last executing test programs:

17.945795768s ago: executing program 2 (id=1916):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@mesh_chsw={0x76, 0x6, {0x7, 0x2, 0x3, 0x8000}}, @challenge={0x10, 0x1, 0xd0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1)
recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000005040)=""/154, 0x9a}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4101, 0x1005}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{&(0x7f0000000440)=@isdn, 0x80, 0x0}, 0x10}, {{&(0x7f0000000a40)=@rc={0x1f, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000340)=""/48, 0x30}, 0x4}], 0x6, 0x12002, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000840)={0x124, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40004}, 0x20000090)

17.846002577s ago: executing program 2 (id=1917):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async)
sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) (async)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="70ca501052a48b8dc7eed08fd7c1010028bd7000000000001400000018000180140002006970"], 0x2c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="70ca501052a48b8dc7eed08fd7c1010028bd7000000000001400000018000180140002006970"], 0x2c}}, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}})
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0xe4}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8) (async)
close(r8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180))
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
close(r6)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@getlink={0x28, 0x12, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5)
syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r10) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r10)

17.576261282s ago: executing program 2 (id=1918):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x61000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@delchain={0x34, 0x65, 0xa02, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xd, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x4000)

17.484708961s ago: executing program 2 (id=1919):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}}, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x800)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0)

17.406443908s ago: executing program 2 (id=1920):
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)
close(0x3)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000480)=""/86, 0x56}], 0x5, &(0x7f0000000580)=""/166, 0xa6}, 0x10001)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0)
listen(r8, 0x217)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r11, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)

17.326611187s ago: executing program 2 (id=1921):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feff90390000100002800c00168008000f0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
write$nci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4) (async)
write$nci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000940)={0x2, 0x5, ['\x00', '\x00']})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

16.00564429s ago: executing program 0 (id=1929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r2)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x2c8d7237b02afa95, @local, 0x4e24, 0x3, 'lblc\x00', 0x8, 0x8, 0x70}, 0x2c)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x8)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendmsg$unix(r5, 0x0, 0x2400c084)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8)
sendmmsg$alg(r5, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081)
close(r5)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x2010, r2, 0xf7d90000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRES32=r6, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\a\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

16.005180012s ago: executing program 1 (id=1930):
syz_emit_ethernet(0x193, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa0086dd60cabf00015d3afffe8000000000000000000000000000bbff0200000000000000000000000000018500907800000000001015cc650e421591e481fb147a99a10a0edb794de17d219799f965ec5e5c0b86dbf3d72a6c2f87fac896f88b5bad8032226be0fe13c07f6e7f65ee319a0e68f60f8c2253aa4c1e2e3a402d03d9e4eb5c529658b3dfb3f06e4fd557045834497b69c4c2edd1ac0bc0be9890b76a11f9b5efc5ad9a865372af2cdc753ee3b1a516880954181100e2de1d9a3d31fee5cf1e53cc558bdba6dd238f30e65c1530bb5346a8f9cc3a13daccae744ca6dbc652d1899db9c590034bc7e11685638103d7a05d95e7fea8364da58d9d5f8a2dff3face0d5e91a30495f982775cdf1028f47ea2741297d5ed4fae112450fc6f3bb4accf27d26fa67616b6a9707ed377fb9dca7d632ff46bfcbc001ed01f430460e083a4da23550f80369043df3bde40ba2fc2aacacd061dfe25b03e290f29fc73713ceb66d0006e173d63d9ae31b707192e7df9e0d91b74ca73133f2be3374dbee340706fd2090"], 0x0)

15.936596551s ago: executing program 0 (id=1931):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000400))
socket$netlink(0x10, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x80}, 0x1, 0xba01}, 0x8044)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050061100c0000000000630134000000000095000900"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)

15.935056714s ago: executing program 1 (id=1932):
socket$netlink(0x10, 0x3, 0xc) (async, rerun: 32)
r0 = socket$phonet(0x23, 0x2, 0x1) (rerun: 32)
sendmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) (async)
sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0}) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r7=>0x0}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0}) (async, rerun: 64)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r12 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r12, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) (async)
r14 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r14, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r14, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @remote}, 0xffffffffffffffff}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r14, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) (async, rerun: 64)
r15 = socket(0xa, 0x3, 0x3a) (rerun: 64)
setsockopt$MRT6_FLUSH(r15, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0xd4, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xa0, 0x84, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x203}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x7fffffff}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0x7}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)={0x160, r9, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xe4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, "d6fb9670f80d901ca4c47ca76ab08fcf468255a09e5a21dbf8591458dbe88a0f995c198e93cdd6eef24f5073c0e0499a9ba591d08b4053443f8085028846bbbe6394519987079353"}, @NL80211_BAND_60GHZ={0x21, 0x2, "90aaddcaf6c0621c8d2d9af553c554aa7cd154c185a812ea60ac42360a"}, @NL80211_BAND_60GHZ={0x6d, 0x2, "c7e361404d0b932d2bba47e6c7dc39fb97080bc1a279f35dd50abe127239d6e1d774d402e3d610c1dfcf1e8c715cf30729575c1ea852d0cec900c9f561003e9ccc600da89436d42fa5be94bd53f0f8d855b505abc51a5c6d39fa0e80e3b3c0ef650a752ae9658e7cc6"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x38, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x0)

15.884828537s ago: executing program 0 (id=1933):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x83fadf774b6d9f3e}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x21, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x0, 0x0, 0x2, 0x4, 0xb, 0x10, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x2408, 0xda, &(0x7f0000000400)=""/218, 0x1e00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x3, 0x7, 0x9}], 0x10, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000680)=r2}, 0x20)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000700), &(0x7f0000000740)=0x4) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000001ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000000800)={0x126c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x26}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xff, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0x9c, 0xc5, "bc0d2754c56cb3c959351a99d87fafcc90779985e2d8d8b6f5f1e72f016235bf25f3db11d91e4a0bd826f52d1804094b53bcf8e726951191b300cb3c6888470dd639ffe3306627534e6671b9bbcadc0104757b5b5aefb98ece06a27819b0c4bd6f00073bad918b6a1a27d42c7dbc7e2d9b29b8d6f29ed4e496d61a5c23ae567518b07bfdb31d490bf5dae63a42fce9d947ea4c0ea5a06d68"}, @NL80211_ATTR_VENDOR_DATA={0x86, 0xc5, "2becda67f882249383568ce3989e949beb54b6da3cb5263b5fd9e589292a8605cd95cbe9335e36125f01f63b7f5467fb214852e5b358c6717b41cbb5eb5d3a842090be9052b9e1200e3ebd92451d25caa1b18a7c117d1a2fcad667b0246e12881fc28cf4e9a82643dbf907b89fa07125e6747542170546b284082c935a3b05f6ba24"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xe}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffff9ba}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x126c}, 0x1, 0x0, 0x0, 0x28000010}, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001b00)={0x1, 'sit0\x00', {}, 0x3af}) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x240c4051) (async)
r6 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$nl_route(r6, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)=@setneightbl={0x1c, 0x43, 0x400, 0x70bd2a, 0x25dfdbfd, {0x7}, [@NDTA_THRESH2={0x8, 0x3, 0x7fff}]}, 0x1c}}, 0x20) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x700}]}, 0x24}, 0x1, 0x0, 0x0, 0xb152d001fd940713}, 0x40) (async)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000001e80)={<r8=>r1, 0x7, 0xc, 0x5})
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003040)={&(0x7f0000002f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0xd, 0x62}]}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000002fc0)=""/116, 0x3c, 0x74, 0x0, 0x2, 0x10000}, 0x28) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000033c0)={0xffffffffffffffff, 0xe0, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000003100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000003140)=[0x0], &(0x7f0000003180)=[0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0x1c, &(0x7f00000031c0)=[{}], 0x8, 0x10, &(0x7f0000003200), &(0x7f0000003240), 0x8, 0x59, 0x8, 0x8, &(0x7f0000003280)}}, 0x10)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003400)={0x1b, 0x0, 0x0, 0x4, 0x0, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0x3, 0xe, &(0x7f0000001ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7ff}]}, &(0x7f0000001f40)='syzkaller\x00', 0x10000, 0x1000, &(0x7f0000001f80)=""/4096, 0x41100, 0x10, '\x00', 0x0, @sched_cls=0x37, r9, 0x8, &(0x7f0000003080)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000030c0)={0x2, 0xe, 0x3, 0x7db}, 0x10, r10, r2, 0x6, &(0x7f0000003480)=[r11, r3, r3, r7, r3, r3], &(0x7f00000034c0)=[{0x5, 0x5, 0x2, 0x2}, {0x2, 0x3, 0x2, 0x2}, {0x3, 0x2, 0x0, 0xa}, {0x4, 0x3, 0xf, 0x3}, {0x5, 0x3, 0xf, 0xb}, {0x4, 0x3, 0x5, 0x2}], 0x10, 0x1}, 0x94) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000003600)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x4e24, 0x8, 0x4e21, 0x800, 0xa, 0x0, 0x80, 0x3c}, {0x27, 0xfff, 0x6, 0x79, 0x1, 0x9, 0x10000, 0x3}, {0x2, 0x9, 0xe6, 0xfbbe}, 0x6, 0x6e6bbd, 0x0, 0x1, 0x3, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x3c}, 0xa, @in6=@mcast1, 0x34ff, 0x1, 0x2, 0x4, 0x5, 0x6, 0x4}}, 0xe8) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000003700), r12) (async)
getsockname$netrom(r8, &(0x7f0000003740)={{0x3, @default}, [@default, @bcast, @bcast, @bcast, @null, @netrom, @default, @bcast]}, &(0x7f00000037c0)=0x48) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000003800), &(0x7f0000003840)=0x4)
setsockopt$MRT6_PIM(r8, 0x29, 0xcf, &(0x7f0000003880)=0x2, 0x4) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000038c0), r1)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000003900)={'netpci0\x00', @random="7d98cff7a64e"}) (async)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000003b40)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003b00)={&(0x7f00000039c0)={0x12c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x850}, 0x44800)

15.816602587s ago: executing program 0 (id=1934):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000002030300000000000000000002000001fc000540bd0f22ce0800047163bc4000cf742f2676124ac4beddcb72c7ca"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) (async, rerun: 64)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) (async)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) (async)
r9 = getpid() (async, rerun: 32)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r10)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r11, 0x72b}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) (async)
sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async)
write$cgroup_pid(r4, &(0x7f00000006c0)=r9, 0x12)

15.816230109s ago: executing program 1 (id=1935):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r2=>r0, 0x4, 0x4eae5fcf, 0x6})
ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000080)={'veth0_to_team\x00', @local})

15.756861227s ago: executing program 1 (id=1936):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r2)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x2c8d7237b02afa95, @local, 0x4e24, 0x3, 'lblc\x00', 0x8, 0x8, 0x70}, 0x2c)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x8)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendmsg$unix(r5, 0x0, 0x2400c084)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8)
sendmmsg$alg(r5, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081)
close(r5)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC, @ANYRES32=r6, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x881)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="1802"], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

15.755653229s ago: executing program 0 (id=1937):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20f06200", @ANYRES16=r1, @ANYBLOB="810ffcffffff00000000010000000c009900a602000002000000"], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x40000)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYBLOB="daa998cea520708c4d23e784737856982ef3b912a8524cc1d0cce375d717cf9861b0f1e53ecfb2b2201d9099d2833eacdd01277a6ba71062ec4c5fc849797b98a4a992d5f1d01a3ffeb2b1674abc2ee7d36d14361ab845560ae56d6caadc4a295bbfce979003b1f0592de459af7191a626eaed5620c287289e112c070252c2dd9520576326c51973b3874823515af240cb0b8a475b5ac47d51cd6af0943bef4c5947f42bb43fe88147ad2dcae7b05d33c7b7712069d32ffb7e431fc366c347913db0df187c42f7efb56ce533567f30d617d800871a6800"/227, @ANYBLOB="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"], 0x50)
r3 = syz_init_net_socket$ax25(0x3, 0x7, 0x0)
ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f00000002c0)=0x1)
epoll_create1(0x80000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x21eae}}, 0x20}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.events\x00', 0x26e1, 0x0)
close(r8)
ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r10=>0xffffffffffffffff})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r13, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r11, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xdf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r14 = socket$unix(0x1, 0x2, 0x0)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r15, @ANYRES16=r15, @ANYRES32, @ANYRES64=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44891}, 0x24044884)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000a00000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94)

15.754974695s ago: executing program 1 (id=1938):
syz_emit_ethernet(0x193, &(0x7f0000000740)=ANY=[], 0x0)

15.684637186s ago: executing program 1 (id=1939):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000007740)={0x0, 0x0, &(0x7f0000007700)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000840)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@can_delroute={0x29c, 0x19, 0x400, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_CRC8={0x11e, 0x6, {0x13, 0x39, 0x2b, 0xfa, 0x1, "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", 0x1, "72fccd3b3276afe6f5a9dbe7f7447c92166490a0"}}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_CS_CRC8={0x11e, 0x6, {0x62, 0xc, 0x4c, 0x2, 0x6, "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", 0x1, "0e85332c6c89457a20de28307197646607fd6d87"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "cf876880e7b07e97"}, 0x7}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "9792266f72577b1d"}, 0x1}}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_MOD_UID={0x8}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000007000000612200001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008391725a548bd7c29532bb0ec41340d39ebd56e340adfdfb1280a4ed5bfbc94475efef8381f658470027de5eabcb7edfdaf918e0954e1412ebacb959aaec1769e18c5674717d7d7de1a210b0f2d430efd7f419faa3a355ced6e8b1d6a6b6af14bb581b3b1fced471cff1708364e70747272aba574276ea80b7604fa6ac356c5057deb35d3035cee0564deb79949b21f13fee07263aab929f98d17f87dd56b5e59a87d28be7170f4473908dec47a9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)={0x88, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x15}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffff4b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socket(0x11, 0x800000003, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50)

15.671583702s ago: executing program 0 (id=1940):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) (rerun: 32)

2.045503929s ago: executing program 32 (id=1921):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feff90390000100002800c00168008000f0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
write$nci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4) (async)
write$nci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000940)={0x2, 0x5, ['\x00', '\x00']})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

26.47075ms ago: executing program 33 (id=1940):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) (rerun: 32)

0s ago: executing program 34 (id=1939):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000007740)={0x0, 0x0, &(0x7f0000007700)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000840)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@can_delroute={0x29c, 0x19, 0x400, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_CRC8={0x11e, 0x6, {0x13, 0x39, 0x2b, 0xfa, 0x1, "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", 0x1, "72fccd3b3276afe6f5a9dbe7f7447c92166490a0"}}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_CS_CRC8={0x11e, 0x6, {0x62, 0xc, 0x4c, 0x2, 0x6, "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", 0x1, "0e85332c6c89457a20de28307197646607fd6d87"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "cf876880e7b07e97"}, 0x7}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "9792266f72577b1d"}, 0x1}}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_MOD_UID={0x8}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000007000000612200001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008391725a548bd7c29532bb0ec41340d39ebd56e340adfdfb1280a4ed5bfbc94475efef8381f658470027de5eabcb7edfdaf918e0954e1412ebacb959aaec1769e18c5674717d7d7de1a210b0f2d430efd7f419faa3a355ced6e8b1d6a6b6af14bb581b3b1fced471cff1708364e70747272aba574276ea80b7604fa6ac356c5057deb35d3035cee0564deb79949b21f13fee07263aab929f98d17f87dd56b5e59a87d28be7170f4473908dec47a9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)={0x88, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x15}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffff4b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socket(0x11, 0x800000003, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50)

kernel console output (not intermixed with test programs):

tlink: 12 bytes leftover after parsing attributes in process `syz.0.469'.
[  123.137189][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'.
[  123.168576][ T2277] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  123.185741][ T8456] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  123.192482][ T8456] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  123.579134][ T8475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.737996][ T8492] syzkaller0: entered promiscuous mode
[  123.739929][ T8492] syzkaller0: entered allmulticast mode
[  124.453279][ T8508] netlink: 'syz.2.480': attribute type 10 has an invalid length.
[  124.618279][ T8516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.682046][ T8514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.068294][ T8534] netlink: 'syz.1.484': attribute type 12 has an invalid length.
[  125.194143][ T8537] syzkaller1: entered promiscuous mode
[  125.196003][ T8537] syzkaller1: entered allmulticast mode
[  125.841075][ T8561] netlink: 'syz.2.491': attribute type 10 has an invalid length.
[  125.927323][ T8572] syzkaller1: entered promiscuous mode
[  125.929398][ T8572] syzkaller1: entered allmulticast mode
[  125.975638][ T1089] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  126.335265][ T8594] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  126.338646][ T8594] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  126.539119][ T8594] __nla_validate_parse: 6 callbacks suppressed
[  126.539134][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'.
[  126.780842][ T8620] tipc: Can't bind to reserved service type 1
[  126.785762][ T8620] netlink: 'syz.1.504': attribute type 39 has an invalid length.
[  126.836251][ T8622] netlink: 44 bytes leftover after parsing attributes in process `syz.1.504'.
[  126.840504][ T8622] netlink: 43 bytes leftover after parsing attributes in process `syz.1.504'.
[  126.843619][ T8622] netlink: 'syz.1.504': attribute type 5 has an invalid length.
[  126.846359][ T8622] netlink: 43 bytes leftover after parsing attributes in process `syz.1.504'.
[  127.291982][ T8635] openvswitch: netlink: Message has 16 unknown bytes.
[  127.327847][ T8635] syzkaller1: entered promiscuous mode
[  127.330112][ T8635] syzkaller1: entered allmulticast mode
[  127.414791][ T8650] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.509'.
[  127.445781][ T8650] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  127.460992][ T8650] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  127.464775][ T8650] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.509'.
[  127.483344][ T8657] netlink: 200 bytes leftover after parsing attributes in process `syz.2.510'.
[  127.491286][ T8650] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  127.494755][ T8650] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  127.560753][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'.
[  127.714396][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'.
[  127.761325][ T8684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.166385][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'.
[  128.406321][ T8731] netlink: 'syz.1.521': attribute type 13 has an invalid length.
[  128.411516][ T8731] netlink: 'syz.1.521': attribute type 17 has an invalid length.
[  128.492690][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.497929][ T8731] 8021q: adding VLAN 0 to HW filter on device team0
[  128.503882][ T8731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.187980][ T8780] tipc: Invalid UDP bearer configuration
[  129.188034][ T8780] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  129.371852][ T8788] netlink: 'syz.0.531': attribute type 10 has an invalid length.
[  129.389879][ T8793] IPVS: Scheduler module ip_vs_sip not found
[  129.415165][ T8797] IPVS: Scheduler module ip_vs_sip not found
[  129.741736][ T8830] pimreg: entered allmulticast mode
[  129.753021][ T8830] pimreg: left allmulticast mode
[  130.133223][ T8854] pim6reg1: entered promiscuous mode
[  130.136642][ T8854] pim6reg1: entered allmulticast mode
[  130.143652][ T8854] netlink: 'syz.1.544': attribute type 27 has an invalid length.
[  130.167864][ T8854] pim6reg1: left promiscuous mode
[  130.170242][ T8854] pim6reg1: left allmulticast mode
[  130.451097][ T2277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.454787][ T2277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.560854][ T8880] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  130.896575][ T8900] tipc: Started in network mode
[  130.900624][ T8900] tipc: Node identity c622155e92bc, cluster identity 4711
[  130.909510][ T8900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.918257][ T8900] syzkaller0: entered promiscuous mode
[  130.923201][ T8900] syzkaller0: entered allmulticast mode
[  130.932814][ T8903] netlink: 'syz.0.551': attribute type 21 has an invalid length.
[  130.951466][ T8897] tipc: Resetting bearer <eth:syzkaller0>
[  130.965569][ T8897] tipc: Disabling bearer <eth:syzkaller0>
[  131.026619][ T8898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.173563][ T8922] netlink: 'syz.2.556': attribute type 4 has an invalid length.
[  131.189515][ T8922] netlink: 'syz.2.556': attribute type 4 has an invalid length.
[  131.381571][ T8931] netlink: 'syz.1.558': attribute type 10 has an invalid length.
[  131.480088][ T8945] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  131.483466][ T8945] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  131.637311][ T8962] __nla_validate_parse: 11 callbacks suppressed
[  131.637326][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.562'.
[  131.790202][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.854117][ T8981] syzkaller0: entered promiscuous mode
[  131.856407][ T8981] syzkaller0: entered allmulticast mode
[  132.072369][ T8997] netlink: 'syz.1.570': attribute type 13 has an invalid length.
[  132.075739][ T8997] netlink: 'syz.1.570': attribute type 17 has an invalid length.
[  132.110588][ T8997] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.115823][ T8997] 8021q: adding VLAN 0 to HW filter on device team0
[  132.132147][ T8997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.163645][   T64] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  132.261180][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'.
[  132.274706][ T8997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.570'.
[  132.281738][ T8997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.349604][ T8997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.403412][ T9015] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  132.744515][ T3229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.751102][ T3229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.839776][ T9059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.878436][ T9059] syzkaller0: entered promiscuous mode
[  132.880808][ T9059] syzkaller0: entered allmulticast mode
[  132.883190][ T9059] tipc: Resetting bearer <eth:syzkaller0>
[  132.895205][ T9058] tipc: Resetting bearer <eth:syzkaller0>
[  133.883773][    T9] tipc: Node number set to 881475529
[  134.180058][ T9058] tipc: Disabling bearer <eth:syzkaller0>
[  134.315998][ T9079] validate_nla: 1 callbacks suppressed
[  134.316012][ T9079] netlink: 'syz.0.585': attribute type 3 has an invalid length.
[  134.399269][ T9086] netlink: 'syz.1.586': attribute type 13 has an invalid length.
[  134.402141][ T9086] netlink: 'syz.1.586': attribute type 17 has an invalid length.
[  134.418630][ T9086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.438173][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'.
[  134.567562][ T9091] netlink: 'syz.0.588': attribute type 10 has an invalid length.
[  134.663546][ T9086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.728173][ T9080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.834819][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'.
[  134.878334][ T9109] delete_channel: no stack
[  134.976948][ T9121] netlink: 'syz.0.594': attribute type 6 has an invalid length.
[  135.400606][ T9146] netlink: 'syz.2.599': attribute type 10 has an invalid length.
[  135.521496][ T9163] tap0: tun_chr_ioctl cmd 1074025677
[  135.523740][ T9163] tap0: linktype set to 825
[  135.658593][ T9170] netlink: 'syz.1.604': attribute type 1 has an invalid length.
[  135.661743][ T9170] netlink: 224 bytes leftover after parsing attributes in process `syz.1.604'.
[  135.826145][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'.
[  136.092136][ T9175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.606'.
[  136.154274][ T9175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.269675][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'.
[  136.384105][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.608'.
[  136.473081][ T9192] netlink: 'syz.2.609': attribute type 1 has an invalid length.
[  136.504026][ T9192] 8021q: adding VLAN 0 to HW filter on device bond6
[  136.539846][ T9192] veth11: entered promiscuous mode
[  136.550802][   T64] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  136.623129][ T9195] netlink: 'syz.1.610': attribute type 8 has an invalid length.
[  136.663599][ T9204] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.611'.
[  136.669102][ T9204] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  136.674860][ T9204] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  136.685244][ T9198] netlink: 'syz.1.610': attribute type 10 has an invalid length.
[  136.992328][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'.
[  137.047229][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  137.055404][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  137.062090][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  137.065486][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  137.073371][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  137.077587][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  137.081319][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  137.082383][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'.
[  137.179877][   T36] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  137.730544][ T9280] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  137.746724][ T9280] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  137.891099][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  137.893345][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  138.875644][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.881593][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.277023][ T9398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.749207][ T9434] validate_nla: 2 callbacks suppressed
[  139.749231][ T9434] netlink: 'syz.2.654': attribute type 4 has an invalid length.
[  140.048435][ T9463] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  140.052165][ T9463] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  140.212510][ T9454] bond6: entered promiscuous mode
[  140.214749][ T9454] bond6: entered allmulticast mode
[  140.227157][ T9454] 8021q: adding VLAN 0 to HW filter on device bond6
[  140.513010][ T9512] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  140.529484][ T9512] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  140.573750][ T9507] sctp: [Deprecated]: syz.2.666 (pid 9507) Use of int in max_burst socket option deprecated.
[  140.573750][ T9507] Use struct sctp_assoc_value instead
[  140.702449][ T9524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.104589][ T9566] netlink: 'syz.0.673': attribute type 10 has an invalid length.
[  141.170982][ T9572] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  141.174779][ T9572] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.295492][ T9578] netlink: 'syz.1.677': attribute type 16 has an invalid length.
[  141.299946][ T9578] netlink: 'syz.1.677': attribute type 17 has an invalid length.
[  141.343447][ T9579] netlink: 'syz.2.676': attribute type 13 has an invalid length.
[  141.348161][ T9579] netlink: 'syz.2.676': attribute type 17 has an invalid length.
[  141.397766][ T9578] IPv6: NLM_F_REPLACE set, but no existing node found!
[  141.445408][ T9579] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.450274][ T9579] 8021q: adding VLAN 0 to HW filter on device team0
[  141.455863][ T9579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.592301][ T9579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.653961][ T9579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.857480][ T9592] ip6gre1: entered allmulticast mode
[  141.861405][ T9592] __nla_validate_parse: 86 callbacks suppressed
[  141.861416][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'.
[  141.933399][ T9595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.657750][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[  142.661113][ T9600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'.
[  142.809776][ T9612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.685'.
[  142.862102][   T32] wlan0: Trigger new scan to find an IBSS to join
[  142.871955][ T9621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.875774][ T9612] batadv_slave_0: entered promiscuous mode
[  143.109456][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'.
[  143.330995][ T9649] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[  143.358940][ T9649] bond4: (slave vcan0): The slave device specified does not support setting the MAC address
[  143.362827][ T9649] bond4: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  143.369486][ T9649] bond4: (slave vcan0): making interface the new active one
[  143.372950][ T9649] bond4: (slave vcan0): Enslaving as an active interface with an up link
[  143.484888][ T9660] syzkaller1: entered promiscuous mode
[  143.488053][ T9660] syzkaller1: entered allmulticast mode
[  143.583462][ T9657] netlink: 'syz.2.691': attribute type 10 has an invalid length.
[  143.666008][ T9662] netlink: 108 bytes leftover after parsing attributes in process `syz.2.691'.
[  143.716622][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'.
[  143.806417][ T9682] netlink: 'syz.1.695': attribute type 11 has an invalid length.
[  143.824516][ T9684] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.697'.
[  143.828691][ T9684] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  143.832351][ T9684] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  143.915453][ T9685] geneve2: left promiscuous mode
[  143.917954][ T9685] veth3: left promiscuous mode
[  143.919834][ T9685] veth5: left promiscuous mode
[  143.922805][ T9685] veth7: left promiscuous mode
[  143.928087][ T9685] veth9: left promiscuous mode
[  143.935598][ T9685] veth11: left promiscuous mode
[  144.181662][ T9711] syzkaller1: entered promiscuous mode
[  144.184711][ T9711] syzkaller1: entered allmulticast mode
[  144.335636][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'.
[  144.484133][ T9734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'.
[  145.689774][ T9814] syzkaller1: entered promiscuous mode
[  145.692201][ T9814] syzkaller1: entered allmulticast mode
[  146.508564][ T9851] veth7: left promiscuous mode
[  146.525620][ T9851] bond6: left promiscuous mode
[  146.590703][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.594132][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.695369][ T9858] syzkaller1: entered promiscuous mode
[  146.705171][ T9858] syzkaller1: entered allmulticast mode
[  146.890471][ T9073] tipc: Subscription rejected, illegal request
[  146.926607][ T9869] netlink: 'syz.1.727': attribute type 5 has an invalid length.
[  146.997257][ T9869] __nla_validate_parse: 6 callbacks suppressed
[  146.997271][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.727'.
[  147.084185][ T9883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.730'.
[  147.088122][ T9883] tipc: Invalid UDP bearer configuration
[  147.088172][ T9883] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  147.395236][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.400290][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.426124][ T9919] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  147.646644][ T9936] netlink: 'syz.2.741': attribute type 1 has an invalid length.
[  147.724279][ T9944] IPVS: sed: FWM 3 0x00000003 - no destination available
[  147.905154][ T9957] syzkaller1: entered promiscuous mode
[  147.909081][ T9957] syzkaller1: entered allmulticast mode
[  148.026312][ T9962] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  148.163420][ T9960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.264055][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'.
[  148.380640][ T9971] netlink: 80 bytes leftover after parsing attributes in process `syz.2.751'.
[  148.393140][ T9971] Bluetooth: MGMT ver 1.23
[  148.539421][ T9995] netlink: 40 bytes leftover after parsing attributes in process `syz.0.756'.
[  148.609757][T10002] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.758'.
[  148.614452][T10002] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  148.619685][T10002] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  148.667928][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'.
[  148.757904][T10006] tipc: Started in network mode
[  148.760209][T10006] tipc: Node identity ac14140f, cluster identity 4711
[  148.763048][T10006] tipc: New replicast peer: 255.255.255.255
[  148.765696][T10006] tipc: Enabled bearer <udp:syz2>, priority 10
[  149.299521][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  149.312445][T10033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.764'.
[  149.461265][T10042] netlink: 'syz.0.765': attribute type 11 has an invalid length.
[  149.673992][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'.
[  149.774835][T10045] netlink: 'syz.1.767': attribute type 10 has an invalid length.
[  149.781742][T10046] netlink: 'syz.1.767': attribute type 10 has an invalid length.
[  149.832436][T10064] syzkaller1: entered promiscuous mode
[  149.834392][T10064] syzkaller1: entered allmulticast mode
[  149.888394][    T9] tipc: Node number set to 2886997007
[  150.329613][T10098] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  150.332965][T10098] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  150.373967][T10100] netlink: 'syz.0.776': attribute type 5 has an invalid length.
[  150.649539][T10111] netlink: 'syz.2.777': attribute type 10 has an invalid length.
[  150.712356][T10127] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.717257][T10127] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  150.802842][T10136] netlink: 'syz.0.779': attribute type 10 has an invalid length.
[  151.048728][T10152] netlink: 'syz.1.784': attribute type 10 has an invalid length.
[  151.638922][T10190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.740625][T10194] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  151.889824][T10204] netlink: 'syz.2.794': attribute type 10 has an invalid length.
[  151.982738][T10208] netlink: 'syz.1.798': attribute type 10 has an invalid length.
[  152.038095][T10210] __nla_validate_parse: 147 callbacks suppressed
[  152.038111][T10210] netlink: 200 bytes leftover after parsing attributes in process `syz.1.799'.
[  152.045555][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'.
[  152.688307][T10242] netlink: 'syz.1.805': attribute type 10 has an invalid length.
[  152.884498][T10253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.244684][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'.
[  153.248303][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'.
[  153.252666][T10277] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  153.256650][T10277] netlink: 80 bytes leftover after parsing attributes in process `syz.0.810'.
[  153.262753][T10276] netlink: 80 bytes leftover after parsing attributes in process `syz.0.810'.
[  153.748462][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'.
[  153.755277][T10291] netlink: 'syz.0.813': attribute type 10 has an invalid length.
[  153.965011][T10307] netlink: 200 bytes leftover after parsing attributes in process `syz.1.818'.
[  154.002659][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'.
[  154.066721][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'.
[  154.245566][T10327] netlink: 'syz.1.821': attribute type 1 has an invalid length.
[  154.326221][T10327] 8021q: adding VLAN 0 to HW filter on device bond6
[  154.353286][T10332] 8021q: adding VLAN 0 to HW filter on device bond6
[  154.356024][T10332] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  154.362695][T10332] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  154.391804][T10327] veth9: entered promiscuous mode
[  154.402571][T10327] bond6: (slave veth9): Enslaving as an active interface with a down link
[  155.482770][T10375] netlink: 'syz.0.830': attribute type 1 has an invalid length.
[  155.495596][T10375] netlink: 'syz.0.830': attribute type 4 has an invalid length.
[  155.848634][T10398] netlink: 'syz.0.834': attribute type 11 has an invalid length.
[  157.654782][T10494] netlink: 'syz.0.849': attribute type 10 has an invalid length.
[  157.665375][T10493] netlink: 'syz.1.850': attribute type 10 has an invalid length.
[  157.673366][T10493] __nla_validate_parse: 51 callbacks suppressed
[  157.673387][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.850'.
[  157.689725][T10493] netlink: 68 bytes leftover after parsing attributes in process `syz.1.850'.
[  157.693267][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.850'.
[  157.706422][T10493] netlink: 68 bytes leftover after parsing attributes in process `syz.1.850'.
[  157.712146][T10496] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.852'.
[  157.731769][T10496] netlink: 'syz.0.852': attribute type 10 has an invalid length.
[  157.740272][T10496] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  157.835825][T10501] netlink: 'syz.0.853': attribute type 1 has an invalid length.
[  159.253816][T10542] raw_sendmsg: syz.0.860 forgot to set AF_INET. Fix it!
[  159.264380][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.862'.
[  159.299335][T10539] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  159.366554][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'.
[  159.590268][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'.
[  159.965248][T10580] netlink: 'syz.1.867': attribute type 10 has an invalid length.
[  160.375312][T10621] openvswitch: netlink: Message has 4 unknown bytes.
[  160.484751][T10633] blkio.reset_stats is deprecated
[  160.533916][T10633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.799563][T10661] netlink: 'syz.0.883': attribute type 10 has an invalid length.
[  160.868105][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.884'.
[  160.975210][T10670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.885'.
[  161.007764][T10670] vlan3: entered allmulticast mode
[  161.016013][T10670] veth1: entered allmulticast mode
[  161.182544][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.292659][T10631] tipc: Disabling bearer <eth:syzkaller0>
[  161.389305][T10684] netlink: 'syz.1.890': attribute type 1 has an invalid length.
[  161.416289][T10684] 8021q: adding VLAN 0 to HW filter on device bond8
[  161.439603][T10684] 8021q: adding VLAN 0 to HW filter on device bond8
[  161.443140][T10684] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  161.451079][T10684] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  161.495759][T10687] veth11: entered promiscuous mode
[  161.503064][T10687] bond8: (slave veth11): Enslaving as an active interface with a down link
[  162.142111][T10714] netlink: 'syz.1.895': attribute type 12 has an invalid length.
[  162.312920][T10720] IPVS: sed: FWM 3 0x00000003 - no destination available
[  162.623365][T10732] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  162.666018][T10732] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  162.822936][T10745] netlink: 'syz.1.904': attribute type 1 has an invalid length.
[  162.846357][T10745] 8021q: adding VLAN 0 to HW filter on device bond9
[  162.866207][T10745] veth13: entered promiscuous mode
[  162.871579][T10745] bond9: (slave veth13): Enslaving as an active interface with a down link
[  162.910080][T10751] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  162.915826][T10751] bond4: (slave vcan0): Releasing backup interface
[  162.922861][T10751] bond6: (slave veth9): Releasing active interface
[  162.928597][T10751] bond8: (slave veth11): Releasing active interface
[  162.934220][T10751] bond9: (slave veth13): Releasing active interface
[  162.947245][T10751] netlink: 'syz.1.905': attribute type 10 has an invalid length.
[  162.953428][T10751] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  162.959461][T10751] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  163.595110][T10759] __nla_validate_parse: 4 callbacks suppressed
[  163.595122][T10759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'.
[  163.829374][T10774] netlink: 32 bytes leftover after parsing attributes in process `syz.1.911'.
[  163.833464][T10774] tipc: Invalid UDP bearer configuration
[  163.833566][T10774] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  163.933872][T10785] mac80211_hwsim hwsim28 wlan1: left allmulticast mode
[  163.944878][T10785] netlink: 'syz.1.913': attribute type 10 has an invalid length.
[  163.952223][T10785] netlink: 140 bytes leftover after parsing attributes in process `syz.1.913'.
[  163.999295][T10787] netlink: 210520 bytes leftover after parsing attributes in process `syz.0.914'.
[  164.113533][T10798] syzkaller0: entered promiscuous mode
[  164.115976][T10798] syzkaller0: entered allmulticast mode
[  164.121635][T10798] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  164.158407][T10799] IPVS: sed: FWM 3 0x00000003 - no destination available
[  164.401922][T10819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.923'.
[  164.446659][T10819] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  164.490275][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'.
[  164.493291][T10819] netlink: 'syz.0.923': attribute type 1 has an invalid length.
[  164.497408][T10819] netlink: 'syz.0.923': attribute type 2 has an invalid length.
[  164.502147][T10819] netlink: 80 bytes leftover after parsing attributes in process `syz.0.923'.
[  164.658757][T10823] batman_adv: batadv0: Adding interface: dummy0
[  164.661396][T10823] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.673080][T10823] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  164.807865][T10828] IPVS: sed: FWM 3 0x00000003 - no destination available
[  165.048730][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'.
[  165.421713][T10854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.444428][T10859] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.933'.
[  165.450425][T10859] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  165.453151][T10859] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  165.521371][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'.
[  166.518284][T10913] Unknown options in mask b7f2
[  166.531172][T10913] netlink: zone id is out of range
[  166.533695][T10913] netlink: zone id is out of range
[  166.536021][T10913] netlink: zone id is out of range
[  166.541190][T10913] netlink: zone id is out of range
[  166.543437][T10913] netlink: zone id is out of range
[  166.545500][T10913] netlink: zone id is out of range
[  166.547956][T10913] netlink: zone id is out of range
[  166.550662][T10913] netlink: zone id is out of range
[  167.209398][T10941] netlink: 'syz.2.948': attribute type 10 has an invalid length.
[  167.662170][T10980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.379707][T11013] syzkaller1: entered promiscuous mode
[  168.382061][T11013] syzkaller1: entered allmulticast mode
[  168.638595][T11037] syzkaller1: entered promiscuous mode
[  168.641128][T11037] syzkaller1: entered allmulticast mode
[  168.719215][T11041] netlink: 'syz.2.965': attribute type 27 has an invalid length.
[  168.748541][T11041] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  169.657611][T11069] netlink: 'syz.1.968': attribute type 1 has an invalid length.
[  169.715796][T11069] 8021q: adding VLAN 0 to HW filter on device bond10
[  170.064847][T11103] netlink: 'syz.0.974': attribute type 13 has an invalid length.
[  170.068952][T11103] netlink: 'syz.0.974': attribute type 17 has an invalid length.
[  170.115035][T11103] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.122755][T11103] 8021q: adding VLAN 0 to HW filter on device team0
[  170.280137][T11115] __nla_validate_parse: 4 callbacks suppressed
[  170.280155][T11115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.974'.
[  170.345404][T11120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.364712][T11119] netlink: 200 bytes leftover after parsing attributes in process `syz.2.978'.
[  170.425387][T11103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.466695][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'.
[  171.020919][T11158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.118059][T11170] netlink: 'syz.0.984': attribute type 3 has an invalid length.
[  171.483166][T11185] netlink: 'syz.0.987': attribute type 4 has an invalid length.
[  172.214686][T11213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.992'.
[  172.309339][ T2277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.312456][ T2277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.344476][T11222] netlink: 72 bytes leftover after parsing attributes in process `syz.1.992'.
[  172.610791][T11243] netlink: 'syz.2.998': attribute type 1 has an invalid length.
[  172.670430][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'.
[  172.855406][T11251] netlink: 'syz.1.999': attribute type 1 has an invalid length.
[  172.880254][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'.
[  172.889999][T11258] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  172.984059][T11263] netlink: 'syz.1.1002': attribute type 83 has an invalid length.
[  173.104868][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'.
[  173.335032][T11291] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1008'.
[  173.351684][T11291] 0X: renamed from caif0
[  173.366195][T11291] 0X: entered allmulticast mode
[  173.370414][T11291] net_ratelimit: 13 callbacks suppressed
[  173.370451][T11291] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  173.409940][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'.
[  173.837788][T11334] netlink: 'syz.0.1014': attribute type 13 has an invalid length.
[  173.840413][T11334] netlink: 'syz.0.1014': attribute type 17 has an invalid length.
[  173.855289][T11334] 0X: left allmulticast mode
[  173.859149][T11334] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  174.024115][T11334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.093198][T11330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.418330][T11377] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  174.548005][T11386] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  174.569070][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.572894][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.735378][T11393] netlink: 'syz.1.1025': attribute type 13 has an invalid length.
[  174.739839][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.744217][T11393] netlink: 'syz.1.1025': attribute type 17 has an invalid length.
[  174.745191][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.802616][T11393] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.824483][T11393] 8021q: adding VLAN 0 to HW filter on device team0
[  174.829452][T11393] batman_adv: batadv0: Interface activated: dummy0
[  174.831844][T11393] batadv0: mtu less than device minimum
[  174.834365][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  174.838333][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  174.842298][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  174.846341][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  174.850577][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  174.854582][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  175.012079][T11390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.205197][T11410] bond6: left allmulticast mode
[  175.208012][T11410] ip6gre1: left allmulticast mode
[  175.327103][T11415] __nla_validate_parse: 12 callbacks suppressed
[  175.327173][T11415] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1032'.
[  175.476615][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'.
[  175.603779][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'.
[  175.703149][T11434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.965372][T11443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.198743][T11453] netlink: 'syz.0.1039': attribute type 10 has an invalid length.
[  177.010030][T11485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1044'.
[  177.094716][T11493] netlink: 'syz.0.1045': attribute type 12 has an invalid length.
[  177.098326][T11493] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1045'.
[  177.110619][T11495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1046'.
[  177.114575][T11495] tipc: Invalid UDP bearer configuration
[  177.114641][T11495] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  177.407346][T11514] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1050'.
[  177.445268][T11511] syzkaller1: entered promiscuous mode
[  177.449178][T11511] syzkaller1: entered allmulticast mode
[  177.473244][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1051'.
[  177.517453][T11523] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1052'.
[  177.713120][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'.
[  177.847673][ T2277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.850183][ T2277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.200074][   T40] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  178.362103][T11594] bond0: (slave dummy0): Releasing backup interface
[  178.542855][T11607] syzkaller1: entered promiscuous mode
[  178.545344][T11607] syzkaller1: entered allmulticast mode
[  178.627430][T11612] netlink: 'syz.0.1067': attribute type 1 has an invalid length.
[  178.631560][T11613] netlink: 'syz.0.1067': attribute type 1 has an invalid length.
[  178.666364][T11612] 8021q: adding VLAN 0 to HW filter on device bond7
[  178.686479][T11612] 8021q: adding VLAN 0 to HW filter on device bond7
[  178.689837][T11612] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address
[  178.695685][T11612] bond7: (slave vxcan7): Error -95 calling set_mac_address
[  178.722143][T11611] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address
[  178.729508][T11611] bond7: (slave vxcan7): Error -95 calling set_mac_address
[  178.794996][   T89] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  178.912540][T11626] pim6reg1: entered promiscuous mode
[  178.925332][T11626] pim6reg1: entered allmulticast mode
[  178.933106][T11626] netlink: 'syz.0.1070': attribute type 27 has an invalid length.
[  179.521974][T11676] netlink: 'syz.1.1081': attribute type 1 has an invalid length.
[  179.553966][T11676] 8021q: adding VLAN 0 to HW filter on device bond11
[  179.579624][T11677] veth17: entered promiscuous mode
[  179.636444][T11683] net_ratelimit: 22 callbacks suppressed
[  179.636462][T11683] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  179.658690][T11683] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  180.081386][T11715] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  180.105275][T11715] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  180.363921][T11729] netlink: 'syz.2.1092': attribute type 5 has an invalid length.
[  180.508066][T11745] __nla_validate_parse: 23 callbacks suppressed
[  180.508083][T11745] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1094'.
[  181.212308][T11775] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1100'.
[  182.226702][T11817] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1106'.
[  182.231135][T11817] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  182.244642][T11817] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  182.841376][T11854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1109'.
[  182.858153][T11854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.918517][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'.
[  182.921375][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'.
[  182.926638][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'.
[  183.072757][T11870] netlink: 'syz.2.1112': attribute type 13 has an invalid length.
[  183.076291][T11870] netlink: 'syz.2.1112': attribute type 17 has an invalid length.
[  183.105574][T11870] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.110267][T11870] 8021q: adding VLAN 0 to HW filter on device team0
[  183.116214][T11870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.234493][T11883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1115'.
[  183.260054][T11883] netlink: 'syz.0.1115': attribute type 11 has an invalid length.
[  183.485528][T11899] pim6reg1: entered promiscuous mode
[  183.488463][T11899] pim6reg1: entered allmulticast mode
[  183.491630][T11899] netlink: 'syz.0.1118': attribute type 27 has an invalid length.
[  183.504772][T11899] pim6reg1: left promiscuous mode
[  183.507103][T11899] pim6reg1: left allmulticast mode
[  183.535279][ T9073] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  184.373205][T11943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1125'.
[  184.559411][T11957] netlink: 'syz.2.1127': attribute type 42 has an invalid length.
[  184.562843][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'.
[  184.570528][T11964] netlink: 'syz.2.1127': attribute type 42 has an invalid length.
[  184.670146][T11974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.679804][T11969] syzkaller0: entered promiscuous mode
[  184.681822][T11969] syzkaller0: entered allmulticast mode
[  184.685905][T11976] syzkaller1: entered promiscuous mode
[  184.690443][T11976] syzkaller1: entered allmulticast mode
[  184.760897][T11974] tipc: Resetting bearer <eth:syzkaller0>
[  184.784759][T11974] tipc: Resetting bearer <eth:syzkaller0>
[  184.800188][T11974] tipc: Disabling bearer <eth:syzkaller0>
[  185.160867][T12007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.190000][T11999] netlink: 'syz.2.1135': attribute type 10 has an invalid length.
[  185.915806][T12041] netlink: 'syz.2.1140': attribute type 10 has an invalid length.
[  185.945143][ T5891] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[  185.968404][ T5891] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  186.125098][T12048] netlink: 'syz.1.1141': attribute type 10 has an invalid length.
[  186.441753][T12057] netlink: 'syz.1.1145': attribute type 1 has an invalid length.
[  186.467405][T12057] 8021q: adding VLAN 0 to HW filter on device bond12
[  186.482913][T12057] vlan0: entered promiscuous mode
[  186.484770][T12057] bond12: entered promiscuous mode
[  186.487363][T12057] vlan0: entered allmulticast mode
[  186.489756][T12057] bond12: entered allmulticast mode
[  186.499908][T12057] bond12: (slave gretap1): making interface the new active one
[  186.503021][T12057] gretap1: entered promiscuous mode
[  186.504840][T12057] gretap1: entered allmulticast mode
[  186.507885][T12057] bond12: (slave gretap1): Enslaving as an active interface with an up link
[  186.632152][T12070] __nla_validate_parse: 2 callbacks suppressed
[  186.632174][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1147'.
[  186.689790][T12079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1147'.
[  186.830293][T12085] trusted_key: syz.0.1148 sent an empty control message without MSG_MORE.
[  186.863828][T12085] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  186.899179][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'.
[  187.019551][T12085] bridge2: entered promiscuous mode
[  187.021769][T12085] bridge2: entered allmulticast mode
[  187.026556][T12085] team0: Port device bridge2 added
[  187.156337][T12096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.384398][T12099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.366278][T12105] pim6reg1: entered promiscuous mode
[  188.370958][T12105] pim6reg1: entered allmulticast mode
[  188.409685][T12108] netlink: 'syz.2.1155': attribute type 13 has an invalid length.
[  188.412910][T12108] netlink: 'syz.2.1155': attribute type 17 has an invalid length.
[  188.442113][T12110] netlink: 'syz.0.1154': attribute type 2 has an invalid length.
[  188.445417][T12110] netlink: 'syz.0.1154': attribute type 8 has an invalid length.
[  188.449619][T12110] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1154'.
[  188.485324][T12108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.503735][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'.
[  188.612800][T12108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1155'.
[  188.642337][T12108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.706614][T12108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.730878][T12123] tun0: tun_chr_ioctl cmd 2148045848
[  188.733596][T12123] tun0: tun_chr_ioctl cmd 21731
[  188.871079][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'.
[  189.191442][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.194682][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.195935][T12138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.789271][T12142] validate_nla: 2 callbacks suppressed
[  189.789295][T12142] netlink: 'syz.2.1164': attribute type 10 has an invalid length.
[  189.816063][   T89] wlan0: Trigger new scan to find an IBSS to join
[  189.843046][T12142] team0: Port device dummy0 added
[  189.938475][T12147] netlink: 'syz.0.1165': attribute type 10 has an invalid length.
[  190.004021][T12156] syzkaller1: entered promiscuous mode
[  190.006334][T12156] syzkaller1: entered allmulticast mode
[  190.024550][T12159] netlink: 'syz.2.1168': attribute type 1 has an invalid length.
[  190.099001][T12159] 8021q: adding VLAN 0 to HW filter on device bond8
[  190.116699][T12159] veth19: entered promiscuous mode
[  190.127485][T12159] bond8: (slave veth19): Enslaving as an active interface with a down link
[  190.187197][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.190639][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.250212][T12171] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1171'.
[  190.260314][T12171] netlink: 'syz.0.1171': attribute type 10 has an invalid length.
[  190.338903][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'.
[  190.348038][T12174] netlink: 'syz.2.1172': attribute type 83 has an invalid length.
[  190.449907][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'.
[  190.462803][T12187] netlink: 'syz.2.1175': attribute type 1 has an invalid length.
[  190.557543][T12193] syzkaller1: entered promiscuous mode
[  190.559870][T12193] syzkaller1: entered allmulticast mode
[  190.678129][T12198] netlink: 'syz.1.1179': attribute type 10 has an invalid length.
[  191.238672][T12228] TCP: TCP_TX_DELAY enabled
[  191.450685][T12246] netlink: 'syz.2.1185': attribute type 10 has an invalid length.
[  191.580411][T12261] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  191.583385][T12261] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  191.639628][T12266] __nla_validate_parse: 15 callbacks suppressed
[  191.641542][T12266] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1188'.
[  191.742411][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'.
[  191.744282][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'.
[  192.160175][T12295] netlink: 'syz.0.1192': attribute type 10 has an invalid length.
[  192.162772][T12295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1192'.
[  192.174645][T12295] batman_adv: batadv0: Adding interface: 
[  192.176717][T12295] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.185621][T12295] batman_adv: batadv0: Interface activated: 
[  192.198051][T12295] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1192'.
[  192.472804][T12311] netlink: 'syz.0.1197': attribute type 1 has an invalid length.
[  192.540226][T12311] 8021q: adding VLAN 0 to HW filter on device bond8
[  192.588990][T12312] 8021q: adding VLAN 0 to HW filter on device bond8
[  192.598664][T12312] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address
[  192.606088][T12312] bond8: (slave vxcan7): Error -95 calling set_mac_address
[  192.848911][   T32] wlan0: Trigger new scan to find an IBSS to join
[  192.905658][T12333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.950972][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'.
[  193.184484][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'.
[  193.512189][T12367] batman_adv: batadv0: Interface deactivated: 
[  193.515020][T12367] batman_adv: batadv0: Removing interface: 
[  193.529815][T12367] team0: Port device bridge2 removed
[  193.645664][T12374] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  193.660907][T12374] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  193.678466][T12373] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  193.727683][ T5861] Bluetooth: hci2: command 0x0405 tx timeout
[  193.843534][T12385] syzkaller1: entered promiscuous mode
[  193.846065][T12385] syzkaller1: entered allmulticast mode
[  193.906457][T12394] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1213'.
[  193.910787][T12394] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  193.915930][T12394] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  194.514608][T12433] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1220'.
[  194.528656][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'.
[  195.136139][T12453] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  195.140660][T12453] CPU: 0 UID: 0 PID: 12453 Comm: syz.1.1225 Not tainted syzkaller #0 PREEMPT(full) 
[  195.140688][T12453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.140702][T12453] Call Trace:
[  195.140710][T12453]  <TASK>
[  195.140719][T12453]  dump_stack_lvl+0x189/0x250
[  195.140755][T12453]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.140776][T12453]  ? __pfx__printk+0x10/0x10
[  195.140806][T12453]  ? kernfs_path_from_node+0x2f/0x290
[  195.140825][T12453]  ? kernfs_path_from_node+0x250/0x290
[  195.140841][T12453]  ? kernfs_path_from_node+0x2f/0x290
[  195.140861][T12453]  sysfs_warn_dup+0x8e/0xa0
[  195.140878][T12453]  sysfs_do_create_link_sd+0xc0/0x110
[  195.140897][T12453]  device_add_class_symlinks+0x1cf/0x240
[  195.140921][T12453]  device_add+0x475/0xb50
[  195.140941][T12453]  wiphy_register+0x1ba6/0x28d0
[  195.140973][T12453]  ? __pfx_wiphy_register+0x10/0x10
[  195.140989][T12453]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  195.141037][T12453]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  195.141082][T12453]  ieee80211_register_hw+0x3484/0x4100
[  195.141117][T12453]  ? ieee80211_register_hw+0x1461/0x4100
[  195.141145][T12453]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  195.141168][T12453]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  195.141200][T12453]  ? __hrtimer_setup+0x187/0x210
[  195.141216][T12453]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  195.141234][T12453]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  195.141282][T12453]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  195.141333][T12453]  ? trace_kmalloc+0x1f/0xd0
[  195.141353][T12453]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  195.141374][T12453]  ? kstrndup+0xbf/0x160
[  195.141402][T12453]  hwsim_new_radio_nl+0xea4/0x1b10
[  195.141426][T12453]  ? __pfx___nla_validate_parse+0x10/0x10
[  195.141457][T12453]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  195.141489][T12453]  ? __nla_parse+0x40/0x60
[  195.141508][T12453]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  195.141537][T12453]  genl_family_rcv_msg_doit+0x215/0x300
[  195.141564][T12453]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  195.141595][T12453]  ? bpf_lsm_capable+0x9/0x20
[  195.141615][T12453]  ? security_capable+0x7e/0x2e0
[  195.141646][T12453]  genl_rcv_msg+0x60e/0x790
[  195.141672][T12453]  ? __pfx_genl_rcv_msg+0x10/0x10
[  195.141692][T12453]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  195.141724][T12453]  netlink_rcv_skb+0x208/0x470
[  195.141739][T12453]  ? __lock_acquire+0xab9/0xd20
[  195.141760][T12453]  ? __pfx_genl_rcv_msg+0x10/0x10
[  195.141781][T12453]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  195.141813][T12453]  ? down_read+0x1ad/0x2e0
[  195.141833][T12453]  genl_rcv+0x28/0x40
[  195.141850][T12453]  netlink_unicast+0x82f/0x9e0
[  195.141880][T12453]  ? __pfx_netlink_unicast+0x10/0x10
[  195.141904][T12453]  ? netlink_sendmsg+0x642/0xb30
[  195.141919][T12453]  ? skb_put+0x11b/0x210
[  195.141939][T12453]  netlink_sendmsg+0x805/0xb30
[  195.141964][T12453]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.141984][T12453]  ? aa_sock_msg_perm+0xf1/0x1d0
[  195.142001][T12453]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  195.142032][T12453]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.142050][T12453]  __sock_sendmsg+0x21c/0x270
[  195.142078][T12453]  ____sys_sendmsg+0x505/0x830
[  195.142104][T12453]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.142132][T12453]  ? import_iovec+0x74/0xa0
[  195.142157][T12453]  ___sys_sendmsg+0x21f/0x2a0
[  195.142178][T12453]  ? __pfx____sys_sendmsg+0x10/0x10
[  195.142231][T12453]  ? __fget_files+0x2a/0x420
[  195.142245][T12453]  ? __fget_files+0x3a0/0x420
[  195.142268][T12453]  __x64_sys_sendmsg+0x19b/0x260
[  195.142327][T12453]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  195.142356][T12453]  ? rcu_is_watching+0x15/0xb0
[  195.142379][T12453]  ? do_syscall_64+0xbe/0x3b0
[  195.142401][T12453]  do_syscall_64+0xfa/0x3b0
[  195.142414][T12453]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.142427][T12453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.142445][T12453]  ? exc_page_fault+0x9f/0xf0
[  195.142462][T12453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.142478][T12453] RIP: 0033:0x7fd53c98ec29
[  195.142494][T12453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.142509][T12453] RSP: 002b:00007fd53d7ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.142528][T12453] RAX: ffffffffffffffda RBX: 00007fd53cbd5fa0 RCX: 00007fd53c98ec29
[  195.142540][T12453] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  195.142548][T12453] RBP: 00007fd53ca11e41 R08: 0000000000000000 R09: 0000000000000000
[  195.142557][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  195.142565][T12453] R13: 00007fd53cbd6038 R14: 00007fd53cbd5fa0 R15: 00007ffe19c54108
[  195.142589][T12453]  </TASK>
[  195.454370][T12481] validate_nla: 23 callbacks suppressed
[  195.454387][T12481] netlink: 'syz.2.1230': attribute type 13 has an invalid length.
[  195.459227][T12481] netlink: 'syz.2.1230': attribute type 17 has an invalid length.
[  195.473983][T12481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.711660][T12499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.764156][T12487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.796704][T12499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.807075][ T1089] wlan0: Trigger new scan to find an IBSS to join
[  196.286943][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  196.761116][  T731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.871844][T12518] netlink: 'syz.1.1234': attribute type 10 has an invalid length.
[  196.945721][T12533] __nla_validate_parse: 5 callbacks suppressed
[  196.945746][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'.
[  196.959812][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'.
[  197.073947][T12536] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1237'.
[  197.086404][T12538] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1238'.
[  197.090157][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'.
[  197.101059][T12536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  197.107078][T12538] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  197.110578][T12538] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  197.449356][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'.
[  198.000615][T12604] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1248'.
[  198.007504][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'.
[  198.162673][T12607] netlink: 'syz.2.1247': attribute type 10 has an invalid length.
[  198.419139][T12632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'.
[  198.484196][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'.
[  198.654508][ T5238] Bluetooth: hci2: link tx timeout
[  198.661519][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.856207][T12646] netlink: 'syz.0.1254': attribute type 10 has an invalid length.
[  198.942669][T12661] Unsupported ieee802154 address type: 0
[  198.950366][T12661] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[  198.993346][T12661] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address
[  199.001089][T12661] bond9: (slave vxcan7): Error -95 calling set_mac_address
[  199.083734][T12668] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  199.093724][T12668] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  199.332128][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  199.478737][T12694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.582477][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.586618][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.032634][T12732] Bluetooth: MGMT ver 1.23
[  200.502814][T12752] delete_channel: no stack
[  200.687118][ T5861] Bluetooth: hci2: command 0x0405 tx timeout
[  200.859192][T12756] netlink: 'syz.1.1278': attribute type 10 has an invalid length.
[  201.396008][T12790] netlink: 'syz.1.1284': attribute type 12 has an invalid length.
[  201.401247][T12790] netlink: 'syz.1.1284': attribute type 12 has an invalid length.
[  201.532140][T12803] netlink: 'syz.0.1286': attribute type 10 has an invalid length.
[  201.566333][T12809] netlink: 'syz.1.1284': attribute type 10 has an invalid length.
[  201.962515][T12827] __nla_validate_parse: 14 callbacks suppressed
[  201.962533][T12827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1290'.
[  201.992750][T12827] warn_alloc: 1 callbacks suppressed
[  201.992767][T12827] syz.0.1290: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  202.015375][T12827] CPU: 0 UID: 0 PID: 12827 Comm: syz.0.1290 Not tainted syzkaller #0 PREEMPT(full) 
[  202.015401][T12827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.015411][T12827] Call Trace:
[  202.015418][T12827]  <TASK>
[  202.015426][T12827]  dump_stack_lvl+0x189/0x250
[  202.015459][T12827]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.015480][T12827]  ? __pfx__printk+0x10/0x10
[  202.015507][T12827]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  202.015526][T12827]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  202.015541][T12827]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  202.015559][T12827]  warn_alloc+0x214/0x310
[  202.015581][T12827]  ? stack_depot_save_flags+0x40/0x860
[  202.015607][T12827]  ? __pfx_warn_alloc+0x10/0x10
[  202.015632][T12827]  ? kasan_save_track+0x4f/0x80
[  202.015655][T12827]  ? xskq_create+0x56/0x170
[  202.015669][T12827]  ? xsk_init_queue+0xb0/0x110
[  202.015681][T12827]  ? xsk_setsockopt+0x4dc/0x8d0
[  202.015702][T12827]  ? do_sock_setsockopt+0x17c/0x1b0
[  202.015720][T12827]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  202.015737][T12827]  ? do_syscall_64+0xfa/0x3b0
[  202.015755][T12827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.015778][T12827]  __vmalloc_node_range_noprof+0x125/0x12f0
[  202.015825][T12827]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  202.015886][T12827]  ? __kasan_kmalloc+0x93/0xb0
[  202.015914][T12827]  vmalloc_user_noprof+0xad/0xf0
[  202.015955][T12827]  ? xskq_create+0xbf/0x170
[  202.015972][T12827]  xskq_create+0xbf/0x170
[  202.015992][T12827]  xsk_init_queue+0xb0/0x110
[  202.016008][T12827]  xsk_setsockopt+0x4dc/0x8d0
[  202.016031][T12827]  ? __pfx_xsk_setsockopt+0x10/0x10
[  202.016050][T12827]  ? __pfx_aa_sk_perm+0x10/0x10
[  202.016074][T12827]  ? aa_sock_opt_perm+0xff/0x1b0
[  202.016088][T12827]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  202.016104][T12827]  ? __pfx_xsk_setsockopt+0x10/0x10
[  202.016127][T12827]  do_sock_setsockopt+0x17c/0x1b0
[  202.016150][T12827]  __x64_sys_setsockopt+0x13f/0x1b0
[  202.016187][T12827]  do_syscall_64+0xfa/0x3b0
[  202.016203][T12827]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.016221][T12827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.016234][T12827]  ? exc_page_fault+0x9f/0xf0
[  202.016252][T12827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.016265][T12827] RIP: 0033:0x7facbed8ec29
[  202.016282][T12827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.016295][T12827] RSP: 002b:00007facbfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  202.016312][T12827] RAX: ffffffffffffffda RBX: 00007facbefd5fa0 RCX: 00007facbed8ec29
[  202.016323][T12827] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  202.016332][T12827] RBP: 00007facbee11e41 R08: 0000000000000004 R09: 0000000000000000
[  202.016342][T12827] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.016351][T12827] R13: 00007facbefd6038 R14: 00007facbefd5fa0 R15: 00007fffea229678
[  202.016378][T12827]  </TASK>
[  202.016386][T12827] Mem-Info:
[  202.080468][T12822] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1288'.
[  202.081734][T12827] active_anon:6403 inactive_anon:0 isolated_anon:0
[  202.081734][T12827]  active_file:1473 inactive_file:38294 isolated_file:0
[  202.081734][T12827]  unevictable:1768 dirty:126 writeback:0
[  202.081734][T12827]  slab_reclaimable:10563 slab_unreclaimable:134533
[  202.081734][T12827]  mapped:19474 shmem:2436 pagetables:1128
[  202.081734][T12827]  sec_pagetables:0 bounce:0
[  202.081734][T12827]  kernel_misc_reclaimable:0
[  202.081734][T12827]  free:204466 free_pcp:24514 free_cma:0
[  202.149028][T12836] netlink: 'syz.0.1290': attribute type 4 has an invalid length.
[  202.162432][T12835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1288'.
[  202.175133][T12827] Node 0 active_anon:16296kB inactive_anon:0kB active_file:4868kB inactive_file:22092kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45080kB dirty:464kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7060kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  202.188698][T12827] Node 1 active_anon:9316kB inactive_anon:0kB active_file:1024kB inactive_file:131084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36896kB dirty:40kB writeback:0kB shmem:4768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5800kB pagetables:2236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  202.202155][T12827] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  202.217175][T12827] lowmem_reserve[]: 0 811 811 811 811
[  202.219585][T12827] Node 0 DMA32 free:184072kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16296kB inactive_anon:0kB active_file:4868kB inactive_file:22092kB unevictable:3536kB writepending:464kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:40576kB local_pcp:18872kB free_cma:0kB
[  202.233727][T12827] lowmem_reserve[]: 0 0 0 0 0
[  202.236237][T12827] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  202.249567][T12827] lowmem_reserve[]: 0 0 854 854 854
[  202.252039][T12827] Node 1 Normal free:159816kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9316kB inactive_anon:0kB active_file:1024kB inactive_file:131084kB unevictable:3536kB writepending:40kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:57432kB local_pcp:18724kB free_cma:0kB
[  202.265900][T12827] lowmem_reserve[]: 0 0 0 0 0
[  202.273958][T12822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.282339][T12827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  202.289297][T12827] Node 0 DMA32: 1118*4kB (UME) 772*8kB (UME) 395*16kB (UME) 450*32kB (UE) 178*64kB (UE) 70*128kB (UME) 45*256kB (UM) 30*512kB (UM) 17*1024kB (UM) 11*2048kB (UME) 16*4096kB (UM) = 184072kB
[  202.297093][T12827] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  202.304312][T12827] Node 1 Normal: 550*4kB (UME) 445*8kB (UME) 246*16kB (UME) 94*32kB (UME) 165*64kB (UME) 105*128kB (UM) 57*256kB (UME) 32*512kB (UM) 14*1024kB (UM) 12*2048kB (UE) 13*4096kB (UM) = 159840kB
[  202.317705][T12827] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  202.323370][T12827] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  202.327132][T12827] 42203 total pagecache pages
[  202.330737][T12841] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1292'.
[  202.334908][T12841] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  202.339444][T12827] 0 pages in swap cache
[  202.341379][T12827] Free swap  = 124996kB
[  202.343337][T12827] Total swap = 124996kB
[  202.344937][T12827] 786301 pages RAM
[  202.346712][T12827] 0 pages HighMem/MovableOnly
[  202.347059][T12841] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  202.349005][T12827] 241346 pages reserved
[  202.354627][T12827] 0 pages cma reserved
[  202.486368][T12850] netlink: 'syz.0.1293': attribute type 13 has an invalid length.
[  202.489089][T12850] netlink: 'syz.0.1293': attribute type 17 has an invalid length.
[  202.516583][T12850] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.519983][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'.
[  202.521214][T12850] 8021q: adding VLAN 0 to HW filter on device team0
[  202.530871][T12850] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  202.640390][T12846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.863339][T12869] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  203.240963][T12876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'.
[  203.259498][T12876] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1300'.
[  203.284103][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'.
[  203.410849][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'.
[  203.416032][T12881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'.
[  203.719408][T12903] netlink: 'syz.1.1305': attribute type 1 has an invalid length.
[  203.761985][T12908] sctp: [Deprecated]: syz.2.1306 (pid 12908) Use of struct sctp_assoc_value in delayed_ack socket option.
[  203.761985][T12908] Use struct sctp_sack_info instead
[  203.768564][T12903] 8021q: adding VLAN 0 to HW filter on device bond13
[  203.789227][T12903] veth19: entered promiscuous mode
[  203.823266][T12912] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  203.826699][T12912] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  204.049189][T12926] netlink: 'syz.0.1310': attribute type 6 has an invalid length.
[  204.605043][T12959] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  204.617347][T12959] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  204.815239][T12979] 8021q: adding VLAN 0 to HW filter on device team0
[  204.821506][T12979] bond0: (slave team0): Enslaving as an active interface with an up link
[  204.944596][T12992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.073179][T13000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.142178][T13002] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  205.146104][T13002] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  205.252843][T12997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.313280][T12997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.426044][ T3229] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  205.710113][T13040] bond0: (slave team0): Releasing backup interface
[  205.822499][T13047] syzkaller1: entered promiscuous mode
[  205.825019][T13047] syzkaller1: entered allmulticast mode
[  207.086631][T13106] validate_nla: 5 callbacks suppressed
[  207.086644][T13106] netlink: 'syz.2.1349': attribute type 10 has an invalid length.
[  207.092956][T13106] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  207.102867][T13106] team0: Failed to send options change via netlink (err -105)
[  207.106245][T13106] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  207.110348][T13106] team0: Port device dummy0 removed
[  207.114597][T13106] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  207.260183][T13108] __nla_validate_parse: 17 callbacks suppressed
[  207.260202][T13108] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1351'.
[  207.272754][T13108] IPVS: Error connecting to the multicast addr
[  207.277653][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'.
[  207.806306][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'.
[  208.136857][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'.
[  208.140197][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'.
[  208.143878][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'.
[  208.159040][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'.
[  208.163690][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'.
[  208.167060][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'.
[  208.785126][T13147] netlink: 'syz.1.1360': attribute type 16 has an invalid length.
[  208.789666][T13147] netlink: 'syz.1.1360': attribute type 17 has an invalid length.
[  208.858135][T13147] batman_adv: batadv0: Interface deactivated: dummy0
[  208.925037][T13151] IPv6: NLM_F_REPLACE set, but no existing node found!
[  209.042355][T13166] netlink: 'syz.1.1363': attribute type 1 has an invalid length.
[  209.045936][T13165] netlink: 'syz.1.1363': attribute type 1 has an invalid length.
[  209.065674][T13166] 8021q: adding VLAN 0 to HW filter on device bond14
[  209.072465][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'.
[  209.118248][T13163] netlink: 'syz.0.1361': attribute type 10 has an invalid length.
[  209.190581][T13182] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  209.204427][T13182] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  209.469113][T13190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.110006][T13240] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  210.115154][T13240] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  210.436163][T13257] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  210.441484][T13257] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  210.446378][T13257] netlink: 'syz.0.1379': attribute type 2 has an invalid length.
[  211.210542][T13292] netlink: 'syz.1.1383': attribute type 1 has an invalid length.
[  211.629856][T13312] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  211.634571][T13312] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  211.639149][T13312] tipc: Resetting bearer <eth:syzkaller0>
[  211.735639][T13318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.050081][   T32] tipc: Resetting bearer <eth:syzkaller0>
[  212.154472][T13342] openvswitch: netlink: IPv4 tun info is not correct
[  212.205881][T13340] netlink: 'syz.0.1389': attribute type 10 has an invalid length.
[  212.261872][  T731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.265388][  T731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.538074][T13367] __nla_validate_parse: 12 callbacks suppressed
[  212.538087][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'.
[  212.572869][T13366] veth19: left promiscuous mode
[  212.578988][T13366] tipc: Resetting bearer <eth:syzkaller0>
[  212.590230][T13366] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[  212.593433][T13366] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[  213.022870][T13381] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1398'.
[  213.027981][T13382] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1398'.
[  213.039444][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[  213.115287][T13378] netlink: 'syz.0.1396': attribute type 10 has an invalid length.
[  213.341065][T13395] IPVS: sed: FWM 3 0x00000003 - no destination available
[  213.343431][    C1] IPVS: sed: FWM 3 0x00000003 - no destination available
[  213.483252][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1403'.
[  213.523792][T13398] netlink: 'syz.0.1403': attribute type 10 has an invalid length.
[  213.523792][T13397] netlink: 'syz.0.1403': attribute type 10 has an invalid length.
[  213.751500][T13408] netlink: 'syz.2.1404': attribute type 13 has an invalid length.
[  213.754977][T13408] netlink: 'syz.2.1404': attribute type 17 has an invalid length.
[  213.792348][T13408] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.796572][T13408] 8021q: adding VLAN 0 to HW filter on device team0
[  213.803842][T13408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  213.937561][T13408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1404'.
[  213.942962][T13408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.000363][T13409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.032374][T13415] netlink: 'syz.1.1405': attribute type 13 has an invalid length.
[  214.035945][T13415] netlink: 'syz.1.1405': attribute type 17 has an invalid length.
[  214.040703][T13415] netlink: 'syz.1.1405': attribute type 27 has an invalid length.
[  214.102024][T13419] _Z`Ԁ@: entered promiscuous mode
[  214.315430][T13428] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.1407'.
[  214.432310][T13435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.622392][T13449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.763763][T13458] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1412'.
[  214.768682][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'.
[  215.016520][T13476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1414'.
[  215.433009][T13496] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  215.436342][T13496] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  215.805896][T13513] netlink: 'syz.1.1420': attribute type 13 has an invalid length.
[  215.862055][T13513] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.865594][T13513] 8021q: adding VLAN 0 to HW filter on device team0
[  215.894755][T13513] batman_adv: batadv0: Interface activated: dummy0
[  215.897850][T13513] batadv0: mtu less than device minimum
[  215.901675][T13513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  215.906818][T13513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  215.911971][T13513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  215.917230][T13513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  215.922305][T13513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  215.926851][T13513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  215.931718][T13513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  216.149826][T13525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.205911][T13525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.495704][T13516] 8021q: adding VLAN 0 to HW filter on device bond10
[  216.523352][T13520] 8021q: adding VLAN 0 to HW filter on device bond10
[  216.537711][T13520] bond10: (slave vxcan7): The slave device specified does not support setting the MAC address
[  216.548618][T13520] bond10: (slave vxcan7): Error -95 calling set_mac_address
[  216.592774][T13522] veth15: entered promiscuous mode
[  216.600414][T13522] bond10: (slave veth15): Enslaving as an active interface with a down link
[  217.235549][T13572] 8021q: adding VLAN 0 to HW filter on device bond15
[  217.281495][  T731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.284514][  T731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.309048][T13580] validate_nla: 4 callbacks suppressed
[  217.309061][T13580] netlink: 'syz.0.1433': attribute type 1 has an invalid length.
[  217.379668][T13575] netlink: 'syz.2.1432': attribute type 10 has an invalid length.
[  217.776617][T13603] syzkaller0: entered promiscuous mode
[  217.781034][T13603] syzkaller0: entered allmulticast mode
[  217.837739][T13614] netlink: 'syz.2.1439': attribute type 6 has an invalid length.
[  217.916007][T13619] __nla_validate_parse: 7 callbacks suppressed
[  217.916025][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'.
[  217.925784][T13617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1440'.
[  218.045541][T13629] netlink: 'syz.2.1443': attribute type 1 has an invalid length.
[  218.090036][T13629] 8021q: adding VLAN 0 to HW filter on device bond9
[  218.121431][T13629] 8021q: adding VLAN 0 to HW filter on device bond9
[  218.124191][T13629] bond9: (slave vxcan9): The slave device specified does not support setting the MAC address
[  218.129924][T13629] bond9: (slave vxcan9): Error -95 calling set_mac_address
[  218.152573][T13637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'.
[  218.171009][ T1089] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  218.221759][T13640] netlink: 'syz.0.1445': attribute type 11 has an invalid length.
[  218.291238][T13647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1447'.
[  218.342142][T13652] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1448'.
[  218.346289][T13651] netlink: 'syz.2.1448': attribute type 1 has an invalid length.
[  218.374160][T13651] 8021q: adding VLAN 0 to HW filter on device bond10
[  218.623553][T13670] syzkaller1: entered promiscuous mode
[  218.626119][T13670] syzkaller1: entered allmulticast mode
[  218.744453][T13677] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1455'.
[  219.030899][T13701] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1459'.
[  219.210014][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'.
[  219.224451][T13716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1461'.
[  219.227737][T13716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1461'.
[  219.301899][  T731] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  219.412867][T13732] netlink: 'syz.2.1465': attribute type 10 has an invalid length.
[  219.420999][T13732] team0: Port device geneve0 added
[  219.427611][ T5867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.437608][ T5867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.441301][ T5867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.464245][ T5867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.536401][T13738] syzkaller1: entered promiscuous mode
[  219.546254][T13738] syzkaller1: entered allmulticast mode
[  219.573034][T13740] tipc: Invalid UDP bearer configuration
[  219.573084][T13740] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  219.594208][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.596978][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.665124][T13748] netlink: 'syz.2.1470': attribute type 1 has an invalid length.
[  219.690892][T13748] bond11: (slave gretap1): making interface the new active one
[  219.694795][T13745] netlink: 'syz.1.1469': attribute type 10 has an invalid length.
[  219.698235][T13748] bond11: (slave gretap1): Enslaving as an active interface with an up link
[  219.707309][T13745] netlink: 'syz.1.1469': attribute type 17 has an invalid length.
[  220.134511][T13759] netlink: 'syz.1.1472': attribute type 13 has an invalid length.
[  220.274483][T13758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.280776][T13758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.589207][T13767] net_ratelimit: 20 callbacks suppressed
[  220.589213][T13767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.605502][T13768] 8021q: adding VLAN 0 to HW filter on device team0
[  220.611274][T13768] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  220.747532][T13763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.760859][T13765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.816163][T13828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.137317][ T3229] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  222.455017][T13847] validate_nla: 8 callbacks suppressed
[  222.455039][T13847] netlink: 'syz.0.1492': attribute type 10 has an invalid length.
[  222.795969][T13863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.960260][T13872] __nla_validate_parse: 13 callbacks suppressed
[  222.960285][T13872] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1497'.
[  222.979241][T13872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1497'.
[  223.011408][T13873] netlink: 'syz.1.1498': attribute type 10 has an invalid length.
[  223.217084][T13890] netlink: 'syz.1.1501': attribute type 10 has an invalid length.
[  223.227567][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1499'.
[  223.425942][T13896] batadv1: entered promiscuous mode
[  223.433202][T13896] batadv1: entered allmulticast mode
[  223.548550][ T1089] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  223.586241][T13918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'.
[  223.594634][T13918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1508'.
[  223.672947][T13925] netlink: 'syz.1.1510': attribute type 10 has an invalid length.
[  223.809047][   T89] wlan0: Trigger new scan to find an IBSS to join
[  223.972444][T13932] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1511'.
[  223.983332][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'.
[  224.032339][T13934] netlink: 'syz.1.1512': attribute type 10 has an invalid length.
[  224.040397][T13934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1512'.
[  224.043390][T13934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1512'.
[  224.212551][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'.
[  224.296272][T13949] netlink: 'syz.2.1517': attribute type 10 has an invalid length.
[  224.571725][T13970] syzkaller1: entered promiscuous mode
[  224.574174][T13970] syzkaller1: entered allmulticast mode
[  224.865181][T13984] netlink: 'syz.2.1527': attribute type 10 has an invalid length.
[  225.048769][T13994] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  225.120554][T13999] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  225.123913][T13999] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  225.194568][T14008] netlink: 'syz.1.1535': attribute type 10 has an invalid length.
[  225.223880][T14012] netlink: 'syz.2.1536': attribute type 1 has an invalid length.
[  225.253738][T14012] 8021q: adding VLAN 0 to HW filter on device bond12
[  225.283522][T14012] 8021q: adding VLAN 0 to HW filter on device bond12
[  225.299886][T14012] bond12: (slave vxcan9): The slave device specified does not support setting the MAC address
[  225.305567][T14012] bond12: (slave vxcan9): Error -95 calling set_mac_address
[  225.399674][T14027] netlink: 'syz.0.1538': attribute type 13 has an invalid length.
[  225.426264][T14027] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  225.633060][T14019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.694883][T14019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.973511][T14054] syzkaller1: entered promiscuous mode
[  225.975694][T14054] syzkaller1: entered allmulticast mode
[  226.078764][T14059] batman_adv: batadv0: Interface deactivated: dummy0
[  226.082829][T14059] batman_adv: batadv0: Removing interface: dummy0
[  226.087008][T14059] bond12: (slave gretap1): Releasing active interface
[  226.089766][T14059] gretap1: left promiscuous mode
[  226.091889][T14059] gretap1: left allmulticast mode
[  227.122863][T14113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.474418][T14143] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  227.479435][T14143] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  227.588564][T14152] validate_nla: 9 callbacks suppressed
[  227.588585][T14152] netlink: 'syz.0.1567': attribute type 1 has an invalid length.
[  227.619056][T14152] 8021q: adding VLAN 0 to HW filter on device bond11
[  227.657628][T14152] 8021q: adding VLAN 0 to HW filter on device bond11
[  227.660701][T14152] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  227.665884][T14152] bond11: (slave vxcan1): Error -95 calling set_mac_address
[  227.723811][T14162] veth17: entered promiscuous mode
[  227.734744][T14162] bond11: (slave veth17): Enslaving as an active interface with a down link
[  227.929224][T14183] netlink: 'syz.1.1570': attribute type 10 has an invalid length.
[  228.345643][T14216] netlink: 'syz.1.1578': attribute type 10 has an invalid length.
[  228.519530][T14230] syzkaller1: entered promiscuous mode
[  228.522161][T14230] syzkaller1: entered allmulticast mode
[  228.593185][T14233] __nla_validate_parse: 21 callbacks suppressed
[  228.593204][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'.
[  228.627126][T14233] IPVS: persistence engine module ip_vs_pe_ not found
[  228.723972][T14241] veth0: entered promiscuous mode
[  228.728547][T14241] netlink: 'syz.1.1584': attribute type 1 has an invalid length.
[  228.731387][T14241] netlink: 'syz.1.1584': attribute type 4 has an invalid length.
[  228.734246][T14241] netlink: 'syz.1.1584': attribute type 4 has an invalid length.
[  228.741543][T14241] netlink: 1490 bytes leftover after parsing attributes in process `syz.1.1584'.
[  228.747402][T14241] netlink: 'syz.1.1584': attribute type 1 has an invalid length.
[  228.750620][T14241] netlink: 'syz.1.1584': attribute type 4 has an invalid length.
[  228.753733][T14241] netlink: 'syz.1.1584': attribute type 4 has an invalid length.
[  228.765649][T14241] netlink: 1490 bytes leftover after parsing attributes in process `syz.1.1584'.
[  228.910406][T14237] veth0: left promiscuous mode
[  228.987929][T14246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1585'.
[  229.017749][T14246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1585'.
[  229.074889][T14249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1587'.
[  229.079708][T14249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1587'.
[  229.082638][T14249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1587'.
[  229.538616][T14270] netlink: 'syz.1.1591': attribute type 10 has an invalid length.
[  230.015995][T14268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1592'.
[  230.051174][T14274] 8021q: adding VLAN 0 to HW filter on device bond12
[  230.253072][T14283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.332393][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'.
[  230.390143][T14283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.482631][T14283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.578613][T14283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.603413][T14306] syzkaller1: entered promiscuous mode
[  230.606026][T14306] syzkaller1: entered allmulticast mode
[  230.685858][ T5867] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.706394][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.726637][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.752159][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.772365][T14315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.781192][T14315] syzkaller0: entered promiscuous mode
[  230.784325][T14315] syzkaller0: entered allmulticast mode
[  230.790476][T14315] syzkaller0: mtu less than device minimum
[  230.799321][T14314] tipc: Resetting bearer <eth:syzkaller0>
[  230.841263][T14314] tipc: Disabling bearer <eth:syzkaller0>
[  230.933712][T14327] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20002
[  230.936675][T14326] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20002
[  231.009638][T14330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  231.095559][   T33] audit: type=1800 audit(1758657543.470:2): pid=14331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1606" name="memory.events" dev="tmpfs" ino=2838 res=0 errno=0
[  231.516101][T14357] IPVS: sed: FWM 3 0x00000003 - no destination available
[  231.527020][    C0] IPVS: sed: FWM 3 0x00000003 - no destination available
[  232.812009][T14389] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  232.861167][T14403] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  232.864829][T14403] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  233.580091][T14462] validate_nla: 7 callbacks suppressed
[  233.580105][T14462] netlink: 'syz.2.1635': attribute type 10 has an invalid length.
[  233.641028][T14462] delete_channel: no stack
[  233.766723][T14474] __nla_validate_parse: 13 callbacks suppressed
[  233.774072][T14474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1638'.
[  233.779202][T14474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'.
[  233.862344][T14481] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1641'.
[  233.878195][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'.
[  234.040714][T14491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  234.089677][T14492] netlink: 'syz.1.1643': attribute type 13 has an invalid length.
[  234.092906][T14492] netlink: 'syz.1.1643': attribute type 17 has an invalid length.
[  234.110919][T14493] netlink: 'syz.2.1642': attribute type 16 has an invalid length.
[  234.113483][T14493] netlink: 'syz.2.1642': attribute type 17 has an invalid length.
[  234.118969][T14492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  234.215184][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.218831][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.230693][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.234099][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.308550][T14496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.374610][T14492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.925224][T14504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.119175][T14514] netlink: 'syz.0.1648': attribute type 10 has an invalid length.
[  235.123492][T14515] netlink: 'syz.0.1648': attribute type 10 has an invalid length.
[  235.363951][T14528] syzkaller1: entered promiscuous mode
[  235.366240][T14528] syzkaller1: entered allmulticast mode
[  235.542337][T14530] netlink: 'syz.2.1652': attribute type 10 has an invalid length.
[  235.545484][T14530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1652'.
[  235.612147][T14539] netlink: 'syz.2.1654': attribute type 10 has an invalid length.
[  235.615436][T14537] netlink: 'syz.2.1654': attribute type 10 has an invalid length.
[  236.644425][T14577] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1660'.
[  236.650578][T14579] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1661'.
[  236.656166][T14577] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  236.656624][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'.
[  236.666341][T14577] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  236.673351][T14581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1662'.
[  236.742822][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'.
[  236.926384][T14600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.278545][T14630] IPVS: set_ctl: invalid protocol: 142 255.255.255.255:20000
[  237.805763][T14661] IPVS: persistence engine module ip_vs_pe_ not found
[  237.855723][T14664] bond0: (slave dummy0): Releasing backup interface
[  237.866590][T14664] team0: Port device geneve0 removed
[  237.870455][T14664] bond8: (slave veth19): Releasing active interface
[  237.874753][T14664] bond11: (slave gretap1): Releasing active interface
[  237.879303][T14664] syz.2.1681: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  237.883814][T14664] CPU: 0 UID: 0 PID: 14664 Comm: syz.2.1681 Not tainted syzkaller #0 PREEMPT(full) 
[  237.883828][T14664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.883834][T14664] Call Trace:
[  237.883839][T14664]  <TASK>
[  237.883844][T14664]  dump_stack_lvl+0x189/0x250
[  237.883860][T14664]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.883870][T14664]  ? __pfx__printk+0x10/0x10
[  237.883883][T14664]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  237.883894][T14664]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  237.883904][T14664]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  237.883930][T14664]  warn_alloc+0x214/0x310
[  237.883945][T14664]  ? stack_depot_save_flags+0x40/0x860
[  237.883960][T14664]  ? __pfx_warn_alloc+0x10/0x10
[  237.883974][T14664]  ? kasan_save_track+0x4f/0x80
[  237.883986][T14664]  ? xskq_create+0x56/0x170
[  237.883994][T14664]  ? xsk_init_queue+0xb0/0x110
[  237.884000][T14664]  ? xsk_setsockopt+0x4dc/0x8d0
[  237.884011][T14664]  ? do_sock_setsockopt+0x17c/0x1b0
[  237.884020][T14664]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  237.884028][T14664]  ? do_syscall_64+0xfa/0x3b0
[  237.884038][T14664]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.884050][T14664]  __vmalloc_node_range_noprof+0x125/0x12f0
[  237.884075][T14664]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  237.884089][T14664]  ? __kasan_kmalloc+0x93/0xb0
[  237.884101][T14664]  vmalloc_user_noprof+0xad/0xf0
[  237.884113][T14664]  ? xskq_create+0xbf/0x170
[  237.884121][T14664]  xskq_create+0xbf/0x170
[  237.884129][T14664]  xsk_init_queue+0xb0/0x110
[  237.884138][T14664]  xsk_setsockopt+0x4dc/0x8d0
[  237.884150][T14664]  ? __pfx_xsk_setsockopt+0x10/0x10
[  237.884166][T14664]  ? __pfx_aa_sk_perm+0x10/0x10
[  237.884182][T14664]  ? aa_sock_opt_perm+0xff/0x1b0
[  237.884192][T14664]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  237.884201][T14664]  ? __pfx_xsk_setsockopt+0x10/0x10
[  237.884213][T14664]  do_sock_setsockopt+0x17c/0x1b0
[  237.884225][T14664]  __x64_sys_setsockopt+0x13f/0x1b0
[  237.884238][T14664]  do_syscall_64+0xfa/0x3b0
[  237.884247][T14664]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.884255][T14664]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.884262][T14664]  ? exc_page_fault+0x9f/0xf0
[  237.884271][T14664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.884279][T14664] RIP: 0033:0x7fa64e38ec29
[  237.884287][T14664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.884294][T14664] RSP: 002b:00007fa64f1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  237.884303][T14664] RAX: ffffffffffffffda RBX: 00007fa64e5d5fa0 RCX: 00007fa64e38ec29
[  237.884309][T14664] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  237.884314][T14664] RBP: 00007fa64e411e41 R08: 0000000000000004 R09: 0000000000000000
[  237.884319][T14664] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.884325][T14664] R13: 00007fa64e5d6038 R14: 00007fa64e5d5fa0 R15: 00007ffd81e9b088
[  237.884338][T14664]  </TASK>
[  237.884468][T14664] Mem-Info:
[  238.004665][T14664] active_anon:9255 inactive_anon:0 isolated_anon:0
[  238.004665][T14664]  active_file:1506 inactive_file:38308 isolated_file:0
[  238.004665][T14664]  unevictable:1768 dirty:187 writeback:0
[  238.004665][T14664]  slab_reclaimable:11062 slab_unreclaimable:121875
[  238.004665][T14664]  mapped:21370 shmem:5307 pagetables:1150
[  238.004665][T14664]  sec_pagetables:0 bounce:0
[  238.004665][T14664]  kernel_misc_reclaimable:0
[  238.004665][T14664]  free:210509 free_pcp:25683 free_cma:0
[  238.067033][T14664] Node 0 active_anon:21972kB inactive_anon:0kB active_file:5000kB inactive_file:22132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36936kB dirty:704kB writeback:0kB shmem:10924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7132kB pagetables:2216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  238.095401][T14664] Node 1 active_anon:9200kB inactive_anon:0kB active_file:1024kB inactive_file:131100kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36916kB dirty:44kB writeback:0kB shmem:4796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5892kB pagetables:2316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  238.126077][T14664] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  238.138343][T14664] lowmem_reserve[]: 0 811 811 811 811
[  238.140637][T14664] Node 0 DMA32 free:158316kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16124kB inactive_anon:0kB active_file:5000kB inactive_file:22132kB unevictable:3536kB writepending:704kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:60116kB local_pcp:25912kB free_cma:0kB
[  238.191785][T14664] lowmem_reserve[]: 0 0 0 0 0
[  238.193632][T14664] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  238.238696][T14664] lowmem_reserve[]: 0 0 854 854 854
[  238.240903][T14664] Node 1 Normal free:209360kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9336kB inactive_anon:0kB active_file:1024kB inactive_file:131100kB unevictable:3536kB writepending:44kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:54804kB local_pcp:20748kB free_cma:0kB
[  238.250855][T14682] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  238.256300][T14682] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  238.275045][T14664] lowmem_reserve[]: 0 0 0 0 0
[  238.308589][T14664] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  238.314024][T14664] Node 0 DMA32: 1371*4kB (UME) 622*8kB (UME) 144*16kB (UME) 7*32kB (UM) 3*64kB (UE) 86*128kB (UME) 52*256kB (UME) 28*512kB (UM) 14*1024kB (UME) 3*2048kB (U) 21*4096kB (UM) = 158332kB
[  238.329295][T14664] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  238.358980][T14664] Node 1 Normal: 1174*4kB (UME) 363*8kB (UME) 304*16kB (UME) 369*32kB (UME) 277*64kB (UME) 145*128kB (UME) 58*256kB (UME) 17*512kB (UM) 10*1024kB (UME) 4*2048kB (UM) 26*4096kB (UM) = 209040kB
[  238.366428][T14664] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  238.371689][T14664] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  238.375501][T14664] 42265 total pagecache pages
[  238.378119][T14664] 0 pages in swap cache
[  238.379937][T14664] Free swap  = 124996kB
[  238.381798][T14664] Total swap = 124996kB
[  238.383330][T14664] 786301 pages RAM
[  238.384740][T14664] 0 pages HighMem/MovableOnly
[  238.396905][T14664] 241346 pages reserved
[  238.398439][T14664] 0 pages cma reserved
[  238.766200][T14717] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:0
[  238.905232][T14729] validate_nla: 3 callbacks suppressed
[  238.905249][T14729] netlink: 'syz.0.1690': attribute type 27 has an invalid length.
[  239.003182][T14738] netlink: 'syz.2.1691': attribute type 13 has an invalid length.
[  239.009756][T14738] netlink: 'syz.2.1691': attribute type 17 has an invalid length.
[  239.031947][T14729] bridge2: left promiscuous mode
[  239.034209][T14729] bridge2: left allmulticast mode
[  239.038869][T14729] veth15: left promiscuous mode
[  239.049654][T14729] veth17: left promiscuous mode
[  239.094418][T14736] __nla_validate_parse: 6 callbacks suppressed
[  239.094435][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1692'.
[  239.149232][T14738] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.155205][T14738] 8021q: adding VLAN 0 to HW filter on device team0
[  239.165433][T14738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.185992][T14746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1693'.
[  239.278339][T14730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  239.380392][T14760] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1695'.
[  240.142164][T14774] netlink: 'syz.0.1697': attribute type 12 has an invalid length.
[  240.148683][T14774] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1697'.
[  240.217148][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  240.281084][T14782] netlink: 'syz.2.1700': attribute type 10 has an invalid length.
[  240.369174][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'.
[  240.550831][T14795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.602696][T14806] pim6reg: entered allmulticast mode
[  240.609919][T14805] netlink: 'syz.2.1703': attribute type 10 has an invalid length.
[  240.662005][T14811] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1704'.
[  240.712799][T14804] pim6reg: left allmulticast mode
[  240.740598][T14814] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1705'.
[  241.114281][T14832] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1708'.
[  241.955260][T14842] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  242.084535][T14845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.091685][T14845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.113072][T14855] netlink: 'syz.0.1714': attribute type 2 has an invalid length.
[  242.125333][T14855] k*: entered promiscuous mode
[  242.162860][T14855] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.169238][T14855] 8021q: adding VLAN 0 to HW filter on device team0
[  242.176203][T14855] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  242.260957][T14858] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1715'.
[  242.266599][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1715'.
[  242.387280][T14863] netlink: 'syz.0.1717': attribute type 10 has an invalid length.
[  242.803468][T14879] netlink: 'syz.2.1722': attribute type 10 has an invalid length.
[  260.782380][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  283.322718][T14895] __nla_validate_parse: 4 callbacks suppressed
[  283.322735][T14895] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1725'.
[  283.329742][T14895] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  283.333477][T14895] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  283.338665][T14894] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1724'.
[  283.379008][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'.
[  283.403275][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'.
[  283.537487][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'.
[  283.582421][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1729'.
[  283.600167][T14917] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1730'.
[  283.603361][T14917] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  283.606000][T14917] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  283.671215][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.712009][T14924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1732'.
[  283.715940][T14926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1732'.
[  283.736037][T14932] netlink: 'syz.1.1733': attribute type 13 has an invalid length.
[  283.741364][T14932] netlink: 'syz.1.1733': attribute type 17 has an invalid length.
[  283.775729][T14932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.911004][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'.
[  283.927984][T14927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.992377][T14927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.091177][T14964] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  284.093689][T14964] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  284.313991][T14975] netlink: 'syz.2.1740': attribute type 1 has an invalid length.
[  284.338887][T14975] 8021q: adding VLAN 0 to HW filter on device bond13
[  284.377558][T14978] netlink: 'syz.0.1741': attribute type 101 has an invalid length.
[  284.635870][T14999] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  284.640860][T14999] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  284.681618][T14995] bond10: (slave veth15): Releasing active interface
[  284.688650][T14995] bond11: (slave veth17): Releasing active interface
[  284.745424][T15009] netlink: 'syz.0.1744': attribute type 10 has an invalid length.
[  284.794461][T14993] netlink: 'syz.1.1745': attribute type 10 has an invalid length.
[  285.854282][T15051] netlink: 'syz.1.1753': attribute type 15 has an invalid length.
[  285.916469][T15061] netlink: 'syz.1.1753': attribute type 10 has an invalid length.
[  286.123364][T15079] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  286.752386][T15090] netlink: 'syz.2.1760': attribute type 10 has an invalid length.
[  287.061410][T15115] netlink: 'syz.0.1762': attribute type 9 has an invalid length.
[  287.413419][T15136] 8021q: adding VLAN 0 to HW filter on device bond13
[  287.442692][T15142] 8021q: adding VLAN 0 to HW filter on device bond13
[  287.446191][T15142] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  287.452976][T15142] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  287.503115][T15136] veth19: entered promiscuous mode
[  287.510893][T15136] bond13: (slave veth19): Enslaving as an active interface with a down link
[  287.891370][T15182] 8021q: adding VLAN 0 to HW filter on device bond14
[  287.930921][T15182] veth21: entered promiscuous mode
[  287.947558][T15182] bond14: (slave veth21): Enslaving as an active interface with a down link
[  288.463136][T15233] __nla_validate_parse: 21 callbacks suppressed
[  288.463160][T15233] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1784'.
[  288.475745][T15235] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1784'.
[  288.494018][T15233] net_ratelimit: 2 callbacks suppressed
[  288.494044][T15233] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  288.501134][T15235] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  288.504660][T15235] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  288.512905][T15233] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  288.690185][T15257] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1787'.
[  288.738525][T15257] validate_nla: 6 callbacks suppressed
[  288.738577][T15257] netlink: 'syz.0.1787': attribute type 13 has an invalid length.
[  288.971134][T15285] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  289.042408][T15291] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1793'.
[  289.265151][T15298] netlink: 'syz.2.1794': attribute type 10 has an invalid length.
[  289.581070][T15321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1799'.
[  289.641708][T15325] netlink: 'syz.2.1799': attribute type 10 has an invalid length.
[  289.975060][T15345] netlink: 'syz.2.1803': attribute type 1 has an invalid length.
[  289.979995][T15345] netlink: 'syz.2.1803': attribute type 2 has an invalid length.
[  289.985675][T15345] netlink: 'syz.2.1803': attribute type 1 has an invalid length.
[  289.990413][T15345] netlink: 'syz.2.1803': attribute type 2 has an invalid length.
[  290.467709][T15371] netlink: 'syz.1.1807': attribute type 13 has an invalid length.
[  290.471288][T15371] netlink: 'syz.1.1807': attribute type 17 has an invalid length.
[  290.482279][T15371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.618143][T15370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1807'.
[  291.049253][T15387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1810'.
[  291.260083][T15398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.391132][T15405] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1815'.
[  291.395025][T15405] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  291.449397][T15405] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  291.484252][T15412] netlink: 'syz.2.1816': attribute type 13 has an invalid length.
[  291.493253][T15412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.745336][T15434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1819'.
[  291.750904][T15434] tipc: Invalid UDP bearer configuration
[  291.750942][T15434] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  291.809862][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'.
[  291.981979][T15447] team0: Port device dummy0 added
[  292.371322][T15471] bond15: entered promiscuous mode
[  292.376104][T15471] 8021q: adding VLAN 0 to HW filter on device bond15
[  292.524457][T15471] bond15 (unregistering): Released all slaves
[  293.096594][T15500] 8021q: adding VLAN 0 to HW filter on device bond16
[  293.141036][T15502] 8021q: adding VLAN 0 to HW filter on device bond16
[  293.144496][T15502] bond16: (slave vxcan5): The slave device specified does not support setting the MAC address
[  293.150904][T15502] bond16: (slave vxcan5): Error -95 calling set_mac_address
[  293.179464][T15504] veth19: entered promiscuous mode
[  293.184770][T15504] bond16: (slave veth19): Enslaving as an active interface with a down link
[  293.266104][T15511] team0: Port device dummy0 added
[  294.013317][T15542] __nla_validate_parse: 7 callbacks suppressed
[  294.013340][T15542] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1843'.
[  294.022413][T15542] net_ratelimit: 4 callbacks suppressed
[  294.022433][T15542] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  294.029163][T15542] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  294.223316][T15545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'.
[  294.367847][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'.
[  294.955672][T15558] sctp: [Deprecated]: syz.1.1847 (pid 15558) Use of struct sctp_assoc_value in delayed_ack socket option.
[  294.955672][T15558] Use struct sctp_sack_info instead
[  295.180936][T15580] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1851'.
[  295.187388][T15580] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  295.190822][T15580] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  295.292393][T15586] validate_nla: 7 callbacks suppressed
[  295.292417][T15586] netlink: 'syz.0.1852': attribute type 10 has an invalid length.
[  295.300222][T15590] netlink: 'syz.2.1853': attribute type 1 has an invalid length.
[  295.305099][T15591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1853'.
[  295.307970][T15590] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  295.344601][T15580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'.
[  295.405550][T15597] netlink: 'syz.0.1854': attribute type 1 has an invalid length.
[  295.584710][T15609] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1858'.
[  295.607584][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'.
[  296.086578][T15643] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  296.092299][T15643] netlink: 'syz.0.1866': attribute type 1 has an invalid length.
[  296.095049][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'.
[  296.132859][T15646] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1867'.
[  296.193600][T15648] netlink: 'syz.0.1868': attribute type 10 has an invalid length.
[  296.248550][T15652] openvswitch: netlink: IPv6 tunnel dst address is zero
[  297.358383][T15676] netlink: 'syz.1.1877': attribute type 1 has an invalid length.
[  297.364301][T15676] netlink: 'syz.1.1877': attribute type 1 has an invalid length.
[  297.695105][T15695] netlink: 'syz.1.1879': attribute type 13 has an invalid length.
[  297.708587][T15695] netlink: 'syz.1.1879': attribute type 17 has an invalid length.
[  297.727951][T15695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  298.347465][T15699] netlink: 'syz.2.1880': attribute type 15 has an invalid length.
[  298.456149][T15708] veth19: left promiscuous mode
[  298.458788][T15708] veth21: left promiscuous mode
[  298.475836][T15709] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  298.521695][T15708] hsr_slave_0: left promiscuous mode
[  298.546665][T15708] hsr_slave_1: left promiscuous mode
[  299.730743][T15760] __nla_validate_parse: 8 callbacks suppressed
[  299.730768][T15760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1894'.
[  299.750228][T15760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1894'.
[  299.813421][T15762] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1895'.
[  299.818175][T15762] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  299.822184][T15762] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  299.900684][T15766] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1896'.
[  299.904566][T15766] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  299.910003][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1895'.
[  299.911808][T15766] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  299.985400][T15774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'.
[  300.899966][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  300.937556][T15790] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  300.951476][T15790] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  300.957664][T15822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1903'.
[  300.995759][T15790] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  300.999159][T15790] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  301.014623][T15824] validate_nla: 3 callbacks suppressed
[  301.014637][T15824] netlink: 'syz.1.1905': attribute type 1 has an invalid length.
[  301.054341][T15824] 8021q: adding VLAN 0 to HW filter on device bond17
[  301.082165][T15824] veth21: entered promiscuous mode
[  301.248880][T15839] netlink: 'syz.0.1909': attribute type 3 has an invalid length.
[  301.326672][T15850] syzkaller0: entered promiscuous mode
[  301.331984][T15850] syzkaller0: entered allmulticast mode
[  301.451660][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1910'.
[  301.457025][T15847] netlink: 'syz.1.1910': attribute type 10 has an invalid length.
[  301.780055][T15874] netlink: 'syz.1.1915': attribute type 13 has an invalid length.
[  301.782687][T15874] netlink: 'syz.1.1915': attribute type 17 has an invalid length.
[  301.808545][T15874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  301.904823][T15876] netlink: 'syz.2.1917': attribute type 6 has an invalid length.
[  301.964671][T15879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1915'.
[  302.233905][T15886] netlink: 'syz.2.1919': attribute type 11 has an invalid length.
[  302.436540][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1921'.
[  303.274620][T15912] netlink: 'syz.1.1925': attribute type 1 has an invalid length.
[  303.306059][T15912] 8021q: adding VLAN 0 to HW filter on device bond18
[  303.331663][T15912] 8021q: adding VLAN 0 to HW filter on device bond18
[  303.335292][T15912] bond18: (slave vxcan5): The slave device specified does not support setting the MAC address
[  303.341946][T15912] bond18: (slave vxcan5): Error -95 calling set_mac_address
[  303.385209][T15914] veth21: entered promiscuous mode
[  303.392944][T15914] bond18: (slave veth21): Enslaving as an active interface with a down link
[  303.686153][T15925] syz_tun: entered allmulticast mode
[  303.962380][T15959] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode
[  303.969930][T15959] team0: Port device dummy0 removed
[  303.973297][T15959] bond13: (slave veth19): Releasing active interface
[  303.980788][T15959] bond14: (slave veth21): Releasing active interface
[  303.993647][T15959] netlink: 'syz.0.1937': attribute type 10 has an invalid length.
[  304.025916][T15963] netlink: 'syz.1.1939': attribute type 1 has an invalid length.
[  304.039560][T15967] netlink: 'syz.0.1940': attribute type 23 has an invalid length.
[  304.060564][T15963] 8021q: adding VLAN 0 to HW filter on device bond19
[  322.212919][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  383.651816][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  445.092337][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  453.407165][   T34] INFO: task kworker/1:6:7991 blocked for more than 143 seconds.
[  453.410616][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  453.417804][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  453.421138][   T34] task:kworker/1:6     state:D stack:24584 pid:7991  tgid:7991  ppid:2      task_flags:0x4208060 flags:0x00004000
[  453.426464][   T34] Workqueue: events rfkill_sync_work
[  453.429487][   T34] Call Trace:
[  453.431314][   T34]  <TASK>
[  453.436957][   T34]  __schedule+0x1798/0x4cc0
[  453.439067][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  453.441423][   T34]  ? __pfx___schedule+0x10/0x10
[  453.443547][   T34]  ? schedule+0x91/0x360
[  453.445462][   T34]  schedule+0x165/0x360
[  453.460476][   T34]  schedule_preempt_disabled+0x13/0x30
[  453.467714][   T34]  __mutex_lock+0x7e6/0x1350
[  453.470255][   T34]  ? __mutex_lock+0x5bb/0x1350
[  453.472352][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  453.474853][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  453.477587][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.480050][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  453.482891][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  453.486484][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  453.490241][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  453.492171][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  453.494230][   T34]  rfkill_set_block+0x1d2/0x440
[  453.495990][   T34]  rfkill_sync_work+0x114/0x200
[  453.498169][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  453.500625][   T34]  process_scheduled_works+0xae1/0x17b0
[  453.503113][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  453.505707][   T34]  worker_thread+0x8a0/0xda0
[  453.508046][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  453.510717][   T34]  ? __kthread_parkme+0x7b/0x200
[  453.513126][   T34]  kthread+0x711/0x8a0
[  453.514640][   T34]  ? __pfx_worker_thread+0x10/0x10
[  453.516366][   T34]  ? __pfx_kthread+0x10/0x10
[  453.518624][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  453.521284][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.523302][   T34]  ? __pfx_kthread+0x10/0x10
[  453.525100][   T34]  ret_from_fork+0x439/0x7d0
[  453.527175][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  453.528884][   T34]  ? __switch_to_asm+0x39/0x70
[  453.530580][   T34]  ? __switch_to_asm+0x33/0x70
[  453.532484][   T34]  ? __pfx_kthread+0x10/0x10
[  453.534535][   T34]  ret_from_fork_asm+0x1a/0x30
[  453.536672][   T34]  </TASK>
[  453.538806][   T34] INFO: task kworker/1:7:13158 blocked for more than 143 seconds.
[  453.542290][   T34]       Not tainted syzkaller #0
[  453.544407][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  453.547851][   T34] task:kworker/1:7     state:D stack:25528 pid:13158 tgid:13158 ppid:2      task_flags:0x4208060 flags:0x00004000
[  453.552807][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  453.555830][   T34] Call Trace:
[  453.557644][   T34]  <TASK>
[  453.558925][   T34]  __schedule+0x1798/0x4cc0
[  453.560953][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  453.563341][   T34]  ? __pfx___schedule+0x10/0x10
[  453.565524][   T34]  ? schedule+0x91/0x360
[  453.567647][   T34]  schedule+0x165/0x360
[  453.569426][   T34]  schedule_preempt_disabled+0x13/0x30
[  453.572320][   T34]  __mutex_lock+0x7e6/0x1350
[  453.574095][   T34]  ? __mutex_lock+0x5bb/0x1350
[  453.575838][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  453.578477][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  453.580333][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  453.582309][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  453.584468][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  453.587769][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  453.590274][   T34]  process_scheduled_works+0xae1/0x17b0
[  453.593249][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  453.595853][   T34]  worker_thread+0x8a0/0xda0
[  453.597749][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  453.599887][   T34]  ? __kthread_parkme+0x7b/0x200
[  453.601609][   T34]  kthread+0x711/0x8a0
[  453.603118][   T34]  ? __pfx_worker_thread+0x10/0x10
[  453.605050][   T34]  ? __pfx_kthread+0x10/0x10
[  453.607327][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  453.609540][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.611299][   T34]  ? __pfx_kthread+0x10/0x10
[  453.612800][   T34]  ret_from_fork+0x439/0x7d0
[  453.614306][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  453.615991][   T34]  ? __switch_to_asm+0x39/0x70
[  453.617835][   T34]  ? __switch_to_asm+0x33/0x70
[  453.619616][   T34]  ? __pfx_kthread+0x10/0x10
[  453.621445][   T34]  ret_from_fork_asm+0x1a/0x30
[  453.623284][   T34]  </TASK>
[  453.624471][   T34] INFO: task syz.2.1921:15890 blocked for more than 143 seconds.
[  453.627325][   T34]       Not tainted syzkaller #0
[  453.628919][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  453.631686][   T34] task:syz.2.1921      state:D stack:25096 pid:15890 tgid:15890 ppid:5860   task_flags:0x400040 flags:0x00004004
[  453.635730][   T34] Call Trace:
[  453.637312][   T34]  <TASK>
[  453.638486][   T34]  __schedule+0x1798/0x4cc0
[  453.640317][   T34]  ? validate_chain+0x897/0x2140
[  453.642099][   T34]  ? __lock_acquire+0xab9/0xd20
[  453.643756][   T34]  ? __pfx___schedule+0x10/0x10
[  453.645300][   T34]  ? schedule+0x91/0x360
[  453.646699][   T34]  schedule+0x165/0x360
[  453.648299][   T34]  schedule_timeout+0x9a/0x270
[  453.650025][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  453.652068][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  453.654060][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.656103][   T34]  ? wait_for_completion+0x267/0x5d0
[  453.658322][   T34]  wait_for_completion+0x2bf/0x5d0
[  453.660344][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  453.662330][   T34]  ? __flush_work+0xd2/0xbc0
[  453.663899][   T34]  ? __flush_work+0xd2/0xbc0
[  453.665431][   T34]  __flush_work+0x9b9/0xbc0
[  453.667609][   T34]  ? __flush_work+0xd2/0xbc0
[  453.669391][   T34]  ? __pfx___flush_work+0x10/0x10
[  453.671486][   T34]  ? __pfx_wq_barrier_func+0x10/0x10
[  453.673975][   T34]  ? __pfx___cancel_work+0x10/0x10
[  453.676142][   T34]  ? nfc_genl_device_removed+0x23c/0x330
[  453.678684][   T34]  __cancel_work_sync+0xbe/0x110
[  453.680842][   T34]  rfkill_unregister+0x92/0x220
[  453.683060][   T34]  nfc_unregister_device+0x96/0x2a0
[  453.685573][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  453.688521][   T34]  virtual_ncidev_close+0x56/0x90
[  453.690841][   T34]  __fput+0x44c/0xa70
[  453.692462][   T34]  task_work_run+0x1d4/0x260
[  453.694437][   T34]  ? __pfx_task_work_run+0x10/0x10
[  453.696574][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  453.699343][   T34]  exit_to_user_mode_loop+0xec/0x110
[  453.701840][   T34]  do_syscall_64+0x2bd/0x3b0
[  453.704027][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.706541][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.709374][   T34]  ? exc_page_fault+0x9f/0xf0
[  453.710988][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.713237][   T34] RIP: 0033:0x7fa64e38ec29
[  453.715079][   T34] RSP: 002b:00007ffd81e9b1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  453.721030][   T34] RAX: 0000000000000000 RBX: 00007fa64e5d7da0 RCX: 00007fa64e38ec29
[  453.724598][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  453.728329][   T34] RBP: 00007fa64e5d7da0 R08: 0000000000000000 R09: 0000001981e9b4df
[  453.731833][   T34] R10: 000000000003fce8 R11: 0000000000000246 R12: 000000000004a00c
[  453.735498][   T34] R13: 00007fa64e5d6180 R14: ffffffffffffffff R15: 00007ffd81e9b300
[  453.740745][   T34]  </TASK>
[  453.742257][   T34] INFO: task syz.1.1939:15963 blocked for more than 143 seconds.
[  453.745460][   T34]       Not tainted syzkaller #0
[  453.748021][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  453.751897][   T34] task:syz.1.1939      state:D stack:23224 pid:15963 tgid:15962 ppid:5855   task_flags:0x400140 flags:0x00004004
[  453.758522][   T34] Call Trace:
[  453.759937][   T34]  <TASK>
[  453.761138][   T34]  __schedule+0x1798/0x4cc0
[  453.763258][   T34]  ? __lock_acquire+0xab9/0xd20
[  453.765683][   T34]  ? __lock_acquire+0xab9/0xd20
[  453.767800][   T34]  ? __pfx___schedule+0x10/0x10
[  453.769573][   T34]  ? schedule+0x91/0x360
[  453.770989][   T34]  schedule+0x165/0x360
[  453.772318][   T34]  schedule_preempt_disabled+0x13/0x30
[  453.774184][   T34]  __mutex_lock+0x7e6/0x1350
[  453.775760][   T34]  ? __mutex_lock+0x5bb/0x1350
[  453.778868][   T34]  ? genl_rcv_msg+0x10d/0x790
[  453.780816][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  453.782925][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  453.784988][   T34]  ? radix_tree_lookup+0x240/0x290
[  453.787327][   T34]  genl_rcv_msg+0x10d/0x790
[  453.788878][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.790725][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  453.792962][   T34]  ? __asan_memcpy+0x40/0x70
[  453.794950][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  453.798850][   T34]  netlink_rcv_skb+0x208/0x470
[  453.800704][   T34]  ? __lock_acquire+0xab9/0xd20
[  453.802828][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.804598][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  453.806411][   T34]  ? down_read+0x1ad/0x2e0
[  453.808184][   T34]  genl_rcv+0x28/0x40
[  453.809723][   T34]  netlink_unicast+0x82f/0x9e0
[  453.811422][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  453.813628][   T34]  ? netlink_sendmsg+0x642/0xb30
[  453.815791][   T34]  ? skb_put+0x11b/0x210
[  453.817524][   T34]  netlink_sendmsg+0x805/0xb30
[  453.819166][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.821244][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  453.822930][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  453.824727][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.827086][   T34]  __sock_sendmsg+0x21c/0x270
[  453.828854][   T34]  __sys_sendto+0x3bd/0x520
[  453.830634][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  453.832545][   T34]  ? count_memcg_event_mm+0x21/0x260
[  453.834844][   T34]  ? exc_page_fault+0x76/0xf0
[  453.836972][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  453.839343][   T34]  __x64_sys_sendto+0xde/0x100
[  453.841449][   T34]  do_syscall_64+0xfa/0x3b0
[  453.843580][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.846154][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.849151][   T34]  ? exc_page_fault+0x9f/0xf0
[  453.851154][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.853919][   T34] RIP: 0033:0x7fd53c990abc
[  453.855682][   T34] RSP: 002b:00007fd53d7e8e60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  453.859265][   T34] RAX: ffffffffffffffda RBX: 00007fd53d7e8fa0 RCX: 00007fd53c990abc
[  453.862176][   T34] RDX: 0000000000000020 RSI: 00007fd53d7e8ff0 RDI: 0000000000000009
[  453.865001][   T34] RBP: 0000000000000000 R08: 00007fd53d7e8eb4 R09: 000000000000000c
[  453.868706][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009
[  453.871626][   T34] R13: 00007fd53d7e8f08 R14: 00007fd53d7e8ff0 R15: 0000000000000000
[  453.874491][   T34]  </TASK>
[  453.875805][   T34] INFO: task syz.0.1940:15967 blocked for more than 143 seconds.
[  453.878921][   T34]       Not tainted syzkaller #0
[  453.880840][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  453.884094][   T34] task:syz.0.1940      state:D stack:23528 pid:15967 tgid:15964 ppid:5851   task_flags:0x400140 flags:0x00004004
[  453.888935][   T34] Call Trace:
[  453.890642][   T34]  <TASK>
[  453.891743][   T34]  __schedule+0x1798/0x4cc0
[  453.893442][   T34]  ? __lock_acquire+0xab9/0xd20
[  453.895171][   T34]  ? __lock_acquire+0xab9/0xd20
[  453.897007][   T34]  ? __pfx___schedule+0x10/0x10
[  453.899106][   T34]  ? schedule+0x91/0x360
[  453.900604][   T34]  schedule+0x165/0x360
[  453.902029][   T34]  schedule_preempt_disabled+0x13/0x30
[  453.903879][   T34]  __mutex_lock+0x7e6/0x1350
[  453.905468][   T34]  ? rcu_is_watching+0x15/0xb0
[  453.907382][   T34]  ? __mutex_lock+0x5bb/0x1350
[  453.909102][   T34]  ? rfkill_register+0x37/0x8e0
[  453.910788][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  453.912508][   T34]  ? netdev_run_todo+0xe1d/0xea0
[  453.914267][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.916126][   T34]  ? __pfx_netdev_run_todo+0x10/0x10
[  453.918166][   T34]  ? __pfx_mod_delayed_work_on+0x10/0x10
[  453.920167][   T34]  rfkill_register+0x37/0x8e0
[  453.921862][   T34]  wiphy_register+0x214c/0x28d0
[  453.923611][   T34]  ? __pfx_wiphy_register+0x10/0x10
[  453.925425][   T34]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  453.927741][   T34]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  453.930144][   T34]  ieee80211_register_hw+0x3484/0x4100
[  453.932006][   T34]  ? ieee80211_register_hw+0x1461/0x4100
[  453.933928][   T34]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  453.936285][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  453.938877][   T34]  ? __hrtimer_setup+0x187/0x210
[  453.940764][   T34]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  453.942977][   T34]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  453.945569][   T34]  ? __pfx__printk+0x10/0x10
[  453.947985][   T34]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  453.950747][   T34]  ? __nla_validate_parse+0x2400/0x2d40
[  453.953167][   T34]  ? __sock_sendmsg+0x21c/0x270
[  453.955498][   T34]  ? ____sys_sendmsg+0x505/0x830
[  453.957852][   T34]  hwsim_new_radio_nl+0xea4/0x1b10
[  453.960246][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  453.962851][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  453.965398][   T34]  ? __nla_parse+0x40/0x60
[  453.967797][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  453.970355][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  453.972891][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  453.975521][   T34]  ? bpf_lsm_capable+0x9/0x20
[  453.977478][   T34]  ? security_capable+0x7e/0x2e0
[  453.979414][   T34]  genl_rcv_msg+0x60e/0x790
[  453.981263][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.983550][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  453.985894][   T34]  netlink_rcv_skb+0x208/0x470
[  453.988464][   T34]  ? __lock_acquire+0xab9/0xd20
[  453.990677][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.992564][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  453.994778][   T34]  ? down_read+0x1ad/0x2e0
[  453.996380][   T34]  genl_rcv+0x28/0x40
[  453.998486][   T34]  netlink_unicast+0x82f/0x9e0
[  454.000213][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  454.002044][   T34]  ? netlink_sendmsg+0x642/0xb30
[  454.004096][   T34]  ? skb_put+0x11b/0x210
[  454.005874][   T34]  netlink_sendmsg+0x805/0xb30
[  454.007831][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  454.010124][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  454.012230][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  454.014667][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  454.017068][   T34]  __sock_sendmsg+0x21c/0x270
[  454.018930][   T34]  ____sys_sendmsg+0x505/0x830
[  454.021081][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  454.023699][   T34]  ? import_iovec+0x74/0xa0
[  454.025718][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  454.028004][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  454.030271][   T34]  ? __fget_files+0x2a/0x420
[  454.032258][   T34]  ? __fget_files+0x3a0/0x420
[  454.034407][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  454.036688][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  454.039379][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  454.041832][   T34]  ? do_syscall_64+0xbe/0x3b0
[  454.043927][   T34]  do_syscall_64+0xfa/0x3b0
[  454.045849][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  454.048319][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.052073][   T34]  ? exc_page_fault+0x9f/0xf0
[  454.054340][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.057092][   T34] RIP: 0033:0x7facbed8ec29
[  454.059083][   T34] RSP: 002b:00007facbfbfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  454.062576][   T34] RAX: ffffffffffffffda RBX: 00007facbefd6090 RCX: 00007facbed8ec29
[  454.066120][   T34] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000004
[  454.070052][   T34] RBP: 00007facbee11e41 R08: 0000000000000000 R09: 0000000000000000
[  454.073513][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  454.077087][   T34] R13: 00007facbefd6128 R14: 00007facbefd6090 R15: 00007fffea229678
[  454.080661][   T34]  </TASK>
[  454.082208][   T34] 
[  454.082208][   T34] Showing all locks held in the system:
[  454.085794][   T34] 1 lock held by khungtaskd/34:
[  454.088108][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  454.092123][   T34] 2 locks held by getty/5679:
[  454.094008][   T34]  #0: ffff888026f880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  454.098327][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  454.102980][   T34] 4 locks held by kworker/1:6/7991:
[  454.105156][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  454.109954][   T34]  #1: ffffc90003347bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  454.115534][   T34]  #2: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  454.120342][   T34]  #3: ffff888109699100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  454.124192][   T34] 3 locks held by kworker/1:7/13158:
[  454.126373][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  454.131308][   T34]  #1: ffffc90003297bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  454.137411][   T34]  #2: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  454.141876][   T34] 1 lock held by syz.2.1921/15890:
[  454.144129][   T34]  #0: ffff888109699100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  454.148838][   T34] 2 locks held by syz.1.1939/15963:
[  454.151267][   T34]  #0: ffffffff8f59f7f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  454.154784][   T34]  #1: ffffffff8f59f608 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  454.158934][   T34] 3 locks held by syz.0.1940/15967:
[  454.161058][   T34]  #0: ffffffff8f59f7f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  454.164530][   T34]  #1: ffffffff8f59f608 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  454.168770][   T34]  #2: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  454.172796][   T34] 2 locks held by syz-executor/15971:
[  454.174967][   T34]  #0: ffff888110540918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  454.179250][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  454.183518][   T34] 2 locks held by syz-executor/15975:
[  454.185742][   T34]  #0: ffff888122d8b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  454.190203][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  454.194309][   T34] 2 locks held by syz-executor/15976:
[  454.196509][   T34]  #0: ffff888122d88918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  454.200710][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  454.204702][   T34] 2 locks held by syz-executor/15983:
[  454.207160][   T34]  #0: ffff88812510e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  454.211719][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  454.215948][   T34] 2 locks held by syz-executor/15987:
[  454.218469][   T34]  #0: ffff888027be2918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  454.222543][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  454.227109][   T34] 2 locks held by syz-executor/15988:
[  454.229489][   T34]  #0: ffff888125109918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  454.233664][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  454.237820][   T34] 2 locks held by syz-executor/15995:
[  454.240116][   T34]  #0: ffff88803269e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  454.244395][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  454.248733][   T34] 2 locks held by syz-executor/15998:
[  454.250946][   T34]  #0: ffff8880401d8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  454.255133][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  454.260028][   T34] 2 locks held by syz-executor/16000:
[  454.262363][   T34]  #0: ffff88812292d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  454.266503][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  454.270910][   T34] 
[  454.272008][   T34] =============================================
[  454.272008][   T34] 
[  454.275719][   T34] NMI backtrace for cpu 1
[  454.275738][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  454.275754][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  454.275763][   T34] Call Trace:
[  454.275772][   T34]  <TASK>
[  454.275779][   T34]  dump_stack_lvl+0x189/0x250
[  454.275804][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  454.275820][   T34]  ? __pfx__printk+0x10/0x10
[  454.275848][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  454.275870][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  454.275888][   T34]  ? __pfx__printk+0x10/0x10
[  454.275924][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  454.275943][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  454.275959][   T34]  watchdog+0xf93/0xfe0
[  454.275981][   T34]  ? watchdog+0x1de/0xfe0
[  454.276001][   T34]  kthread+0x711/0x8a0
[  454.276020][   T34]  ? __pfx_watchdog+0x10/0x10
[  454.276037][   T34]  ? __pfx_kthread+0x10/0x10
[  454.276053][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  454.276071][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  454.276083][   T34]  ? __pfx_kthread+0x10/0x10
[  454.276099][   T34]  ret_from_fork+0x439/0x7d0
[  454.276114][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  454.276131][   T34]  ? __switch_to_asm+0x39/0x70
[  454.276146][   T34]  ? __switch_to_asm+0x33/0x70
[  454.276161][   T34]  ? __pfx_kthread+0x10/0x10
[  454.276210][   T34]  ret_from_fork_asm+0x1a/0x30
[  454.276238][   T34]  </TASK>
[  454.276244][   T34] Sending NMI from CPU 1 to CPUs 0:
[  454.337592][    C0] NMI backtrace for cpu 0
[  454.337607][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  454.337617][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  454.337622][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  454.337637][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  454.337644][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  454.337652][    C0] RAX: 419b996453831500 RBX: ffffffff819683f8 RCX: 419b996453831500
[  454.337658][    C0] RDX: 0000000000000001 RSI: ffffffff8d9ba373 RDI: ffffffff8be33f80
[  454.337663][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  454.337669][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa3a830
[  454.337674][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  454.337679][    C0] FS:  0000000000000000(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
[  454.337685][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  454.337691][    C0] CR2: 000055dce0aae210 CR3: 00000000278e6000 CR4: 00000000000006f0
[  454.337716][    C0] Call Trace:
[  454.337723][    C0]  <TASK>
[  454.337734][    C0]  default_idle+0x13/0x20
[  454.337746][    C0]  default_idle_call+0x74/0xb0
[  454.337757][    C0]  do_idle+0x1e8/0x510
[  454.337767][    C0]  ? __pfx_do_idle+0x10/0x10
[  454.337778][    C0]  cpu_startup_entry+0x44/0x60
[  454.337784][    C0]  rest_init+0x2de/0x300
[  454.337795][    C0]  start_kernel+0x3a9/0x410
[  454.337808][    C0]  x86_64_start_reservations+0x24/0x30
[  454.337820][    C0]  x86_64_start_kernel+0x143/0x1c0
[  454.337830][    C0]  common_startup_64+0x13e/0x147
[  454.337846][    C0]  </TASK>
[  454.338636][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  454.414182][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  454.417845][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  454.421809][   T34] Call Trace:
[  454.423210][   T34]  <TASK>
[  454.424502][   T34]  dump_stack_lvl+0x99/0x250
[  454.426501][   T34]  ? __asan_memcpy+0x40/0x70
[  454.428599][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  454.430841][   T34]  ? __pfx__printk+0x10/0x10
[  454.432766][   T34]  vpanic+0x281/0x750
[  454.434447][   T34]  ? __pfx_vpanic+0x10/0x10
[  454.436283][   T34]  ? preempt_schedule+0xae/0xc0
[  454.438235][   T34]  ? preempt_schedule_common+0x83/0xd0
[  454.440464][   T34]  panic+0xb9/0xc0
[  454.441986][   T34]  ? __pfx_panic+0x10/0x10
[  454.443883][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  454.446106][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  454.448616][   T34]  watchdog+0xfd2/0xfe0
[  454.450341][   T34]  ? watchdog+0x1de/0xfe0
[  454.452118][   T34]  kthread+0x711/0x8a0
[  454.453868][   T34]  ? __pfx_watchdog+0x10/0x10
[  454.455447][   T34]  ? __pfx_kthread+0x10/0x10
[  454.457178][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  454.459289][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  454.461423][   T34]  ? __pfx_kthread+0x10/0x10
[  454.463019][   T34]  ret_from_fork+0x439/0x7d0
[  454.464807][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  454.466977][   T34]  ? __switch_to_asm+0x39/0x70
[  454.469076][   T34]  ? __switch_to_asm+0x33/0x70
[  454.471192][   T34]  ? __pfx_kthread+0x10/0x10
[  454.473168][   T34]  ret_from_fork_asm+0x1a/0x30
[  454.475140][   T34]  </TASK>
[  454.477256][   T34] Kernel Offset: disabled
[  454.479036][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:02:45  Registers:
info registers vcpu 0

CPU#0
RAX=419b996453831500 RBX=ffffffff819683f8 RCX=419b996453831500 RDX=0000000000000001
RSI=ffffffff8d9ba373 RDI=ffffffff8be33f80 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3a830 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055dce0aae210 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000061 0000003130313038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=696b66722f343679 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=c14f06b416c64300 RDX=0000000000000000
RSI=ffffffff8dba99da RDI=ffffffff8be33f80 RBP=ffffffff822e70ea RSP=ffffc900033574b8
R8 =0000000000000000 R9 =ffffffff822e70ea R10=dffffc0000000000 R11=fffff94000166e49
R12=0000000000000002 R13=ffffffff8e13a1a0 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff819d5e84 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f20e9707d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f20e8ba76c3 00007f20e8ba76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0100000008060601 68d6000800000007 XMM07=0010000100000000 ffffffffff0401c0
XMM08=0302100001b00304 a810001000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
