last executing test programs:

1.119350317s ago: executing program 1 (id=1000):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00000001c0)=""/220, &(0x7f0000000040)=0xdc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
r2 = epoll_create(0x400)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000500)={0x40000000})
write$cgroup_int(r4, &(0x7f0000000080)=0x2, 0x12)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), 0x0}, 0x20)
ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000000)={'vcan0\x00', 0x3})

1.118342917s ago: executing program 0 (id=1001):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, r1, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2a}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffe}, @NL80211_ATTR_FRAME_MATCH={0xb9, 0x5b, "717cae12b3bea960c06614cd92d0e6a2eb2d484d49372e0bd3c67fe0782f47b65c2b78f1d334a1bfdae61c48ecfa8b61d01bb5e9d80a647ab1a826eb87e011bb037e9d920bdf95c5412b6ba62ca25d8ff35e685583723d6277d7fdd5388c37ea58440ad384e7e0336832714e1b49ff2c3fdd027925195de8cfb76b3a62c911a801fd444d9ef931f694fbbcdb5de969b316a2c752fed748f1b6c2cd96124ba3b9af25f9c055897b19ac6525e51e0d06f81a26aff34b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0x12, 0x5b, "7bb00130d3b89f2b96eefa1ac751"}]}, 0x110}, 0x1, 0x0, 0x0, 0x24004084}, 0x4044000)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x250, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93c000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1da}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d9a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x285821b92600c0b4)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r0)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28040011)
sendmsg$can_bcm(r0, &(0x7f0000000940)={&(0x7f0000000840), 0x10, &(0x7f0000000900)={&(0x7f0000000880)={0x3, 0xe61, 0x10000, {}, {}, {0x4}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x22, 0x2, 0x0, 0x0, "0c6d0f2c8cad0c6d5a6616b6314617db815ca83238f26385b573e21bab9593e9021ed66442217e2782209a3208c0ea0a8c24cc04789b7dc262e4f05c9c2f1420"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4044010)
unshare(0x60000000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000e40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80308103}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a00)={0x3d8, r4, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x3a0, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_a, @device_b, @initial, {0x3, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x8ff, @default, 0x8, @void, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x68, {0x3, 0xca, 0x0, "9e9c95b0bd9c189c2f3d6d03b6d01d9125e4bf09b4dfade1efea0a42a71f1bc12fac7287ac86f3349af2280d61f8de268e79b434379797b532270fe3e24b87d58d3d88c656aa559fde4528db8c75b49d1fe7aa59cb252c55db6321e9ca7dd06c8691410748"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x7, 0x61}}, @val={0x76, 0x6, {0x5, 0x7, 0x28, 0xe}}, [{0xdd, 0xcb, "210311295891a6aa812d1ec970ce7658664cbd363d3cb871bbbbf48acdafe5a62c64f3b2083fd73cf850246c604a00c664aec367b98827677c4e4f547f2c8cea03550cabc23d6aa885f695542435fde7f913828df141a642329662cc26ee3cb305c44d83d7cacd041bb7ba8d5b1521e2e8b3b346b9acd3155a1816176c801160a77639c7077843ce7b0ab3791e3f2ea618934fb00c3136e6486fe6f17ad70278de50a715b3de82969691ca46225122212a1c4e5b1214348b4fb7f1a4d844bb92d68cf90cdae73f5f21f4aa"}, {0xdd, 0x18, "f1c67ac739c01883129d1b6f9e5e01b308131b489e77a277"}, {0xdd, 0x2f, "6d68356bdba04552896355fbcbee923cff9d8b485b0ac402f28820ced538f34cc4313be811def1fa2f036d606385cb"}, {0xdd, 0x38, "11f770ffa54036fc29e4f39fd486c812ea8b4a96c91e2ec751da97de16e3eb7c1e869bf4967ab14f830f650dcb7a043cd75919b8b70a9973"}, {0xdd, 0x34, "9bf775f444dc56eb2c97ad0979513f8a9295c5cd050409cde91c6d61c86c69b85a2c85e985876f06a2255a73ef28c60b4633c622"}, {0xdd, 0x40, "e6d85aff440cea84a390dffdb878b62fee5dc0ccfd525865ebde18d5337a29989af3c4a78ac32fc13ad2b63088b9d7a71b2f48b0a4d08293aaaceabd76c6d586"}, {0xdd, 0x30, "1f1315bf62853cdf3e661d8585058a8fe66171928c3daf67787e9088297e83749aad8aa6c0c0f000853c18c2e834d1e7"}, {0xdd, 0xf0, "2da567d878b3cb45ad17f2941d952e1779c94569b3323d1c4856b0bbe0e339cb733121d206f2e2d33af9a01d884cdae592c24f2e1d59bb955119d4ba1773fc7c3792bfe569d7b42c5c059472a1cfde5946beac83d15594e3a76b2a8ed9bb1bc2cb7bfe411c2594beb5abcd4392e36b40b68ef8fb4d51ba58d3b3ee7415806013d0ac41f5527daa55e5d16fcd07d41ddba9b0ed72c28215763e8661d0dbb00befcf27ef4c16d6930d9cec2dd556d34e8a449a0b2d11af37ffa017d54ef888f50e9bf98f3eee6deb1615edc9fe18fb63ea8a2f66bf0703d48d33569883730759db1d38a553b7e9f1e03bc5b4aca3233512"}]}}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000e80)=0x6f)
write$tun(0xffffffffffffffff, &(0x7f0000000ec0)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0xfff9, 0xfff6, 0x3ff, 0x4}, @llc={@snap={0x2, 0xaa, "92", "ed688b", 0x8809, "80c50548b923a1ea0fbeb8ecc7bfeccf573e18db7523f64766c3e7c10b1a70638818c483604ca0cace2da1f3dfb53c096e01f1bb595062785353bbc4d7f372851b90ee598ceb8bb095759a8529c22e61192ef383b8134360c0c985517061a8102a227478a0768e7768a2dbf92b518808a553f09eec8870847857f9880e4c262a57435406a0d457cb06eec4b09ef57af740be63a47ebf4f9d779de8e4f1c462bcb1a9d85d9719af8621a6ac386c0618695371754de65b921149fa8ed588a384d935fda1a1eaeb04f6dfdbf805edad2356684c2deea4abd1c96d84aad2"}}}, 0xf2)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x6c}}}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20008844)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x94, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x62}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "de98e48cfaa576224847d1d20327aa5ecb1529edb6d77ddf"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x94}, 0x1, 0x0, 0x0, 0x16bf0c268a6e2134}, 0x40004)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001280), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000012c0)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001300)=<r8=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, 'broadcast-link\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4045}, 0x20000054)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6694bd4ff806222c}, 0x4)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000001500)={0x8, 'caif0\x00', {'veth1_virt_wifi\x00'}, 0x6})
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x38, 0x140e, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000815}, 0x4008000)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r9, 0x80089419, &(0x7f0000001640))
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0x88, r4, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb92, 0x5c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x46}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]]}, 0x88}}, 0x4000)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000001800)=""/61, &(0x7f0000001840)=0x3d)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001a80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001900)={0x124, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1c}}}}, [@NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x4, 0xf800, 0x3, 0x8, 0x8, 0x4ebe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x1}, {0x3, 0x4}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x5, 0x2}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x4, 0x9}, {0x1}, {0x5}, {0x6, 0x5}, {0x2}, {0x4, 0x7}, {0x7, 0x4}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {0x5, 0x8}, {}, {0x1, 0x3}, {0x6, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x2, 0x9}, {0x5, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0xa}, {0x3}, {0x2, 0x4}, {0x6, 0x2}, {0x2, 0x5}, {0x2}, {0x0, 0x2}, {0x5, 0x7}, {0x5, 0x4}, {0x7}, {0x5, 0x2}, {0x7, 0x8}, {0x5}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x1000, 0xffd9, 0x5, 0x0, 0x6, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa46, 0x9, 0x3, 0x4, 0x1, 0x307, 0xc, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0xb, 0xc, 0x4, 0x4, 0x6, 0x5, 0x2c, 0x2, 0x16, 0x1b, 0x5, 0xc, 0x0, 0x4e, 0x28, 0x1, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xb8, 0x1, 0x6, 0xfff, 0x401, 0x7f, 0x8]}}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4002800}, 0x40)

1.110808692s ago: executing program 1 (id=1002):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = accept4$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @bcast}, [@null, @default, @rose, @null, @bcast, @rose, @rose, @default]}, &(0x7f0000000040)=0xfffffffffffffca5, 0x800)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000240))
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0xe)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "000043c06ce882c3e931dd61be7051a800000000000100000000008000", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b115d201000000f10ac1e96e0543758461846ff3d9582b4f5990b5d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0x0, 0xfffffffe, 0x1}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

1.029880474s ago: executing program 1 (id=1003):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x44891}, 0x8060040)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x44891}, 0x8060040) (async)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}}) (async)

1.024642504s ago: executing program 0 (id=1004):
r0 = socket$inet_icmp(0x2, 0x2, 0x1) (async)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xb, 0x95a8, 0x5, 0x101, 0x2}, 0x0, 0x1}, [{0x7, 0x6, 0x18, 0x8, 0x80000001, 0x4}, {0x35, 0xbd6, 0x7, 0x7, 0xc294, 0x9}, {0x800, 0x6, 0x8001, 0x1, 0x0, 0x4}, {0x5, 0x1, 0xe00, 0xd32, 0xfff}, {0x2, 0x200, 0x7, 0xd64, 0x5, 0xc}, {0x3, 0x7ff, 0xfff, 0xb, 0xfff, 0x5}, {0x2, 0x4, 0x0, 0x3, 0x3, 0x10001}, {0xfff, 0x5, 0x7f, 0x2, 0x0, 0x8}, {0x111fdbe2, 0x3, 0x8, 0x5, 0x2000000, 0x4}, {0x9, 0x7, 0x5, 0x466, 0xfffffc01, 0x2}, {0x1000, 0x5, 0xed87, 0xd2a, 0x0, 0x1}, {0x8, 0x5, 0x8000, 0x10, 0x6, 0x7c2}, {0x2, 0x7, 0x6, 0x7, 0xc, 0x8}, {0x2, 0x240, 0x7, 0xc, 0xfffffffd, 0x7}, {0x9, 0x6, 0x4, 0x101, 0xffff8001, 0x200}, {0x1d2cbf69, 0xfffffbff, 0x2, 0x2, 0xf, 0x3}, {0x2ce, 0x7, 0x1, 0x3e18, 0x8, 0x4}, {0xfc5, 0xae7, 0x80000000, 0x1ff, 0x8b, 0xfffffffd}, {0x3, 0x8, 0x2, 0xfffffff8, 0x3, 0xf2e}, {0x5, 0x5, 0xffffffff, 0x7, 0x1, 0x3}, {0x3, 0x7d6, 0xe4, 0x5, 0x2, 0x10001}, {0x9fa3, 0x1fc, 0x0, 0x9, 0x0, 0xc29}, {0x7, 0x5, 0x6, 0x80000001, 0x0, 0x1}, {0x8, 0x0, 0xfe000000, 0xa, 0x3, 0x161}, {0x9, 0x8, 0x4, 0x3, 0x10001, 0x25075c96}, {0x101, 0x8000, 0xe7, 0x200, 0xf, 0x3}, {0x15000000, 0x2d41, 0x6, 0x8, 0x6, 0x2e}, {0x6, 0x401, 0x1, 0x28a, 0xf5c, 0xe2a}, {0x0, 0x3ff, 0x0, 0x5ce, 0x42, 0x3}, {0x0, 0x4, 0x6cce, 0x2}, {0x3, 0x1, 0x3, 0x0, 0xa1, 0x2}, {0x7, 0x9, 0x8, 0x3045, 0x2, 0x1}, {0x7, 0x4, 0x6, 0x510cc509, 0x6, 0x6}, {0x89f9, 0xe5ff, 0x1, 0x9, 0x2f37}, {0x9c, 0x10000, 0x8, 0x9717, 0x9, 0x8001}, {0xfffffffe, 0xfff, 0x5, 0x8001, 0x5, 0x3}, {0x80, 0x3, 0x80000001, 0x80000001, 0x8, 0x81}, {0x6, 0x9, 0x4, 0x7, 0x0, 0x1}, {0x58d47774, 0x5dba, 0x1, 0x2, 0x3, 0x9}, {0x1, 0x3ff, 0xd, 0x7, 0x80000000, 0x3d}, {0x9, 0x0, 0x200, 0xaeb, 0x1, 0x28ec}, {0x7fff, 0x4, 0x6, 0x80, 0x8, 0x5}, {0x100, 0x3, 0x9, 0x0, 0x6, 0xc639}, {0xc, 0x9, 0x6, 0x100, 0x400, 0x1ff}, {0x3, 0x9, 0x1, 0x3, 0x9, 0x6}, {0x17, 0x200, 0x5, 0x1, 0x4, 0x9}, {0x5, 0x8, 0x7, 0xca, 0x3, 0xfff}, {0x0, 0xfffffff8, 0x9, 0x9, 0x6, 0x80}, {0x10100000, 0x0, 0x7, 0x80000000, 0x5, 0x51}, {0x6, 0x5, 0x8, 0x3ea7, 0x4, 0x9e4}, {0x7fffffff, 0xc, 0x3, 0x7, 0x7f, 0x7}, {0x5, 0x5b07f77b, 0x7, 0xd4, 0xd96, 0x4b3}, {0x1, 0x0, 0xda9b, 0x9, 0x4, 0x2e1}, {0x4, 0x1, 0x9, 0x7, 0xd, 0x9}, {0x8, 0x8, 0x4, 0x6726953b, 0x34, 0x8}, {0xc45, 0x3, 0x401, 0x7fff, 0x2}, {0x40000, 0x0, 0x80, 0xd7b, 0x7, 0x100000}, {0x6, 0x6, 0x4, 0xf, 0xfffffffa, 0x3}, {0xc, 0x8, 0x7ff, 0x1, 0x5, 0xfffffff8}, {0x5, 0x68f, 0x2, 0x5, 0x400, 0x100}, {0x1, 0xa, 0xc, 0x5, 0x0, 0x7fff}, {0xfffffff5, 0x1, 0x5, 0x0, 0x4000, 0x602b}, {0x8, 0x1, 0x1000, 0xf4, 0xffffff01, 0x2}, {0x8, 0x1ff, 0x81, 0x4, 0x6, 0x8000}, {0x6, 0x80000001, 0x3, 0x240, 0x6, 0x8}, {0x7, 0x3, 0x9, 0x4, 0x4, 0xcf88}, {0x6c7, 0x4, 0x9c, 0x18, 0x0, 0xc}, {0x2, 0x9, 0x200, 0x7, 0x4, 0x7}, {0x800, 0xaf7b, 0x5, 0x80, 0x3, 0x2}, {0x5, 0xfffffbff, 0x9, 0x4, 0x5, 0x80000001}, {0x7, 0x9, 0x81, 0x2fd, 0x40, 0x2}, {0x30, 0x8, 0x81, 0x80000001, 0xa, 0xcc8}, {0x8, 0xa, 0x4, 0x2, 0x9d5, 0x7}, {0x539, 0x2, 0xb673, 0x4, 0x80000000, 0x1000}, {0x2, 0x3, 0x8000, 0x6, 0x7, 0x7}, {0x2, 0x9, 0x6, 0x7, 0x187, 0x800}, {0x200, 0xad1, 0x0, 0x8a, 0x5, 0xffff}, {0x4, 0xf, 0x8, 0x9, 0x5, 0x6}, {0x8, 0x10, 0x9, 0x1, 0x3, 0x4}, {0xfffff800, 0xffffff7e, 0x1, 0x10001, 0x8, 0x7}, {0x7ff, 0x9, 0x0, 0xd, 0x7, 0xfffff54c}, {0x6087, 0x2, 0x1, 0x0, 0x2, 0x1}, {0x9, 0x8, 0x7d, 0x6970bd98, 0x63c1, 0x1}, {0x9, 0x13e39b74, 0x8, 0x7, 0x400}, {0x40, 0x6, 0x81, 0x93, 0x6, 0x3}, {0x9, 0x7, 0xffff622e, 0x87, 0x1000, 0xfffffffb}, {0x8, 0x8e8, 0x7, 0xffff0001, 0x101, 0x3}, {0x7f, 0x2, 0x5, 0x3, 0x5, 0x6}, {0xfffffffd, 0x3, 0x3, 0xff, 0x3, 0xffff}, {0xffff, 0x1, 0x1, 0x7, 0x5, 0x5}, {0x4, 0x4, 0x0, 0x2, 0x0, 0xa}, {0x9, 0x2, 0x1, 0x81, 0x2, 0x3}, {0x654c5d3b, 0xffffffff, 0xef, 0x4, 0xdaf6, 0xc}, {0x8, 0x5, 0x2, 0x7ff, 0xffffff51, 0x3}, {0x7, 0x200, 0xa34, 0x1, 0x6, 0xffffff03}, {0x1, 0x0, 0x9, 0x5, 0x5, 0xb08}, {0x6, 0x890, 0x588d, 0x7, 0x1, 0x8}, {0xf, 0x9, 0x8, 0x2, 0x2, 0xf}, {0x4, 0x7, 0x7, 0x5, 0x4, 0x1}, {0x8, 0x44a, 0x7, 0x80, 0x6, 0x10001}, {0x800, 0xd2, 0x8, 0x0, 0x4, 0x5}, {0x6, 0x9, 0x23f, 0x9, 0x94, 0xffff}, {0xfffffffb, 0x1dd, 0x0, 0x6, 0xb5e, 0x800}, {0xb, 0xd851, 0xfff, 0xc9, 0xec, 0x5}, {0x7a4316df, 0x3ff, 0x3, 0x20c4, 0x0, 0x1000}, {0x8, 0x464, 0x7fff, 0x8, 0x1, 0x9}, {0x10, 0xa, 0x9, 0x6, 0x57ca, 0xfffff000}, {0x8, 0xee, 0x7, 0xffffff0d, 0x4, 0x3}, {0x4c0, 0x7, 0x2, 0x0, 0x8, 0x100}, {0x1, 0x6, 0x0, 0x6, 0x80000000, 0x4}, {0x0, 0x8e80, 0x65, 0x6, 0xffffffff, 0x6}, {0x3, 0x1, 0x1, 0x0, 0x8, 0xa}, {0x8001, 0x100, 0x1, 0x1, 0x6, 0x3b}, {0xfffff7e5, 0xff, 0x10, 0x0, 0xa, 0x6}, {0x9, 0x75, 0x9, 0xef, 0xff, 0x89}, {0x4, 0x8, 0x7, 0x5, 0x8, 0x3f}, {0xf083, 0x74406f13, 0x80000001, 0x1ff, 0x9, 0x9}, {0xfffffffb, 0x10001, 0x1, 0xfffffffe, 0x1000}, {0x8001, 0x4c6a, 0x8, 0x25e9, 0x90b, 0x5}, {0x7, 0xa, 0x4, 0x1000, 0xfff, 0x7}, {0x7fb, 0xd, 0x8, 0x78, 0x7, 0x9}, {0x1, 0xfffffffe, 0x800, 0x1, 0x1, 0x4}, {0x80000000, 0x3, 0xa31f6f1f, 0x1, 0x5, 0x8000}, {0x7, 0x7, 0x4, 0x8, 0x10001}, {0xfffffff7, 0x0, 0x40, 0x6, 0x5, 0x5}, {0x5, 0xfff, 0xe7da, 0x2, 0x9, 0x7}, {0x6, 0x0, 0x80000001, 0x5, 0x4, 0x4}, {0xfffffffb, 0x1c000000, 0x0, 0x8001, 0x8, 0x9}], [{0x5}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5aba00c555baa7ef, 0x1}, {0x1, 0x2}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0xd}, {0x5, 0x1}, {0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x181885f84a3b5ba1}, {0x3, 0x1}, {0x1}, {0x1}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x5}, {0x1b187e6351498f25}, {0x0, 0x1}, {0x4, 0x1}, {0x970f042e95146b82, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3}, {0x2}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x7}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6ac4b8d77751b955511d441ba765f109"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "8c8f14bcf2a335c42db253db5bd80461"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

1.02431484s ago: executing program 1 (id=1005):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd63be7051fd00ca44fb7e53dd6200af5f00f8bdd7a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0x3ff}})

959.357218ms ago: executing program 1 (id=1006):
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfb}, 0x1c}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x10000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x24020400)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff)

959.019034ms ago: executing program 0 (id=1007):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r2, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f00000001c0)=0x84)
r3 = socket$inet(0x2, 0x5, 0xffffa9b5)
accept(r3, &(0x7f0000000340)=@vsock, &(0x7f00000003c0)=0x80)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r2, 0x8, 0x6, [0x3, 0x401, 0x5, 0x80, 0xf, 0x5]}, &(0x7f0000000240)=0x14)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r8], 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r9], 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getnexthop={0x20, 0x6a, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x24000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

890.607925ms ago: executing program 0 (id=1008):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff}, 0x28)
connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r5, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x45080)
connect$netrom(r1, 0x0, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

830.428669ms ago: executing program 1 (id=1009):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x94, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x3, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xf5, 0xa], 0x1, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0xe23, 0x1, @mcast1, 0x3ff}]}, &(0x7f0000000080)=0x10)
getpeername$packet(r2, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x3, 0x3a)
r5 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r5, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5800000000000000000000000700000086160000000305105ddb38a892a795d64cf2b1cded95820c0cac63d30adc5d6505a0892308e4ffffffab1414bbac14013b0000000064010101e0000002ffffffffac14143800000014000000000000000000002f0005d1"], 0x70}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4)
socket$kcm(0x10, 0x0, 0x4)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="b36297232100210189f1dca18a4fd9e3b530f05305000000000c00180032cdd30e012e10f49ed74d7d5382e4eeb6b337b65315fe6c567aa56abe789a267b4ed99c91f19e06a73c3620b4f3d94a8480cd1a2375ca3b3575e1fcc5c7d004b4a4da761325373a5a869fa9bfaa54134bce28e428971aa05d9e4c367e3c3c6727ead8970ea811e1b2bda660cc4e7ff3c84f8d35d2c671d255c0e60dbbc551ddb4e0d4c47889cdfe45ae690658b6610f217c9c3871759a32f30665b9426f6c90ad2b11b66bcdc7cbbdf63672789747aba50140550b161daca28b75a9cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, &(0x7f00000000c0)='\x00\x00', 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'})
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r8, 0x4}, 0x38)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r9)

829.973344ms ago: executing program 0 (id=1010):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}})
r1 = socket(0xa, 0x3, 0x87)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x890b, &(0x7f0000000000))
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f4e9d84dd4e882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b48e8067f70a9f359477919ae00", "000000214ee2badc8d7aae84", 0x0, 0x0, 0x0, 0xda}})
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000000))

751.265562ms ago: executing program 0 (id=1011):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
socket(0x2a, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r1, 0x6)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

320.112951ms ago: executing program 2 (id=1016):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000003e000701fcffffff00000000017c0000040042800c0001800686104b502050d248880835"], 0x28}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000006c0)=""/209, 0x0, 0xd1, 0x1, 0x3}, 0x28)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x200400c3)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x15, 0x9, 0x36}, 0x2c)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r1, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6}, 0x20)
close(0x3)
sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd7000000000"], 0x20}}, 0x84)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
readv(r6, &(0x7f0000000740), 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x39}})

250.038481ms ago: executing program 2 (id=1017):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r0, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

249.357007ms ago: executing program 2 (id=1018):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61b87051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a84b124fadfca16862a3432a4abe0f31e332b5c9bd8a20000151e1c", "34b1f357102e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0x0, 0x40000}})
socket$inet_icmp(0x2, 0x2, 0x1) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61b87051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a84b124fadfca16862a3432a4abe0f31e332b5c9bd8a20000151e1c", "34b1f357102e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0x0, 0x40000}}) (async)

167.952852ms ago: executing program 2 (id=1019):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x1, 0xffffffff, 0x10000, 0x2ffcfd5e}})

167.661497ms ago: executing program 2 (id=1020):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="000000000980ffff", 0x8)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

0s ago: executing program 2 (id=1021):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
writev(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="29878d92389ea0ca48ab3b1e89e59cfb75068e07aa81346e33a34dc08c02520ba4aac23cbcaf8123dbef148193eb98373170c1b64db9a36d85753927c52ceb6b75ed9acfef146abd6da4238fb480a744e997e559a59513795d58ac9c66a4efaedecbab4f3f1de19e4d473893650de5e39cdb4c436560d9cbf1f25c94af29ed794a72dad872388b06fee7a370a8d6c6727cb80db2cb0122899dcab309386cc96db46c4cfe832a3b9912e3db1b429efe", 0xaf}, {&(0x7f0000000040)="1ffb1c54b2bef67ffe4339188822eefbd954812f74bf5c3b82769b38961dc4de30e21d", 0x23}, {&(0x7f0000000280)="846a898eb7d2eaf780dde69de9eb0014bafd5a6cf76ba385f21ec00efc328ab82e4a7bd5e5c633fa46b4802a9d34e6913fbb1a878e99f615d478ab0743a6eacef35c486c02913e07993bd4f28d2b2b80a492", 0x52}, {&(0x7f0000000340)="2617b548e47478c177b594bace4e55777fb7708ae3de09fe53b0bf683d7f46e5691e3eb5f9d78a4c6fc1f4dda06728c280a919876a83f58d272a8f592d30b029370d11abbcb99748e7806f7cbaeda28ff823673a32d8", 0x56}], 0x4)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16186' (ED25519) to the list of known hosts.
syzkaller login: [   48.362008][ T5838] cgroup: Unknown subsys name 'net'
[   48.450660][ T5838] cgroup: Unknown subsys name 'cpuset'
[   48.455215][ T5838] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.234477][ T5838] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.370201][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.373998][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.377972][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.392746][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.395976][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.398858][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.401814][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.424471][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.427074][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.430556][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.459608][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.462575][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.465720][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.477393][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.480276][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.698549][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   54.815071][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   54.849010][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.851808][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.855021][ T5849] bridge_slave_0: entered allmulticast mode
[   54.859156][ T5849] bridge_slave_0: entered promiscuous mode
[   54.884511][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.887463][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.889861][ T5849] bridge_slave_1: entered allmulticast mode
[   54.892566][ T5849] bridge_slave_1: entered promiscuous mode
[   54.895265][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   54.936636][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.964989][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.969617][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.972633][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.975584][ T5853] bridge_slave_0: entered allmulticast mode
[   54.979289][ T5853] bridge_slave_0: entered promiscuous mode
[   55.008004][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.011076][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.014057][ T5853] bridge_slave_1: entered allmulticast mode
[   55.018804][ T5853] bridge_slave_1: entered promiscuous mode
[   55.039650][ T5849] team0: Port device team_slave_0 added
[   55.042447][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.045015][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.047909][ T5857] bridge_slave_0: entered allmulticast mode
[   55.050887][ T5857] bridge_slave_0: entered promiscuous mode
[   55.069386][ T5849] team0: Port device team_slave_1 added
[   55.071699][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.074861][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.077889][ T5857] bridge_slave_1: entered allmulticast mode
[   55.080632][ T5857] bridge_slave_1: entered promiscuous mode
[   55.095226][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.115213][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.117715][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.126576][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.131872][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.149048][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.151397][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.161926][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.175171][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.194412][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.220487][ T5853] team0: Port device team_slave_0 added
[   55.245994][ T5849] hsr_slave_0: entered promiscuous mode
[   55.248994][ T5849] hsr_slave_1: entered promiscuous mode
[   55.252517][ T5853] team0: Port device team_slave_1 added
[   55.256114][ T5857] team0: Port device team_slave_0 added
[   55.268348][ T5857] team0: Port device team_slave_1 added
[   55.293310][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.295824][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.305353][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.338017][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.340774][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.350093][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.370236][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.372886][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.385250][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.391280][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.394190][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.405812][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.482120][ T5857] hsr_slave_0: entered promiscuous mode
[   55.484720][ T5857] hsr_slave_1: entered promiscuous mode
[   55.488011][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   55.490245][ T5857] Cannot create hsr debugfs directory
[   55.498117][ T5853] hsr_slave_0: entered promiscuous mode
[   55.500908][ T5853] hsr_slave_1: entered promiscuous mode
[   55.503060][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   55.504948][ T5853] Cannot create hsr debugfs directory
[   55.615056][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.633421][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.649044][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.662313][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.734889][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.739626][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.745484][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.751950][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.811329][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.818815][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.822963][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.833920][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.857791][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.880819][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   55.901287][  T395] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.903721][  T395] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.917861][  T395] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.920193][  T395] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.945854][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.962501][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.970204][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.977853][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   55.990210][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.992959][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.002140][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.004904][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.013528][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   56.025170][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.028052][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.050472][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.052934][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.066005][ T5857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.071670][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.201020][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.253230][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.275032][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.284364][ T5849] veth0_vlan: entered promiscuous mode
[   56.310375][ T5849] veth1_vlan: entered promiscuous mode
[   56.333713][ T5853] veth0_vlan: entered promiscuous mode
[   56.344302][ T5853] veth1_vlan: entered promiscuous mode
[   56.356764][ T5857] veth0_vlan: entered promiscuous mode
[   56.375826][ T5857] veth1_vlan: entered promiscuous mode
[   56.386543][ T5849] veth0_macvtap: entered promiscuous mode
[   56.396163][ T5849] veth1_macvtap: entered promiscuous mode
[   56.416109][ T5853] veth0_macvtap: entered promiscuous mode
[   56.436959][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.442482][ T5857] veth0_macvtap: entered promiscuous mode
[   56.451502][ T5853] veth1_macvtap: entered promiscuous mode
[   56.463770][ T5857] veth1_macvtap: entered promiscuous mode
[   56.470428][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.484307][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.494524][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.498925][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.508676][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.512277][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.516885][ T5854] Bluetooth: hci0: command tx timeout
[   56.516898][ T5240] Bluetooth: hci1: command tx timeout
[   56.526897][ T5240] Bluetooth: hci2: command tx timeout
[   56.528494][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.533310][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.545672][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.555406][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.560058][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.578776][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.595647][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.613353][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.634246][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.652462][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.661382][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.664331][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.674832][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.723763][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.731163][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.754240][ T4610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.760841][ T4610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.794027][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.811361][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.814602][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.840124][  T395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.852095][  T395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.872603][ T5915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.881662][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.885366][ T5915] Zero length message leads to an empty skb
[   56.889067][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.918172][ T5915] syzkaller1: entered promiscuous mode
[   56.920684][ T5915] syzkaller1: entered allmulticast mode
[   56.928489][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.950085][ T5919] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   56.965039][ T5919] Bluetooth: MGMT ver 1.23
[   56.984610][ T5919] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   57.179341][ T5930] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   57.182602][ T5930] netlink: 'syz.2.7': attribute type 4 has an invalid length.
[   57.185746][ T5930] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.196831][ T5930] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   57.199926][ T5930] netlink: 'syz.2.7': attribute type 4 has an invalid length.
[   57.203046][ T5930] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.222478][ T5932] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8
[   57.260122][ T5932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.294043][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   57.918394][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22'.
[   57.923179][ T5979] netlink: 52 bytes leftover after parsing attributes in process `syz.1.22'.
[   57.929375][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.932468][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.029738][ T5988] netlink: 116 bytes leftover after parsing attributes in process `syz.2.25'.
[   58.093971][ T5932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.234429][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'.
[   58.463551][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.500387][ T6041] netlink: 'syz.1.37': attribute type 29 has an invalid length.
[   58.503420][ T6041] netlink: 'syz.1.37': attribute type 29 has an invalid length.
[   58.507916][ T6041] netlink: 500 bytes leftover after parsing attributes in process `syz.1.37'.
[   58.552627][ T6041] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   58.555142][ T6041] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   58.598771][ T5240] Bluetooth: hci0: command tx timeout
[   58.598878][ T5854] Bluetooth: hci2: command tx timeout
[   58.600805][   T54] Bluetooth: hci1: command tx timeout
[   58.639984][ T6049] netlink: 'syz.1.39': attribute type 11 has an invalid length.
[   59.095498][ T6076] syzkaller1: entered promiscuous mode
[   59.099342][ T6076] syzkaller1: entered allmulticast mode
[   59.147550][ T5932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.509942][ T6085] batadv1: entered promiscuous mode
[   59.511932][ T6085] batadv1: entered allmulticast mode
[   59.697900][ T5932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.753143][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.763455][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.778464][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.794591][ T5878] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.938561][ T6126] tipc: Started in network mode
[   59.943775][ T6126] tipc: Node identity d2a1a1691ae9, cluster identity 4711
[   59.948433][ T6126] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.958019][ T6126] syzkaller0: entered promiscuous mode
[   59.961797][ T6126] syzkaller0: entered allmulticast mode
[   59.985052][ T6126] tipc: Resetting bearer <eth:syzkaller0>
[   59.993309][ T6125] tipc: Resetting bearer <eth:syzkaller0>
[   60.000471][ T6125] tipc: Disabling bearer <eth:syzkaller0>
[   60.330906][ T6170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.339937][ T6169] tipc: Disabling bearer <eth:syzkaller0>
[   60.684888][ T5240] Bluetooth: hci2: command tx timeout
[   60.687893][ T5240] Bluetooth: hci0: command tx timeout
[   60.690277][ T5240] Bluetooth: hci1: command tx timeout
[   61.312823][ T6272] batadv_slave_1: entered promiscuous mode
[   61.321161][ T6271] batadv_slave_1: left promiscuous mode
[   61.382570][ T6279] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.420269][ T6284] warning: `syz.1.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.587606][ T6304] netlink: 'syz.1.106': attribute type 2 has an invalid length.
[   61.598908][ T6304] k*]: entered promiscuous mode
[   61.614166][ T6312] netlink: 'syz.0.109': attribute type 1 has an invalid length.
[   61.617505][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.620226][ T6304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.623157][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.625745][ T6304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.643754][ T6304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.649851][    C0] Illegal XDP return value 16128 on prog  (id 51) dev bridge0, expect packet loss!
[   61.662830][ T6304] veth0_to_team: entered promiscuous mode
[   61.665709][ T6304] veth0_to_team: entered allmulticast mode
[   61.999015][ T6342] netlink: 'syz.2.119': attribute type 15 has an invalid length.
[   62.001795][ T6342] __nla_validate_parse: 13 callbacks suppressed
[   62.001805][ T6342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'.
[   62.085686][ T6353] openvswitch: netlink: Missing valid actions attribute.
[   62.090176][ T6353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.326823][ T6369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.368763][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'.
[   62.374828][   T56] block nbd0: Receive control failed (result -107)
[   62.416467][ T6371] nbd0: detected capacity change from 0 to 32
[   62.423455][ T5850] block nbd0: Dead connection, failed to find a fallback
[   62.432997][ T5850] block nbd0: shutting down sockets
[   62.434969][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.440148][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.442991][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.445894][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.448754][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.451729][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.454462][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.464511][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.471220][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.480508][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.483112][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.486678][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.489542][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.493574][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.497672][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.501650][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.505128][ T5850] ldm_validate_partition_table(): Disk read failed.
[   62.505210][ T6381] veth0: entered promiscuous mode
[   62.508577][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.513749][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.518339][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   62.520884][ T6380] veth0: left promiscuous mode
[   62.522306][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.529088][ T5850] Dev nbd0: unable to read RDB block 0
[   62.535655][ T5850]  nbd0: unable to read partition table
[   62.557301][ T5850] ldm_validate_partition_table(): Disk read failed.
[   62.560508][ T5850] Dev nbd0: unable to read RDB block 0
[   62.563276][ T5850]  nbd0: unable to read partition table
[   62.675521][ T6395] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[   62.682428][ T6395] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[   62.766658][   T54] Bluetooth: hci1: command tx timeout
[   62.768673][   T54] Bluetooth: hci0: command tx timeout
[   62.770654][   T54] Bluetooth: hci2: command tx timeout
[   62.775313][ T6383] sctp: [Deprecated]: syz.1.132 (pid 6383) Use of int in max_burst socket option deprecated.
[   62.775313][ T6383] Use struct sctp_assoc_value instead
[   62.858161][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'.
[   63.609025][ T6488] netlink: 68 bytes leftover after parsing attributes in process `syz.1.161'.
[   63.612524][ T6488] netlink: 'syz.1.161': attribute type 10 has an invalid length.
[   63.627303][ T6488] team0: Port device dummy0 added
[   63.630080][ T6488] netlink: 'syz.1.161': attribute type 10 has an invalid length.
[   63.633502][ T6488] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   63.643204][ T6488] team0: Failed to send options change via netlink (err -105)
[   63.645972][ T6488] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   63.653393][ T6488] team0: Port device dummy0 removed
[   63.665717][ T6488] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   63.710361][ T6488] syz.1.161 (6488) used greatest stack depth: 19384 bytes left
[   63.751293][ T6496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.751841][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'.
[   63.755658][ T6496] netlink: 'syz.0.164': attribute type 1 has an invalid length.
[   63.758862][ T6500] netlink: 136 bytes leftover after parsing attributes in process `syz.2.166'.
[   63.770217][ T6496] netlink: 184 bytes leftover after parsing attributes in process `syz.0.164'.
[   63.774532][ T6496] netlink: 'syz.0.164': attribute type 1 has an invalid length.
[   63.853486][ T6511] netlink: 11382 bytes leftover after parsing attributes in process `syz.1.169'.
[   63.875437][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[   63.882522][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[   64.384200][ T6570] netlink: 'syz.0.188': attribute type 2 has an invalid length.
[   64.591190][ T6601] xt_time: invalid argument - start or stop time greater than 23:59:59
[   64.679700][ T6610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.815725][ T6618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.819443][ T6618] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.823140][ T6618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.825669][ T6618] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.913251][ T6626] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   65.044495][ T6632] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.051940][ T6632] bond0: (slave bond1): Enslaving as an active interface with an up link
[   65.098909][ T6639] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.170420][ T6639] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.220318][ T6639] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.281334][ T6639] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.361331][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.369361][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.379628][ T5878] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.398989][ T5878] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.404391][ T6651] netlink: 'syz.2.212': attribute type 8 has an invalid length.
[   66.010074][ T6673] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   67.145771][ T6723] __nla_validate_parse: 12 callbacks suppressed
[   67.149711][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.233'.
[   67.780979][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'.
[   67.791224][ T6779] bridge1: entered allmulticast mode
[   67.797623][ T6779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.248'.
[   67.929156][ T6795] netlink: 'syz.1.253': attribute type 11 has an invalid length.
[   67.932272][ T6795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.253'.
[   67.957802][ T5854] Bluetooth: hci2: command tx timeout
[   68.025088][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'.
[   68.309848][   T33] audit: type=1800 audit(1757307199.887:2): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.263" name="blkio.bfq.time_recursive" dev="tmpfs" ino=493 res=0 errno=0
[   68.434983][ T6837] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   68.872592][ T6861] netlink: 104 bytes leftover after parsing attributes in process `syz.2.273'.
[   69.003299][ T6878] netlink: 76 bytes leftover after parsing attributes in process `syz.0.278'.
[   69.008961][ T6878] netlink: 76 bytes leftover after parsing attributes in process `syz.0.278'.
[   69.190115][ T6899] netlink: 'syz.0.286': attribute type 1 has an invalid length.
[   69.198198][ T6899] netlink: 'syz.0.286': attribute type 1 has an invalid length.
[   69.201534][ T6898] netlink: 'syz.0.286': attribute type 1 has an invalid length.
[   69.205525][ T6898] netlink: 'syz.0.286': attribute type 1 has an invalid length.
[   69.212952][ T6901] syzkaller0: entered promiscuous mode
[   69.214930][ T6901] syzkaller0: entered allmulticast mode
[   69.220477][ T6901] tipc: Started in network mode
[   69.222401][ T6901] tipc: Node identity aa32a43385e7, cluster identity 4711
[   69.225600][ T6901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.231004][ T6900] tipc: Resetting bearer <eth:syzkaller0>
[   69.246055][ T6900] tipc: Disabling bearer <eth:syzkaller0>
[   69.586387][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'.
[   69.591128][ T6924] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   69.952033][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.296'.
[   69.999730][ T6942] netlink: 'syz.2.298': attribute type 7 has an invalid length.
[   70.002633][ T6942] netlink: 'syz.2.298': attribute type 8 has an invalid length.
[   70.651958][ T6979] netlink: 'syz.0.309': attribute type 10 has an invalid length.
[   70.655744][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.659843][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.673275][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.675864][ T6979] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.679730][ T6979] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.683273][ T6979] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.691723][ T6979] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   70.695822][ T6979] bridge_slave_1: left allmulticast mode
[   70.699010][ T6979] bridge_slave_1: left promiscuous mode
[   70.700986][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.704923][ T6979] bridge_slave_0: left allmulticast mode
[   70.706913][ T6979] bridge_slave_0: left promiscuous mode
[   70.709321][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.729219][ T6979] bond0: (slave bridge0): Releasing backup interface
[   70.846902][ T6936] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   71.004324][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.166624][ T7023] netlink: 'syz.1.325': attribute type 7 has an invalid length.
[   71.258304][ T7034] batman_adv: batadv0: Adding interface: ipvlan2
[   71.260755][ T7034] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.270900][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.274604][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.278337][ T7034] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   71.309794][ T7042] netlink: 'syz.1.334': attribute type 2 has an invalid length.
[   71.340094][ T7044] only policy match revision 0 supported
[   71.340106][ T7044] unable to load match
[   71.354905][ T7048] netlink: 'syz.1.337': attribute type 1 has an invalid length.
[   71.383400][ T7048] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   71.390128][ T7048] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   71.433132][ T7050] gretap1: entered promiscuous mode
[   71.438163][ T7050] bond2: (slave gretap1): making interface the new active one
[   71.442047][ T7050] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   71.577159][ T7064] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   71.615990][ T7069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.625417][ T7069] syzkaller0: entered promiscuous mode
[   71.628668][ T7069] syzkaller0: entered allmulticast mode
[   71.663790][ T7068] tipc: Resetting bearer <eth:syzkaller0>
[   71.677187][ T7068] tipc: Disabling bearer <eth:syzkaller0>
[   71.681019][ T7080] netlink: 'syz.0.346': attribute type 11 has an invalid length.
[   71.763209][ T7091] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   72.036722][ T5854] Bluetooth: hci0: command 0x0401 tx timeout
[   72.432953][ T7166] Bluetooth: MGMT ver 1.23
[   72.515060][ T7172] __nla_validate_parse: 10 callbacks suppressed
[   72.515072][ T7172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.379'.
[   72.530725][ T7172] netlink: 256 bytes leftover after parsing attributes in process `syz.0.379'.
[   72.534547][ T7172] netlink: 48 bytes leftover after parsing attributes in process `syz.0.379'.
[   72.539201][ T7172] netlink: 17 bytes leftover after parsing attributes in process `syz.0.379'.
[   72.542904][ T7172] netlink: 17 bytes leftover after parsing attributes in process `syz.0.379'.
[   72.566858][ T7172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.576884][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.377'.
[   72.812308][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'.
[   72.829211][ T7196] dvmrp0: entered allmulticast mode
[   73.121995][ T7218] dvmrp8: entered allmulticast mode
[   73.285848][ T7217] dvmrp8: left allmulticast mode
[   73.350751][ T7235] netlink: 44 bytes leftover after parsing attributes in process `syz.0.398'.
[   73.488096][ T7258] netlink: 119 bytes leftover after parsing attributes in process `syz.0.404'.
[   73.537708][ T7258] syzkaller0: entered promiscuous mode
[   73.539650][ T7258] syzkaller0: entered allmulticast mode
[   75.109364][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'.
[   75.834925][ T7339] validate_nla: 5 callbacks suppressed
[   75.834942][ T7339] netlink: 'syz.0.430': attribute type 1 has an invalid length.
[   75.856595][ T7339] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.389023][ T5899] IPVS: starting estimator thread 0...
[   76.476438][ T7395] IPVS: using max 83 ests per chain, 199200 per kthread
[   76.631062][ T7431] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20002
[   77.133934][ T7471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.137669][ T7471] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   77.144121][ T7471] tipc: Resetting bearer <eth:syzkaller0>
[   77.164245][ T7470] tipc: Disabling bearer <eth:syzkaller0>
[   77.222454][ T7477] dvmrp1: entered allmulticast mode
[   77.232977][ T7477] dvmrp1: left allmulticast mode
[   77.282874][ T7482] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   77.285489][ T7481] netlink: 'syz.1.471': attribute type 1 has an invalid length.
[   77.285826][ T7482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.375823][ T7493] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20003
[   77.415817][ T7497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.420404][ T7497] syzkaller0: entered promiscuous mode
[   77.422394][ T7497] syzkaller0: entered allmulticast mode
[   77.442746][ T7497] tipc: Resetting bearer <eth:syzkaller0>
[   77.452185][ T7497] tipc: Disabling bearer <eth:syzkaller0>
[   77.526175][ T7516] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[   77.628553][ T7528] __nla_validate_parse: 8 callbacks suppressed
[   77.628563][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'.
[   77.701004][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'.
[   77.704431][ T7539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.492'.
[   77.725839][ T7543] syz_tun: entered allmulticast mode
[   78.212758][ T7571] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   78.219400][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[   78.249020][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.500'.
[   78.280227][ T7575] syz_tun: entered allmulticast mode
[   78.287663][ T7576] dvmrp1: entered allmulticast mode
[   78.292711][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'.
[   78.292716][ T7576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'.
[   78.300850][ T7574] syz_tun: left allmulticast mode
[   78.888003][ T7590] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   78.938482][ T7592] netlink: 'syz.0.509': attribute type 11 has an invalid length.
[   78.979198][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880252af800: rx timeout, send abort
[   79.343384][ T7601] netlink: 'syz.2.512': attribute type 2 has an invalid length.
[   79.351980][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.512'.
[   79.483208][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880252af800: abort rx timeout. Force session deactivation
[   79.540040][ T7618] syzkaller0: entered promiscuous mode
[   79.542663][ T7618] syzkaller0: entered allmulticast mode
[   79.547353][ T7618] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[   79.550222][ T7618] netlink: 'syz.2.516': attribute type 3 has an invalid length.
[   79.552843][ T7618] netlink: 224 bytes leftover after parsing attributes in process `syz.2.516'.
[   80.734107][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'.
[   81.281584][  T793] cfg80211: failed to load regulatory.db
[   81.857147][ T5300] udevd[5300]: worker [7375] terminated by signal 33 (Unknown signal 33)
[   81.860852][ T5300] udevd[5300]: worker [7375] failed while handling '/devices/faux/regulatory'
[   81.905751][ T7749] tipc: Started in network mode
[   81.910598][ T7749] tipc: Node identity ee03ae45bb48, cluster identity 4711
[   81.913101][ T7749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.917309][ T7750] tipc: Resetting bearer <eth:syzkaller0>
[   81.928482][ T7748] tipc: Disabling bearer <eth:syzkaller0>
[   81.935539][ T7753] netlink: 'syz.1.559': attribute type 83 has an invalid length.
[   81.968042][ T7760] IPv6: sit1: Disabled Multicast RS
[   82.010746][ T7766] netlink: 'syz.1.563': attribute type 6 has an invalid length.
[   82.054532][ T7757] tipc: Enabled bearer <udp:syz2>, priority 10
[   82.068621][ T7768] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   82.075468][ T7766] netlink: 'syz.1.563': attribute type 12 has an invalid length.
[   82.483864][ T7833] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.491684][ T7833] batadv_slave_0: entered promiscuous mode
[   82.496078][ T7833] netlink: 'syz.1.584': attribute type 3 has an invalid length.
[   82.670963][ T7861] netlink: 'syz.2.594': attribute type 10 has an invalid length.
[   82.679566][ T7861] 8021q: adding VLAN 0 to HW filter on device team0
[   82.685422][ T7861] bond0: (slave team0): Enslaving as an active interface with an up link
[   82.711224][ T7864] sctp: [Deprecated]: syz.0.595 (pid 7864) Use of int in max_burst socket option.
[   82.711224][ T7864] Use struct sctp_assoc_value instead
[   82.843275][ T7884] tc_dump_action: action bad kind
[   82.857818][ T7883] __nla_validate_parse: 11 callbacks suppressed
[   82.857827][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'.
[   82.900982][ T7890] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.088426][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'.
[   83.095328][ T7910] geneve2: entered promiscuous mode
[   83.098037][ T7910] geneve2: entered allmulticast mode
[   83.167012][  T792] tipc: Node number set to 802530355
[   83.542385][ T7950] netlink: 27 bytes leftover after parsing attributes in process `syz.0.620'.
[   83.588420][ T7953] netlink: 'syz.0.621': attribute type 9 has an invalid length.
[   83.620576][   T24] IPVS: starting estimator thread 0...
[   83.624281][ T7956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.629362][ T7955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.669649][ T7959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.623'.
[   83.673286][ T7959] netlink: 'syz.0.623': attribute type 7 has an invalid length.
[   83.675914][ T7959] netlink: 'syz.0.623': attribute type 8 has an invalid length.
[   83.679275][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'.
[   83.706377][ T7957] IPVS: using max 82 ests per chain, 196800 per kthread
[   83.742827][ T7962] syz.1.624 uses old SIOCAX25GETINFO
[   83.759500][ T7964] netlink: 'syz.0.625': attribute type 11 has an invalid length.
[   83.765541][ T7964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.625'.
[   83.801958][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'.
[   83.868053][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'.
[   83.906193][ T7974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.629'.
[   83.950616][ T7978] netlink: 172 bytes leftover after parsing attributes in process `syz.1.631'.
[   84.634785][ T8022] netlink: 'syz.0.642': attribute type 10 has an invalid length.
[   84.645283][ T8022] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   85.536498][ T8067] block nbd2: server does not support multiple connections per device.
[   85.542742][ T8067] block nbd2: shutting down sockets
[   85.552988][ T8074] IPv6: sit1: Disabled Multicast RS
[   85.555329][ T8074] sit1: entered allmulticast mode
[   85.560580][   T55] block nbd1: Receive control failed (result -32)
[   86.320842][ T8133] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   86.601648][ T8147] openvswitch: netlink: Duplicate or invalid key (type 0).
[   86.604981][ T8147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.332403][ T8185] validate_nla: 8 callbacks suppressed
[   87.332417][ T8185] netlink: 'syz.2.689': attribute type 7 has an invalid length.
[   87.915514][ T8191] netlink: 'syz.1.691': attribute type 58 has an invalid length.
[   87.918468][ T8191] __nla_validate_parse: 24 callbacks suppressed
[   87.918474][ T8191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'.
[   88.255281][ T8210] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   89.258718][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'.
[   89.390271][ T8244] tipc: Enabled bearer <udp:syz2>, priority 10
[   89.395052][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'.
[   89.404045][ T8251] trusted_key: syz.1.709 sent an empty control message without MSG_MORE.
[   89.411897][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'.
[   89.880314][ T8300] netlink: 'syz.1.722': attribute type 24 has an invalid length.
[   89.882878][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'.
[   89.886853][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.725'.
[   89.897773][ T8301] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.721'.
[   89.901548][ T8300] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   89.905516][ T8300] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   90.094687][ T8317] netlink: 'syz.0.731': attribute type 1 has an invalid length.
[   90.097874][ T8317] netlink: 'syz.0.731': attribute type 2 has an invalid length.
[   90.102189][ T8317] netlink: 'syz.0.731': attribute type 1 has an invalid length.
[   90.105247][ T8317] netlink: 'syz.0.731': attribute type 2 has an invalid length.
[   90.190695][ T8322] IPVS: set_ctl: invalid protocol: 133 172.20.20.55:277
[   90.193763][ T8322] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:19999
[   90.220681][ T8319] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   90.283356][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'.
[   90.391027][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'.
[   90.506370][  T793] tipc: Node number set to 1431023173
[   90.577788][ T5878] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.581310][ T5878] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.584643][ T5878] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.588656][ T5878] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.650027][ T8366] can: request_module (can-proto-4) failed.
[   90.762481][ T8385] netlink: 'syz.2.748': attribute type 2 has an invalid length.
[   90.848438][ T8396] netlink: 'syz.1.756': attribute type 4 has an invalid length.
[   90.988879][ T8403] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.992455][ T8403] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   91.135862][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'.
[   91.262535][ T8442] netlink: 'syz.2.770': attribute type 21 has an invalid length.
[   92.044458][ T8479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.270759][ T8497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   92.275270][ T8501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   93.339844][ T8584] __nla_validate_parse: 4 callbacks suppressed
[   93.339854][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'.
[   93.414994][ T8596] netlink: 256 bytes leftover after parsing attributes in process `syz.0.820'.
[   93.419768][ T8596] unsupported nlmsg_type 40
[   93.445335][ T8584] netlink: 368 bytes leftover after parsing attributes in process `syz.2.816'.
[   93.463787][ T8599] validate_nla: 4 callbacks suppressed
[   93.463796][ T8599] netlink: 'syz.0.821': attribute type 2 has an invalid length.
[   93.468181][ T8599] netlink: 119 bytes leftover after parsing attributes in process `syz.0.821'.
[   93.479467][ T8599] netlink: 'syz.0.821': attribute type 1 has an invalid length.
[   93.636348][ T8610] netlink: 240 bytes leftover after parsing attributes in process `syz.1.825'.
[   93.639486][ T8610] netlink: 48 bytes leftover after parsing attributes in process `syz.1.825'.
[   93.808281][ T8632] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.847330][ T8636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.833'.
[   93.857022][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'.
[   94.529687][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.100209][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.854'.
[   95.327701][ T8737] netlink: 92 bytes leftover after parsing attributes in process `syz.2.862'.
[   95.332905][ T8739] @0: renamed from bond_slave_1
[   96.594940][ T8810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.601157][ T8810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.294147][ T8842] netlink: 'syz.2.890': attribute type 1 has an invalid length.
[   97.297093][ T8842] netlink: 'syz.2.890': attribute type 11 has an invalid length.
[   97.343018][ T8845] dvmrp8: entered allmulticast mode
[   97.535795][ T8819] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   98.397814][ T8937] __nla_validate_parse: 4 callbacks suppressed
[   98.397826][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'.
[   98.404652][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'.
[   98.462093][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'.
[   98.517262][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.925'.
[   98.521826][ T8950] netlink: 'syz.0.926': attribute type 4 has an invalid length.
[   98.530758][ T8950] netlink: 'syz.0.926': attribute type 4 has an invalid length.
[   98.537678][ T8948] nbd: socks must be embedded in a SOCK_ITEM attr
[   98.542552][ T8511] block nbd64: NBD_DISCONNECT
[   98.769552][ T5854] Bluetooth: hci0: command 0x0401 tx timeout
[   99.014640][ T8981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.932'.
[   99.139156][ T8986] vlan2: entered promiscuous mode
[   99.141232][ T8986] dummy0: entered promiscuous mode
[   99.147278][ T8986] netlink: 68 bytes leftover after parsing attributes in process `syz.1.933'.
[   99.150387][ T8986] netlink: 68 bytes leftover after parsing attributes in process `syz.1.933'.
[   99.560385][ T9016] netlink: 'syz.2.942': attribute type 1 has an invalid length.
[   99.588795][ T9016] bond1 (unregistering): Released all slaves
[   99.744767][ T9039] dvmrp8: entered allmulticast mode
[   99.765984][ T9039] dvmrp8: left allmulticast mode
[   99.897511][ T9038] delete_channel: no stack
[   99.963219][ T9050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.953'.
[   99.970099][ T9050] netlink: 154876 bytes leftover after parsing attributes in process `syz.0.953'.
[  100.010572][ T9052] netlink: 'syz.0.954': attribute type 10 has an invalid length.
[  100.015342][ T9052] 8021q: adding VLAN 0 to HW filter on device team0
[  100.024204][ T9052] bond0: (slave team0): Enslaving as an active interface with an up link
[  100.097661][ T9060] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  100.318636][ T9078] syzkaller0: entered promiscuous mode
[  100.323117][ T9078] syzkaller0: entered allmulticast mode
[  100.428714][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'.
[  100.434640][ T9097] netlink: 'syz.0.967': attribute type 1 has an invalid length.
[  100.439315][ T9097] netlink: 'syz.0.967': attribute type 2 has an invalid length.
[  100.493748][ T9106] nft_compat: unsupported protocol 0
[  100.611427][ T9129] netlink: 'syz.1.973': attribute type 1 has an invalid length.
[  100.695728][ T9138] netlink: 'syz.1.974': attribute type 1 has an invalid length.
[  100.851045][ T9155] netlink: 'syz.2.976': attribute type 1 has an invalid length.
[  101.221351][ T9194] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.485783][ T9214] netlink: 'syz.2.991': attribute type 13 has an invalid length.
[  102.056106][ T9237] openvswitch: netlink: Flow actions attr not present in new flow.
[  102.300185][ T9266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.304677][ T9266] syzkaller0: entered promiscuous mode
[  102.314514][ T9266] syzkaller0: entered allmulticast mode
[  102.333539][ T9266] tipc: Resetting bearer <eth:syzkaller0>
[  102.346837][ T9266] tipc: Resetting bearer <eth:syzkaller0>
[  102.355783][ T9266] tipc: Disabling bearer <eth:syzkaller0>
[  102.941264][ T9307] openvswitch: netlink: Flow actions attr not present in new flow.
[  102.949840][ T9307] tipc: Failed to remove unknown binding: 66,1,1/802530355:1201425272/1201425274
[  103.309748][ T3051] 
[  103.310756][ T3051] ============================================
[  103.313095][ T3051] WARNING: possible recursive locking detected
[  103.315452][ T3051] syzkaller #0 Not tainted
[  103.317824][ T3051] --------------------------------------------
[  103.320217][ T3051] kworker/u10:4/3051 is trying to acquire lock:
[  103.322682][ T3051] ffffe8ffffa07038 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80
[  103.326434][ T3051] 
[  103.326434][ T3051] but task is already holding lock:
[  103.329483][ T3051] ffffe8ffffa07088 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  103.333152][ T3051] 
[  103.333152][ T3051] other info that might help us debug this:
[  103.335778][ T3051]  Possible unsafe locking scenario:
[  103.335778][ T3051] 
[  103.338507][ T3051]        CPU0
[  103.339714][ T3051]        ----
[  103.341052][ T3051]   lock(&pd_list->lock);
[  103.342732][ T3051]   lock(&pd_list->lock);
[  103.344393][ T3051] 
[  103.344393][ T3051]  *** DEADLOCK ***
[  103.344393][ T3051] 
[  103.347160][ T3051]  May be due to missing lock nesting notation
[  103.347160][ T3051] 
[  103.349950][ T3051] 3 locks held by kworker/u10:4/3051:
[  103.351892][ T3051]  #0: ffff888105e15148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  103.355687][ T3051]  #1: ffffc90020867bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  103.359968][ T3051]  #2: ffffe8ffffa07088 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  103.362997][ T3051] 
[  103.362997][ T3051] stack backtrace:
[  103.364805][ T3051] CPU: 1 UID: 0 PID: 3051 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  103.364815][ T3051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.364821][ T3051] Workqueue: pencrypt_parallel padata_parallel_worker
[  103.364832][ T3051] Call Trace:
[  103.364837][ T3051]  <TASK>
[  103.364841][ T3051]  dump_stack_lvl+0x189/0x250
[  103.364852][ T3051]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.364887][ T3051]  ? __pfx__printk+0x10/0x10
[  103.364897][ T3051]  ? print_lock_name+0xde/0x100
[  103.364905][ T3051]  print_deadlock_bug+0x28b/0x2a0
[  103.364914][ T3051]  validate_chain+0x1a3f/0x2140
[  103.364923][ T3051]  ? __queue_work+0x102/0xfb0
[  103.364930][ T3051]  ? look_up_lock_class+0x74/0x170
[  103.364942][ T3051]  ? register_lock_class+0x51/0x320
[  103.364950][ T3051]  ? __queue_work+0xc56/0xfb0
[  103.364957][ T3051]  __lock_acquire+0xab9/0xd20
[  103.364967][ T3051]  ? padata_do_serial+0x73e/0xb80
[  103.364975][ T3051]  lock_acquire+0x120/0x360
[  103.364984][ T3051]  ? padata_do_serial+0x73e/0xb80
[  103.364993][ T3051]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  103.365001][ T3051]  _raw_spin_lock+0x2e/0x40
[  103.365012][ T3051]  ? padata_do_serial+0x73e/0xb80
[  103.365019][ T3051]  padata_do_serial+0x73e/0xb80
[  103.365029][ T3051]  ? padata_parallel_worker+0x44/0x1d0
[  103.365037][ T3051]  padata_parallel_worker+0x75/0x1d0
[  103.365045][ T3051]  ? process_scheduled_works+0x9ef/0x17b0
[  103.365052][ T3051]  process_scheduled_works+0xae1/0x17b0
[  103.365062][ T3051]  ? __pfx_process_scheduled_works+0x10/0x10
[  103.365070][ T3051]  worker_thread+0x8a0/0xda0
[  103.365077][ T3051]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.365086][ T3051]  ? __kthread_parkme+0x7b/0x200
[  103.365094][ T3051]  kthread+0x711/0x8a0
[  103.365102][ T3051]  ? __pfx_worker_thread+0x10/0x10
[  103.365108][ T3051]  ? __pfx_kthread+0x10/0x10
[  103.365115][ T3051]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.365123][ T3051]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.365132][ T3051]  ? __pfx_kthread+0x10/0x10
[  103.365139][ T3051]  ret_from_fork+0x3fc/0x770
[  103.365147][ T3051]  ? __pfx_ret_from_fork+0x10/0x10
[  103.365154][ T3051]  ? __switch_to_asm+0x39/0x70
[  103.365162][ T3051]  ? __switch_to_asm+0x33/0x70
[  103.365169][ T3051]  ? __pfx_kthread+0x10/0x10
[  103.365177][ T3051]  ret_from_fork_asm+0x1a/0x30
[  103.365187][ T3051]  </TASK>
[  103.876347][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  104.916320][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  105.956353][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  106.996271][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  108.036382][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  109.076297][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  110.116384][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  111.156483][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  112.196316][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  113.236329][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available

VM DIAGNOSIS:
04:53:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000000 RCX=d296d41cc7e14e00 RDX=0000000000000000
RSI=ffffffff8be33860 RDI=ffffffff8be33820 RBP=ffffc900030cf030 RSP=ffffc900030cef80
R8 =ffffffff8fa39037 R9 =1ffffffff1f47206 R10=dffffc0000000000 R11=fffffbfff1f47207
R12=dffffc0000000000 R13=ffff888121b9f000 R14=ffffffff99d37790 R15=1ffff92000619df4
RIP=ffffffff81c75704 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f395e06c6c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2feaeb CR3=0000000028d12000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6a34b97498 00007f6a34b97470 XMM03=00007f6a34b974a8 00007f6a34b974a0
XMM04=00007f6a356fd100 00007f6a34b97460 XMM05=00007f6a34b97478 00007f6a34b974c0
XMM06=00007f6a34b974b8 00007f6a34b974b0 XMM07=00007f6a34b974a8 00007f6a34b974a0
XMM08=0000000000000000 00007f6a34a12ee7 XMM09=0000000000000000 00007f6a34a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900208670d0
R8 =ffff888020f70237 R9 =1ffff110041ee046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8c8 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c24c35d CR3=000000010ebf6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f281e597498 00007f281e597470 XMM03=00007f281e5974a8 00007f281e5974a0
XMM04=00007f281f0fd100 00007f281e597460 XMM05=00007f281e597478 00007f281e5974c0
XMM06=00007f281e5974b8 00007f281e5974b0 XMM07=00007f281e5974a8 00007f281e5974a0
XMM08=0000000000000000 00007f281e412ee7 XMM09=0000000000000000 00007f281e412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
