last executing test programs:

5m6.053388956s ago: executing program 1 (id=6053):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r1=>0x0})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0)
r4 = socket(0x2b, 0x80801, 0xfffffffd)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027c07000fc0400254f000000c3140300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000072000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004)
accept4$llc(r3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000005c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x78}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0x30, 0xc, &(0x7f0000000280)="1bb4f33c511c4c989638d825450b3c6c8abd8cd589f0b4e0ecf733a2eea5f4b258b471b2553db0d7b9c2d5d323fde6e6", &(0x7f0000000340)=""/12, 0x6e, 0x0, 0x85, 0x12, &(0x7f0000000400)="2c2df9eda83131915e317a38150840a7d363b3c4ce8e6796097822f111cf971a38ce202739688af59951f538f713937a2a1c1c47751dab40622298821151d98d68cbb5eba880f15321f74ddbbccd5713635c30009333b5a9c77e6a2638684245f1e93bd5edf05a4dd6ce538f0713b0bc0592f8082d743d62dba448390606a040891eb994d6", &(0x7f0000000500)="2395b73363db3539d973e145fc446a2507bb", 0x5, 0x0, 0x9}, 0x50)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
connect$can_bcm(r3, &(0x7f0000000000)={0x1d, r9}, 0x10)
shutdown(r4, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

5m5.783710781s ago: executing program 1 (id=6055):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)=""/39, &(0x7f0000000240)=0x27)
close(r1)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x18, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2e}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)=ANY=[@ANYBLOB="30000000101401002cbd7000fddbdf2508001d00"], 0x30}}, 0x24001850)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"f929a80e073d3aeb476b3645c1b8167e", 0x0, 0x0, {0x8, 0x2}, {0x1e0, 0x83}, 0x4, [0x3, 0xb18, 0x100000000, 0xffffffffffffffff, 0xe8b, 0x0, 0x1, 0x8, 0xfffffffffffffffe, 0x2, 0x4, 0x10, 0x101, 0x200, 0x3ff, 0x4]})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb0000000000000000000000000000e9d8000100c40a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/81, 0x51}], 0x1, &(0x7f0000000fc0)=""/4096, 0x1000}, 0x1)

5m5.703192662s ago: executing program 1 (id=6056):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r1, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001c00)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf, 0x8}, {0x8, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendfile(r6, r5, 0x0, 0x8d5e)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001c40)={0x48, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2da}, @NL80211_ATTR_PMK={0x14, 0xfe, "4df41c9d14a9923f0e16b32b407ca70e"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x11}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1b}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, 0x0, 0x0, 0x4}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x29, 0x0, 0x2)
sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="e52cf556bf7c308028d900000000000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf250300000008000500070000005400018006000200d200000014000300ac14140c0000000000000000000000000600020040000000080009002b0000000600020000000000080009005d000000060004004e2000000a0006006c626c6372000000080005000500000008000400fbffffff080006000600000008000500080000000800050003000000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x21, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
socket$can_bcm(0x1d, 0x2, 0x2)

5m5.698377074s ago: executing program 1 (id=6057):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bind$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x2, @local}}, 0x1e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="046600006a000105fefdffff00000000000008000500200000000000da12d1332328d61f761ecc4891aafa811a4cc33c3b2148877e5808d5b04ff011e2629299a05b7074f2ff238ed563c929c1cdb01d4c8eb9b23c6a3aa6614f3ac16ee141bb8335991e700147d8f4325c3c8952c254279b6e4af277bfd0e75c8650e9e69ef021b847995ef1eb3d20e872c708c9c3cd451221d9b1e0c708de513b01f5312f527d3b61108a510ba54a443947261e381f9ad717bfb12b73c8ad4fd5b65d38e7f9464a54e86bf580df5a15d2c5e7b37b01d4e8d383e7312accfca302dc18dcbc2f6c8eaac459cc92297dd681d29e17adf8c549929540485d11c4c1c42421b69c6f2383f7dde299ca45bcc05252cda900ab", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="08000a0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x200048c0}, 0x4000)

5m5.623192438s ago: executing program 1 (id=6058):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) (async)
socket(0x1, 0x5, 0x0) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) (async)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1700000056000106000000000000000007"], 0x1c}], 0x1}, 0x4000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a010300000000000000000100000009000100737986e7f5641f046abd4aeaa2d37a3000000000580000de000000000000000000000000010000000900020073797a32000000002c0003802800008008000640000000001c000b801800018007000100637400000c00028008000140000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xa0}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async)
recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

5m5.616605778s ago: executing program 1 (id=6059):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec9700001404f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r2, 0x104, 0x2, 0x0, &(0x7f00000005c0))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={0x1}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{}, &(0x7f0000000ec0), &(0x7f0000000f00)=r6}, 0x20)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_pktinfo(r7, 0x0, 0x8, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{}, &(0x7f0000000f80), &(0x7f0000000fc0)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={0x0, 0x2, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f00000000c0), 0x0}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001080)={0x0, 0xa53, 0x8}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x48)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x8)

4m50.187093067s ago: executing program 32 (id=6059):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec9700001404f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r2, 0x104, 0x2, 0x0, &(0x7f00000005c0))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={0x1}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{}, &(0x7f0000000ec0), &(0x7f0000000f00)=r6}, 0x20)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_pktinfo(r7, 0x0, 0x8, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{}, &(0x7f0000000f80), &(0x7f0000000fc0)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={0x0, 0x2, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f00000000c0), 0x0}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001080)={0x0, 0xa53, 0x8}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x48)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x8)

2m35.200517802s ago: executing program 0 (id=7924):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000000000000000000000ffffffe60000000000ecdf00000000000000000061adc0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000002abd7000000000000000000000000000000000004c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x1a0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000070000000000000000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a"], 0xd0}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="97a8e117538c15989b785650f95b8c9b4843c77a65480cfe165f42915a98e1af5c9bc2c037c7d92c9cbe907f0ecfb1a4fc8a614ce5b716b479aa572e6abf", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYRESOCT=r0, @ANYRES32=r1], 0x90}}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r5)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x6, 0x66c, 0x3}, 0x10)
write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r7})
recvmmsg(r3, &(0x7f0000000140), 0x0, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xce20, 0x0, @mcast1, 0xfff}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000380)=0x4)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r11, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000003c0)="00140a000000000000001d1e01e8e51f", 0xffeb}], 0x1}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900000225bd70008663313cf5fedbdf25802010ff3ec6c0680018000006001d37"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000000280)={{0x84, @multicast1, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e1f, 0x1, 0xc24, 0x9, 0xfffffffb}}, 0x44)

2m35.002180711s ago: executing program 0 (id=7925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000540)=@sack_info={0x0, 0x7ffb, 0x203}, 0xc) (async)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl(r2, 0x8b21, &(0x7f0000000040)) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESOCT=0x0], 0x50}}, 0x4008811)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1800002, 0x12, r6, 0x88fa6000)
ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, &(0x7f00000002c0)) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00', <r7=>0x0})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x82, &(0x7f00000001c0)={r10}, 0x8) (async)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r10, 0xa22300}, &(0x7f00000001c0)=0x8) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffd, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x7e, r7}, [@IFA_LABEL={0x14, 0x3, 'macsec0\x00'}]}, 0x2c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x5, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x36, 0x4}, @enum64={0xf, 0x0, 0x0, 0x13, 0x0, 0x9}, @union={0x6, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x7, 0x1, 0x9}, {0x3, 0x4, 0x6}, {0x0, 0x2, 0x5}, {0x4, 0x0, 0x6}, {0x8, 0x5, 0x6cbc}, {0xc, 0x2, 0x8}]}, @ptr, @enum64={0x9, 0x2, 0x0, 0x13, 0x1, 0xe, [{0x6, 0x6, 0x8}, {0xb, 0x800, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x2e]}}, &(0x7f0000000640)=""/114, 0xbd, 0x72, 0x0, 0x4}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m34.931771291s ago: executing program 0 (id=7927):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m34.84989797s ago: executing program 0 (id=7928):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_NUM_RX_QUEUES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

2m34.8495127s ago: executing program 0 (id=7929):
unshare(0x6a040000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r6, 0x0, 0xfdef)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc41d6c9de4f40b08, 0x4, 0x5, 0x80000000, 0x1084, 0xffffffffffffffff, 0x6000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'lo\x00'})

2m33.910710542s ago: executing program 0 (id=7934):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', <r1=>0x0})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x3)
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000080)={0x281, 0x3})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000c0c3ded6a6633f7409010400000000000000002b110000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYRESDEC=r1, @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x8050)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m18.93453429s ago: executing program 33 (id=7934):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', <r1=>0x0})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x3)
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000080)={0x281, 0x3})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000c0c3ded6a6633f7409010400000000000000002b110000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYRESDEC=r1, @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x8050)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.258833286s ago: executing program 4 (id=9474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r1=>0x0})
bind$rds(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x2d, 0x2, 0x0)
accept(r2, 0x0, 0x0) (async)
accept(r2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0x20, &(0x7f00000016c0)={&(0x7f0000000640)=""/4096, 0x1000, <r5=>0x0, &(0x7f0000001640)=""/92, 0x5c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9f1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x3, 0x9d, &(0x7f00000004c0)=""/157, 0x40e00, 0x53, '\x00', r1, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x4, 0x6, 0x3}, 0x10, r5, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000001740)=[{0x4, 0x1, 0x1, 0x9}, {0x3, 0x4, 0x8}, {0x4, 0x5, 0xc, 0xb}, {0x1, 0x5, 0x2, 0x2}, {0x2, 0x2, 0xd, 0x9}], 0x10, 0xf2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r8, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r7, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r8}, 0x20)
unshare(0x2c020400)
socket(0x2d, 0x2, 0x0) (async)
r9 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r9, &(0x7f0000000440)={0x2d, 0xffffffff, 0x8000}, 0xc) (async)
connect$qrtr(r9, &(0x7f0000000440)={0x2d, 0xffffffff, 0x8000}, 0xc)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r8}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r8}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r7, &(0x7f00000001c0), 0x20000000}, 0x20)
pipe(&(0x7f0000000440)={<r10=>0xffffffffffffffff})
read$alg(r10, &(0x7f00000003c0)=""/85, 0x55) (async)
read$alg(r10, &(0x7f00000003c0)=""/85, 0x55)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a00)=@bpf_lsm={0x1d, 0x5, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000018c0)='syzkaller\x00', 0x7, 0x26, &(0x7f0000001900)=""/38, 0x41100, 0x2, '\x00', 0x0, 0x1b, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001940)={0x4, 0x0, 0x10000, 0xffff}, 0x10, r5, 0x0, 0x7, 0x0, &(0x7f0000001980)=[{0x5, 0x5, 0x10, 0x2}, {0x3, 0x3, 0xf, 0x8}, {0x4, 0x4, 0x3, 0x1}, {0x0, 0x1, 0xc}, {0x4, 0x4, 0xa, 0xc}, {0x3, 0x4, 0x0, 0x3}, {0x2, 0x5, 0xe, 0x5}], 0x10, 0x1ff}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

1.390044894s ago: executing program 4 (id=9479):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001380)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000005, 0x810, r0, 0x6400b000)
accept$inet6(r0, 0x0, &(0x7f00000011c0))
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r1)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa0}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}, {0x5, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000280)=0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.319688875s ago: executing program 3 (id=9482):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

1.214930407s ago: executing program 3 (id=9484):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'team0\x00'})
unshare(0x28000600)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r5=>0x0})
unshare(0x20040400)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r4], 0x68}}, 0x0)

1.070221762s ago: executing program 3 (id=9485):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r2, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, 0x0, 0x0, 0x4}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x29, 0x0, 0x2)
sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0x98, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffbffffb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x21, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r10=>0x0})
connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$can_bcm(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x1, 0x767, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "35cf52530599b474"}}, 0x48}}, 0x11)

528.800959ms ago: executing program 4 (id=9492):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRESHEX=r1, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x40080d4)

526.485676ms ago: executing program 4 (id=9493):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x23}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

411.962531ms ago: executing program 4 (id=9494):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000400000002000e0300000100"/34], 0x0, 0x2a}, 0x28)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000002c0), 0x4)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000400000009848dd0fd09ccf2c4"], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000641fb2fa79f98024"], &(0x7f0000001f80)=""/213, 0x1b, 0xd5, 0x2}, 0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)={&(0x7f0000000240)={0x6, 0x100, 0x1, {0x0, 0x2710}, {r3, r4/1000+10000}, {0x2, 0x1}, 0x1, @can={{}, 0x0, 0x2, 0x0, 0x0, "fbc1b26e905fb3d0"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004440)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r6, &(0x7f0000000780), 0x12)
bind$x25(r5, &(0x7f0000000080), 0x12)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xffffff67, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x5f, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4080)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES8=r8, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r2], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

409.843617ms ago: executing program 2 (id=9495):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x10)
sendto$inet6(r2, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000fee000)=0x3fa, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r5 = socket$inet6(0xa, 0x3, 0x3c)
getsockopt$inet6_buf(r5, 0x29, 0x20, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=r0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

349.564326ms ago: executing program 4 (id=9496):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040))
socket(0x1, 0x5, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r3, 0x1, 0x4, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x2efb, 0x4)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg$inet(r4, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040)
close(r2)
socket$rds(0x15, 0x5, 0x0)
r5 = socket(0x28, 0x801, 0x9)
connect$vsock_stream(r5, 0x0, 0x0)
connect$pppl2tp(r5, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x1c, &(0x7f0000000840)=ANY=[], 0x0, 0x3, 0x9d, &(0x7f0000000540)=""/157, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xf, 0x7fff, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280), &(0x7f00000004c0), 0x10, 0x7fffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000000000000, 0x9, 0x9, 0x7fffffff, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

347.059751ms ago: executing program 2 (id=9497):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

250.217399ms ago: executing program 2 (id=9498):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="188f320000000000000000000000e2009500002e00000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xfffffefa)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}]}, 0x3c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', <r4=>0x0, 0x20, 0x10, 0x16, 0xd, {{0x1a, 0x4, 0x0, 0x20, 0x68, 0x67, 0x0, 0x4a, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0xa, 0xb, "0a3333640093cde2cd"}, @timestamp_addr={0x44, 0x34, 0xa1, 0x1, 0x5, [{@local, 0x7e7c}, {@local, 0x9}, {@local, 0xff}, {@private=0xa010102, 0x4}, {@local, 0x1000}, {@multicast1, 0x4}]}, @lsrr={0x83, 0xf, 0x6f, [@local, @loopback, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r4, 0x25, 0x4, @val=@netfilter={0x3, 0x1, 0x8, 0x1}}, 0x20)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000004000000e4ff6097e7f301d1ed5e4ab36f91532a92ffffff0300"/42, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$SIOCGIFHWADDR(r8, 0x8927, &(0x7f0000000080)={'bond0\x00'})
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00')
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaa2aaaaa2faaaaaaaa0486df6000000000103a00fe800000000000000000000000000002000000000000000000000000000039338b0ba6d9befaec86df00018600907801ce04c0ea4db571ab9c120024df18e2ab0a2c43e8a74af144c9549f1ceb8a5401a23c092d18f3e9100164eb8fe097c2c7bde03aba0de00bf9ae664868cd586198e3a26e86144e6f7b3782f2f38fbcceeb8867a75818fc41dd"], 0x0)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0)
sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_SLAVE2={0x8, 0x2, r12}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

248.386744ms ago: executing program 3 (id=9499):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)=""/39, &(0x7f0000000240)=0x27)
close(r1) (async)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x18, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2e}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)=ANY=[@ANYBLOB="30000000101401002cbd7000fddbdf2508001d00"], 0x30}}, 0x24001850) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"f929a80e073d3aeb476b3645c1b8167e", 0x0, 0x0, {0x8, 0x2}, {0x1e0, 0x83}, 0x4, [0x3, 0xb18, 0x100000000, 0xffffffffffffffff, 0xe8b, 0x0, 0x1, 0x8, 0xfffffffffffffffe, 0x2, 0x4, 0x10, 0x101, 0x200, 0x3ff, 0x4]}) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb0000000000000000000000000000e9d8000100c40a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', <r5=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
readv(r3, &(0x7f0000000940)=[{&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f0000000700)=""/127, 0x7f}, {&(0x7f0000000540)=""/13, 0xd}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000780)=""/131, 0x83}], 0x6)

160.146553ms ago: executing program 3 (id=9500):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="0301f3f08963eee785", 0x9}, {&(0x7f0000000940)="2c545219281777115f2c2c0273feeb64bf213ee15a1939562730c8166c803e5726d2e4940234b7c75ce827720f710e1018e9ccaa1c47f81363d4771a719afc11cd21633637ab9eed5f644f2190d33c83228bb29cbe9e4631ee30b332ba0d8dbb1dd7b1e351a7bec7f1d97b81371dd2e83ca912f723eb9fedde33147501c7f166c0601e7a223aa28af8fd5a583eb70a9a1cb63fea3b2206b6dde5f74f180a518ddfece5267479c955e5604e0c8d5e4acd2fe26955b3696f36903b22dd201399671b1e711f01cd62050c09f316dc064f801980760d82a01050fbcf3088", 0xdc}, {&(0x7f00000004c0)="d80955ebd1b641d6c93e440b0c5b3cceb4c6bbee0e2313d09ebc7195dd571eab802bced9a87741000a3863839c51c502ba879e2dd0e84e8217b69d7478039f625fc90d6b7a12c2ab89520d098f37fa8cb3855d160f15a1e062c636d56b40926bc175be72fc1a372c01c51e0c10ba8d4e0389f2ce52c7620570d7fbe08413556c053fc2a7e361a0ab162d77270928ba733270820cbd30684fbf615506297067a814e2066ef613c3d853f1203704504ee6253944f03735b9ec85b6d30d3096f6", 0x90}, {&(0x7f0000000700)="9b55f9ce1a1be727c5ffc59153dfa2c14c61abeba8da725052698b874dc197b5dbb4aabe9f52ec2f8fa207fd5a44395866e0c651669165948f463bf770e13be0aef58f1e4c938c0d9487d44fccd90b3f1d9067a043e8c9e95f3fabaa0931aaf2afa224989b549dc2857f28", 0x6b}, {&(0x7f0000000400)="371498154b0a18dbf7bad31f0efd79732fb252a970cb4ccbd3a0a85a36fe", 0x1e}], 0x5}, 0x0) (async)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001e00014026bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000000a00020014001680100001800c0005000000000000020000"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) (async)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)=""/39, &(0x7f0000000240)=0x27) (async)
close(r1)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x18, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r3, r3}, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2e}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)=ANY=[@ANYBLOB="30000000101401002cbd7000fddbdf2508001d00"], 0x30}}, 0x24001850) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="140000f74e0000006254d16db50fccc768c64b0ec5d0a72f0000000000000000000057dc"], 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"f929a80e073d3aeb476b3645c1b8167e", 0x0, 0x0, {0x8, 0x2}, {0x1e0, 0x83}, 0x4, [0x3, 0xb18, 0x100000000, 0xffffffffffffffff, 0xe8b, 0x0, 0x1, 0x8, 0xfffffffffffffffe, 0x2, 0x4, 0x10, 0x101, 0x200, 0x3ff, 0x4]}) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb0000000000000000000000000000e9d8000100c40a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000800"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[], 0xd8}}, 0x20008004) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond0\x00'})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'gretap0\x00'})

157.881277ms ago: executing program 3 (id=9501):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r2, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r3, @ANYBLOB="c8002a001001930301ae010481036cc80105bc8301ecc82d1a00031300000000000000010700f900120000000800050000000882414206eb04000000ffffffffffff0d0000000802110000007f00000006000000030508021100000108000000040802110000000100000005ffffffffffff080000008c10be091a2eb22562b0d1e337f2e008673b04060402070002002d1a0100020600000000000000010005000c000000010012000000202d1a00081600000000000001000e0005000a000000080409000000fa0600f900b46000000600fb00ff0100007200fa00a124d8b635942e46386b1b9a8af7ae9d4eb6c86cf7879f655274fcbac702541e6710b0bf1b64e33b249377c42f2cacea636797af87baa281fc5be729c35fddab2a3b9e5bc851dde6290f6f67ba5b605918e2936b2b37d34ec99a6e9fea188bbb70d3f95aeeb8f3505be5ee8b3ebe00000600fb000f0000003300fa007e10cf471875082443becbfb9d3a1a2f7255f33a68c83d54b64e9e26cb5cb7cc14995f9be86b13e706009b50fbe59c000410fa004b37330c9a17589db604b727d5272db8cd11c8efc859f894108286f5678cb405b429e3d44cc050e4e7fd247faab487ba01fbf76aa7fe0ddfdb1db3dba5a53ea13718d10604374295ac2f254feac0917247805acc381696eec9c8b266fb52c1aefe3cf4b3b7ebe17daf6c3951ca18e1b04a9d8d3246fbb40e7f183ea40d4484b95573ccacb82f484744cbe6c404ecabab814ce2ac79faea4b2b2ac196f38518c636a77ed1017de63a9ea7911d30f1e15e8012309f5a503bbf9f86545e8384d1f3868213bdfa823bc1c3c6e573498661a48bcb054a5c866d9e4da3ba8d829c825b6f93ca8fe0d8f9aec39ccae61fb9860b4bff3035beb5d9cd415179bfb35c946f909ce17776ac5a63d9059bae84f83b0336f889d46700243252721e68c7ae46df89316b6e5808d98d4547d1e3321e17d5dbab52b8d0408c7149a79bda26597c11553acfcfaffb237ad65c89ac5b5036a942223acf85a53ff867843422407e00109af40615f377d33330983703d7624b1de409db7038d40c2dbf49beb0ebe457d821a57374392398b055d748aa93de2efcd4817ca3b4f1e4d1f8a38047f6bbfd62eaba56885b85fd56081c0f2f37185ecefccad5c5096c9880c495562f6be6b94e5508b296f2cf4cf686a2da72c59434900fea664ee28dfafff1f073cfd6b11e112b466e8646b86d9661ad8165b7be3add23c071b1b8f04760681ffd24fe024cf23683d27efe582379b75adc352f8655ef5e498f32d35b9be5a297222888332320ceacc809433e44621182f02e380ec7bce7ad75293953a614a875ba26d76d87df122f61a057f60ce92915bb3439c141e7243c40d06a00f60916b2b14612166182e0752fd5e6de43f6fc1eab0a496e37ce2162e4cf6eeb0be4b6b78e9e908b680047c7de273088b9f32be4c96965729e58d319101b72460274cd08b3ed50d1806514a58881daf78690001ef36b07872d44e244868f9ff274c71ebb830b82f8c65c0bf07e8cb0ebea47edfde721474d9704ebe33af892a6ddcc0ec446e7b74a4d8a03db971f7e2bd53fcbd7b478bc825c9f5d0df3e881310498c1234374eacf857084a291722e9f2ae507fa3c2d15df61cd0567222dcf3a18c3000cb85fb9007adc7271068ab50e1d5eac870b6caeead8afecd3f6258fb1dc9106cb0f73caba69364fb23d5601320269b0735bdadf5e78d3df42641f5630c34d3aa2d46e90ce31d18405b4b77cc463d00eb160363e4d19977a6a4a96d60b1095681a8772b98f4dc1008cd03cd74879512b879bc1bca76043ab9980af68bdfa029ac6beefc3e284f493a2e8c01696c0d9d156b50e3d867bc3884f740e261aefee14354033ea0898c839e95a79067225a55f55be5a6dcd16aa66e661b661bd18aa91acaed3059f25b9a95f57731c2b5632a3576fdac6e547220b807e4c1062fccde24c1fab33b9e44759b4964f6e7f880cb5d1537b8c489e813b5a689bdfc620ee7b5d29a814cf2eb7d5b7fd15fc1c309e66da7f7ef4ee9189c6d9c0e918af0d0e4f1f57e11ecdfc04f55b5a3dddfc483e3f8730c63205988df7c163f64648936a88ae975adc2c50ae56b1c163787aaa7ba716d804f5e6bd8f1b1338871318aa066730d9e96a626ee84343738ed51a6d22175948bf81804b346f75b509907d5c21c6e6ae722e438673720c3ad7a575a6231755fbf8b104c9a830d47353c00d9fd78b839cc8259e095b39b8255bec6910ec0dc0408aa121d7b92a1eb9c8651256db5ceef34ee6d6ce5d72450e923e1ab0438e5a161345a3f7f9d2ba7bcaba1f9f243b5744bfac464b5cc79401584497f3fdecd6b7263361fec78ce0433541e347a6c738dcd57453a5a971b9e71886c90e0dec627e71f6abd31a9a10b08fbbdae83f63acc237c9427895645df83e14edefd9e6039714637b6d5912e844dc6fe195096183fc1b96b7761d3089349295712e9a65c5dcad3a3efa551579df919e903daa87607692056fc23001219eed963076568e729d88d443115bbb3a680240b1ac74ed26cd137aebb79be7acccb73b92e70d9422c08dd0a61665b6d72c900869c2e0c6ecc48cc7e3d64daee58cf01824ddad88ecbadb163f3584c6834ffb66fdfe78069433fa1aeee3d746fa5b9111de638263f7afb0f5461979f7f2f4774f381c4b094d4ad9f5ca988b9cbb7b91607bf8707bf16682462709d4ab3ca22772338608332d09a12fcb2938b1e65949a76688a7fc86924aa38afe0b90d37048d69e73a0b99a3584101c647d79f284ccba120d8c96d287891d10648415e3aa09a110bbd22505afcace48c2c70ea837b25bf7ed4bdbb4fe89643438b17798241359b560aaf88f6ef07d68f5cf0c138edcadce2fa38506de6a8096f98909c10ab69da33fc676e554bb56d04706b6157745ff88f0ebfc1eedff191378af5c4aa21300cefd6fbb2c7c9dba20546d17773ba50ab2e56af79ef0b9728472f161e76c9f08c22a45de62d5243d842779c739122415d32016d24f54b47b6523524dfc04ec0f6d002a681169ddf47cba8b8631c999ecf65c34a00445fbdebf73c95f0f0e3b9f005283f418b98b214f83428cd1978f91832093c873b7abc3078554566aafbf5cfe42e595efd5792071e870519f65ae6286e101facfae7b2808153738f5bc3eeb5a3749e3db9133cf686c2c18173beea1950ea7a8dc2ce32ccd0f4ea751dd7895a39eb583b78972dc09deaa6b5fb1abdd67c24d0d7700649c51828fe0bda349b6960d9250483da7acf82b5ee701001fa48c7d25c90dfab836c32a59eefaf1e7279592516ff93a83b68f30a93991dc37842f69633498dab7dbb4756ae6f708d936485d6cca6d31f62935b4741300d402d07f19b8b87bebaa674ee0e2b4303c52d6c1480d3d9f63ce9f33010bfe19b3407ef67a944c299f3a830ae27063b3c1d103afd7222065900cdeb40d21aeebff275f7daddb70aef3cfca57d349c6dbcdfd8d90fc2727fb6ed19aa6dfcc4eb1fbc09dbf80a6dc44a0cac039ebe0634516b4e77fd2eb4e45a8a346c093b1f2b3871dbae3cbb23a4a5ed85ad93c1869bb3fae22279d41d4b17d5cae5605c035019b84df1e4a9a3c16022dfdda156f7ddba7874950077be843fc108001cffc8264895e5cc323a465d8d15ab8117c4141910ba2305f5ea22b79d8c800f98a380125ad4dde15e06d056d829eb8ef41a8425ea435ece5d962f2a289571fd084827e74d3b6a765ece373a9d7b18c22bebe361eb672a60f458f9e0c37417aae5496f82b763bdbc6ad442c2a9e7ce218e25e55a12cb40f7c6536c1c9c6595ad878fae79e58cc84e819cec1111e039151a66e081b8b07ea8ac38c3e45d23054f2d19b83d900e2d1ada6ce767bb0e937bdf82cc8539d0b2e9ee9e9b7462194477ac572112ddf03ab43b373f094418662b989f3c001ef261d0d67bfcaf4d57f28de1cc9e9004bd03142ba66b58b5d416334aa5c2be4c0f7822203df8a118f239ee64b660fe28a0a0e2b52024b96bf2419963807f13ea374b8930c077ff70ba1c3243d95587d7fac373e07067f575c04951048318ade9e42f07cca63258fe05fa79799ac07f309819daf32e6daf20725a9a160643f21be894cb5f83d2bb15184a9b881a5bf363d5bfe24350f9d98c56d04a4074391ea139dd16d171c3e66ae550b12c11cef32d8b1e379df9acf9b80a10dd0435ef1f0778e14e255e43bf207473846c6ba6edd1e5b8603427b0829ef3a7f34d585cbbf2cd6a41abbe46dda4a4f1c39c8f7467c931c01a83235125680a49f2aea2925d3ffe2b28266d4d880a11f3b6fda37debf284fa4cbe8d76dbec4a0d7fb27e3a4b7fed8602e69e262245df7e74200f90d26a55eb703c8df232adc4f5d8ac6afab2597718ae017a148f43905e4ac472aba785c5d5884464751ddcf667a003da751972ca1d3d480dbb8fdb30b5b9bd07d3226637d613a17067a28bcde3abd061787af7b53d2a52b1a2ad6038827789ee2c9c8801a4d70595d15fd0c099526fac236cbd86dba5dc661887561c6668fdd09683e37f1b2b1db1d8ac00466444cbb037a9468c596bcdcd13d58f29f719152c1d2c4a61ff401c5c88d13a3946af704fcd8254fc56bcb93e1883f6b6ae9d3cbcdb141fb079c515fe70e0c572c67ff971e987330a29966dff4ffd8afdb7d1724d2c77e9f84cbcc5027e5f6843371e2dee35369c712d96757271d40ef1892a896aabca599d08607fce05e120d94b5e06ec84cab31d3fca0ed7f2644be23c922fcd8dd8a2942b53d530736897b9cbe6da0082caa9f796abf43103c275df74497c927a79c685ee38e3b3567163e173f05f7fb62f31ee69f6419a117094b5bc5852315fa12b9897f25a876b0e9fa1c1e5f7f8f206c3d39ae5a77d954209ecf2ed3bc5240b67710acc26345b9e57af7d6afc067e80781286e7d1501ac6a20acfddef9c3f784150674c9a3b6c4447e9b41d1f692e3904ef3d4ec3ef17ade974d4dec9dc43216814ee9a0db30794dad700ff1165db7c4dfcc75b46e9d4ebd61633f291b87517125131b7801af8f7f79bdabc07515c23f0cb46620b08b19ed3ebc79379c4dc171c54d161ce25f510d7b6e4d672e626ae87b3eea41eb6abba8612ace7ed8b545dfc8337c2fd6ffd5a7e95d4db44c21abdc6ddcc41b122c88d7a9b60c99a57ec855f943455397b1cf00c735f36b7a6edea674c88c4d709d59c50d265940fe05220751d5ea67443dcbf359a8e58c35cf3b9183436a96c6f06aeaeedfc9658a3a087dca95bdf4a2c8b7248719cf6b7a0dea6c574be52c9d1c426cf1d592a62cf38e4b84e26385848f2969495a6904f6817372d7e8aca0e3cd8dc7cca514dfb3bf5b63ab9c632e4953ee86e82c7447afd38f0b843cabaf0263a5db1314ffecfa7f9cefb5917d50d2f85e5323a6b0fb2d951bba37bbd0f74a3e07821feb4efe8148da695e00b52ce93d9ebc81a9b47e34757311363019aafd6b9ebc7764421935dfa465f018904929fa7612d5c929659c70287681619a5c23d5d8858266747186149f4b6138a81542f7230c0b1b99eb7df8e88f67d2aa9c7ab5f2be195ade8a1636137876fad0892eceb0675ac206c8084ab154da4e76d7e76a81891723cbe164125a64d43981be9dfd7ae587ac4c696eb6e4a7f635550104deef141ccbb0999222a952cb3bd920620532808430db8aa28ee7ac3224477d269c9874c40ee08d19f0932cfc560d541694b788e4ea05936fd42b999c59f6db079e748d551600309aef89071c30fe0ff5bb4920d2eac3c054e2871e17240e92527f627eff2184a9be241a31c0ac8474ae0f82861e60bd449065d8285c33edf31d631c360ace955143678cf45f1fd1f5da77b94c2d87555976eda3833265cdfee777b7d87514f344edeee24d8a9dda9b0bb35552432d26ea874853acffc85958a05be561c8845236393e69aedd7eef8dfcccc26d2c66c20ced811f8eb6613cbbf3e97711912840de7d4e2a7987567d4cd7bd116be665d7170310efc740995493ea25d5239c9345f1e8360bdeea3c89edb2d3deb74a0f372b0770c81e1b57884abebbca40a6dd70d990c59538821c8c8bbaf18ff21caa9b155c5582177066ecd445817ea567ad508fce7751f62e594d99a4bec2fba725827a3d845ce152015c9c2c37283af56590efb4e22e0c017ba992227be8acd968257a2a3197f11a6d4c68423cd74e2c32407104ecc883c5c06136470cea05637e154425d27210310bcfd3598052cd602c7350d913dc5914b0b69ff645cbdb7e250f20da09a819095a9425d91335743d912ca832628e002a0083254006b108021100000039ffffff08021100000084000000fbffffffffffffffffff070000007606050418000200bd06080211000000824602a303ff030000ffffffffffff0e0b000001800000030000000405ffffffffffff09000000010802110000000500000005080211000000086c163a05080211000000380000000301b904060702bb1906000000"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, 0x0, 0x0, 0x4}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x29, 0x0, 0x2)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0x98, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x21, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001b00)={0x6c, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x200, [0x5]}}]}, 0x28)
sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$can_bcm(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x1, 0x767, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "35cf52530599b474"}}, 0x48}}, 0x11)

58.826465ms ago: executing program 2 (id=9502):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x1f, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000640)=""/148, 0x94, <r2=>0x0, &(0x7f0000000700)=""/64, 0x40}}, 0x10) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000200100085000000a000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) (async)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async, rerun: 32)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4) (rerun: 32)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ppoll(&(0x7f0000000440)=[{r8, 0x40}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
writev(r10, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @generic={0x1, 0x4, 0x3, 0x3, 0xe00}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x84, &(0x7f00000001c0)=""/132, 0x41100, 0x52, '\x00', r1, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xd, 0xbda, 0x3c4}, 0x10, r2, r3, 0x1, &(0x7f0000000940)=[r4, r5, r6, r7, r8, r10], &(0x7f0000000980)=[{0x3, 0x1, 0x7, 0x5}], 0x10, 0x8}, 0x94) (async)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) (async, rerun: 64)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
socket$alg(0x26, 0x5, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12], 0x90}}, 0x0)

57.937615ms ago: executing program 2 (id=9503):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x830b318aaeefb05f, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x2040010) (async)
r3 = socket$netlink(0x10, 0x3, 0x14)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0xb, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007d60500000005000300df000000080002006755be7e6d351fd9de", @ANYRES64=r4], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

0s ago: executing program 2 (id=9504):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="188f320000000000000000000000e2009500002e00000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xfffffefa)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080)={'bond0\x00'})
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00')
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xff, 0xff00, 0x8, 0xffffffff}}}}}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYBLOB="44defa8798f51609090306752899eca21b73ed276ce29f77d9fcfe7903cac61b7ed35fbd3da56515c568cb592ea58ae9412752d6e1d5e8164514a0f29e22d6b0a556387a085360d6f7d8c1cd4db8f150211abe1e2ef12b0a5fa7ee3442425b70a859426cf8cc4c90e8cb51d01bcf8d46d1ab02ff972bb1f3ca6cf97c0959e982bce33af050d66237f577a5e2ef545318f4e313ed2d479306a56aa5940330b4", @ANYRESDEC=r4, @ANYRES64=r6, @ANYRES8=r3, @ANYRES32=r3, @ANYRES32=r5, @ANYRES8=r4], 0x40}}, 0x0)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c851}, 0x4040080)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000200)="63eced8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

kernel console output (not intermixed with test programs):

mit: size too large, truncated to 1048576
[  635.272411][ T4127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7564'.
[  635.276194][ T4127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7564'.
[  635.328282][ T4128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7564'.
[  635.436518][ T4137] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7566'.
[  635.569480][ T4151] SET target dimension over the limit!
[  635.636275][ T4158] hsr0: left promiscuous mode
[  635.643337][ T4158] macvlan3: left promiscuous mode
[  635.666503][ T4158] bond0: left promiscuous mode
[  635.668425][ T4158] bond_slave_0: left promiscuous mode
[  635.670759][ T4158] bond_slave_1: left promiscuous mode
[  635.673956][ T4158] gretap0: left promiscuous mode
[  635.800709][ T4169] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  635.834343][ T4172] ip6gretap0: entered promiscuous mode
[  635.846319][ T4172] gretap0: entered promiscuous mode
[  635.891700][ T4179] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  635.894423][ T4179] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  636.097520][ T4191] netlink: 'syz.2.7580': attribute type 1 has an invalid length.
[  636.186451][ T4201] netlink: 'syz.0.7582': attribute type 8 has an invalid length.
[  636.194326][ T4201] bond0: entered promiscuous mode
[  636.197041][ T4201] bond0: left promiscuous mode
[  636.389564][ T4202] delete_channel: no stack
[  636.411615][ T4217] ip6gretap0: entered promiscuous mode
[  636.445549][ T4217] ip6gretap0: left promiscuous mode
[  636.608932][ T4237] netlink: 'syz.3.7590': attribute type 8 has an invalid length.
[  636.704870][ T4244] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  636.708972][ T4244] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  636.812139][ T4254] lo: entered promiscuous mode
[  636.814758][ T4254] lo: left promiscuous mode
[  636.861823][T13740] lo speed is unknown, defaulting to 1000
[  637.189847][ T4282] netlink: 'syz.2.7603': attribute type 8 has an invalid length.
[  637.483287][ T4295] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  637.626617][ T4309] netlink: 'syz.3.7611': attribute type 8 has an invalid length.
[  637.632732][ T4309] bond0: entered promiscuous mode
[  637.634298][ T4309] bond_slave_0: entered promiscuous mode
[  637.639086][ T4309] bond_slave_1: entered promiscuous mode
[  637.642203][ T4309] bond0: left promiscuous mode
[  637.643780][ T4309] bond_slave_0: left promiscuous mode
[  637.646349][ T4309] bond_slave_1: left promiscuous mode
[  637.942638][ T4338] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  637.946995][ T4338] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  638.105117][ T4351] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  638.108308][ T4351] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  638.201231][ T4357] ip6gretap0: entered promiscuous mode
[  638.203939][ T4357] ip6gretap0: left promiscuous mode
[  638.441363][ T4371] netlink: 'syz.0.7627': attribute type 8 has an invalid length.
[  638.452357][ T4371] bond0: entered promiscuous mode
[  638.454177][ T4371] bond0: left promiscuous mode
[  638.687884][ T4386] netlink: 'syz.2.7631': attribute type 7 has an invalid length.
[  638.693844][ T4386] netlink: 'syz.2.7631': attribute type 8 has an invalid length.
[  638.731693][ T4390] netlink: 'syz.0.7632': attribute type 8 has an invalid length.
[  638.741499][ T4390] bond0: entered promiscuous mode
[  638.743490][ T4390] bond0: left promiscuous mode
[  638.946192][ T4399] netlink: 'syz.0.7635': attribute type 1 has an invalid length.
[  639.003451][ T4403] bond0: entered promiscuous mode
[  639.005492][ T4403] bond_slave_0: entered promiscuous mode
[  639.007420][ T4403] bond_slave_1: entered promiscuous mode
[  639.010149][ T4403] batadv0: entered promiscuous mode
[  639.012561][ T4403] debugfs: 'hsr1' already exists in 'hsr'
[  639.014411][ T4403] Cannot create hsr debugfs directory
[  639.019400][ T4403] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  639.022527][ T4403] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  639.027266][ T4403] 8021q: adding VLAN 0 to HW filter on device hsr1
[  639.125497][ T4410] ip6gretap0: left promiscuous mode
[  639.128535][ T4410] gretap0: left promiscuous mode
[  639.166150][ T4405] caif0 speed is unknown, defaulting to 1000
[  639.292394][ T4405] lo speed is unknown, defaulting to 1000
[  639.767282][ T4461] ip6gretap0: entered promiscuous mode
[  639.776938][ T4461] ip6gretap0: left promiscuous mode
[  639.789893][ T4464] __nla_validate_parse: 65 callbacks suppressed
[  639.789903][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7650'.
[  639.838006][ T4460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7649'.
[  639.948380][ T4479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7654'.
[  640.003304][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7654'.
[  640.235898][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7655'.
[  640.305202][ T4472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7653'.
[  640.375906][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7656'.
[  640.423946][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7657'.
[  640.517364][ T4502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7659'.
[  640.521479][ T4502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7659'.
[  640.757532][ T4514] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  640.761168][ T4514] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  640.966722][ T4521] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  640.970267][ T4521] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  641.432964][ T5894] lo speed is unknown, defaulting to 1000
[  641.782524][ T4520] delete_channel: no stack
[  641.787801][ T4526] delete_channel: no stack
[  641.968516][ T4543] bond0: entered promiscuous mode
[  641.970818][ T4543] bond0: left promiscuous mode
[  642.006446][ T4549] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  642.009412][ T4549] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  643.008942][ T4589] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  643.011847][ T4589] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  643.140637][ T4594] sctp: [Deprecated]: syz.3.7682 (pid 4594) Use of int in maxseg socket option.
[  643.140637][ T4594] Use struct sctp_assoc_value instead
[  643.230205][ T4603] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  643.233183][ T4603] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  643.376687][ T4616] netlink: 'syz.3.7688': attribute type 7 has an invalid length.
[  643.395148][ T4616] netlink: 'syz.3.7688': attribute type 8 has an invalid length.
[  643.399344][T13740] lo speed is unknown, defaulting to 1000
[  643.494824][ T4628] netlink: 'syz.2.7690': attribute type 7 has an invalid length.
[  643.500247][ T4628] netlink: 'syz.2.7690': attribute type 8 has an invalid length.
[  643.593327][ T4635] IPv6: NLM_F_CREATE should be specified when creating new route
[  643.696585][ T4647] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  643.700160][ T4647] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  644.072326][ T4688] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  644.077099][ T4688] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  644.252033][ T4691] netlink: 'syz.3.7701': attribute type 8 has an invalid length.
[  644.389598][ T4701] netlink: 'syz.2.7704': attribute type 8 has an invalid length.
[  644.463472][ T4704] netlink: 'syz.2.7705': attribute type 8 has an invalid length.
[  644.694071][ T4722] bond0: entered promiscuous mode
[  644.699474][ T4722] bond0: left promiscuous mode
[  644.853529][ T4731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  644.860811][ T4731] tipc: Resetting bearer <eth:syzkaller0>
[  644.875736][ T4726] tipc: Disabling bearer <eth:syzkaller0>
[  644.879484][ T4734] __nla_validate_parse: 68 callbacks suppressed
[  644.879498][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7714'.
[  644.919696][ T4734] ip6gretap0: entered promiscuous mode
[  644.926739][ T4734] ip6gretap0: left promiscuous mode
[  644.971995][ T4738] netlink: 'syz.3.7715': attribute type 8 has an invalid length.
[  644.980379][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7715'.
[  645.018936][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7716'.
[  645.137124][ T4754] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7720'.
[  645.149232][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7721'.
[  645.162222][ T4756] ip6gretap0: entered promiscuous mode
[  645.164662][ T4756] ip6gretap0: left promiscuous mode
[  645.187381][ T4757] wg1: entered promiscuous mode
[  645.188876][ T4757] wg1: entered allmulticast mode
[  645.194291][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7719'.
[  645.213054][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7719'.
[  645.284458][ T4768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7724'.
[  645.286646][ T4766] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  645.289146][ T4768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7724'.
[  645.291240][ T4766] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  645.428654][ T5894] lo speed is unknown, defaulting to 1000
[  645.431626][ T4778] 9: Caught tx_queue_len zero misconfig
[  645.491706][ T4778] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7727'.
[  645.492504][ T4770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  646.262594][ T4832] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  646.265899][ T4832] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  646.534922][ T4861] Cannot find set identified by id 0 to match
[  646.556403][ T4862] netlink: 'syz.3.7744': attribute type 21 has an invalid length.
[  646.668943][ T4874] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  646.671791][ T4874] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  647.105795][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  647.357408][ T4892] macsec1: entered promiscuous mode
[  647.359160][ T4892] macsec1: entered allmulticast mode
[  647.362822][ T4892] netlink: 'syz.3.7751': attribute type 7 has an invalid length.
[  647.570755][ T4898] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  647.573428][ T4898] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  647.720808][ T4917] bond0: entered promiscuous mode
[  647.722771][ T4917] bond0: left promiscuous mode
[  647.754381][ T4922] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  647.758578][ T4922] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  647.876303][ T4926] bond0: entered promiscuous mode
[  647.878435][ T4926] bond0: left promiscuous mode
[  647.923665][ T4936] netlink: 'syz.3.7761': attribute type 11 has an invalid length.
[  647.943608][ T4932] syzkaller0: entered promiscuous mode
[  647.946154][ T4932] syzkaller0: entered allmulticast mode
[  647.950325][ T4932] 0: reclassify loop, rule prio 0, protocol 800
[  648.017419][ T4943] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  648.020607][ T4943] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  648.233111][ T4956] delete_channel: no stack
[  648.235202][ T4956] delete_channel: no stack
[  648.254859][ T4962] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20004
[  648.353932][ T4974] xt_hashlimit: size too large, truncated to 1048576
[  648.388028][ T4976] lo: entered promiscuous mode
[  648.391348][ T4976] lo: left promiscuous mode
[  648.407511][ T4978] x9: renamed from bridge_slave_0
[  649.221317][ T5025] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  649.225147][ T5025] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  649.303668][ T5030] validate_nla: 3 callbacks suppressed
[  649.303679][ T5030] netlink: 'syz.2.7784': attribute type 8 has an invalid length.
[  649.396388][ T5032] can: request_module (can-proto-3) failed.
[  649.658156][ T5062] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  649.661113][ T5062] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  649.930220][ T5085] __nla_validate_parse: 57 callbacks suppressed
[  649.930231][ T5085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7794'.
[  650.020400][ T5089] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7795'.
[  650.211266][ T5894] lo speed is unknown, defaulting to 1000
[  650.550263][ T5103] dvmrp12: entered allmulticast mode
[  650.557946][ T5107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7799'.
[  650.565760][ T5107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7799'.
[  650.573571][ T5107] gretap0: entered promiscuous mode
[  650.586922][ T5107] gretap0: left promiscuous mode
[  650.603557][ T5103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7798'.
[  650.608920][ T5103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7798'.
[  650.614506][ T5102] dvmrp12: left allmulticast mode
[  650.661746][ T5112] netlink: 'syz.0.7800': attribute type 8 has an invalid length.
[  650.664297][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7800'.
[  650.670978][ T5112] bond0: entered promiscuous mode
[  650.672725][ T5112] bond0: left promiscuous mode
[  650.709259][ T5114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7801'.
[  650.833846][ T5127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7804'.
[  650.838119][ T5127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7804'.
[  650.852409][ T5131] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  650.867258][ T5131] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  650.968179][ T5142] netlink: 'syz.0.7808': attribute type 8 has an invalid length.
[  650.980741][ T5142] bond0: entered promiscuous mode
[  650.982593][ T5142] bond0: left promiscuous mode
[  651.813544][ T5167] netlink: 'syz.3.7812': attribute type 7 has an invalid length.
[  651.816373][ T5167] netlink: 'syz.3.7812': attribute type 8 has an invalid length.
[  652.211729][ T5193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  652.339791][ T5208] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  652.343114][ T5208] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  652.490009][ T5894] lo speed is unknown, defaulting to 1000
[  652.942339][ T5275] ip6gretap2: entered promiscuous mode
[  652.949142][ T5275] ip6gretap0: entered promiscuous mode
[  652.951779][ T5275] erspan0: entered promiscuous mode
[  652.996719][ T5280] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  652.999985][ T5280] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  653.141892][ T5301] netlink: 'syz.0.7841': attribute type 8 has an invalid length.
[  653.150824][ T5301] bond0: entered promiscuous mode
[  653.152898][ T5301] bond0: left promiscuous mode
[  653.572404][ T5332] ip6gretap0: entered promiscuous mode
[  653.576046][ T5332] ip6gretap0: left promiscuous mode
[  653.602447][ T5334] ip6gretap0: entered promiscuous mode
[  653.609057][ T5334] ip6gretap0: left promiscuous mode
[  653.850723][ T5351] netlink: set zone limit has 4 unknown bytes
[  653.853881][ T5351] netlink: zone id is out of range
[  654.710742][ T5364] lo: entered promiscuous mode
[  654.714506][ T5364] lo: left promiscuous mode
[  654.727966][ T5368] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  654.731819][ T5368] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  654.821547][ T5379] netlink: 'syz.2.7861': attribute type 8 has an invalid length.
[  654.950317][ T5386] netlink: 'syz.2.7862': attribute type 8 has an invalid length.
[  654.950405][ T5385] netlink: 'syz.2.7862': attribute type 8 has an invalid length.
[  654.953276][ T5386] __nla_validate_parse: 36 callbacks suppressed
[  654.953285][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7862'.
[  654.955609][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7862'.
[  655.644888][ T5411] macsec1: left promiscuous mode
[  655.647041][ T5412] netlink: 'syz.0.7868': attribute type 8 has an invalid length.
[  655.649638][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7868'.
[  655.652840][ T5411] macsec1: left allmulticast mode
[  655.654554][ T5411] ip6gretap2: left promiscuous mode
[  655.670662][ T5412] bond0: entered promiscuous mode
[  655.672830][ T5412] bond0: left promiscuous mode
[  655.674506][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7867'.
[  655.681426][ T5411] ip6gretap0: left promiscuous mode
[  655.683638][ T5411] erspan0: left promiscuous mode
[  655.804765][ T5415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7869'.
[  655.812548][ T5418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7870'.
[  655.817828][ T5418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7870'.
[  655.868531][ T5425] netlink: 'syz.3.7871': attribute type 8 has an invalid length.
[  655.871633][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7871'.
[  656.191200][ T5447] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7877'.
[  656.196597][ T5447] : renamed from veth0_to_bond
[  656.488290][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7880'.
[  656.495979][ T5463] ip6gretap0: entered promiscuous mode
[  656.499300][ T5463] ip6gretap0: left promiscuous mode
[  656.886984][ T5483] netlink: 'syz.0.7884': attribute type 7 has an invalid length.
[  656.889698][ T5483] netlink: 'syz.0.7884': attribute type 8 has an invalid length.
[  656.938454][ T5486] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  656.941977][ T5486] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  656.984947][ T5491] ip6gre1: entered promiscuous mode
[  657.014778][ T5488] netlink: 'syz.3.7886': attribute type 1 has an invalid length.
[  657.088897][ T5894] lo speed is unknown, defaulting to 1000
[  657.545926][ T5518] Cannot find set identified by id 0 to match
[  657.679702][ T5525] netlink: 'syz.2.7895': attribute type 4 has an invalid length.
[  657.831218][   T11] block nbd0: Possible stuck request ffff88810fa80000: control (read@0,1024B). Runtime 60 seconds
[  657.836274][   T11] block nbd0: Possible stuck request ffff88810fa80200: control (read@1024,1024B). Runtime 60 seconds
[  657.840947][   T11] block nbd0: Possible stuck request ffff88810fa80400: control (read@2048,1024B). Runtime 60 seconds
[  657.846285][   T11] block nbd0: Possible stuck request ffff88810fa80600: control (read@3072,1024B). Runtime 60 seconds
[  658.427469][ T5542] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  658.431209][ T5542] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  658.801660][ T5559] ip6gretap0: entered promiscuous mode
[  658.804655][ T5559] ip6gretap0: left promiscuous mode
[  658.811620][ T5554] caif0 speed is unknown, defaulting to 1000
[  658.960794][ T5554] lo speed is unknown, defaulting to 1000
[  659.152716][ T5894] lo speed is unknown, defaulting to 1000
[  659.237247][ T5580] ip6gre1: left promiscuous mode
[  659.257550][ T5541] delete_channel: no stack
[  659.333000][ T5594] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  659.338398][ T5594] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  659.587609][ T5613] netlink: 'syz.0.7914': attribute type 7 has an invalid length.
[  659.977672][ T5656] lo: entered allmulticast mode
[  659.983540][ T5648] lo: left allmulticast mode
[  660.002425][ T5657] __nla_validate_parse: 66 callbacks suppressed
[  660.002437][ T5657] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7924'.
[  660.130327][ T5666] validate_nla: 2 callbacks suppressed
[  660.130339][ T5666] netlink: 'syz.0.7925': attribute type 21 has an invalid length.
[  660.144093][ T5666] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7925'.
[  660.157188][ T5666] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7925'.
[  660.234290][ T5674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7927'.
[  660.284593][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7926'.
[  660.296908][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7926'.
[  660.313402][ T5683] caif0 speed is unknown, defaulting to 1000
[  660.417353][ T5683] lo speed is unknown, defaulting to 1000
[  660.761666][ T5690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7930'.
[  660.813724][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7930'.
[  660.993304][ T5695] netlink: 47 bytes leftover after parsing attributes in process `syz.3.7931'.
[  661.025426][   T56] Bluetooth: hci3: command 0x0405 tx timeout
[  661.099171][ T5700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7932'.
[  661.595076][ T5736] bond13: (slave 9): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  661.604485][ T5736] bond13: (slave 9): Enslaving as a backup interface with an up link
[  661.608563][ T5736] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  661.650923][ T5739] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  661.654648][ T5739] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  662.481076][ T5738] delete_channel: no stack
[  662.487282][ T5742] delete_channel: no stack
[  662.542080][ T5749] netlink: 'syz.2.7942': attribute type 1 has an invalid length.
[  662.974673][ T5776] netlink: 'syz.3.7950': attribute type 8 has an invalid length.
[  663.060857][ T5782] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  663.064526][ T5782] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  663.167610][ T5788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  664.006542][ T5833] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32)
[  664.175037][ T5843] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  664.178085][ T5843] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  664.923830][ T5885] ip6gretap0: entered promiscuous mode
[  664.926537][ T5885] ip6gretap0: left promiscuous mode
[  665.043967][ T5891] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  665.048010][ T5891] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  665.914857][ T5910] x_tables: duplicate underflow at hook 2
[  665.924200][ T5913] netlink: 'syz.3.7975': attribute type 8 has an invalid length.
[  665.928745][ T5913] __nla_validate_parse: 26 callbacks suppressed
[  665.928755][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7975'.
[  666.032932][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7977'.
[  666.114631][ T5921] netlink: 'syz.2.7976': attribute type 1 has an invalid length.
[  666.117295][ T5921] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.7976'.
[  666.125035][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7976'.
[  666.152420][ T5925] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  666.156120][ T5925] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  666.942331][ T5931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7979'.
[  666.975584][ T5924] delete_channel: no stack
[  667.021348][ T5936] netlink: 576 bytes leftover after parsing attributes in process `syz.3.7980'.
[  667.026120][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7980'.
[  667.109239][ T5942] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  667.113133][ T5942] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  667.131963][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7983'.
[  667.142309][ T5944] ip6gretap0: entered promiscuous mode
[  667.147822][ T5944] ip6gretap0: left promiscuous mode
[  667.217516][ T5946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7982'.
[  667.537172][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7988'.
[  667.676859][ T5980] netlink: 'syz.2.7991': attribute type 8 has an invalid length.
[  667.859833][ T5989] IPVS: set_ctl: invalid protocol: 10 224.0.0.2:20000
[  668.351394][   T34] audit: type=1800 audit(1769109067.326:6): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7999" name="memory.events" dev="tmpfs" ino=13533 res=0 errno=0
[  668.367407][   T34] audit: type=1800 audit(1769109067.326:7): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7999" name="memory.events" dev="tmpfs" ino=13533 res=0 errno=0
[  668.381169][   T34] audit: type=1800 audit(1769109067.326:8): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7999" name="memory.events" dev="tmpfs" ino=13533 res=0 errno=0
[  668.399037][   T34] audit: type=1800 audit(1769109067.326:9): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7999" name="memory.events" dev="tmpfs" ino=13533 res=0 errno=0
[  668.416072][   T34] audit: type=1800 audit(1769109067.326:10): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7999" name="memory.events" dev="tmpfs" ino=13533 res=0 errno=0
[  668.423952][   T34] audit: type=1800 audit(1769109067.326:11): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7999" name="memory.events" dev="tmpfs" ino=13533 res=0 errno=0
[  668.449369][   T34] audit: type=1800 audit(1769109067.326:12): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7999" name="memory.events" dev="tmpfs" ino=13533 res=0 errno=0
[  668.464596][   T34] audit: type=1800 audit(1769109067.326:13): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7999" name="memory.events" dev="tmpfs" ino=13533 res=0 errno=0
[  668.471201][   T34] audit: type=1800 audit(1769109067.326:14): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7999" name="memory.events" dev="tmpfs" ino=13533 res=0 errno=0
[  668.477525][   T34] audit: type=1800 audit(1769109067.326:15): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7999" name="memory.events" dev="tmpfs" ino=13533 res=0 errno=0
[  669.133022][ T6050] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  669.136176][ T6050] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  669.376440][ T6065] netlink: 'syz.3.8010': attribute type 8 has an invalid length.
[  669.582619][ T6079] bond2: option miimon: invalid value (18446744073709551607)
[  669.584820][ T6079] bond2: option miimon: allowed values 0 - 2147483647
[  669.589705][ T6079] bond2 (unregistering): Released all slaves
[  669.621765][ T6081] netlink: 'syz.3.8013': attribute type 7 has an invalid length.
[  669.624100][ T6081] netlink: 'syz.3.8013': attribute type 8 has an invalid length.
[  669.629949][ T6081] syz_tun: entered promiscuous mode
[  669.632206][ T6081] syz_tun: left promiscuous mode
[  670.003122][ T6088] gretap0: entered promiscuous mode
[  670.010198][ T6088] gretap0: left promiscuous mode
[  670.016611][ T6090] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  670.019406][ T6090] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  670.887893][ T6089] delete_channel: no stack
[  670.962027][ T6100] __nla_validate_parse: 23 callbacks suppressed
[  670.962040][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8018'.
[  670.969642][ T6100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8018'.
[  671.077450][ T6105] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8020'.
[  671.080542][ T6104] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8020'.
[  671.159096][ T6109] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8021'.
[  671.163694][ T6109] netlink: 'syz.3.8021': attribute type 2 has an invalid length.
[  671.166551][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8021'.
[  671.178141][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8021'.
[  671.396714][ T6122] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  671.400504][ T6122] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  672.175988][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8026'.
[  672.253141][ T6134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  672.258192][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8028'.
[  672.264209][ T6133] ip6gretap0: entered promiscuous mode
[  672.266521][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8027'.
[  672.267735][ T6133] erspan0: entered promiscuous mode
[  672.299891][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_0
[  672.491645][ T6140] sctp: [Deprecated]: syz.3.8030 (pid 6140) Use of int in max_burst socket option deprecated.
[  672.491645][ T6140] Use struct sctp_assoc_value instead
[  672.653156][ T6150] gre0: entered promiscuous mode
[  672.654731][ T6150] gre0: entered allmulticast mode
[  672.819083][ T6163] ip6gretap0: entered promiscuous mode
[  672.822514][ T6163] ip6gretap0: left promiscuous mode
[  673.220925][ T6179] gre0: left promiscuous mode
[  673.222445][ T6179] gre0: left allmulticast mode
[  673.441235][ T6193] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  673.444949][ T6193] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  673.677964][ T6198] ip6gretap0: left promiscuous mode
[  673.681391][ T6198] erspan0: left promiscuous mode
[  674.272095][ T6192] delete_channel: no stack
[  675.349338][ T6242] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  675.352093][ T6242] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  675.922329][ T6263] netlink: 'syz.3.8062': attribute type 8 has an invalid length.
[  676.092219][ T6269] __nla_validate_parse: 30 callbacks suppressed
[  676.092238][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8065'.
[  676.151987][ T6271] xt_recent: Unsupported userspace flags (000000b1)
[  676.186529][ T6273] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.8067'.
[  676.191274][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8067'.
[  676.203859][ T6273] ip6gretap0: entered promiscuous mode
[  676.209873][ T6273] ip6gretap0: left promiscuous mode
[  676.241639][ T6275] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8068'.
[  676.322474][ T5218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  676.327834][ T5218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  676.335795][ T5218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  676.342111][ T5218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  676.344601][ T5218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  676.408844][ T6287] netlink: 'syz.2.8072': attribute type 8 has an invalid length.
[  676.411221][ T6281] caif0 speed is unknown, defaulting to 1000
[  676.411715][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8072'.
[  676.511081][ T6281] lo speed is unknown, defaulting to 1000
[  676.544837][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8073'.
[  676.560484][ T6291] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8073'.
[  676.560952][ T6290] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8074'.
[  676.671328][ T6281] chnl_net:caif_netlink_parms(): no params data found
[  676.767547][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8076'.
[  676.770282][ T6307] netlink: 'syz.2.8076': attribute type 21 has an invalid length.
[  676.774935][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.777961][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.780223][ T6281] bridge_slave_0: entered allmulticast mode
[  676.782796][ T6281] bridge_slave_0: entered promiscuous mode
[  676.794076][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.797898][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.800566][ T6281] bridge_slave_1: entered allmulticast mode
[  676.804116][ T6281] bridge_slave_1: entered promiscuous mode
[  676.805531][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8076'.
[  676.808077][ T6309] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  676.811870][ T6309] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  676.843830][ T6281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  676.849317][ T6281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  676.867993][ T6281] team0: Port device team_slave_0 added
[  676.877162][ T6281] team0: Port device team_slave_1 added
[  676.903761][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_0
[  676.908340][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  676.919068][ T6281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  676.949916][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_1
[  676.952547][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  676.962643][ T6281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  677.004674][ T6281] hsr_slave_0: entered promiscuous mode
[  677.007660][ T6281] hsr_slave_1: entered promiscuous mode
[  677.152810][ T6281] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  677.162868][ T6281] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  677.169317][ T6281] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  677.177003][ T6281] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  677.271859][ T6281] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.290746][ T6281] 8021q: adding VLAN 0 to HW filter on device team0
[  677.298694][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.300827][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  677.310872][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.312971][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  677.437957][ T6281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  677.467331][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.590556][ T6281] veth0_vlan: entered promiscuous mode
[  677.601953][ T6281] veth1_vlan: entered promiscuous mode
[  677.619550][ T6281] veth0_macvtap: entered promiscuous mode
[  677.626914][ T6281] veth1_macvtap: entered promiscuous mode
[  677.639156][ T6281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  677.649446][ T6281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  677.660269][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.667175][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.678987][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.682430][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.801767][ T5140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.804389][ T5140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  677.858327][ T5140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.860515][ T5140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  677.990101][ T6388] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  677.992935][ T6388] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  678.008282][ T6390] bond0: entered promiscuous mode
[  678.009826][ T6390] bond_slave_0: entered promiscuous mode
[  678.011598][ T6390] bond_slave_1: entered promiscuous mode
[  678.014420][ T6390] batadv0: entered promiscuous mode
[  678.016977][ T6390] debugfs: 'hsr1' already exists in 'hsr'
[  678.018886][ T6390] Cannot create hsr debugfs directory
[  678.020855][ T6390] 8021q: adding VLAN 0 to HW filter on device hsr1
[  678.023901][ T6390] bond0: left promiscuous mode
[  678.026159][ T6390] bond_slave_0: left promiscuous mode
[  678.027902][ T6390] bond_slave_1: left promiscuous mode
[  678.035819][ T6390] batadv0: left promiscuous mode
[  678.146721][ T6402] netlink: 'syz.3.8093': attribute type 8 has an invalid length.
[  678.301074][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.303686][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.370375][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  678.379946][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  678.395736][ T5218] Bluetooth: hci4: command tx timeout
[  678.458014][ T5840] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.458609][ T6419] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  678.460691][ T5840] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.460714][ T5840] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.460730][ T5840] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.476491][ T6419] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  678.617064][ T6435] netlink: 'syz.4.8101': attribute type 8 has an invalid length.
[  678.640171][ T6435] bond0: entered promiscuous mode
[  678.642102][ T6435] bond_slave_0: entered promiscuous mode
[  678.644134][ T6435] bond_slave_1: entered promiscuous mode
[  678.647789][ T6435] gretap0: entered promiscuous mode
[  678.650306][ T6435] bond0: left promiscuous mode
[  678.651761][ T6435] bond_slave_0: left promiscuous mode
[  678.653444][ T6435] bond_slave_1: left promiscuous mode
[  678.657096][ T6435] gretap0: left promiscuous mode
[  678.665585][   T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  678.759127][ T6437] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  678.764018][ T6437] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  679.050350][ T6454] ip6gretap0: entered promiscuous mode
[  679.053125][ T6454] ip6gretap0: left promiscuous mode
[  679.108895][ T6456] bond0: entered promiscuous mode
[  679.110722][ T6456] bond_slave_0: entered promiscuous mode
[  679.112670][ T6456] bond_slave_1: entered promiscuous mode
[  679.124968][ T6456] batadv0: entered promiscuous mode
[  679.130165][ T6456] debugfs: 'hsr1' already exists in 'hsr'
[  679.132833][ T6456] Cannot create hsr debugfs directory
[  679.135738][ T6456] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  679.138807][ T6456] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  679.142238][ T6456] 8021q: adding VLAN 0 to HW filter on device hsr1
[  679.159249][ T6458] netlink: 'syz.2.8110': attribute type 8 has an invalid length.
[  679.208326][ T6460] netlink: 'syz.4.8111': attribute type 8 has an invalid length.
[  679.433475][ T6472] hsr_slave_0: left promiscuous mode
[  679.435965][ T6472] hsr_slave_1: left promiscuous mode
[  679.923989][ T6506] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  679.937185][ T6506] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  680.465639][ T5218] Bluetooth: hci4: command tx timeout
[  680.940746][ T6532] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  680.964665][ T6532] syzkaller0: entered promiscuous mode
[  680.969689][ T6532] syzkaller0: entered allmulticast mode
[  681.111261][ T6548] __nla_validate_parse: 44 callbacks suppressed
[  681.111274][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8128'.
[  681.117560][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8128'.
[  681.142402][ T6554] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8129'.
[  681.220602][ T6560] netlink: 336 bytes leftover after parsing attributes in process `syz.3.8130'.
[  681.282347][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8130'.
[  681.316499][ T6567] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  681.319285][ T6567] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  681.450615][ T6586] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8136'.
[  681.489836][ T6590] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  681.492801][ T6590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  681.506474][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8136'.
[  681.564216][ T6596] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8139'.
[  681.613973][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8137'.
[  681.628956][ T6603] syz_tun: entered allmulticast mode
[  681.631401][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8140'.
[  681.752259][ T6615] netlink: 'syz.4.8143': attribute type 1 has an invalid length.
[  681.756874][ T6615] netlink: 'syz.4.8143': attribute type 1 has an invalid length.
[  681.763034][ T6615] netlink: 'syz.4.8143': attribute type 1 has an invalid length.
[  681.772236][ T6615] netlink: 'syz.4.8143': attribute type 1 has an invalid length.
[  681.779103][ T6615] netlink: 'syz.4.8143': attribute type 1 has an invalid length.
[  681.789247][ T6615] netlink: 'syz.4.8143': attribute type 1 has an invalid length.
[  681.799519][ T6615] netlink: 'syz.4.8143': attribute type 1 has an invalid length.
[  681.801911][ T6615] netlink: 'syz.4.8143': attribute type 1 has an invalid length.
[  681.804227][ T6615] netlink: 'syz.4.8143': attribute type 1 has an invalid length.
[  681.843015][ T6630] ip6gretap0: entered promiscuous mode
[  681.848729][ T6630] gretap0: entered promiscuous mode
[  681.905209][ T6635] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  681.908789][ T6635] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  682.324836][ T6653] ip6gretap0: entered promiscuous mode
[  682.337691][ T6653] ip6gretap0: left promiscuous mode
[  682.545466][ T5218] Bluetooth: hci4: command tx timeout
[  682.735047][ T6634] delete_channel: no stack
[  682.884966][ T6666] netlink: 'syz.3.8154': attribute type 2 has an invalid length.
[  683.204371][ T6689] ip6gretap0: left promiscuous mode
[  683.206972][ T6689] gretap0: left promiscuous mode
[  683.516728][ T6703] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  683.525592][ T6703] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  683.684621][ T6721] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  683.698914][ T6721] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  683.844252][ T6741] erspan0: entered promiscuous mode
[  683.846976][ T6741] erspan0: left promiscuous mode
[  684.057313][ T6758] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  684.065925][ T6758] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  684.086480][ T6760] gretap0: entered promiscuous mode
[  684.089027][ T6760] gretap0: left promiscuous mode
[  684.299947][   T34] kauditd_printk_skb: 2 callbacks suppressed
[  684.299965][   T34] audit: type=1107 audit(1769109083.276:18): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#2b¬ߏQJG6+T
[  684.299965][   T34] 1(hHUEj,l
[  684.299965][   T34] Yjkac1Hc3!a%ryp0H2+u֐>*	*DL2=nQ:ؚ>	&8E!t'
[  684.625460][ T5218] Bluetooth: hci4: command tx timeout
[  684.871216][ T6757] delete_channel: no stack
[  684.926742][ T6801] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  684.930430][ T6801] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  685.267560][ T6816] syzkaller0: entered promiscuous mode
[  685.269354][ T6816] syzkaller0: entered allmulticast mode
[  686.031411][ T6848] ip6gretap0: entered promiscuous mode
[  686.034586][ T6848] ip6gretap0: left promiscuous mode
[  686.122872][ T6849] __nla_validate_parse: 63 callbacks suppressed
[  686.122886][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8202'.
[  686.144227][ T6858] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  686.156894][ T6858] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  686.177413][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8206'.
[  686.188453][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8206'.
[  686.192714][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8205'.
[  686.218088][ T6863] ip6gretap0: entered promiscuous mode
[  686.220702][ T6863] ip6gretap0: left promiscuous mode
[  686.508334][ T6873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8208'.
[  686.511735][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8208'.
[  686.610348][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8211'.
[  686.613839][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8211'.
[  686.618917][ T6879] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8210'.
[  686.622933][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8210'.
[  686.865841][   T56] Bluetooth: hci4: command 0x0405 tx timeout
[  686.894954][ T6907] validate_nla: 9 callbacks suppressed
[  686.894967][ T6907] netlink: 'syz.3.8217': attribute type 8 has an invalid length.
[  686.951344][ T6910] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  686.955130][ T6910] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  687.039828][ T6918] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  687.043878][ T6918] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  687.922598][   T11] block nbd0: Possible stuck request ffff88810fa80000: control (read@0,1024B). Runtime 90 seconds
[  687.926218][   T11] block nbd0: Possible stuck request ffff88810fa80200: control (read@1024,1024B). Runtime 90 seconds
[  687.929436][   T11] block nbd0: Possible stuck request ffff88810fa80400: control (read@2048,1024B). Runtime 90 seconds
[  687.933462][   T11] block nbd0: Possible stuck request ffff88810fa80600: control (read@3072,1024B). Runtime 90 seconds
[  688.001568][ T6939] netlink: 'syz.4.8226': attribute type 7 has an invalid length.
[  688.003973][ T6939] netlink: 'syz.4.8226': attribute type 8 has an invalid length.
[  688.042724][ T6944] netlink: 'syz.3.8228': attribute type 3 has an invalid length.
[  688.301093][ T6955] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  688.311185][ T6955] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  688.358957][ T6963] netlink: 'syz.3.8235': attribute type 15 has an invalid length.
[  688.363573][ T6964] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode
[  688.366745][ T6964] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  688.396909][ T6965] ip6gretap0: entered promiscuous mode
[  688.400341][ T6965] ip6gretap0: left promiscuous mode
[  688.533332][ T6972] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  688.543507][ T6972] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  688.559607][ T6968] caif0 speed is unknown, defaulting to 1000
[  688.678978][ T6968] lo speed is unknown, defaulting to 1000
[  689.609708][ T6996] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  689.612685][ T6996] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  689.893334][ T7013] caif0 speed is unknown, defaulting to 1000
[  689.998664][ T7013] lo speed is unknown, defaulting to 1000
[  690.395013][ T7029] netlink: 'syz.3.8248': attribute type 7 has an invalid length.
[  690.401463][ T7029] netlink: 'syz.3.8248': attribute type 8 has an invalid length.
[  690.481823][ T7031] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  690.485030][ T7031] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  690.609639][ T7044] pim6reg1: entered promiscuous mode
[  690.612012][ T7044] pim6reg1: entered allmulticast mode
[  691.150417][ T7057] __nla_validate_parse: 32 callbacks suppressed
[  691.150433][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8257'.
[  691.157088][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8257'.
[  691.198258][ T7062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8258'.
[  691.284582][ T7037] delete_channel: no stack
[  691.326245][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8259'.
[  691.367987][ T7073] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8261'.
[  691.445627][ T7075] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  691.448920][ T7075] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  691.768071][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8266'.
[  691.773055][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8266'.
[  691.820900][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8268'.
[  691.933910][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8267'.
[  691.942167][ T7102] ip6gretap0: entered promiscuous mode
[  691.946593][ T7102] ip6gretap0: left promiscuous mode
[  692.219862][ T7112] sctp: [Deprecated]: syz.2.8272 (pid 7112) Use of struct sctp_assoc_value in delayed_ack socket option.
[  692.219862][ T7112] Use struct sctp_sack_info instead
[  692.270329][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8272'.
[  692.477860][ T7132] netlink: 'syz.4.8277': attribute type 7 has an invalid length.
[  692.492355][ T7132] netlink: 'syz.4.8277': attribute type 8 has an invalid length.
[  692.647623][ T7141] netlink: 'syz.2.8281': attribute type 1 has an invalid length.
[  692.728387][ T7148] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  692.731407][ T7148] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  692.925196][ T7161] netlink: 'syz.3.8286': attribute type 21 has an invalid length.
[  693.111161][ T7169] erspan0: entered promiscuous mode
[  693.114013][ T7169] erspan0: left promiscuous mode
[  693.124915][ T7168] erspan0: entered promiscuous mode
[  693.131953][ T7168] erspan0: left promiscuous mode
[  693.413427][ T7179] mac80211_hwsim hwsim26 wlan0: left promiscuous mode
[  693.423765][ T7183] netlink: 'syz.4.8291': attribute type 3 has an invalid length.
[  693.429300][ T7183] syz_tun: entered allmulticast mode
[  693.479779][ T7182] syz_tun: left allmulticast mode
[  693.552829][ T7192] ip6gretap0: entered promiscuous mode
[  693.561899][ T7192] ip6gretap0: left promiscuous mode
[  693.807379][ T7207] netlink: 'syz.3.8299': attribute type 10 has an invalid length.
[  693.813313][ T7207] 8021q: adding VLAN 0 to HW filter on device team0
[  693.821773][ T7207] team0: entered promiscuous mode
[  693.824000][ T7207] team_slave_0: entered promiscuous mode
[  693.827575][ T7207] team_slave_1: entered promiscuous mode
[  693.830791][ T7207] bond0: (slave team0): Enslaving as an active interface with an up link
[  693.941913][ T7221] netlink: 'syz.3.8303': attribute type 13 has an invalid length.
[  694.138254][ T7225] caif0 speed is unknown, defaulting to 1000
[  694.263428][ T7225] lo speed is unknown, defaulting to 1000
[  694.273279][ T7228] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  694.296219][ T7228] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  694.570160][ T7205] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  694.690800][ T7244] netlink: 'syz.3.8309': attribute type 8 has an invalid length.
[  694.788832][   T34] audit: type=1107 audit(1769109093.766:19): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2#dwyO UXuǳME~韑Ă+ k8nv+~MQg:p~M8vƇ&<Һv>
[  694.788832][   T34] |aȈ4
[  694.788832][   T34] 2B~+'
[  694.798732][ T7248] x_tables: duplicate underflow at hook 1
[  695.009249][ T7257] syzkaller0: entered promiscuous mode
[  695.010983][ T7257] syzkaller0: entered allmulticast mode
[  695.144054][ T7271] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  695.148091][ T7271] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  695.276829][ T7281] caif0 speed is unknown, defaulting to 1000
[  695.460781][ T7281] lo speed is unknown, defaulting to 1000
[  695.554183][ T7281] netlink: 'syz.3.8321': attribute type 2 has an invalid length.
[  695.628476][ T7281] geneve1: entered promiscuous mode
[  695.631176][ T7281] geneve1: left promiscuous mode
[  696.324284][ T7356] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  696.327424][ T7356] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  696.432822][ T7358] __nla_validate_parse: 49 callbacks suppressed
[  696.432838][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8339'.
[  696.797277][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8340'.
[  696.903270][ T7363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  697.062661][ T7351] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  697.166496][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8342'.
[  697.192241][ T7368] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  697.195933][ T7368] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  697.462595][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8344'.
[  697.470682][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8344'.
[  697.554001][ T7376] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8345'.
[  697.559576][ T7376] IPv6: sit1: Disabled Multicast RS
[  697.561980][ T7376] sit1: entered allmulticast mode
[  697.597341][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8345'.
[  697.604546][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8345'.
[  697.680484][ T7380] 8021q: VLANs not supported on wg1
[  697.685724][ T7380] sit1: left allmulticast mode
[  697.709361][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8346'.
[  697.748734][   T34] audit: type=1800 audit(1769109096.726:20): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8347" name=CB dev="tmpfs" ino=396 res=0 errno=0
[  698.015040][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8349'.
[  698.104336][ T7405] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  698.199094][ T7417] netlink: 'syz.3.8353': attribute type 11 has an invalid length.
[  698.254191][ T7428] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  698.258401][ T7428] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  698.427275][ T7440] netlink: 'syz.2.8360': attribute type 8 has an invalid length.
[  698.469171][ T7445] netlink: 'syz.2.8361': attribute type 142 has an invalid length.
[  698.870047][ T7479] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  699.124266][ T7489] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  699.129411][ T7489] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  699.213354][ T7495] netlink: 'syz.3.8376': attribute type 8 has an invalid length.
[  699.294810][ T7498] netlink: 'syz.3.8377': attribute type 8 has an invalid length.
[  699.959789][ T7525] delete_channel: no stack
[  700.414536][ T7556] caif0 speed is unknown, defaulting to 1000
[  700.507186][ T7579] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  700.515431][ T7579] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  700.580063][ T7556] lo speed is unknown, defaulting to 1000
[  700.726481][ T7593] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  700.729299][ T7593] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  704.048872][ T5276] udevd[5276]: worker [30482] /devices/virtual/block/nbd0 is taking a long time
[  717.985895][   T11] block nbd0: Possible stuck request ffff88810fa80000: control (read@0,1024B). Runtime 120 seconds
[  717.989505][   T11] block nbd0: Possible stuck request ffff88810fa80200: control (read@1024,1024B). Runtime 120 seconds
[  717.993536][   T11] block nbd0: Possible stuck request ffff88810fa80400: control (read@2048,1024B). Runtime 120 seconds
[  717.998035][   T11] block nbd0: Possible stuck request ffff88810fa80600: control (read@3072,1024B). Runtime 120 seconds
[  732.247037][ T7635] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  732.252419][ T7639] __nla_validate_parse: 64 callbacks suppressed
[  732.252429][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8409'.
[  732.256272][ T7635] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  732.262424][ T7639] ip6gretap0: entered promiscuous mode
[  732.320228][ T7639] ip6gretap0: left promiscuous mode
[  732.522462][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8416'.
[  732.525148][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8416'.
[  732.570621][ T7666] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  732.584204][ T7666] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  732.607767][ T7668] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8418'.
[  732.649755][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8420'.
[  732.653166][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8420'.
[  732.668490][ T7673] 8021q: adding VLAN 0 to HW filter on device bond14
[  732.672522][ T7673] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8420'.
[  732.753491][ T7680] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8421'.
[  733.391821][ T7665] delete_channel: no stack
[  733.474769][ T7686] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  733.480624][ T7686] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  733.532449][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8425'.
[  733.536201][ T7693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8425'.
[  733.619128][ T7705] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  733.622844][ T7705] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  734.309696][ T7699] delete_channel: no stack
[  734.352641][ T5840] tipc: Subscription rejected, illegal request
[  734.413407][ T7751] syzkaller1: entered promiscuous mode
[  734.415522][ T7751] syzkaller1: entered allmulticast mode
[  734.580960][ T7756] netlink: 'syz.4.8438': attribute type 1 has an invalid length.
[  734.622428][ T7760] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  734.628903][ T7760] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  735.224291][ T7794] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  735.227850][ T7794] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  735.448353][ T7814] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  735.503334][ T7818] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  735.512421][ T7818] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  735.731276][ T7817] delete_channel: no stack
[  735.860473][ T7851] netlink: 'syz.2.8460': attribute type 8 has an invalid length.
[  736.108759][ T7858] xt_cgroup: invalid path, errno=-2
[  736.832455][ T7877] netlink: 'syz.4.8469': attribute type 7 has an invalid length.
[  736.837754][ T7877] netlink: 'syz.4.8469': attribute type 8 has an invalid length.
[  736.841646][ T7880] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  736.852280][ T7880] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  736.991927][ T7887] netlink: 'syz.3.8472': attribute type 4 has an invalid length.
[  737.017418][ T7887] netlink: 'syz.3.8472': attribute type 4 has an invalid length.
[  737.028899][ T7894] ip6gretap0: entered promiscuous mode
[  737.031637][ T7894] ip6gretap0: left promiscuous mode
[  737.038180][ T7887] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  737.041091][ T7887] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  737.354186][ T7886] delete_channel: no stack
[  737.358857][ T7895] delete_channel: no stack
[  737.427358][ T7916] netlink: 'syz.2.8481': attribute type 4 has an invalid length.
[  737.453657][ T7914] __nla_validate_parse: 30 callbacks suppressed
[  737.453668][ T7914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8480'.
[  737.528333][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8482'.
[  737.724964][ T7926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  737.778866][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8484'.
[  737.806999][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8487'.
[  737.836373][   T56] Bluetooth: hci4: command 0x0405 tx timeout
[  737.851544][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8488'.
[  737.897730][ T7952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8489'.
[  737.901534][ T7952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8489'.
[  737.971701][ T7959] netlink: 'syz.4.8491': attribute type 8 has an invalid length.
[  737.974345][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8491'.
[  738.113556][ T7975] netlink: 'syz.2.8493': attribute type 8 has an invalid length.
[  738.117122][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8493'.
[  738.128165][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8492'.
[  738.351050][ T7989] bond15: Unable to set up delay as MII monitoring is disabled
[  738.356566][ T7989] bond15 (unregistering): Released all slaves
[  738.462046][ T7998] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  738.520483][ T7998] x_tables: duplicate underflow at hook 2
[  738.609133][ T8013] gretap0: entered promiscuous mode
[  738.612055][ T8013] gretap0: left promiscuous mode
[  738.879539][ T8026] netlink: 'syz.3.8506': attribute type 8 has an invalid length.
[  739.256279][ T8052] macsec2: entered promiscuous mode
[  739.257940][ T8052] gretap0: entered promiscuous mode
[  739.259545][ T8052] macsec2: entered allmulticast mode
[  739.261096][ T8052] gretap0: entered allmulticast mode
[  739.270636][ T8052] gretap0: left allmulticast mode
[  739.272774][ T8052] gretap0: left promiscuous mode
[  740.300490][ T8071] ip6gretap0: entered promiscuous mode
[  740.306351][ T8071] gretap0: entered promiscuous mode
[  740.342509][ T8073] gretap0: entered promiscuous mode
[  740.351952][ T8073] gretap0: left promiscuous mode
[  740.483058][ T8086] ip6gretap0: left promiscuous mode
[  740.486722][ T8086] gretap0: left promiscuous mode
[  740.784154][ T8109] validate_nla: 2 callbacks suppressed
[  740.784167][ T8109] netlink: 'syz.4.8528': attribute type 8 has an invalid length.
[  740.839804][ T8111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  741.176759][ T8131] syzkaller0: entered promiscuous mode
[  741.179054][ T8131] syzkaller0: entered allmulticast mode
[  742.075061][ T8138] delete_channel: no stack
[  742.933774][ T8140] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  742.938356][ T8140] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  743.190373][ T8166] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  743.193880][ T8166] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  743.285003][ T8176] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  743.393494][ T8183] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  743.401479][ T8183] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  743.536564][ T8188] __nla_validate_parse: 37 callbacks suppressed
[  743.536576][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8546'.
[  743.544735][ T8188] ip6gretap0: entered promiscuous mode
[  743.552520][ T8188] ip6gretap0: left promiscuous mode
[  743.690809][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8549'.
[  743.690828][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8549'.
[  743.693373][ T8200] netlink: 'syz.2.8549': attribute type 7 has an invalid length.
[  743.697964][ T8201] netlink: 'syz.2.8549': attribute type 7 has an invalid length.
[  743.700458][ T8200] netlink: 'syz.2.8549': attribute type 8 has an invalid length.
[  743.704308][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8549'.
[  743.707649][ T8201] netlink: 'syz.2.8549': attribute type 8 has an invalid length.
[  743.707665][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8549'.
[  743.779046][ T8215] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  743.783229][ T8215] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  743.791799][ T8210] netlink: 'syz.3.8551': attribute type 8 has an invalid length.
[  743.794175][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8551'.
[  743.799264][ T8216] netlink: 'syz.3.8551': attribute type 8 has an invalid length.
[  743.802091][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8551'.
[  743.849158][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8553'.
[  743.873151][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8554'.
[  743.876247][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8554'.
[  743.883659][ T8222] erspan0: entered promiscuous mode
[  743.891164][ T8222] erspan0: left promiscuous mode
[  743.996435][ T8232] netlink: 'syz.4.8557': attribute type 8 has an invalid length.
[  744.117842][ T8235] netlink: 'syz.3.8558': attribute type 1 has an invalid length.
[  744.120141][ T8240] netlink: 'syz.3.8558': attribute type 1 has an invalid length.
[  744.351922][ T8248] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  744.359314][ T8248] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  744.471604][ T8262] tipc: Started in network mode
[  744.475551][ T8262] tipc: Node identity 9225685054d9, cluster identity 4711
[  744.477958][ T8262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  744.480872][ T8262] syzkaller0: entered promiscuous mode
[  744.482782][ T8262] syzkaller0: entered allmulticast mode
[  744.488164][ T8262] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  744.504544][ T8262] tipc: Resetting bearer <eth:syzkaller0>
[  744.508386][ T8261] tipc: Resetting bearer <eth:syzkaller0>
[  744.522493][ T8261] tipc: Disabling bearer <eth:syzkaller0>
[  744.542950][ T8267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  744.542986][ T8264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  745.282103][ T8309] x_tables: duplicate underflow at hook 2
[  745.518352][ T8335] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  745.521593][ T8335] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  745.584246][ T8342] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  745.591204][ T8342] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  746.206566][ T8373] validate_nla: 5 callbacks suppressed
[  746.206577][ T8373] netlink: 'syz.3.8594': attribute type 8 has an invalid length.
[  746.478661][ T8390] ip6gretap0: entered promiscuous mode
[  746.481909][ T8390] ip6gretap0: left promiscuous mode
[  746.501270][ T8393] netlink: 'syz.2.8598': attribute type 1 has an invalid length.
[  746.521991][ T8393] bond15: entered promiscuous mode
[  746.524195][ T8393] bond15: entered allmulticast mode
[  746.535648][ T8393] 8021q: adding VLAN 0 to HW filter on device bond15
[  746.567120][ T8393] erspan1: entered allmulticast mode
[  746.573877][ T8393] bond15: (slave erspan1): making interface the new active one
[  746.576644][ T8393] erspan1: entered promiscuous mode
[  746.579090][ T8393] bond15: (slave erspan1): Enslaving as an active interface with an up link
[  746.668257][ T8403] ip6gretap0: entered promiscuous mode
[  746.670979][ T8403] ip6gretap0: left promiscuous mode
[  747.334830][ T8440] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  747.339655][ T8440] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  747.477711][ T8447] veth1: entered promiscuous mode
[  747.480152][ T8447] veth1: left promiscuous mode
[  747.627995][ T8460] netlink: 'syz.3.8615': attribute type 8 has an invalid length.
[  747.724133][ T8467] IPv6: sit1: Disabled Multicast RS
[  748.071607][   T11] block nbd0: Possible stuck request ffff88810fa80000: control (read@0,1024B). Runtime 150 seconds
[  748.076152][   T11] block nbd0: Possible stuck request ffff88810fa80200: control (read@1024,1024B). Runtime 150 seconds
[  748.080212][   T11] block nbd0: Possible stuck request ffff88810fa80400: control (read@2048,1024B). Runtime 150 seconds
[  748.083956][   T11] block nbd0: Possible stuck request ffff88810fa80600: control (read@3072,1024B). Runtime 150 seconds
[  748.269577][ T8500] caif0 speed is unknown, defaulting to 1000
[  748.409886][ T8500] lo speed is unknown, defaulting to 1000
[  748.514448][ T8500] netlink: 'syz.3.8627': attribute type 4 has an invalid length.
[  748.728021][ T8525] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  748.730934][ T8525] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  748.898140][ T8528] __nla_validate_parse: 117 callbacks suppressed
[  748.898157][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8631'.
[  749.124796][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8633'.
[  749.131074][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8633'.
[  749.144295][ T8537] gretap0: entered promiscuous mode
[  749.147247][ T8537] gretap0: left promiscuous mode
[  749.307417][ T8543] bond15: left promiscuous mode
[  749.309547][ T8543] erspan1: left promiscuous mode
[  749.311417][ T8543] bond15: left allmulticast mode
[  749.316032][ T8543] erspan1: left allmulticast mode
[  749.331566][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8634'.
[  749.559915][ T8524] delete_channel: no stack
[  749.562210][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8636'.
[  749.659677][ T8561] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8638'.
[  749.668071][ T8564] netlink: 'syz.2.8639': attribute type 8 has an invalid length.
[  749.670876][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8639'.
[  749.829210][ T8573] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  749.843002][ T8573] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  749.918288][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8644'.
[  749.923581][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8643'.
[  749.944092][ T8586] ip6gretap0: entered promiscuous mode
[  749.958247][ T8586] ip6gretap0: left promiscuous mode
[  750.026597][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8646'.
[  750.037099][ T8593] gretap0: entered promiscuous mode
[  750.040451][ T8593] gretap0: left promiscuous mode
[  750.120648][ T8600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  750.123361][ T8600] IPv6: NLM_F_CREATE should be set when creating new route
[  750.126241][ T8600] IPv6: NLM_F_CREATE should be set when creating new route
[  750.157517][ T8606] x_tables: ip_tables: ah match: only valid for protocol 51
[  750.176751][ T8607] ip6gretap0: entered promiscuous mode
[  750.180192][ T8607] ip6gretap0: left promiscuous mode
[  750.278608][ T8614] netlink: 'syz.3.8651': attribute type 8 has an invalid length.
[  750.631344][ T8639] ip6gretap0: entered promiscuous mode
[  750.634052][ T8639] ip6gretap0: left promiscuous mode
[  750.730521][ T8644] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  750.734030][ T8644] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  752.184598][ T8708] netlink: 'syz.4.8673': attribute type 4 has an invalid length.
[  752.203270][ T8708] gretap0: entered promiscuous mode
[  752.208352][ T8708] gretap0: left promiscuous mode
[  752.265510][ T8708] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001
[  752.526470][ T8730] tunl0: Caught tx_queue_len zero misconfig
[  752.749277][ T8760] netlink: 'syz.2.8683': attribute type 7 has an invalid length.
[  752.752138][ T8760] netlink: 'syz.2.8683': attribute type 8 has an invalid length.
[  753.009604][ T8772] caif0 speed is unknown, defaulting to 1000
[  753.137721][ T8795] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  753.141512][ T8795] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  753.182075][ T8772] lo speed is unknown, defaulting to 1000
[  753.203067][ T8796] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  753.208665][ T8796] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  753.738728][ T8837] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  753.917638][ T8856] __nla_validate_parse: 56 callbacks suppressed
[  753.917651][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8705'.
[  753.923691][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8705'.
[  753.942060][ T8857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8704'.
[  753.945806][ T8857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8704'.
[  754.014140][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8708'.
[  754.065391][ T8873] netlink: 'syz.3.8710': attribute type 8 has an invalid length.
[  754.067684][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8710'.
[  754.249590][ T8884] syzkaller0: entered promiscuous mode
[  754.251514][ T8884] syzkaller0: entered allmulticast mode
[  754.258924][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8713'.
[  754.398446][ T8888] caif0 speed is unknown, defaulting to 1000
[  754.453720][ T8891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[  754.462882][ T8892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8715'.
[  754.527488][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8714'.
[  754.598417][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8715'.
[  754.610006][ T8888] lo speed is unknown, defaulting to 1000
[  755.150413][ T8921] netlink: 'syz.3.8719': attribute type 8 has an invalid length.
[  755.613052][ T8953] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  755.617786][ T8953] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  755.764844][ T8960] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  755.770376][ T8960] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  755.864415][ T8969] netlink: 'syz.4.8730': attribute type 8 has an invalid length.
[  756.595960][ T8959] delete_channel: no stack
[  757.138594][ T9026] netlink: 'syz.2.8744': attribute type 1 has an invalid length.
[  757.872317][ T9058] netlink: 'syz.4.8752': attribute type 8 has an invalid length.
[  757.962431][ T9064] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  758.059560][ T9078] netlink: 'syz.2.8757': attribute type 8 has an invalid length.
[  758.062518][ T9076] : entered promiscuous mode
[  758.114272][ T9080] netlink: 'syz.4.8758': attribute type 7 has an invalid length.
[  758.117364][ T9080] netlink: 'syz.4.8758': attribute type 8 has an invalid length.
[  758.168310][ T9085] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  758.172019][ T9085] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  758.426468][ T9101] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  758.447730][ T5218] Bluetooth: hci4: link tx timeout
[  758.450845][ T5218] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  758.521613][   T56] Bluetooth: hci4: link tx timeout
[  758.523409][   T56] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  758.549643][   T56] Bluetooth: hci4: link tx timeout
[  758.552442][   T56] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  758.607251][   T56] Bluetooth: hci4: link tx timeout
[  758.609372][   T56] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  759.000718][ T9084] delete_channel: no stack
[  759.017719][ T9112] __nla_validate_parse: 44 callbacks suppressed
[  759.017736][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8764'.
[  759.033759][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8765'.
[  759.034217][ T9112] ip6gretap0: entered promiscuous mode
[  759.041099][ T9112] ip6gretap0: left promiscuous mode
[  759.054064][ T9114] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  759.097081][   T56] Bluetooth: hci4: link tx timeout
[  759.098767][   T56] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  759.135886][ T9116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8766'.
[  759.150065][ T9116] syzkaller0: entered promiscuous mode
[  759.152177][ T9116] syzkaller0: entered allmulticast mode
[  759.161107][ T9116] IPv6: Can't replace route, no match found
[  759.434025][ T9137] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  759.438397][ T9137] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  759.474225][ T9140] netlink: 'syz.4.8772': attribute type 8 has an invalid length.
[  759.479489][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8772'.
[  759.620254][ T9146] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8773'.
[  759.651075][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8775'.
[  759.664118][ T9153] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  759.668129][ T9153] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  759.679437][   T56] Bluetooth: hci4: link tx timeout
[  759.682810][   T56] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  759.688769][   T56] Bluetooth: hci4: link tx timeout
[  759.690791][   T56] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  759.975221][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8778'.
[  759.981334][ T9166] netlink: 'syz.3.8778': attribute type 7 has an invalid length.
[  759.984269][ T9166] netlink: 'syz.3.8778': attribute type 8 has an invalid length.
[  759.992544][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8778'.
[  760.056723][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8779'.
[  760.066838][ T9168] ip6gretap0: entered promiscuous mode
[  760.071557][ T9168] ip6gretap0: left promiscuous mode
[  760.121756][ T9173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8780'.
[  760.164720][ T9176] x_tables: duplicate underflow at hook 1
[  760.237218][ T9179] caif0 speed is unknown, defaulting to 1000
[  760.322729][ T9191] openvswitch: : Dropping previously announced user features
[  760.332239][ T9191] ip6gretap0: entered promiscuous mode
[  760.337968][ T9191] ip6gretap0: left promiscuous mode
[  760.447740][   T56] Bluetooth: hci4: link tx timeout
[  760.449716][   T56] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  760.458223][ T9179] lo speed is unknown, defaulting to 1000
[  760.465931][   T56] Bluetooth: hci4: command 0x0405 tx timeout
[  760.468755][   T56] Bluetooth: hci4: link tx timeout
[  760.664672][ T9204] bond16: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  760.672000][ T9204] bond16 (unregistering): Released all slaves
[  760.970693][ T9224] delete_channel: no stack
[  761.058532][ T9229] ip6gretap0: entered promiscuous mode
[  761.062241][ T9229] ip6gretap0: left promiscuous mode
[  761.169691][ T9236] netlink: 'syz.3.8796': attribute type 8 has an invalid length.
[  761.310083][ T9249] tap0: tun_chr_ioctl cmd 2148553947
[  761.313989][ T9249] tap0: tun_chr_ioctl cmd 2147767521
[  761.320966][ T9249] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.348675][ T9249] batadv0 (unregistering): left promiscuous mode
[  762.507642][ T9322] veth1_to_team: Caught tx_queue_len zero misconfig
[  762.567469][ T9328] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  762.570614][ T9328] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  763.587320][ T9370] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  763.590294][ T9370] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  763.708379][ T9377] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  763.711947][ T9377] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  763.736581][ T9372] delete_channel: no stack
[  764.090800][ T9398] __nla_validate_parse: 41 callbacks suppressed
[  764.090814][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8837'.
[  764.097825][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8837'.
[  764.204008][ T9408] netlink: 'syz.2.8840': attribute type 8 has an invalid length.
[  764.215473][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8840'.
[  764.311257][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8839'.
[  764.361847][ T9418] netlink: 'syz.3.8843': attribute type 1 has an invalid length.
[  764.370836][ T9417] syzkaller1: entered promiscuous mode
[  764.370842][ T9418] netlink: 'syz.3.8843': attribute type 1 has an invalid length.
[  764.372990][ T9417] syzkaller1: entered allmulticast mode
[  764.386984][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8843'.
[  764.491387][ T9422] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  764.494926][ T9422] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  764.681558][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8846'.
[  764.686991][ T9430] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8846'.
[  764.728010][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8847'.
[  764.812562][ T9438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8848'.
[  764.849249][ T9440] netlink: 'syz.4.8849': attribute type 8 has an invalid length.
[  764.852247][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8849'.
[  765.233201][ T9456] netlink: 'syz.4.8853': attribute type 8 has an invalid length.
[  765.521373][ T9474] gretap0: entered promiscuous mode
[  765.538986][ T9474] gretap0: left promiscuous mode
[  765.685773][ T9482] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  765.749809][ T9497] netlink: 'syz.2.8864': attribute type 8 has an invalid length.
[  765.962242][ T9517] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  765.971110][ T9517] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  766.304041][ T9534] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  766.755830][ T9515] delete_channel: no stack
[  766.885856][ T9550] netlink: 'syz.3.8875': attribute type 8 has an invalid length.
[  766.967737][ T9553] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  766.971272][ T9553] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  767.457378][ T9565] netlink: 'syz.2.8880': attribute type 8 has an invalid length.
[  767.631021][ T9571] ip6tnl0: Caught tx_queue_len zero misconfig
[  768.048696][ T9596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  768.124045][ T9594] sctp: [Deprecated]: syz.2.8888 (pid 9594) Use of int in max_burst socket option.
[  768.124045][ T9594] Use struct sctp_assoc_value instead
[  768.177684][ T9606] netlink: 'syz.3.8891': attribute type 8 has an invalid length.
[  768.234841][ T9607] bridge5: entered promiscuous mode
[  768.240584][ T9607] bridge5: entered allmulticast mode
[  768.256452][ T9607] team0: Port device bridge5 added
[  768.434861][ T9634] blkio.reset_stats is deprecated
[  768.812808][ T9669] netlink: 'syz.3.8907': attribute type 4 has an invalid length.
[  768.914743][ T9678] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  768.917810][ T9678] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  769.169557][ T9697] __nla_validate_parse: 39 callbacks suppressed
[  769.169574][ T9697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8913'.
[  769.175844][ T9697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  769.182557][ T9693] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8910'.
[  769.204318][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8910'.
[  769.236794][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8914'.
[  769.330086][ T9707] bridge5: left allmulticast mode
[  769.330373][ T9699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8914'.
[  769.335828][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8914'.
[  769.368412][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8913'.
[  769.407963][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8915'.
[  769.417252][ T9709] ip6gretap0: entered promiscuous mode
[  769.420142][ T9709] ip6gretap0: left promiscuous mode
[  769.468004][ T9714] openvswitch: netlink: IPv4 tunnel dst address is zero
[  770.446133][ T9729] validate_nla: 1 callbacks suppressed
[  770.446145][ T9729] netlink: 'syz.3.8920': attribute type 1 has an invalid length.
[  770.455026][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8920'.
[  770.466024][ T9729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8920'.
[  770.704770][ T9754] veth15: entered promiscuous mode
[  770.779997][ T9766] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  770.783165][ T9766] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  770.891242][ T9776] netlink: 'syz.3.8930': attribute type 8 has an invalid length.
[  772.040795][ T9832] veth15: left promiscuous mode
[  772.095699][ T9836] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  772.098495][ T9836] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  772.262321][ T9844] ip6gretap0: entered promiscuous mode
[  772.268773][ T9844] ip6gretap0: left promiscuous mode
[  772.834648][ T9880] ip6gretap0: entered promiscuous mode
[  772.837126][ T9880] gretap0: entered promiscuous mode
[  773.021135][ T9897] macvlan4: entered allmulticast mode
[  773.026692][ T9897] macvlan4: entered promiscuous mode
[  773.028502][ T9897] syz_tun: entered promiscuous mode
[  773.031790][ T9897] team0: Port device macvlan4 added
[  773.033641][ T9901] netlink: 'syz.2.8958': attribute type 8 has an invalid length.
[  773.316803][ T9921] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  773.320210][ T9921] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  774.233996][ T9939] __nla_validate_parse: 35 callbacks suppressed
[  774.234006][ T9939] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8967'.
[  774.512914][ T9957] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8971'.
[  774.722759][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8975'.
[  774.763657][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8975'.
[  774.802461][ T9972] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8976'.
[  774.938591][ T9979] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8978'.
[  775.146321][ T9990] syz_tun: left promiscuous mode
[  775.148052][ T9990] macvlan4: left allmulticast mode
[  775.162990][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8979'.
[  775.223822][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8981'.
[  775.229933][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8981'.
[  775.270464][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8982'.
[  775.280167][ T9995] ip6gretap0: entered promiscuous mode
[  775.283755][ T9995] ip6gretap0: left promiscuous mode
[  775.918892][T10026] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  775.922633][T10026] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  776.749345][T10024] delete_channel: no stack
[  776.754311][T10035] delete_channel: no stack
[  777.037022][T10077] netlink: 'syz.2.9004': attribute type 7 has an invalid length.
[  777.039883][T10077] netlink: 'syz.2.9004': attribute type 8 has an invalid length.
[  777.170412][T10086] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  777.173808][T10086] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  777.949750][T10106] caif0 speed is unknown, defaulting to 1000
[  777.981401][T10108] netlink: 'syz.4.9011': attribute type 7 has an invalid length.
[  777.984361][T10108] netlink: 'syz.4.9011': attribute type 8 has an invalid length.
[  778.066733][T10112] ip6gretap0: entered promiscuous mode
[  778.076241][T10112] ip6gretap0: left promiscuous mode
[  778.133484][T10106] lo speed is unknown, defaulting to 1000
[  778.148747][   T11] block nbd0: Possible stuck request ffff88810fa80000: control (read@0,1024B). Runtime 180 seconds
[  778.152764][   T11] block nbd0: Possible stuck request ffff88810fa80200: control (read@1024,1024B). Runtime 180 seconds
[  778.157268][   T11] block nbd0: Possible stuck request ffff88810fa80400: control (read@2048,1024B). Runtime 180 seconds
[  778.161183][   T11] block nbd0: Possible stuck request ffff88810fa80600: control (read@3072,1024B). Runtime 180 seconds
[  778.277906][T10116] ip6gretap0: left promiscuous mode
[  778.281620][T10116] gretap0: left promiscuous mode
[  778.297627][T10123] netlink: 'syz.4.9016': attribute type 8 has an invalid length.
[  778.649152][T10139] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  778.652672][T10139] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  778.937764][T10168] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  778.940650][T10168] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  778.964006][T10170] IPVS: stopping backup sync thread 11681 ...
[  779.122916][T10185] geneve0: entered promiscuous mode
[  779.126849][T10185] geneve0: left promiscuous mode
[  779.768617][T10167] delete_channel: no stack
[  779.790079][T10170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  779.881576][T10198] __nla_validate_parse: 28 callbacks suppressed
[  779.881592][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9030'.
[  779.919435][T10193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9030'.
[  779.951793][T10199] caif0 speed is unknown, defaulting to 1000
[  779.958623][T10203] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  779.961917][T10203] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  779.963084][T10204] netlink: 'syz.3.9033': attribute type 8 has an invalid length.
[  779.968571][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9033'.
[  780.059694][T10209] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  780.075428][T10209] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  780.132703][T10199] lo speed is unknown, defaulting to 1000
[  780.153529][T10213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9035'.
[  780.190670][T10214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9034'.
[  780.948117][T10227] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9040'.
[  781.084918][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9043'.
[  781.090081][T10241] netlink: 'syz.4.9043': attribute type 7 has an invalid length.
[  781.096199][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9041'.
[  781.097124][T10241] netlink: 'syz.4.9043': attribute type 8 has an invalid length.
[  781.104175][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9043'.
[  781.162455][T10247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9044'.
[  781.347752][T10262] macsec0: entered promiscuous mode
[  781.350151][T10262] macsec0: entered allmulticast mode
[  781.352226][T10262] veth1_macvtap: entered allmulticast mode
[  781.410318][T10265] netlink: 'syz.4.9048': attribute type 7 has an invalid length.
[  781.413738][T10265] netlink: 'syz.4.9048': attribute type 8 has an invalid length.
[  781.837530][T10289] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  781.840952][T10289] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  781.885218][T10296] x_tables: duplicate underflow at hook 2
[  781.995034][T10304] geneve2: entered promiscuous mode
[  781.997269][T10304] geneve2: entered allmulticast mode
[  782.000579][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  782.004028][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  782.016821][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  782.020072][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  782.257835][T10316] netlink: 'syz.4.9063': attribute type 8 has an invalid length.
[  782.502444][T10326] netlink: 'syz.4.9066': attribute type 8 has an invalid length.
[  782.503377][T10324] vti0: entered promiscuous mode
[  782.508667][T10324] vti0: entered allmulticast mode
[  782.713350][T10328] netlink: 'syz.4.9067': attribute type 6 has an invalid length.
[  782.716382][T10328] netlink: 'syz.4.9067': attribute type 3 has an invalid length.
[  782.872456][T10332] geneve2: left promiscuous mode
[  782.874104][T10332] geneve2: left allmulticast mode
[  782.879111][T10332] vti0: left promiscuous mode
[  782.880676][T10332] vti0: left allmulticast mode
[  782.882247][ T5840] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  782.888489][ T5840] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  782.895921][ T5840] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  782.899225][ T5840] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  783.239928][T10357] sch_tbf: burst 9 is lower than device bridge1 mtu (1514) !
[  783.472724][T10368] ip6gretap0: entered promiscuous mode
[  783.480787][T10368] ip6gretap0: left promiscuous mode
[  783.497709][T10372] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  783.502366][T10372] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  784.292893][T10371] delete_channel: no stack
[  785.346391][ T5218] Bluetooth: hci3: command 0x0405 tx timeout
[  785.423898][T10393] __nla_validate_parse: 26 callbacks suppressed
[  785.423910][T10393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9084'.
[  785.428847][T10393] netlink: 'syz.4.9084': attribute type 7 has an invalid length.
[  785.431161][T10393] netlink: 'syz.4.9084': attribute type 8 has an invalid length.
[  785.433583][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9084'.
[  785.441559][T10393] syz_tun: entered promiscuous mode
[  785.446506][T10393] syz_tun: left promiscuous mode
[  785.448863][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9082'.
[  785.490575][T10387] sch_tbf: burst 9 is lower than device bridge7 mtu (1514) !
[  785.682377][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9088'.
[  785.687554][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9088'.
[  785.695119][T10409] ip6gretap0: entered promiscuous mode
[  785.698614][T10409] ip6gretap0: left promiscuous mode
[  785.705120][T10406] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  785.709867][T10406] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  785.821888][T10413] netlink: 'syz.4.9089': attribute type 8 has an invalid length.
[  785.824559][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9089'.
[  786.006269][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9091'.
[  786.032536][T27142] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  786.040619][T10429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9092'.
[  786.048680][T10421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9092'.
[  786.172382][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9093'.
[  786.185908][T10434] sch_tbf: burst 9 is lower than device bridge2 mtu (1514) !
[  786.378030][T10405] delete_channel: no stack
[  787.022095][T10476] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  787.024925][T10476] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  787.680965][T10518] delete_channel: no stack
[  787.858406][T10532] ip6gretap0: entered promiscuous mode
[  787.863630][T10532] ip6gretap0: left promiscuous mode
[  787.923388][T10540] dvmrp12: entered allmulticast mode
[  788.004656][T10545] netlink: 'syz.4.9120': attribute type 8 has an invalid length.
[  788.031415][T10539] dvmrp12: left allmulticast mode
[  788.098850][T10550] netlink: 'syz.4.9121': attribute type 7 has an invalid length.
[  788.101294][T10550] netlink: 'syz.4.9121': attribute type 8 has an invalid length.
[  788.294398][T10557] veth1_macvtap: left allmulticast mode
[  788.297598][T10557] macsec0: left promiscuous mode
[  788.300631][T10557] macsec0: left allmulticast mode
[  788.464656][T10574] ip6gretap0: entered promiscuous mode
[  788.472640][T10574] ip6gretap0: left promiscuous mode
[  788.557203][T10577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  788.566491][T10577] netlink: 'syz.2.9129': attribute type 8 has an invalid length.
[  788.797293][T10588] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  788.802854][T10588] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  789.261130][T10606] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  789.281107][T10606] bridge0: entered promiscuous mode
[  789.283379][T10606] bridge0: left promiscuous mode
[  789.523659][T10620] netlink: 'syz.4.9136': attribute type 26 has an invalid length.
[  789.528953][T10620] netlink: 'syz.4.9136': attribute type 26 has an invalid length.
[  789.885473][T10657] netlink: 'syz.4.9145': attribute type 26 has an invalid length.
[  789.888560][T10657] netlink: 'syz.4.9145': attribute type 26 has an invalid length.
[  789.942756][T10663] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  789.950512][T10663] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  790.349167][T10699] syzkaller0: entered promiscuous mode
[  790.350917][T10699] syzkaller0: entered allmulticast mode
[  790.487566][T10717] __nla_validate_parse: 47 callbacks suppressed
[  790.487577][T10717] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9156'.
[  790.515546][T10711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9154'.
[  790.622259][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9157'.
[  790.693120][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9159'.
[  790.700364][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9158'.
[  790.718781][T10726] sch_tbf: burst 9 is lower than device bridge3 mtu (1514) !
[  790.732859][T10728] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  790.766634][T10728] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  790.780705][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9161'.
[  790.787450][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9161'.
[  790.838728][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9160'.
[  790.980832][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9165'.
[  790.991239][T10739] delete_channel: no stack
[  791.032068][T10755] netlink: 'syz.4.9166': attribute type 4 has an invalid length.
[  791.032800][T10756] netlink: 'syz.4.9166': attribute type 4 has an invalid length.
[  791.056313][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9166'.
[  791.158216][T10762] sch_tbf: burst 9 is lower than device bridge21 mtu (1514) !
[  791.579167][T10796] sch_tbf: burst 9 is lower than device bridge22 mtu (1514) !
[  791.649695][T10801] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  791.653176][T10801] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  792.022030][T10819] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  792.123454][T10827] sch_tbf: burst 9 is lower than device bridge5 mtu (1514) !
[  792.755479][T10859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  793.182039][T10888] gretap0: entered promiscuous mode
[  793.187592][T10888] gretap0: left promiscuous mode
[  793.204522][T10884] validate_nla: 3 callbacks suppressed
[  793.204536][T10884] netlink: 'syz.3.9197': attribute type 1 has an invalid length.
[  793.502279][T10914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  793.509337][T10914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  794.387419][T10933] netlink: 'syz.3.9208': attribute type 11 has an invalid length.
[  794.434012][T10933] caif0 speed is unknown, defaulting to 1000
[  794.606219][T10933] lo speed is unknown, defaulting to 1000
[  794.972790][T10974] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  794.981701][T10974] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  794.994526][T10972] netlink: 'syz.4.9217': attribute type 1 has an invalid length.
[  795.119821][T10980] netlink: 'syz.4.9219': attribute type 8 has an invalid length.
[  795.126696][T10981] netlink: 'syz.4.9219': attribute type 8 has an invalid length.
[  795.253955][T10983] netlink: 'syz.2.9220': attribute type 7 has an invalid length.
[  795.259281][T10983] netlink: 'syz.2.9220': attribute type 8 has an invalid length.
[  795.306983][T10985] sch_tbf: burst 9 is lower than device bridge7 mtu (1514) !
[  795.661731][T11006] __nla_validate_parse: 54 callbacks suppressed
[  795.661742][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9226'.
[  795.668773][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9226'.
[  795.796200][T10971] delete_channel: no stack
[  795.800862][T11000] delete_channel: no stack
[  795.858474][T11017] bond2: option lp_interval: invalid value (0)
[  795.860765][T11017] bond2: option lp_interval: allowed values 1 - 2147483647
[  795.864143][T11017] bond2 (unregistering): Released all slaves
[  795.886191][T11018] bond2: option lp_interval: invalid value (0)
[  795.888301][T11018] bond2: option lp_interval: allowed values 1 - 2147483647
[  795.891878][T11018] bond2 (unregistering): Released all slaves
[  795.993036][T11027] IPVS: length: 150 != 24
[  796.045940][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9231'.
[  796.229514][T11041] netlink: 'syz.3.9234': attribute type 26 has an invalid length.
[  796.232247][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9234'.
[  796.243762][T11041] bridge8: the hash_elasticity option has been deprecated and is always 16
[  796.388831][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9236'.
[  796.654034][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9239'.
[  796.673178][T11068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9239'.
[  796.682084][T11067] veth1_to_hsr: entered promiscuous mode
[  796.686828][T11067] veth1_to_hsr: left promiscuous mode
[  796.725894][T11068] veth1_to_hsr: entered promiscuous mode
[  796.730089][T11068] veth1_to_hsr: left promiscuous mode
[  796.738711][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9239'.
[  796.753743][T11067] veth1_to_hsr: entered promiscuous mode
[  796.757050][T11067] veth1_to_hsr: left promiscuous mode
[  796.790328][T11072] netlink: 'syz.2.9241': attribute type 8 has an invalid length.
[  796.792762][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9241'.
[  796.801665][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9239'.
[  796.811485][T11067] veth1_to_hsr: entered promiscuous mode
[  796.814247][T11067] veth1_to_hsr: left promiscuous mode
[  796.899382][T11067] veth1_to_hsr: entered promiscuous mode
[  796.902368][T11067] veth1_to_hsr: left promiscuous mode
[  796.942574][T11067] veth1_to_hsr: entered promiscuous mode
[  796.946954][T11067] veth1_to_hsr: left promiscuous mode
[  797.003152][T11067] veth1_to_hsr: entered promiscuous mode
[  797.009732][T11067] veth1_to_hsr: left promiscuous mode
[  797.074874][T11067] veth1_to_hsr: entered promiscuous mode
[  797.077758][T11067] veth1_to_hsr: left promiscuous mode
[  797.130185][T11067] veth1_to_hsr: entered promiscuous mode
[  797.133019][T11067] veth1_to_hsr: left promiscuous mode
[  797.186306][T11067] veth1_to_hsr: entered promiscuous mode
[  797.189903][T11067] veth1_to_hsr: left promiscuous mode
[  797.242376][T11067] veth1_to_hsr: entered promiscuous mode
[  797.246399][T11067] veth1_to_hsr: left promiscuous mode
[  797.296327][T11067] veth1_to_hsr: entered promiscuous mode
[  797.299891][T11067] veth1_to_hsr: left promiscuous mode
[  797.365083][T11067] veth1_to_hsr: entered promiscuous mode
[  797.368691][T11067] veth1_to_hsr: left promiscuous mode
[  797.419835][T11067] veth1_to_hsr: entered promiscuous mode
[  797.422466][T11067] veth1_to_hsr: left promiscuous mode
[  797.494304][T11067] veth1_to_hsr: entered promiscuous mode
[  797.497422][T11067] veth1_to_hsr: left promiscuous mode
[  797.509078][T11101] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  797.512339][T11101] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  797.567888][T11104] ip6gretap0: entered promiscuous mode
[  797.577142][T11104] ip6gretap0: left promiscuous mode
[  797.783583][T11125] netlink: 'syz.4.9251': attribute type 8 has an invalid length.
[  798.061832][T11149] kthread_run failed with err -4
[  798.337434][T11100] delete_channel: no stack
[  798.367202][T11170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  798.385909][T11172] tipc: Disabling bearer <eth:syzkaller0>
[  798.591360][T11197] ip6gretap0: entered promiscuous mode
[  798.595117][T11197] ip6gretap0: left promiscuous mode
[  798.941309][T11219] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  798.945108][T11219] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  799.207261][T11218] delete_channel: no stack
[  799.308852][T11238] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  799.312451][T11238] validate_nla: 6 callbacks suppressed
[  799.312464][T11238] netlink: 'syz.4.9278': attribute type 8 has an invalid length.
[  799.521699][T11254] netlink: 'syz.2.9283': attribute type 8 has an invalid length.
[  799.601604][T11261] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  799.604992][T11261] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  799.723801][T11270] syzkaller0: entered promiscuous mode
[  799.726892][T11270] syzkaller0: entered allmulticast mode
[  800.530549][T11305] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  800.547400][T11305] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  800.838416][T11320] __nla_validate_parse: 55 callbacks suppressed
[  800.838428][T11320] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9299'.
[  800.850540][T11317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9300'.
[  800.857788][T11317] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9300'.
[  800.860714][T11317] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9300'.
[  800.969259][T11322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9300'.
[  801.089924][T11324] openvswitch: netlink: IP tunnel dst address not specified
[  801.094719][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9301'.
[  801.228518][T11328] syzkaller0: entered promiscuous mode
[  801.230762][T11328] syzkaller0: entered allmulticast mode
[  801.250759][T11328] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9303'.
[  801.385817][T11330] netlink: 'syz.4.9304': attribute type 1 has an invalid length.
[  801.398412][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9305'.
[  801.401949][T11333] netlink: 'syz.3.9305': attribute type 7 has an invalid length.
[  801.404802][T11333] netlink: 'syz.3.9305': attribute type 8 has an invalid length.
[  801.405107][T11330] 8021q: adding VLAN 0 to HW filter on device bond1
[  801.409744][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9305'.
[  801.435988][T11330] bond1: (slave gretap1): making interface the new active one
[  801.439071][T11330] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  801.503271][T11337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9307'.
[  801.582306][T11347] syzkaller0: entered promiscuous mode
[  801.585436][T11347] syzkaller0: entered allmulticast mode
[  801.690755][T11354] 8021q: adding VLAN 0 to HW filter on device bond13
[  801.727000][ T5840] bond13: (slave 9): link status definitely down, disabling slave
[  801.804146][T11365] netlink: 'syz.2.9309': attribute type 8 has an invalid length.
[  801.927454][T11373] can: request_module (can-proto-0) failed.
[  802.151679][T11396] ip6gretap0: entered promiscuous mode
[  802.154875][T11396] ip6gretap0: left promiscuous mode
[  802.260649][T11407] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  802.263509][T11407] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  802.379038][T11414] netlink: 'syz.3.9321': attribute type 5 has an invalid length.
[  802.833319][T11433] netlink: 'syz.2.9326': attribute type 26 has an invalid length.
[  802.840967][T11433] bridge23: the hash_elasticity option has been deprecated and is always 16
[  803.092635][T11406] delete_channel: no stack
[  803.340839][T11462] netlink: 'syz.3.9333': attribute type 8 has an invalid length.
[  803.403273][T11471] x_tables: duplicate underflow at hook 1
[  803.415170][T11475] sch_tbf: burst 9 is lower than device bridge8 mtu (1514) !
[  803.630686][T11490] gretap0: entered promiscuous mode
[  803.642971][T11490] gretap0: left promiscuous mode
[  804.474836][T11541] ip6gretap0: entered promiscuous mode
[  804.477737][T11541] ip6gretap0: left promiscuous mode
[  804.546096][T11544] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  804.549781][T11544] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  805.008233][T11556] netlink: 'syz.4.9357': attribute type 8 has an invalid length.
[  805.506331][T11580] netlink: 'syz.2.9365': attribute type 8 has an invalid length.
[  805.631162][T11594] netlink: 'syz.2.9367': attribute type 7 has an invalid length.
[  805.633639][T11594] netlink: 'syz.2.9367': attribute type 8 has an invalid length.
[  805.707624][T11605] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  805.710356][T11605] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  805.882604][T11618] __nla_validate_parse: 65 callbacks suppressed
[  805.882616][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9369'.
[  806.648120][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9373'.
[  806.649879][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9374'.
[  806.743083][T11642] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  806.746461][T11642] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  806.906659][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9376'.
[  806.922170][T11654] ip6gretap0: entered promiscuous mode
[  806.927883][T11654] ip6gretap0: left promiscuous mode
[  806.955303][T11656] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9378'.
[  807.046952][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9380'.
[  807.049672][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9380'.
[  807.171254][T11680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9382'.
[  807.179920][T11680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9382'.
[  807.195597][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9383'.
[  807.204267][T11682] lo: entered promiscuous mode
[  807.208542][T11682] lo: left promiscuous mode
[  807.440016][T11704] netlink: 'syz.3.9390': attribute type 8 has an invalid length.
[  807.587340][T11713] tipc: Trying to set illegal importance in message
[  807.647750][T11724] netlink: 'syz.4.9395': attribute type 7 has an invalid length.
[  807.650121][T11724] netlink: 'syz.4.9395': attribute type 8 has an invalid length.
[  807.816288][T11742] debugfs: 'netdev:syzkaller0' already exists in 'phy8'
[  807.934954][T11760] openvswitch: netlink: Message has 572 unknown bytes.
[  807.939384][T11760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  807.964911][T11764] lo: entered promiscuous mode
[  807.967436][T11764] lo: left promiscuous mode
[  808.124322][T11777] openvswitch: netlink: Flow actions attr not present in new flow.
[  808.151638][T11777] ip6gretap0: entered promiscuous mode
[  808.154585][T11777] erspan0: entered promiscuous mode
[  808.170004][T11774] netlink: 'syz.2.9408': attribute type 4 has an invalid length.
[  808.233501][   T11] block nbd0: Possible stuck request ffff88810fa80000: control (read@0,1024B). Runtime 210 seconds
[  808.237718][   T11] block nbd0: Possible stuck request ffff88810fa80200: control (read@1024,1024B). Runtime 210 seconds
[  808.240992][   T11] block nbd0: Possible stuck request ffff88810fa80400: control (read@2048,1024B). Runtime 210 seconds
[  808.244819][   T11] block nbd0: Possible stuck request ffff88810fa80600: control (read@3072,1024B). Runtime 210 seconds
[  808.360208][T11799] 8021q: adding VLAN 0 to HW filter on device bond0
[  808.364464][T11799] 8021q: adding VLAN 0 to HW filter on device team0
[  808.373362][T11799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  808.424699][T11799] ip6gretap0: left promiscuous mode
[  808.427460][T11799] erspan0: left promiscuous mode
[  808.603352][T11819] netlink: 'syz.2.9418': attribute type 1 has an invalid length.
[  808.624286][T11819] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  808.627883][T11819] bond16: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  808.632442][T11819] bond16: (slave vxcan3): making interface the new active one
[  808.635087][T11819] bond16: (slave vxcan3): Enslaving as an active interface with an up link
[  808.642064][T11819] bond16 (unregistering): (slave vxcan3): Releasing backup interface
[  808.646116][T11819] bond16 (unregistering): Released all slaves
[  808.794533][T11823] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  808.797905][T11823] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  809.564845][T11854] netlink: 'syz.3.9426': attribute type 1 has an invalid length.
[  809.689014][T11863] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  809.693283][T11863] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  809.724008][T11867] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  809.728139][T11867] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  809.736468][T11870] sctp: [Deprecated]: syz.4.9431 (pid 11870) Use of int in maxseg socket option.
[  809.736468][T11870] Use struct sctp_assoc_value instead
[  809.942124][T11881] netlink: 'syz.4.9434': attribute type 11 has an invalid length.
[  810.207401][T11914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  810.210869][T11914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  810.486440][T11930] validate_nla: 2 callbacks suppressed
[  810.486451][T11930] netlink: 'syz.3.9443': attribute type 1 has an invalid length.
[  810.491706][T11930] erspan0: entered promiscuous mode
[  811.009364][T11911] delete_channel: no stack
[  811.051263][T11975] __nla_validate_parse: 56 callbacks suppressed
[  811.051274][T11975] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9451'.
[  811.061873][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9450'.
[  811.071483][T11977] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9452'.
[  811.105940][T11979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9453'.
[  811.108921][T11979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9453'.
[  811.113827][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9451'.
[  811.127764][T11979] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9453'.
[  811.208451][T11986] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  811.213705][T11986] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  811.222594][T11987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9455'.
[  811.358877][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9456'.
[  811.373378][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9456'.
[  811.606224][T11984] delete_channel: no stack
[  811.708640][T12007] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  811.712150][T12007] sctp: [Deprecated]: syz.3.9460 (pid 12007) Use of int in max_burst socket option.
[  811.712150][T12007] Use struct sctp_assoc_value instead
[  811.799287][T12012] x_tables: unsorted underflow at hook 2
[  812.007936][T12039] netlink: 'syz.2.9467': attribute type 15 has an invalid length.
[  812.053504][T12041] netlink: 'syz.3.9469': attribute type 1 has an invalid length.
[  812.058039][T12041] xt_l2tp: missing protocol rule (udp|l2tpip)
[  812.061340][T12041] netlink: 'syz.3.9469': attribute type 2 has an invalid length.
[  812.381073][T12066] ip6gretap0: entered promiscuous mode
[  812.625740][T12071] caif0 speed is unknown, defaulting to 1000
[  812.717825][T12071] lo speed is unknown, defaulting to 1000
[  812.919849][T12084] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  812.922906][T12084] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  813.289394][T12088] netlink: 'syz.3.9477': attribute type 7 has an invalid length.
[  813.291670][T12088] netlink: 'syz.3.9477': attribute type 8 has an invalid length.
[  813.748404][T12083] delete_channel: no stack
[  813.757006][T12090] delete_channel: no stack
[  813.778361][T12095] netlink: 'syz.4.9479': attribute type 26 has an invalid length.
[  813.786615][T12095] netlink: 'syz.4.9479': attribute type 26 has an invalid length.
[  814.045806][T12117] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  814.049050][T12117] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  814.428485][T12136] 8021q: adding VLAN 0 to HW filter on device bond0
[  814.431608][T12136] 8021q: adding VLAN 0 to HW filter on device team0
[  814.435943][T12136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  814.481173][T12147] tc_dump_action: action bad kind
[  814.483065][T12148] tc_dump_action: action bad kind
[  814.604370][T12159] ip6gretap0: entered promiscuous mode
[  814.607801][T12159] ip6gretap0: left promiscuous mode
[  814.827445][   T56] Bluetooth: hci4: link tx timeout
[  814.831630][   T56] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  814.921301][T12178] netlink: 'syz.3.9499': attribute type 8 has an invalid length.
[  814.958318][T12182] netlink: 'syz.3.9500': attribute type 5 has an invalid length.
[  814.996687][T12187] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  814.999708][T12187] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  815.265877][   T35] INFO: task syz.0.7934:5717 blocked for more than 143 seconds.
[  815.270438][   T35]       Not tainted syzkaller #0
[  815.272585][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  815.276544][   T35] task:syz.0.7934      state:D stack:27448 pid:5717  tgid:5716  ppid:5827   task_flags:0x400140 flags:0x00080002
[  815.281163][   T35] Call Trace:
[  815.282752][   T35]  <TASK>
[  815.284093][   T35]  __schedule+0x14ef/0x4fb0
[  815.285990][   T35]  ? __pfx___schedule+0x10/0x10
[  815.287839][   T35]  ? schedule+0x90/0x360
[  815.289389][   T35]  schedule+0x164/0x360
[  815.291059][   T35]  schedule_preempt_disabled+0x13/0x30
[  815.293002][   T35]  __mutex_lock+0x7fe/0x1300
[  815.294579][   T35]  ? __mutex_lock+0x5ac/0x1300
[  815.296677][   T35]  ? nfsd_nl_listener_get_doit+0x10a/0x5e0
[  815.298565][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  815.300649][   T35]  ? __nlmsg_put+0xef/0x1b0
[  815.302561][   T35]  ? genlmsg_put+0x137/0x2e0
[  815.304555][   T35]  nfsd_nl_listener_get_doit+0x10a/0x5e0
[  815.307387][   T35]  ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0
[  815.310159][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[  815.312494][   T35]  ? __asan_memcpy+0x40/0x70
[  815.314398][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  815.317694][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  815.319375][   T35]  genl_rcv_msg+0x61c/0x7a0
[  815.321058][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  815.322715][   T35]  ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10
[  815.325142][   T35]  netlink_rcv_skb+0x232/0x4b0
[  815.327937][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  815.330031][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  815.332150][   T35]  ? genl_rcv+0x19/0x40
[  815.333792][   T35]  ? down_read+0x272/0x2e0
[  815.335802][   T35]  ? genl_rcv+0xd/0x40
[  815.337802][   T35]  genl_rcv+0x28/0x40
[  815.339569][   T35]  netlink_unicast+0x80f/0x9b0
[  815.341566][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  815.343725][   T35]  ? netlink_sendmsg+0x650/0xb40
[  815.347283][   T35]  ? skb_put+0x11b/0x210
[  815.349011][   T35]  netlink_sendmsg+0x813/0xb40
[  815.350991][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  815.353105][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  815.355114][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  815.357348][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  815.359870][   T35]  __sock_sendmsg+0x21c/0x270
[  815.361855][   T35]  ____sys_sendmsg+0x4d7/0x810
[  815.363803][   T35]  ? __might_fault+0xaf/0x130
[  815.365886][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  815.368284][   T35]  ? import_iovec+0x73/0xa0
[  815.370127][   T35]  ___sys_sendmsg+0x2a5/0x360
[  815.371867][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  815.373517][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  815.375628][   T35]  ? futex_wait+0x29a/0x380
[  815.377381][   T35]  ? __fget_files+0x2a/0x420
[  815.378888][   T35]  ? __fget_files+0x3a0/0x420
[  815.380380][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  815.382088][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  815.383971][   T35]  ? rcu_is_watching+0x15/0xb0
[  815.385815][   T35]  do_syscall_64+0xe2/0xf80
[  815.387574][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.389484][   T35]  ? trace_irq_disable+0x37/0x100
[  815.391257][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.393539][   T35] RIP: 0033:0x7f92ef19acb9
[  815.394934][   T35] RSP: 002b:00007f92f0025028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  815.397576][   T35] RAX: ffffffffffffffda RBX: 00007f92ef415fa0 RCX: 00007f92ef19acb9
[  815.400210][   T35] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000005
[  815.402627][   T35] RBP: 00007f92ef208bf7 R08: 0000000000000000 R09: 0000000000000000
[  815.405010][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  815.407716][   T35] R13: 00007f92ef416038 R14: 00007f92ef415fa0 R15: 00007fffcd27afc8
[  815.410583][   T35]  </TASK>
[  815.411766][   T35] 
[  815.411766][   T35] Showing all locks held in the system:
[  815.414218][   T35] 1 lock held by rcu_tasks_trace/31:
[  815.416734][   T35]  #0: ffffffff8e35b070 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf4/0xde0
[  815.420208][   T35] 1 lock held by khungtaskd/35:
[  815.421843][   T35]  #0: ffffffff8e35a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  815.425001][   T35] 3 locks held by kworker/u11:0/56:
[  815.427140][   T35]  #0: ffff888175729148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  815.430591][   T35]  #1: ffffc9000142fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  815.434608][   T35]  #2: ffff8881a79a0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  815.438362][   T35] 2 locks held by getty/5650:
[  815.439957][   T35]  #0: ffff888177bf00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  815.443630][   T35]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  815.447380][   T35] 2 locks held by syz.1.6059/30252:
[  815.449130][   T35]  #0: ffffffff8f816b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  815.451741][   T35]  #1: ffffffff8e678968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0
[  815.455083][   T35] 1 lock held by udevd/30482:
[  815.457378][   T35]  #0: ffff88816bbbe358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  815.460359][   T35] 2 locks held by syz.0.7934/5717:
[  815.462088][   T35]  #0: ffffffff8f816b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  815.464725][   T35]  #1: ffffffff8e678968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0
[  815.468320][   T35] 2 locks held by syz.3.9501/12187:
[  815.469982][   T35]  #0: ffffffff8f816b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  815.472687][   T35]  #1: ffffffff8e1f7790 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0
[  815.476806][   T35] 1 lock held by syz.3.9501/12189:
[  815.479116][   T35]  #0: ffffffff8f816b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  815.482046][   T35] 
[  815.483226][   T35] =============================================
[  815.483226][   T35] 
[  815.487092][   T35] NMI backtrace for cpu 1
[  815.487123][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  815.487139][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  815.487149][   T35] Call Trace:
[  815.487155][   T35]  <TASK>
[  815.487162][   T35]  dump_stack_lvl+0xe8/0x150
[  815.487217][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  815.487236][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  815.487254][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  815.487274][   T35]  sys_info+0x135/0x170
[  815.487288][   T35]  watchdog+0xf90/0xfe0
[  815.487318][   T35]  ? watchdog+0x209/0xfe0
[  815.487343][   T35]  kthread+0x726/0x8b0
[  815.487364][   T35]  ? __pfx_watchdog+0x10/0x10
[  815.487383][   T35]  ? __pfx_kthread+0x10/0x10
[  815.487405][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  815.487430][   T35]  ? __pfx_kthread+0x10/0x10
[  815.487449][   T35]  ret_from_fork+0x51b/0xa40
[  815.487467][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  815.487480][   T35]  ? __switch_to+0xc82/0x1410
[  815.487502][   T35]  ? __pfx_kthread+0x10/0x10
[  815.487522][   T35]  ret_from_fork_asm+0x1a/0x30
[  815.487553][   T35]  </TASK>
[  815.487559][   T35] Sending NMI from CPU 1 to CPUs 0:
[  815.530594][    C0] NMI backtrace for cpu 0
[  815.530607][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  815.530617][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  815.530623][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  815.530641][    C0] Code: 88 5f 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 d7 10 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  815.530649][    C0] RSP: 0018:ffffffff8e007dc0 EFLAGS: 00000206
[  815.530657][    C0] RAX: 00000000007bdd81 RBX: ffffffff8198335d RCX: 0000000080000001
[  815.530663][    C0] RDX: 0000000000000001 RSI: ffffffff8dad4762 RDI: ffffffff8be73880
[  815.530670][    C0] RBP: ffffffff8e007eb0 R08: ffff8881210336db R09: 1ffff110242066db
[  815.530677][    C0] R10: dffffc0000000000 R11: ffffed10242066dc R12: ffffffff8fced770
[  815.530683][    C0] R13: 1ffffffff1c12a78 R14: 0000000000000000 R15: 0000000000000000
[  815.530688][    C0] FS:  0000000000000000(0000) GS:ffff88818e329000(0000) knlGS:0000000000000000
[  815.530695][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  815.530701][    C0] CR2: 00007f33e4fde2f8 CR3: 000000011121c000 CR4: 00000000000006f0
[  815.530726][    C0] Call Trace:
[  815.530733][    C0]  <TASK>
[  815.530737][    C0]  default_idle+0x9/0x20
[  815.530746][    C0]  default_idle_call+0x72/0xb0
[  815.530756][    C0]  do_idle+0x1bd/0x500
[  815.530766][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  815.530778][    C0]  ? __pfx_do_idle+0x10/0x10
[  815.530788][    C0]  cpu_startup_entry+0x43/0x60
[  815.530797][    C0]  rest_init+0x2de/0x300
[  815.530806][    C0]  start_kernel+0x380/0x3d0
[  815.530841][    C0]  x86_64_start_reservations+0x24/0x30
[  815.530853][    C0]  x86_64_start_kernel+0x143/0x1c0
[  815.530864][    C0]  common_startup_64+0x13e/0x147
[  815.530878][    C0]  </TASK>
[  815.587548][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  815.589608][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  815.592361][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  815.595287][   T35] Call Trace:
[  815.596300][   T35]  <TASK>
[  815.597178][   T35]  vpanic+0x1e0/0x670
[  815.598390][   T35]  panic+0xc5/0xd0
[  815.599701][   T35]  ? __pfx_panic+0x10/0x10
[  815.601331][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  815.603357][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  815.605640][   T35]  watchdog+0xfda/0xfe0
[  815.607226][   T35]  ? watchdog+0x209/0xfe0
[  815.608856][   T35]  kthread+0x726/0x8b0
[  815.610199][   T35]  ? __pfx_watchdog+0x10/0x10
[  815.611979][   T35]  ? __pfx_kthread+0x10/0x10
[  815.613648][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  815.615382][   T35]  ? __pfx_kthread+0x10/0x10
[  815.616774][   T35]  ret_from_fork+0x51b/0xa40
[  815.618123][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  815.619620][   T35]  ? __switch_to+0xc82/0x1410
[  815.621194][   T35]  ? __pfx_kthread+0x10/0x10
[  815.622584][   T35]  ret_from_fork_asm+0x1a/0x30
[  815.624244][   T35]  </TASK>
[  815.625781][   T35] Kernel Offset: disabled
[  815.627094][   T35] Rebooting in 86400 seconds..
