last executing test programs:

27.071070989s ago: executing program 2 (id=1603):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000003000000611067000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_virt_wifi\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x308)

26.947411075s ago: executing program 2 (id=1606):
r0 = socket(0x10, 0x80002, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x321, 0x9, 0x2, 0x7, 0x49, @broadcast}, 0x10) (async)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x10040, 0x45}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xd180a1977909bea6}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0503020000000000200012800b0001006d616373ffff0000100002800c000100ffffffffffffffff08000500", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) (async)
r5 = socket$inet_icmp(0x2, 0x2, 0x1) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=<r6=>0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@expire={0x1bc, 0x18, 0x10, 0x70bd2d, 0x25dfdbfd, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e21, 0xcb54, 0x4e24, 0x8000, 0x2, 0x0, 0x0, 0x32, 0x0, r6}, {@in=@remote, 0x4d2, 0x33}, @in6=@mcast1, {0xfffffffffffffff7, 0xffffffffffffffff, 0x4, 0xffff, 0x12c4, 0xfff, 0x401, 0x4}, {0xc63, 0x4, 0x2b6}, {0x832, 0x38, 0x800}, 0x70bd27, 0x3504, 0x2, 0x2, 0x94, 0xcb}, 0x7a}, [@lifetime_val={0x24, 0x9, {0xffffffffffffffff, 0x8, 0x4, 0xb09}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x1}}, @srcaddr={0x14, 0xd, @in6=@private1}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e20, @in=@remote}}, @offload={0xc, 0x1c, {r2}}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3, 0x80}}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@private1, 0x0, 0x2}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4040811}, 0x40)
sendto$inet(r5, &(0x7f0000000780)="82734b7244c539ac13", 0x9, 0x8005, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

26.867524027s ago: executing program 2 (id=1609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="4674e3b1beffc5fa00aa"])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000e77300008f00000005000000000001"], 0x50)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
unshare(0x6a040000)
writev(0xffffffffffffffff, 0x0, 0x0)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
close(r7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000004c0)={0x7, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10)

25.859486483s ago: executing program 2 (id=1620):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x2, 0xfc, 0x3, 0xff}, 0x8)
write$rfkill(r0, 0x0, 0x0)
write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

25.738819725s ago: executing program 2 (id=1621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d4e0a"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x800, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d4e0a"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x800, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) (async)

25.59083544s ago: executing program 2 (id=1623):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_OKEY={0x8, 0x5, 0xc1ef}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0xf3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="460609fffe0000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

25.401752867s ago: executing program 32 (id=1623):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_OKEY={0x8, 0x5, 0xc1ef}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0xf3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="460609fffe0000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

17.957679611s ago: executing program 1 (id=1694):
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x6, 0x7, 0xf62a, 0x8, 0x8, 0xffff7545}, &(0x7f0000000180)=0x9c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500400300012800b00010062726964676500002000028005001700010000000c00220000000000000000000800000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x40, r7, 0x1ff}, 0xc)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8815)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001ac0)={'team_slave_0\x00', &(0x7f0000001a80)=@ethtool_stats={0x1d, 0x2, [0x8, 0x4]}})

17.797486924s ago: executing program 1 (id=1697):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=@newnexthop={0x34, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x0, 0x1}, {0x2, 0xb}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESHEX=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=@newnexthop={0x34, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x0, 0x1}, {0x2, 0xb}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESHEX=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async)

17.789812776s ago: executing program 3 (id=1698):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@gettaction={0x34, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="9b", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f00924a100767ff70d6297cd9fac1ec3f751", 0x12}, {0x0}], 0x2}}], 0x2, 0x20000010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff, 0x1, [0x6]}, 0xa)

17.787829387s ago: executing program 1 (id=1699):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x4db, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

17.696487912s ago: executing program 1 (id=1700):
r0 = socket(0x10, 0x80002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet(0x2, 0x3, 0x33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async)
getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x6, 0x4) (async)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/86, 0x56, <r5=>0x0, &(0x7f0000000340)=""/191, 0xbf}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe82f, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0xbc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000500)='GPL\x00', 0x6b, 0x2a, &(0x7f0000000540)=""/42, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000005c0)=[{0x2, 0x4, 0x9, 0x3}, {0x1, 0x4, 0xb, 0x9}, {0x3, 0x2, 0xe, 0x6}, {0x0, 0x5, 0xf, 0x4}, {0x3, 0x5, 0x10, 0x9}, {0x4, 0x4}], 0x10, 0x5}, 0x94)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x8f, &(0x7f0000000200)=""/143, 0x41000, 0x43, '\x00', r4, @fallback=0x3a, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x0, &(0x7f0000000780)=[r7], 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r9=>r8, 0x4, 0x5, 0x7, 0x8, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0xff01, 0x4, 0x626}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aafc0000000000000000000000000000003a00"], 0xfce) (async)
write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aafc0000000000000000000000000000003a00"], 0xfce)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@RTM_DELMDB={0x38, 0x55, 0x2, 0x70bd27, 0x25dfdbfb, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x2, {@in6_addr=@empty, 0x86dd}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@RTM_DELMDB={0x38, 0x55, 0x2, 0x70bd27, 0x25dfdbfb, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x2, {@in6_addr=@empty, 0x86dd}}}]}, 0x38}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000080a0103000000000000000001000005080009400000000208000b40000000020c00064000000000000000010c00064000000000000000041c000580080001400000809b080001400000002c08000140000092000c000340000000000000000258000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c0001800802"], 0xe4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000880), &(0x7f0000000900)=0x4) (async)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000880), &(0x7f0000000900)=0x4)

17.567143112s ago: executing program 1 (id=1701):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x59}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r2, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100), 0xffffffae}], 0x1}}], 0x1, 0x4000)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0)
socket$packet(0x11, 0x2, 0x300)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e00280010000700028000001294", 0x2e}], 0x1}, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000540)={0x7fffffff, <r12=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=r12, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00'})

16.883975005s ago: executing program 3 (id=1703):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r2 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10)
syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44840)
sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000002540)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x24, r9, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000000)
ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000023c0)=r2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r11=>0x0})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r13 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e)
recvmmsg$unix(r13, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400})
syz_emit_ethernet(0x78, &(0x7f00000020c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@llc_tr={0x11, {@snap={0xab, 0xaa, "f548", "db0850", 0x6002, "c5ea8ba1334c66afc85f1794a00f135810c766467e51837e159ec1f3864bc81a718bc7e341fcbdc21c5e4268a4dc1e4380fba030309c6a2f62e9ea30286fc46ac3384a108a2bcf93c8c93d956587d0e95dd607074b0fc5a112a259c7c8"}}}}}, &(0x7f0000002140)={0x0, 0x2, [0x546, 0x75b, 0x732, 0xc4d]})
r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x2c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r11, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)

16.774299874s ago: executing program 3 (id=1706):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x30, 0x80, 0x1, 0x43, @dev={0xfe, 0x80, '\x00', 0x1f}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x80, 0x80, 0x0, 0x6}})

16.725976216s ago: executing program 3 (id=1707):
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x6, 0x7, 0xf62a, 0x8, 0x8, 0xffff7545}, &(0x7f0000000180)=0x9c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001ac0)={'team_slave_0\x00', &(0x7f0000001a80)=@ethtool_stats={0x33, 0x2, [0x8, 0x4]}})

16.724514673s ago: executing program 1 (id=1708):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000140)=0x1, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6, @multicast}, 0x10)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000400)={0x0, 0x7, 0x4000000000002, 0xfffffffe, 0x11001, 0x90000000000, 0x3, 0x100000003}, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={[0x81]}, 0x8})
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESDEC=r4], 0x0}, 0x94)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0xfd91, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffe6, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

16.509815448s ago: executing program 3 (id=1709):
unshare(0x24020400)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x80002, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000500)={0x6d1b, {{0xa, 0x4e21, 0x2, @empty, 0x9}}}, 0x88)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440089f21f520ab5f4ca00000000090000d107fc", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c00001400028008000800000000000500090000000000"], 0x44}}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b400000000000000"], &(0x7f0000000300)='GPL\x00'}, 0x94)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8)
sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4000091}, 0x2004c800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

16.506625131s ago: executing program 3 (id=1711):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000a3000000080004000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, r4, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x24, r1, 0xd66771a5e8224ded, 0x70bd26, 0x1000000, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c890}, 0x0)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/ipc\x00')
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x80, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x15}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x2a}]}, 0x80}, 0x1, 0x0, 0x0, 0x40011}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r11, 0x107, 0xc, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000018000000611198000000000018000000000000000000000000000000a000000000000000"], 0x0}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
r12 = socket(0x10, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff0000", @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r13, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x41}, 0x8)

16.287090714s ago: executing program 0 (id=1717):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e6574646573696d30000000080000000003000100010005001800010000000800020005000000e20a3b17dd4b2230d78e4eba6d6adf17a0e9546eadb6b173d00a0fea64f3dcdd5c389448a7b29789df7083164668de409dbb72e354eaff75cc334559554caa066a1c2ea050315823ac7a52cefaa161cccd61f18a88fdd4a72b0b0eca6bdc72e203e832789a631f046c88522f8ba2d38525c57c6dc4e45238840656759e657a"], 0x44}, 0x1, 0x0, 0x0, 0x104}, 0x4000)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340002800800080006040000060002004e200000080007000800000005000d00010000000800060009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

16.184272696s ago: executing program 0 (id=1718):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1001, 0x1}}, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', <r8=>0x0})
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4)
bind$xdp(r6, &(0x7f0000000140)={0x2c, 0x2, r8, 0x16}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYRESHEX=r0], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000005900330080200900080211000001080211000000"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x80000000, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {0xfff2, 0xffff}, {0xffe9, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xe0, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x400c010)
socket$netlink(0x10, 0x3, 0x0)

16.107846992s ago: executing program 0 (id=1719):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x53, 0xfffff02c}, {0x6, 0x1, 0x8, 0x1}]}, 0x10) (async)
socket$packet(0x11, 0x2, 0x300) (async)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000240)=0xe)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44001) (async)
sendmmsg$inet6(r0, &(0x7f0000000280), 0x1, 0x40000)

16.057515845s ago: executing program 0 (id=1720):
r0 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000180)=0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x100, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xe, 0xc}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x20048054)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000740)="fe", 0x1}], 0x2}}], 0x1, 0x4000800)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048004}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r10, 0x106, 0x1, &(0x7f0000000000), 0x4)

16.00778483s ago: executing program 0 (id=1721):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x40882}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
accept4$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x800) (async, rerun: 64)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (rerun: 64)

15.407312511s ago: executing program 0 (id=1722):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0xc000)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x5f, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x98, 0x60, "210466d38547aa140db9a200000000c538c7cb"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r5, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.036889669s ago: executing program 33 (id=1708):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000140)=0x1, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6, @multicast}, 0x10)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000400)={0x0, 0x7, 0x4000000000002, 0xfffffffe, 0x11001, 0x90000000000, 0x3, 0x100000003}, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={[0x81]}, 0x8})
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESDEC=r4], 0x0}, 0x94)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0xfd91, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffe6, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

985.806392ms ago: executing program 34 (id=1711):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000a3000000080004000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, r4, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x24, r1, 0xd66771a5e8224ded, 0x70bd26, 0x1000000, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c890}, 0x0)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/ipc\x00')
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x80, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x15}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x2a}]}, 0x80}, 0x1, 0x0, 0x0, 0x40011}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r11, 0x107, 0xc, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000018000000611198000000000018000000000000000000000000000000a000000000000000"], 0x0}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
r12 = socket(0x10, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff0000", @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r13, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x41}, 0x8)

0s ago: executing program 35 (id=1722):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0xc000)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x5f, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x98, 0x60, "210466d38547aa140db9a200000000c538c7cb"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r5, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

kernel console output (not intermixed with test programs):

  105.340359][ T8121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.518'.
[  105.564491][ T8143] macsec0: entered promiscuous mode
[  105.567246][ T8143] macsec0: entered allmulticast mode
[  105.736595][ T8160] bond5: (slave ip6gretap4): Releasing active interface
[  105.742898][ T8160] bond5: (slave ip6gretap4): the permanent HWaddr of slave - 86:de:bd:f8:a2:74 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  105.756224][ T8160] bond5: (slave bridge8): Releasing active interface
[  105.787392][ T8160] team0: Mode changed to "activebackup"
[  105.927819][ T8168] syzkaller1: entered promiscuous mode
[  105.931640][ T8168] syzkaller1: entered allmulticast mode
[  106.062895][ T8178] netlink: 'syz.2.534': attribute type 1 has an invalid length.
[  106.325289][ T8189] syzkaller0: entered promiscuous mode
[  106.327752][ T8189] syzkaller0: entered allmulticast mode
[  106.407117][ T8194] pim6reg: entered allmulticast mode
[  106.413961][ T8191] pim6reg: left allmulticast mode
[  106.550957][ T8198] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  106.586556][ T8198] 8021q: adding VLAN 0 to HW filter on device bond15
[  106.603682][ T8198] bond15: (slave ip6gretap8): making interface the new active one
[  106.608268][ T8198] bond15: (slave ip6gretap8): Enslaving as an active interface with an up link
[  106.625444][ T8198] bond15: (slave bridge10): Enslaving as an active interface with a down link
[  106.641351][ T8198] bond15: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  106.727802][ T8211] netlink: 'syz.2.544': attribute type 10 has an invalid length.
[  106.732354][ T8211] netlink: 'syz.2.544': attribute type 10 has an invalid length.
[  106.773725][ T8216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.776838][ T8216] syzkaller0: entered promiscuous mode
[  106.779488][ T8216] syzkaller0: entered allmulticast mode
[  106.802498][ T8216] tipc: Resetting bearer <eth:syzkaller0>
[  106.826579][ T8216] tipc: Resetting bearer <eth:syzkaller0>
[  106.841461][ T8216] tipc: Disabling bearer <eth:syzkaller0>
[  106.955826][ T8233] veth17: entered allmulticast mode
[  106.975127][ T8232] veth19: entered allmulticast mode
[  107.105687][ T8240] team0: Port device bond0 removed
[  107.115962][ T8240] bond9: (slave ip6gretap4): Releasing active interface
[  107.123494][ T8240] bond9: (slave ip6gretap4): the permanent HWaddr of slave - 92:4a:25:b7:34:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  107.131972][ T8240] bond9: (slave bridge5): Releasing active interface
[  107.136829][ T8240] bond12: (slave ip6gretap5): Releasing active interface
[  107.140895][ T8240] bond12: (slave ip6gretap5): the permanent HWaddr of slave - 7e:cf:1d:c7:fa:af - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  107.149576][ T8240] bond12: (slave bridge7): Releasing active interface
[  107.154127][ T8240] bond14: (slave ip6gretap6): Releasing active interface
[  107.156758][ T8240] bond14: (slave ip6gretap6): the permanent HWaddr of slave - 6a:b8:7b:89:8c:3f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  107.165633][ T8240] bond14: (slave bridge8): Releasing active interface
[  107.171546][ T8240] batman_adv: batadv0: Removing interface: macvlan2
[  107.176896][ T8240] bond15: (slave ip6gretap8): Releasing active interface
[  107.179797][ T8240] bond15: (slave ip6gretap8): the permanent HWaddr of slave - 2e:c6:d9:e4:83:8f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  107.190632][ T8240] bond15: (slave bridge10): Releasing active interface
[  107.229128][ T8245] 8021q: adding VLAN 0 to HW filter on device bond6
[  107.253554][ T8248] bond6: (slave ip6gretap5): making interface the new active one
[  107.257432][ T8248] bond6: (slave ip6gretap5): Enslaving as an active interface with an up link
[  107.288981][ T8245] bond6: (slave bridge9): Enslaving as an active interface with a down link
[  107.304531][ T5875] IPVS: starting estimator thread 0...
[  107.329376][ T8245] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  107.398262][ T8255] IPVS: using max 36 ests per chain, 86400 per kthread
[  107.634146][ T8259] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.639925][ T8259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.577891][ T8292] __nla_validate_parse: 20 callbacks suppressed
[  108.577913][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.559'.
[  109.821679][ T8288] veth5: entered promiscuous mode
[  109.825524][ T8288] bond7: (slave veth5): Enslaving as a backup interface with a down link
[  109.833242][ T8292] 8021q: adding VLAN 0 to HW filter on device bond7
[  109.876262][ T8298] bond0: Device is already in use.
[  109.899305][ T8301] validate_nla: 4 callbacks suppressed
[  109.899323][ T8301] netlink: 'syz.1.562': attribute type 1 has an invalid length.
[  109.929748][ T8301] 8021q: adding VLAN 0 to HW filter on device bond8
[  109.940138][ T8306] netlink: 48 bytes leftover after parsing attributes in process `syz.0.564'.
[  109.944703][ T8301] bond8: (slave ip6gretap6): making interface the new active one
[  109.945245][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'.
[  109.947866][ T8301] bond8: (slave ip6gretap6): Enslaving as an active interface with an up link
[  109.953694][ T8307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.564'.
[  109.971410][ T8307] bridge0: port 1(vlan3) entered blocking state
[  109.974402][ T8307] bridge0: port 1(vlan3) entered disabled state
[  109.977280][ T8307] vlan3: entered allmulticast mode
[  109.979871][ T8307] bridge0: entered allmulticast mode
[  109.983663][ T8307] vlan3: left allmulticast mode
[  109.985751][ T8307] bridge0: left allmulticast mode
[  110.023405][ T8301] bond8: (slave bridge0): Enslaving as an active interface with a down link
[  110.034231][ T8301] bond8: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  110.059971][ T8310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.565'.
[  110.161851][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'.
[  110.267596][ T8342] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080
[  110.276162][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'.
[  110.282464][ T8342] bond0: entered promiscuous mode
[  110.285464][ T8342] bond0: left promiscuous mode
[  110.297536][ T8343] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  110.485194][ T8354] netlink: 'syz.0.576': attribute type 1 has an invalid length.
[  110.518485][ T8354] 8021q: adding VLAN 0 to HW filter on device bond16
[  110.546569][ T8354] bond16: (slave ip6gretap9): making interface the new active one
[  110.550635][ T8354] bond16: (slave ip6gretap9): Enslaving as an active interface with an up link
[  110.567767][ T8354] bond16: (slave bridge11): Enslaving as an active interface with a down link
[  110.584935][ T8354] bond16: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  110.645659][ T8365] 8021q: adding VLAN 0 to HW filter on device bond9
[  110.660273][ T8362] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  110.664452][ T8362] bond9: (slave macvlan0): Enslaving as a backup interface with a down link
[  110.715397][ T8370] macvlan0: entered allmulticast mode
[  110.725750][ T8370] bond9: (slave macvlan0): Releasing backup interface
[  110.732861][ T8370] bond0: entered allmulticast mode
[  110.736309][ T8370] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  110.742950][ T8370] team0: Port device macvlan0 added
[  110.747289][ T8372] netlink: 87 bytes leftover after parsing attributes in process `syz.0.582'.
[  110.753121][ T8372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.756014][ T8372] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  110.758691][ T8372] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  110.761625][ T8372] tipc: Resetting bearer <eth:syzkaller0>
[  110.776912][ T8372] tipc: Resetting bearer <eth:syzkaller0>
[  110.851556][ T6852] tipc: Resetting bearer <eth:syzkaller0>
[  111.162230][ T8387] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[  111.243654][ T8387] 8021q: adding VLAN 0 to HW filter on device bond17
[  111.247688][ T8391] 8021q: VLANs not supported on ip6tnl0
[  111.290451][ T8387] bond17: (slave bridge12): making interface the new active one
[  111.294947][ T8387] bond17: (slave bridge12): Enslaving as an active interface with an up link
[  111.312165][ T8387] bond17: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  111.441635][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'.
[  111.453559][ T8397] netlink: 'syz.2.588': attribute type 29 has an invalid length.
[  111.732782][ T8407] pimreg: entered allmulticast mode
[  111.735478][ T8407] pimreg: left allmulticast mode
[  111.809524][ T8417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.823073][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'.
[  111.851062][ T8421] netlink: 'syz.1.595': attribute type 1 has an invalid length.
[  111.870737][ T8421] 8021q: adding VLAN 0 to HW filter on device bond10
[  111.884108][ T8421] bond10: (slave ip6gretap7): making interface the new active one
[  111.887290][ T8421] bond10: (slave ip6gretap7): Enslaving as an active interface with an up link
[  111.905185][ T8421] bond10: (slave bridge10): Enslaving as an active interface with a down link
[  111.917796][ T8421] bond10: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  111.984107][ T8428] netlink: 'syz.2.596': attribute type 3 has an invalid length.
[  111.987009][ T8428] netlink: 'syz.2.596': attribute type 1 has an invalid length.
[  112.036931][ T8432] pim6reg1: entered promiscuous mode
[  112.043599][ T8432] pim6reg1: entered allmulticast mode
[  112.137549][ T8440] netlink: 'syz.2.600': attribute type 10 has an invalid length.
[  112.143916][ T8440] netlink: 'syz.2.600': attribute type 10 has an invalid length.
[  112.183599][ T8432] bond11 (unregistering): Released all slaves
[  112.811214][ T8449] team0: Device gtp0 is of different type
[  113.289790][ T8472] vlan0: entered promiscuous mode
[  113.292103][ T8472] bridge0: entered promiscuous mode
[  113.354924][ T8474] netlink: 'syz.0.613': attribute type 1 has an invalid length.
[  113.453171][ T8482] bond17: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  113.458023][ T8482] bond17: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  113.462888][ T8482] bond17: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  113.596839][ T8486] __nla_validate_parse: 12 callbacks suppressed
[  113.596856][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'.
[  113.607953][ T8486] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  113.773682][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'.
[  113.780927][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'.
[  113.792657][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.792669][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'.
[  113.795946][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.795982][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.796009][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.826399][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'.
[  113.827004][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'.
[  113.834227][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'.
[  113.916983][ T8501] 8021q: adding VLAN 0 to HW filter on device bond11
[  114.080516][ T8511] bond6: (slave ip6gretap5): Releasing active interface
[  114.083301][ T8511] bond6: (slave ip6gretap5): the permanent HWaddr of slave - fa:b9:a0:c2:5e:c3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  114.095132][ T8511] bond6: (slave bridge9): Releasing active interface
[  114.110455][ T8511] bond7: (slave veth5): Releasing backup interface
[  114.119329][ T8511] bond8: (slave ip6gretap6): Releasing active interface
[  114.122597][ T8511] bond8: (slave ip6gretap6): the permanent HWaddr of slave - b2:0d:90:d7:20:c9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  114.141014][ T8511] bond8: (slave bridge0): Releasing active interface
[  114.162375][ T8511] bond0: left allmulticast mode
[  114.174536][ T8511] team0: Port device macvlan0 removed
[  114.182720][ T8511] bond10: (slave ip6gretap7): Releasing active interface
[  114.185553][ T8511] bond10: (slave ip6gretap7): the permanent HWaddr of slave - 52:78:4b:a3:c1:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  114.196597][ T8511] bond10: (slave bridge10): Releasing active interface
[  114.330361][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'.
[  114.521257][ T8539] syzkaller1: entered promiscuous mode
[  114.525411][ T8539] syzkaller1: entered allmulticast mode
[  114.533898][ T8539] netlink: 248 bytes leftover after parsing attributes in process `syz.2.629'.
[  114.753797][ T8547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.757079][ T8547] IPv6: NLM_F_CREATE should be set when creating new route
[  114.765724][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'.
[  115.603644][ T8605] tipc: Resetting bearer <eth:syzkaller0>
[  115.609360][ T8605] bond16: (slave ip6gretap9): Releasing active interface
[  115.613679][ T8605] bond16: (slave ip6gretap9): the permanent HWaddr of slave - 62:59:bd:17:1c:c4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  115.632292][ T8605] bond16: (slave bridge11): Releasing active interface
[  115.651033][ T8605] team0: Mode changed to "activebackup"
[  115.763285][ T8609] 8021q: VLANs not supported on nlmon0
[  115.979990][ T8621] netlink: zone id is out of range
[  115.981689][ T8621] netlink: zone id is out of range
[  115.983331][ T8621] netlink: zone id is out of range
[  115.985188][ T8621] netlink: zone id is out of range
[  115.987144][ T8621] netlink: zone id is out of range
[  115.989546][ T8621] netlink: zone id is out of range
[  115.991818][ T8621] netlink: zone id is out of range
[  115.993960][ T8621] netlink: zone id is out of range
[  115.995755][ T8621] netlink: zone id is out of range
[  115.998323][ T8621] netlink: zone id is out of range
[  116.104395][ T8628] IPVS: set_ctl: invalid protocol: 137 172.30.1.3:20002
[  116.199984][ T8635] validate_nla: 4 callbacks suppressed
[  116.199997][ T8635] netlink: 'syz.2.651': attribute type 1 has an invalid length.
[  116.219460][ T8635] bond18: entered promiscuous mode
[  116.221407][ T8635] 8021q: adding VLAN 0 to HW filter on device bond18
[  116.433343][ T8655] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000
[  116.663710][ T8668] netlink: 'syz.1.660': attribute type 1 has an invalid length.
[  116.766821][ T8676] netlink: 'syz.2.662': attribute type 1 has an invalid length.
[  116.793221][ T8676] 8021q: adding VLAN 0 to HW filter on device bond19
[  116.815728][ T8676] 8021q: adding VLAN 0 to HW filter on device bond19
[  116.819116][ T8676] bond19: (slave vcan0): The slave device specified does not support setting the MAC address
[  116.825641][ T8676] bond19: (slave vcan0): Error -95 calling set_mac_address
[  116.866057][ T8680] macvlan1: entered promiscuous mode
[  116.870081][ T8680] macvlan1: entered allmulticast mode
[  116.873820][ T8680] bond19: entered promiscuous mode
[  116.876688][ T8680] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  116.884202][ T8680] bond19: left promiscuous mode
[  116.911164][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.914884][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.919027][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.922516][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.079310][ T8687] ip6gretap0: left allmulticast mode
[  117.084033][ T8687] 8021q: adding VLAN 0 to HW filter on device team0
[  117.105226][ T8694] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  117.148685][ T8694] netlink: 'syz.0.668': attribute type 5 has an invalid length.
[  117.151718][ T8694] netlink: 'syz.0.668': attribute type 5 has an invalid length.
[  117.542473][ T8725] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  117.563991][ T8725] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  117.724206][ T8733] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  117.763685][ T8745] netlink: 'syz.0.682': attribute type 11 has an invalid length.
[  117.772148][ T8747] netlink: 'syz.0.682': attribute type 11 has an invalid length.
[  117.842192][ T8752] bridge0: port 1(vlan3) entered blocking state
[  117.845217][ T8752] bridge0: port 1(vlan3) entered disabled state
[  117.847756][ T8752] vlan3: entered allmulticast mode
[  117.849983][ T8752] bridge0: entered allmulticast mode
[  117.853947][ T8752] vlan3: left allmulticast mode
[  117.855819][ T8752] bridge0: left allmulticast mode
[  117.984029][ T8760] netlink: 'syz.1.686': attribute type 2 has an invalid length.
[  118.008267][ T8762] bridge0: port 1(ipvlan0) entered blocking state
[  118.009110][ T8764] netlink: 'syz.0.688': attribute type 13 has an invalid length.
[  118.011291][ T8762] bridge0: port 1(ipvlan0) entered disabled state
[  118.014114][ T8764] netlink: 'syz.0.688': attribute type 17 has an invalid length.
[  118.017097][ T8762] ipvlan0: entered allmulticast mode
[  118.023111][ T8762] bridge0: entered allmulticast mode
[  118.028397][ T8762] ipvlan0: left allmulticast mode
[  118.030570][ T8762] bridge0: left allmulticast mode
[  118.124727][ T8764] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.129340][ T8764] 8021q: adding VLAN 0 to HW filter on device team0
[  118.247254][ T8776] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  118.283586][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.301492][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.304112][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.306932][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.811598][ T8822] __nla_validate_parse: 22 callbacks suppressed
[  118.811613][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[  118.954550][ T8830] : entered promiscuous mode
[  118.980496][ T8831] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  118.983445][ T8831] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  118.986399][ T8831] macsec3: left promiscuous mode
[  118.988843][ T8831] macsec3: left allmulticast mode
[  119.025491][ T8831] bond18: left promiscuous mode
[  119.067841][ T8833] netlink: 64 bytes leftover after parsing attributes in process `syz.1.703'.
[  119.085335][ T6209] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.143734][ T6209] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.152588][ T6209] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.155518][ T6209] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.227652][ T8842] netlink: 44 bytes leftover after parsing attributes in process `syz.0.704'.
[  119.237963][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'.
[  119.249526][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  119.286456][ T8842] netlink: 96 bytes leftover after parsing attributes in process `syz.0.704'.
[  119.459486][ T5845] Bluetooth: hci2: link tx timeout
[  119.461653][ T5845] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.474049][ T8849] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.477510][ T8849] syzkaller0: entered promiscuous mode
[  119.482313][ T8849] syzkaller0: entered allmulticast mode
[  119.493501][ T8849] tipc: Resetting bearer <eth:syzkaller0>
[  119.507435][ T8848] tipc: Resetting bearer <eth:syzkaller0>
[  119.524310][ T8848] tipc: Disabling bearer <eth:syzkaller0>
[  119.534214][   T55] Bluetooth: hci2: link tx timeout
[  119.537145][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.571164][   T55] Bluetooth: hci2: link tx timeout
[  119.573323][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.647117][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.707'.
[  119.707876][ T8857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.707'.
[  120.066160][ T8864] bond20 (unregistering): Released all slaves
[  120.289673][ T8879] macsec0: left promiscuous mode
[  120.342929][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.715'.
[  120.471760][   T55] Bluetooth: hci2: link tx timeout
[  120.473897][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.482802][ T8888] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.485882][ T8887] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.549021][   T55] Bluetooth: hci2: link tx timeout
[  120.551402][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.741277][ T8900] netlink: 248 bytes leftover after parsing attributes in process `syz.2.720'.
[  120.809613][ T8907] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  120.812157][ T8907] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  121.084249][   T55] Bluetooth: hci2: link tx timeout
[  121.086083][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.464332][ T8967] validate_nla: 10 callbacks suppressed
[  121.464345][ T8967] netlink: 'syz.0.732': attribute type 1 has an invalid length.
[  121.518751][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  121.610431][ T8974] 8021q: adding VLAN 0 to HW filter on device bond14
[  121.615771][ T8974] bond0: (slave bond14): Enslaving as an active interface with a down link
[  121.633740][ T8978] batadv_slave_1: entered promiscuous mode
[  121.786942][ T8977] batadv_slave_1: left promiscuous mode
[  121.882037][ T8998] ip6gre2: entered allmulticast mode
[  121.918437][ T9002] netlink: 'syz.1.740': attribute type 20 has an invalid length.
[  121.923666][ T9002] netlink: 'syz.1.740': attribute type 20 has an invalid length.
[  122.052123][ T9011] netlink: 'syz.0.744': attribute type 1 has an invalid length.
[  122.135383][ T9011] sctp: [Deprecated]: syz.0.744 (pid 9011) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.135383][ T9011] Use struct sctp_sack_info instead
[  122.173633][ T9021] net_ratelimit: 19 callbacks suppressed
[  122.173652][ T9021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.328023][ T9024] netlink: 'syz.2.748': attribute type 2 has an invalid length.
[  122.337612][ T9024] k*]: entered promiscuous mode
[  122.340649][ T9027] netlink: 'syz.0.747': attribute type 1 has an invalid length.
[  122.344116][ T9027] NCSI netlink: No device for ifindex 0
[  122.347109][ T9026] netlink: 'syz.0.747': attribute type 1 has an invalid length.
[  122.350914][ T9026] NCSI netlink: No device for ifindex 0
[  122.369756][ T9024] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.373831][ T9024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.569674][ T9051] macvtap0: entered promiscuous mode
[  122.571661][ T9051] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  122.578553][ T9051] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  122.685341][ T9059] bridge0: port 1(macvlan1) entered blocking state
[  122.687686][ T9059] bridge0: port 1(macvlan1) entered disabled state
[  122.690289][ T9059] macvlan1: entered allmulticast mode
[  122.692472][ T9059] bridge0: entered allmulticast mode
[  122.696158][ T9059] macvlan1: left allmulticast mode
[  122.697915][ T9059] bridge0: left allmulticast mode
[  122.965707][ T2202] IPVS: starting estimator thread 0...
[  123.023933][ T9069] netlink: 'syz.2.756': attribute type 16 has an invalid length.
[  123.027146][ T9069] netlink: 'syz.2.756': attribute type 17 has an invalid length.
[  123.053956][ T9069] IPv6: NLM_F_REPLACE set, but no existing node found!
[  123.058522][ T9067] IPVS: using max 37 ests per chain, 88800 per kthread
[  123.122801][ T9071] syzkaller1: entered promiscuous mode
[  123.124994][ T9071] syzkaller1: entered allmulticast mode
[  123.312870][ T9075] tipc: Resetting bearer <eth:syzkaller0>
[  124.142562][ T9078] __nla_validate_parse: 27 callbacks suppressed
[  124.142575][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.759'.
[  124.203920][ T9090] netlink: 'syz.1.762': attribute type 2 has an invalid length.
[  124.215006][ T9091] pim6reg9: entered allmulticast mode
[  124.280857][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'.
[  124.298974][ T9095] chnl_net:caif_netlink_parms(): no params data found
[  124.364611][ T9100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.765'.
[  124.399187][ T9100] netlink: 724 bytes leftover after parsing attributes in process `syz.1.765'.
[  124.411219][ T9100] netlink: 83 bytes leftover after parsing attributes in process `syz.1.765'.
[  124.432320][ T9102] bond15: (slave ip6gretap6): Releasing active interface
[  124.434620][ T9102] bond15: (slave ip6gretap6): the permanent HWaddr of slave - 5e:a9:b2:9a:f4:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  124.456718][ T9102] bond15: (slave bridge9): Releasing active interface
[  124.467356][ T9102] bond16: (slave ip6gretap7): Releasing active interface
[  124.471750][ T9102] bond16: (slave ip6gretap7): the permanent HWaddr of slave - 4a:33:5a:fc:9e:bc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  124.482725][ T9102] bond16: (slave bridge10): Releasing active interface
[  124.487854][ T9102] bond17: (slave bridge12): Releasing active interface
[  124.552370][ T9116] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.556170][ T9116] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.606199][ T9121] bridge0: entered promiscuous mode
[  124.608605][ T9121] bridge0: entered allmulticast mode
[  124.883713][ T9131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.887176][ T9131] syzkaller0: entered promiscuous mode
[  124.890524][ T9131] syzkaller0: entered allmulticast mode
[  124.898264][ T9131] tipc: Resetting bearer <eth:syzkaller0>
[  124.901818][ T9130] tipc: Resetting bearer <eth:syzkaller0>
[  124.914447][ T9130] tipc: Disabling bearer <eth:syzkaller0>
[  125.106636][ T9138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.776'.
[  125.328782][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'.
[  125.625854][ T9154] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (254)
[  125.704274][ T9151] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.781'.
[  125.707946][ T9151] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.781'.
[  125.768267][ T9159] bond20: (slave bridge13): making interface the new active one
[  125.771594][ T9159] bond20: (slave bridge13): Enslaving as an active interface with an up link
[  125.859077][ T9167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.787'.
[  125.991521][ T9182] bond0 (unregistering): Released all slaves
[  126.034386][ T9181] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  126.262723][ T9198] Unsupported Adiantum instantiation: (xts(serpent),seed,nhpoly1305)
[  126.271016][ T9192] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  126.343788][ T9205] bridge14: entered promiscuous mode
[  126.345801][ T9205] bridge14: entered allmulticast mode
[  126.406049][ T9207] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  126.480987][ T9209] 8021q: adding VLAN 0 to HW filter on device bond15
[  126.492275][ T9209] ipvlan0: entered allmulticast mode
[  126.494620][ T9209] bond15: entered allmulticast mode
[  126.584201][ T9216] validate_nla: 12 callbacks suppressed
[  126.584214][ T9216] netlink: 'syz.1.799': attribute type 21 has an invalid length.
[  126.592944][ T9216] netlink: 'syz.1.799': attribute type 22 has an invalid length.
[  126.595565][ T9216] netlink: 'syz.1.799': attribute type 23 has an invalid length.
[  126.603407][ T9216] netlink: 'syz.1.799': attribute type 25 has an invalid length.
[  126.605866][ T9216] netlink: 'syz.1.799': attribute type 26 has an invalid length.
[  126.676929][ T9233] bond0: Device is already in use.
[  126.886822][ T9250] team0: entered promiscuous mode
[  127.001771][ T9250] team0 (unregistering): left promiscuous mode
[  127.150517][ T9269] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.175883][ T9271] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[  127.197210][ T9271] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  127.325307][ T9289] netlink: 'syz.1.813': attribute type 10 has an invalid length.
[  127.392111][ T9294] netlink: 'syz.1.815': attribute type 1 has an invalid length.
[  127.435444][ T9294] 8021q: adding VLAN 0 to HW filter on device bond16
[  127.459490][ T9294] bond16: (slave ip6gretap8): making interface the new active one
[  127.463742][ T9294] bond16: (slave ip6gretap8): Enslaving as an active interface with an up link
[  127.469959][ T9299] syz_tun: entered allmulticast mode
[  127.503343][ T9294] bond16: (slave bridge15): Enslaving as an active interface with a down link
[  127.552858][ T9294] bond16: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  127.591583][ T9288] syz_tun: left allmulticast mode
[  127.639164][ T9305] veth0_to_bond: entered allmulticast mode
[  127.695842][ T9311] netlink: 'syz.1.818': attribute type 13 has an invalid length.
[  127.902056][ T9313] batadv_slave_0: entered promiscuous mode
[  127.911950][ T9317] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  127.923924][ T9316] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  127.943782][ T5908] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.947304][ T5908] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.955609][ T5908] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.977772][ T5908] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.982300][ T5908] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.985640][ T5908] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.992624][ T9314] batadv_slave_0: left promiscuous mode
[  127.996598][ T5908] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.001930][ T5908] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.018917][ T9327] bridge0: port 1(macvlan2) entered blocking state
[  128.021605][ T9327] bridge0: port 1(macvlan2) entered disabled state
[  128.024304][ T9327] macvlan2: entered allmulticast mode
[  128.026850][ T9327] bridge0: entered allmulticast mode
[  128.042633][ T9327] macvlan2: left allmulticast mode
[  128.044687][ T9327] bridge0: left allmulticast mode
[  128.247721][ T9341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.258262][ T9341] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  128.279726][ T9341] tipc: Resetting bearer <eth:syzkaller0>
[  128.333983][ T6849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.336632][ T6849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.371620][ T9345] veth7: entered promiscuous mode
[  128.377606][ T9347] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.529882][ T9358] netlink: 'syz.2.829': attribute type 1 has an invalid length.
[  128.565178][ T9358] 8021q: adding VLAN 0 to HW filter on device bond21
[  128.580130][ T9358] bond21: (slave ip6gretap9): making interface the new active one
[  128.584418][ T9358] bond21: (slave ip6gretap9): Enslaving as an active interface with an up link
[  128.590004][ T9354] batadv_slave_1: entered promiscuous mode
[  128.603377][ T9358] bond21: (slave bridge15): Enslaving as an active interface with a down link
[  128.673060][ T9358] bond21: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  128.722849][ T9354] hsr_slave_0: left promiscuous mode
[  128.726476][ T9354] hsr_slave_1: left promiscuous mode
[  128.787054][ T9348] batadv_slave_1: left promiscuous mode
[  128.802033][ T9363] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  128.813837][ T9363] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  128.822240][ T9363] tipc: Resetting bearer <eth:syzkaller0>
[  128.859382][ T9363] bond0 (unregistering): Released all slaves
[  129.014907][ T9379] veth0_to_bond: left allmulticast mode
[  129.023347][ T9379] mac80211_hwsim hwsim9 wlan0: left promiscuous mode
[  129.033497][ T9379] macsec0: left allmulticast mode
[  129.035562][ T9379] veth17: left allmulticast mode
[  129.037442][ T9379] veth19: left allmulticast mode
[  129.039671][ T9379] tipc: Resetting bearer <eth:syzkaller0>
[  129.048797][ T9379] bridge0: left promiscuous mode
[  129.050771][ T9379] bridge0: left allmulticast mode
[  129.073862][ T9382] pim6reg1: entered promiscuous mode
[  129.075541][ T9382] pim6reg1: entered allmulticast mode
[  129.156110][ T9389] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.179163][ T9389] __nla_validate_parse: 23 callbacks suppressed
[  129.179178][ T9389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.837'.
[  129.210394][ T9389] bond17: entered promiscuous mode
[  129.212452][ T9389] bond17: entered allmulticast mode
[  129.214295][ T9389] 8021q: adding VLAN 0 to HW filter on device bond17
[  129.245455][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'.
[  129.352007][ T9406] 8021q: adding VLAN 0 to HW filter on device bond18
[  129.363145][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'.
[  129.492782][ T9419] syzkaller1: entered promiscuous mode
[  129.494734][ T9419] syzkaller1: entered allmulticast mode
[  129.625569][ T9426] x9: renamed from bridge_slave_0
[  129.741373][ T9432] team0: Port device dummy0 added
[  129.751408][ T9432] team0: Port device dummy0 removed
[  130.334639][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'.
[  130.564091][ T9458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.855'.
[  130.583001][ T6849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.585472][ T6849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.620055][ T9458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.855'.
[  130.672087][ T9467] 8021q: adding VLAN 0 to HW filter on device bond19
[  130.682882][ T9467] bond19: (slave ip6gretap9): making interface the new active one
[  130.686150][ T9467] bond19: (slave ip6gretap9): Enslaving as an active interface with an up link
[  130.698861][ T9467] bond19: (slave bridge19): Enslaving as an active interface with a down link
[  130.711822][ T9467] bond19: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  130.888578][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'.
[  130.897141][ T9486] vlan1: entered promiscuous mode
[  130.901455][ T9486] ip6gretap0: entered promiscuous mode
[  131.086904][ T9503] netlink: 260 bytes leftover after parsing attributes in process `syz.1.867'.
[  131.097317][ T9503] netlink: 260 bytes leftover after parsing attributes in process `syz.1.867'.
[  131.102359][ T9503] netlink: 260 bytes leftover after parsing attributes in process `syz.1.867'.
[  131.705583][ T9550] validate_nla: 10 callbacks suppressed
[  131.705603][ T9550] netlink: 'syz.2.877': attribute type 15 has an invalid length.
[  131.976755][ T9555] veth0_to_bond: entered allmulticast mode
[  132.056927][ T9562] netlink: 'syz.2.881': attribute type 1 has an invalid length.
[  132.079577][ T9562] 8021q: adding VLAN 0 to HW filter on device bond22
[  132.095636][ T9562] bond22: (slave ip6gretap10): making interface the new active one
[  132.099224][ T9562] bond22: (slave ip6gretap10): Enslaving as an active interface with an up link
[  132.111205][ T9562] bond22: (slave bridge17): Enslaving as an active interface with a down link
[  132.120197][ T9562] bond22: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  132.253417][ T9567] netlink: 'syz.2.883': attribute type 13 has an invalid length.
[  132.350489][ T9570] netlink: 'syz.1.884': attribute type 12 has an invalid length.
[  132.443481][ T9574] dvmrp1: left allmulticast mode
[  132.711671][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.762046][ T9590] netlink: 'syz.1.889': attribute type 1 has an invalid length.
[  132.792643][ T9590] 8021q: adding VLAN 0 to HW filter on device bond20
[  132.808734][ T9590] bond20: (slave ip6gretap10): making interface the new active one
[  132.815664][ T9590] bond20: (slave ip6gretap10): Enslaving as an active interface with an up link
[  132.827924][ T9590] bond20: (slave bridge20): Enslaving as an active interface with a down link
[  132.837519][ T9590] bond20: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  132.917287][ T9598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.920783][ T9599] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.924805][ T9598] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  132.930189][ T9598] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  132.934818][ T9598] tipc: Resetting bearer <eth:syzkaller0>
[  132.954383][ T9598] tipc: Resetting bearer <eth:syzkaller0>
[  133.013076][ T9605] dvmrp0: entered allmulticast mode
[  133.091009][ T9614] netlink: 'syz.2.895': attribute type 29 has an invalid length.
[  133.174223][ T9621] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  133.244213][ T9625] dvmrp1: entered allmulticast mode
[  133.248013][ T9625] dvmrp0: left allmulticast mode
[  133.250662][ T9625] dvmrp1: left allmulticast mode
[  133.360506][ T9634] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  133.476483][ T9638] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  133.479177][ T9645] netlink: 'syz.2.902': attribute type 4 has an invalid length.
[  133.494928][ T9645] tipc: Resetting bearer <eth:syzkaller0>
[  133.790836][ T9661] dvmrp1: entered allmulticast mode
[  133.931443][ T5875] tipc: Node number set to 2468956657
[  134.047929][ T9671] netlink: 'syz.2.912': attribute type 4 has an invalid length.
[  134.057837][ T9671] netlink: 'syz.2.912': attribute type 4 has an invalid length.
[  134.491055][ T9680] __nla_validate_parse: 50 callbacks suppressed
[  134.491069][ T9680] netlink: 56 bytes leftover after parsing attributes in process `syz.0.913'.
[  134.632058][ T9688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.914'.
[  134.707049][ T9691] netlink: 'syz.0.916': attribute type 1 has an invalid length.
[  134.716073][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'.
[  134.740655][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.755961][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'.
[  134.763760][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.917'.
[  134.791695][ T9691] veth25: entered promiscuous mode
[  134.802812][ T9691] bond0: (slave veth25): Enslaving as an active interface with a down link
[  134.830761][ T9691] erspan0: entered allmulticast mode
[  134.900206][ T9704] 8021q: adding VLAN 0 to HW filter on device bond22
[  134.906852][ T9707] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  134.928979][ T9704] bond22: (slave ip6gretap11): making interface the new active one
[  134.932845][ T9704] bond22: (slave ip6gretap11): Enslaving as an active interface with an up link
[  134.966696][ T9704] bond22: (slave bridge22): Enslaving as an active interface with a down link
[  134.976901][ T9704] bond22: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  134.994535][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.922'.
[  135.083695][ T9711] veth0_to_bond: left allmulticast mode
[  135.126571][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'.
[  135.145535][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'.
[  135.165443][ T9714] vlan0: entered allmulticast mode
[  135.167242][ T9714] veth1: entered allmulticast mode
[  135.201176][ T9722] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.344912][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.0.928'.
[  135.445301][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.929'.
[  135.467999][ T9733] 8021q: adding VLAN 0 to HW filter on device bond23
[  135.590320][ T9746] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.593765][ T9746] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  135.596669][ T9746] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  135.603425][ T9746] tipc: Resetting bearer <eth:syzkaller0>
[  135.610253][ T9750] chnl_net:caif_netlink_parms(): no params data found
[  135.663643][ T9761] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.761189][ T9771] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.767546][ T9771] tipc: Resetting bearer <eth:syzkaller0>
[  135.864543][ T9787] tipc: Resetting bearer <eth:syzkaller0>
[  135.869211][ T9787] bond0: (slave veth25): Releasing active interface
[  135.977024][ T9795] 8021q: adding VLAN 0 to HW filter on device bond19
[  136.005570][ T9795] bond19: (slave ip6gretap10): making interface the new active one
[  136.013437][ T9795] bond19: (slave ip6gretap10): Enslaving as an active interface with an up link
[  136.045136][ T9795] bond19: (slave bridge0): Enslaving as an active interface with a down link
[  136.062879][ T9795] bond19: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  136.344937][ T9824] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  136.347921][ T9824] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  136.353812][ T9824] tipc: Resetting bearer <eth:syzkaller0>
[  136.519219][ T9827] geneve2: entered promiscuous mode
[  136.521587][ T9827] geneve2: entered allmulticast mode
[  136.525470][ T6209] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  136.555762][ T9826] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  136.630924][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  136.647897][ T6209] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  136.665918][ T6209] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  136.680960][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  136.848854][ T9840] validate_nla: 6 callbacks suppressed
[  136.848870][ T9840] netlink: 'syz.2.955': attribute type 2 has an invalid length.
[  136.861273][ T9842] netlink: 'syz.1.956': attribute type 1 has an invalid length.
[  136.897081][ T9842] 8021q: adding VLAN 0 to HW filter on device bond24
[  136.911878][ T9842] bond24: (slave ip6gretap12): making interface the new active one
[  136.916233][ T9842] bond24: (slave ip6gretap12): Enslaving as an active interface with an up link
[  136.932725][ T9842] bond24: (slave bridge23): Enslaving as an active interface with a down link
[  136.943584][ T9842] bond24: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  137.085054][ T9857] tipc: Resetting bearer <eth:syzkaller0>
[  137.099774][ T9857] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  137.106394][ T9857] geneve2: left promiscuous mode
[  137.120262][ T6209] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  137.123177][ T6209] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  137.126039][ T6209] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  137.154270][ T6209] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  137.203593][ T9865] batadv3: entered promiscuous mode
[  137.364984][ T9874] macvtap0: entered promiscuous mode
[  137.367359][ T9874] team0: entered promiscuous mode
[  137.372075][ T9874] macvtap0: entered allmulticast mode
[  137.374266][ T9874] team0: entered allmulticast mode
[  137.376775][ T9874] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  137.390827][ T9876] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.394941][ T9876] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  137.402810][ T9876] tipc: Resetting bearer <eth:syzkaller0>
[  137.406693][ T9874] macvtap0: left promiscuous mode
[  137.409102][ T9874] team0: left promiscuous mode
[  137.412421][ T9874] macvtap0: left allmulticast mode
[  137.414342][ T9874] team0: left allmulticast mode
[  137.445291][ T9879] openvswitch: netlink: Multiple metadata blocks provided
[  137.507442][ T9886] netlink: 'syz.1.969': attribute type 4 has an invalid length.
[  137.850271][ T9912] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.903303][ T9927] geneve0: entered allmulticast mode
[  139.429796][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  139.695830][ T9966] netlink: 'syz.1.983': attribute type 1 has an invalid length.
[  139.819031][ T9966] 8021q: adding VLAN 0 to HW filter on device bond25
[  139.851167][ T9967] bond25: (slave bridge24): making interface the new active one
[  139.856831][ T9967] bond25: (slave bridge24): Enslaving as an active interface with an up link
[  139.920839][ T9966] bond25: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  140.105142][ T9981] sctp: [Deprecated]: syz.1.986 (pid 9981) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.105142][ T9981] Use struct sctp_sack_info instead
[  140.130180][ T9981] __nla_validate_parse: 20 callbacks suppressed
[  140.130202][ T9981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.986'.
[  140.138578][ T9983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.986'.
[  140.144919][ T9981] netlink: 'syz.1.986': attribute type 39 has an invalid length.
[  140.205171][ T9989] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.324933][ T9999] netlink: 'syz.2.988': attribute type 1 has an invalid length.
[  140.333399][ T9999] netlink: 224 bytes leftover after parsing attributes in process `syz.2.988'.
[  140.345677][ T9999] syzkaller1: entered promiscuous mode
[  140.347994][ T9999] syzkaller1: entered allmulticast mode
[  140.362743][ T9999] netlink: 72 bytes leftover after parsing attributes in process `syz.2.988'.
[  140.965196][T10017] netlink: 'syz.1.991': attribute type 8 has an invalid length.
[  141.249530][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'.
[  141.290297][ T9999] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  141.295980][ T9999] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  141.311283][ T9999] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  141.318208][ T9999] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  141.408735][ T9999] tipc: Resetting bearer <eth:syzkaller0>
[  141.441433][ T9999] tipc: Resetting bearer <eth:syzkaller0>
[  141.504488][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'.
[  141.682812][T10039] netlink: 6 bytes leftover after parsing attributes in process `syz.1.997'.
[  141.696343][T10039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.702871][T10041] netlink: 6 bytes leftover after parsing attributes in process `syz.1.997'.
[  141.706202][T10041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.775884][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'.
[  141.780532][T10045] netlink: 216 bytes leftover after parsing attributes in process `syz.2.998'.
[  141.844744][T10059] netlink: 'syz.0.1000': attribute type 2 has an invalid length.
[  141.902710][T10059] dvmrp8: entered allmulticast mode
[  141.950720][T10038] delete_channel: no stack
[  142.151671][T10058] dvmrp8: left allmulticast mode
[  142.653344][T10117] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  142.677412][T10117] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  143.322979][T10155] dvmrp8: entered allmulticast mode
[  143.350800][T10155] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  143.363337][T10153] dvmrp8: left allmulticast mode
[  143.398595][T10152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.681860][T10179] netlink: 'syz.1.1017': attribute type 1 has an invalid length.
[  144.455146][T10233] netlink: 'syz.2.1023': attribute type 10 has an invalid length.
[  144.461429][T10235] netlink: 'syz.2.1023': attribute type 10 has an invalid length.
[  144.647763][T10247] openvswitch: netlink: IP tunnel dst address not specified
[  144.907959][T10259] tc_dump_action: action bad kind
[  145.119922][T10281] bond19: (slave ip6gretap10): Releasing active interface
[  145.122920][T10281] bond19: (slave ip6gretap10): the permanent HWaddr of slave - 16:b4:8d:2a:4c:ae - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  145.134727][T10281] bond19: (slave bridge0): Releasing active interface
[  145.149412][T10280] vti2: entered promiscuous mode
[  145.162873][T10278] netlink: 'syz.0.1032': attribute type 10 has an invalid length.
[  145.175849][T10278] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.187596][T10278] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.206006][T10290] __nla_validate_parse: 24 callbacks suppressed
[  145.206022][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'.
[  145.212486][T10290] netlink: 'syz.2.1033': attribute type 30 has an invalid length.
[  145.230793][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.231515][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'.
[  145.237230][T10290] netlink: 'syz.2.1033': attribute type 30 has an invalid length.
[  145.240457][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.242975][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.245622][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.619286][T10306] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  145.687342][T10306] 8021q: adding VLAN 0 to HW filter on device bond27
[  145.710635][T10309] bond27: (slave ip6gretap13): making interface the new active one
[  145.715325][T10309] bond27: (slave ip6gretap13): Enslaving as an active interface with an up link
[  145.742620][T10306] bond27: (slave bridge25): Enslaving as an active interface with a down link
[  145.757118][T10306] bond27: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  145.874612][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'.
[  145.892610][T10318] netlink: 'syz.0.1035': attribute type 10 has an invalid length.
[  145.982262][T10334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1036'.
[  145.991433][T10333] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1038'.
[  146.257626][T10359] netlink: 'syz.2.1041': attribute type 1 has an invalid length.
[  146.309660][T10366] netlink: 'syz.1.1042': attribute type 1 has an invalid length.
[  146.352065][T10359] 8021q: adding VLAN 0 to HW filter on device bond23
[  146.404287][T10366] 8021q: adding VLAN 0 to HW filter on device bond28
[  146.415070][T10370] bond28: (slave ip6gretap14): making interface the new active one
[  146.419165][T10370] bond28: (slave ip6gretap14): Enslaving as an active interface with an up link
[  146.437306][T10366] bond28: (slave bridge26): Enslaving as an active interface with a down link
[  146.447938][T10366] bond28: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  146.463563][T10378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1044'.
[  146.567328][T10383] veth9: entered promiscuous mode
[  146.686307][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'.
[  146.711137][T10390] xfrm1: entered promiscuous mode
[  146.713193][T10390] xfrm1: entered allmulticast mode
[  146.717335][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'.
[  146.902572][T10412] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1050'.
[  146.935087][T10414] 8021q: adding VLAN 0 to HW filter on device bond29
[  146.951117][T10414] bond29: (slave ip6gretap15): making interface the new active one
[  146.955730][T10414] bond29: (slave ip6gretap15): Enslaving as an active interface with an up link
[  146.973913][T10414] bond29: (slave bridge28): Enslaving as an active interface with a down link
[  146.986179][T10414] bond29: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  147.075518][T10425] ip6gretap16: entered promiscuous mode
[  147.090793][T10425] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1052'.
[  147.480696][T10467] Bluetooth: MGMT ver 1.23
[  147.654297][T10484] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.719812][T10538] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  149.082429][T10561] validate_nla: 4 callbacks suppressed
[  149.082446][T10561] netlink: 'syz.0.1086': attribute type 4 has an invalid length.
[  149.195538][T10565] erspan0: left allmulticast mode
[  149.199227][T10565] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  149.201937][T10565] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  149.208966][T10565] veth25: left promiscuous mode
[  149.214702][T10565] xfrm1: left promiscuous mode
[  149.216585][T10565] xfrm1: left allmulticast mode
[  149.763603][T10567] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  149.766618][T10567] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  149.924358][T10574] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  150.192120][T10594] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.199125][T10594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.242713][T10597] __nla_validate_parse: 18 callbacks suppressed
[  150.242734][T10597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1096'.
[  150.266221][T10599] netlink: 'syz.2.1094': attribute type 1 has an invalid length.
[  150.343727][T10599] 8021q: adding VLAN 0 to HW filter on device bond24
[  150.406642][T10599] vlan1: entered promiscuous mode
[  150.406671][T10608] netlink: 'syz.1.1098': attribute type 21 has an invalid length.
[  150.412226][T10599] bond24: entered promiscuous mode
[  150.414494][T10599] vlan1: entered allmulticast mode
[  150.426824][T10599] bond24: entered allmulticast mode
[  150.431352][T10608] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1098'.
[  150.441624][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'.
[  150.473451][T10599] bond24: (slave gretap2): making interface the new active one
[  150.476490][T10599] gretap2: entered promiscuous mode
[  150.488963][T10599] gretap2: entered allmulticast mode
[  150.494317][T10599] bond24: (slave gretap2): Enslaving as an active interface with an up link
[  150.556507][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1099'.
[  150.795865][T10635] openvswitch: netlink: Missing key (keys=40, expected=80)
[  150.804202][T10635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1103'.
[  150.881009][T10641] netlink: 'syz.2.1105': attribute type 10 has an invalid length.
[  150.884466][T10641] netlink: 'syz.2.1105': attribute type 10 has an invalid length.
[  151.051334][T10654] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.055411][T10654] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  151.058948][T10654] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  151.115309][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'.
[  151.196411][T10661] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.248353][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'.
[  151.252489][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'.
[  151.284211][T10659] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.301126][T10659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.360819][T10672] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1112'.
[  151.464440][T10684] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1115'.
[  151.485873][T10680] netlink: 'syz.0.1114': attribute type 12 has an invalid length.
[  151.796301][T10713] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  151.996329][T10736] netlink: 'syz.2.1127': attribute type 10 has an invalid length.
[  152.002794][T10736] bond0: (slave wlan1): refused to change device type
[  152.073791][T10742] netlink: 'syz.1.1129': attribute type 1 has an invalid length.
[  152.090201][T10742] bond30: entered promiscuous mode
[  152.092182][T10742] 8021q: adding VLAN 0 to HW filter on device bond30
[  152.133089][T10747] netlink: 'syz.2.1130': attribute type 2 has an invalid length.
[  152.198831][T10753] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  152.349778][T10765] syzkaller1: entered allmulticast mode
[  152.484068][T10773] team0: Refused to change device type
[  152.511597][T10772] team0: Refused to change device type
[  152.707475][T10786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  152.840092][T10796] 8021q: adding VLAN 0 to HW filter on device bond21
[  152.876241][T10796] bond21: (slave ip6gretap11): making interface the new active one
[  152.882734][T10796] bond21: (slave ip6gretap11): Enslaving as an active interface with an up link
[  152.930278][T10796] bond21: (slave bridge12): Enslaving as an active interface with a down link
[  152.960096][T10796] bond21: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  153.672556][T10837] bond25: entered promiscuous mode
[  153.675069][T10837] 8021q: adding VLAN 0 to HW filter on device bond25
[  153.704621][T10841] bond25: (slave bridge18): making interface the new active one
[  153.711435][T10841] bridge18: entered promiscuous mode
[  153.714652][T10841] bond25: (slave bridge18): Enslaving as an active interface with an up link
[  153.889798][T10845] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.893346][T10845] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  153.896175][T10845] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  154.361987][T10871] validate_nla: 6 callbacks suppressed
[  154.362005][T10871] netlink: 'syz.0.1160': attribute type 4 has an invalid length.
[  154.507555][T10890] netlink: 'syz.1.1164': attribute type 4 has an invalid length.
[  154.517262][T10890] netlink: 'syz.1.1164': attribute type 4 has an invalid length.
[  154.955099][T10933] sctp: [Deprecated]: syz.0.1173 (pid 10933) Use of int in max_burst socket option.
[  154.955099][T10933] Use struct sctp_assoc_value instead
[  155.366080][T10968] 8021q: adding VLAN 0 to HW filter on device bond31
[  155.371191][T10968] bond0: (slave bond31): Enslaving as an active interface with a down link
[  155.464920][T10974] __nla_validate_parse: 16 callbacks suppressed
[  155.464934][T10974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1183'.
[  155.473799][T10974] netlink: 'syz.2.1183': attribute type 1 has an invalid length.
[  155.476907][T10974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1183'.
[  155.513349][T10979] pim6reg9: entered allmulticast mode
[  155.701120][ T6209] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.707872][ T6209] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.713783][ T6209] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.717207][ T6209] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.859973][T10996] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1190'.
[  155.863133][T10996] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1190'.
[  155.866644][T10996] netlink: 'syz.2.1190': attribute type 5 has an invalid length.
[  155.871275][T10996] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1190'.
[  156.076260][T11006] netlink: 'syz.2.1192': attribute type 1 has an invalid length.
[  156.079190][T11006] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1192'.
[  156.094024][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'.
[  156.135913][T11010] netlink: 'syz.0.1193': attribute type 1 has an invalid length.
[  156.166317][T11010] 8021q: adding VLAN 0 to HW filter on device bond22
[  156.186346][T11010] bond22: (slave ip6gretap12): making interface the new active one
[  156.191450][T11010] bond22: (slave ip6gretap12): Enslaving as an active interface with an up link
[  156.216246][T11010] bond22: (slave bridge13): Enslaving as an active interface with a down link
[  156.235792][T11010] bond22: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  156.343408][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'.
[  156.390810][ T5846] IPVS: starting estimator thread 0...
[  156.404013][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'.
[  156.414980][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'.
[  156.489872][T11027] IPVS: using max 61 ests per chain, 146400 per kthread
[  156.516533][T11035] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address
[  156.522251][T11035] bond11: (slave wireguard0): Error -95 calling set_mac_address
[  156.545587][T11025] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  156.881655][T11052] netlink: 'syz.2.1203': attribute type 1 has an invalid length.
[  156.920850][T11052] 8021q: adding VLAN 0 to HW filter on device bond26
[  156.963494][T11052] bond26: (slave ip6gretap11): making interface the new active one
[  156.967930][T11052] bond26: (slave ip6gretap11): Enslaving as an active interface with an up link
[  157.011856][T11052] bond26: (slave bridge19): Enslaving as an active interface with a down link
[  157.039420][T11052] bond26: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  157.123568][T11058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.190936][T11060] netlink: 'syz.2.1205': attribute type 1 has an invalid length.
[  157.536707][T11071] tipc: Enabled bearer <eth:macvtap0>, priority 16
[  157.727654][T11082] netlink: 'syz.2.1211': attribute type 1 has an invalid length.
[  157.753530][T11082] 8021q: adding VLAN 0 to HW filter on device bond27
[  157.772339][T11082] bond27: (slave ip6gretap12): making interface the new active one
[  157.777347][T11082] bond27: (slave ip6gretap12): Enslaving as an active interface with an up link
[  157.796941][T11082] bond27: (slave bridge20): Enslaving as an active interface with a down link
[  157.822742][T11082] bond27: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  157.851202][T11086] block nbd0: server does not support multiple connections per device.
[  157.857903][T11086] block nbd0: shutting down sockets
[  158.627726][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  158.637902][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  158.643109][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.646395][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  158.665276][T11120] bond0: (slave bond14): Releasing active interface
[  158.667974][T11120] bond0: (slave bond14): the permanent HWaddr of slave - d6:c8:6d:32:ca:a4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  158.680270][T11120] bond16: (slave ip6gretap8): Releasing active interface
[  158.683223][T11120] bond16: (slave ip6gretap8): the permanent HWaddr of slave - f2:6b:b3:c4:0c:87 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  158.696202][T11120] bond16: (slave bridge15): Releasing active interface
[  158.702709][T11120] bond19: (slave ip6gretap9): Releasing active interface
[  158.705590][T11120] bond19: (slave ip6gretap9): the permanent HWaddr of slave - a2:0c:51:37:8c:4e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  158.719886][T11120] bond19: (slave bridge19): Releasing active interface
[  158.724767][T11120] bond20: (slave ip6gretap10): Releasing active interface
[  158.727657][T11120] bond20: (slave ip6gretap10): the permanent HWaddr of slave - 0a:67:0a:23:a1:e8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  158.742668][T11120] bond20: (slave bridge20): Releasing active interface
[  158.750921][T11120] bond22: (slave ip6gretap11): Releasing active interface
[  158.753731][T11120] bond22: (slave ip6gretap11): the permanent HWaddr of slave - 76:21:d2:ee:af:c1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  158.765992][T11120] bond22: (slave bridge22): Releasing active interface
[  158.776265][T11120] bond24: (slave ip6gretap12): Releasing active interface
[  158.780979][T11120] bond24: (slave ip6gretap12): the permanent HWaddr of slave - d6:09:e2:f0:f6:d6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  158.794318][T11120] bond24: (slave bridge23): Releasing active interface
[  158.936228][T11120] bond25: (slave bridge24): Releasing active interface
[  159.046607][T11120] bond27: (slave ip6gretap13): Releasing active interface
[  159.067893][T11120] bond27: (slave ip6gretap13): the permanent HWaddr of slave - 76:a4:09:e7:6b:30 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  159.172880][T11120] bond27: (slave bridge25): Releasing active interface
[  159.307074][T11120] bond28: (slave ip6gretap14): Releasing active interface
[  159.336152][T11120] bond28: (slave ip6gretap14): the permanent HWaddr of slave - 7a:43:3f:a4:f4:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  159.456470][T11120] bond28: (slave bridge26): Releasing active interface
[  159.574172][T11120] bond29: (slave ip6gretap15): Releasing active interface
[  159.577043][T11120] bond29: (slave ip6gretap15): the permanent HWaddr of slave - ba:c8:74:6a:c1:9d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  159.704555][T11120] bond29: (slave bridge28): Releasing active interface
[  159.784197][T11120] bond0: (slave bond31): Releasing active interface
[  160.662626][T11134] vlan1: entered promiscuous mode
[  160.666460][T11134] bond0: entered promiscuous mode
[  160.685588][T11134] vlan1: entered allmulticast mode
[  160.717610][T11134] bond0: entered allmulticast mode
[  161.005880][T11143] validate_nla: 5 callbacks suppressed
[  161.005900][T11143] netlink: 'syz.1.1224': attribute type 2 has an invalid length.
[  161.069553][T11149] __nla_validate_parse: 12 callbacks suppressed
[  161.069571][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'.
[  161.122821][T11154] netlink: 'syz.1.1227': attribute type 1 has an invalid length.
[  161.139856][T11153] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  161.179856][T11154] 8021q: adding VLAN 0 to HW filter on device bond32
[  161.197352][T11159] bond32: (slave ip6gretap17): making interface the new active one
[  161.201477][T11159] bond32: (slave ip6gretap17): Enslaving as an active interface with an up link
[  161.234029][T11154] bond32: (slave bridge29): Enslaving as an active interface with a down link
[  161.267406][T11162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1229'.
[  161.325941][T11154] bond32: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  161.370143][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'.
[  161.467953][T11176] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1231'.
[  161.684354][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'.
[  161.795224][T11195] "syz.2.1235" (11195) uses obsolete ecb(arc4) skcipher
[  161.832462][T11195] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  161.835640][T11195] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  161.840249][T11195] vlan0: left allmulticast mode
[  161.842016][T11195] veth1: left allmulticast mode
[  161.843813][T11195] geneve2: left allmulticast mode
[  161.845708][T11195] vti2: left promiscuous mode
[  161.847732][T11195] vlan1: left promiscuous mode
[  161.851050][T11195] bond24: left promiscuous mode
[  161.852961][T11195] gretap2: left promiscuous mode
[  161.855269][T11195] vlan1: left allmulticast mode
[  161.857158][T11195] bond24: left allmulticast mode
[  161.859606][T11195] gretap2: left allmulticast mode
[  161.862023][T11195] bond25: left promiscuous mode
[  161.863649][T11195] bridge18: left promiscuous mode
[  161.894166][T11199] netlink: 'syz.1.1233': attribute type 4 has an invalid length.
[  161.897061][ T5908] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.900802][ T5908] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.904340][T11198] macvlan0: entered allmulticast mode
[  161.906175][T11198] veth1_vlan: entered allmulticast mode
[  161.931609][ T5908] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.935056][ T5908] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.379863][T11227] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1242'.
[  162.421615][T11220] netlink: 'syz.2.1240': attribute type 1 has an invalid length.
[  162.424361][T11220] netlink: 'syz.2.1240': attribute type 1 has an invalid length.
[  162.427149][T11220] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1240'.
[  162.482571][T11234] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1243'.
[  162.555969][T11243] netlink: 'syz.1.1245': attribute type 83 has an invalid length.
[  162.613922][T11249] vlan3: entered allmulticast mode
[  162.615598][T11249] veth1: entered allmulticast mode
[  162.620085][T11251] netlink: 'syz.0.1247': attribute type 1 has an invalid length.
[  162.656408][T11251] 8021q: adding VLAN 0 to HW filter on device bond23
[  162.681176][T11251] bond23: (slave ip6gretap13): making interface the new active one
[  162.686802][T11251] bond23: (slave ip6gretap13): Enslaving as an active interface with an up link
[  162.716358][T11251] bond23: (slave bridge14): Enslaving as an active interface with a down link
[  162.729122][T11251] vlan3: entered allmulticast mode
[  162.731355][T11251] bond23: entered allmulticast mode
[  162.733636][T11251] ip6gretap13: entered allmulticast mode
[  162.737661][T11251] bond23: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  162.918622][T11269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1253'.
[  162.922404][T11274] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1254'.
[  162.976229][T11279] vlan2: entered promiscuous mode
[  162.988231][T11279] bond0: entered promiscuous mode
[  162.990778][T11279] vlan2: entered allmulticast mode
[  162.992725][T11279] bond0: entered allmulticast mode
[  163.157586][T11298] netlink: 'syz.1.1260': attribute type 1 has an invalid length.
[  163.211370][T11298] 8021q: adding VLAN 0 to HW filter on device bond33
[  163.232777][T11303] bond33: (slave ip6gretap18): making interface the new active one
[  163.237405][T11303] bond33: (slave ip6gretap18): Enslaving as an active interface with an up link
[  163.286854][T11298] bond33: (slave bridge30): Enslaving as an active interface with a down link
[  163.303893][T11298] bond33: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  164.072298][T11350] netlink: 'syz.2.1271': attribute type 12 has an invalid length.
[  164.101101][T11352] netlink: 'syz.0.1272': attribute type 3 has an invalid length.
[  164.202794][T11364] netlink: 'syz.0.1275': attribute type 11 has an invalid length.
[  164.202821][T11365] netlink: 'syz.0.1275': attribute type 11 has an invalid length.
[  164.251391][T11367] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.263260][T11367] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  164.265824][T11367] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  164.295820][T11370] IPVS: set_ctl: invalid protocol: 43 172.20.20.22:20000
[  164.397372][T11373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.491720][T11385] bridge15: entered promiscuous mode
[  164.493826][T11385] bridge15: entered allmulticast mode
[  164.549773][T11397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.625745][T11400] 8021q: adding VLAN 0 to HW filter on device bond28
[  164.651344][T11400] bond28: (slave ip6gretap13): making interface the new active one
[  164.655932][T11400] bond28: (slave ip6gretap13): Enslaving as an active interface with an up link
[  164.681662][T11400] bond28: (slave bridge22): Enslaving as an active interface with a down link
[  164.714592][T11400] bond28: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  164.838933][T11413] pim6reg1: entered promiscuous mode
[  164.841111][T11413] pim6reg1: entered allmulticast mode
[  164.928125][ T5908] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.935760][ T5908] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.944632][ T5908] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.966968][ T5908] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.063613][T11428] 8021q: VLANs not supported on nlmon0
[  165.146603][T11433] veth3: left promiscuous mode
[  165.152689][T11433] veth5: left promiscuous mode
[  165.155084][T11433] macvlan0: left allmulticast mode
[  165.157435][T11433] vlan0: left promiscuous mode
[  165.162501][T11433] bridge0: left promiscuous mode
[  165.165969][T11433] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  165.170997][T11433] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  165.174415][T11433] ip6gre2: left allmulticast mode
[  165.176825][T11433] ipvlan0: left allmulticast mode
[  165.179077][T11433] bond15: left allmulticast mode
[  165.181458][T11433] veth7: left promiscuous mode
[  165.183722][T11433] bond17: left promiscuous mode
[  165.185826][T11433] bond17: left allmulticast mode
[  165.223289][T11433] ip6gretap16: left promiscuous mode
[  165.230149][T11433] bond30: left promiscuous mode
[  165.233425][T11433] vlan1: left promiscuous mode
[  165.235051][T11433] bond0: left promiscuous mode
[  165.237339][T11433] vlan1: left allmulticast mode
[  165.241178][T11433] bond0: left allmulticast mode
[  165.254686][T11433] vlan3: left allmulticast mode
[  165.256727][T11433] veth1: left allmulticast mode
[  165.861669][T11473] dvmrp1: left allmulticast mode
[  166.053247][T11481] pim6reg1: entered promiscuous mode
[  166.055406][T11481] pim6reg1: entered allmulticast mode
[  166.173992][T11491] __nla_validate_parse: 16 callbacks suppressed
[  166.174012][T11491] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1311'.
[  166.187122][T11491] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  166.190934][T11491] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  166.195283][T11491] tipc: Enabling of bearer <et:g> rejected, media not registered
[  166.229749][T11494] validate_nla: 11 callbacks suppressed
[  166.229770][T11494] netlink: 'syz.2.1310': attribute type 9 has an invalid length.
[  166.255772][T11496] netlink: 'syz.0.1312': attribute type 1 has an invalid length.
[  166.279447][T11496] 8021q: adding VLAN 0 to HW filter on device bond25
[  166.290035][T11496] bond25: (slave ip6gretap14): making interface the new active one
[  166.293670][T11496] bond25: (slave ip6gretap14): Enslaving as an active interface with an up link
[  166.297794][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'.
[  166.310832][T11496] bond25: (slave bridge16): Enslaving as an active interface with a down link
[  166.338251][T11496] bond25: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  166.416381][T11502] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.443066][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'.
[  166.446480][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1315'.
[  166.456820][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'.
[  166.460534][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1315'.
[  166.462148][T11502] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.513943][T11502] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.547974][T11502] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.618867][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.635612][T11512] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1317'.
[  166.644714][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.662064][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.665960][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.707800][T11520] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  166.716402][T11520] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  166.807977][T11530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1320'.
[  166.813205][T11530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1320'.
[  166.822444][T11530] IPv6: sit5: Disabled Multicast RS
[  166.825173][T11530] sit5: entered allmulticast mode
[  166.913720][T11536] netlink: 'syz.0.1321': attribute type 1 has an invalid length.
[  166.935845][T11536] 8021q: adding VLAN 0 to HW filter on device bond26
[  166.954755][T11536] bond26: (slave ip6gretap15): making interface the new active one
[  166.959859][T11536] bond26: (slave ip6gretap15): Enslaving as an active interface with an up link
[  166.987900][T11536] bond26: (slave bridge19): Enslaving as an active interface with a down link
[  167.011831][T11536] bond26: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  167.133879][T11549] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.149571][T11549] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  167.152225][T11549] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  167.225733][T11554] x9: renamed from bridge_slave_0
[  167.242493][T11554] netlink: 'syz.2.1325': attribute type 5 has an invalid length.
[  167.275373][T11554] netlink: 'syz.2.1325': attribute type 12 has an invalid length.
[  167.445739][T11571] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  167.445980][T11568] IPVS: stopping backup sync thread 11571 ...
[  167.474627][T11573] netlink: 'syz.1.1331': attribute type 1 has an invalid length.
[  167.508554][T11573] 8021q: adding VLAN 0 to HW filter on device bond34
[  167.527015][T11573] bond34: (slave ip6gretap19): making interface the new active one
[  167.535156][T11573] bond34: (slave ip6gretap19): Enslaving as an active interface with an up link
[  167.565253][T11573] bond34: (slave bridge31): Enslaving as an active interface with a down link
[  167.576832][T11573] bond34: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  167.607188][T11579] netlink: 'syz.0.1333': attribute type 1 has an invalid length.
[  167.634794][T11579] 8021q: adding VLAN 0 to HW filter on device bond27
[  167.661823][T11579] 8021q: adding VLAN 0 to HW filter on device bond27
[  167.664700][T11579] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address
[  167.670327][T11579] bond27: (slave vxcan1): Error -95 calling set_mac_address
[  167.694874][T11583] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1334'.
[  167.725333][T11584] veth31: entered promiscuous mode
[  167.730798][T11584] bond27: (slave veth31): Enslaving as an active interface with a down link
[  167.760305][T11583] 8021q: adding VLAN 0 to HW filter on device team0
[  167.763984][T11583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.830739][T11587] pim6reg1: entered promiscuous mode
[  167.832827][T11587] pim6reg1: entered allmulticast mode
[  167.893664][T11588] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  167.895906][T11588] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  168.142635][T11598] netlink: 'syz.0.1340': attribute type 1 has an invalid length.
[  168.167038][T11598] 8021q: adding VLAN 0 to HW filter on device bond28
[  168.184773][T11598] bond28: (slave ip6gretap16): making interface the new active one
[  168.189787][T11598] bond28: (slave ip6gretap16): Enslaving as an active interface with an up link
[  168.207892][T11598] bond28: (slave bridge20): Enslaving as an active interface with a down link
[  168.229552][T11598] bond28: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  168.534314][T11633] bridge0: port 1(erspan0) entered blocking state
[  168.538772][T11633] bridge0: port 1(erspan0) entered disabled state
[  168.541386][T11633] erspan0: entered allmulticast mode
[  168.545236][T11633] erspan0: entered promiscuous mode
[  168.556124][T11633] erspan0: left allmulticast mode
[  168.557896][T11633] erspan0: left promiscuous mode
[  168.562422][T11633] bridge0: port 1(erspan0) entered disabled state
[  168.599412][T11635] netlink: 'syz.1.1348': attribute type 1 has an invalid length.
[  168.625220][T11635] 8021q: adding VLAN 0 to HW filter on device bond35
[  168.638853][T11635] bond35: (slave ip6gretap20): making interface the new active one
[  168.643332][T11635] bond35: (slave ip6gretap20): Enslaving as an active interface with an up link
[  168.667142][T11635] bond35: (slave bridge32): Enslaving as an active interface with a down link
[  168.682223][T11635] bond35: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  168.781859][T11638] netlink: 'syz.1.1349': attribute type 10 has an invalid length.
[  169.015907][T11651] batadv_slave_1: entered promiscuous mode
[  169.157289][T11659] vlan4: entered allmulticast mode
[  169.160104][T11659] macvtap0: entered allmulticast mode
[  169.593578][T11678] 8021q: adding VLAN 0 to HW filter on device bond30
[  169.611793][T11679] bond30: (slave ip6gretap14): making interface the new active one
[  169.615265][T11679] bond30: (slave ip6gretap14): Enslaving as an active interface with an up link
[  169.634587][T11678] veth13: entered promiscuous mode
[  169.637519][T11679] erspan0: entered allmulticast mode
[  169.643070][T11679] bond30: (slave erspan0): Enslaving as an active interface with an up link
[  169.696006][T11683] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.732447][ T5908] bond30: (slave erspan0): link status definitely down, disabling slave
[  169.736146][ T5908] ip6gretap14: entered promiscuous mode
[  169.786423][T11646] batadv_slave_1: left promiscuous mode
[  169.922949][T11694] bond30: (slave erspan0): Releasing active interface
[  169.927182][T11694] bond20: (slave bridge13): Releasing active interface
[  169.934466][T11694] bond21: (slave ip6gretap9): Releasing active interface
[  169.937321][T11694] bond21: (slave ip6gretap9): the permanent HWaddr of slave - 82:23:af:66:56:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  169.944772][T11694] bond21: (slave bridge15): Releasing active interface
[  169.950637][T11694] bond22: (slave ip6gretap10): Releasing active interface
[  169.953871][T11694] bond22: (slave ip6gretap10): the permanent HWaddr of slave - 5e:fb:a5:6b:66:e3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  169.963871][T11694] bond22: (slave bridge17): Releasing active interface
[  169.969625][T11694] bond24: (slave gretap2): Releasing active interface
[  169.977572][T11694] bond25: (slave bridge18): Releasing backup interface
[  169.985717][T11694] bond26: (slave ip6gretap11): Releasing active interface
[  169.989668][T11694] bond26: (slave ip6gretap11): the permanent HWaddr of slave - 96:19:b5:90:fa:2e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  170.001658][T11694] bond26: (slave bridge19): Releasing active interface
[  170.006812][T11694] bond27: (slave ip6gretap12): Releasing active interface
[  170.010872][T11694] bond27: (slave ip6gretap12): the permanent HWaddr of slave - aa:df:69:18:cc:ac - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  170.023061][T11694] bond27: (slave bridge20): Releasing active interface
[  170.031290][T11694] bond28: (slave ip6gretap13): Releasing active interface
[  170.034187][T11694] bond28: (slave ip6gretap13): the permanent HWaddr of slave - b2:54:54:ee:00:54 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  170.047212][T11694] bond28: (slave bridge22): Releasing active interface
[  170.055648][T11694] bond30: (slave ip6gretap14): Releasing active interface
[  170.059106][T11694] ip6gretap14: left promiscuous mode
[  170.067589][T11697] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  170.264425][T11705] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.357627][T11705] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.418760][T11705] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.465542][T11705] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.581138][ T5908] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.586146][ T5908] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.603123][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.623144][ T5908] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.651584][T11735] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  170.667967][T11735] bridge15: left promiscuous mode
[  170.679031][T11735] veth31: left promiscuous mode
[  170.683226][T11738] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  170.786029][T11741] 8021q: adding VLAN 0 to HW filter on device bond29
[  170.801850][T11741] bond29: (slave ip6gretap17): making interface the new active one
[  170.806108][T11741] bond29: (slave ip6gretap17): Enslaving as an active interface with an up link
[  170.825049][T11741] bond29: (slave bridge21): Enslaving as an active interface with a down link
[  170.834232][T11741] bond29: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  171.204345][T11777] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  171.259937][T11781] validate_nla: 4 callbacks suppressed
[  171.259957][T11781] netlink: 'syz.1.1386': attribute type 1 has an invalid length.
[  171.353380][T11790] __nla_validate_parse: 20 callbacks suppressed
[  171.353401][T11790] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1388'.
[  171.753052][T11821] sctp: [Deprecated]: syz.2.1391 (pid 11821) Use of int in maxseg socket option.
[  171.753052][T11821] Use struct sctp_assoc_value instead
[  172.095329][T11851] netlink: 'syz.0.1394': attribute type 9 has an invalid length.
[  172.098385][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'.
[  172.105618][T11851] macvlan3: entered promiscuous mode
[  172.107633][T11851] hsr0: entered promiscuous mode
[  172.111387][T11851] macvlan3: entered allmulticast mode
[  172.113400][T11851] hsr0: entered allmulticast mode
[  172.115467][T11851] hsr_slave_0: entered allmulticast mode
[  172.117676][T11851] hsr_slave_1: entered allmulticast mode
[  172.123529][T11851] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20000
[  172.163851][T11857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1395'.
[  172.175258][T11857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1395'.
[  172.181156][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1395'.
[  172.223826][T11866] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1396'.
[  172.653638][T11901] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig
[  173.150009][T11938] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1403'.
[  173.158642][T11935] ip6gretap0: entered promiscuous mode
[  173.168315][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'.
[  173.195657][T11935] ip6gretap0 (unregistering): left promiscuous mode
[  173.214776][T11939] macsec1: entered promiscuous mode
[  173.217660][T11939] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  173.223616][T11939] macsec1: entered allmulticast mode
[  173.226019][T11939] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  173.328008][T11951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1407'.
[  173.391109][T11957] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1408'.
[  173.442109][T11966] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  173.463294][T11968] gretap0: entered promiscuous mode
[  173.467401][T11968] 0{X: renamed from gretap0
[  173.484302][T11968] 0{X: left promiscuous mode
[  173.486312][T11968] 0{X: entered allmulticast mode
[  173.505965][T11968] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  173.607252][T11982] netlink: 'syz.1.1414': attribute type 2 has an invalid length.
[  173.626227][T11980] netlink: 'syz.2.1413': attribute type 4 has an invalid length.
[  173.632313][T11982] 8021q: adding VLAN 0 to HW filter on device team0
[  173.636792][T11982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.692199][T11986] netlink: 'syz.0.1416': attribute type 1 has an invalid length.
[  173.712870][T11986] bond30: entered promiscuous mode
[  173.714859][T11986] 8021q: adding VLAN 0 to HW filter on device bond30
[  173.946731][T12008] pim6reg: entered allmulticast mode
[  173.958254][T12008] pim6reg: left allmulticast mode
[  174.106465][T12029] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  174.125994][T12027] pim6reg1: entered promiscuous mode
[  174.128754][T12027] pim6reg1: entered allmulticast mode
[  174.243984][T12042] netlink: 'syz.1.1429': attribute type 1 has an invalid length.
[  174.578545][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.582887][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.585574][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.590784][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.620099][T12064] netlink: 'syz.2.1434': attribute type 1 has an invalid length.
[  174.642879][T12064] veth15: entered promiscuous mode
[  174.886872][T12084] nbd: couldn't find device at index 536870912
[  174.915815][T12086] sctp: [Deprecated]: syz.0.1438 (pid 12086) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.915815][T12086] Use struct sctp_sack_info instead
[  175.147561][T12112] netlink: 'syz.1.1444': attribute type 3 has an invalid length.
[  175.403076][T12133] netlink: 'syz.2.1450': attribute type 1 has an invalid length.
[  175.433192][T12133] 8021q: adding VLAN 0 to HW filter on device bond32
[  175.543368][T12143] pim6reg: entered allmulticast mode
[  175.590676][T12147] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.599639][T12147] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  175.667390][T12155] netlink: 'syz.0.1457': attribute type 5 has an invalid length.
[  175.680401][T12155] geneve0: entered promiscuous mode
[  175.682143][T12155] geneve0: entered allmulticast mode
[  175.687108][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  175.692761][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  175.697704][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  175.702776][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  176.003799][T12175] 0{X: entered promiscuous mode
[  176.005564][T12175] 0{X: left allmulticast mode
[  176.046203][T12177] macsec2: entered promiscuous mode
[  176.047971][T12177] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  176.054247][T12177] macsec2: entered allmulticast mode
[  176.056032][T12177] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  176.099411][T12180] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20004
[  176.215452][T12182] 1{X: renamed from 30{X
[  176.260775][T12182] 1{X: left promiscuous mode
[  176.262515][T12182] 1{X: entered allmulticast mode
[  176.270438][T12182] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  176.554464][T12204] validate_nla: 1 callbacks suppressed
[  176.554481][T12204] netlink: 'syz.1.1471': attribute type 1 has an invalid length.
[  176.586363][T12204] 8021q: adding VLAN 0 to HW filter on device bond37
[  176.603958][T12204] bond37: (slave ip6gretap21): making interface the new active one
[  176.608980][T12204] bond37: (slave ip6gretap21): Enslaving as an active interface with an up link
[  176.626061][T12204] bond37: (slave bridge33): Enslaving as an active interface with a down link
[  176.642263][T12204] bond37: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  176.746392][T12207] __nla_validate_parse: 25 callbacks suppressed
[  176.746412][T12207] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1472'.
[  176.755234][T12207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1472'.
[  176.759261][T12207] netlink: 'syz.1.1472': attribute type 7 has an invalid length.
[  176.762417][T12207] netlink: 'syz.1.1472': attribute type 8 has an invalid length.
[  176.765101][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'.
[  176.887110][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'.
[  176.908425][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1473'.
[  177.060411][T12220] netlink: 'syz.1.1476': attribute type 4 has an invalid length.
[  177.218788][T12226] 8021q: adding VLAN 0 to HW filter on device bond38
[  177.223086][T12226] bond0: (slave bond38): Enslaving as an active interface with a down link
[  177.301045][T12229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1478'.
[  177.364107][T12231] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1479'.
[  177.399678][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'.
[  177.408389][T12233] netlink: 'syz.1.1478': attribute type 1 has an invalid length.
[  177.419382][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1478'.
[  177.632318][T12251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.633465][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'.
[  177.636012][T12251] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  177.643767][T12251] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  177.660390][T12251] syzkaller0: mtu less than device minimum
[  177.702327][T12254] netlink: 'syz.1.1485': attribute type 13 has an invalid length.
[  177.762895][T12257] delete_channel: no stack
[  178.137496][T12273] vlan0: entered allmulticast mode
[  178.139957][T12273] gretap0: entered allmulticast mode
[  178.707921][T12310] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  178.738981][T12315] IPVS: stopping backup sync thread 11966 ...
[  178.803903][T12317] vlan3: entered promiscuous mode
[  178.805985][T12317] vlan3: entered allmulticast mode
[  178.949872][T12327] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.030968][T12335] netlink: 'syz.2.1508': attribute type 15 has an invalid length.
[  179.397898][T12378] wireguard0: entered promiscuous mode
[  179.400350][T12378] wireguard0: entered allmulticast mode
[  179.515043][T12389] netlink: 'syz.0.1521': attribute type 1 has an invalid length.
[  179.517574][T12388] netlink: 'syz.0.1521': attribute type 1 has an invalid length.
[  179.532170][T12388] gretap2: entered promiscuous mode
[  179.572626][T12395] netlink: 'syz.2.1522': attribute type 1 has an invalid length.
[  179.612923][T12395] bond33: entered promiscuous mode
[  179.615453][T12395] 8021q: adding VLAN 0 to HW filter on device bond33
[  179.626499][T12395] batadv0: entered promiscuous mode
[  179.629399][T12395] batadv0: entered allmulticast mode
[  179.633213][T12395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.637985][T12395] bond33: (slave batadv0): making interface the new active one
[  179.642406][T12395] bond33: (slave batadv0): Enslaving as an active interface with an up link
[  179.678371][T12401] 8021q: adding VLAN 0 to HW filter on device bond31
[  179.702397][T12401] bond31: (slave ip6gretap18): making interface the new active one
[  179.705685][T12401] bond31: (slave ip6gretap18): Enslaving as an active interface with an up link
[  179.718851][T12401] bond31: (slave bridge23): Enslaving as an active interface with a down link
[  179.728970][T12401] bond31: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  180.633187][T12453] pim6reg1: entered promiscuous mode
[  180.641940][T12453] pim6reg1: entered allmulticast mode
[  180.863022][T12460] bond34 (unregistering): Released all slaves
[  181.041838][T12488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.080582][T12488] IPv6: sit3: Disabled Multicast RS
[  181.791206][T12503] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.861405][T12525] validate_nla: 2 callbacks suppressed
[  181.861423][T12525] netlink: 'syz.1.1550': attribute type 1 has an invalid length.
[  181.884869][T12525] bond39: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  181.890543][T12525] bond39: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  181.893735][T12525] bond39: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode
[  181.929777][T12524] netlink: 'syz.2.1549': attribute type 13 has an invalid length.
[  181.932624][T12524] netlink: 'syz.2.1549': attribute type 17 has an invalid length.
[  181.951821][T12524] 1{X: left allmulticast mode
[  181.954262][T12524] erspan0: left allmulticast mode
[  182.006026][T12524] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.044220][T12524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  182.069025][T12532] __nla_validate_parse: 31 callbacks suppressed
[  182.069047][T12532] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1551'.
[  182.154844][T12532] netlink: 'syz.1.1551': attribute type 83 has an invalid length.
[  182.305820][T12542] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  182.352896][T12547] gtp0: entered promiscuous mode
[  182.374109][T12542] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  182.424671][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'.
[  182.449212][T12542] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  182.514793][T12542] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  182.577436][T12542] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  182.656673][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  182.672485][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  182.684181][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  182.695224][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  182.701397][T12566] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  182.778019][T12571] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1559'.
[  182.822313][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'.
[  183.183184][T12597] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1564'.
[  183.236138][T12597] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1564'.
[  183.354661][T12604] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1565'.
[  183.361299][T12604] netlink: 'syz.2.1565': attribute type 1 has an invalid length.
[  183.386403][T12604] bond34: (slave bridge0): making interface the new active one
[  183.389314][T12604] bond34: (slave bridge0): Enslaving as an active interface with an up link
[  183.465817][T12608] netlink: 724 bytes leftover after parsing attributes in process `syz.2.1566'.
[  183.476931][T12611] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1567'.
[  183.479709][T12608] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1566'.
[  183.537361][T12615] netlink: 'syz.1.1568': attribute type 1 has an invalid length.
[  183.584014][T12615] 8021q: adding VLAN 0 to HW filter on device bond41
[  183.612382][T12615] bond41: (slave bridge34): making interface the new active one
[  183.615981][T12615] bond41: (slave bridge34): Enslaving as an active interface with an up link
[  183.630922][T12615] bond41: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  183.862046][T12649] netlink: 'syz.0.1574': attribute type 1 has an invalid length.
[  183.957589][T12657] 8021q: adding VLAN 0 to HW filter on device bond33
[  183.967692][T12657] bond32: (slave bond33): making interface the new active one
[  183.982973][T12657] bond32: (slave bond33): Enslaving as an active interface with an up link
[  184.002204][T12649] bond32: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  184.006404][T12649] bond32: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  184.027862][T12665] netlink: 'syz.2.1576': attribute type 2 has an invalid length.
[  184.032855][T12667] netlink: 'syz.2.1576': attribute type 2 has an invalid length.
[  184.047875][T12664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.057777][T12665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.163039][T12677] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  184.191536][T12677] netlink: 'syz.2.1579': attribute type 39 has an invalid length.
[  184.649273][T12722] veth0_vlan: left promiscuous mode
[  184.651511][T12722] veth0_vlan: entered promiscuous mode
[  184.775755][T12733] dvmrp0: left allmulticast mode
[  184.813121][T12736] netlink: 'syz.1.1590': attribute type 11 has an invalid length.
[  184.853777][T12741] lo speed is unknown, defaulting to 1000
[  184.862189][T12741] lo speed is unknown, defaulting to 1000
[  184.870114][T12741] lo speed is unknown, defaulting to 1000
[  184.961866][T12733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.163148][T12741] infiniband syz0: set active
[  185.166098][   T10] lo speed is unknown, defaulting to 1000
[  185.176830][T12741] infiniband syz0: added lo
[  185.178849][   T10] syz0: Port: 1 Link ACTIVE
[  185.253031][T12741] RDS/IB: syz0: added
[  185.261450][T12741] smc: adding ib device syz0 with port count 1
[  185.263891][T12769] raw_sendmsg: syz.2.1593 forgot to set AF_INET. Fix it!
[  185.266144][T12741] smc:    ib device syz0 port 1 has pnetid 
[  185.275329][   T10] lo speed is unknown, defaulting to 1000
[  185.281460][T12741] lo speed is unknown, defaulting to 1000
[  185.329461][T12772] syzkaller1: entered allmulticast mode
[  185.595402][T12741] lo speed is unknown, defaulting to 1000
[  185.750528][T12741] lo speed is unknown, defaulting to 1000
[  186.045153][T12818] chnl_net:caif_netlink_parms(): no params data found
[  186.075350][T12816] 0{X: renamed from 31{X (while UP)
[  186.089121][T12816] 0{X: entered allmulticast mode
[  186.091588][T12816] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  186.300556][T12831] lo speed is unknown, defaulting to 1000
[  186.307301][T12834] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.359880][T12840] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  186.363834][T12840] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  186.376908][T12840] pim6reg: entered allmulticast mode
[  186.390125][T12838] pim6reg: left allmulticast mode
[  186.604708][T12841] lo speed is unknown, defaulting to 1000
[  186.990084][T12857] validate_nla: 2 callbacks suppressed
[  186.990099][T12857] netlink: 'syz.0.1615': attribute type 1 has an invalid length.
[  187.074019][T12861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  187.076367][T12861] IPv6: NLM_F_CREATE should be set when creating new route
[  187.078813][T12861] IPv6: NLM_F_CREATE should be set when creating new route
[  187.094236][T12861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  187.808279][T12893] __nla_validate_parse: 21 callbacks suppressed
[  187.808295][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1627'.
[  187.849102][T12888] netlink: 'syz.1.1626': attribute type 1 has an invalid length.
[  187.856396][T12893] bridge26: port 1(veth35) entered blocking state
[  187.866833][T12893] bridge26: port 1(veth35) entered disabled state
[  187.875440][T12893] veth35: entered allmulticast mode
[  187.883385][T12893] veth35: entered promiscuous mode
[  187.887789][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'.
[  187.893731][T12888] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1626'.
[  187.904543][T12888] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  187.912798][T12888] gretap3: entered promiscuous mode
[  187.916635][T12895] bridge26: port 2(veth0_to_bond) entered blocking state
[  187.923769][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'.
[  187.927697][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'.
[  187.930881][T12895] bridge26: port 2(veth0_to_bond) entered disabled state
[  187.933121][T12895] veth0_to_bond: entered allmulticast mode
[  187.936838][T12895] veth0_to_bond: entered promiscuous mode
[  188.014421][T12895] vlan4: entered allmulticast mode
[  188.038446][T12895] veth1: entered allmulticast mode
[  188.040649][T12895] bridge26: port 3(vlan4) entered blocking state
[  188.047417][T12895] bridge26: port 3(vlan4) entered disabled state
[  188.055088][T12895] vlan4: entered promiscuous mode
[  188.062903][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.066737][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.070729][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.074689][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.081961][T12905] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1629'.
[  188.083738][T12895] veth1: entered promiscuous mode
[  188.085846][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.126634][T12902] lo speed is unknown, defaulting to 1000
[  188.522289][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'.
[  188.571332][T12902] chnl_net:caif_netlink_parms(): no params data found
[  188.669986][T12902] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.672435][T12902] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.675034][T12902] bridge_slave_0: entered allmulticast mode
[  188.679281][T12902] bridge_slave_0: entered promiscuous mode
[  188.683115][T12902] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.686136][T12902] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.689929][T12902] bridge_slave_1: entered allmulticast mode
[  188.693191][T12902] bridge_slave_1: entered promiscuous mode
[  188.721327][T12902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.727966][T12902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.755451][T12902] team0: Port device team_slave_0 added
[  188.759689][T12902] team0: Port device team_slave_1 added
[  188.780998][T12902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.783123][T12902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.791372][T12902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.795781][T12902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.797873][T12902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.805987][T12902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.856594][T12902] hsr_slave_0: entered promiscuous mode
[  188.859594][T12902] hsr_slave_1: entered promiscuous mode
[  189.021594][T12902] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  189.030971][T12902] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  189.037227][T12902] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  189.044022][T12902] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  189.131527][T12902] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.149764][T12902] 8021q: adding VLAN 0 to HW filter on device team0
[  189.161129][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.164113][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.181016][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.184682][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.376400][T12951] IPVS: stopping backup sync thread 10713 ...
[  189.381985][T12949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1634'.
[  189.413023][T12902] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.450443][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'.
[  189.470862][T12954] 8021q: adding VLAN 0 to HW filter on device bond42
[  189.480720][T12957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.504232][T12954] macvlan2: entered promiscuous mode
[  189.506562][T12954] macvlan2: entered allmulticast mode
[  189.511598][T12954] bond42: entered promiscuous mode
[  189.514199][T12954] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  189.520279][T12954] bond42: left promiscuous mode
[  189.536955][T12902] veth0_vlan: entered promiscuous mode
[  189.549317][T12902] veth1_vlan: entered promiscuous mode
[  189.579795][T12962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1638'.
[  189.595915][T12902] veth0_macvtap: entered promiscuous mode
[  189.609829][T12902] veth1_macvtap: entered promiscuous mode
[  189.643844][T12902] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.664071][T12902] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.693392][ T5872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.694214][T12967] netlink: 'syz.1.1639': attribute type 10 has an invalid length.
[  189.706597][ T5872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.716065][ T5872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.724593][ T5872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.868251][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.872140][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.941232][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.944367][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.046588][T12975] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  190.060444][T12978] tipc: Started in network mode
[  190.064638][T12978] tipc: Node identity 5e4b35690f68, cluster identity 4711
[  190.067277][T12978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.075961][T12978] syzkaller0: entered promiscuous mode
[  190.077677][T12978] syzkaller0: entered allmulticast mode
[  190.084424][T12978] tipc: Resetting bearer <eth:syzkaller0>
[  190.089713][T12977] tipc: Resetting bearer <eth:syzkaller0>
[  190.103495][T12980] netlink: 'syz.0.1641': attribute type 1 has an invalid length.
[  190.103719][T12977] tipc: Disabling bearer <eth:syzkaller0>
[  190.145479][T12980] bond34: (slave veth37): Enslaving as an active interface with a down link
[  190.149124][   T55] Bluetooth: hci0: command tx timeout
[  190.250964][T12987] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  190.380814][T12992] netlink: 'syz.0.1643': attribute type 10 has an invalid length.
[  190.491400][T12999] netlink: 'syz.0.1646': attribute type 1 has an invalid length.
[  190.514165][T12999] 8021q: adding VLAN 0 to HW filter on device bond35
[  190.523212][T13001] team0: Refused to change device type
[  190.544564][T12999] bond35: (slave ip6gretap19): making interface the new active one
[  190.549188][T12999] bond35: (slave ip6gretap19): Enslaving as an active interface with an up link
[  190.579844][T12999] bond35: (slave bridge27): Enslaving as an active interface with a down link
[  190.597120][T12999] bond35: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  190.828516][T13017] trusted_key: syz.1.1651 sent an empty control message without MSG_MORE.
[  190.888813][T13019] netlink: 'syz.0.1652': attribute type 1 has an invalid length.
[  190.932773][T13019] 8021q: adding VLAN 0 to HW filter on device bond36
[  191.247265][T13037] netlink: 'syz.0.1658': attribute type 1 has an invalid length.
[  191.452620][T13051] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.456905][T13051] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.541547][T13051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.556710][T13051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.678831][ T5714] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.692511][ T5714] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.696247][ T5714] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.700107][ T5714] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.755239][T13061] netlink: 'syz.3.1664': attribute type 1 has an invalid length.
[  191.939734][T13076] netlink: 'syz.0.1668': attribute type 1 has an invalid length.
[  192.126641][T13086] lo speed is unknown, defaulting to 1000
[  192.197872][T13091] team0: entered promiscuous mode
[  192.230968][   T55] Bluetooth: hci0: command tx timeout
[  192.369255][T13091] team0 (unregistering): left promiscuous mode
[  192.405813][T13085] lo speed is unknown, defaulting to 1000
[  192.613342][T13096] vlan2: entered promiscuous mode
[  192.615458][T13096] bridge0: entered promiscuous mode
[  192.697548][T13096] netlink: 'syz.3.1674': attribute type 1 has an invalid length.
[  192.934204][T13108] netlink: 'syz.3.1677': attribute type 39 has an invalid length.
[  194.308744][   T55] Bluetooth: hci0: command tx timeout
[  194.455229][T13127] __nla_validate_parse: 7 callbacks suppressed
[  194.455279][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'.
[  194.502791][T13133] ip6gretap20: entered promiscuous mode
[  194.565383][T13143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'.
[  194.606796][T13145] netlink: 'syz.3.1686': attribute type 1 has an invalid length.
[  194.755321][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1688'.
[  194.777292][T13152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.807943][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1690'.
[  194.899879][T13161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.903969][T13161] netlink: 'syz.1.1691': attribute type 13 has an invalid length.
[  194.956417][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1691'.
[  194.993001][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'.
[  195.054211][T13166] bridge35: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  195.177826][T13175] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1695'.
[  195.198733][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'.
[  195.202368][T13175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1695'.
[  195.400794][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'.
[  196.388681][   T55] Bluetooth: hci0: command tx timeout
[  196.483805][T13220] tipc: Resetting bearer <eth:syzkaller0>
[  196.514481][T13225] nbd: must specify at least one socket
[  196.555003][T13230] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  196.555034][T13228] IPVS: stopping backup sync thread 13230 ...
[  197.304215][T13220] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  197.307731][T13220] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  197.682533][T13257] netlink: 'syz.0.1722': attribute type 12 has an invalid length.
[  255.884192][ T5714] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.896668][ T5714] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.910938][ T5714] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.921195][ T6209] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  257.812103][   T13] bond34 (unregistering): (slave bridge0): Releasing active interface
[  257.894302][   T13] bond0 (unregistering): Released all slaves
[  258.027340][   T13] bond1 (unregistering): Released all slaves
[  258.131234][   T13] bond2 (unregistering): Released all slaves
[  258.215613][   T13] bond3 (unregistering): Released all slaves
[  258.316165][   T13] bond4 (unregistering): Released all slaves
[  258.445209][   T13] bond5 (unregistering): Released all slaves
[  258.541552][   T13] bond6 (unregistering): Released all slaves
[  258.549415][   T13] bond7 (unregistering): Released all slaves
[  258.556925][   T13] bond8 (unregistering): Released all slaves
[  258.665035][   T13] bond9 (unregistering): Released all slaves
[  258.780091][   T13] bond10 (unregistering): Released all slaves
[  258.877783][   T13] bond11 (unregistering): Released all slaves
[  258.967682][   T13] bond12 (unregistering): Released all slaves
[  259.064585][   T13] bond13 (unregistering): Released all slaves
[  259.076588][   T13] bond14 (unregistering): Released all slaves
[  259.186938][   T13] bond15 (unregistering): Released all slaves
[  259.285076][   T13] bond16 (unregistering): Released all slaves
[  259.385963][   T13] bond17 (unregistering): Released all slaves
[  259.511033][   T13] bond18 (unregistering): Released all slaves
[  259.599927][   T13] bond19 (unregistering): Released all slaves
[  259.607210][   T13] bond20 (unregistering): Released all slaves
[  259.704584][   T13] bond21 (unregistering): Released all slaves
[  259.801434][   T13] bond22 (unregistering): Released all slaves
[  259.897566][   T13] bond23 (unregistering): Released all slaves
[  260.035714][   T13] bond24 (unregistering): Released all slaves
[  260.143621][   T13] bond25 (unregistering): Released all slaves
[  260.242328][   T13] bond26 (unregistering): Released all slaves
[  260.345480][   T13] bond27 (unregistering): Released all slaves
[  260.468674][   T13] bond28 (unregistering): Released all slaves
[  260.476381][   T13] bond29 (unregistering): Released all slaves
[  260.590302][   T13] bond30 (unregistering): Released all slaves
[  260.597528][   T13] bond31 (unregistering): Released all slaves
[  260.691230][   T13] bond32 (unregistering): Released all slaves
[  260.798739][   T13] bond33 (unregistering): (slave batadv0): Releasing active interface
[  260.803629][   T13] bond33 (unregistering): Released all slaves
[  260.811791][   T13] bond34 (unregistering): Released all slaves
[  261.061664][   T13] : left promiscuous mode
[  261.150286][   T13] k*]: left promiscuous mode
[  261.211791][   T13] tipc: Disabling bearer <eth:syzkaller0>
[  261.214885][   T13] tipc: Disabling bearer <eth:macvtap0>
[  261.225546][   T13] tipc: Left network mode
[  356.078607][   T34] INFO: task kworker/0:3:5846 blocked for more than 143 seconds.
[  356.081213][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  356.087304][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  356.091224][   T34] task:kworker/0:3     state:D stack:23528 pid:5846  tgid:5846  ppid:2      task_flags:0x4208060 flags:0x00004000
[  356.095905][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  356.102079][   T34] Call Trace:
[  356.103510][   T34]  <TASK>
[  356.104930][   T34]  __schedule+0x1798/0x4cc0
[  356.106692][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  356.109519][   T34]  ? __pfx___schedule+0x10/0x10
[  356.128619][   T34]  ? schedule+0x91/0x360
[  356.130303][   T34]  schedule+0x165/0x360
[  356.131628][   T34]  schedule_preempt_disabled+0x13/0x30
[  356.133383][   T34]  __mutex_lock+0x7e6/0x1360
[  356.135057][   T34]  ? __mutex_lock+0x5b6/0x1360
[  356.136663][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  356.146821][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  356.148966][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  356.150881][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  356.153033][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  356.155004][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  356.156821][   T34]  process_scheduled_works+0xae1/0x17b0
[  356.161183][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  356.163152][   T34]  worker_thread+0x8a0/0xda0
[  356.164769][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  356.166737][   T34]  ? __kthread_parkme+0x7b/0x200
[  356.168652][   T34]  kthread+0x711/0x8a0
[  356.170077][   T34]  ? __pfx_worker_thread+0x10/0x10
[  356.171719][   T34]  ? __pfx_kthread+0x10/0x10
[  356.173287][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  356.175148][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.176839][   T34]  ? __pfx_kthread+0x10/0x10
[  356.180697][   T34]  ret_from_fork+0x3fc/0x770
[  356.182172][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  356.183775][   T34]  ? __switch_to_asm+0x39/0x70
[  356.185494][   T34]  ? __switch_to_asm+0x33/0x70
[  356.187095][   T34]  ? __pfx_kthread+0x10/0x10
[  356.189569][   T34]  ret_from_fork_asm+0x1a/0x30
[  356.191362][   T34]  </TASK>
[  356.192501][   T34] INFO: task syz.1.1708:13210 blocked for more than 143 seconds.
[  356.195280][   T34]       Not tainted syzkaller #0
[  356.196873][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  356.202483][   T34] task:syz.1.1708      state:D stack:25096 pid:13210 tgid:13210 ppid:5844   task_flags:0x400040 flags:0x00004004
[  356.206887][   T34] Call Trace:
[  356.208727][   T34]  <TASK>
[  356.209876][   T34]  __schedule+0x1798/0x4cc0
[  356.211586][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.213415][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.215250][   T34]  ? __pfx___schedule+0x10/0x10
[  356.217264][   T34]  ? schedule+0x91/0x360
[  356.221940][   T34]  schedule+0x165/0x360
[  356.223306][   T34]  schedule_preempt_disabled+0x13/0x30
[  356.225253][   T34]  __mutex_lock+0x7e6/0x1360
[  356.226782][   T34]  ? __mutex_lock+0x5b6/0x1360
[  356.229519][   T34]  ? rfkill_unregister+0xc8/0x220
[  356.231087][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  356.232786][   T34]  ? __pfx_device_del+0x10/0x10
[  356.234473][   T34]  rfkill_unregister+0xc8/0x220
[  356.235988][   T34]  nfc_unregister_device+0x96/0x2a0
[  356.237581][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  356.241678][   T34]  virtual_ncidev_close+0x56/0x90
[  356.243262][   T34]  __fput+0x44c/0xa70
[  356.244666][   T34]  task_work_run+0x1d4/0x260
[  356.246333][   T34]  ? __pfx_task_work_run+0x10/0x10
[  356.247921][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  356.250216][   T34]  exit_to_user_mode_loop+0xec/0x110
[  356.251855][   T34]  do_syscall_64+0x2bd/0x3b0
[  356.253299][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.254899][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.256774][   T34]  ? exc_page_fault+0x9f/0xf0
[  356.260725][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.262821][   T34] RIP: 0033:0x7f6a0798ebe9
[  356.264211][   T34] RSP: 002b:00007ffe10575fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  356.266768][   T34] RAX: 0000000000000000 RBX: 00007f6a07bb7da0 RCX: 00007f6a0798ebe9
[  356.269641][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  356.272071][   T34] RBP: 00007f6a07bb7da0 R08: 000000000000022c R09: 0000001e105762df
[  356.274499][   T34] R10: 00007f6a07bb7cb0 R11: 0000000000000246 R12: 00000000000301f2
[  356.277032][   T34] R13: 00007f6a07bb6090 R14: ffffffffffffffff R15: 00007ffe10576100
[  356.282101][   T34]  </TASK>
[  356.283094][   T34] INFO: task syz.3.1711:13220 blocked for more than 143 seconds.
[  356.285495][   T34]       Not tainted syzkaller #0
[  356.286985][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  356.290182][   T34] task:syz.3.1711      state:D stack:25896 pid:13220 tgid:13219 ppid:12902  task_flags:0x400140 flags:0x00004006
[  356.293810][   T34] Call Trace:
[  356.294816][   T34]  <TASK>
[  356.295782][   T34]  __schedule+0x1798/0x4cc0
[  356.297253][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.302248][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.303782][   T34]  ? __pfx___schedule+0x10/0x10
[  356.305315][   T34]  ? schedule+0x91/0x360
[  356.306631][   T34]  schedule+0x165/0x360
[  356.307921][   T34]  schedule_preempt_disabled+0x13/0x30
[  356.309959][   T34]  __mutex_lock+0x7e6/0x1360
[  356.311466][   T34]  ? __mutex_lock+0x5b6/0x1360
[  356.312944][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  356.314577][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  356.316175][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.317732][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  356.321997][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  356.323956][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  356.325695][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  356.327269][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  356.329503][   T34]  rfkill_set_block+0x1d2/0x440
[  356.331179][   T34]  rfkill_fop_write+0x44b/0x570
[  356.332660][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  356.334396][   T34]  ? __pfx_security_file_permission+0x10/0x10
[  356.336241][   T34]  ? rw_verify_area+0x255/0x4d0
[  356.337756][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.341957][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  356.343910][   T34]  vfs_write+0x27e/0xb30
[  356.345323][   T34]  ? __pfx_vfs_write+0x10/0x10
[  356.346981][   T34]  ? __fget_files+0x2a/0x420
[  356.348960][   T34]  ? __fget_files+0x2a/0x420
[  356.350388][   T34]  ? __fget_files+0x3a0/0x420
[  356.351866][   T34]  ? __fget_files+0x2a/0x420
[  356.353301][   T34]  ksys_write+0x145/0x250
[  356.354655][   T34]  ? __pfx_ksys_write+0x10/0x10
[  356.356158][   T34]  ? rcu_is_watching+0x15/0xb0
[  356.357570][   T34]  ? do_syscall_64+0xbe/0x3b0
[  356.362028][   T34]  do_syscall_64+0xfa/0x3b0
[  356.363450][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.365041][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.366896][   T34]  ? exc_page_fault+0x9f/0xf0
[  356.368845][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.370649][   T34] RIP: 0033:0x7f0dec78ebe9
[  356.372055][   T34] RSP: 002b:00007f0ded5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  356.374670][   T34] RAX: ffffffffffffffda RBX: 00007f0dec9b5fa0 RCX: 00007f0dec78ebe9
[  356.377169][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a
[  356.381859][   T34] RBP: 00007f0dec811e19 R08: 0000000000000000 R09: 0000000000000000
[  356.384435][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.387091][   T34] R13: 00007f0dec9b6038 R14: 00007f0dec9b5fa0 R15: 00007ffe6e746118
[  356.389725][   T34]  </TASK>
[  356.390746][   T34] INFO: task syz.0.1722:13257 blocked for more than 143 seconds.
[  356.393240][   T34]       Not tainted syzkaller #0
[  356.394814][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  356.397697][   T34] task:syz.0.1722      state:D stack:23400 pid:13257 tgid:13256 ppid:5843   task_flags:0x400140 flags:0x00004004
[  356.403783][   T34] Call Trace:
[  356.404840][   T34]  <TASK>
[  356.405743][   T34]  __schedule+0x1798/0x4cc0
[  356.407258][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.409940][   T34]  ? __pfx___schedule+0x10/0x10
[  356.411462][   T34]  ? schedule+0x91/0x360
[  356.412795][   T34]  schedule+0x165/0x360
[  356.414087][   T34]  schedule_preempt_disabled+0x13/0x30
[  356.415820][   T34]  __mutex_lock+0x7e6/0x1360
[  356.417314][   T34]  ? __mutex_lock+0x5b6/0x1360
[  356.421281][   T34]  ? rfkill_register+0x37/0x8e0
[  356.422805][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  356.424398][   T34]  ? netdev_run_todo+0xe1d/0xea0
[  356.425988][   T34]  ? nl80211_common_reg_change_event+0x55d/0x6b0
[  356.428539][   T34]  ? __pfx_netdev_run_todo+0x10/0x10
[  356.430203][   T34]  ? __queue_delayed_work+0x252/0x2d0
[  356.431954][   T34]  rfkill_register+0x37/0x8e0
[  356.433526][   T34]  wiphy_register+0x214c/0x28d0
[  356.435057][   T34]  ? __pfx_wiphy_register+0x10/0x10
[  356.436802][   T34]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  356.441358][   T34]  ieee80211_register_hw+0x3425/0x4080
[  356.443491][   T34]  ? ieee80211_register_hw+0x1491/0x4080
[  356.445748][   T34]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  356.448577][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  356.451194][   T34]  ? __hrtimer_setup+0x187/0x210
[  356.453189][   T34]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  356.455517][   T34]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  356.457807][   T34]  ? __pfx__printk+0x10/0x10
[  356.461992][   T34]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  356.463946][   T34]  ? __nla_validate_parse+0x251c/0x2d40
[  356.465691][   T34]  ? __sock_sendmsg+0x21c/0x270
[  356.467481][   T34]  ? ____sys_sendmsg+0x505/0x830
[  356.469700][   T34]  hwsim_new_radio_nl+0xea4/0x1b10
[  356.471463][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  356.473387][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  356.475637][   T34]  ? __nla_parse+0x40/0x60
[  356.477435][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  356.484735][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  356.487079][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  356.490044][   T34]  ? bpf_lsm_capable+0x9/0x20
[  356.491939][   T34]  ? security_capable+0x7e/0x2e0
[  356.493918][   T34]  genl_rcv_msg+0x60e/0x790
[  356.495747][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  356.497718][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  356.503823][   T34]  ? __asan_memcpy+0x40/0x70
[  356.505736][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  356.507899][   T34]  netlink_rcv_skb+0x208/0x470
[  356.510455][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.512451][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  356.514461][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  356.516586][   T34]  ? down_read+0x1ad/0x2e0
[  356.522975][   T34]  genl_rcv+0x28/0x40
[  356.524672][   T34]  netlink_unicast+0x82f/0x9e0
[  356.526618][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  356.529326][   T34]  ? netlink_sendmsg+0x642/0xb30
[  356.531351][   T34]  ? skb_put+0x11b/0x210
[  356.533050][   T34]  netlink_sendmsg+0x805/0xb30
[  356.534961][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.537018][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  356.543107][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  356.545245][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.547342][   T34]  __sock_sendmsg+0x21c/0x270
[  356.549846][   T34]  ____sys_sendmsg+0x505/0x830
[  356.551791][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  356.553972][   T34]  ? import_iovec+0x74/0xa0
[  356.555790][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  356.557285][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  356.561442][   T34]  ? __fget_files+0x2a/0x420
[  356.563156][   T34]  ? __fget_files+0x3a0/0x420
[  356.565087][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  356.567153][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  356.569858][   T34]  ? rcu_is_watching+0x15/0xb0
[  356.571800][   T34]  ? do_syscall_64+0xbe/0x3b0
[  356.573688][   T34]  do_syscall_64+0xfa/0x3b0
[  356.575494][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.577516][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.583375][   T34]  ? exc_page_fault+0x9f/0xf0
[  356.585308][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.587683][   T34] RIP: 0033:0x7f545d98ebe9
[  356.590959][   T34] RSP: 002b:00007f545e880038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.594295][   T34] RAX: ffffffffffffffda RBX: 00007f545dbb5fa0 RCX: 00007f545d98ebe9
[  356.597233][   T34] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 000000000000000a
[  356.602939][   T34] RBP: 00007f545da11e19 R08: 0000000000000000 R09: 0000000000000000
[  356.606104][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.609237][   T34] R13: 00007f545dbb6038 R14: 00007f545dbb5fa0 R15: 00007ffec1207e98
[  356.611736][   T34]  </TASK>
[  356.612870][   T34] INFO: task syz-executor:13262 blocked for more than 143 seconds.
[  356.615522][   T34]       Not tainted syzkaller #0
[  356.617184][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  356.623348][   T34] task:syz-executor    state:D stack:27816 pid:13262 tgid:13262 ppid:1      task_flags:0x400040 flags:0x00004000
[  356.627921][   T34] Call Trace:
[  356.629913][   T34]  <TASK>
[  356.631151][   T34]  __schedule+0x1798/0x4cc0
[  356.632966][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.634949][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.636812][   T34]  ? __pfx___schedule+0x10/0x10
[  356.639264][   T34]  ? schedule+0x91/0x360
[  356.640953][   T34]  schedule+0x165/0x360
[  356.642614][   T34]  schedule_preempt_disabled+0x13/0x30
[  356.644740][   T34]  __mutex_lock+0x7e6/0x1360
[  356.646590][   T34]  ? __mutex_lock+0x5b6/0x1360
[  356.651606][   T34]  ? rfkill_register+0x37/0x8e0
[  356.653605][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  356.655718][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  356.657784][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  356.660372][   T34]  ? device_initialize+0x24b/0x440
[  356.662452][   T34]  rfkill_register+0x37/0x8e0
[  356.664322][   T34]  hci_register_dev+0x3f5/0x890
[  356.666253][   T34]  vhci_create_device+0x39c/0x6e0
[  356.671622][   T34]  vhci_write+0x3ce/0x4a0
[  356.673361][   T34]  vfs_write+0x5c9/0xb30
[  356.675011][   T34]  ? __pfx_vhci_write+0x10/0x10
[  356.676953][   T34]  ? __pfx_vfs_write+0x10/0x10
[  356.679017][   T34]  ? count_memcg_event_mm+0x21/0x260
[  356.680979][   T34]  ksys_write+0x145/0x250
[  356.682716][   T34]  ? __pfx_ksys_write+0x10/0x10
[  356.684682][   T34]  ? do_syscall_64+0xbe/0x3b0
[  356.686672][   T34]  do_syscall_64+0xfa/0x3b0
[  356.692721][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.694809][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.697215][   T34]  ? exc_page_fault+0x9f/0xf0
[  356.700312][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.702634][   T34] RIP: 0033:0x7f3c2378d660
[  356.704426][   T34] RSP: 002b:00007ffe41f9c128 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  356.707770][   T34] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3c2378d660
[  356.716243][   T34] RDX: 0000000000000002 RSI: 00007ffe41f9c13a RDI: 00000000000000ca
[  356.720259][   T34] RBP: 00007f3c239b67b8 R08: 0000000000000000 R09: 00007f3c244ed6c0
[  356.723457][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  356.726683][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  356.733843][   T34]  </TASK>
[  356.735260][   T34] INFO: task syz-executor:13263 blocked for more than 144 seconds.
[  356.739087][   T34]       Not tainted syzkaller #0
[  356.741065][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  356.744421][   T34] task:syz-executor    state:D stack:27240 pid:13263 tgid:13263 ppid:1      task_flags:0x400040 flags:0x00004000
[  356.749836][   T34] Call Trace:
[  356.751240][   T34]  <TASK>
[  356.752451][   T34]  __schedule+0x1798/0x4cc0
[  356.754298][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.756289][   T34]  ? __lock_acquire+0xab9/0xd20
[  356.759060][   T34]  ? __pfx___schedule+0x10/0x10
[  356.761143][   T34]  ? schedule+0x91/0x360
[  356.762882][   T34]  schedule+0x165/0x360
[  356.764410][   T34]  schedule_preempt_disabled+0x13/0x30
[  356.766607][   T34]  __mutex_lock+0x7e6/0x1360
[  356.769093][   T34]  ? __mutex_lock+0x5b6/0x1360
[  356.771075][   T34]  ? rfkill_register+0x37/0x8e0
[  356.773076][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  356.774975][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  356.777083][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  356.779850][   T34]  ? device_initialize+0x24b/0x440
[  356.781923][   T34]  rfkill_register+0x37/0x8e0
[  356.783793][   T34]  hci_register_dev+0x3f5/0x890
[  356.785593][   T34]  vhci_create_device+0x39c/0x6e0
[  356.787492][   T34]  vhci_write+0x3ce/0x4a0
[  356.789781][   T34]  vfs_write+0x5c9/0xb30
[  356.791583][   T34]  ? __pfx_vhci_write+0x10/0x10
[  356.793599][   T34]  ? __pfx_vfs_write+0x10/0x10
[  356.795579][   T34]  ? count_memcg_event_mm+0x21/0x260
[  356.797743][   T34]  ksys_write+0x145/0x250
[  356.800736][   T34]  ? __pfx_ksys_write+0x10/0x10
[  356.802731][   T34]  ? do_syscall_64+0xbe/0x3b0
[  356.804672][   T34]  do_syscall_64+0xfa/0x3b0
[  356.806518][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.809279][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.811738][   T34]  ? exc_page_fault+0x9f/0xf0
[  356.813661][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.815825][   T34] RIP: 0033:0x7f2c7ef8d660
[  356.817495][   T34] RSP: 002b:00007ffd7bc774b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  356.821546][   T34] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2c7ef8d660
[  356.824739][   T34] RDX: 0000000000000002 RSI: 00007ffd7bc774ca RDI: 00000000000000ca
[  356.827803][   T34] RBP: 00007f2c7f1b67b8 R08: 0000000000000000 R09: 00007f2c7fced6c0
[  356.831371][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  356.834572][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  356.837746][   T34]  </TASK>
[  356.839738][   T34] 
[  356.839738][   T34] Showing all locks held in the system:
[  356.842763][   T34] 4 locks held by kworker/u8:1/13:
[  356.844367][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  356.847696][   T34]  #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  356.851325][   T34]  #2: ffffffff8f52adb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  356.854186][   T34]  #3: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  356.857374][   T34] 1 lock held by khungtaskd/34:
[  356.859289][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  356.862387][   T34] 2 locks held by getty/5673:
[  356.863873][   T34]  #0: ffff888108cf60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  356.866935][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  356.870486][   T34] 3 locks held by kworker/0:3/5846:
[  356.872137][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  356.875505][   T34]  #1: ffffc9000327fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  356.880007][   T34]  #2: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  356.883565][   T34] 2 locks held by syz.1.1708/13210:
[  356.885152][   T34]  #0: ffff888117d41100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  356.888480][   T34]  #1: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  356.891647][   T34] 2 locks held by syz.3.1711/13220:
[  356.893238][   T34]  #0: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  356.896525][   T34]  #1: ffff888117d41100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  356.899948][   T34] 3 locks held by syz.0.1722/13257:
[  356.901639][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.904119][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  356.906772][   T34]  #2: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  356.910498][   T34] 2 locks held by syz-executor/13262:
[  356.912138][   T34]  #0: ffff88803a7ab918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  356.915266][   T34]  #1: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  356.918673][   T34] 2 locks held by syz-executor/13263:
[  356.920578][   T34]  #0: ffff88803a7aa918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  356.924408][   T34]  #1: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  356.928876][   T34] 2 locks held by syz-executor/13265:
[  356.930990][   T34]  #0: ffff88803a7a8918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  356.934895][   T34]  #1: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  356.939385][   T34] 2 locks held by syz-executor/13271:
[  356.941563][   T34]  #0: ffff888045c5f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  356.945539][   T34]  #1: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  356.949919][   T34] 2 locks held by syz-executor/13272:
[  356.952072][   T34]  #0: ffff88803c707118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  356.956122][   T34]  #1: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  356.960419][   T34] 2 locks held by syz-executor/13274:
[  356.962599][   T34]  #0: ffff88803912b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  356.966629][   T34]  #1: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  356.970735][   T34] 2 locks held by syz-executor/13283:
[  356.972885][   T34]  #0: ffff88803bb80118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  356.976525][   T34]  #1: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  356.980073][   T34] 2 locks held by syz-executor/13284:
[  356.981769][   T34]  #0: ffff8880473a5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  356.984938][   T34]  #1: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  356.988361][   T34] 2 locks held by syz-executor/13286:
[  356.990061][   T34]  #0: ffff888134054118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  356.993189][   T34]  #1: ffffffff8f811728 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  356.996274][   T34] 
[  356.997029][   T34] =============================================
[  356.997029][   T34] 
[  357.000143][   T34] NMI backtrace for cpu 0
[  357.000166][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  357.000176][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  357.000181][   T34] Call Trace:
[  357.000185][   T34]  <TASK>
[  357.000191][   T34]  dump_stack_lvl+0x189/0x250
[  357.000207][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.000217][   T34]  ? __pfx__printk+0x10/0x10
[  357.000234][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  357.000246][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  357.000256][   T34]  ? __pfx__printk+0x10/0x10
[  357.000268][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  357.000283][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  357.000293][   T34]  watchdog+0xf93/0xfe0
[  357.000309][   T34]  ? watchdog+0x1de/0xfe0
[  357.000322][   T34]  kthread+0x711/0x8a0
[  357.000334][   T34]  ? __pfx_watchdog+0x10/0x10
[  357.000343][   T34]  ? __pfx_kthread+0x10/0x10
[  357.000353][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  357.000364][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.000375][   T34]  ? __pfx_kthread+0x10/0x10
[  357.000385][   T34]  ret_from_fork+0x3fc/0x770
[  357.000395][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  357.000405][   T34]  ? __switch_to_asm+0x39/0x70
[  357.000414][   T34]  ? __switch_to_asm+0x33/0x70
[  357.000423][   T34]  ? __pfx_kthread+0x10/0x10
[  357.000433][   T34]  ret_from_fork_asm+0x1a/0x30
[  357.000449][   T34]  </TASK>
[  357.000452][   T34] Sending NMI from CPU 0 to CPUs 1:
[  357.047058][    C1] NMI backtrace for cpu 1
[  357.047105][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  357.047121][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  357.047130][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  357.047155][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 d6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  357.047167][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  357.047180][    C1] RAX: 7c01c7c32e790500 RBX: ffffffff819683a8 RCX: 7c01c7c32e790500
[  357.047189][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b69f3 RDI: ffffffff8be33300
[  357.047198][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  357.047208][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37d30
[  357.047217][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11020005000
[  357.047225][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  357.047235][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  357.047243][    C1] CR2: 000055692c86c5c8 CR3: 000000000df36000 CR4: 00000000000006f0
[  357.047272][    C1] Call Trace:
[  357.047281][    C1]  <TASK>
[  357.047286][    C1]  default_idle+0x13/0x20
[  357.047299][    C1]  default_idle_call+0x74/0xb0
[  357.047312][    C1]  do_idle+0x1e8/0x510
[  357.047327][    C1]  ? __pfx_do_idle+0x10/0x10
[  357.047346][    C1]  cpu_startup_entry+0x44/0x60
[  357.047357][    C1]  start_secondary+0x101/0x110
[  357.047376][    C1]  common_startup_64+0x13e/0x147
[  357.047400][    C1]  </TASK>
[  357.097889][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  357.099986][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  357.102714][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  357.105831][   T34] Call Trace:
[  357.106903][   T34]  <TASK>
[  357.107804][   T34]  dump_stack_lvl+0x99/0x250
[  357.109386][   T34]  ? __asan_memcpy+0x40/0x70
[  357.110910][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.112619][   T34]  ? __pfx__printk+0x10/0x10
[  357.114124][   T34]  vpanic+0x281/0x750
[  357.115404][   T34]  ? __pfx_vpanic+0x10/0x10
[  357.116870][   T34]  ? preempt_schedule+0xae/0xc0
[  357.118475][   T34]  ? preempt_schedule_common+0x83/0xd0
[  357.120429][   T34]  panic+0xb9/0xc0
[  357.121678][   T34]  ? __pfx_panic+0x10/0x10
[  357.123135][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  357.125139][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  357.127030][   T34]  watchdog+0xfd2/0xfe0
[  357.128348][   T34]  ? watchdog+0x1de/0xfe0
[  357.129778][   T34]  kthread+0x711/0x8a0
[  357.131099][   T34]  ? __pfx_watchdog+0x10/0x10
[  357.132605][   T34]  ? __pfx_kthread+0x10/0x10
[  357.134092][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  357.135697][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.137326][   T34]  ? __pfx_kthread+0x10/0x10
[  357.138816][   T34]  ret_from_fork+0x3fc/0x770
[  357.140357][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  357.141948][   T34]  ? __switch_to_asm+0x39/0x70
[  357.143532][   T34]  ? __switch_to_asm+0x33/0x70
[  357.145020][   T34]  ? __pfx_kthread+0x10/0x10
[  357.146513][   T34]  ret_from_fork_asm+0x1a/0x30
[  357.147964][   T34]  </TASK>
[  357.149603][   T34] Kernel Offset: disabled
[  357.150961][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:36:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=d2ac72d4e7e4e900 RDX=0000000000000000
RSI=ffffffff8d9ca583 RDI=ffffffff8be33300 RBP=ffffffff8b46e862 RSP=ffffc900041bf960
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff8b46e790
R12=0000000000000002 R13=ffffffff8e139ea0 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff8b797195 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555aa3ae0680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000021 000000392f616973
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=2f74656e2f33336d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a08d1f74800516a8 RBX=0000000000000202 RCX=f1e960ee107cd700 RDX=0000000000000003
RSI=ffffffff8e139ea0 RDI=ffffffff8dba5d78 RBP=ffff8881079e2828 RSP=ffffc9000303f498
R8 =ffffffff8fa37d37 R9 =1ffffffff1f46fa6 R10=dffffc0000000000 R11=fffffbfff1f46fa7
R12=0000000000000003 R13=0000000000000003 R14=ffffffff8e139ea0 R15=ffff8881079e1cc0
RIP=ffffffff8b797280 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fecc68e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fecc5d876c3 00007fecc5d876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=a010000780040100 0000080600000007 XMM07=2282080000000000 100007d0030fffff
XMM08=ffffffff0407c003 0410000700000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
