last executing test programs:

2.33998959s ago: executing program 0 (id=1390):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800)

2.338723036s ago: executing program 0 (id=1392):
socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x26}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x78}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32=0x0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f00000004c0)={0x8, 'virt_wifi0\x00', {'ip6gretap0\x00'}})
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0)
write$nci(r7, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x1, 0x1, 0x3, 0x6, 0x7, 0x3, 0x7e, {0x5, 0x9, "30ea56ccf61cab1d"}, 0x3, 0x3e, 0x8, 0x4, 0x1, "eb"}}, 0x1a)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r12 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r13, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x6, 0xc9b, 0x3e, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000)
write$tun(r11, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.350262967s ago: executing program 1 (id=1396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000100)=@ethtool_dump={0x3f, 0x3c5, 0x6}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r2=>0x0, 0x2f, 0x7c, 0x7, 0x7, 0x23, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x20, 0x5338a624, 0x2}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}, @IFLA_NET_NS_PID={0x8}, @IFLA_MASTER={0x2b, 0xa, r2}]}, 0x50}}, 0x20048004)

1.287568181s ago: executing program 1 (id=1398):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f0000000440), &(0x7f0000000480)=0x4)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000001580)=""/4114, 0x1012}], 0x1)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x2400c840)

1.28583592s ago: executing program 0 (id=1399):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140f, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040045}, 0x4000001) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={<r3=>r0})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x30044108}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc8, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4044000}, 0x24000001) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0)
sendmsg$kcm(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="bf9ea2ffae4d4f157d9b91ada1eedd869237", 0x12}], 0x2, &(0x7f00000015c0)=[{0x48, 0x10b, 0xee, "816b0ba0a8f2b8d7403321e1a3bee6771cf7549560059ee8043e57ce62f7b6066c8cc79208bfd31c80904c3a946180ef15bb4661"}, {0x88, 0x10f, 0x8, "475dcac4b5e0b8f63880e599fe5d28bd07294e2c68058a40d7238966591342efd2af60b1d21eb91c386dfcdef718b9da9cc54580db3f68a3f227ff7ca18f652832748ac1b55fe1820c23611a892bb59bc8e56ad895e079ec43b1e6cb8b3e5493fa9769ade496688ee1d6e7d2f2fe655550adf11dcab2"}, {0x1010, 0x15, 0x3, "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"}], 0x10e0}, 0x8000)
ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000002700)={0x3, 0x9, 0x2, 0x0, 0x2, 0x12, 0x8, "3181a534a20f9763caa7245ea5053bd58c7c5ba1", "589aac6801b0721b1cdb0a1cd946b7e9f6dea7c3"})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000002740)=0xfffffffb, 0x4) (async)
sendmsg$rds(r3, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002780)=""/151, 0x97}], 0x1, &(0x7f0000003bc0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x8}, &(0x7f0000002880)=0x9, &(0x7f00000028c0)=0x1, 0x4, 0xe, 0x7000000000, 0x81, 0x4, 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}, @mask_cswp={0x58, 0x114, 0x9, {{0x1000, 0x80000000}, &(0x7f0000002900)=0x2, &(0x7f0000002940)=0x5, 0xab7, 0x2, 0x200, 0x2, 0x26, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x75}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x4}, {&(0x7f0000002980)=""/239, 0xef}, &(0x7f0000003b80)=[{&(0x7f0000002a80)=""/149, 0x95}, {&(0x7f0000002b40)=""/26, 0x1a}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x3, 0x8, 0x3}}], 0x128, 0x8004}, 0x0) (async)
ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0)
sendmsg(r3, &(0x7f0000004080)={&(0x7f0000003d40)=@llc={0x1a, 0x311, 0xa, 0x4, 0x74, 0x7}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003dc0)="bf292f70fcc3fbd1641dab727bb30d983542bc7d317f3b66d3122adc3faabe6b7a81d8bc25242b9fa69cadbef59ba877897b50de3dcba7d1b328ef3fb918ebd9a893ed0f623a4e60c9160fe9b791badd8543abd81de93aac77828750bf82befdeb3596015e676066962315d2979f497e07cbd14c1cdf885ecfb1d7f20bef503c430cea16", 0x84}, {&(0x7f0000003e80)="12743863bcc24c0fc7f81b829b823a3c78cba67f02403c9ffca2a76a96f1700ad8b41f8eedf1291f4cf534985018ca7919e1b6f13afd3b1719420b8a3b39d50c0cf082f2b38727a4a18b951ebd473fac92dea0f3bcc6ecc61f17ad7268ed53fe89ab507206f897dfc43f9b1509e4c725fead4e02785f8b1e1434c20d54b0143a044b25b9ae1dbb7ae2e0d4d760", 0x8d}, {&(0x7f0000003f40)="9de0fb8176199f11b29d711748fa8d2117c27c6bc489a8ac6fde959eb3c641fd72568f938c65b9c1f10bcfb8b42ff8812be3a1cab1fcabf4b895d92e984c59d8328946a8fe5a47b05d740a3a2e3edd9857610c2ee99a4be68144b847a86e46ae81f9c3fded38fa8e303ba0619a013c378d8325c42be3e8ab9a087dda6830162ff182ec1d22a375a305b677189d63433f281ef4c96a2e66bbda99f1a009b9d9816247e35dad7af9b30a5bea7759308c1c3018bea695a361873f9ddc20585727191318425e0152403f90495d4daf3fc9aafd19dca6c3d2cef7b0a9799de4f0bc839369ea6bbfe56b3e3972bce02e2fa16410fc976394125a", 0xf7}], 0x3}, 0x8080) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000004100), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000004140)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000004200)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x3c, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000004280), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000042c0)=<r11=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000004380)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x1c, r10, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x40000) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000045c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004580)={&(0x7f0000004400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x130, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_USERDATA={0x5f, 0xc, "7820e5107e2a92c23a74572070d5902d99ef1779b89871fcf6527368d77d6ba619c2de0f89b9253ccc53e50c38d1aad2c3c31a7c58b77983f9cf9106e8d451731640c895f6a1d03cadca0c3be4b133e8ab4ad27de76440ad96e7d3"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0x18, 0xc, "b0ff3eb08f311b65bbc73383918e121ff450c3d8"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r13, &(0x7f0000004740)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004700)={&(0x7f0000004640)={0x94, r1, 0x800, 0x70bd2c, 0xd, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x60a4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9db}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]]}, 0x94}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004800)={{0x1, <r14=>0xffffffffffffffff}, &(0x7f0000004780), &(0x7f00000047c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000004cc0)={0x17, 0xc, &(0x7f0000004840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbbb0}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x7f, 0xe, 0x1, 0x401, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r14}}, @alu={0x4, 0x1, 0xa, 0x6, 0x2, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000048c0)='syzkaller\x00', 0x3, 0x1b, &(0x7f0000004900)=""/27, 0x41000, 0x48, '\x00', r8, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000004980)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000049c0)={0x3, 0x6, 0x7ff, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004c80), 0x10, 0x7ff}, 0x94)

1.209667263s ago: executing program 1 (id=1401):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r3)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf250600000008000d00080000000800010030"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40804)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r5, &(0x7f0000000880)=@x25, &(0x7f0000000980)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a000010000000000200012800800010067747000140002800800030055000000080001"], 0x40}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0xc9}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r10=>0x0)
bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, r10, 0xffffffffffffffff, 0x5, 0x10, 0x9, "fc76d3b2c056bbb2e757457a0f2e1e664a3587a3cdd7fe25af8e8f5d2bdca9c441134f2e9de782410dd65f36068a42c8fa799ad507af62d722f1d1901198d9", 0x31}, 0x60)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r11, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4888)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_POLICE={0x0, 0x5, [@TCA_POLICE_RATE64={0x0, 0x8, 0xc42}, @TCA_POLICE_RESULT, @TCA_POLICE_RATE={0x0, 0x2, [0x7f, 0x10000, 0x1ff, 0x3, 0xffffffff, 0x3, 0xb, 0x4, 0x1, 0x8, 0x58, 0xd, 0xff, 0x3, 0x7, 0xf, 0x4, 0xfb, 0x5, 0x7, 0x5, 0x8, 0x8, 0x9, 0xffffffff, 0x0, 0x1, 0xc78, 0x6, 0x2, 0x5, 0x6, 0x8, 0x3, 0x80, 0xdfc, 0x4, 0xfffff800, 0x1000, 0x8001, 0xda, 0xd8f7, 0x6, 0x4, 0x2, 0x6, 0x9, 0x6, 0x8001, 0x80000001, 0x1, 0x6, 0x8b, 0x0, 0x2, 0xffff, 0x7b0b, 0x3e8, 0xfffffffb, 0x0, 0xb, 0x6, 0x9, 0x9, 0x4, 0x1, 0x14, 0x1, 0x7, 0x6, 0x7, 0xfffffffa, 0x5, 0x401, 0x123, 0x9, 0xfffffff7, 0xb, 0xc6c7, 0xfff, 0x0, 0xa, 0x8, 0x40, 0x3ec800, 0x5, 0x6, 0x2, 0x441e, 0x82d, 0x9, 0x9, 0xffff, 0x6, 0x6, 0x9, 0x6, 0x100000, 0xe787f09, 0x7, 0x7, 0x5, 0xe, 0x3, 0xffffffff, 0xffffffff, 0x9, 0x1, 0x8, 0x2, 0xc000000, 0x6, 0xff, 0x7, 0x8, 0x891, 0x8000000, 0xbc000000, 0x40, 0xffff, 0x7, 0x4, 0x4, 0x4, 0x5, 0x0, 0x3, 0x8, 0x2, 0x7, 0x4, 0x590b, 0x0, 0x5, 0x7f, 0x6, 0xff, 0x6, 0x8, 0x8, 0x8, 0x3, 0x1000, 0x1, 0x80000000, 0x871, 0x1e, 0x7f, 0x1, 0xe, 0xfffffe00, 0x631, 0x0, 0x400000, 0xc, 0x2, 0x5, 0x5, 0x4, 0x3, 0xffff2c3b, 0x1, 0x7, 0x80000001, 0x3, 0x85, 0x100, 0x53, 0x5, 0x8, 0x100, 0x6, 0x9, 0x4, 0xdb, 0x7fff, 0x1, 0x6, 0xb06, 0xe36, 0x3, 0x7, 0x10000, 0x3a, 0x670, 0xe8d4, 0x1, 0xdb, 0x3, 0x401, 0x4, 0x1, 0x5, 0x3, 0x81, 0x0, 0x6, 0x4, 0x7fff, 0x100, 0x8, 0x0, 0x4, 0x2, 0xfffffeff, 0x3, 0x5, 0x3, 0xa8be, 0x4, 0x7fff, 0x1a19, 0x3, 0x4c42762b, 0x3, 0x3, 0x7, 0x0, 0x80000000, 0x1283, 0x5, 0xfffffffe, 0x6, 0x40, 0x0, 0x466, 0x5, 0x5, 0x443, 0x0, 0x8, 0x2, 0x9, 0x5, 0x1, 0x3, 0x1, 0x7, 0x800, 0x1ff, 0x0, 0xebed, 0x8ce5, 0xc9ad, 0x5, 0x9d1a, 0xb, 0x4, 0x9, 0x9, 0x821, 0xfffffff8, 0xb27, 0x6, 0x6, 0xe]}, @TCA_POLICE_RESULT={0x0, 0x5, 0x609}, @TCA_POLICE_RESULT={0x0, 0x5, 0xf}, @TCA_POLICE_TBF={0x0, 0x1, {0x1, 0x7, 0x8, 0x6, 0x0, {0x1, 0x0, 0x7, 0x6, 0xfffc, 0xffffffff}, {0x7, 0x1, 0x5, 0x10, 0x2, 0xfffffffb}, 0x2, 0x6, 0x5}}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x500}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x7, 0x1, {0x7, 0x2}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1.202594864s ago: executing program 0 (id=1403):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x58, r6, 0x1, 0xfffffffc, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x2000c050)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000087f9437f46f54feeee53c05a89714c6e5290371d06c9f8c060c0f4ad7d774e37ae212e8f9be2e8ecb0b3bbe2e2b308a6e34d5faf964532733279991b23a43c17c74c457b4b80a5cb65d2bb5da9dcc786a3ed9fd0", @ANYRES16=r6, @ANYBLOB="00022cbd7000fcdbdf25120000000800060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)

1.098361056s ago: executing program 1 (id=1405):
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001980)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000680)="c4506ee0e338209d46b2c943649f04a05f8a5ee3c1235272e5dd3fea7a16edce5995b5d2bf0577f9b4911b7ce412246ab265e1c6ab9cd724dd1044c5d8d5ac171827ef0e00516aa2e7a0e1580491267e2ccc92db6dc995b3d74f18bd6a31efd4c1e70da92f48dede22940d4e5d55397e0924fbd1e22034ce", 0x78}], 0x1, 0x0, 0x30, 0x4085}], 0x1, 0x40440c1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9000000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000020000000008001b0000000000680016805400018028000100"], 0x90}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}) (async)
sendto$inet6(r1, &(0x7f0000000280)="bc387e1700b9c403e972e6ca3acadc863d2c1ad3b223a062f16fed908bff1aee7f94481d81936ec5", 0x28, 0x2400c000, &(0x7f0000000400)={0xa, 0x4e20, 0x8001, @private0}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x24, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 32)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYBLOB="557286485fdf14daaabf", @ANYBLOB="c77f06003602dbb53e106d9b13606f"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0xb8}}, 0x8041) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000740)={'ip_vti0\x00', <r13=>r7, 0x80, 0x10, 0x8, 0x7, {{0x1f, 0x4, 0x2, 0x2, 0x7c, 0x68, 0x0, 0x9, 0x4, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x23, 0x2, [{0x2, 0x7, "aa65f02b53"}, {0x5, 0xf, "cb58480a1c9a2e85627d1a6ab8"}, {0x2, 0x7, "52caa4c0c4"}]}, @ssrr={0x89, 0x1b, 0x83, [@rand_addr=0x64010100, @local, @loopback, @loopback, @multicast1, @empty]}, @rr={0x7, 0x23, 0xff, [@multicast2, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 32)
sendmsg$ETHTOOL_MSG_RINGS_GET(r11, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)={0x100, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x100}}, 0x4082) (async, rerun: 64)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200011904000000000000001c"], 0x28}}, 0x0) (async, rerun: 64)
r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffe34, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r14, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10)

1.040644471s ago: executing program 2 (id=1406):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000004500009112bb0000000000950092f5b4427b72a0c79aedba000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000801200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000601000080ff00000800a400030000000400ac0090fc9ef84b23fa459c32fc0669dcb7048233c04f3e6aeca63d2c1d258fd3c9007dddcd96bbb9440611daf3d6681f58f9cf3b08"], 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0c00990000ffffff000000000800260085090000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0x1}) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) (async)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
r10 = socket(0x400000000010, 0x3, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r12 = socket(0x400000000010, 0x3, 0x0) (async)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000822) (async)
r15 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x4b4, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r16, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x484, 0x2, [@TCA_ROUTE4_POLICE={0x470, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xc42}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x10000, 0x1ff, 0x3, 0xffffffff, 0x3, 0xb, 0x4, 0x1, 0x8, 0x58, 0xd, 0xff, 0x0, 0x7, 0xf, 0x4, 0xfb, 0x5, 0x7, 0x5, 0x5c36, 0x8, 0x9, 0xfffffffe, 0x0, 0x2, 0xc78, 0x6, 0x2, 0x5, 0x6, 0x8, 0x3, 0x80, 0x6, 0x4, 0xfffff800, 0x0, 0x3, 0xda, 0xd8f7, 0x6, 0x4, 0x2, 0x6, 0x9, 0x6, 0x1, 0x80000001, 0x1, 0x6, 0x8b, 0x0, 0x2, 0xffff, 0x7b0b, 0x3e8, 0x8001, 0x0, 0xb, 0x6, 0x9, 0x9, 0x4, 0x1, 0x414, 0x1, 0x7, 0x6, 0x7, 0x9, 0x5, 0x401, 0x123, 0x9, 0xfffffff7, 0xb, 0xc6c7, 0xfff, 0x0, 0xa, 0x8, 0x40, 0x3ec800, 0x5, 0x6, 0x2, 0x441e, 0x82d, 0x9, 0x9, 0xffff, 0xb, 0x6, 0x9, 0x6, 0x100000, 0xe787f09, 0x7, 0x7, 0x5, 0xe, 0x3, 0xffffffff, 0xffffffff, 0x9, 0x1, 0x8, 0x2, 0xc000000, 0x6, 0x100, 0x7, 0x8, 0x891, 0x8000000, 0xbc000000, 0x40, 0xffff, 0x7, 0x4, 0x4, 0x7, 0x5, 0x0, 0x3, 0x8, 0x2, 0x7, 0x404, 0x590b, 0x0, 0x5, 0x7f, 0x6, 0xff, 0x6, 0x8, 0x8, 0x8, 0x3, 0x1000, 0x1, 0x80000000, 0x871, 0x1e, 0x7f, 0x1, 0xe, 0xfffffe00, 0x631, 0x0, 0x400001, 0xc, 0x2, 0x5, 0x5, 0x4, 0x3, 0xffff2c3b, 0x1, 0x7, 0x80000001, 0x3, 0x85, 0x100, 0x53, 0x7, 0x8, 0x100, 0x6, 0x9, 0x4, 0xdb, 0x7fff, 0x1, 0x6, 0xb06, 0xe36, 0x3, 0x7, 0x6f, 0x3a, 0x670, 0xe8d4, 0x1, 0xdb, 0x3, 0x401, 0x4, 0x1, 0x5, 0x3, 0x81, 0x0, 0x6, 0x4, 0x7fff, 0x100, 0x8, 0x0, 0x4, 0x2, 0xfffffeff, 0x3, 0x5, 0x3, 0xa8be, 0x4, 0x7fff, 0x1a19, 0x3, 0x4c42762b, 0x3, 0x3, 0x7, 0x0, 0x80000000, 0x56, 0x5, 0xfffffffe, 0x6, 0x40, 0x0, 0x466, 0x5, 0x5, 0x443, 0x0, 0x8, 0x2, 0x9, 0x5, 0x1, 0x3, 0x1, 0x7, 0x800, 0x1ff, 0x0, 0xebed, 0x8ce5, 0xc9ad, 0x5, 0x9d1a, 0xb, 0x4, 0x9, 0x8, 0x821, 0xfffffff8, 0xb27, 0x6, 0x6, 0xe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x609}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0x8, 0x6, 0x0, {0x1, 0x0, 0x7, 0x6, 0xfffc, 0xffffffff}, {0x7, 0x1, 0x5, 0x10, 0x2, 0xfffffffb}, 0x2, 0x6, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x500}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

968.243293ms ago: executing program 1 (id=1407):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a0104000000000000000001edffff07000a40000000c79a9213876e6348d01c0b4227e4d1000900020073797a32000000000900010073797a30000000000800054000000003580000000c0a0102000000000000000001000900020073797a32000000002c000380280086d700000000000000001c000b801800018007000100637400000c00028008000140000000000900010073797a300000000014000000100eb6d34fd8e73a7f9f165e4e9116b900010000000000000000000000000a0000"], 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r4, 0x0, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe2}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000001300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000000240)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [""]}, 0x14}}, 0xb9966e3a981ee0e3)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

966.009358ms ago: executing program 2 (id=1408):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x399, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x969}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4c081)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x170, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2ee9}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0x22}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x491a267f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x21}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x8c0}, 0x4004050)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000500)={r0, r2, 0x2, 0xfa, &(0x7f0000000400)="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", 0xd2, 0xd, 0x8, 0xfff7, 0x5, 0x2, 0x3, 'syz1\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000640)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000680)={'vxcan0\x00', <r5=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xef, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000d00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x284, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0xc0, 0x3, "af8d70e8e81d82d5095e777e2ff91df50ffccb7ecadbc2e9cc97b19978ff64dd95c8a1fb41d89c7549491b720e57173ccb505eaaf644bdb37619d569c69a910d174218d73bc41d9366bf05baf2ccc5f2c9f97498bc47cc90f540b1f8dfbac0ee7fbe99f496215a3e030c14e842e633eb8a7eb3244f5308e0aca1469be06753aab73a80ae1f2b3312d72f61bf7cba5943ab9d007c233e33aa70aa11e31fe404d7119bd3a0fd50c4083d32865cb2c94c658e926a73d0f408ecd24c1545"}, @ETHTOOL_A_WOL_SOPASS={0xf1, 0x3, "c91cc108c44abb8cba8236ceb51f507c9d117fe4fbabe7ef7d2d057107fa44eb221996dc20c233dca99cee3837b6be1c8ab5be47ed4cb30586d503de695157a0b3ca6a3aa5c447e6af38e783d8b67323f47c5eb068e100c0ded37dd2f0a50c3906f9f64d12d88a40284f8fa4db3afb2d4707b930a7a761e431b44c2da5c6ded0e3f360fcf84735973d890f33799cf74bf573d920fc9ff759f5a844a350c0fe71bb340d0a3390bcd0ab259230e76e80b648956a1e6ddcfc9f1379854e40f3a0718bb41649fafae7462882990993a7479443bdcc284810bc5a900d5d580195a30fef32b9dd411a66a2e67c823639"}, @ETHTOOL_A_WOL_SOPASS={0x4e, 0x3, "8c18c48119814098e1b375668f1be257dc832e21bce4f528a0ebadc825ffd56c438e2561a04f939ce7e4dbcbdfcad293639a8c6591e5ab8deac6384eedf7c177ddde310db8b5c4997cef"}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x20004000}, 0x801) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc0000000}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x64, &(0x7f0000000ec0)=0x200, 0x4) (async)
bind$netlink(r0, &(0x7f0000000f00)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)=@deltaction={0x90, 0x31, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x40004)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000010c0)="607d4b03614dc751eeb2de", 0xb) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0xe4, 0x18, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x15c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xf5, 0x6, "6f6226e7071ce49a0cf3a4a8878b04f980d4d567aae26f1b1ae64715789b39893d8d49e42a3c618190da6035c57d4b47d0fe37a9fa79147f4f63c12c9dc3193390c48bf09dbe670a85a3aaeb0ae656a3146073a106bfd8c67b1e07b37900bb435d59fc67093bccadba52156e20b7b7575f783d73ee632d8106d2d2d16e4519e41f206349af3732bc4bfd6a24e3a96633b451d06041325ea814859c61731be090045b020287971ee8ae7c96e9a136d182f233a8f03f21a768256ba50fcbf660f2b6cd292560a5c69eb0cf15e603b53b2a1f45300093a4f5740d105abc4a5fe08c4b646637e19fc3642364d712a37f2c28ef"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x268}, 0x1, 0x0, 0x0, 0x40010}, 0x40800)
syz_extract_tcp_res(&(0x7f0000001440), 0x6be0, 0x4) (async)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001480)={<r9=>0x0, 0x1000, "288a12badc31b6acfd93253c4282f42f765958ee39ce363d84016fc46c248f2e18042511c4e367cfb9343cd771bfe56b25e6dc20e6e76f712ddd50742fcaf4f619a8430db41bc5ed11ba28de2ee55d8cc468084c6856d84cff69ad94219ac9defe22dcc3b0cd947b37f1b2e51b5dd668baa72c8cdc8a9ddbe32f4ceb4d5e68cc8434908076d4f1fa00712b9ae2e4d7cd116826b9011aa6f0cfbaefe358d53cecfbcef92b946c8d20d070b59aa228edede65931d6384d163e3861dc143572648cadf994b7b8551fbd3a5f78310455fe27b0aa7a6b3a92871ec5ee4764d0b00ed950f4d7f847a5973aa33afe64cd215c303c0112967bc37d64b92b1059e63eafcf5b8e68d5cbee9e1c12cddee8d90939a18697abca7234902fea71828969c389c70248c89e071eed56a0cdb0a7f6286f8c983de8ce78f897b8a01a766e361ad36a07865af80176ebcb743064e8931778718d034a79df360df89501fa4985970ac932d334ffad5b0ca57525ca525bc04a98f3e52591fedbecd9ac378557db906ae6c377f28c6d69d501411b10ebaeb282cda397d70fac9ec4804e69668ceff22a3ebd9e539996273ca39bfa11466d5d276748444db1e67a144dc9b679537e94b9d8b5d0a037ebf0505c7d67f0b1dbeecac8bfa9c5bb6a1be56488b03cc01f0a4636f0397b0f6b4d953b2d84aaa89d52dfdc0bdcd6a316054f21e820f88c45c8630cda8735672ce4277796ebf167a38ca493eb770d34b7fcdf196a0770b2562758ad577486f68292c2d57cd52cb349df53510137763ba57d3637b74633c77d83bb8594486108377b3e21c23a29eea3e76eae58dd960539c48d52a0203ec066e288a1fba0be27ab95e30b8cbb3d3dcc7ac781238bc16ecde39890a6e4e93677eaee639d18f7ea7565aaa60ee90ff716c0fb8fcc9f97d873dcdb03df918f40b6a3a89b76e7a48b2b718cd53b764895714c7feea7c6ebbcef6e743c0d488f33e0363c25892507fe7e7af64b3f7b9b95b054fd7480e15d7dc188cb348cc9523d1044ba4ffd4f2a3b905b15e5d5b44a1fa4f7d8589e17f37c2a113d65f61c68027eda3edbab04086b10a42620919eba9ab533b54a650c5d6db443235fd8720026d90718518d802fc689d7b91979e2387507554e0958d2e0c18909b187c4c339fd6457b9a346d830bde03db7da71b5aa01e8d9b4f787a7dfdcccb4e0f74cd3930f2d52b6c93cc1b361f4d8e1a0207f0918ca9f830e38a66a315c3cc4cd7c0f45a7015641c9caec29c98cbb39395e578ce05fe67787a085e76fe20c1e4ac184584511ea2a03162698994f5fa74f34447922572f14369fc06184c2386a21d636c0cd2c7c16b2c2dbc59817fc14e961d89beaf32acf300bafb706d96b54a383c4d277251b3bc0eb726dcae6978a0c4f9db501f092115ee7d45fd6da54dc634f3c403912cf3596f7f2b08aa467b5d8600862d55fa641871ff9b6eee524f1efd60bf1392f6f0b6a1b0644485d05a0a0c7c823db14a4d0d8fb523b99e26e3c41cab6a358804e8b3f43d3e14b0e1f45df0b6e6cd7504434c4801d7c47c3305ea0fb6a42f0c94ce68f7ebc0e0cc1f32b76e23d3a379cd1e6a1414af56b5dd3f24ba791315f3f224ddb83bf9decc41e1140a2a9c38e8754a843014027cf46c3f2f07f921f0a641a6c0ccf018e1eeb202ee184ea72fb2d809883e0ac2cd15dddb148707205e004e0d010d65de70c19a544f7dd14738c48f4fe393d8449937baf8dbbce4b0e13d4e28e6c49029a2c6c8312628c93bbe83721ab0760834be1a7c29a6a9ededd6ca4992d87468c608b48662917da97d1b28691bedd5ce2aea0f918a3c321ef3b420b9ccbcbad27f73468dc70306a72a1a28e2ce38b4c788406d128392c6a1a06341fcff3cd28258ecbf5f75412f515d5484f58a62a57364f0c5d4b843bfb7370ebb18f1fe0c988888debe950f03eb604f7237f964c9cdc2ac34fe45304e9e364143fb523732270117e4217ed6b2ee00639b58e2ca5ad648027f676a5d504dca727e640f8ee1c32fe080cfd9d64a62a9407e31911f4b3aede5ad2cb187bb418fa9f4de34ad544930e20aa3f7dd1c7798acf8088ef09b6408e4348de73c00722bc74e38abec826674dd64eb5e8ec125a2b6efa4b692ef130717d398bcdd3e6e4d9cdd26124c22ef81d9a404f11cfaf1800359bb9cfcc48a71022c4b388004d9a65fe2f9d4480b9227bc59c0d01059bbdd92f6ddaccd77b652ed0a0bc7ff4f53de9c6bec9edcffeba436a9d5c3588c9201cf6c6312edaa288fb681fd15ba34e364ee71885ee9d1c08c0f4731224e4435e48d091f3163fd97f776eb1ddd827fc30ef33662feab152e02588c8f0841bcd0dbe79b80f8e1ec55d0af3ec7e58b722d239868740ce6f798fb08e463b55b14370b3f76c1a05780c997ac1386b9d99cee81b5d54caa890b1c2ba9f4efd41fbb9ef4f967134848b1f39fe6bf49c8a2562f8d9c9f2cd6373c8542d52625a1f166acbb143c88bcdc0094d36939a40a6687e31649088675838307f4f5c9e676c51bd59df064d6be5056e5bca7a78f2978141b4f904156cc9a52a30b429c808ab6615c127adf22dd6820402b5f67529c8d050aad0ae11fb4715d915919a53b31e0b87b02520e86ad14d53499bea2c38c6d466a78cc190f3b97466021344cf49e9363b20e8d579d6624b80cba8b90c16d546d47fa0546c5dbfc467d1b4df4a220e439a9dd37e604aba362ad6e6f6b0021cef36d341de48acddb6435329ffeb40904eccf71a88de2d6b25a5c89b0ddacb775024b45b65868bface01942666aa895bdc4fd3e03eddea16456ddb860a83a2012bde1d038e4c95a7a6fc30b74182e208b90669318e571e7311d7487b23c8073023f211f39784c079eaf20755429138a54c93123948a99a5b0be70fda2128b6e2216ab8f92de997402a987c7c74baf5c35efbcb84798d057580e6b974fd083cc9b289d1350a37b1f6fde952d903ac5e16db2b7c18cbfa7a2a39464b93cb25218605f0617ef8820c2c004670e4dc3a3e0776ec67dc287a5fc0011c7625d8f8584937d0a11e1772bd571b6dfb9145c70e1c7104adae0e2e38343a2995a1559cc9160380836492474d19b9f16d418353e68ae61052ca070f7787803f3fbc49d147e4df851bde320ecdcb872d66bd0f1fffb0baae6d84ec599dcbd44e7902d84383b1570d3e07466dc79c692592634ffa08becf389c96bc9edab46d040624a4bfdb992a8b3fefb8cf268eeca087d6c25e1eb87493a6095fb2893985836dc98ead2ed17435ae708d13522b0ccea2ae291f6ab19b10b94e6a616e23606397e87111441a2657d5957747f0783dd4130bd6582752347e3a15fd950571ff4a1fe5744452c7940c8f0ca13252b35bb895a831329272445ecf67cb6468129a5b11eb5cced1c0482ae56cf2944404eb32d1a0eee0a3be5ef8f74e1145493f5c1e22f2076f8fdf6c1bd55cbf09754e0e50bb2ff508bbd49eb4a6a44cfc189b6d038d586ebc1abaf18d9c145afbc9ecee8353848c92ba7d1fff6ef1580870184b52d61fc925f545843a4fc1f049186132a502584dfa52c74bf4e0bc679028fec63f0b89145117f7f4a2797bdf687c91f7c12d060fe4502a6621a5c8cee63a4b33b53c94b18ed56edd28ef0c90ebad583b1aa9d37418090b204715ec4d77299798e855ad31cb21958fb914489b0009151f911bd86a5319fe218f8863ed96ba024f865037d4de884b454571d299bd0fef64079f6276acea9f5ba746d8b63b8d5e9a6a93b7d0e715b3ddfc57fc5163a492aa17d885a5529230bb14af5ff9f709c4eaa4a6cfa82aaa56472f2d0286c23b4629aef8269e65856a0ae934a0563934ae945ae38655168fc0c500329f27592819e1dee76992acc390a75969c48fbabcca0865a82b7ce4dbf14dc01e866315608c8646e41be6d842664a32e85df0297e538bc74757f516115547ce587204b4aae1ef33818fdcfbdcfe07476d808b56f0fdd0377e77d756c82faf8200d8d69bb1c27899724bb3b03e901d4aacdb662db681a6b41d8117f7c960185f4e5c5a141392bd2b4ba4a73a89f0cd2c4fd1e776b4761926b5bf9746ed4389607f41331324a7a3d65d1396f297fcdfec4fd08422f79572d1d02e10a57d5ed40917d3eb09669a2c3d19bcd73a99b1c3974bc25ebf8605f541004997ea6db98790aa27a6ea6f4799feb07d28d07dded482442b988b333b9048936c6bf02d19779af6d5d2a8ed8f67290215b9e789d41f9467fe038f6bc374f2ca4438646c0cbb8dc55c59d3bea7fdda05960b20a339e9450f2fcbad55bcaaa938eb8a76b7ae821f8ea86766778ca346f73c60b0ebb00aee73a56e1d4f18e47c8bef4cf6b6ce8ba45bc87c5442de8023bb0a0991d3e82f1d7358e147b4fc154eb93c71a9f6c2cb6d0c9d257e8fe927a90c6a7c69be1455f91bb6ed8212dad2c9b460f6bf327e9346a82e3a6307ac37472cc4a4e87154652f284d276d5f585cdf6b0ea16c617425cef9dfbc317b32b01ca4444619b09ea6eaf6654b15a1ff8281ea4b88f8cf286ad8dfe7c367d5a696111a6a9cb0e88e490ff497bd61ecbeceea35855bb01bc2244655dee9a77a974230ab0a18558f88c1be72ac10600687fafbe0d3fcce9a66d07791b961a82116db4c787096ca9428216aecbf536298a94ba3aaaec1b576ea69164895f207f37e6aa2cfd75110e1c297b6bfe5e29b150be687cc4d53ef71b0b03c8d9afe973631f6cce61e9c0f865e27f569ea82381f4b43294e38eee48221a94da3d66e41d33b43f96aa015b30f40f5b3cafcc6a3d11bb16e0002818ebf06e3ae6b206a9764020d5358905bd2bd39c501c733842a60d8e3b5be041a6c1820d66607ffe9d82fd7f2cf2b1ebfdffc7fbfd1aa5f0d72b321e6cd9ebc3c0f79c9fdf44651795fa85e2ace26928512e99d55baa9c65d77ddeecd4bd0b2b189f472eec85027abe2088f952bfdcb78f3adfaaf7316d901e03ded69135ebbaf96b36492d9915eb677fb33c513b8b70e95805efd1c3aef79e8ae1758db950f5a03841cb9cb9293aac2aa31a8fc20d27f3e944b6dae41e020264284c7fe0f3bc77e2a585c8d8c928ecf2b7d35e99c8534dcc39045183b912a695baa23c1101e82091c41ebed51c2bd41df1c2549bf5a58921e6c67b87d6f84c4fe7ee47ce4f416cd62915f845c32623e2f7561a8ab61b26d3fc9f45653da3dbab0497f9943a48711a049de20c94488c709e1fc9fc0c895ee55473e49bee9469ed54526ac0c9dc8b5a2c7eccb6fcfde9d5cdbcaf3381b25fa23cfc219ab34d48c397b27df2f1c51b7907de4fde8e32a64231536f90f759a22dd5aa1171678950a3b656f003a9e37d967d2c9a853d20b7c12ee090e57a4d46034594f893edd7457777eb5af5f40b0debeea37dd03fd564e8f4429724632c04392cd2bad6350f49781781bdd817c839a01b891c28c2a889bbd85b5730827905707eb16cf3a9df39557267816bc9954cf439408d6d19c3a4c8036f79c31a7e917313eacd8ada52555eb2bc0d0f88110cf7d8882af4e6f7678426820b4533505f78ff9481f693ecd784a16fc2ef6ff51241def0682f1517273eba71665b7dfb40d6fc83e480b4b7ca7124c0a4bd7afad1810ff95e2202d2a19d9183e914c2150d7f5987bb7c83673afb80d49cbf5baa9e401077d2e3915cb398f47cf806f8aee0ff1557eac316d0e8b3d07cbf5fe2ae2b243b4c0a917ff50c5e22d349b1ff97e345927a473086045bf9ef9bca8ca94b44e2a324e96dab83d1db6a14c"}, &(0x7f00000024c0)=0x1008)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000002500)={r9, 0x169}, 0x8) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000002540)={0x6, 0xd, 0x6, 0x7}, 0x10) (async)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000002580), 0x8)
bind$inet6(r10, &(0x7f00000025c0)={0xa, 0x4e20, 0x800, @private2, 0xc0b9}, 0x1c)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x34, r7, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x34}}, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002740), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(r11, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x90801100}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x28, r12, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24048084) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000002840)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x1, 0x552, @remote, 0x2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e21, 0xffff7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x306}, @in6={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}, @in={0x2, 0x4e20, @broadcast}], 0x94) (rerun: 32)

790.942395ms ago: executing program 1 (id=1409):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7)
socket$nl_audit(0x10, 0x3, 0x9) (async)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c) (async)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c)
close(r7) (async)
close(r7)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async)
bind$alg(r8, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
accept4(r8, 0x0, 0x0, 0x80000)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r9, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) (async)
ioctl$sock_rose_SIOCDELRT(r9, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b", 0x21}], 0x1)

784.935137ms ago: executing program 2 (id=1410):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1}, &(0x7f00000007c0), &(0x7f0000000800)=r2}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x7, 0x0, 0x0, 0xa, 0x5}]}}, 0x0, 0xffffff69}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x71) (async)
readv(r0, &(0x7f0000000180), 0x0) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac00028008000300010000000800010010000000010004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) (async)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000050000060900010073797a3100000000580004805400018009000100261a54f75d7753086d6574610000000044000280080001400000000c080003400000000d08000240000003ff080001400000000008000240000000010800034000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x8, 0x2, {0x3, 0x80000001}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xf}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffb, 0x7fffffff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}]}, 0xb0}}, 0x20000000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000580))

671.52547ms ago: executing program 2 (id=1411):
syz_emit_ethernet(0xae, &(0x7f0000000240)={@multicast, @random="000803006600", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{0x1, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2202"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x1, "437d65c32f71"}]}}}}}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6(0xa, 0x80002, 0x88)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000353d2393d86e96a98f386d8ee20698e0e6ffffffefffff0c0000"], 0x48)
r4 = socket$inet6(0xa, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r4}, 0x20)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="02190200801fe1ab130894ded30e543e230000100012800800010067726500040002806d8f2ffdf7e6fb40ca866c7d2eacef9b5f890bcf6d1ce44adc5e3d58f70dc8fe957c36a1179776a136c449500e6983b7b6bd525f2d7817"], 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0xe}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x40084)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r10=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x82, &(0x7f0000000300)={r10, 0x10, 0x4}, 0x8)
sendmmsg$inet6(r7, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r2, &(0x7f0000000200)={0xa0000004})
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @private2, 0x6}}}, 0x84)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="02620000"], 0x1c}}, 0x0)

609.201421ms ago: executing program 2 (id=1412):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}, 0x406}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r1}, 0x18)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r4, 0x1, 0x4, @remote}, 0x10)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001041000001c3b8d9ac2c72c1f25f90779b07d80fe375f77a75fc266f9dd4bf0ff7737a10b10496"], 0x18, 0xe000}, 0x5}], 0x1, 0x40)
recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)

550.883107ms ago: executing program 2 (id=1413):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="aad5f8c8160c", 0x6}], 0x1)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = accept(r1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000004000000040000965100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000000000000000000884961dd4f244716dde423ecb84e4b4c347f79f059c29cc7557bdb4612d7e9843fc8cde3767aecf1e6e85d1f9f206b622f070e852bb293abbb2d51dd7c18932fd12640877b39b125075466c962c9ebef1714db504c0a5eff646299c42fa8fbde702b81adba5d0a71c6c41b57abff0f290d967fede1a36a418c102c3db30a761b", @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="00000000b0ed19194974bc66dca34063b2620000000000000000000020953d5088dd445167b6dd463a540403610d2266afcf3673c71b67601e00ff40578ee70d29dcfbf136a6dbc7320845a55947cbc02c7ef3f4ad94b07885c5c33852d62682da3571efb45d2d5bba6a8cfa609142af92"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240)="5c3a205a90fd3c319cececad44df8df18076f42aa75e913ce3cac5164b820f017e76afa6d28eb970f34d632ddc8749f6c43be1940d208320d600", &(0x7f0000000340)=@tcp6=r3, 0x1}, 0x20)
shutdown(r3, 0x0)
recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="7a339f148a39f19e1db7419912e0e804580257490dd844c39eb523fd18aa8fd3c353147c3b8f974f1c977e4a168d8ba55266cc328c447e16", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
shutdown(0xffffffffffffffff, 0x1)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000380)={r1})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
unshare(0x40800)
getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280), &(0x7f0000000300)=0x4)
syz_open_procfs$namespace(0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)

210.664158ms ago: executing program 0 (id=1414):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000181421f7"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000082) (async)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000181421f7"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000082)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], 0x0, 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) (async)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800359c8063ce113f9049b200000000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000a80)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100010882848b960c121824065099363d859d9681d679238ddb7427cb4784456ba7a75f45dda7c1ebebc56dda5077571101e7bca6bf688a707c683c1285ca1232551791078260c86b61772e527a94a7ff09132b305f6640420c8cf44c153277321a110940b96c5985e9369eef01198a71920aed4ec50a8e6bf72ca7bea2a8fa4c565fc63baf7699b80b606d323c4325dd92cc750f9acb633d1e0857c78c3f2cfc39901d01640e102d5847721a3e66d25745d7"], 0x2e)

0s ago: executing program 0 (id=1415):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800b0001007461726765740000200002800a0001004155444954000000050003000000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a70510e46e88fa98da56eb2cd9f07317cdd932a4944af20729ecb48"], 0x88}}, 0x0) (async)
r1 = socket(0xa, 0x3, 0x3a)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffff00000007, 0x25d4283d975b53f0}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async)
r4 = socket(0x0, 0x6, 0x6)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xec, 0x200, 0x80000a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0x8, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0) (async)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01002abd700000000000090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000001eff090000000000"], 0x44}}, 0x0) (async)
r5 = accept$unix(r1, &(0x7f00000002c0), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r5], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000000a6ca679ee1f5c9fcd85d7a047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='f2fs_issue_reset_zone\x00', r7, 0x0, 0x2000000000864c}, 0x18) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x3c, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x2}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x84}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1900e3ff03000000040000006032000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffff00"/28], 0x50)
socket$kcm(0x10, 0x2, 0x0) (async)
r12 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r12, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x8, 0xfffff032}]}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000d313c06748c85f60000000000000000000"], 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33040' (ED25519) to the list of known hosts.
syzkaller login: [   49.343953][ T5773] cgroup: Unknown subsys name 'net'
[   49.465393][ T5773] cgroup: Unknown subsys name 'cpuset'
[   49.473156][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.520945][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.111870][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.116709][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.120353][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.123200][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.125794][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.209662][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.212755][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.215726][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.219119][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.222665][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.243655][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.246967][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.250933][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.254696][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.258705][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.557021][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   56.610779][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.617041][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.697975][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.701111][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.703640][ T5846] bridge_slave_0: entered allmulticast mode
[   56.706760][ T5846] bridge_slave_0: entered promiscuous mode
[   56.725470][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.728116][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.730750][ T5846] bridge_slave_1: entered allmulticast mode
[   56.733891][ T5846] bridge_slave_1: entered promiscuous mode
[   56.817900][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.822681][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.825107][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.827780][ T5841] bridge_slave_0: entered allmulticast mode
[   56.832188][ T5841] bridge_slave_0: entered promiscuous mode
[   56.846310][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.852778][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.855924][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.858860][ T5841] bridge_slave_1: entered allmulticast mode
[   56.863061][ T5841] bridge_slave_1: entered promiscuous mode
[   56.866232][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.868625][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.871429][ T5848] bridge_slave_0: entered allmulticast mode
[   56.874558][ T5848] bridge_slave_0: entered promiscuous mode
[   56.926276][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.929918][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.932827][ T5848] bridge_slave_1: entered allmulticast mode
[   56.936710][ T5848] bridge_slave_1: entered promiscuous mode
[   56.942589][ T5846] team0: Port device team_slave_0 added
[   56.948443][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.955940][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.990975][ T5846] team0: Port device team_slave_1 added
[   57.023646][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.051628][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.056425][ T5841] team0: Port device team_slave_0 added
[   57.069574][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.072156][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.081129][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.087373][ T5841] team0: Port device team_slave_1 added
[   57.119118][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.122126][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.131216][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.148948][ T5848] team0: Port device team_slave_0 added
[   57.164499][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.167254][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.177952][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.183080][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.185757][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.196071][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.201616][ T5848] team0: Port device team_slave_1 added
[   57.244616][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.247450][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.258048][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.264325][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.267130][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.278198][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.310298][ T5846] hsr_slave_0: entered promiscuous mode
[   57.313592][ T5846] hsr_slave_1: entered promiscuous mode
[   57.383893][ T5841] hsr_slave_0: entered promiscuous mode
[   57.387131][ T5841] hsr_slave_1: entered promiscuous mode
[   57.390890][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   57.393264][ T5841] Cannot create hsr debugfs directory
[   57.440197][ T5848] hsr_slave_0: entered promiscuous mode
[   57.443362][ T5848] hsr_slave_1: entered promiscuous mode
[   57.446236][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.448542][ T5848] Cannot create hsr debugfs directory
[   57.772539][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.784346][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.791174][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.807792][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.847072][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.854253][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.865338][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.882298][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.942937][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.959866][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.967132][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.973669][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.054405][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.103844][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   58.116239][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.131850][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.134331][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.155360][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.158259][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.165728][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   58.176172][ T5236] Bluetooth: hci0: command tx timeout
[   58.192987][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.195270][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.206216][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.217382][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.219851][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.247754][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   58.260068][ T5236] Bluetooth: hci1: command tx timeout
[   58.285478][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.288358][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.316280][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.318537][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.340094][ T5236] Bluetooth: hci2: command tx timeout
[   58.351379][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.398472][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.421989][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.455925][ T5841] veth0_vlan: entered promiscuous mode
[   58.481501][ T5841] veth1_vlan: entered promiscuous mode
[   58.504532][ T5841] veth0_macvtap: entered promiscuous mode
[   58.509197][ T5841] veth1_macvtap: entered promiscuous mode
[   58.539076][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.549084][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.563743][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.578614][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.586158][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.602059][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.608300][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.633244][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.699497][ T5846] veth0_vlan: entered promiscuous mode
[   58.700609][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.705520][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.766500][ T5846] veth1_vlan: entered promiscuous mode
[   58.821356][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.822798][ T5848] veth0_vlan: entered promiscuous mode
[   58.824438][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.856592][ T5848] veth1_vlan: entered promiscuous mode
[   58.888234][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.891040][ T5846] veth0_macvtap: entered promiscuous mode
[   58.914018][ T5846] veth1_macvtap: entered promiscuous mode
[   58.929035][ T5848] veth0_macvtap: entered promiscuous mode
[   58.942687][ T5848] veth1_macvtap: entered promiscuous mode
[   58.957808][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.973064][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.976799][ T5910] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.989131][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.994041][ T5677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.003223][ T5677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.012117][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.014483][ T5677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.025615][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.028428][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.046375][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.050481][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.053304][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.143548][ T5916] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5'.
[   59.162629][ T5916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5'.
[   59.172260][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.176732][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.227522][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.234527][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.269485][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.284226][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.311969][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.317707][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.406445][ T5929] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   59.416395][ T5928] IPVS: stopping backup sync thread 5929 ...
[   59.463873][ T5933] bridge_slave_0: left allmulticast mode
[   59.465706][ T5933] bridge_slave_0: left promiscuous mode
[   59.468029][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.468906][ T5932] Zero length message leads to an empty skb
[   59.476154][ T5933] bridge_slave_1: left allmulticast mode
[   59.477925][ T5933] bridge_slave_1: left promiscuous mode
[   59.480937][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.488444][ T5933] bond0: (slave bond_slave_0): Releasing backup interface
[   59.498783][ T5933] bond0: (slave bond_slave_1): Releasing backup interface
[   59.507418][ T5933] team0: Port device team_slave_0 removed
[   59.520863][ T5933] team0: Port device team_slave_1 removed
[   59.524794][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.528159][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.538874][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.543493][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.627883][ T5944] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7'.
[   59.644474][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'.
[   59.648335][ T5944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7'.
[   59.934033][ T5959] syzkaller0: entered promiscuous mode
[   59.935905][ T5959] syzkaller0: entered allmulticast mode
[   60.005579][ T5962] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.015284][ T5958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'.
[   60.030253][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'.
[   60.034113][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'.
[   60.145254][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'.
[   60.149878][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'.
[   60.199815][ T5973] netlink: 'syz.2.17': attribute type 1 has an invalid length.
[   60.249014][ T5975] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET)
[   60.260334][ T5236] Bluetooth: hci0: command tx timeout
[   60.265377][ T5973] erspan0: entered allmulticast mode
[   60.340435][ T5236] Bluetooth: hci1: command tx timeout
[   60.410242][ T5236] Bluetooth: hci2: command tx timeout
[   60.818062][ T6018] Bluetooth: MGMT ver 1.23
[   60.940327][ T6027] ieee802154 phy0 wpan0: encryption failed: -22
[   60.943633][ T6027] ieee802154 phy0 wpan0: encryption failed: -22
[   60.967729][ T6027] ieee802154 phy0 wpan0: encryption failed: -22
[   61.108338][ T6036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.147818][ T6032] IPVS: Scheduler module ip_vs_sip not found
[   61.372613][ T6061] netlink: 'syz.1.36': attribute type 13 has an invalid length.
[   61.375600][ T6061] netlink: 'syz.1.36': attribute type 17 has an invalid length.
[   61.382169][ T6065] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.492007][ T6061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.600980][ T6071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.342217][ T5236] Bluetooth: hci0: command tx timeout
[   62.420957][ T5236] Bluetooth: hci1: command tx timeout
[   62.489491][ T5236] Bluetooth: hci2: command tx timeout
[   62.676576][ T6107] netlink: 'syz.0.48': attribute type 32 has an invalid length.
[   62.698539][ T6101] Illegal XDP return value 4294967282 on prog  (id 26) dev N/A, expect packet loss!
[   62.717541][ T6101] sctp: [Deprecated]: syz.2.46 (pid 6101) Use of int in maxseg socket option.
[   62.717541][ T6101] Use struct sctp_assoc_value instead
[   62.726065][ T6109] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.798630][ T6116] netlink: 'syz.2.51': attribute type 1 has an invalid length.
[   62.833321][ T6116] bond1: entered promiscuous mode
[   62.836723][ T6116] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.959406][ T6109] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.036403][ T6109] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.058631][ T6131] netlink: 'syz.2.53': attribute type 4 has an invalid length.
[   63.062483][ T6132] netlink: 'syz.2.53': attribute type 4 has an invalid length.
[   63.118601][ T6109] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.250277][ T6135] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   63.277218][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.311727][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.331482][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.362653][ T6144] netlink: 'syz.2.56': attribute type 1 has an invalid length.
[   63.385239][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.455379][ T6148] syzkaller0: entered promiscuous mode
[   63.457336][ T6148] syzkaller0: entered allmulticast mode
[   63.587801][ T6155] netlink: 'syz.0.60': attribute type 3 has an invalid length.
[   63.710058][ T6161] IPVS: Unknown mcast interface: vcan0
[   63.855538][ T5912] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[   64.317250][ T6162] netlink: 'syz.1.59': attribute type 1 has an invalid length.
[   64.320833][ T6162] __nla_validate_parse: 45 callbacks suppressed
[   64.320848][ T6162] netlink: 244 bytes leftover after parsing attributes in process `syz.1.59'.
[   64.412815][ T5236] Bluetooth: hci0: command tx timeout
[   64.461238][ T6167] syz_tun: entered allmulticast mode
[   64.465361][ T6164] syz_tun: left allmulticast mode
[   64.499479][ T5236] Bluetooth: hci1: command tx timeout
[   64.505843][ T6171] : entered promiscuous mode
[   64.570553][ T5236] Bluetooth: hci2: command tx timeout
[   64.699126][ T6180] netlink: get zone limit has 8 unknown bytes
[   64.707903][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   64.768667][  T973] IPVS: starting estimator thread 0...
[   64.771758][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.68'.
[   64.806473][ T6188] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.69'.
[   64.825601][ T6187] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.842410][ T6188] bond2: (slave bridge1): making interface the new active one
[   64.845586][ T6188] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   64.854061][ T6190] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   64.870114][ T6185] IPVS: using max 64 ests per chain, 153600 per kthread
[   65.066581][ T6197] tipc: Started in network mode
[   65.068711][ T6197] tipc: Node identity ac14140f, cluster identity 4711
[   65.071967][ T6197] tipc: New replicast peer: 255.255.255.255
[   65.074581][ T6197] tipc: Enabled bearer <udp:syz2>, priority 10
[   65.343601][ T6199] 8021q: adding VLAN 0 to HW filter on device bond3
[   65.552249][ T6218] batadv_slave_1: entered promiscuous mode
[   65.558890][ T6218] batadv_slave_1: left promiscuous mode
[   65.566768][ T6218] validate_nla: 3 callbacks suppressed
[   65.566797][ T6218] netlink: 'syz.0.78': attribute type 1 has an invalid length.
[   65.810474][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'.
[   65.894526][ T6231] erspan0: left allmulticast mode
[   65.928996][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.932546][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.068953][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.081569][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.102940][   T10] tipc: Node number set to 2886997007
[   66.247775][ T6231] bond1: left promiscuous mode
[   66.276581][ T5912] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.290166][ T5912] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.298394][ T5912] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.306221][ T5912] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.363716][ T6240] netlink: 'syz.0.84': attribute type 12 has an invalid length.
[   67.368400][ T6274] bridge_slave_0: left allmulticast mode
[   67.383594][ T6274] bridge_slave_0: left promiscuous mode
[   67.390966][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.396250][ T6274] bridge_slave_1: left allmulticast mode
[   67.398335][ T6274] bridge_slave_1: left promiscuous mode
[   67.411806][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.422386][ T6274] bond0: (slave bond_slave_0): Releasing backup interface
[   67.433711][ T6274] bond0: (slave bond_slave_1): Releasing backup interface
[   67.446367][ T6274] team0: Port device team_slave_0 removed
[   67.453518][ T6274] team0: Port device team_slave_1 removed
[   67.455927][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.460947][ T6274] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.464500][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.466857][ T6274] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.647032][ T5891] IPVS: starting estimator thread 0...
[   67.729464][ T6296] IPVS: using max 64 ests per chain, 153600 per kthread
[   67.774123][ T6311] netlink: 'syz.1.102': attribute type 2 has an invalid length.
[   67.844217][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'.
[   67.931862][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'.
[   67.945528][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[   68.156255][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'.
[   68.273627][ T6348] batadv_slave_1: entered promiscuous mode
[   68.281724][ T6347] batadv_slave_1: left promiscuous mode
[   68.285289][ T6351] netlink: 'syz.1.113': attribute type 4 has an invalid length.
[   68.484150][ T6358] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.117'.
[   69.558891][ T6391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.564134][ T6391] syzkaller0: entered promiscuous mode
[   69.566361][ T6391] syzkaller0: entered allmulticast mode
[   69.581981][ T6391] tipc: Resetting bearer <eth:syzkaller0>
[   69.589882][ T6390] tipc: Resetting bearer <eth:syzkaller0>
[   69.598990][ T6390] tipc: Disabling bearer <eth:syzkaller0>
[   69.722050][ T6382] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   69.929045][ T6418] macvtap1: entered promiscuous mode
[   69.931114][ T6418] macvtap1: entered allmulticast mode
[   69.933476][ T6418] syz_tun: entered allmulticast mode
[   69.935426][ T6418] syz_tun: entered promiscuous mode
[   69.941900][ T6418] team0: Device macvtap1 failed to register rx_handler
[   69.945108][ T6418] syz_tun: left allmulticast mode
[   69.947079][ T6418] syz_tun: left promiscuous mode
[   69.993257][ T6412] __nla_validate_parse: 1 callbacks suppressed
[   69.993269][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.127'.
[   70.062907][ T6387] syz.1.124 (6387) used greatest stack depth: 18808 bytes left
[   70.258825][ T6439] tipc: Started in network mode
[   70.267693][ T6439] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   70.271031][ T6439] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   70.275132][ T6439] tipc: Enabled bearer <udp:syz0>, priority 10
[   70.426390][ T6458] syzkaller1: entered promiscuous mode
[   70.428855][ T6458] syzkaller1: entered allmulticast mode
[   70.666315][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.138'.
[   70.970923][ T5236] Bluetooth: hci0: command 0x0c20 tx timeout
[   71.138204][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.143660][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.300195][  T973] tipc: Node number set to 1
[   71.425631][ T6514] netlink: 'syz.1.147': attribute type 1 has an invalid length.
[   71.428709][ T6514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.576754][ T6524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.582760][ T6524] syzkaller0: entered promiscuous mode
[   71.584931][ T6524] syzkaller0: entered allmulticast mode
[   71.611769][ T6524] tipc: Resetting bearer <eth:syzkaller0>
[   71.628871][ T6521] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   71.669830][ T6522] tipc: Resetting bearer <eth:syzkaller0>
[   71.685746][ T6522] tipc: Disabling bearer <eth:syzkaller0>
[   71.697977][ T6534] netlink: 56 bytes leftover after parsing attributes in process `syz.2.152'.
[   71.776525][ T6537] pim6reg: entered allmulticast mode
[   71.790101][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.153'.
[   71.868649][ T6537] netlink: 'syz.0.154': attribute type 13 has an invalid length.
[   71.957464][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'.
[   71.984677][ T6554] netlink: 'syz.1.157': attribute type 1 has an invalid length.
[   72.155431][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'.
[   72.204897][ T6569] netlink: 'syz.1.163': attribute type 21 has an invalid length.
[   72.208102][ T6569] netlink: 156 bytes leftover after parsing attributes in process `syz.1.163'.
[   72.216625][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'.
[   72.902733][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ba6c800: rx timeout, send abort
[   72.907607][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ba6cc00: rx timeout, send abort
[   72.911116][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803ba6c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   72.918147][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803ba6cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   73.071500][   T24] cfg80211: failed to load regulatory.db
[   73.139742][ T6584] nbd0: detected capacity change from 0 to 127
[   73.209682][ T6583] nbd1: detected capacity change from 0 to 127
[   73.221195][   T56] block nbd0: Receive control failed (result -104)
[   73.224953][ T6594] block nbd1: Receive control failed (result -32)
[   73.334315][ T6618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.337407][ T6618] syzkaller0: entered promiscuous mode
[   73.340043][ T6618] syzkaller0: entered allmulticast mode
[   73.358376][ T6618] netlink: 27 bytes leftover after parsing attributes in process `syz.2.174'.
[   73.368962][ T6618] tipc: Resetting bearer <eth:syzkaller0>
[   73.375961][ T6621] openvswitch: netlink: Actions may not be safe on all matching packets
[   73.468232][ T6634] nbd: nbd1 already in use
[   73.560585][ T6644] netlink: 'syz.0.182': attribute type 2 has an invalid length.
[   73.568198][ T6644] k*]: entered promiscuous mode
[   73.581312][ T6644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.602525][ T6644] veth0_to_team: entered promiscuous mode
[   73.604495][ T6644] veth0_to_team: entered allmulticast mode
[   73.610451][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[   73.877759][ T6660] bond0: entered promiscuous mode
[   73.882634][ T6660] bond0: entered allmulticast mode
[   73.986252][ T6673] tipc: Started in network mode
[   73.987894][ T6673] tipc: Node identity 3ea92a398147, cluster identity 4711
[   73.992309][ T6673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.007303][ T6673] syzkaller0: entered promiscuous mode
[   74.011712][ T6673] syzkaller0: entered allmulticast mode
[   74.030222][ T6673] tipc: Resetting bearer <eth:syzkaller0>
[   74.045791][ T6673] tipc: Disabling bearer <eth:syzkaller0>
[   74.321239][ T6690] erspan0: entered promiscuous mode
[   74.464800][ T6703] netlink: 'syz.1.198': attribute type 13 has an invalid length.
[   74.467539][ T6703] netlink: 'syz.1.198': attribute type 17 has an invalid length.
[   74.478010][ T6703] bond0: left promiscuous mode
[   74.479932][ T6703] bond0: left allmulticast mode
[   74.484639][ T6703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.293251][ T6712] __nla_validate_parse: 1 callbacks suppressed
[   75.293265][ T6712] netlink: 260 bytes leftover after parsing attributes in process `syz.0.199'.
[   75.333666][ T6712] netlink: 'syz.0.199': attribute type 11 has an invalid length.
[   75.336061][ T6712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.199'.
[   75.345465][ T6716] netlink: 'syz.2.202': attribute type 16 has an invalid length.
[   75.347928][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'.
[   75.355590][ T6716] ip6gretap1: entered allmulticast mode
[   75.388714][ T6718] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   75.429177][ T6720] vxcan2: entered promiscuous mode
[   75.442493][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[   75.495123][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[   75.555991][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'.
[   75.558773][ T6727] netlink: 76 bytes leftover after parsing attributes in process `syz.1.205'.
[   76.273125][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'.
[   76.523478][ T6756] netlink: 'syz.2.213': attribute type 1 has an invalid length.
[   76.546309][ T6756] netlink: 224 bytes leftover after parsing attributes in process `syz.2.213'.
[   76.551195][ T6756] netlink: 232 bytes leftover after parsing attributes in process `syz.2.213'.
[   76.881577][ T6770] netlink: 'syz.2.215': attribute type 58 has an invalid length.
[   76.962531][ T6775] sctp: [Deprecated]: syz.0.218 (pid 6775) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.962531][ T6775] Use struct sctp_sack_info instead
[   76.972024][ T6775] sctp: [Deprecated]: syz.0.218 (pid 6775) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.972024][ T6775] Use struct sctp_sack_info instead
[   77.377733][ T6785] veth0_to_team: left promiscuous mode
[   77.547390][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.554788][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.560907][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.566906][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.776020][ T6799] syz_tun: entered allmulticast mode
[   77.810239][ T6800] syz_tun (unregistering): left allmulticast mode
[   79.048761][ T6835] netlink: 'syz.1.233': attribute type 1 has an invalid length.
[   79.926273][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.930450][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.933274][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.940979][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.965432][ T6846] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   79.987708][ T6850] mac80211_hwsim hwsim4 1: renamed from wlan0
[   80.021062][ T5236] Bluetooth: hci2: command tx timeout
[   80.074157][ T6861] delete_channel: no stack
[   80.147061][ T6865] netlink: 'syz.0.242': attribute type 10 has an invalid length.
[   80.156426][ T6865] 8021q: adding VLAN 0 to HW filter on device team0
[   80.161667][ T6865] bond0: (slave team0): Enslaving as an active interface with an up link
[   80.168975][ T6865] netlink: 'syz.0.242': attribute type 10 has an invalid length.
[   80.237440][ T6878] vlan2: entered promiscuous mode
[   80.239175][ T6878] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   80.341735][ T6885] __nla_validate_parse: 18 callbacks suppressed
[   80.341751][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'.
[   80.558784][ T6893] netlink: 56 bytes leftover after parsing attributes in process `syz.1.251'.
[   80.783857][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'.
[   80.886090][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'.
[   81.006140][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'.
[   81.209677][ T6929] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   81.217183][ T6929] bridge_slave_0: left allmulticast mode
[   81.219882][ T6929] bridge_slave_0: left promiscuous mode
[   81.222321][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.228702][ T6929] bridge_slave_1: left allmulticast mode
[   81.231621][ T6929] bridge_slave_1: left promiscuous mode
[   81.234041][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.242458][ T6929] bond0: (slave bond_slave_0): Releasing backup interface
[   81.247043][ T6929] bond0: (slave bond_slave_1): Releasing backup interface
[   81.253644][ T6929] team0: Port device team_slave_0 removed
[   81.257751][ T6929] team0: Port device team_slave_1 removed
[   81.264475][ T6929] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.268805][ T6929] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.275039][ T6929] bond2: (slave bridge1): Releasing active interface
[   81.334256][ T6929] netlink: 'syz.2.263': attribute type 10 has an invalid length.
[   81.336820][ T6929] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   81.343633][ T6929] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   81.352138][ T6929] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   81.355180][ T6929] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   81.684376][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.268'.
[   82.092001][ T6959] gre1: entered allmulticast mode
[   82.187037][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'.
[   82.279453][ T6962] nbd2: detected capacity change from 0 to 127
[   82.661032][ T6985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.279'.
[   82.672525][ T6985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.279'.
[   82.704706][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'.
[   82.825979][ T6993] bridge0: port 1(syz_tun) entered blocking state
[   82.829089][ T6993] bridge0: port 1(syz_tun) entered disabled state
[   82.834272][ T6993] syz_tun: entered allmulticast mode
[   82.838125][ T6993] syz_tun: entered promiscuous mode
[   82.842905][ T6993] bridge0: port 1(syz_tun) entered blocking state
[   82.845742][ T6993] bridge0: port 1(syz_tun) entered forwarding state
[   82.862018][ T6993] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   82.867115][ T6993] netlink: 'syz.1.282': attribute type 10 has an invalid length.
[   82.877170][ T6993] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.881389][ T6993] team0: Port device bond0 added
[   82.947805][ T6996] macvtap1: entered promiscuous mode
[   82.949718][ T6996] vlan0: entered promiscuous mode
[   82.951615][ T6996] macvtap1: entered allmulticast mode
[   82.954047][ T6996] vlan0: entered allmulticast mode
[   82.956264][ T6996] veth0_vlan: entered allmulticast mode
[   82.966779][ T6594] block nbd2: Receive control failed (result -104)
[   82.981280][ T6996] macvtap2: entered promiscuous mode
[   82.983362][ T6996] macvtap2: entered allmulticast mode
[   83.814863][ T7000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.940990][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.944532][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.948349][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.954043][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.151900][ T7048] netlink: 'syz.2.295': attribute type 9 has an invalid length.
[   84.262621][ T7057] syzkaller0: entered promiscuous mode
[   84.265187][ T7057] syzkaller0: entered allmulticast mode
[   84.271456][ T7056] netlink: 'syz.2.298': attribute type 1 has an invalid length.
[   84.282838][ T7056] netlink: 'syz.2.298': attribute type 4 has an invalid length.
[   84.329797][ T7061] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   84.453174][ T7068] pim6reg1: entered promiscuous mode
[   84.455321][ T7068] pim6reg1: entered allmulticast mode
[   84.524189][ T7070] netlink: 'syz.1.301': attribute type 13 has an invalid length.
[   84.527249][ T7070] netlink: 'syz.1.301': attribute type 17 has an invalid length.
[   84.536798][ T7070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.391417][ T7088] __nla_validate_parse: 10 callbacks suppressed
[   85.391433][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[   85.415342][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.306'.
[   85.423246][ T7088] macsec1: entered promiscuous mode
[   85.425149][ T7088] macsec0: entered promiscuous mode
[   85.426932][ T7088] macsec1: entered allmulticast mode
[   85.428730][ T7088] macsec0: entered allmulticast mode
[   85.778761][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.310'.
[   85.816495][ T7104] netlink: 'syz.2.311': attribute type 1 has an invalid length.
[   85.839018][ T7104] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.887515][ T7104] vlan2: entered allmulticast mode
[   85.891378][ T7104] batadv0: entered allmulticast mode
[   85.895507][ T7104] bond4: (slave vlan2): Opening slave failed
[   86.312572][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'.
[   86.418286][ T7145] syzkaller1: entered allmulticast mode
[   87.028688][ T7151] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.325'.
[   87.032850][ T7154] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.325'.
[   87.041386][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'.
[   87.042888][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'.
[   87.122375][ T7166] netlink: 56 bytes leftover after parsing attributes in process `syz.2.331'.
[   87.126965][ T7165] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   87.170180][ T7168] netlink: 1 bytes leftover after parsing attributes in process `syz.1.332'.
[   87.289660][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   87.357330][ T7186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.361850][ T7186] syzkaller0: entered promiscuous mode
[   87.363603][ T7186] syzkaller0: entered allmulticast mode
[   87.377131][ T7186] tipc: Resetting bearer <eth:syzkaller0>
[   87.524224][ T7201] netlink: 'syz.1.343': attribute type 9 has an invalid length.
[   88.446126][ T7245] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[   88.580667][ T7255] bond0: entered promiscuous mode
[   88.583204][ T7255] bond0: left promiscuous mode
[   88.663651][ T7261] IPv6: Can't replace route, no match found
[   88.671705][ T7261] netlink: 'syz.0.359': attribute type 1 has an invalid length.
[   88.996458][ T7286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.020315][ T7287] tipc: Disabling bearer <eth:syzkaller0>
[   89.026472][ T7283] netlink: 'syz.0.364': attribute type 4 has an invalid length.
[   89.032428][ T7283] netlink: 'syz.0.364': attribute type 4 has an invalid length.
[   89.182226][ T7309] gtp0: entered promiscuous mode
[   89.603223][ T7326] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   90.198912][ T7350] IPVS: Unknown mcast interface: veth0_to_bond
[   90.243975][ T7354] netlink: 'syz.0.385': attribute type 1 has an invalid length.
[   90.520146][ T7366] __nla_validate_parse: 12 callbacks suppressed
[   90.520159][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'.
[   90.527765][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'.
[   90.533040][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'.
[   90.613195][ T7378] netlink: 'syz.1.393': attribute type 1 has an invalid length.
[   90.628271][ T7378] bond2: entered promiscuous mode
[   90.631112][ T7378] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.645257][ T7378] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.648010][ T7378] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[   90.653214][ T7378] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[   90.660475][ T7378] bond2: (slave wireguard1): making interface the new active one
[   90.663139][ T7378] wireguard1: entered promiscuous mode
[   90.666974][ T7378] bond2: (slave wireguard1): Enslaving as an active interface with an up link
[   90.682294][ T7378] bond2: (slave wireguard2): The slave device specified does not support setting the MAC address
[   90.691198][ T7378] bond2: (slave wireguard2): Enslaving as a backup interface with an up link
[   91.170770][   T47] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   91.173978][   T47] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   91.182460][   T47] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[   91.195167][   T47] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   91.428553][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[   91.452530][ T7410] netlink: 'syz.0.402': attribute type 10 has an invalid length.
[   91.592476][ T7410] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   91.731254][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.409'.
[   91.778985][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[   91.825546][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'.
[   91.950941][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'.
[   92.198810][ T7464] netlink: 'syz.2.422': attribute type 1 has an invalid length.
[   92.237995][ T7464] 8021q: adding VLAN 0 to HW filter on device bond5
[   92.261928][ T7464] bond5: (slave gretap1): making interface the new active one
[   92.266170][ T7464] bond5: (slave gretap1): Enslaving as an active interface with an up link
[   92.324589][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.423'.
[   92.328421][ T7468] netlink: 'syz.2.423': attribute type 7 has an invalid length.
[   92.341063][ T7468] netlink: 'syz.2.423': attribute type 8 has an invalid length.
[   92.345935][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'.
[   92.366948][ T7468] syz_tun: entered promiscuous mode
[   92.372487][ T7468] syz_tun: left promiscuous mode
[   92.685398][ T7483] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   92.787253][ T7490] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   92.925537][ T7494] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   93.972461][ T7543] validate_nla: 6 callbacks suppressed
[   93.972483][ T7543] netlink: 'syz.1.444': attribute type 23 has an invalid length.
[   94.007466][ T7543] netlink: 'syz.1.444': attribute type 23 has an invalid length.
[   94.260303][ T7559] 8021q: adding VLAN 0 to HW filter on device bond3
[   94.331099][ T7565] bond0: (slave wlan1): Releasing backup interface
[   94.337855][ T7565] bond5: (slave gretap1): Releasing active interface
[   94.347770][ T7570] ieee802154 phy0 wpan0: encryption failed: -22
[   94.373508][ T7568] tun0: tun_chr_ioctl cmd 1074025675
[   94.375325][ T7568] tun0: persist enabled
[   94.378876][ T7568] tun0: tun_chr_ioctl cmd 1074025675
[   94.382386][ T7568] tun0: persist disabled
[   94.633918][ T7591] netlink: 'syz.2.457': attribute type 9 has an invalid length.
[   94.639545][    T9] hid-generic 0005:0007:5505.0002: unknown main item tag 0x0
[   94.645340][    T9] hid-generic 0005:0007:5505.0002: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[   94.670978][ T7595] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   94.674998][ T7594] IPVS: stopping backup sync thread 7595 ...
[   94.675932][ T7588] syz_tun: left allmulticast mode
[   94.678526][ T7588] syz_tun: left promiscuous mode
[   94.680666][ T7588] bridge0: port 1(syz_tun) entered disabled state
[   94.716582][ T7598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.731427][ T7179] Bluetooth: hci0: command tx timeout
[   95.902170][ T7663] __nla_validate_parse: 23 callbacks suppressed
[   95.902183][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'.
[   96.027538][ T7672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.468'.
[   96.723436][ T7725] netlink: 34 bytes leftover after parsing attributes in process `syz.0.474'.
[   96.877472][ T7735] syzkaller1: entered promiscuous mode
[   96.880185][ T7735] syzkaller1: entered allmulticast mode
[   96.885700][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'.
[   96.927526][ T7738] openvswitch: netlink: Message has 4 unknown bytes.
[   96.991944][ T7735] syzkaller1: left promiscuous mode
[   96.993925][ T7735] syzkaller1: left allmulticast mode
[   97.786269][ T7769] netlink: 'syz.0.484': attribute type 1 has an invalid length.
[   97.818796][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'.
[   97.822386][ T7770] netlink: 120 bytes leftover after parsing attributes in process `syz.2.483'.
[   97.834567][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'.
[   97.838502][ T7768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.840679][ T7770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.846799][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'.
[   97.846810][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'.
[   97.863248][ T7772] gretap2: entered promiscuous mode
[   97.938179][ T7777] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   97.941975][ T7777] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   97.946548][ T7777] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   97.951188][ T7777] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   97.953906][ T7777] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   97.958669][ T7777] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   97.964917][ T7777] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   97.968165][ T7777] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   97.991132][ T7779] syzkaller1: entered promiscuous mode
[   97.993000][ T7779] syzkaller1: entered allmulticast mode
[   98.071057][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'.
[   98.081946][ T7786] sctp: [Deprecated]: syz.2.490 (pid 7786) Use of int in max_burst socket option.
[   98.081946][ T7786] Use struct sctp_assoc_value instead
[   98.354433][ T7817] vxcan1: entered allmulticast mode
[   98.361184][ T7817] vxcan1: left allmulticast mode
[   98.436363][ T7828] raw_sendmsg: syz.2.499 forgot to set AF_INET. Fix it!
[   98.500293][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   98.848208][ T7862] bridge0: entered promiscuous mode
[   98.942396][ T7879] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[   99.825301][ T7922] geneve0: entered promiscuous mode
[   99.832995][ T7922] netlink: 'syz.1.521': attribute type 28 has an invalid length.
[  101.534321][ T7946] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.746975][ T7950] __nla_validate_parse: 10 callbacks suppressed
[  101.746993][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'.
[  101.757163][ T7950] netlink: 100 bytes leftover after parsing attributes in process `syz.2.526'.
[  102.070656][ T7945] netlink: 'syz.0.524': attribute type 6 has an invalid length.
[  102.102882][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'.
[  102.394566][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'.
[  102.525372][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'.
[  102.584458][ T7996] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.540'.
[  102.796190][ T8017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.546'.
[  102.897408][ T8024] netlink: 'syz.0.548': attribute type 12 has an invalid length.
[  102.900726][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'.
[  102.904526][ T8030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'.
[  102.976467][ T8036] netlink: 'syz.1.553': attribute type 1 has an invalid length.
[  102.993570][ T8039] netlink: 'syz.0.552': attribute type 11 has an invalid length.
[  102.996340][ T8039] netlink: 'syz.0.552': attribute type 4 has an invalid length.
[  103.003359][ T8039] netlink: 224 bytes leftover after parsing attributes in process `syz.0.552'.
[  103.008504][ T8036] 8021q: adding VLAN 0 to HW filter on device bond4
[  103.018680][ T8043] netlink: 'syz.0.552': attribute type 11 has an invalid length.
[  103.024002][ T8036] bond4: (slave ip6gretap1): making interface the new active one
[  103.025543][ T8043] netlink: 'syz.0.552': attribute type 4 has an invalid length.
[  103.028571][ T8036] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  103.050813][ T8036] veth3: entered promiscuous mode
[  103.065076][ T8036] bond4: (slave veth3): Enslaving as an active interface with a down link
[  103.072964][ T8036] erspan0: entered allmulticast mode
[  103.466821][ T8063] netlink: 'syz.1.558': attribute type 1 has an invalid length.
[  103.483101][ T8063] bond5: entered promiscuous mode
[  103.484780][ T8063] bond5: entered allmulticast mode
[  103.496894][ T8063] bridge0: entered promiscuous mode
[  103.499049][ T8063] bridge0: entered allmulticast mode
[  103.511100][ T8063] bond5: (slave bridge0): making interface the new active one
[  103.513898][ T8063] bond5: (slave bridge0): Enslaving as an active interface with an up link
[  103.771591][   T61] block nbd1: Possible stuck request ffff8880227b8000: control (read@0,1024B). Runtime 30 seconds
[  103.776864][   T61] block nbd1: Possible stuck request ffff8880227b8200: control (read@1024,1024B). Runtime 30 seconds
[  103.780997][   T61] block nbd1: Possible stuck request ffff8880227b8400: control (read@2048,1024B). Runtime 30 seconds
[  103.785097][   T61] block nbd1: Possible stuck request ffff8880227b8600: control (read@3072,1024B). Runtime 30 seconds
[  103.789832][ T8070] block nbd0: Possible stuck request ffff888022780000: control (read@0,1024B). Runtime 30 seconds
[  103.794199][ T8070] block nbd0: Possible stuck request ffff888022780200: control (read@1024,1024B). Runtime 30 seconds
[  103.798421][ T8070] block nbd0: Possible stuck request ffff888022780400: control (read@2048,1024B). Runtime 30 seconds
[  103.802984][ T8070] block nbd0: Possible stuck request ffff888022780600: control (read@3072,1024B). Runtime 30 seconds
[  104.131978][ T8081] netlink: 'syz.0.563': attribute type 4 has an invalid length.
[  105.028352][ T8102] netlink: 'syz.0.569': attribute type 25 has an invalid length.
[  105.029603][ T8103] netlink: 'syz.0.569': attribute type 25 has an invalid length.
[  105.114288][ T7179] Bluetooth: hci2: link tx timeout
[  105.117273][ T7179] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  105.246943][ T8136] net_ratelimit: 29 callbacks suppressed
[  105.246985][ T8136] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  105.951247][ T8178] netlink: 'syz.2.588': attribute type 4 has an invalid length.
[  106.445919][ T8190] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  106.519048][ T8194] netlink: 'syz.2.593': attribute type 2 has an invalid length.
[  106.522891][ T8193] netlink: 'syz.2.593': attribute type 2 has an invalid length.
[  106.529191][ T8193] k*]: entered promiscuous mode
[  106.554994][ T8194] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.558104][ T8194] 8021q: adding VLAN 0 to HW filter on device team0
[  106.565539][ T8194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.573886][ T8197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.582859][ T8194] veth0_to_team: entered promiscuous mode
[  106.584689][ T8194] veth0_to_team: entered allmulticast mode
[  106.594140][ T8199] openvswitch: netlink: Key 17 has unexpected len 0 expected 4
[  106.792890][ T8218] __nla_validate_parse: 15 callbacks suppressed
[  106.792903][ T8218] netlink: 76 bytes leftover after parsing attributes in process `syz.1.599'.
[  106.851161][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'.
[  107.120745][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.601'.
[  107.131419][ T7179] Bluetooth: hci2: command 0x0405 tx timeout
[  107.211692][ T8243] netlink: 'syz.1.605': attribute type 15 has an invalid length.
[  107.226070][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.606'.
[  107.414713][ T8257] netlink: 'syz.0.607': attribute type 1 has an invalid length.
[  107.438316][ T8255] syzkaller0: entered promiscuous mode
[  107.440546][ T8255] syzkaller0: entered allmulticast mode
[  109.006868][ T8279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.611'.
[  109.031905][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'.
[  109.194189][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'.
[  109.348188][ T8311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  109.411477][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'.
[  109.450035][ T8314] vlan0 (unregistering): left allmulticast mode
[  109.452079][ T8314] veth0_vlan (unregistering): left allmulticast mode
[  109.454279][ T8314] vlan0 (unregistering): left promiscuous mode
[  109.472829][ T8309] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.619'.
[  109.717856][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'.
[  109.955072][ T8335] bond0: (slave vlan0): Opening slave failed
[  110.635192][ T8369] netlink: 'syz.1.631': attribute type 13 has an invalid length.
[  110.644217][ T8369] netlink: 'syz.1.631': attribute type 17 has an invalid length.
[  110.655792][ T8369] erspan0: left allmulticast mode
[  110.664867][ T8369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.701571][ T8371] Unsupported ieee802154 address type: 0
[  110.958814][ T8382] delete_channel: no stack
[  110.998577][ T8388] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[  111.039949][ T8388] bond1: (slave gretap2): making interface the new active one
[  111.043660][ T8388] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  111.217028][ T8395] bridge0: left promiscuous mode
[  111.224955][ T8395] veth0_to_team: left allmulticast mode
[  111.233624][ T8395] tipc: Resetting bearer <eth:syzkaller0>
[  111.236415][ T8395] syzkaller0: left promiscuous mode
[  111.240407][ T8395] syzkaller0: left allmulticast mode
[  111.652811][ T8431] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.656480][ T8431] syzkaller0: entered promiscuous mode
[  111.658143][ T8431] syzkaller0: entered allmulticast mode
[  111.736340][ T8434] netlink: 'syz.2.653': attribute type 1 has an invalid length.
[  111.884925][ T8441] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  112.093519][ T8448] __nla_validate_parse: 10 callbacks suppressed
[  112.093538][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'.
[  112.248189][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'.
[  112.276048][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'.
[  112.426154][ T8463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'.
[  112.487322][ T8473] netlink: 'syz.1.665': attribute type 3 has an invalid length.
[  112.497132][ T8473] netlink: 'syz.1.665': attribute type 1 has an invalid length.
[  112.504331][ T8473] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.665'.
[  112.714395][ T8482] bridge0: port 1(erspan0) entered blocking state
[  112.718241][ T8482] bridge0: port 1(erspan0) entered disabled state
[  112.721505][ T8482] erspan0: entered allmulticast mode
[  112.725197][ T8482] erspan0: entered promiscuous mode
[  112.735360][ T8482] erspan0: left allmulticast mode
[  112.737461][ T8482] erspan0: left promiscuous mode
[  112.741135][   T25] block nbd2: Possible stuck request ffff8880227e8000: control (read@0,1024B). Runtime 30 seconds
[  112.741258][ T8482] bridge0: port 1(erspan0) entered disabled state
[  112.745344][   T25] block nbd2: Possible stuck request ffff8880227e8200: control (read@1024,1024B). Runtime 30 seconds
[  112.754665][   T25] block nbd2: Possible stuck request ffff8880227e8400: control (read@2048,1024B). Runtime 30 seconds
[  112.760148][   T25] block nbd2: Possible stuck request ffff8880227e8600: control (read@3072,1024B). Runtime 30 seconds
[  112.922876][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[  112.926158][ T8493] openvswitch: netlink: nsh attr 20 is out of range max 3
[  112.928595][ T8493] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.086968][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'.
[  113.337552][ T8501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'.
[  113.729726][ T8509] netlink: 45 bytes leftover after parsing attributes in process `syz.1.674'.
[  113.754083][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'.
[  113.922686][ T8520] openvswitch: netlink: Unknown key attributes 2
[  114.274688][ T8541] bond0: (slave bridge0): Releasing backup interface
[  114.283873][ T8541] bond0: (slave team0): Releasing backup interface
[  114.292568][ T8541] bond1: (slave gretap2): Releasing active interface
[  114.303323][ T8541] netlink: 'syz.0.685': attribute type 10 has an invalid length.
[  114.317709][ T8541] batman_adv: batadv0: Adding interface: virt_wifi0
[  114.320640][ T8541] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.334678][ T8541] batman_adv: batadv0: Interface activated: virt_wifi0
[  114.728703][ T8578] !: renamed from dummy0 (while UP)
[  115.524826][ T8585] netlink: 'syz.2.699': attribute type 2 has an invalid length.
[  115.534449][ T8585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.757081][ T8621] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  117.148799][ T8638] __nla_validate_parse: 17 callbacks suppressed
[  117.148818][ T8638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.715'.
[  117.178152][ T8641] 8021q: VLANs not supported on vxcan0
[  117.254870][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.719'.
[  117.258213][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'.
[  117.573927][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.723'.
[  117.651594][ T8680] netlink: 'syz.2.727': attribute type 10 has an invalid length.
[  117.664974][ T8680] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  117.703577][ T8683] netlink: 248 bytes leftover after parsing attributes in process `syz.1.728'.
[  117.727048][ T8684] netlink: 236 bytes leftover after parsing attributes in process `syz.1.728'.
[  117.743381][ T8691] netlink: 'syz.1.728': attribute type 1 has an invalid length.
[  117.743381][ T8684] netlink: 'syz.1.728': attribute type 1 has an invalid length.
[  117.810524][ T8691] 8021q: adding VLAN 0 to HW filter on device bond6
[  117.841278][ T8683] bond6: (slave wlan0): Enslaving as an active interface with a down link
[  117.857627][ T8685] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  118.141348][ T8721] netlink: 'syz.2.736': attribute type 3 has an invalid length.
[  118.144379][ T8721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'.
[  118.402360][ T8738] openvswitch: netlink: VXLAN extension 226 out of range max 1
[  118.411583][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'.
[  118.542259][ T8747] netlink: 104 bytes leftover after parsing attributes in process `syz.2.740'.
[  118.724683][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.742'.
[  118.845690][ T8767] netlink: 'syz.0.744': attribute type 1 has an invalid length.
[  118.862392][ T8770] netlink: 'syz.2.745': attribute type 2 has an invalid length.
[  118.865861][ T8770] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[  118.879980][ T8770] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[  119.076086][ T8777] netlink: 'syz.0.746': attribute type 10 has an invalid length.
[  119.081607][ T8777] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  119.569133][ T8808] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  119.580119][ T8808] netlink: 'syz.1.752': attribute type 5 has an invalid length.
[  119.703486][ T8811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.735315][ T8817] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  119.770203][ T8817] batman_adv: batadv0: Removing interface: virt_wifi0
[  120.287709][ T8838] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  120.318800][ T8836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.546158][ T8836] infiniband syz1: set down
[  120.553367][ T8836] infiniband syz1: added bond0
[  120.635374][ T8836] RDS/IB: syz1: added
[  120.638124][ T8836] smc: adding ib device syz1 with port count 1
[  120.644282][ T8836] smc:    ib device syz1 port 1 has no pnetid
[  122.136729][ T8885] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.365988][ T8894] __nla_validate_parse: 24 callbacks suppressed
[  122.366008][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'.
[  122.537271][ T8900] netlink: 52 bytes leftover after parsing attributes in process `syz.2.776'.
[  122.561360][ T8900] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.776'.
[  122.720497][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'.
[  122.785299][ T8913] tipc: Resetting bearer <eth:syzkaller0>
[  122.796666][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.783'.
[  122.806418][ T8913] geneve2: entered promiscuous mode
[  122.808555][ T8913] geneve2: entered allmulticast mode
[  122.816698][ T6788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[  122.823659][ T6788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[  122.827711][ T6788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[  122.835261][ T6788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[  122.987397][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'.
[  123.685188][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.790'.
[  123.715908][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.790'.
[  123.721502][ T8941] netem: change failed
[  123.728220][ T8947] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.746677][ T8947] netlink: 27 bytes leftover after parsing attributes in process `syz.2.792'.
[  123.826223][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'.
[  123.833939][ T8952] xfrm1: entered promiscuous mode
[  123.836058][ T8952] xfrm1: entered allmulticast mode
[  124.061789][ T8972] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  124.156866][ T8976] vlan0: entered promiscuous mode
[  124.226623][ T8980] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.379761][ T8982] syzkaller1: entered promiscuous mode
[  124.381787][ T8982] syzkaller1: entered allmulticast mode
[  124.755053][ T8989] validate_nla: 8 callbacks suppressed
[  124.755069][ T8989] netlink: 'syz.0.802': attribute type 8 has an invalid length.
[  125.372241][ T9007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.377341][ T9006] tipc: Disabling bearer <eth:syzkaller0>
[  125.485380][ T9009] netlink: 'syz.1.808': attribute type 5 has an invalid length.
[  126.504098][ T9025] RDS: rds_bind could not find a transport for ::aaaa:aaaa:b:0:20:0, load rds_tcp or rds_rdma?
[  126.845556][   T24] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  126.848603][   T24] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  126.862207][   T24] hid-generic 0005:16BF:5505.0003: reserved main item tag 0xe
[  126.881557][   T24] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  126.939685][ T8988] Set syz1 is full, maxelem 65536 reached
[  127.017867][ T9037] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.025896][ T9037] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.096035][ T9037] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.109537][ T9037] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.175052][ T9037] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.178285][ T9037] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.231217][ T9037] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.235439][ T9037] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.328022][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.332887][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.352246][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.355143][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.381784][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.385053][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.388192][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.396726][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.465892][ T9056] netlink: 'syz.0.820': attribute type 9 has an invalid length.
[  127.667625][ T9075] __nla_validate_parse: 21 callbacks suppressed
[  127.667642][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'.
[  127.844921][ T9086] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  128.112370][ T9106] netlink: 56 bytes leftover after parsing attributes in process `syz.0.831'.
[  128.115412][ T9106] netlink: 19 bytes leftover after parsing attributes in process `syz.0.831'.
[  128.118405][ T9106] netlink: 19 bytes leftover after parsing attributes in process `syz.0.831'.
[  128.124042][ T9106] netlink: 'syz.0.831': attribute type 10 has an invalid length.
[  128.126612][ T9106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.831'.
[  128.130153][ T9106] bond0: entered promiscuous mode
[  128.131887][ T9106] dummy0: entered promiscuous mode
[  128.133904][ T9106] bond0: entered allmulticast mode
[  128.135967][ T9106] dummy0: entered allmulticast mode
[  128.143836][ T9106] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.147136][ T9106] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  128.203314][ T9118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'.
[  128.266161][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.835'.
[  128.338905][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.835'.
[  128.345052][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.835'.
[  128.358348][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'.
[  128.396337][ T9133] ip6gre1: entered allmulticast mode
[  128.565461][ T9145] IPVS: set_ctl: invalid protocol: 169 224.0.0.1:20000
[  128.905812][ T9156] netlink: 'syz.1.845': attribute type 4 has an invalid length.
[  129.039990][ T9160] bridge3: entered promiscuous mode
[  129.041940][ T9160] bridge3: entered allmulticast mode
[  129.236200][ T9175] netlink: 'syz.0.851': attribute type 33 has an invalid length.
[  129.392620][ T9187] netlink: 'syz.0.853': attribute type 3 has an invalid length.
[  129.395882][ T9187] netlink: 'syz.0.853': attribute type 2 has an invalid length.
[  129.399011][ T9187] netlink: 'syz.0.853': attribute type 2 has an invalid length.
[  129.508017][ T9183] vlan0: left promiscuous mode
[  129.578930][ T9183] bond2: left promiscuous mode
[  129.581426][ T9183] wireguard1: left promiscuous mode
[  129.604379][ T9183] veth3: left promiscuous mode
[  129.607072][ T9183] bond5: left promiscuous mode
[  129.611100][ T9183] bridge0: left promiscuous mode
[  129.623791][ T9183] xfrm1: left promiscuous mode
[  129.629878][ T9183] bridge3: left promiscuous mode
[  129.633091][ T6788] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.636434][ T6788] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.640783][ T6788] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.644080][ T6788] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.647492][ T6788] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.651026][ T6788] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.654256][ T6788] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.657717][ T6788] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.693052][ T9191] netlink: 'syz.0.854': attribute type 1 has an invalid length.
[  130.362381][ T9229] validate_nla: 1 callbacks suppressed
[  130.362394][ T9229] netlink: 'syz.0.863': attribute type 2 has an invalid length.
[  130.522284][ T9233] netlink: 'syz.0.864': attribute type 12 has an invalid length.
[  131.014437][ T9258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.019066][ T9258] syzkaller0: entered promiscuous mode
[  131.021289][ T9258] syzkaller0: entered allmulticast mode
[  131.182783][ T9269] openvswitch: netlink: Multiple metadata blocks provided
[  131.237727][ T9271] wireguard0: entered promiscuous mode
[  131.709982][ T9253] tipc: Resetting bearer <eth:syzkaller0>
[  131.725162][ T9253] tipc: Disabling bearer <eth:syzkaller0>
[  132.368047][ T9322] netlink: 'syz.0.882': attribute type 3 has an invalid length.
[  132.574386][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.576913][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.750345][ T9326] __nla_validate_parse: 20 callbacks suppressed
[  132.750366][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.883'.
[  133.112755][ T9340] netlink: 'syz.1.887': attribute type 8 has an invalid length.
[  133.163894][ T9342] netlink: 'syz.2.888': attribute type 2 has an invalid length.
[  133.167492][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'.
[  133.360799][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'.
[  133.385535][ T9349] syzkaller0: entered promiscuous mode
[  133.407929][ T9349] syzkaller0: entered allmulticast mode
[  133.591373][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.890'.
[  133.617715][ T9362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.892'.
[  133.849950][   T61] block nbd0: Possible stuck request ffff888022780000: control (read@0,1024B). Runtime 60 seconds
[  133.854262][ T8070] block nbd1: Possible stuck request ffff8880227b8000: control (read@0,1024B). Runtime 60 seconds
[  133.858567][   T61] block nbd0: Possible stuck request ffff888022780200: control (read@1024,1024B). Runtime 60 seconds
[  133.863735][ T8070] block nbd1: Possible stuck request ffff8880227b8200: control (read@1024,1024B). Runtime 60 seconds
[  133.868151][ T8070] block nbd1: Possible stuck request ffff8880227b8400: control (read@2048,1024B). Runtime 60 seconds
[  133.872987][   T61] block nbd0: Possible stuck request ffff888022780400: control (read@2048,1024B). Runtime 60 seconds
[  133.877357][   T61] block nbd0: Possible stuck request ffff888022780600: control (read@3072,1024B). Runtime 60 seconds
[  133.882167][ T8070] block nbd1: Possible stuck request ffff8880227b8600: control (read@3072,1024B). Runtime 60 seconds
[  135.557837][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'.
[  135.560812][ T9375] netlink: 'syz.0.895': attribute type 5 has an invalid length.
[  135.563455][ T9375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.895'.
[  135.576782][ T9375] geneve3: entered promiscuous mode
[  135.578573][ T9375] geneve3: entered allmulticast mode
[  135.581807][ T6788] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  135.586085][ T6788] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  135.593263][ T9375] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  135.623701][ T6788] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  135.632067][ T6788] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  135.784598][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'.
[  135.798438][ T9381] netlink: 'syz.1.896': attribute type 83 has an invalid length.
[  135.813433][ T9381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.896'.
[  135.849730][ T9383] netlink: 36 bytes leftover after parsing attributes in process `syz.0.898'.
[  137.353188][   T33] audit: type=1107 audit(1757426540.094:2): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  137.584957][ T9478] netlink: 'syz.0.919': attribute type 3 has an invalid length.
[  137.585506][ T9477] netlink: 'syz.2.920': attribute type 7 has an invalid length.
[  138.027465][ T9488] geneve4: entered promiscuous mode
[  138.030299][   T13] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0
[  138.032577][ T9488] __nla_validate_parse: 10 callbacks suppressed
[  138.032587][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'.
[  138.043263][   T13] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0
[  138.047179][   T13] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0
[  138.053351][   T13] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0
[  138.236633][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'.
[  138.250545][ T9496] openvswitch: netlink: IPv6 tunnel dst address is zero
[  138.417291][ T9502] netlink: 'syz.0.927': attribute type 12 has an invalid length.
[  138.421790][ T9502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.927'.
[  138.531799][ T9509] IPv6: NLM_F_CREATE should be specified when creating new route
[  138.678404][ T9519] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.794482][ T9522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.931'.
[  139.085480][ T9533] netlink: 'syz.1.935': attribute type 1 has an invalid length.
[  139.144500][ T9533] 8021q: adding VLAN 0 to HW filter on device bond8
[  139.167992][ T9533] veth5: entered promiscuous mode
[  139.176009][ T9533] bond8: (slave veth5): Enslaving as an active interface with a down link
[  139.181486][ T9533] erspan0: entered allmulticast mode
[  139.499067][ T9548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.939'.
[  139.596135][ T9550] vxcan1: entered allmulticast mode
[  139.598734][ T9550] vxcan1: left allmulticast mode
[  139.753348][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.942'.
[  139.997296][ T9575] netlink: 'syz.1.946': attribute type 10 has an invalid length.
[  140.017358][ T9575] bond6: (slave wlan0): Releasing active interface
[  140.224201][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'.
[  140.277418][ T9589] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  140.288705][ T9589] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  140.511030][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.954'.
[  140.520012][ T9614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'.
[  140.796741][ T9619] netlink: 'syz.2.956': attribute type 16 has an invalid length.
[  140.801676][ T9619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.956'.
[  142.816311][   T25] block nbd2: Possible stuck request ffff8880227e8000: control (read@0,1024B). Runtime 60 seconds
[  142.828685][   T25] block nbd2: Possible stuck request ffff8880227e8200: control (read@1024,1024B). Runtime 60 seconds
[  142.832805][   T25] block nbd2: Possible stuck request ffff8880227e8400: control (read@2048,1024B). Runtime 60 seconds
[  142.836515][   T25] block nbd2: Possible stuck request ffff8880227e8600: control (read@3072,1024B). Runtime 60 seconds
[  143.175632][ T9678] netlink: 'syz.1.972': attribute type 29 has an invalid length.
[  143.184575][ T9678] netlink: 'syz.1.972': attribute type 29 has an invalid length.
[  143.209428][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  143.299073][ T9683] bridge0: port 1(erspan0) entered blocking state
[  143.304013][ T9683] bridge0: port 1(erspan0) entered disabled state
[  143.306273][ T9683] erspan0: entered allmulticast mode
[  143.308850][ T9683] erspan0: entered promiscuous mode
[  143.320181][ T9683] erspan0: left allmulticast mode
[  143.322693][ T9683] erspan0: left promiscuous mode
[  143.324396][ T9683] bridge0: port 1(erspan0) entered disabled state
[  143.463832][ T9694] netlink: 'syz.2.979': attribute type 20 has an invalid length.
[  143.466359][ T9694] netlink: 'syz.2.979': attribute type 15 has an invalid length.
[  143.468985][ T9694] netlink: 'syz.2.979': attribute type 29 has an invalid length.
[  143.735854][ T9723] syzkaller1: entered promiscuous mode
[  143.737870][ T9723] syzkaller1: entered allmulticast mode
[  143.741380][ T9720] __nla_validate_parse: 7 callbacks suppressed
[  143.741396][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'.
[  143.778676][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'.
[  143.809741][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.983'.
[  143.917395][ T9730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.988'.
[  144.023800][ T9734] bond0: (slave dummy0): Releasing backup interface
[  144.032317][ T9734] dummy0: left promiscuous mode
[  144.034286][ T9734] dummy0: left allmulticast mode
[  144.193692][ T9743] netlink: 116 bytes leftover after parsing attributes in process `syz.0.994'.
[  144.249151][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'.
[  144.285398][ T9746] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.995'.
[  144.501354][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.997'.
[  144.731763][ T9769] netlink: 'syz.1.999': attribute type 4 has an invalid length.
[  144.736531][ T9769] netlink: 'syz.1.999': attribute type 4 has an invalid length.
[  144.822684][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1000'.
[  144.878095][ T9775] atomic_op ffff888117b9c998 conn xmit_atomic 0000000000000000
[  144.883964][ T9775] netlink: 'syz.0.1002': attribute type 1 has an invalid length.
[  144.894536][ T9775] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1002'.
[  145.258457][ T9791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  145.337235][ T9793] netlink: 'syz.0.1007': attribute type 1 has an invalid length.
[  145.341669][ T9793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.426682][ T9797] veth0_to_team: left promiscuous mode
[  145.430891][ T9797] veth0_to_team: left allmulticast mode
[  145.443043][ T9797] tipc: Resetting bearer <eth:syzkaller0>
[  145.447751][ T9797] syzkaller0: left promiscuous mode
[  145.453162][ T9797] syzkaller0: left allmulticast mode
[  145.465867][ T9797] ip6gretap1: left allmulticast mode
[  145.478403][ T9797] gre1: left allmulticast mode
[  145.499008][ T9797] macsec0: left allmulticast mode
[  145.504495][ T9797] macsec0: left promiscuous mode
[  145.507263][ T9797] macsec1: left promiscuous mode
[  145.509823][ T9797] macsec1: left allmulticast mode
[  145.543814][ T6788] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.546900][ T6788] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.552334][ T6788] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.558057][ T6788] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.204797][ T9867] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.371237][ T9877] validate_nla: 1 callbacks suppressed
[  146.371257][ T9877] netlink: 'syz.1.1024': attribute type 33 has an invalid length.
[  146.653734][ T9894] netlink: 'syz.1.1028': attribute type 2 has an invalid length.
[  146.852587][ T9901] bond5: (slave bridge0): Releasing backup interface
[  147.933590][ T9950] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  147.936463][ T9950] openvswitch: netlink: Message has 1 unknown bytes.
[  148.344327][ T9973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.579155][ T9991] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.582788][ T9991] syzkaller0: entered promiscuous mode
[  148.584710][ T9991] syzkaller0: entered allmulticast mode
[  148.754448][T10001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.940214][T10008] netlink: 'syz.2.1057': attribute type 6 has an invalid length.
[  148.995147][T10025] __nla_validate_parse: 20 callbacks suppressed
[  148.995161][T10025] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1063'.
[  149.002523][T10026] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1063'.
[  149.041061][T10030] netlink: 'syz.2.1064': attribute type 11 has an invalid length.
[  149.043741][T10030] netlink: 'syz.2.1064': attribute type 11 has an invalid length.
[  149.046820][T10030] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1064'.
[  149.139230][T10044] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1066'.
[  149.410445][T10071] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1070'.
[  149.414184][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1069'.
[  149.604444][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'.
[  149.607901][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'.
[  149.623440][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'.
[  149.623756][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.627137][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'.
[  149.632879][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.637564][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.642046][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.958980][T10084] netlink: 'syz.1.1075': attribute type 1 has an invalid length.
[  149.986925][T10084] 8021q: adding VLAN 0 to HW filter on device bond10
[  149.998713][T10084] tun0: tun_chr_ioctl cmd 2147767520
[  150.139644][T10094] syz_tun: entered allmulticast mode
[  150.153048][T10093] dvmrp8: entered allmulticast mode
[  150.167240][T10094] syz_tun: left allmulticast mode
[  150.169091][T10094] dvmrp8: left allmulticast mode
[  150.220075][T10102] syzkaller0: entered promiscuous mode
[  150.222377][T10102] syzkaller0: entered allmulticast mode
[  150.237781][  T973] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  150.243711][T10102] syz.1.1080: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  150.248763][  T973] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  150.252293][  T973] hid-generic 0005:16BF:5505.0004: reserved main item tag 0xe
[  150.252663][T10102] CPU: 1 UID: 0 PID: 10102 Comm: syz.1.1080 Not tainted syzkaller #0 PREEMPT(full) 
[  150.252678][T10102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.252685][T10102] Call Trace:
[  150.252690][T10102]  <TASK>
[  150.252695][T10102]  dump_stack_lvl+0x189/0x250
[  150.252723][T10102]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.252734][T10102]  ? __pfx__printk+0x10/0x10
[  150.252746][T10102]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  150.252757][T10102]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  150.252767][T10102]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  150.252779][T10102]  warn_alloc+0x214/0x310
[  150.252794][T10102]  ? stack_depot_save_flags+0x40/0x860
[  150.252809][T10102]  ? __pfx_warn_alloc+0x10/0x10
[  150.252822][T10102]  ? kasan_save_track+0x4f/0x80
[  150.252833][T10102]  ? xskq_create+0x56/0x170
[  150.252843][T10102]  ? xsk_init_queue+0xb0/0x110
[  150.252851][T10102]  ? xsk_setsockopt+0x4dc/0x8d0
[  150.252862][T10102]  ? do_sock_setsockopt+0x17c/0x1b0
[  150.252871][T10102]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  150.252879][T10102]  ? do_syscall_64+0xfa/0x3b0
[  150.252888][T10102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.252900][T10102]  __vmalloc_node_range_noprof+0x125/0x12f0
[  150.252926][T10102]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  150.252937][T10102]  ? xskq_create+0x56/0x170
[  150.252946][T10102]  ? __kasan_kmalloc+0x93/0xb0
[  150.252958][T10102]  vmalloc_user_noprof+0xad/0xf0
[  150.252969][T10102]  ? xskq_create+0xbf/0x170
[  150.252977][T10102]  xskq_create+0xbf/0x170
[  150.252986][T10102]  xsk_init_queue+0xb0/0x110
[  150.252995][T10102]  xsk_setsockopt+0x4dc/0x8d0
[  150.253008][T10102]  ? __pfx_xsk_setsockopt+0x10/0x10
[  150.253019][T10102]  ? __pfx_aa_sk_perm+0x10/0x10
[  150.253033][T10102]  ? aa_sock_opt_perm+0xff/0x1b0
[  150.253042][T10102]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  150.253051][T10102]  ? __pfx_xsk_setsockopt+0x10/0x10
[  150.253063][T10102]  do_sock_setsockopt+0x17c/0x1b0
[  150.253074][T10102]  __x64_sys_setsockopt+0x13f/0x1b0
[  150.253086][T10102]  do_syscall_64+0xfa/0x3b0
[  150.253094][T10102]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.253101][T10102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.253109][T10102]  ? exc_page_fault+0x9f/0xf0
[  150.253118][T10102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.253125][T10102] RIP: 0033:0x7f2c8358ebe9
[  150.253135][T10102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.253142][T10102] RSP: 002b:00007f2c84388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  150.253151][T10102] RAX: ffffffffffffffda RBX: 00007f2c837c5fa0 RCX: 00007f2c8358ebe9
[  150.253157][T10102] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  150.253161][T10102] RBP: 00007f2c83611e19 R08: 0000000000000004 R09: 0000000000000000
[  150.253166][T10102] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.253170][T10102] R13: 00007f2c837c6038 R14: 00007f2c837c5fa0 R15: 00007ffd6a5101b8
[  150.253183][T10102]  </TASK>
[  150.253187][T10102] Mem-Info:
[  150.256224][  T973] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  150.283969][T10102] active_anon:13857 inactive_anon:0 isolated_anon:0
[  150.283969][T10102]  active_file:1388 inactive_file:38265 isolated_file:0
[  150.283969][T10102]  unevictable:1768 dirty:113 writeback:0
[  150.283969][T10102]  slab_reclaimable:10150 slab_unreclaimable:143858
[  150.283969][T10102]  mapped:18495 shmem:2407 pagetables:1010
[  150.283969][T10102]  sec_pagetables:0 bounce:0
[  150.283969][T10102]  kernel_misc_reclaimable:0
[  150.283969][T10102]  free:199751 free_pcp:21400 free_cma:0
[  150.382604][T10102] Node 0 active_anon:14616kB inactive_anon:0kB active_file:3680kB inactive_file:146584kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37596kB dirty:392kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5708kB pagetables:2376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  150.385365][T10107] syzkaller0: Caught tx_queue_len zero misconfig
[  150.398105][T10102] Node 1 active_anon:41084kB inactive_anon:0kB active_file:1872kB inactive_file:6476kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36452kB dirty:60kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6916kB pagetables:1868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  150.413372][T10102] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  150.429551][T10102] lowmem_reserve[]: 0 811 811 811 811
[  150.431458][T10102] Node 0 DMA32 free:165448kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14616kB inactive_anon:0kB active_file:3680kB inactive_file:146584kB unevictable:3536kB writepending:392kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:36668kB local_pcp:20564kB free_cma:0kB
[  150.443679][T10102] lowmem_reserve[]: 0 0 0 0 0
[  150.445555][T10102] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  150.455470][T10102] lowmem_reserve[]: 0 0 854 854 854
[  150.457246][T10102] Node 1 Normal free:159568kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41152kB inactive_anon:0kB active_file:1872kB inactive_file:6476kB unevictable:3536kB writepending:60kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:48220kB local_pcp:18264kB free_cma:0kB
[  150.470510][T10102] lowmem_reserve[]: 0 0 0 0 0
[  150.472061][T10102] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  150.476123][T10102] Node 0 DMA32: 1019*4kB (UME) 841*8kB (UME) 494*16kB (UME) 182*32kB (UME) 49*64kB (UME) 24*128kB (UME) 20*256kB (UME) 11*512kB (UM) 3*1024kB (M) 3*2048kB (ME) 28*4096kB (UM) = 165396kB
[  150.483939][T10102] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  150.489174][T10102] Node 1 Normal: 2*4kB (UM) 29*8kB (ME) 198*16kB (UME) 139*32kB (UM) 24*64kB (UME) 13*128kB (UM) 9*256kB (UM) 5*512kB (UME) 6*1024kB (UM) 3*2048kB (M) 32*4096kB (UM) = 159280kB
[  150.510204][T10102] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  150.513165][T10102] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  150.516567][T10102] 42060 total pagecache pages
[  150.518075][T10102] 0 pages in swap cache
[  150.522484][T10102] Free swap  = 124996kB
[  150.523987][T10102] Total swap = 124996kB
[  150.525312][T10102] 786301 pages RAM
[  150.527038][T10102] 0 pages HighMem/MovableOnly
[  150.528998][T10102] 241348 pages reserved
[  150.531495][T10102] 0 pages cma reserved
[  151.065348][T10150] netlink: 'syz.2.1090': attribute type 2 has an invalid length.
[  151.083946][T10150] netlink: 'syz.2.1090': attribute type 2 has an invalid length.
[  151.171939][T10155] syzkaller1: entered promiscuous mode
[  151.181476][T10155] syzkaller1: entered allmulticast mode
[  151.358501][T10167] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.530733][T10179] netlink: 'syz.1.1100': attribute type 1 has an invalid length.
[  151.535487][T10179] netlink: 'syz.1.1100': attribute type 2 has an invalid length.
[  151.540352][T10179] netlink: 'syz.1.1100': attribute type 1 has an invalid length.
[  151.545012][T10179] netlink: 'syz.1.1100': attribute type 2 has an invalid length.
[  151.804434][T10195] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.503525][T10230] netlink: 'syz.1.1116': attribute type 83 has an invalid length.
[  152.996527][T10269] netlink: 'syz.1.1126': attribute type 10 has an invalid length.
[  153.015967][T10269] team0: Cannot enslave team device to itself
[  153.114112][T10276] netlink: 'syz.2.1128': attribute type 11 has an invalid length.
[  153.139204][T10281] netlink: 'syz.1.1127': attribute type 13 has an invalid length.
[  153.142573][T10281] netlink: 'syz.1.1127': attribute type 17 has an invalid length.
[  153.154312][T10281] erspan0: left promiscuous mode
[  153.156761][T10281] erspan0: left allmulticast mode
[  153.173747][T10281] 8021q: adding VLAN 0 to HW filter on device team0
[  153.178199][T10281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.895819][T10305] vlan0: entered allmulticast mode
[  153.897867][T10305] bridge0: entered allmulticast mode
[  154.018839][T10314] __nla_validate_parse: 15 callbacks suppressed
[  154.018855][T10314] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1136'.
[  154.268218][T10317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1137'.
[  154.294598][T10339] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20004
[  154.819897][T10369] pim6reg1: entered promiscuous mode
[  154.822217][T10369] pim6reg1: entered allmulticast mode
[  155.735826][T10389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1150'.
[  155.827360][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'.
[  156.000847][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'.
[  156.006798][T10413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1156'.
[  156.540855][T10441] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  156.546024][T10441] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  156.877450][T10454] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1165'.
[  156.945310][T10456] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1166'.
[  156.963749][T10456] netem: unknown loss type 12
[  156.965946][T10456] netem: change failed
[  157.086209][T10461] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  157.144838][T10463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1168'.
[  157.213155][T10463] nbd: nbd1 already in use
[  157.214949][T10463] block nbd1: NBD_DISCONNECT
[  157.216586][T10463] block nbd1: Send disconnect failed -32
[  157.218671][T10463] block nbd1: shutting down sockets
[  157.271663][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.275288][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  157.278957][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.282353][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  157.288086][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.291426][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  157.294625][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.297756][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  157.302666][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.312677][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[  157.324285][ T5845] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.333055][ T5845] Buffer I/O error on dev nbd1, logical block 1, async page read
[  157.342391][ T5845] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.349461][ T5845] Buffer I/O error on dev nbd1, logical block 2, async page read
[  157.355682][ T5845] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.380581][ T5845] Buffer I/O error on dev nbd1, logical block 3, async page read
[  157.385990][ T5845] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.390140][ T5845] Buffer I/O error on dev nbd1, logical block 0, async page read
[  157.393428][ T5845] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.397167][ T5845] Buffer I/O error on dev nbd1, logical block 1, async page read
[  157.417572][ T5845] ldm_validate_partition_table(): Disk read failed.
[  157.438006][ T5845] Dev nbd1: unable to read RDB block 0
[  157.441482][ T5845]  nbd1: unable to read partition table
[  157.452437][ T5845] ldm_validate_partition_table(): Disk read failed.
[  157.456372][ T5845] Dev nbd1: unable to read RDB block 0
[  157.459854][ T5845]  nbd1: unable to read partition table
[  157.498512][T10480] netlink: 'syz.2.1173': attribute type 13 has an invalid length.
[  157.504086][T10474] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  157.507692][T10474] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1172'.
[  157.524535][T10480] netlink: 'syz.2.1173': attribute type 17 has an invalid length.
[  157.533182][T10474] bond0 (unregistering): Released all slaves
[  157.536116][   T36] smc: removing ib device syz1
[  157.615498][T10480] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.620007][T10480] 8021q: adding VLAN 0 to HW filter on device team0
[  157.626631][T10480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.960911][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.977437][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.988828][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.992983][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.207463][T10496] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  158.211684][T10496] netlink: 'syz.1.1176': attribute type 12 has an invalid length.
[  158.263218][T10498] netlink: 'syz.1.1177': attribute type 5 has an invalid length.
[  158.940872][T10557] can: request_module (can-proto-0) failed.
[  158.944401][T10557] netlink: 'syz.1.1193': attribute type 10 has an invalid length.
[  158.947290][T10557] netlink: 'syz.1.1193': attribute type 10 has an invalid length.
[  158.951377][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.954922][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.965731][T10561] netlink: 'syz.0.1194': attribute type 1 has an invalid length.
[  158.991310][T10561] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.011037][T10561] bond0: (slave ip6gretap2): making interface the new active one
[  159.014293][T10561] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link
[  159.044115][T10561] erspan0: entered allmulticast mode
[  159.061198][T10561] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  159.118043][T10570] netlink: 'syz.0.1197': attribute type 1 has an invalid length.
[  159.137001][T10570] 8021q: adding VLAN 0 to HW filter on device bond4
[  159.165923][T10570] veth5: entered promiscuous mode
[  159.201877][T10576] bond0: (slave erspan0): Releasing active interface
[  159.204738][T10576] ip6gretap2: entered promiscuous mode
[  159.255986][T10581] __nla_validate_parse: 9 callbacks suppressed
[  159.256004][T10581] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1200'.
[  159.322751][T10588] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1201'.
[  159.438223][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1199'.
[  159.616684][T10615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1207'.
[  159.620360][T10615] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1207'.
[  159.624632][T10615] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1207'.
[  159.644033][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'.
[  159.646964][T10617] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  159.654968][T10617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1208'.
[  159.655697][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'.
[  159.666903][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'.
[  160.066447][T10648] batman_adv: batadv0: Adding interface: dummy0
[  160.068409][T10648] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  160.075990][T10648] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  160.699229][T10664] syzkaller0: entered promiscuous mode
[  160.701326][T10664] syzkaller0: entered allmulticast mode
[  160.704680][ T5869] syzkaller0: tun_net_xmit 70
[  160.707328][T10664] syzkaller0: tun_chr_ioctl cmd 1074025677
[  160.711276][T10664] syzkaller0: Linktype set failed because interface is up
[  160.896988][T10671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.017847][T10681] pimreg: entered allmulticast mode
[  161.038101][T10681] pimreg: left allmulticast mode
[  161.497462][T10722] batadv_slave_1: entered promiscuous mode
[  161.518476][T10722] batadv_slave_1 (unregistering): left promiscuous mode
[  161.658867][T10734] netlink: 'syz.2.1238': attribute type 13 has an invalid length.
[  161.665085][T10734] netlink: 'syz.2.1238': attribute type 17 has an invalid length.
[  161.676841][T10734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.745776][T10757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.052329][T10776] netlink: 'syz.2.1251': attribute type 4 has an invalid length.
[  163.222508][T10795] 8021q: adding VLAN 0 to HW filter on device bond5
[  163.236925][T10795] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  163.243474][T10795] bond5: (slave macvlan0): Enslaving as a backup interface with an up link
[  163.306268][T10802] netlink: 'syz.0.1258': attribute type 4 has an invalid length.
[  163.330638][   T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  163.332735][T10806] geneve0: entered promiscuous mode
[  163.336779][T10806] geneve0: entered allmulticast mode
[  163.343435][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.346882][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.355575][   T13] bond5: (slave macvlan0): link status up again after 0 ms
[  163.369627][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.372358][T10802] netlink: 'syz.0.1258': attribute type 4 has an invalid length.
[  163.373033][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.382963][   T13] bond5: (slave macvlan0): link status up again after 0 ms
[  163.402199][ T5912] bond5: (slave macvlan0): link status up again after 0 ms
[  163.405796][ T5912] bond5: (slave macvlan0): failed to get link speed/duplex
[  163.420803][T10812] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  163.435086][T10812] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  163.469819][ T5869] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  163.759777][ T5912] bond5: (slave macvlan0): failed to get link speed/duplex
[  163.835025][T10831] netlink: 'syz.0.1266': attribute type 1 has an invalid length.
[  163.871126][ T5869] bond5: (slave macvlan0): failed to get link speed/duplex
[  163.939911][   T61] block nbd0: Possible stuck request ffff888022780000: control (read@0,1024B). Runtime 90 seconds
[  163.943514][   T61] block nbd0: Possible stuck request ffff888022780200: control (read@1024,1024B). Runtime 90 seconds
[  163.947059][   T61] block nbd0: Possible stuck request ffff888022780400: control (read@2048,1024B). Runtime 90 seconds
[  163.950950][   T61] block nbd0: Possible stuck request ffff888022780600: control (read@3072,1024B). Runtime 90 seconds
[  163.979901][ T5912] bond5: (slave macvlan0): failed to get link speed/duplex
[  164.090577][ T5869] bond5: (slave macvlan0): failed to get link speed/duplex
[  164.281755][T10853] netlink: 'syz.2.1273': attribute type 16 has an invalid length.
[  164.284528][T10853] netlink: 'syz.2.1273': attribute type 17 has an invalid length.
[  164.374267][T10859] netlink: 'syz.1.1275': attribute type 10 has an invalid length.
[  164.378604][T10860] netlink: 'syz.1.1275': attribute type 10 has an invalid length.
[  164.394951][T10853] tipc: Resetting bearer <eth:syzkaller0>
[  164.422712][T10859] 8021q: adding VLAN 0 to HW filter on device team0
[  164.432568][T10860] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  164.438054][ T5869] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.449758][ T5869] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.454320][ T5869] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.465919][ T5869] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.490934][T10865] __nla_validate_parse: 16 callbacks suppressed
[  164.490954][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'.
[  164.504073][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'.
[  164.507232][T10866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.511900][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'.
[  164.526540][T10866] syzkaller0: entered promiscuous mode
[  164.528734][T10866] syzkaller0: entered allmulticast mode
[  164.546608][T10865] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1276'.
[  164.556863][T10869] tipc: Resetting bearer <eth:syzkaller0>
[  164.577674][T10869] tipc: Disabling bearer <eth:syzkaller0>
[  165.218328][T10883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1280'.
[  165.221607][T10883] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1280'.
[  165.226297][T10882] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1280'.
[  165.241046][T10882] batman_adv: batadv0: Removing interface: dummy0
[  165.359528][T10885] netlink: 'syz.0.1281': attribute type 2 has an invalid length.
[  165.398036][T10887] pim6reg1: entered promiscuous mode
[  165.402402][T10887] pim6reg1: entered allmulticast mode
[  165.526686][T10891] netlink: 'syz.0.1284': attribute type 1 has an invalid length.
[  165.692766][T10901] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1287'.
[  165.811942][T10923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1290'.
[  165.931858][T10930] geneve2: entered promiscuous mode
[  165.933988][T10930] geneve2: entered allmulticast mode
[  166.105047][T10941] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1293'.
[  166.782723][T10975] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  166.793178][T10975] bond0: (slave syz_tun): Releasing backup interface
[  166.801761][T10975] team0: Port device bond0 removed
[  166.809632][T10975] bond2: (slave wireguard1): Releasing backup interface
[  166.812048][T10975] bond2: (slave wireguard2): making interface the new active one
[  166.816225][T10975] bond2: (slave wireguard2): Releasing backup interface
[  166.819612][T10975] bond4: (slave ip6gretap1): Releasing active interface
[  166.822385][T10975] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 0e:10:42:36:64:26 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  166.830141][T10975] bond4: (slave veth3): Releasing active interface
[  166.833683][T10975] bond8: (slave veth5): Releasing active interface
[  166.888360][T10981] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  166.892268][T10981] bond0: (slave wlan1): Opening slave failed
[  167.858665][T11038] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  167.891748][T11044] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  167.914758][T11044] bond0: (slave ip6gretap2): Releasing active interface
[  167.917925][T11044] ip6gretap2: left promiscuous mode
[  167.934371][T11044] bond5: (slave macvlan0): Removing an active aggregator
[  167.938256][T11044] bond5: (slave macvlan0): Releasing backup interface
[  168.051502][T11056] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  168.071628][T11056] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.077050][T11058] pim6reg1: entered promiscuous mode
[  168.079077][T11058] pim6reg1: entered allmulticast mode
[  168.081153][T11056] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  168.173320][T11064] validate_nla: 5 callbacks suppressed
[  168.173336][T11064] netlink: 'syz.1.1329': attribute type 1 has an invalid length.
[  168.208860][T11064] 8021q: adding VLAN 0 to HW filter on device bond11
[  168.216497][T11064] erspan0: entered allmulticast mode
[  168.489709][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  168.761843][T11085] 8021q: VLANs not supported on wlan1
[  169.163271][T11102] netlink: 'syz.0.1339': attribute type 7 has an invalid length.
[  169.203477][T11104] syzkaller1: entered promiscuous mode
[  169.205892][T11104] syzkaller1: entered allmulticast mode
[  169.571247][T11116] __nla_validate_parse: 19 callbacks suppressed
[  169.571258][T11116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1343'.
[  169.626330][T11134] netlink: 'syz.2.1345': attribute type 13 has an invalid length.
[  169.637317][T11134] netlink: 'syz.2.1345': attribute type 17 has an invalid length.
[  169.731022][T11134] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.734986][T11134] 8021q: adding VLAN 0 to HW filter on device team0
[  169.743581][T11134] net_ratelimit: 55 callbacks suppressed
[  169.743587][T11134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.862191][T11135] team0: Device macvtap1 is already an upper device of the team interface
[  170.133496][T11140] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1347'.
[  170.181418][T11145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1348'.
[  170.213695][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'.
[  170.217290][T11145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1348'.
[  170.221637][T11145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1348'.
[  170.225302][T11145] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1348'.
[  170.382671][T11153] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1351'.
[  170.520222][T11157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1352'.
[  170.644328][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'.
[  170.787468][T11183] netlink: 'syz.2.1360': attribute type 2 has an invalid length.
[  170.798183][T11182] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  170.872576][T11183] veth0_to_team: entered promiscuous mode
[  170.874430][T11183] veth0_to_team: entered allmulticast mode
[  170.923016][T11193] pim6reg: entered allmulticast mode
[  170.952556][T11193] pim6reg: left allmulticast mode
[  171.251216][T11222] x_tables: ip_tables: udp match: only valid for protocol 17
[  171.370944][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  172.293087][T11288] netlink: 'syz.0.1384': attribute type 5 has an invalid length.
[  172.512935][T11295] tipc: Resetting bearer <eth:syzkaller0>
[  172.567504][ T5869] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0
[  172.575970][ T5869] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  172.578884][ T5869] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 6081 - 0
[  172.586535][ T5869] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0
[  172.589609][ T5869] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  172.592514][ T5869] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 6081 - 0
[  172.596854][ T5869] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0
[  172.601130][ T5869] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  172.604520][ T5869] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 6081 - 0
[  172.607981][ T5869] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0
[  172.611127][ T5869] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  172.627849][ T5869] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 6081 - 0
[  172.890441][   T25] block nbd2: Possible stuck request ffff8880227e8000: control (read@0,1024B). Runtime 90 seconds
[  172.894725][   T25] block nbd2: Possible stuck request ffff8880227e8200: control (read@1024,1024B). Runtime 90 seconds
[  172.899024][   T25] block nbd2: Possible stuck request ffff8880227e8400: control (read@2048,1024B). Runtime 90 seconds
[  172.906291][   T25] block nbd2: Possible stuck request ffff8880227e8600: control (read@3072,1024B). Runtime 90 seconds
[  173.293519][T11331] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  174.491241][T11375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  174.863028][T11404] __nla_validate_parse: 18 callbacks suppressed
[  174.863048][T11404] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1410'.
[  174.990345][T11411] veth0_to_bridge: entered promiscuous mode
[  174.994899][T11410] veth0_to_bridge: left promiscuous mode
[  175.423772][T11421] netlink: 'syz.0.1414': attribute type 13 has an invalid length.
[  175.426629][T11421] netlink: 'syz.0.1414': attribute type 17 has an invalid length.
[  175.437300][T11421] erspan0: left allmulticast mode
[  175.448512][T11421] 8021q: adding VLAN 0 to HW filter on device team0
[  175.452730][T11421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
Connection to localhost closed by remote host.
[  175.689169][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'.
[  176.162605][T10105] ==================================================================
[  176.165183][T10105] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  176.167559][T10105] Read of size 8 at addr ffff8881089ec0a0 by task khidpd_16bf5505/10105
[  176.170813][T10105] 
[  176.172118][T10105] CPU: 0 UID: 0 PID: 10105 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  176.172132][T10105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.172139][T10105] Call Trace:
[  176.172145][T10105]  <TASK>
[  176.172150][T10105]  dump_stack_lvl+0x189/0x250
[  176.172165][T10105]  ? __kasan_check_byte+0x12/0x40
[  176.172179][T10105]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.172188][T10105]  ? lock_release+0x4b/0x3e0
[  176.172202][T10105]  ? __virt_addr_valid+0x4a5/0x5c0
[  176.172213][T10105]  print_report+0xca/0x240
[  176.172222][T10105]  ? __mutex_lock+0x801/0x1350
[  176.172231][T10105]  kasan_report+0x118/0x150
[  176.172242][T10105]  ? __mutex_lock+0x801/0x1350
[  176.172251][T10105]  __mutex_lock+0x801/0x1350
[  176.172261][T10105]  ? __mutex_lock+0x5bb/0x1350
[  176.172269][T10105]  ? l2cap_unregister_user+0x6a/0x1b0
[  176.172286][T10105]  ? __pfx___mutex_lock+0x10/0x10
[  176.172294][T10105]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.172310][T10105]  l2cap_unregister_user+0x6a/0x1b0
[  176.172322][T10105]  hidp_session_thread+0x3c9/0x410
[  176.172337][T10105]  ? __pfx_hidp_session_thread+0x10/0x10
[  176.172347][T10105]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.172359][T10105]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  176.172372][T10105]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  176.172383][T10105]  ? __kthread_parkme+0x7b/0x200
[  176.172393][T10105]  ? __kthread_parkme+0x1a1/0x200
[  176.172401][T10105]  kthread+0x711/0x8a0
[  176.172411][T10105]  ? __pfx_hidp_session_thread+0x10/0x10
[  176.172422][T10105]  ? __pfx_kthread+0x10/0x10
[  176.172432][T10105]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.172443][T10105]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.172451][T10105]  ? __pfx_kthread+0x10/0x10
[  176.172460][T10105]  ret_from_fork+0x3fc/0x770
[  176.172469][T10105]  ? __pfx_ret_from_fork+0x10/0x10
[  176.172477][T10105]  ? __switch_to_asm+0x39/0x70
[  176.172487][T10105]  ? __switch_to_asm+0x33/0x70
[  176.172496][T10105]  ? __pfx_kthread+0x10/0x10
[  176.172505][T10105]  ret_from_fork_asm+0x1a/0x30
[  176.172523][T10105]  </TASK>
[  176.172526][T10105] 
[  176.243704][T10105] Allocated by task 5848:
[  176.245452][T10105]  kasan_save_track+0x3e/0x80
[  176.247381][T10105]  __kasan_kmalloc+0x93/0xb0
[  176.249304][T10105]  __kmalloc_noprof+0x27a/0x4f0
[  176.251302][T10105]  hci_alloc_dev_priv+0x28/0x2060
[  176.253246][T10105]  vhci_create_device+0x120/0x650
[  176.255398][T10105]  vhci_write+0x3ce/0x4a0
[  176.257430][T10105]  vfs_write+0x5c9/0xb30
[  176.259174][T10105]  ksys_write+0x145/0x250
[  176.260894][T10105]  do_syscall_64+0xfa/0x3b0
[  176.262617][T10105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.265518][T10105] 
[  176.266493][T10105] Freed by task 5848:
[  176.268078][T10105]  kasan_save_track+0x3e/0x80
[  176.269891][T10105]  kasan_save_free_info+0x46/0x50
[  176.271817][T10105]  __kasan_slab_free+0x5b/0x80
[  176.273674][T10105]  kfree+0x18e/0x440
[  176.275205][T10105]  bt_host_release+0x82/0x90
[  176.276998][T10105]  device_release+0x9c/0x1c0
[  176.278762][T10105]  kobject_put+0x22b/0x480
[  176.280446][T10105]  vhci_release+0x15a/0x1a0
[  176.282208][T10105]  __fput+0x44c/0xa70
[  176.283732][T10105]  task_work_run+0x1d4/0x260
[  176.285503][T10105]  do_exit+0x6b5/0x2300
[  176.287113][T10105]  do_group_exit+0x21c/0x2d0
[  176.288857][T10105]  __x64_sys_exit_group+0x3f/0x40
[  176.290728][T10105]  x64_sys_call+0x21f7/0x2200
[  176.292552][T10105]  do_syscall_64+0xfa/0x3b0
[  176.294320][T10105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.296587][T10105] 
[  176.297506][T10105] Last potentially related work creation:
[  176.299644][T10105]  kasan_save_stack+0x3e/0x60
[  176.301512][T10105]  kasan_record_aux_stack+0xbd/0xd0
[  176.303632][T10105]  insert_work+0x3d/0x330
[  176.305384][T10105]  __queue_work+0xbaf/0xfb0
[  176.307215][T10105]  queue_work_on+0x181/0x270
[  176.308727][T10105]  process_scheduled_works+0xae1/0x17b0
[  176.310692][T10105]  worker_thread+0x8a0/0xda0
[  176.312239][T10105]  kthread+0x711/0x8a0
[  176.313511][T10105]  ret_from_fork+0x3fc/0x770
[  176.314954][T10105]  ret_from_fork_asm+0x1a/0x30
[  176.316435][T10105] 
[  176.317191][T10105] Second to last potentially related work creation:
[  176.319327][T10105]  kasan_save_stack+0x3e/0x60
[  176.321108][T10105]  kasan_record_aux_stack+0xbd/0xd0
[  176.322953][T10105]  insert_work+0x3d/0x330
[  176.324420][T10105]  __queue_work+0xcd2/0xfb0
[  176.326268][T10105]  call_timer_fn+0x17e/0x5f0
[  176.328101][T10105]  __run_timer_base+0x646/0x860
[  176.329903][T10105]  run_timer_softirq+0xb7/0x180
[  176.331624][T10105]  handle_softirqs+0x286/0x870
[  176.333409][T10105]  __irq_exit_rcu+0xca/0x1f0
[  176.335189][T10105]  irq_exit_rcu+0x9/0x30
[  176.336875][T10105]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  176.339174][T10105]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  176.341578][T10105] 
[  176.342537][T10105] The buggy address belongs to the object at ffff8881089ec000
[  176.342537][T10105]  which belongs to the cache kmalloc-8k of size 8192
[  176.347148][T10105] The buggy address is located 160 bytes inside of
[  176.347148][T10105]  freed 8192-byte region [ffff8881089ec000, ffff8881089ee000)
[  176.352493][T10105] 
[  176.353483][T10105] The buggy address belongs to the physical page:
[  176.355948][T10105] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1089e8
[  176.359505][T10105] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  176.362777][T10105] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  176.365630][T10105] page_type: f5(slab)
[  176.367197][T10105] raw: 057ff00000000040 ffff88801a442280 ffffea0004189c00 dead000000000002
[  176.370477][T10105] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  176.373738][T10105] head: 057ff00000000040 ffff88801a442280 ffffea0004189c00 dead000000000002
[  176.376731][T10105] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  176.380223][T10105] head: 057ff00000000003 ffffea0004227a01 00000000ffffffff 00000000ffffffff
[  176.383624][T10105] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  176.386983][T10105] page dumped because: kasan: bad access detected
[  176.389582][T10105] page_owner tracks the page as allocated
[  176.391723][T10105] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5767, tgid 5767 (sshd), ts 45723865345, free_ts 35566268084
[  176.399194][T10105]  post_alloc_hook+0x240/0x2a0
[  176.401127][T10105]  get_page_from_freelist+0x21e4/0x22c0
[  176.403402][T10105]  __alloc_frozen_pages_noprof+0x181/0x370
[  176.405725][T10105]  alloc_pages_mpol+0x232/0x4a0
[  176.407703][T10105]  allocate_slab+0x8a/0x370
[  176.409535][T10105]  ___slab_alloc+0xbeb/0x1420
[  176.411390][T10105]  __kmalloc_cache_noprof+0x296/0x3d0
[  176.413542][T10105]  tomoyo_init_log+0x111f/0x1f70
[  176.415526][T10105]  tomoyo_supervisor+0x340/0x1480
[  176.417526][T10105]  tomoyo_env_perm+0x149/0x1e0
[  176.419427][T10105]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  176.421676][T10105]  tomoyo_bprm_check_security+0x11c/0x180
[  176.423740][T10105]  security_bprm_check+0x89/0x270
[  176.425399][T10105]  bprm_execve+0x8ee/0x1450
[  176.427002][T10105]  do_execveat_common+0x510/0x6a0
[  176.428956][T10105]  __x64_sys_execve+0x94/0xb0
[  176.430855][T10105] page last free pid 5618 tgid 5618 stack trace:
[  176.433370][T10105]  __free_frozen_pages+0xbc4/0xd30
[  176.435442][T10105]  __slab_free+0x303/0x3c0
[  176.437258][T10105]  qlist_free_all+0x97/0x140
[  176.439115][T10105]  kasan_quarantine_reduce+0x148/0x160
[  176.441245][T10105]  __kasan_slab_alloc+0x22/0x80
[  176.443196][T10105]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  176.445392][T10105]  getname_flags+0xb8/0x540
[  176.447226][T10105]  vfs_fstatat+0x43/0x170
[  176.448984][T10105]  __x64_sys_newfstatat+0x116/0x190
[  176.451154][T10105]  do_syscall_64+0xfa/0x3b0
[  176.452985][T10105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.455385][T10105] 
[  176.456366][T10105] Memory state around the buggy address:
[  176.458587][T10105]  ffff8881089ebf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  176.461839][T10105]  ffff8881089ec000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.464943][T10105] >ffff8881089ec080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.468113][T10105]                                ^
[  176.470147][T10105]  ffff8881089ec100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.473311][T10105]  ffff8881089ec180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.476490][T10105] ==================================================================
[  176.480722][T10105] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  176.483411][T10105] CPU: 0 UID: 0 PID: 10105 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  176.487060][T10105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.491170][T10105] Call Trace:
[  176.492526][T10105]  <TASK>
[  176.493716][T10105]  dump_stack_lvl+0x99/0x250
[  176.495616][T10105]  ? __asan_memcpy+0x40/0x70
[  176.497494][T10105]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.499391][T10105]  ? __pfx__printk+0x10/0x10
[  176.500912][T10105]  vpanic+0x281/0x750
[  176.502184][T10105]  ? __pfx_vpanic+0x10/0x10
[  176.503619][T10105]  ? irqentry_exit+0x74/0x90
[  176.505099][T10105]  panic+0xb9/0xc0
[  176.506302][T10105]  ? __pfx_panic+0x10/0x10
[  176.507699][T10105]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  176.509576][T10105]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.511426][T10105]  ? __mutex_lock+0x801/0x1350
[  176.513043][T10105]  check_panic_on_warn+0x89/0xb0
[  176.514846][T10105]  ? __mutex_lock+0x801/0x1350
[  176.516754][T10105]  end_report+0x78/0x160
[  176.518189][T10105]  kasan_report+0x129/0x150
[  176.519756][T10105]  ? __mutex_lock+0x801/0x1350
[  176.521364][T10105]  __mutex_lock+0x801/0x1350
[  176.522886][T10105]  ? __mutex_lock+0x5bb/0x1350
[  176.524427][T10105]  ? l2cap_unregister_user+0x6a/0x1b0
[  176.526144][T10105]  ? __pfx___mutex_lock+0x10/0x10
[  176.527750][T10105]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.530042][T10105]  l2cap_unregister_user+0x6a/0x1b0
[  176.532122][T10105]  hidp_session_thread+0x3c9/0x410
[  176.534203][T10105]  ? __pfx_hidp_session_thread+0x10/0x10
[  176.536485][T10105]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.538871][T10105]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  176.541418][T10105]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  176.543681][T10105]  ? __kthread_parkme+0x7b/0x200
[  176.545476][T10105]  ? __kthread_parkme+0x1a1/0x200
[  176.547543][T10105]  kthread+0x711/0x8a0
[  176.548881][T10105]  ? __pfx_hidp_session_thread+0x10/0x10
[  176.550611][T10105]  ? __pfx_kthread+0x10/0x10
[  176.552097][T10105]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.553957][T10105]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.555839][T10105]  ? __pfx_kthread+0x10/0x10
[  176.557706][T10105]  ret_from_fork+0x3fc/0x770
[  176.559585][T10105]  ? __pfx_ret_from_fork+0x10/0x10
[  176.561506][T10105]  ? __switch_to_asm+0x39/0x70
[  176.563105][T10105]  ? __switch_to_asm+0x33/0x70
[  176.565061][T10105]  ? __pfx_kthread+0x10/0x10
[  176.566979][T10105]  ret_from_fork_asm+0x1a/0x30
[  176.568666][T10105]  </TASK>
[  176.571941][T10105] Kernel Offset: disabled
[  176.573355][T10105] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:02:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007f67370
R8 =ffff888021520237 R9 =1ffff110042a4046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b0190f R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa490cf7d60 CR3=000000010ef04000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffff000000000000 ffff000000000000 XMM01=ffffffffffffffff ffff000000000000
XMM02=ffffffffffffff00 ffffffffffffff00 XMM03=ffffffffffffffff ffff00ff00000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0000000000000135 0000000036313a00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff000000ff XMM09=343030302e353035 353a464236313a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffea000083f240 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffea000083f240 RBP=ffffea000083f248 RSP=ffffc9000361f8a8
R8 =ffffea000083f247 R9 =1ffffd4000107e48 R10=dffffc0000000000 R11=fffff94000107e49
R12=ffff88810ebb0320 R13=1ffffd4000107e49 R14=ffffea000083f240 R15=0000000000000000
RIP=ffffffff821537c2 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555b449500 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2c842f7d60 CR3=0000000023922000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=326963682f68746f 6f7465756c622f6c XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000556e9fb10068 746f6f7465756c62 XMM03=0000000000000000 ffffff0000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000135 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffffff XMM09=343030302e353035 353a464236313a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
