NLM_F_CREATE should be set when creating new route
[  318.168470][T18004] validate_nla: 4 callbacks suppressed
[  318.168481][T18004] netlink: 'syz.4.3127': attribute type 1 has an invalid length.
[  318.172869][T18005] netlink: 'syz.4.3127': attribute type 1 has an invalid length.
[  318.175550][T18005] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3127'.
[  318.181681][T18005] batadv0: entered promiscuous mode
[  318.183990][T18006] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3127'.
[  318.194058][T18005] batadv0: entered allmulticast mode
[  318.207378][T18006] batadv0: entered promiscuous mode
[  318.209070][T18006] batadv0: entered allmulticast mode
[  318.399267][T18006] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3127'.
[  318.424986][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'.
[  318.468093][T18017] lo speed is unknown, defaulting to 1000
[  318.525206][T18019] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  318.528055][T18019] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  318.620028][T18024] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.630784][T18024] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  318.633348][T18024] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  318.637616][T18024] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  318.741357][T18036] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma?
[  318.749543][T18033] syzkaller1: entered promiscuous mode
[  318.759671][T18033] syzkaller1: entered allmulticast mode
[  319.097962][T18059] netlink: 308 bytes leftover after parsing attributes in process `syz.3.3141'.
[  319.103069][T18059] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  319.225555][T18068] bond56 (unregistering): Released all slaves
[  319.392575][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.427503][T18070] tipc: Resetting bearer <eth:syzkaller0>
[  319.451111][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  319.455864][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.459195][   T13] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  319.463881][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  319.469357][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.473309][   T13] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  319.491695][ T5694] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  319.496431][ T5694] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.501191][ T5694] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  319.507180][ T5694] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  319.510493][ T5694] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.516301][ T5694] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  319.622379][T18084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  319.630030][T18084] syzkaller0: entered promiscuous mode
[  319.631769][T18084] syzkaller0: entered allmulticast mode
[  319.698860][T18083] tipc: Resetting bearer <eth:syzkaller0>
[  319.719109][T18083] tipc: Disabling bearer <eth:syzkaller0>
[  320.108270][T18118] netlink: 'syz.3.3156': attribute type 10 has an invalid length.
[  320.157125][T18121] syz0: rxe_newlink: already configured on lo
[  320.179261][T18121] 8021q: adding VLAN 0 to HW filter on device team0
[  320.181610][T18121] tipc: Resetting bearer <eth:team0>
[  320.184450][T18121] tipc: Resetting bearer <eth:team0>
[  320.188202][T18121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  320.195721][ T5877] lo speed is unknown, defaulting to 1000
[  320.200377][ T5877] syz0: Port: 1 Link ACTIVE
[  320.216281][ T5877] lo speed is unknown, defaulting to 1000
[  320.300335][T18134] vlan0: entered promiscuous mode
[  320.306558][T18134] veth1_to_bridge: entered promiscuous mode
[  320.559622][T18153] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.603153][T18156] Bluetooth: MGMT ver 1.23
[  320.614265][T18156] netlink: 'syz.3.3168': attribute type 1 has an invalid length.
[  320.643028][T18156] 8021q: adding VLAN 0 to HW filter on device bond37
[  320.935740][T18194] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.998408][T18200] netlink: 'syz.2.3181': attribute type 10 has an invalid length.
[  321.004047][T18200] team0: Port device 0! added
[  321.007237][T18200] netlink: 'syz.2.3181': attribute type 10 has an invalid length.
[  321.011607][T18200] team0: Port device 0! removed
[  321.107407][T18203] vlan1: entered allmulticast mode
[  321.109709][T18203] bridge0: entered allmulticast mode
[  321.114682][T18203] bridge0: port 1(vlan1) entered blocking state
[  321.116924][T18203] bridge0: port 1(vlan1) entered disabled state
[  321.152487][T18206] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode
[  321.401234][T18219] netlink: 'syz.2.3185': attribute type 9 has an invalid length.
[  321.411355][T18219] macvlan0: entered promiscuous mode
[  321.417854][T18219] hsr0: entered promiscuous mode
[  321.419906][T18219] macvlan0: entered allmulticast mode
[  321.421657][T18219] hsr0: entered allmulticast mode
[  321.423487][T18219] erspan0: entered allmulticast mode
[  321.466101][T18221] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.846833][T18237] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.529959][ T5910] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  322.535043][ T5910] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  322.538372][ T5910] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  322.541665][ T5910] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  322.650145][T18258] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  322.678506][T18260] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.684916][T18260] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58896 - 0
[  322.690032][T18260] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 34013 - 0
[  322.713462][T18263] tipc: Resetting bearer <eth:team0>
[  322.737046][T18260] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.740215][T18260] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58896 - 0
[  322.753315][T18273] __nla_validate_parse: 54 callbacks suppressed
[  322.753326][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3201'.
[  322.756949][T18260] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 34013 - 0
[  322.758281][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'.
[  322.796712][T18260] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.803493][T18260] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58896 - 0
[  322.807922][T18260] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 34013 - 0
[  322.862267][    T9] lo speed is unknown, defaulting to 1000
[  322.864243][    T9] syz0: Port: 1 Link DOWN
[  322.867713][    T9] lo speed is unknown, defaulting to 1000
[  322.970670][T18260] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.977431][T18260] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 58896 - 0
[  322.981025][T18260] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 34013 - 0
[  323.001779][T18290] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3205'.
[  323.059508][T18293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3205'.
[  323.113163][ T5694] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  323.116437][ T5694] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 34013 - 0
[  323.119764][ T5694] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 58896 - 0
[  323.137669][ T5694] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  323.140951][ T5694] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 34013 - 0
[  323.148708][ T5694] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 58896 - 0
[  323.171490][ T5910] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  323.175619][ T5910] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 34013 - 0
[  323.178344][ T5910] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 58896 - 0
[  323.194287][ T5694] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  323.198025][ T5694] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 34013 - 0
[  323.201316][ T5694] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 58896 - 0
[  323.280294][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3207'.
[  323.287662][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3207'.
[  323.291904][T18307] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.297815][T18307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'.
[  323.326841][T18309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  323.386621][T18313] netlink: 'syz.3.3211': attribute type 13 has an invalid length.
[  323.486325][T18313] tipc: Resetting bearer <eth:syzkaller0>
[  323.569210][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'.
[  323.838829][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'.
[  323.842984][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3216'.
[  323.923036][T18343] hsr_slave_0: left promiscuous mode
[  323.926001][T18343] hsr_slave_1: left promiscuous mode
[  324.225948][T18360] netlink: 'syz.2.3224': attribute type 10 has an invalid length.
[  324.396472][T18381] lo speed is unknown, defaulting to 1000
[  324.541960][T18384] netlink: 'syz.4.3228': attribute type 1 has an invalid length.
[  324.585538][T18384] 8021q: adding VLAN 0 to HW filter on device bond56
[  324.588552][T18384] netlink: 'syz.4.3228': attribute type 1 has an invalid length.
[  324.672447][T18385] 8021q: adding VLAN 0 to HW filter on device bond56
[  324.675283][T18385] bond56: (slave vxcan5): The slave device specified does not support setting the MAC address
[  324.684775][T18385] bond56: (slave vxcan5): Error -95 calling set_mac_address
[  324.859100][T18403] team0: entered promiscuous mode
[  324.860891][T18403] team0: entered allmulticast mode
[  324.928276][T18408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.931346][T18408] syzkaller0: entered promiscuous mode
[  324.936030][T18408] syzkaller0: entered allmulticast mode
[  324.956700][T18408] tipc: Resetting bearer <eth:syzkaller0>
[  324.989937][T18408] tipc: Resetting bearer <eth:syzkaller0>
[  325.010490][T18408] tipc: Disabling bearer <eth:syzkaller0>
[  325.084146][T18414] 8021q: adding VLAN 0 to HW filter on device bond39
[  325.366142][T18429] veth19: entered allmulticast mode
[  325.947213][T18463] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  325.950143][T18463] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  325.983146][T18460] lo speed is unknown, defaulting to 1000
[  325.985921][T18465] netlink: 'syz.4.3250': attribute type 2 has an invalid length.
[  326.110983][T18476] netlink: 'syz.4.3251': attribute type 1 has an invalid length.
[  326.165365][T18476] 8021q: adding VLAN 0 to HW filter on device bond57
[  326.172628][T18478] netlink: 'syz.3.3253': attribute type 4 has an invalid length.
[  326.178121][T18471] erspan0: entered allmulticast mode
[  326.286982][T18488] tipc: Trying to set illegal importance in message
[  326.409943][T18501] netlink: 'syz.4.3260': attribute type 1 has an invalid length.
[  326.414419][T18493] lo speed is unknown, defaulting to 1000
[  326.482772][T18501] 8021q: adding VLAN 0 to HW filter on device bond58
[  326.621460][T18512] netlink: 'syz.4.3262': attribute type 10 has an invalid length.
[  326.719762][T18521] Unsupported ieee802154 address type: 0
[  326.841786][T18527] dvmrp1: entered allmulticast mode
[  326.955034][T18536] netlink: 'syz.4.3269': attribute type 4 has an invalid length.
[  326.961788][T18538] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  326.965110][T18538] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  326.968260][T18537] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.981159][T18533] lo speed is unknown, defaulting to 1000
[  327.167106][T18549] bridge0: port 1(ipvlan0) entered blocking state
[  327.177988][T18549] bridge0: port 1(ipvlan0) entered disabled state
[  327.180854][T18549] ipvlan0: entered allmulticast mode
[  327.185950][T18549] bridge0: entered allmulticast mode
[  327.190214][T18549] ipvlan0: left allmulticast mode
[  327.193506][T18549] bridge0: left allmulticast mode
[  327.217603][T18553] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.289222][T18553] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  327.310448][T18553] IPVS: length: 218 != 24
[  327.398120][T18556] 8021q: adding VLAN 0 to HW filter on device bond40
[  327.441846][T18556] veth15: entered promiscuous mode
[  327.457218][T18556] bond40: (slave veth15): Enslaving as a backup interface with a down link
[  327.487249][T18564] IPVS: Error connecting to the multicast addr
[  327.489971][T18563] IPVS: Error connecting to the multicast addr
[  327.520562][T18564] tipc: Resetting bearer <eth:team0>
[  327.533199][T18564] hsr0: left allmulticast mode
[  327.535241][T18564] erspan0: left allmulticast mode
[  327.537225][T18564] hsr0: left promiscuous mode
[  327.550575][ T5910] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  327.554540][ T5910] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  327.558130][ T5910] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  327.561866][ T5910] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  327.569595][T18568] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.579255][T18567] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.771178][T18578] __nla_validate_parse: 26 callbacks suppressed
[  327.771188][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'.
[  327.833671][T18585] lo speed is unknown, defaulting to 1000
[  327.840953][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'.
[  328.010843][T18588] bond41 (unregistering): Released all slaves
[  328.191131][T18593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.194158][T18593] syzkaller0: entered promiscuous mode
[  328.196061][T18593] syzkaller0: entered allmulticast mode
[  328.228915][T18593] tipc: Resetting bearer <eth:syzkaller0>
[  328.236944][T18592] tipc: Resetting bearer <eth:syzkaller0>
[  328.264377][T18592] tipc: Disabling bearer <eth:syzkaller0>
[  328.394793][T18605] validate_nla: 5 callbacks suppressed
[  328.394810][T18605] netlink: 'syz.4.3287': attribute type 10 has an invalid length.
[  328.399607][T18605] bond0: (slave wlan1): refused to change device type
[  328.435701][T18607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3288'.
[  328.438798][T18607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3288'.
[  328.449441][T18609] netlink: 'syz.4.3289': attribute type 1 has an invalid length.
[  328.480571][T18609] 8021q: adding VLAN 0 to HW filter on device bond59
[  328.514439][T18609] 8021q: adding VLAN 0 to HW filter on device bond59
[  328.517708][T18609] bond59: (slave vxcan5): The slave device specified does not support setting the MAC address
[  328.523676][T18609] bond59: (slave vxcan5): Error -95 calling set_mac_address
[  328.548324][T18607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3288'.
[  328.557386][T18612] bond59: (slave bridge69): Enslaving as an active interface with a down link
[  328.640966][T18614] netlink: 'syz.4.3290': attribute type 13 has an invalid length.
[  328.729268][T18614] tipc: Resetting bearer <eth:syzkaller0>
[  328.772764][T18614] dummy0: left allmulticast mode
[  328.796810][T18614] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[  328.863676][ T5962] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.867082][ T5962] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 34013 - 0
[  328.870536][ T5962] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 58896 - 0
[  328.880488][T18615] lo speed is unknown, defaulting to 1000
[  328.880520][ T5962] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.902719][ T5962] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 34013 - 0
[  328.906264][ T5962] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 58896 - 0
[  328.909588][ T5962] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.916901][ T5962] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 34013 - 0
[  328.920613][ T5962] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 58896 - 0
[  328.958076][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3292'.
[  328.961226][ T5962] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.964862][ T5962] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 34013 - 0
[  328.968625][ T5962] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 58896 - 0
[  328.979085][T18622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3292'.
[  328.986980][T18623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3292'.
[  328.989979][T18622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3292'.
[  329.044312][T18627] mac80211_hwsim hwsim34 wlan1: left allmulticast mode
[  329.047826][T18627] mac80211_hwsim hwsim41 wlan0: left promiscuous mode
[  329.050743][T18627] geneve7: left promiscuous mode
[  329.052383][T18627] geneve7: left allmulticast mode
[  329.054050][T18627] geneve8: left promiscuous mode
[  329.056107][T18627] macsec0: left promiscuous mode
[  329.057723][T18627] macsec0: left allmulticast mode
[  329.059881][T18627] tipc: Resetting bearer <eth:syzkaller0>
[  329.062787][T18627] syzkaller0: left promiscuous mode
[  329.064494][T18627] syzkaller0: left allmulticast mode
[  329.067415][T18627] macsec2: left promiscuous mode
[  329.069454][T18627] macsec2: left allmulticast mode
[  329.071933][T18627] macvlan0: left allmulticast mode
[  329.074153][T18627] ip6gretap6: left promiscuous mode
[  329.075941][T18627] vlan5: left promiscuous mode
[  329.077441][T18627] bond0: left promiscuous mode
[  329.079006][T18627] vlan5: left allmulticast mode
[  329.080536][T18627] bond0: left allmulticast mode
[  329.091225][T18627] veth15: left promiscuous mode
[  329.158952][T18632] C: renamed from lo
[  329.161895][T18632] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  329.205544][T18637] netlink: 'syz.3.3296': attribute type 11 has an invalid length.
[  329.254499][T18642] netlink: 'syz.3.3297': attribute type 4 has an invalid length.
[  329.260032][T18642] netlink: 'syz.3.3297': attribute type 4 has an invalid length.
[  329.323889][T18645] geneve4: entered promiscuous mode
[  329.328401][ T5910] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.330885][ T5910] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.338910][ T5910] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.341516][ T5910] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.348405][T18646] netlink: 'syz.3.3299': attribute type 4 has an invalid length.
[  329.402593][T18640] block nbd2: server does not support multiple connections per device.
[  329.406223][T18640] block nbd2: shutting down sockets
[  329.475242][T18653] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.479647][T18653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3300'.
[  329.866852][T18682] lo speed is unknown, defaulting to 1000
[  330.515692][T18694] vlan6: entered promiscuous mode
[  330.518341][T18694] hsr_slave_1: entered promiscuous mode
[  330.520464][T18694] vlan6: entered allmulticast mode
[  330.522674][T18694] hsr_slave_1: entered allmulticast mode
[  330.553103][T18697] bridge21: port 1(veth21) entered blocking state
[  330.556598][T18697] bridge21: port 1(veth21) entered disabled state
[  330.558870][T18697] veth21: entered allmulticast mode
[  330.561563][T18697] veth21: entered promiscuous mode
[  330.565731][T18696] bridge21: port 2(veth0_to_bond) entered blocking state
[  330.568189][T18696] bridge21: port 2(veth0_to_bond) entered disabled state
[  330.571439][T18696] veth0_to_bond: entered allmulticast mode
[  330.576400][T18696] veth0_to_bond: entered promiscuous mode
[  330.584103][T18697] vlan1: entered allmulticast mode
[  330.585834][T18697] veth1: entered allmulticast mode
[  330.587712][T18697] bridge21: port 3(vlan1) entered blocking state
[  330.589889][T18697] bridge21: port 3(vlan1) entered disabled state
[  330.593469][T18697] vlan1: entered promiscuous mode
[  330.595182][T18697] veth1: entered promiscuous mode
[  331.376504][T18717] netlink: 'syz.3.3315': attribute type 10 has an invalid length.
[  331.379736][T18717] netlink: 'syz.3.3315': attribute type 10 has an invalid length.
[  331.417514][T18719] bond0: peer notification delay (198) is not a multiple of miimon (100), value rounded to 100 ms
[  331.423387][T18719] bond0: entered promiscuous mode
[  331.425167][T18719] bond0: entered allmulticast mode
[  331.427198][T18719] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.674927][T18738] netlink: 'syz.2.3321': attribute type 12 has an invalid length.
[  331.679901][T18738] netlink: 'syz.2.3321': attribute type 14 has an invalid length.
[  332.637470][T18754] veth17: entered promiscuous mode
[  332.734367][T18758] veth19: entered promiscuous mode
[  332.738075][T18758] bond60: (slave veth19): Enslaving as a backup interface with a down link
[  332.743158][T18758] 8021q: adding VLAN 0 to HW filter on device bond60
[  332.802989][T18768] __nla_validate_parse: 15 callbacks suppressed
[  332.803000][T18768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3331'.
[  332.831681][T18768] vlan1 (unregistering): left promiscuous mode
[  332.835161][T18768] veth1 (unregistering): left promiscuous mode
[  332.837268][T18768] bridge63: port 3(vlan1) entered disabled state
[  332.858122][T18770] sctp: [Deprecated]: syz.3.3332 (pid 18770) Use of int in max_burst socket option.
[  332.858122][T18770] Use struct sctp_assoc_value instead
[  333.017358][T18792] lo speed is unknown, defaulting to 1000
[  333.127630][T18796] lo speed is unknown, defaulting to 1000
[  333.877896][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3341'.
[  333.880879][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3341'.
[  333.883095][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3343'.
[  333.884810][T18813] veth0_to_bond: left allmulticast mode
[  333.889185][T18813] veth0_to_bond: left promiscuous mode
[  333.891149][T18813] bridge63: port 2(veth0_to_bond) entered disabled state
[  333.968358][T18816] veth0_to_bond: left allmulticast mode
[  333.970372][T18816] veth0_to_bond: left promiscuous mode
[  333.972859][T18816] bridge21: port 2(veth0_to_bond) entered disabled state
[  333.979085][T18816] veth21: left allmulticast mode
[  333.981218][T18816] veth21: left promiscuous mode
[  333.985360][T18816] bridge21: port 1(veth21) entered disabled state
[  333.990914][T18816] vlan1: left promiscuous mode
[  333.995939][T18816] veth1: left promiscuous mode
[  333.997972][T18816] bridge21: port 3(vlan1) entered disabled state
[  334.030676][T18816] validate_nla: 1 callbacks suppressed
[  334.030686][T18816] netlink: 'syz.2.3342': attribute type 10 has an invalid length.
[  334.037455][T18816] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  334.040585][T18816] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  334.070487][T18819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  334.127911][T18828] dvmrp0: entered allmulticast mode
[  334.173590][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3347'.
[  334.230556][T18834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3348'.
[  334.249406][T18834] erspan0: left allmulticast mode
[  334.260957][T18834] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.263692][T18834] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  334.277844][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3349'.
[  334.306058][T18836] bridge0: port 1(veth19) entered blocking state
[  334.308501][T18836] bridge0: port 1(veth19) entered disabled state
[  334.310676][T18836] veth19: entered allmulticast mode
[  334.317284][T18836] veth19: entered promiscuous mode
[  334.334190][T18838] bond61: entered promiscuous mode
[  334.336195][T18838] 8021q: adding VLAN 0 to HW filter on device bond61
[  334.338961][T18836] bridge0: port 2(veth0_to_bond) entered blocking state
[  334.341391][T18836] bridge0: port 2(veth0_to_bond) entered disabled state
[  334.344958][T18836] veth0_to_bond: entered allmulticast mode
[  334.349139][T18836] veth0_to_bond: entered promiscuous mode
[  334.371508][T18841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3351'.
[  334.382439][T18845] netlink: del zone limit has 4 unknown bytes
[  334.495117][T18853] lo speed is unknown, defaulting to 1000
[  334.528544][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'.
[  334.533221][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'.
[  334.574491][T18860] netlink: 'syz.4.3356': attribute type 1 has an invalid length.
[  334.677300][T18865] bridge71: port 1(veth0_to_bond) entered blocking state
[  334.687030][T18865] bridge71: port 1(veth0_to_bond) entered disabled state
[  334.690204][T18865] veth0_to_bond: entered allmulticast mode
[  334.694568][T18865] veth0_to_bond: entered promiscuous mode
[  334.791764][T18870] pim6reg1: entered promiscuous mode
[  334.798017][T18870] pim6reg1: entered allmulticast mode
[  334.827179][T18873] netlink: 'syz.2.3359': attribute type 1 has an invalid length.
[  334.865559][T18873] 8021q: adding VLAN 0 to HW filter on device bond55
[  334.874084][T18873] vlan2: entered promiscuous mode
[  334.879151][T18873] bond55: entered promiscuous mode
[  334.882498][T18873] vlan2: entered allmulticast mode
[  334.884316][T18873] bond55: entered allmulticast mode
[  335.427656][T18916] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  335.447283][T18923] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  335.548589][T18943] pim6reg1: entered promiscuous mode
[  335.550384][T18943] pim6reg1: entered allmulticast mode
[  335.688668][T18943] 8021q: adding VLAN 0 to HW filter on device bond41
[  335.693344][T18943] team0: Port device bond41 added
[  335.755972][T18957] syzkaller0: entered promiscuous mode
[  335.758059][T18957] syzkaller0: entered allmulticast mode
[  336.555730][T18973] pimreg: entered allmulticast mode
[  336.559200][T18973] pimreg: left allmulticast mode
[  336.847638][T18986] netlink: 'syz.4.3384': attribute type 1 has an invalid length.
[  336.887036][T18986] 8021q: adding VLAN 0 to HW filter on device bond64
[  336.887158][T18989] netlink: 'syz.2.3385': attribute type 1 has an invalid length.
[  336.926592][T18989] 8021q: adding VLAN 0 to HW filter on device bond57
[  337.193705][T19002] vlan1: entered allmulticast mode
[  337.195344][T19002] bridge0: entered allmulticast mode
[  337.197345][T19002] bridge0: port 1(vlan1) entered blocking state
[  337.199571][T19002] bridge0: port 1(vlan1) entered disabled state
[  337.236093][T13997] lo speed is unknown, defaulting to 1000
[  337.238342][T13997] syz0: Port: 1 Link ACTIVE
[  337.240255][T13997] lo speed is unknown, defaulting to 1000
[  337.243739][T19008] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  337.385541][T19021] syzkaller1: entered promiscuous mode
[  337.387264][T19021] syzkaller1: entered allmulticast mode
[  337.435933][T19035] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.438877][T19034] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.480682][T19037] ip6gre2: entered allmulticast mode
[  337.515407][T19041] netlink: 'syz.2.3398': attribute type 1 has an invalid length.
[  337.536589][T19041] 8021q: adding VLAN 0 to HW filter on device bond59
[  337.559604][T19041] bond59: (slave bridge22): making interface the new active one
[  337.563023][T19041] bond59: (slave bridge22): Enslaving as an active interface with an up link
[  337.571896][T19047] netlink: 'syz.4.3400': attribute type 17 has an invalid length.
[  337.577107][T19041] bond59: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  337.599566][T19047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  337.865436][T19066] __nla_validate_parse: 21 callbacks suppressed
[  337.865454][T19066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3405'.
[  338.185607][T19082] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  338.210487][T19079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3407'.
[  338.218618][T19079] 8021q: VLANs not supported on sit0
[  338.318001][T19086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3410'.
[  338.321283][T19086] 8021q: VLANs not supported on ip6tnl0
[  338.543823][T19088] netlink: 'syz.4.3411': attribute type 2 has an invalid length.
[  338.999392][T19103] netlink: 'syz.2.3416': attribute type 1 has an invalid length.
[  339.043082][T19106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.046784][T19106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.051104][T19107] syzkaller0: entered promiscuous mode
[  339.056584][T19107] syzkaller0: entered allmulticast mode
[  339.060149][T19106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.064330][T19106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.068112][T19106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.071842][T19106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.080493][T19106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.105891][T19106] tipc: Resetting bearer <eth:syzkaller0>
[  339.135096][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3418'.
[  339.140177][T19106] tipc: Disabling bearer <eth:syzkaller0>
[  339.257192][T19117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3421'.
[  339.260585][T19117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3421'.
[  339.268561][T19117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3421'.
[  339.273445][T19117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3421'.
[  339.276932][T19120] netlink: 'syz.3.3420': attribute type 32 has an invalid length.
[  339.279502][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3420'.
[  339.292526][T19120] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  339.345173][T19124] netlink: 'syz.2.3422': attribute type 1 has an invalid length.
[  339.367326][T19124] bond60: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  339.373328][ T5910] bond60: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  339.378756][T19124] 8021q: adding VLAN 0 to HW filter on device bond60
[  339.384194][T19124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3422'.
[  339.390797][T19124] bond59: (slave bridge22): Releasing active interface
[  339.398994][T19124] bond60: (slave ip6gretap2): Removing an active aggregator
[  339.401875][T19124] bond60: (slave ip6gretap2): Releasing backup interface
[  339.525942][T19131] netlink: 'syz.2.3424': attribute type 21 has an invalid length.
[  339.528968][T19131] netlink: 'syz.2.3424': attribute type 22 has an invalid length.
[  339.531709][T19131] netlink: 'syz.2.3424': attribute type 23 has an invalid length.
[  339.536182][T19131] netlink: 'syz.2.3424': attribute type 25 has an invalid length.
[  339.785758][T19147] netlink: 'syz.4.3429': attribute type 2 has an invalid length.
[  339.794677][T19147] : entered promiscuous mode
[  340.107617][T19152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  340.111075][T19152] syzkaller0: entered promiscuous mode
[  340.113745][T19152] syzkaller0: entered allmulticast mode
[  340.401718][T19165] team0: Device gtp3 is up. Set it down before adding it as a team port
[  340.533036][T19176] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  340.537446][T19176] sch_fq: defrate 3 ignored.
[  340.671699][T19183] netlink: 'syz.3.3438': attribute type 153 has an invalid length.
[  340.714053][T19185] pim6reg1: entered promiscuous mode
[  340.715897][T19185] pim6reg1: entered allmulticast mode
[  340.847570][T19192] 8021q: VLANs not supported on ip6tnl0
[  340.989481][T19197] 0{X: entered promiscuous mode
[  341.000852][T19197] 1{X: renamed from 30{X
[  341.005571][T19197] 1{X: left promiscuous mode
[  341.007752][T19197] 1{X: entered allmulticast mode
[  341.013346][T19197] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  341.166413][T19207] sctp: [Deprecated]: syz.4.3444 (pid 19207) Use of int in max_burst socket option.
[  341.166413][T19207] Use struct sctp_assoc_value instead
[  341.172452][T19207] sctp: [Deprecated]: syz.4.3444 (pid 19207) Use of int in max_burst socket option.
[  341.172452][T19207] Use struct sctp_assoc_value instead
[  341.177706][T19207] sctp: [Deprecated]: syz.4.3444 (pid 19207) Use of int in max_burst socket option.
[  341.177706][T19207] Use struct sctp_assoc_value instead
[  341.183552][T19207] sctp: [Deprecated]: syz.4.3444 (pid 19207) Use of int in max_burst socket option.
[  341.183552][T19207] Use struct sctp_assoc_value instead
[  341.189146][T19207] sctp: [Deprecated]: syz.4.3444 (pid 19207) Use of int in max_burst socket option.
[  341.189146][T19207] Use struct sctp_assoc_value instead
[  341.202140][T19207] sctp: [Deprecated]: syz.4.3444 (pid 19207) Use of int in max_burst socket option.
[  341.202140][T19207] Use struct sctp_assoc_value instead
[  341.207972][T19207] sctp: [Deprecated]: syz.4.3444 (pid 19207) Use of int in max_burst socket option.
[  341.207972][T19207] Use struct sctp_assoc_value instead
[  341.215265][T19207] sctp: [Deprecated]: syz.4.3444 (pid 19207) Use of int in max_burst socket option.
[  341.215265][T19207] Use struct sctp_assoc_value instead
[  341.220177][T19207] sctp: [Deprecated]: syz.4.3444 (pid 19207) Use of int in max_burst socket option.
[  341.220177][T19207] Use struct sctp_assoc_value instead
[  341.226005][T19207] sctp: [Deprecated]: syz.4.3444 (pid 19207) Use of int in max_burst socket option.
[  341.226005][T19207] Use struct sctp_assoc_value instead
[  341.238634][T19211] bridge0: port 3(erspan0) entered blocking state
[  341.241482][T19211] bridge0: port 3(erspan0) entered disabled state
[  341.244129][T19211] erspan0: entered allmulticast mode
[  341.246896][T19211] erspan0: left allmulticast mode
[  341.248750][T19212] bridge0: port 3(erspan0) entered blocking state
[  341.251145][T19212] bridge0: port 3(erspan0) entered disabled state
[  341.258229][T19212] erspan0: entered allmulticast mode
[  341.261514][T19212] erspan0: left allmulticast mode
[  341.335424][T19222] !: renamed from dummy0
[  341.408012][T19229] netlink: 'syz.2.3449': attribute type 1 has an invalid length.
[  341.429810][T19227] lo speed is unknown, defaulting to 1000
[  341.457308][T19229] 8021q: adding VLAN 0 to HW filter on device bond62
[  341.461076][T19229] bond61: (slave bond62): making interface the new active one
[  341.472747][T19229] bond61: (slave bond62): Enslaving as an active interface with an up link
[  341.480238][T19229] 8021q: adding VLAN 0 to HW filter on device bond61
[  341.581508][T11700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.589795][T11700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.776255][T19256] pimreg: entered allmulticast mode
[  341.782933][T19256] pimreg: left allmulticast mode
[  341.910506][T19263] netlink: 'syz.2.3453': attribute type 1 has an invalid length.
[  342.344199][T19277] gretap4: entered promiscuous mode
[  342.346113][T19277] gretap4: entered allmulticast mode
[  342.672269][T19294] tap0: tun_chr_ioctl cmd 1074025677
[  342.676580][T19294] tap0: linktype set to 769
[  342.678448][T19293] tap0: tun_chr_ioctl cmd 1074025677
[  342.680747][T19293] tap0: linktype set to 769
[  342.938237][T19306] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  342.954186][T19307] 8021q: adding VLAN 0 to HW filter on device bond65
[  342.970295][T19307] veth1: entered promiscuous mode
[  342.976300][T19307] bond65: (slave veth1): Enslaving as a backup interface with a down link
[  342.998436][T19307] veth0_to_bond: left allmulticast mode
[  343.000730][T19307] veth0_to_bond: left promiscuous mode
[  343.005502][T19307] bridge71: port 1(veth0_to_bond) entered disabled state
[  343.008149][T19309] __nla_validate_parse: 17 callbacks suppressed
[  343.008160][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3467'.
[  343.014421][T19309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3467'.
[  343.023877][T19307] bond47: (slave veth13): Releasing active interface
[  343.027851][T19307] veth17: left allmulticast mode
[  343.029833][T19307] veth17: left promiscuous mode
[  343.031965][T19307] bridge63: port 1(veth17) entered disabled state
[  343.040883][T19307] bond59: (slave bridge69): Releasing active interface
[  343.047919][T19307] bond60: (slave veth19): Releasing backup interface
[  343.058413][T19307] bond65: (slave veth1): Releasing backup interface
[  343.405101][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3474'.
[  343.425754][T19339] 8021q: adding VLAN 0 to HW filter on device bond66
[  343.437540][T19339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.441303][T19339] bond66: (slave batadv0): making interface the new active one
[  343.444762][T19339] bond66: (slave batadv0): Enslaving as an active interface with an up link
[  343.507979][T19348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3478'.
[  343.533896][T19348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3478'.
[  343.540308][T19348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3478'.
[  343.544849][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3478'.
[  343.626101][T19359] 8021q: adding VLAN 0 to HW filter on device bond44
[  343.655930][T19359] veth21: entered promiscuous mode
[  343.660087][T19359] bond44: (slave veth21): Enslaving as a backup interface with a down link
[  343.717516][T19367] veth0_to_bond: left allmulticast mode
[  343.719406][T19367] veth0_to_bond: left promiscuous mode
[  343.721370][T19367] bridge0: port 2(veth0_to_bond) entered disabled state
[  343.729132][T19367] bond36: (slave gretap0): Releasing active interface
[  343.737290][T19367] bond40: (slave veth15): Releasing backup interface
[  343.740919][T19367] veth19: left allmulticast mode
[  343.742716][T19367] veth19: left promiscuous mode
[  343.744426][T19367] bridge0: port 1(veth19) entered disabled state
[  343.753022][T19367] team0: Port device bond41 removed
[  343.756043][T19367] bond44: (slave veth21): Releasing backup interface
[  343.761539][T19371] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.787735][T19367] team0: Mode changed to "activebackup"
[  343.840520][T19381] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3487'.
[  343.897145][T19383] syzkaller1: entered allmulticast mode
[  343.918404][T19383] lo speed is unknown, defaulting to 1000
[  343.940717][T19385] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.048581][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'.
[  344.062886][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'.
[  344.077952][T19398] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  344.095550][ T5877] lo speed is unknown, defaulting to 1000
[  344.098055][ T5877] syz0: Port: 1 Link DOWN
[  344.110977][ T5877] lo speed is unknown, defaulting to 1000
[  344.449724][T19410] 8021q: adding VLAN 0 to HW filter on device bond45
[  344.474229][T19410] bond0: (slave bond45): Enslaving as an active interface with a down link
[  344.591953][T19415] validate_nla: 5 callbacks suppressed
[  344.591966][T19415] netlink: 'syz.3.3497': attribute type 1 has an invalid length.
[  344.627971][T19415] 8021q: adding VLAN 0 to HW filter on device bond46
[  344.735381][T19422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.738280][T19422] erspan0: entered promiscuous mode
[  344.740417][T19422] erspan0: entered allmulticast mode
[  344.846707][T19430] bridge0: failed insert local address into bridge forwarding table
[  344.856651][T19428] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.861370][T19428] openvswitch: netlink: IPv6 tunnel dst address is zero
[  344.867430][T19430] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  344.937161][T19441] netlink: 'syz.4.3504': attribute type 1 has an invalid length.
[  344.955699][T19441] 8021q: adding VLAN 0 to HW filter on device bond67
[  344.971296][T19441] 8021q: adding VLAN 0 to HW filter on device bond67
[  344.975515][T19441] bond67: (slave vxcan7): The slave device specified does not support setting the MAC address
[  344.980006][T19441] bond67: (slave vxcan7): Error -95 calling set_mac_address
[  345.054655][T19445] veth21: entered promiscuous mode
[  345.060236][T19445] bond67: (slave veth21): Enslaving as an active interface with a down link
[  345.069392][T19441] erspan0: left promiscuous mode
[  345.083952][T19446] lo speed is unknown, defaulting to 1000
[  345.231280][T19454] mac80211_hwsim hwsim35 wlan0: left allmulticast mode
[  345.244175][T19454] mac80211_hwsim hwsim37 wlan1: left allmulticast mode
[  345.257188][T19454] ipvlan0: left promiscuous mode
[  345.258946][T19454] vlan0: left promiscuous mode
[  345.260563][T19454] veth1_to_bridge: left promiscuous mode
[  345.267290][T19454] macvlan0: left promiscuous mode
[  345.268989][T19454] macvlan0: left allmulticast mode
[  345.271213][T19454] veth19: left allmulticast mode
[  345.281896][T19454] vlan1: left allmulticast mode
[  345.285085][T19454] veth1: left allmulticast mode
[  345.289855][T19454] vlan2: left promiscuous mode
[  345.291432][T19454] bond55: left promiscuous mode
[  345.293551][T19454] vlan2: left allmulticast mode
[  345.295201][T19454] bond55: left allmulticast mode
[  345.299824][T19454] ip6gre2: left allmulticast mode
[  345.476011][T19465] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[  345.482802][T19465] bond61: (slave bond62): Releasing backup interface
[  345.486647][T19466] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[  345.489909][T19466] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  345.559180][T19468] macvlan1: entered allmulticast mode
[  345.563893][T19468] hsr0: entered allmulticast mode
[  345.565899][T19468] erspan0: entered allmulticast mode
[  345.571545][T19468] hsr0: left allmulticast mode
[  345.575337][T19468] erspan0: left allmulticast mode
[  345.779997][T19477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.784117][T19477] syzkaller0: entered promiscuous mode
[  345.786399][T19477] syzkaller0: entered allmulticast mode
[  345.800621][T19477] tipc: Resetting bearer <eth:syzkaller0>
[  345.805753][T19476] tipc: Resetting bearer <eth:syzkaller0>
[  345.829313][T19476] tipc: Disabling bearer <eth:syzkaller0>
[  346.079808][T19488] netlink: 'syz.4.3518': attribute type 1 has an invalid length.
[  346.122933][T19488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.850903][T19530] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  346.855838][T19529] IPVS: stopping backup sync thread 19530 ...
[  346.871316][T19521] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  346.977648][T19539] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  346.991415][T19539] bond0: (slave bond45): Releasing active interface
[  347.009545][T19536] lo speed is unknown, defaulting to 1000
[  347.013160][T19539] netlink: 'syz.3.3531': attribute type 10 has an invalid length.
[  347.018827][T19539] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  347.023113][T19539] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  347.281670][T19548] netlink: 'syz.4.3534': attribute type 1 has an invalid length.
[  347.345649][T19552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.350437][T19553] syzkaller0: entered promiscuous mode
[  347.359364][T19553] syzkaller0: entered allmulticast mode
[  347.404885][T19556] 1{X: left allmulticast mode
[  347.422925][T19556] erspan0: left allmulticast mode
[  347.472507][T19556] tipc: Resetting bearer <eth:syzkaller0>
[  347.482436][T19556] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  347.484934][T19556] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  347.489277][T19556] vlan0: left promiscuous mode
[  347.490836][T19556] bond26: left promiscuous mode
[  347.497413][T19556] bond36: left promiscuous mode
[  347.499724][T19556] geneve3: left promiscuous mode
[  347.501662][T19556] geneve3: left allmulticast mode
[  347.506189][T19556] macvtap0: left promiscuous mode
[  347.510130][T19556] macvtap0: left allmulticast mode
[  347.523224][T19556] macsec0: left promiscuous mode
[  347.524950][T19556] macsec0: left allmulticast mode
[  347.526882][T19556] veth11: left promiscuous mode
[  347.528954][T19556] veth13: left promiscuous mode
[  347.531965][T19556] vlan4: left promiscuous mode
[  347.533862][T19556] bond53: left promiscuous mode
[  347.535581][T19556] vlan4: left allmulticast mode
[  347.537212][T19556] bond53: left allmulticast mode
[  347.539562][T19556] team0: left promiscuous mode
[  347.541163][T19556] team0: left allmulticast mode
[  347.547123][T19556] geneve4: left promiscuous mode
[  347.556351][T19556] veth19: left promiscuous mode
[  347.561564][T19556] bond61: left promiscuous mode
[  347.580211][T19556] veth1: left promiscuous mode
[  347.590730][T19556] veth21: left promiscuous mode
[  347.596153][T19553] tipc: Resetting bearer <eth:syzkaller0>
[  347.607788][T19553] tipc: Disabling bearer <eth:syzkaller0>
[  347.621633][ T5874] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.624600][ T5874] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.627257][ T5874] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.630442][ T5874] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.751443][T19569] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.757896][T19569] syzkaller0: entered promiscuous mode
[  347.759758][T19569] syzkaller0: entered allmulticast mode
[  347.786260][T19569] tipc: Resetting bearer <eth:syzkaller0>
[  347.789941][T19568] tipc: Resetting bearer <eth:syzkaller0>
[  347.816509][T19568] tipc: Disabling bearer <eth:syzkaller0>
[  347.951036][T19587] C: renamed from team_slave_0
[  347.960045][T19587] netlink: 'syz.2.3544': attribute type 8 has an invalid length.
[  347.963575][T19587] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  348.014751][T19592] netlink: 'syz.3.3545': attribute type 1 has an invalid length.
[  348.036562][T19595] __nla_validate_parse: 24 callbacks suppressed
[  348.036581][T19595] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3546'.
[  348.041590][T19595] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3546'.
[  348.045791][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3546'.
[  348.047464][T19592] 8021q: adding VLAN 0 to HW filter on device bond47
[  348.067914][T19592] veth23: entered promiscuous mode
[  348.076002][T19592] bond47: (slave veth23): Enslaving as a backup interface with a down link
[  348.084607][T19592] bond47: (slave veth23): Releasing backup interface
[  348.089579][T19597] netlink: 'syz.2.3547': attribute type 39 has an invalid length.
[  348.231901][T19612] netlink: 'syz.4.3551': attribute type 6 has an invalid length.
[  348.242350][T19612] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3551'.
[  348.259639][T19606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3550'.
[  348.278786][T19612] lo speed is unknown, defaulting to 1000
[  348.322416][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3553'.
[  348.366397][T19621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3555'.
[  348.369810][T19621] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3555'.
[  348.374568][T19621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3555'.
[  348.377726][T19622] netlink: 'syz.3.3554': attribute type 13 has an invalid length.
[  348.379384][T19621] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3555'.
[  348.380807][T19622] 0{X: refused to change device tx_queue_len
[  348.388862][T19622] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  348.537902][T19634] openvswitch: netlink: IP tunnel dst address not specified
[  348.613429][T19637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.615713][T19637] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.620062][T19639] syzkaller0: entered promiscuous mode
[  348.627957][T19639] syzkaller0: entered allmulticast mode
[  348.644638][T19639] tipc: Resetting bearer <eth:syzkaller0>
[  348.666892][T19639] tipc: Disabling bearer <eth:syzkaller0>
[  348.766968][T19642] lo speed is unknown, defaulting to 1000
[  348.904806][T19648] openvswitch: netlink: Flow key attr not present in new flow.
[  349.648111][T19684] validate_nla: 4 callbacks suppressed
[  349.648125][T19684] netlink: 'syz.3.3568': attribute type 13 has an invalid length.
[  349.650412][T19684] netlink: 'syz.3.3568': attribute type 17 has an invalid length.
[  349.697887][T19684] erspan0: left promiscuous mode
[  349.719482][T19691] netlink: 'syz.4.3569': attribute type 21 has an invalid length.
[  349.755639][T19684] 8021q: adding VLAN 0 to HW filter on device team0
[  349.759138][T19684] tipc: Resetting bearer <eth:team0>
[  349.761913][T19684] tipc: Resetting bearer <eth:team0>
[  349.768441][T19684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  349.828785][  T300] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  349.856310][T19699] lo speed is unknown, defaulting to 1000
[  349.924072][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  350.463503][T19726] netlink: 'syz.3.3578': attribute type 7 has an invalid length.
[  350.490771][T19726] : entered promiscuous mode
[  350.523223][T19727] bond66: (slave batadv0): Releasing active interface
[  350.533291][T19727] bond67: (slave veth21): Releasing active interface
[  350.552827][T19719] netlink: 'syz.4.3576': attribute type 10 has an invalid length.
[  350.579749][T19736] netlink: 'syz.3.3579': attribute type 1 has an invalid length.
[  350.607670][T19727] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  350.610819][T19727] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  350.717185][T19745] syzkaller0: entered promiscuous mode
[  350.719134][T19745] syzkaller0: entered allmulticast mode
[  350.849352][T19750] tipc: Resetting bearer <eth:team0>
[  350.871855][T19750] tipc: Resetting bearer <eth:syzkaller0>
[  350.874986][T19750] tipc: Resetting bearer <eth:syzkaller0>
[  350.898484][T19755] bridge23: the hash_elasticity option has been deprecated and is always 16
[  350.901765][T19755] bridge23: entered allmulticast mode
[  351.047998][T19763] 8021q: adding VLAN 0 to HW filter on device team0
[  351.050527][T19763] tipc: Resetting bearer <eth:team0>
[  351.054515][T19763] tipc: Resetting bearer <eth:team0>
[  351.060153][T19763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  351.066617][    T9] lo speed is unknown, defaulting to 1000
[  351.071847][    T9] syz0: Port: 1 Link ACTIVE
[  351.075047][T19765] bridge0: port 1(macsec4) entered blocking state
[  351.077553][T19765] bridge0: port 1(macsec4) entered disabled state
[  351.079988][T19765] macsec4: entered allmulticast mode
[  351.089123][T19765] macsec4: left allmulticast mode
[  351.098451][    T9] lo speed is unknown, defaulting to 1000
[  351.098509][T19766] bridge0: failed insert local address into bridge forwarding table
[  351.119567][T19766] openvswitch: netlink: Flow key attr not present in new flow.
[  351.277138][T19783] netlink: 'syz.4.3594': attribute type 10 has an invalid length.
[  351.279794][T19783] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  351.414507][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  352.185995][T19836] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  352.194908][T19836] tipc: Resetting bearer <eth:syzkaller0>
[  352.339192][T19808] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  352.342165][T19808] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  352.363228][T19844] bridge0: entered promiscuous mode
[  352.365019][T19844] macvtap0: entered allmulticast mode
[  352.366937][T19844] bridge0: entered allmulticast mode
[  352.369521][T19844] bridge0: port 1(macvtap0) entered blocking state
[  352.371961][T19844] bridge0: port 1(macvtap0) entered disabled state
[  352.379028][T19844] bridge0: left allmulticast mode
[  352.381227][T19844] bridge0: left promiscuous mode
[  352.400339][T19808] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  352.404345][T19808] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  352.820334][T19863] chnl_net:caif_netlink_parms(): no params data found
[  353.806322][T19869] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  354.112224][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  354.830792][T19884] __nla_validate_parse: 23 callbacks suppressed
[  354.830804][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'.
[  354.946244][T19888] netlink: 'syz.3.3610': attribute type 9 has an invalid length.
[  354.949282][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'.
[  362.832272][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  380.752344][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  417.232283][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  490.832309][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  499.792477][   T35] INFO: task kworker/1:5:13997 blocked for more than 143 seconds.
[  499.795644][   T35]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  499.799019][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  499.804786][   T35] task:kworker/1:5     state:D stack:23432 pid:13997 tgid:13997 ppid:2      task_flags:0x4208060 flags:0x00004000
[  499.809613][   T35] Workqueue: events rfkill_global_led_trigger_worker
[  499.812574][   T35] Call Trace:
[  499.813998][   T35]  <TASK>
[  499.815230][   T35]  __schedule+0x1798/0x4cc0
[  499.816948][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  499.819137][   T35]  ? __pfx___schedule+0x10/0x10
SYZFAIL: failed to recv rpc
[  499.821154][   T35]  ? schedule+0x91/0x360
[  499.823108][   T35]  schedule+0x165/0x360
[  499.824685][   T35]  schedule_preempt_disabled+0x13/0x30
[  499.826724][   T35]  __mutex_lock+0x7e6/0x1360
[  499.828431][   T35]  ? __mutex_lock+0x5b6/0x1360
[  499.830266][   T35]  ? rfkill_global_led_trigger_worker+0x27/0xd0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  499.833130][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  499.835049][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  499.837158][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  499.839243][   T35]  rfkill_global_led_trigger_worker+0x27/0xd0
[  499.841491][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  499.844158][   T35]  process_scheduled_works+0xae1/0x17b0
[  499.846289][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  499.848512][   T35]  worker_thread+0x8a0/0xda0
[  499.850241][   T35]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  499.852943][   T35]  ? __kthread_parkme+0x7b/0x200
[  499.854829][   T35]  kthread+0x711/0x8a0
[  499.856391][   T35]  ? __pfx_worker_thread+0x10/0x10
[  499.858262][   T35]  ? __pfx_kthread+0x10/0x10
[  499.859970][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  499.861899][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  499.864234][   T35]  ? __pfx_kthread+0x10/0x10
[  499.865969][   T35]  ret_from_fork+0x3fc/0x770
[  499.867670][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  499.869543][   T35]  ? __switch_to_asm+0x39/0x70
[  499.871307][   T35]  ? __switch_to_asm+0x33/0x70
[  499.873217][   T35]  ? __pfx_kthread+0x10/0x10
[  499.874938][   T35]  ret_from_fork_asm+0x1a/0x30
[  499.876709][   T35]  </TASK>
[  499.877973][   T35] INFO: task syz.4.3596:19790 blocked for more than 143 seconds.
[  499.880757][   T35]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  499.883976][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  499.887127][   T35] task:syz.4.3596      state:D stack:25096 pid:19790 tgid:19790 ppid:9705   task_flags:0x400040 flags:0x00004004
[  499.891438][   T35] Call Trace:
[  499.893073][   T35]  <TASK>
[  499.894196][   T35]  __schedule+0x1798/0x4cc0
[  499.895880][   T35]  ? __lock_acquire+0xab9/0xd20
[  499.897719][   T35]  ? __lock_acquire+0xab9/0xd20
[  499.899560][   T35]  ? __pfx___schedule+0x10/0x10
[  499.901308][   T35]  ? schedule+0x91/0x360
[  499.902927][   T35]  schedule+0x165/0x360
[  499.904516][   T35]  schedule_preempt_disabled+0x13/0x30
[  499.906697][   T35]  __mutex_lock+0x7e6/0x1360
[  499.908413][   T35]  ? __mutex_lock+0x5b6/0x1360
[  499.909929][   T35]  ? rfkill_unregister+0xc8/0x220
[  499.911487][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  499.913512][   T35]  ? __pfx_device_del+0x10/0x10
[  499.915069][   T35]  rfkill_unregister+0xc8/0x220
[  499.916567][   T35]  nfc_unregister_device+0x96/0x2a0
[  499.918182][   T35]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  499.919890][   T35]  virtual_ncidev_close+0x56/0x90
[  499.921497][   T35]  __fput+0x44c/0xa70
[  499.923387][   T35]  task_work_run+0x1d4/0x260
[  499.924874][   T35]  ? __pfx_task_work_run+0x10/0x10
[  499.926399][   T35]  ? exit_to_user_mode_loop+0x40/0x110
[  499.928153][   T35]  exit_to_user_mode_loop+0xec/0x110
[  499.930093][   T35]  do_syscall_64+0x2bd/0x3b0
[  499.931539][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.933466][   T35]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  499.935435][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.937467][   T35] RIP: 0033:0x7f305198ebe9
[  499.938989][   T35] RSP: 002b:00007ffef2cb5e78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  499.941799][   T35] RAX: 0000000000000000 RBX: 00007f3051bb7da0 RCX: 00007f305198ebe9
[  499.952240][   T35] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  499.954990][   T35] RBP: 00007f3051bb7da0 R08: 000000000000022c R09: 0000001df2cb616f
[  499.957763][   T35] R10: 00007f3051bb7cb0 R11: 0000000000000246 R12: 0000000000055f46
[  499.960207][   T35] R13: 00007f3051bb6090 R14: ffffffffffffffff R15: 00007ffef2cb5f90
[  499.962980][   T35]  </TASK>
[  499.964112][   T35] INFO: task syz.2.3597:19808 blocked for more than 143 seconds.
[  499.966822][   T35]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  499.969615][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  499.973007][   T35] task:syz.2.3597      state:D stack:26296 pid:19808 tgid:19804 ppid:5848   task_flags:0x400040 flags:0x00004006
[  499.977226][   T35] Call Trace:
[  499.978255][   T35]  <TASK>
[  499.979198][   T35]  __schedule+0x1798/0x4cc0
[  499.980635][   T35]  ? __lock_acquire+0xab9/0xd20
[  499.982400][   T35]  ? __lock_acquire+0xab9/0xd20
[  499.983982][   T35]  ? __pfx___schedule+0x10/0x10
[  499.985971][   T35]  ? schedule+0x91/0x360
[  499.987535][   T35]  schedule+0x165/0x360
[  499.988982][   T35]  schedule_preempt_disabled+0x13/0x30
[  499.990623][   T35]  __mutex_lock+0x7e6/0x1360
[  499.992241][   T35]  ? __mutex_lock+0x5b6/0x1360
[  499.993735][   T35]  ? nfc_rfkill_set_block+0x50/0x2e0
[  499.995366][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  499.996984][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  499.998928][   T35]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  500.000859][   T35]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  500.003070][   T35]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  500.004834][   T35]  nfc_rfkill_set_block+0x50/0x2e0
[  500.006468][   T35]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  500.008391][   T35]  rfkill_set_block+0x1d2/0x440
[  500.010276][   T35]  rfkill_fop_write+0x44b/0x570
[  500.011769][   T35]  ? __pfx_rfkill_fop_write+0x10/0x10
[  500.014013][   T35]  ? security_kernfs_init_security+0x240/0x290
[  500.016022][   T35]  ? rw_verify_area+0x255/0x4d0
[  500.017660][   T35]  ? __lock_acquire+0xab9/0xd20
[  500.019592][   T35]  ? __pfx_rfkill_fop_write+0x10/0x10
[  500.021727][   T35]  vfs_write+0x27e/0xb30
[  500.023401][   T35]  ? __pfx_vfs_write+0x10/0x10
[  500.025119][   T35]  ? __fget_files+0x2a/0x420
[  500.026634][   T35]  ? __fget_files+0x2a/0x420
[  500.028380][   T35]  ? __fget_files+0x3a0/0x420
[  500.030014][   T35]  ? __fget_files+0x2a/0x420
[  500.031487][   T35]  ksys_write+0x145/0x250
[  500.033307][   T35]  ? __pfx_ksys_write+0x10/0x10
[  500.035092][   T35]  ? do_syscall_64+0xbe/0x3b0
[  500.036541][   T35]  do_syscall_64+0xfa/0x3b0
[  500.037972][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  500.039567][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.041555][   T35]  ? exc_page_fault+0x9f/0xf0
[  500.043615][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.045570][   T35] RIP: 0033:0x7f94c338ebe9
[  500.047283][   T35] RSP: 002b:00007f94c4224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  500.050191][   T35] RAX: ffffffffffffffda RBX: 00007f94c35b6090 RCX: 00007f94c338ebe9
[  500.053040][   T35] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  500.055560][   T35] RBP: 00007f94c3411e19 R08: 0000000000000000 R09: 0000000000000000
[  500.057914][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  500.060662][   T35] R13: 00007f94c35b6128 R14: 00007f94c35b6090 R15: 00007fff223cc3a8
[  500.064048][   T35]  </TASK>
[  500.065199][   T35] INFO: task syz.3.3610:19884 blocked for more than 143 seconds.
[  500.067577][   T35]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  500.069882][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  500.073317][   T35] task:syz.3.3610      state:D stack:24136 pid:19884 tgid:19883 ppid:9704   task_flags:0x400140 flags:0x00004004
[  500.078002][   T35] Call Trace:
[  500.079369][   T35]  <TASK>
[  500.080590][   T35]  __schedule+0x1798/0x4cc0
[  500.082679][   T35]  ? __lock_acquire+0xab9/0xd20
[  500.084705][   T35]  ? __lock_acquire+0xab9/0xd20
[  500.086696][   T35]  ? __pfx___schedule+0x10/0x10
[  500.088677][   T35]  ? schedule+0x91/0x360
[  500.090463][   T35]  schedule+0x165/0x360
[  500.092748][   T35]  schedule_preempt_disabled+0x13/0x30
[  500.094933][   T35]  __mutex_lock+0x7e6/0x1360
[  500.096854][   T35]  ? __mutex_lock+0x5b6/0x1360
[  500.098927][   T35]  ? rfkill_register+0x37/0x8e0
[  500.101080][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  500.103667][   T35]  ? __init_waitqueue_head+0xa9/0x150
[  500.105978][   T35]  ? device_initialize+0x24b/0x440
[  500.108141][   T35]  rfkill_register+0x37/0x8e0
[  500.110122][   T35]  nfc_register_device+0x14a/0x320
[  500.113462][   T35]  nci_register_device+0x87f/0x9d0
[  500.115620][   T35]  ? __pfx_nci_register_device+0x10/0x10
[  500.117923][   T35]  ? __raw_spin_lock_init+0x45/0x100
[  500.120284][   T35]  ? __init_waitqueue_head+0xa9/0x150
[  500.122639][   T35]  virtual_ncidev_open+0x129/0x1a0
[  500.124612][   T35]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  500.126848][   T35]  misc_open+0x2bc/0x330
[  500.128663][   T35]  chrdev_open+0x4cc/0x5e0
[  500.130521][   T35]  ? __pfx_chrdev_open+0x10/0x10
[  500.133068][   T35]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  500.135613][   T35]  ? __pfx_chrdev_open+0x10/0x10
[  500.142321][   T35]  do_dentry_open+0x953/0x13f0
[  500.144402][   T35]  vfs_open+0x3b/0x340
[  500.146152][   T35]  ? path_openat+0x2ecd/0x3830
[  500.148160][   T35]  path_openat+0x2ee5/0x3830
[  500.150075][   T35]  ? arch_stack_walk+0xfc/0x150
[  500.162390][   T35]  ? stack_depot_save_flags+0x40/0x860
[  500.164784][   T35]  ? __pfx_path_openat+0x10/0x10
[  500.166855][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.169442][   T35]  do_filp_open+0x1fa/0x410
[  500.171649][   T35]  ? __lock_acquire+0xab9/0xd20
[  500.173960][   T35]  ? __pfx_do_filp_open+0x10/0x10
[  500.176129][   T35]  ? _raw_spin_unlock+0x28/0x50
[  500.177977][   T35]  ? alloc_fd+0x64c/0x6c0
[  500.179871][   T35]  do_sys_openat2+0x121/0x1c0
[  500.181619][   T35]  ? __se_sys_futex+0x36f/0x400
[  500.183944][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  500.186047][   T35]  ? __fget_files+0x2a/0x420
[  500.187910][   T35]  ? rcu_is_watching+0x15/0xb0
[  500.189680][   T35]  __x64_sys_openat+0x138/0x170
[  500.191604][   T35]  do_syscall_64+0xfa/0x3b0
[  500.194201][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  500.196263][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.198677][   T35]  ? exc_page_fault+0x9f/0xf0
[  500.200548][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.203437][   T35] RIP: 0033:0x7fdd2038ebe9
[  500.205203][   T35] RSP: 002b:00007fdd21144038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  500.208519][   T35] RAX: ffffffffffffffda RBX: 00007fdd205b5fa0 RCX: 00007fdd2038ebe9
[  500.211509][   T35] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  500.214653][   T35] RBP: 00007fdd20411e19 R08: 0000000000000000 R09: 0000000000000000
[  500.217047][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  500.219418][   T35] R13: 00007fdd205b6038 R14: 00007fdd205b5fa0 R15: 00007ffc6b16d098
[  500.222757][   T35]  </TASK>
[  500.224076][   T35] 
[  500.224076][   T35] Showing all locks held in the system:
[  500.227013][   T35] 2 locks held by kworker/u8:0/12:
[  500.228750][   T35]  #0: ffff888136639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  500.232243][   T35]  #1: ffff888136624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  500.235175][   T35] 1 lock held by khungtaskd/35:
[  500.236866][   T35]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  500.240051][   T35] 2 locks held by kworker/u9:7/1091:
[  500.241685][   T35]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  500.246020][   T35]  #1: ffffc90007147bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  500.250202][   T35] 2 locks held by getty/5673:
[  500.251751][   T35]  #0: ffff8880287800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  500.256788][   T35]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  500.260303][   T35] 3 locks held by kworker/1:5/13997:
[  500.262307][   T35]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  500.265977][   T35]  #1: ffffc90021347bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  500.270649][   T35]  #2: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  500.274633][   T35] 2 locks held by syz.4.3596/19790:
[  500.276205][   T35]  #0: ffff88804419a100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  500.279164][   T35]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  500.282802][   T35] 2 locks held by syz.2.3597/19808:
[  500.284361][   T35]  #0: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  500.287459][   T35]  #1: ffff88804419a100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  500.290631][   T35] 3 locks held by syz.3.3610/19884:
[  500.292690][   T35]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  500.295778][   T35]  #1: ffff888038460100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  500.298813][   T35]  #2: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  500.301931][   T35] 1 lock held by syz-executor/19895:
[  500.303770][   T35]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  500.306347][   T35] 1 lock held by syz-executor/19896:
[  500.308352][   T35]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  500.311570][   T35] 1 lock held by syz-executor/19898:
[  500.314010][   T35]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  500.317274][   T35] 1 lock held by syz-executor/19906:
[  500.319325][   T35]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  500.322809][   T35] 1 lock held by syz-executor/19907:
[  500.324826][   T35]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  500.328005][   T35] 1 lock held by syz-executor/19909:
[  500.330001][   T35]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  500.333363][   T35] 1 lock held by syz-executor/19915:
[  500.335383][   T35]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  500.338553][   T35] 1 lock held by syz-executor/19916:
[  500.340328][   T35]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  500.343293][   T35] 1 lock held by syz-executor/19918:
[  500.345343][   T35]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  500.348686][   T35] 
[  500.349648][   T35] =============================================
[  500.349648][   T35] 
[  500.353245][   T35] NMI backtrace for cpu 0
[  500.353259][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  500.353275][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  500.353283][   T35] Call Trace:
[  500.353289][   T35]  <TASK>
[  500.353296][   T35]  dump_stack_lvl+0x189/0x250
[  500.353319][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  500.353333][   T35]  ? __pfx__printk+0x10/0x10
[  500.353361][   T35]  nmi_cpu_backtrace+0x39e/0x3d0
[  500.353380][   T35]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  500.353396][   T35]  ? __pfx__printk+0x10/0x10
[  500.353415][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  500.353438][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  500.353457][   T35]  watchdog+0xf93/0xfe0
[  500.353481][   T35]  ? watchdog+0x1de/0xfe0
[  500.353503][   T35]  kthread+0x711/0x8a0
[  500.353524][   T35]  ? __pfx_watchdog+0x10/0x10
[  500.353542][   T35]  ? __pfx_kthread+0x10/0x10
[  500.353559][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  500.353577][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  500.353592][   T35]  ? __pfx_kthread+0x10/0x10
[  500.353608][   T35]  ret_from_fork+0x3fc/0x770
[  500.353635][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  500.353654][   T35]  ? __switch_to_asm+0x39/0x70
[  500.353671][   T35]  ? __switch_to_asm+0x33/0x70
[  500.353686][   T35]  ? __pfx_kthread+0x10/0x10
[  500.353704][   T35]  ret_from_fork_asm+0x1a/0x30
[  500.353732][   T35]  </TASK>
[  500.353738][   T35] Sending NMI from CPU 0 to CPUs 1:
[  500.405769][    C1] NMI backtrace for cpu 1
[  500.405789][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  500.405805][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  500.405814][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  500.405841][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 d7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  500.405854][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  500.405898][    C1] RAX: 1447435565f9f300 RBX: ffffffff81968308 RCX: 1447435565f9f300
[  500.405909][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b6ebd RDI: ffffffff8be33400
[  500.405919][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  500.405929][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  500.405939][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d3000
[  500.405949][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  500.405960][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  500.405968][    C1] CR2: 00005579cbc65043 CR3: 000000000df36000 CR4: 00000000000006f0
[  500.405997][    C1] Call Trace:
[  500.406004][    C1]  <TASK>
[  500.406011][    C1]  default_idle+0x13/0x20
[  500.406023][    C1]  default_idle_call+0x74/0xb0
[  500.406038][    C1]  do_idle+0x1e8/0x510
[  500.406052][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  500.406069][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  500.406086][    C1]  ? __pfx_do_idle+0x10/0x10
[  500.406103][    C1]  ? do_idle+0x4ef/0x510
[  500.406117][    C1]  cpu_startup_entry+0x44/0x60
[  500.406130][    C1]  start_secondary+0x101/0x110
[  500.406149][    C1]  common_startup_64+0x13e/0x147
[  500.406175][    C1]  </TASK>
[  500.406801][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  500.471845][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  500.476158][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  500.479356][   T35] Call Trace:
[  500.480525][   T35]  <TASK>
[  500.481661][   T35]  dump_stack_lvl+0x99/0x250
[  500.483491][   T35]  ? __asan_memcpy+0x40/0x70
[  500.485300][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  500.487292][   T35]  ? __pfx__printk+0x10/0x10
[  500.489106][   T35]  vpanic+0x281/0x750
[  500.490709][   T35]  ? __pfx_vpanic+0x10/0x10
[  500.492455][   T35]  ? preempt_schedule+0xae/0xc0
[  500.494312][   T35]  ? preempt_schedule_common+0x83/0xd0
[  500.496392][   T35]  panic+0xb9/0xc0
[  500.497535][   T35]  ? __pfx_panic+0x10/0x10
[  500.499003][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  500.500933][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  500.503000][   T35]  watchdog+0xfd2/0xfe0
[  500.504409][   T35]  ? watchdog+0x1de/0xfe0
[  500.505740][   T35]  kthread+0x711/0x8a0
[  500.507279][   T35]  ? __pfx_watchdog+0x10/0x10
[  500.508683][   T35]  ? __pfx_kthread+0x10/0x10
[  500.510277][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  500.511881][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  500.513438][   T35]  ? __pfx_kthread+0x10/0x10
[  500.514865][   T35]  ret_from_fork+0x3fc/0x770
[  500.516287][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  500.517827][   T35]  ? __switch_to_asm+0x39/0x70
[  500.519395][   T35]  ? __switch_to_asm+0x33/0x70
[  500.520998][   T35]  ? __pfx_kthread+0x10/0x10
[  500.522464][   T35]  ret_from_fork_asm+0x1a/0x30
[  500.523982][   T35]  </TASK>
[  500.525654][   T35] Kernel Offset: disabled
[  500.526971][   T35] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:31:51  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bdc05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffc9000069f890 RSP=ffffc9000069f6b8
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854efde0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efe57 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558478148a10 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000001d00c9ca 000000000000002c XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=000000002dd1016c 0000000000000173
XMM06=0200000000000000 00000000000080fe XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff9037ab01 RCX=9c21e92264d74f00 RDX=ffffc900001e0801
RSI=ffffffff8172c195 RDI=ffffffff8e139ee0 RBP=dffffc0000000000 RSP=ffffc900001e07a8
R8 =ffffc900001e09c0 R9 =0000000000000000 R10=ffffc900001e08d8 R11=fffff5200003c11d
R12=ffffc900001e09d0 R13=ffffc900001d9000 R14=ffffc900001e0888 R15=ffffffff8172c195
RIP=ffffffff819d6bf5 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0bdeaaa800 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a4057acd3e CR3=0000000028c16000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
