last executing test programs:

2.76659546s ago: executing program 1 (id=367):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0d000019180fb000000000000000000000000000e98612b36bd33918f5f14708c8bdff986f966093e5bcfa3a864c0079a4c0d611f37854f88980f598768e0a920b16dbcbedd7bf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000500"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1a0, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x30}}}}, [@NL80211_ATTR_VENDOR_DATA={0xd8, 0xc5, "72415d94527f85d12611bbd5d2072be2619797eda5830e64a35cefe41065a48eaa4344c88cb1671901813c3c2e936a786e4050918d395f69702fa1658bbc8f8dc6714fc023d663192142e22d376645b4313d1d3f447d228174f01c17cfdf1d2da456702f6e24a04762d5109e337171155e751a669b9128ffe0655351d137f331a6f405baab72c973d00bbd12d34eef80c3e6a3bd27b120cd966a690a8c9476bb0617bc49f88c6a58d9a99779d7c57d27fafead766e14b31870d779705d6986b507b7e27513ee5e7131beb7c77700f1e4e77ec76e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7f}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xff}, @NL80211_ATTR_VENDOR_DATA={0x7d, 0xc5, "f443dca3102af15a03ef9fe95bdc8ac294fdea04cce5c900e1510b2822c4783607d5674bd4e36da5491ed9e9a9604786ccb42c4f97a18c19e0ded20b7fadb8b3c5188be77d96c0ec9a7d6d6fa6831d825e28c401cfce12b010c51f66a9d796a890cc292d0f45f988a645fbf1174e6d553618be390bcb4a04d1"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4000811)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c0002800500010000000000080007400000000008000840000000013c000e802c000180140003"], 0xd8}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="14226523a4f9cdf6876f31025bbbb354d8520c3aededac3e1a487ad8f415a48fc0f625022a5f07f283a3d6ed8a464ea5523bb1dcf8979b0e1aae2032538d", 0x3e, 0x40000, &(0x7f0000000540)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x101, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000790100000000000004000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x30}, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0xe}}, @common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x7ff, 0x5, 'netbios-ns\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0x0, [0x1, 0x0, 0x2, 0x0, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r11=>0x0}) (async)
r12 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r12, 0x84, 0x81, 0x0, &(0x7f00000010c0)) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000400000040000000000300", @ANYRES32=r11, @ANYBLOB="08002600940900000800b70097000000"], 0x2c}}, 0x0)

2.699117533s ago: executing program 1 (id=370):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001002dbd700000000000ffffffff000000000000000000000000e000000100000000000000000000000000000000040000000000002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ff010000000000000000000000000001ff010000000000000000000000000001fe80000000000000000000000000002000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb7f000001000000000000000000000000ac14141800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000200"], 0x138}}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x23, 0x0, &(0x7f00000009c0))
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r5, @ANYBLOB="83040500000000002800128008000100677265001c00027908000600ac1414bb0600245aed55726c590e000200000006000f00b74b00007d00aeaf3b40cacf8fcbcf5d17dbd8125ed568086a7cf76ea5e83390df711ef8999f32722fe255d3744b4af32ad254cb28325cca47e757812b0996ed8fb2bef636837af564b5b47c05c4f7e66be9621859"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0e00000009000000080000006e13000000400000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4)
sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000)
pwrite64(r7, &(0x7f00000008c0)="63b1e1a8033d4629976f6d11ac9bb40f39c7b2868e2b89114c3149037d77abe0d315ebaa67dc19b5ae6443605ee7e73789655a1bccb5c5e92e9fac7d15eaed3324bc7202a77af09a8fae8a8ec112a9fc579632b7179ee22f742ab0e93363c0d357bea24097173daf7adb145619d90afb66b77031f07d7da3e4123f0061329916a31ee45c5f89aaaf999bfbd3cd7b5ff05732973d75ac3e5765bac007c3d150c2f83f86e904530b9e5d60b636f58ffd5964aeb856657c6de9ed26a12fe764d77db53f3083f1fc39a88080a54c6ef3d5d757899e25aba95c2d04aa20c27f6b5f82c7d5695de95fdc", 0xe7, 0x7)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000df8b5d6100000000000000000300000a440000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001800038014000900000002800800034000000001040001809b838549e87d89ea0f045d9a31d0d328019308599ac70c1d356ee602c874366328fc2db83f6931c6cad12f55570a448b39024b0a67f961f3972523d99254230a90853efa4494381f670ccc0caae5765e00786a27cc786c36f0b0b6630e4bc61ddfbe4f9c2103a37ced2c474e7847e6d9ef96e3fede2e194d1a8bf16ab13bee8a2f14db46f8677fbd9b4d94eb9fae8d2d0e7359486903caf40540800d819bf560f279283560de4ee10455443c8977fa834a2901dda79bee2f31eca01eaaa20147f73960ec589364f56389535573243ce4d2307f09087f3e6d7111639386f93c815e28cc59a502003256ee7fb39fba7ee0b01766"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmmsg$inet(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000380)={0x2, 0x6e20, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000f80)="1b", 0x1}], 0x1}}], 0x2, 0x2000c044)

2.510474872s ago: executing program 2 (id=375):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20400)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0xb002})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r7, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x2000}, @l2tp={0x2, 0x0, @private=0xa010100, 0x2}, @ethernet={0x303, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x9, 0x0, 0x0, 0x0, 0xff2, &(0x7f00000000c0)='lo\x00', 0x1c0ed06b, 0x8e2, 0x9})
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x28, 0x3, 0x5c}, 0x2c)

2.160287577s ago: executing program 2 (id=379):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32, @ANYBLOB="05000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000180)=0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000700)="b3853fdff6", 0x5)

1.787943992s ago: executing program 1 (id=381):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r3=>0x0})
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001a0)={'wlan1\x00', @ifru_flags})
ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000180)={'wlan1\x00', @ifru_hwaddr=@random="080211000001"})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x20000000)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'wlan1\x00', @ifru_flags=0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000600)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1}}, @val={0x76, 0x6, {0x1, 0x1, 0x1, 0x1}}}, 0x54)

1.157598022s ago: executing program 2 (id=383):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0x10000001, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x200040cc)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0xa}]}, 0x18}, 0x1, 0x0, 0x0, 0x20042884}, 0x10)

1.073302681s ago: executing program 2 (id=385):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x18, 0x2f, 0x9, 0x70bd27, 0x25dfdc01, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c044)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40880}, 0x90)

919.62407ms ago: executing program 2 (id=387):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x2f, 0x9, 0x70bd2c, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x1d}]}, 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x20044014) (async, rerun: 64)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) (async, rerun: 64)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) (rerun: 64)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) (async, rerun: 64)
r5 = socket(0x2, 0x80805, 0x0) (rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={<r6=>0x0, 0xffb5, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @mcast2, 0x100}]}, &(0x7f0000000180)=0x10)
connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, @none, 0x7}, 0xa) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x200, 0x16, 0x0, 0x7f}, {0x0, 0x3, 0xfffffffffffffffe}, 0x4, 0x6e6bb2, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x37a5fce0bcf595dd}, 0x0) (async, rerun: 32)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000900090073"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000300)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x2, 0x2, 0x6, 0x4144, 0x2, 0x7, 0x5fc, 0x0, 0xd, 0x8, 0x9d, 0x5, 0x3, 0xa080, 0x400]}, &(0x7f0000000400)=0x100)

688.602066ms ago: executing program 0 (id=389):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x2, @remote}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000700)="b3853fdff6", 0x5)
socket$l2tp(0x2, 0x2, 0x73) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x2, @remote}, 0x10) (async)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000700)="b3853fdff6", 0x5) (async)

687.711672ms ago: executing program 0 (id=390):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x9}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000ffff27bd90056f61a6e5019e7d2e", @ANYRES32=0x0, @ANYBLOB="137c03000000000005002700f200000008000d0000000010"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001", @ANYRES8, @ANYRES64=0x0], 0x0, 0x3c}, 0x28) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async)
listen(r3, 0x6) (async)
ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (rerun: 32)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket(0x21, 0x80805, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x32}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000380)={0x7bd, {{0x2, 0x4e21, @remote}}, 0x1}, 0x90)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={r8, 0x3}, &(0x7f00000000c0)=0x8)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x4ea2, @empty}, 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0xc622, @loopback}, 0x10) (async)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0)

630.02308ms ago: executing program 1 (id=391):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0xb002})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r7, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x2000}, @l2tp={0x2, 0x0, @private=0xa010100, 0x2}, @ethernet={0x303, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x9, 0x0, 0x0, 0x0, 0xff2, &(0x7f00000000c0)='lo\x00', 0x1c0ed06b, 0x8e2, 0x9})
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x28, 0x3, 0x5c}, 0x2c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

419.797215ms ago: executing program 0 (id=392):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x9}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x10000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = socket(0x2, 0x80805, 0x0) (async)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000380)={0x7bd, {{0x2, 0x4e21, @remote}}, 0x1}, 0x90) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r6, 0x3}, &(0x7f00000000c0)=0x8)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x4ea2, @empty}, 0x10) (async, rerun: 64)
connect$inet(r7, &(0x7f0000000100)={0x2, 0xc622, @loopback}, 0x10) (async, rerun: 64)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

279.900255ms ago: executing program 0 (id=393):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000002000010007000000fedbdf25020000000900000200000000080004"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000700)="b3853fdff6", 0x5)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0))

278.752364ms ago: executing program 1 (id=394):
socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x2, 0x6, 0xffffffff, r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@deltaction={0xd8, 0x31, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xff7c, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x79}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9e64}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x40)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x24000000)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r2, 0x41}, 0x8)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000800180005ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

149.285892ms ago: executing program 2 (id=395):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000d02220e13dbf2f00000000000700000000002e0061000000005f2e00"], 0x0, 0x2f, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000008000000911176000000000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x10000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x10000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000380)={0x7bd, {{0x2, 0x4e21, @remote}}, 0x1}, 0x90)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r5, 0x3}, &(0x7f00000000c0)=0x8)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4ea2, @empty}, 0x10)
connect$inet(r6, &(0x7f0000000100)={0x2, 0xc622, @loopback}, 0x10) (async)
connect$inet(r6, &(0x7f0000000100)={0x2, 0xc622, @loopback}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

89.166706ms ago: executing program 0 (id=396):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x60000000}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)

88.18947ms ago: executing program 1 (id=397):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000f5ff00000000000001000000000000000000000000000011000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

0s ago: executing program 0 (id=398):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
r1 = socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
r4 = socket(0x11, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', <r5=>0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}})
connect$can_bcm(r4, &(0x7f00000006c0)={0x1d, r5}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c2500000000002020"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_emit_ethernet(0xd4, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x4, 0x6, "ecaa25", 0x9a, 0x29, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], "f77f527c45266c967dbf9e6d4334de8d27a4ab6a41a6b7c1f93b382c581e8432255362b3fdca226a31a9d23c070bbc65de68e16486cf29397810ba064a49c2d7093cd9b1fe0dc0899290b13a96f1bdd67de0acbfe988186f9a9f734fc22d90c16e4a723c4c03f9a84c59d29e981a0a1575f5ddd12e1d6b67e0dc5eb7d3fa2885909cdb77c8e0c08ed4f3c7b9ef10f7ae0869816d7781ef0beaf7"}}}}}, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000)
getsockopt(r4, 0x1, 0x7, &(0x7f0000000440)=""/107, &(0x7f00000004c0)=0x6b)
socket$inet(0x2, 0xa, 0x8)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2760' (ED25519) to the list of known hosts.
syzkaller login: [   48.947763][ T5584] cgroup: Unknown subsys name 'net'
[   49.052928][ T5584] cgroup: Unknown subsys name 'cpuset'
[   49.058169][ T5584] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.521022][ T5584] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.938996][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.943252][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.946477][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.949694][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.952628][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.971181][ T4993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.971971][ T4993] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.978171][ T4993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.984583][ T4993] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.988749][ T4993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.032868][ T4993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.036283][ T4993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.040861][ T4993] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.045459][ T4993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.049673][ T4993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.471808][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.472201][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.472275][ T5596] bridge_slave_0: entered allmulticast mode
[   55.473525][ T5596] bridge_slave_0: entered promiscuous mode
[   55.477374][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.477436][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.477683][ T5596] bridge_slave_1: entered allmulticast mode
[   55.478734][ T5596] bridge_slave_1: entered promiscuous mode
[   55.547792][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.549392][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.590201][ T5596] team0: Port device team_slave_0 added
[   55.596835][ T5596] team0: Port device team_slave_1 added
[   55.626393][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.626530][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.626805][ T5592] bridge_slave_0: entered allmulticast mode
[   55.627542][ T5592] bridge_slave_0: entered promiscuous mode
[   55.629513][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.629521][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.629530][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.630929][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.630967][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.631023][ T5592] bridge_slave_1: entered allmulticast mode
[   55.631722][ T5592] bridge_slave_1: entered promiscuous mode
[   55.633726][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.633733][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.633743][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.668757][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.675838][ T5596] hsr_slave_0: entered promiscuous mode
[   55.678275][ T5596] hsr_slave_1: entered promiscuous mode
[   55.685095][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.743383][ T5592] team0: Port device team_slave_0 added
[   55.752131][ T5592] team0: Port device team_slave_1 added
[   55.783015][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.783066][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.783290][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.811266][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.811351][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.811367][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.869180][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.872349][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.872458][ T5602] bridge_slave_0: entered allmulticast mode
[   55.879371][ T5602] bridge_slave_0: entered promiscuous mode
[   55.892929][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.893007][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.893066][ T5602] bridge_slave_1: entered allmulticast mode
[   55.894242][ T5602] bridge_slave_1: entered promiscuous mode
[   55.903931][ T5592] hsr_slave_0: entered promiscuous mode
[   55.904515][ T5592] hsr_slave_1: entered promiscuous mode
[   55.906793][ T5592] debugfs: 'hsr0' already exists in 'hsr'
[   55.906841][ T5592] Cannot create hsr debugfs directory
[   55.943917][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.954987][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.013543][ T5602] team0: Port device team_slave_0 added
[   56.023769][ T5602] team0: Port device team_slave_1 added
[   56.084345][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.087658][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.098963][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.123805][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.123870][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.123919][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.142226][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.153890][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.165411][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.173125][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.179835][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.188154][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.212922][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.219066][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.233943][ T5602] hsr_slave_0: entered promiscuous mode
[   56.234760][ T5602] hsr_slave_1: entered promiscuous mode
[   56.235260][ T5602] debugfs: 'hsr0' already exists in 'hsr'
[   56.235275][ T5602] Cannot create hsr debugfs directory
[   56.351911][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.359782][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.361291][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.368914][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.383584][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.390048][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.392939][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.396489][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.424758][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.425283][ T5596] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.425733][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.425817][ T5596] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.434814][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.437589][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.593479][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.602003][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.605979][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.612968][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.617416][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.623929][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.628050][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.635269][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.705828][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.745865][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.762722][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[   56.791177][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.791304][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.805923][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[   56.812441][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.812557][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.827381][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.836417][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.836535][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.848504][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.848624][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.867218][ T5602] 8021q: adding VLAN 0 to HW filter on device team0
[   56.909202][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.909388][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.911108][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.911174][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.928561][ T5592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.928622][ T5592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.031446][ T5593] Bluetooth: hci0: command tx timeout
[   57.034238][ T4993] Bluetooth: hci1: command tx timeout
[   57.110655][ T5593] Bluetooth: hci2: command tx timeout
[   57.363649][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.434437][ T5592] veth0_vlan: entered promiscuous mode
[   57.453023][ T5592] veth1_vlan: entered promiscuous mode
[   57.476360][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.487110][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.548376][ T5602] veth0_vlan: entered promiscuous mode
[   57.552532][ T5592] veth0_macvtap: entered promiscuous mode
[   57.567725][ T5592] veth1_macvtap: entered promiscuous mode
[   57.576466][ T5602] veth1_vlan: entered promiscuous mode
[   57.598197][ T5596] veth0_vlan: entered promiscuous mode
[   57.607132][ T5596] veth1_vlan: entered promiscuous mode
[   57.616238][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.639013][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.653931][ T5602] veth0_macvtap: entered promiscuous mode
[   57.669520][ T5602] veth1_macvtap: entered promiscuous mode
[   57.736802][ T5596] veth0_macvtap: entered promiscuous mode
[   57.740816][ T5491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.747129][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.748710][ T5596] veth1_macvtap: entered promiscuous mode
[   57.761180][ T5491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.763514][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.828681][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.835210][ T3373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.838307][ T3373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.863463][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.892289][ T5647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.892430][ T5647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.892455][ T5647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.892478][ T5647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.892503][ T5647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.892526][ T5647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.917444][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.917509][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.964996][ T5491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.965061][ T5491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.965124][ T5491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.988583][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.988644][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.002705][ T5592] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.013009][ T5491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.093608][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.097202][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.146450][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.146650][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.198849][ T5703] openvswitch: netlink: Missing key (keys=c0, expected=500)
[   58.205038][ T3373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.205095][ T3373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.234852][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.401533][ T5711] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   58.437975][ T5718] Zero length message leads to an empty skb
[   58.444959][ T5708] warning: `syz.2.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.558784][ T5723] syz_tun: entered allmulticast mode
[   58.585381][ T5723] dvmrp8: entered allmulticast mode
[   58.591428][ T5722] syz_tun: left allmulticast mode
[   58.658578][ T5728] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5'.
[   58.668758][ T5728] gretap0: entered promiscuous mode
[   58.688773][ T5730] syz_tun: entered allmulticast mode
[   58.699023][ T5730] dvmrp8: entered allmulticast mode
[   58.708376][ T5728] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   58.708449][ T5728] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   58.712409][ T5728] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   58.736659][ T5728] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   58.743509][ T5728] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   58.929240][ T5729] syz_tun: left allmulticast mode
[   59.053455][ T5743] xt_bpf: check failed: parse error
[   59.055208][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   59.055230][ T5743] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11'.
[   59.111797][ T5593] Bluetooth: hci0: command tx timeout
[   59.111931][ T4993] Bluetooth: hci1: command tx timeout
[   59.192801][ T5593] Bluetooth: hci2: command tx timeout
[   59.202441][ T5755] netlink: NAT attribute has 4 unknown bytes
[   59.202503][ T5755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.245245][ T5759] xt_bpf: check failed: parse error
[   60.080112][    T9] cfg80211: failed to load regulatory.db
[   60.196460][ T5769] netlink: 108 bytes leftover after parsing attributes in process `syz.2.19'.
[   60.310045][ T5772] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET)
[   60.399829][ T5774] syz_tun: entered allmulticast mode
[   60.655386][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'.
[   60.729961][ T5773] syz_tun: left allmulticast mode
[   60.848399][ T5800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'.
[   60.851311][ T5798] pimreg: entered allmulticast mode
[   60.864309][ T5796] pimreg: left allmulticast mode
[   60.929790][ T5803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'.
[   61.027808][ T5809] syz_tun: entered allmulticast mode
[   61.190455][ T5593] Bluetooth: hci1: command tx timeout
[   61.200697][ T5593] Bluetooth: hci0: command tx timeout
[   61.219712][ T5808] syz_tun: left allmulticast mode
[   61.252447][ T5817] block nbd0: server does not support multiple connections per device.
[   61.252921][ T5817] block nbd0: shutting down sockets
[   61.271915][ T5593] Bluetooth: hci2: command tx timeout
[   61.410144][ T5826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.33'.
[   62.089296][ T5817] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   62.089384][ T5817] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   62.105384][ T5817] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   62.105445][ T5817] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   62.120149][ T5817] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   62.120208][ T5817] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   62.198318][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'.
[   62.536315][ T5872] bond1 (unregistering): Released all slaves
[   62.568148][ T5890] syz_tun: entered allmulticast mode
[   62.895415][ T5889] syz_tun: left allmulticast mode
[   63.342766][ T5906] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   63.429752][ T5916] __nla_validate_parse: 1 callbacks suppressed
[   63.430042][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'.
[   63.518814][ T5928] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   63.563423][ T5934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.50'.
[   64.149329][ T5938] pimreg: entered allmulticast mode
[   64.353901][ T5937] pimreg: left allmulticast mode
[   64.502750][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'.
[   64.502821][ T5952] netlink: 56 bytes leftover after parsing attributes in process `syz.1.54'.
[   64.515239][ T5952] geneve2: entered promiscuous mode
[   64.515308][ T5952] geneve2: entered allmulticast mode
[   65.445003][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'.
[   65.557491][ T5969] batman_adv: batadv0: Adding interface: macvtap1
[   65.557550][ T5969] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.559323][ T5969] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[   65.674435][ T5977] netlink: 260 bytes leftover after parsing attributes in process `syz.1.61'.
[   65.682255][ T5977] syz_tun: entered allmulticast mode
[   65.689508][ T5978] syz_tun: entered allmulticast mode
[   65.745531][ T5983] xt_CT: No such helper "netbios-ns"
[   65.755678][ T5983] netlink: 'syz.1.64': attribute type 1 has an invalid length.
[   65.815738][ T5976] syz_tun: left allmulticast mode
[   65.828316][ T5988] syz_tun: entered allmulticast mode
[   65.847675][ T5988] dvmrp8: entered allmulticast mode
[   65.851538][ T5987] syz_tun: left allmulticast mode
[   65.939070][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'.
[   65.967095][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'.
[   66.026057][ T5996] netlink: 'syz.1.69': attribute type 23 has an invalid length.
[   66.026111][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'.
[   66.068958][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'.
[   66.155157][ T6011] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20004
[   66.608015][ T6035] syzkaller0: entered promiscuous mode
[   66.610620][ T6035] syzkaller0: entered allmulticast mode
[   67.494802][ T6047] netlink: 'syz.0.82': attribute type 12 has an invalid length.
[   67.682579][ T6067] C: renamed from veth1_to_team (while UP)
[   67.700945][ T6067] block nbd0: not configured, cannot reconfigure
[   69.207231][ T6102] __nla_validate_parse: 14 callbacks suppressed
[   69.207296][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'.
[   69.301083][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'.
[   69.395851][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[   69.428047][ T6126] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.433294][ T6126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.100'.
[   69.655054][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.101'.
[   69.985801][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'.
[   69.985801][ T6145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'.
[   71.043397][ T6169] netlink: 108 bytes leftover after parsing attributes in process `syz.0.111'.
[   71.047381][ T6169] netlink: 108 bytes leftover after parsing attributes in process `syz.0.111'.
[   71.120083][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'.
[   71.374211][ T6201] syz_tun: entered allmulticast mode
[   71.384271][ T6200] syz_tun: left allmulticast mode
[   71.452526][ T6203] syz_tun: entered allmulticast mode
[   71.456401][ T6202] syz_tun: left allmulticast mode
[   71.669067][ T6209] Bluetooth: MGMT ver 1.23
[   71.755318][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   71.757954][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   71.878625][ T6218] netlink: 'syz.1.126': attribute type 3 has an invalid length.
[   72.092854][ T6236] netlink: 'syz.1.133': attribute type 11 has an invalid length.
[   72.168576][ T6241] syz_tun: entered allmulticast mode
[   72.272458][ T6247] xt_CT: No such helper "syz1"
[   72.277229][ T6247] Cannot find add_set index 0 as target
[   72.459419][ T6258] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   72.462718][   T27] IPVS: starting estimator thread 0...
[   72.551279][ T6268] IPVS: using max 86 ests per chain, 206400 per kthread
[   73.445632][ T6310] syz_tun: entered allmulticast mode
[   73.448214][ T6307] syz_tun: left allmulticast mode
[   73.485496][ T6315] xt_bpf: check failed: parse error
[   73.595934][ T6318] syzkaller1: entered promiscuous mode
[   73.595987][ T6318] syzkaller1: entered allmulticast mode
[   73.607868][ T6320] syz_tun: entered allmulticast mode
[   73.714825][ T6317] syz_tun: left allmulticast mode
[   73.776961][ T6332] x_tables: duplicate underflow at hook 3
[   73.889914][ T6337] Bluetooth: MGMT ver 1.23
[   74.026439][ T6346] netlink: 'syz.0.159': attribute type 1 has an invalid length.
[   74.034214][ T6346] netlink: 'syz.0.159': attribute type 2 has an invalid length.
[   74.085265][ T6351] syz_tun: entered allmulticast mode
[   74.088057][ T6350] syz_tun: left allmulticast mode
[   74.142938][ T6346] netlink: 'syz.0.159': attribute type 11 has an invalid length.
[   74.261435][ T6356] syz_tun: entered allmulticast mode
[   74.265845][ T6355] syz_tun: left allmulticast mode
[   74.327033][ T6360] netlink: 'syz.2.164': attribute type 8 has an invalid length.
[   74.441099][ T6366] sctp: [Deprecated]: syz.2.164 (pid 6366) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.441099][ T6366] Use struct sctp_sack_info instead
[   74.572470][ T6369] syzkaller0: entered promiscuous mode
[   74.572535][ T6369] syzkaller0: entered allmulticast mode
[   74.614230][ T6369] netlink: Unknown nat attribute (0)
[   74.614301][ T6369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.502430][ T6393] netlink: 'syz.2.172': attribute type 23 has an invalid length.
[   75.540178][ T6393] No such timeout policy "s	"
[   75.540236][ T6393] netlink: Failed to associated timeout policy 's	'
[   75.605950][ T6401] __nla_validate_parse: 12 callbacks suppressed
[   75.608615][ T6401] netlink: 17 bytes leftover after parsing attributes in process `syz.2.175'.
[   75.616812][ T6401] netlink: 'syz.2.175': attribute type 12 has an invalid length.
[   75.616878][ T6401] netlink: 68 bytes leftover after parsing attributes in process `syz.2.175'.
[   75.626164][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[   75.738671][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   75.738878][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.178'.
[   75.738893][ T6409] openvswitch: netlink: Flow actions attr not present in new flow.
[   75.756931][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.177'.
[   75.907530][ T6423] netlink: 'syz.2.180': attribute type 1 has an invalid length.
[   75.907576][ T6423] netlink: 64 bytes leftover after parsing attributes in process `syz.2.180'.
[   75.907607][ T6423] netlink: 'syz.2.180': attribute type 1 has an invalid length.
[   75.907630][ T6423] netlink: 29 bytes leftover after parsing attributes in process `syz.2.180'.
[   75.937355][ T6425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.182'.
[   75.937545][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[   76.115850][ T6429] bond_slave_0: entered promiscuous mode
[   76.366400][ T6436] netlink: 'syz.0.186': attribute type 1 has an invalid length.
[   76.403775][ T6436] veth3: entered allmulticast mode
[   76.429764][ T6436] bond2: (slave veth0_to_bond): making interface the new active one
[   76.433285][ T6436] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   76.445565][ T6436] macvlan2: entered promiscuous mode
[   76.445633][ T6436] macvlan2: entered allmulticast mode
[   76.446246][ T6436] bond2: entered promiscuous mode
[   76.446259][ T6436] veth0_to_bond: entered promiscuous mode
[   76.448560][ T6436] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   76.449176][ T6436] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   76.449423][ T6436] bond2: left promiscuous mode
[   76.449478][ T6436] veth0_to_bond: left promiscuous mode
[   76.657870][ T6449] Driver unsupported XDP return value 0 on prog  (id 59) dev N/A, expect packet loss!
[   76.784705][ T6461] netlink: Conntrack attr has 4 unknown bytes
[   76.784761][ T6461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.942490][ T6472] netlink: 'syz.2.196': attribute type 23 has an invalid length.
[   76.946946][ T6472] netlink: 'syz.2.196': attribute type 11 has an invalid length.
[   77.073478][ T6474] netlink: 'syz.0.197': attribute type 23 has an invalid length.
[   77.073539][ T6474] netlink: 'syz.0.197': attribute type 11 has an invalid length.
[   77.216607][ T6483] netlink: 'syz.0.200': attribute type 2 has an invalid length.
[   77.223909][ T6483] debugfs: '.P'G!DES' already exists in 'ieee80211'
[   77.303864][ T6495] syzkaller0: entered promiscuous mode
[   77.303914][ T6495] syzkaller0: entered allmulticast mode
[   77.814082][ T6518] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   80.357659][ T6637] xt_CT: No such helper "netbios-ns"
[   80.879608][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.010139][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.011346][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.100224][ T6661] __nla_validate_parse: 11 callbacks suppressed
[   81.103862][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   81.103907][ T6661] netlink: 304 bytes leftover after parsing attributes in process `syz.2.229'.
[   81.103949][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   81.106356][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.118943][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'.
[   81.120822][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.293886][ T5491] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.293954][ T5491] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.294022][ T5491] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.294066][ T5491] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.354820][ T6668] batman_adv: batadv0: Adding interface: macvtap1
[   81.354864][ T6668] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.355068][ T6668] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[   81.588476][ T6683] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[   81.594875][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.234'.
[   81.594942][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'.
[   82.584038][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   82.584142][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   82.584284][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   82.584370][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   82.614650][ T6709] syzkaller0: entered promiscuous mode
[   82.618571][ T6709] syzkaller0: entered allmulticast mode
[   83.833927][ T6759] pimreg: entered allmulticast mode
[   83.839469][ T6758] pimreg: left allmulticast mode
[   83.881786][ T6766] ipt_REJECT: TCP_RESET invalid for non-tcp
[   83.881920][ T6766] ipt_REJECT: TCP_RESET invalid for non-tcp
[   83.882037][ T6766] ipt_REJECT: TCP_RESET invalid for non-tcp
[   83.882127][ T6766] ipt_REJECT: TCP_RESET invalid for non-tcp
[   83.882224][ T6766] ipt_REJECT: TCP_RESET invalid for non-tcp
[   83.882315][ T6766] ipt_REJECT: TCP_RESET invalid for non-tcp
[   83.882468][ T6766] ipt_REJECT: TCP_RESET invalid for non-tcp
[   83.882536][ T6766] ipt_REJECT: TCP_RESET invalid for non-tcp
[   83.882605][ T6766] ipt_REJECT: TCP_RESET invalid for non-tcp
[   83.882672][ T6766] ipt_REJECT: TCP_RESET invalid for non-tcp
[   84.010081][ T6772] syz_tun: entered allmulticast mode
[   84.097431][ T6769] syz_tun: left allmulticast mode
[   84.450982][ T6796] virtio_blk virtio1: 1/0/0 default/read/poll queues
[   84.458021][ T6796] virtio_blk virtio1: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[   84.518031][ T6796] syz.2.260 (6796) used greatest stack depth: 19320 bytes left
[   84.686938][ T6808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.958687][ T6838] tipc: Started in network mode
[   84.958755][ T6838] tipc: Node identity ac141441, cluster identity 4711
[   84.959992][ T6838] tipc: Enabled bearer <udp:syz2>, priority 10
[   85.095987][ T6845] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[   85.096081][ T6845] CPU: 0 UID: 0 PID: 6845 Comm: syz.0.271 Not tainted syzkaller #0 PREEMPT(full) 
[   85.096098][ T6845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.096107][ T6845] Call Trace:
[   85.096113][ T6845]  <TASK>
[   85.096120][ T6845]  dump_stack_lvl+0xe8/0x150
[   85.096143][ T6845]  sysfs_warn_dup+0x8e/0xa0
[   85.096164][ T6845]  sysfs_do_create_link_sd+0xc0/0x110
[   85.096206][ T6845]  device_add_class_symlinks+0x1cf/0x240
[   85.096230][ T6845]  device_add+0x467/0xb80
[   85.096250][ T6845]  wiphy_register+0x1fc8/0x2ff0
[   85.096280][ T6845]  ? __pfx_wiphy_register+0x10/0x10
[   85.096297][ T6845]  ? __pfx_netdev_run_todo+0x10/0x10
[   85.096313][ T6845]  ? minstrel_ht_alloc+0x6e0/0x7e0
[   85.096338][ T6845]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[   85.096360][ T6845]  ieee80211_register_hw+0x3d3d/0x4a50
[   85.096414][ T6845]  ? ieee80211_register_hw+0x19b1/0x4a50
[   85.096455][ T6845]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   85.096476][ T6845]  ? __asan_memset+0x22/0x50
[   85.096496][ T6845]  ? __hrtimer_setup+0x1b7/0x260
[   85.096515][ T6845]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   85.096531][ T6845]  mac80211_hwsim_new_radio+0x3258/0x56b0
[   85.096568][ T6845]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   85.096580][ T6845]  ? kstrndup+0xbd/0x160
[   85.096598][ T6845]  ? kstrndup+0xbd/0x160
[   85.096612][ T6845]  hwsim_new_radio_nl+0xd8b/0xf90
[   85.096644][ T6845]  genl_family_rcv_msg_doit+0x233/0x340
[   85.096669][ T6845]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   85.096697][ T6845]  ? bpf_lsm_capable+0x9/0x20
[   85.096715][ T6845]  ? security_capable+0x7e/0x2c0
[   85.096733][ T6845]  genl_rcv_msg+0x614/0x7a0
[   85.096756][ T6845]  ? __pfx_genl_rcv_msg+0x10/0x10
[   85.096775][ T6845]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   85.096792][ T6845]  ? __pfx_ref_tracker_free+0x10/0x10
[   85.096805][ T6845]  ? __asan_memcpy+0x40/0x70
[   85.096828][ T6845]  ? __skb_clone+0x5c/0x6c0
[   85.096845][ T6845]  netlink_rcv_skb+0x226/0x4a0
[   85.096860][ T6845]  ? __pfx_genl_rcv_msg+0x10/0x10
[   85.096881][ T6845]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   85.096907][ T6845]  ? down_read+0x2be/0x330
[   85.096925][ T6845]  genl_rcv+0x28/0x40
[   85.096943][ T6845]  netlink_unicast+0x7bd/0x940
[   85.096967][ T6845]  netlink_sendmsg+0x813/0xb40
[   85.096990][ T6845]  ? __pfx_netlink_sendmsg+0x10/0x10
[   85.097013][ T6845]  ? apparmor_socket_sendmsg+0x98/0x360
[   85.097034][ T6845]  ? __pfx_netlink_sendmsg+0x10/0x10
[   85.097049][ T6845]  sock_sendmsg_nosec+0x13a/0x180
[   85.097069][ T6845]  ____sys_sendmsg+0x54e/0x850
[   85.097087][ T6845]  ? __pfx_____sys_sendmsg+0x10/0x10
[   85.097108][ T6845]  ? import_iovec+0x73/0xa0
[   85.097125][ T6845]  ___sys_sendmsg+0x2a5/0x360
[   85.097139][ T6845]  ? __lock_acquire+0x6df/0x2e50
[   85.097156][ T6845]  ? __pfx____sys_sendmsg+0x10/0x10
[   85.097173][ T6845]  ? futex_wait+0x2a2/0x390
[   85.097215][ T6845]  ? __fget_files+0x2a/0x420
[   85.097231][ T6845]  ? __fget_files+0x3a2/0x420
[   85.097256][ T6845]  __x64_sys_sendmsg+0x1b1/0x290
[   85.097272][ T6845]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   85.097303][ T6845]  do_syscall_64+0x166/0x520
[   85.097320][ T6845]  ? trace_irq_disable+0x3b/0x140
[   85.097332][ T6845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.097349][ T6845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.097362][ T6845] RIP: 0033:0x7f84f839e159
[   85.097375][ T6845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.097414][ T6845] RSP: 002b:00007f84f9253028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   85.097430][ T6845] RAX: ffffffffffffffda RBX: 00007f84f8625fa0 RCX: 00007f84f839e159
[   85.097440][ T6845] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[   85.097449][ T6845] RBP: 00007f84f8435024 R08: 0000000000000000 R09: 0000000000000000
[   85.097457][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.097465][ T6845] R13: 00007f84f8626038 R14: 00007f84f8625fa0 R15: 00007ffd1ba2a628
[   85.097489][ T6845]  </TASK>
[   85.289840][   T10] bridge0: entered promiscuous mode
[   85.329724][ T6850] netlink: 'syz.0.273': attribute type 1 has an invalid length.
[   85.460993][ T6852] netlink: 'syz.0.274': attribute type 12 has an invalid length.
[   85.797714][ T6875] syz_tun: entered allmulticast mode
[   86.072107][   T10] tipc: Node number set to 2886997057
[   86.604235][ T6873] syz_tun: left allmulticast mode
[   86.624678][ T6886] netlink: 'syz.0.283': attribute type 23 has an invalid length.
[   86.661076][ T6886] No such timeout policy "s	"
[   86.668544][ T6886] netlink: Failed to associated timeout policy 's	'
[   87.081417][ T6920] lo: entered allmulticast mode
[   87.182368][ T6918] lo: left allmulticast mode
[   87.239033][ T6938] __nla_validate_parse: 34 callbacks suppressed
[   87.239605][ T6938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.294'.
[   87.239619][ T6938] openvswitch: netlink: Flow actions attr not present in new flow.
[   87.368981][ T6944] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.297'.
[   87.372537][ T6944] netlink: 'syz.0.297': attribute type 23 has an invalid length.
[   87.372548][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'.
[   87.476757][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.300'.
[   87.502199][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.300'.
[   87.591690][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'.
[   87.662512][ T6973] xt_IDLETIMER: label is empty or not nul-terminated
[   87.666449][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'.
[   87.666939][ T6975] netlink: 68 bytes leftover after parsing attributes in process `syz.2.306'.
[   87.667944][ T6975] Bluetooth: MGMT ver 1.23
[   87.816369][ T6988] netlink: 176 bytes leftover after parsing attributes in process `syz.2.311'.
[   88.097482][ T7006] xt_CT: No such helper "netbios-ns"
[   88.186099][ T7013] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   88.491905][ T7034] syzkaller0: entered promiscuous mode
[   88.491964][ T7034] syzkaller0: entered allmulticast mode
[   88.496259][ T7034] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress)
[   88.500773][ T7034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.324'.
[   88.527139][ T7019] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.527218][ T7019] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.156011][ T7039] reject_tg_check: 23 callbacks suppressed
[   89.156091][ T7039] ipt_REJECT: TCP_RESET invalid for non-tcp
[   89.236331][ T7048] vcan0: tx address claim with dest, not broadcast
[   90.122184][ T7060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.144773][ T7060] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[   90.144832][ T7060] CPU: 1 UID: 0 PID: 7060 Comm: syz.1.333 Not tainted syzkaller #0 PREEMPT(full) 
[   90.144854][ T7060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.144880][ T7060] Call Trace:
[   90.144887][ T7060]  <TASK>
[   90.144892][ T7060]  dump_stack_lvl+0xe8/0x150
[   90.144916][ T7060]  sysfs_warn_dup+0x8e/0xa0
[   90.144934][ T7060]  sysfs_do_create_link_sd+0xc0/0x110
[   90.144953][ T7060]  device_add_class_symlinks+0x1cf/0x240
[   90.144974][ T7060]  device_add+0x467/0xb80
[   90.144993][ T7060]  wiphy_register+0x1fc8/0x2ff0
[   90.145020][ T7060]  ? __pfx_wiphy_register+0x10/0x10
[   90.145036][ T7060]  ? __pfx_netdev_run_todo+0x10/0x10
[   90.145050][ T7060]  ? minstrel_ht_alloc+0x6e0/0x7e0
[   90.145068][ T7060]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[   90.145090][ T7060]  ieee80211_register_hw+0x3d3d/0x4a50
[   90.145117][ T7060]  ? ieee80211_register_hw+0x19b1/0x4a50
[   90.145153][ T7060]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   90.145173][ T7060]  ? __asan_memset+0x22/0x50
[   90.145191][ T7060]  ? __hrtimer_setup+0x1b7/0x260
[   90.145207][ T7060]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   90.145223][ T7060]  mac80211_hwsim_new_radio+0x3258/0x56b0
[   90.145256][ T7060]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   90.145268][ T7060]  ? kstrndup+0xbd/0x160
[   90.145284][ T7060]  ? kstrndup+0xbd/0x160
[   90.145298][ T7060]  hwsim_new_radio_nl+0xd8b/0xf90
[   90.145325][ T7060]  genl_family_rcv_msg_doit+0x233/0x340
[   90.145348][ T7060]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   90.145374][ T7060]  ? bpf_lsm_capable+0x9/0x20
[   90.145419][ T7060]  ? security_capable+0x7e/0x2c0
[   90.145438][ T7060]  genl_rcv_msg+0x614/0x7a0
[   90.145462][ T7060]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.145479][ T7060]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   90.145507][ T7060]  netlink_rcv_skb+0x226/0x4a0
[   90.145523][ T7060]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.145542][ T7060]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   90.145568][ T7060]  ? down_read+0x2be/0x330
[   90.145583][ T7060]  genl_rcv+0x28/0x40
[   90.145600][ T7060]  netlink_unicast+0x7bd/0x940
[   90.145622][ T7060]  netlink_sendmsg+0x813/0xb40
[   90.145644][ T7060]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.145665][ T7060]  ? apparmor_socket_sendmsg+0x98/0x360
[   90.145685][ T7060]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.145699][ T7060]  sock_sendmsg_nosec+0x13a/0x180
[   90.145719][ T7060]  ____sys_sendmsg+0x54e/0x850
[   90.145735][ T7060]  ? __pfx_____sys_sendmsg+0x10/0x10
[   90.145755][ T7060]  ? import_iovec+0x73/0xa0
[   90.145771][ T7060]  ___sys_sendmsg+0x2a5/0x360
[   90.145783][ T7060]  ? __lock_acquire+0x6df/0x2e50
[   90.145798][ T7060]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.145813][ T7060]  ? futex_wake+0x51b/0x5f0
[   90.145853][ T7060]  ? __fget_files+0x2a/0x420
[   90.145867][ T7060]  ? __fget_files+0x3a2/0x420
[   90.145887][ T7060]  __x64_sys_sendmsg+0x1b1/0x290
[   90.145902][ T7060]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   90.145929][ T7060]  do_syscall_64+0x166/0x520
[   90.145946][ T7060]  ? trace_irq_disable+0x3b/0x140
[   90.145957][ T7060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.145974][ T7060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.145986][ T7060] RIP: 0033:0x7f2ae299e159
[   90.145999][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.146009][ T7060] RSP: 002b:00007f2ae38d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.146023][ T7060] RAX: ffffffffffffffda RBX: 00007f2ae2c25fa0 RCX: 00007f2ae299e159
[   90.146031][ T7060] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009
[   90.146038][ T7060] RBP: 00007f2ae2a35024 R08: 0000000000000000 R09: 0000000000000000
[   90.146045][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.146052][ T7060] R13: 00007f2ae2c26038 R14: 00007f2ae2c25fa0 R15: 00007fffe1298fd8
[   90.146072][ T7060]  </TASK>
[   91.062284][ T7082] dvmrp0: entered allmulticast mode
[   91.073166][ T7081] dvmrp0: left allmulticast mode
[   91.326255][ T7100] syz_tun: entered allmulticast mode
[   91.388748][ T7099] syz_tun: left allmulticast mode
[   91.516607][  T392] IPVS: starting estimator thread 0...
[   91.533220][ T7109] netlink: 'syz.0.347': attribute type 12 has an invalid length.
[   91.588901][ T7109] netlink: 'syz.0.347': attribute type 12 has an invalid length.
[   91.610969][ T7112] IPVS: using max 51 ests per chain, 122400 per kthread
[   91.628460][ T7109] netlink: 'syz.0.347': attribute type 12 has an invalid length.
[   91.678023][ T7109] netlink: 'syz.0.347': attribute type 12 has an invalid length.
[   91.725386][ T7109] netlink: 'syz.0.347': attribute type 12 has an invalid length.
[   91.781168][ T7109] netlink: 'syz.0.347': attribute type 12 has an invalid length.
[   91.827818][ T7109] netlink: 'syz.0.347': attribute type 12 has an invalid length.
[   91.869187][ T7109] netlink: 'syz.0.347': attribute type 12 has an invalid length.
[   91.887607][ T7127] netlink: 'syz.2.353': attribute type 6 has an invalid length.
[   91.907112][ T7109] netlink: 'syz.0.347': attribute type 12 has an invalid length.
[   92.389356][ T7142] __nla_validate_parse: 6 callbacks suppressed
[   92.392142][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'.
[   92.532154][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'.
[   92.746359][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.363'.
[   92.787678][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'.
[   92.808727][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'.
[   92.922927][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'.
[   92.929034][ T7178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.367'.
[   92.946878][ T7183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.368'.
[   92.978498][ T7179] xt_CT: No such helper "netbios-ns"
[   93.099691][ T7201] netlink: 160 bytes leftover after parsing attributes in process `syz.0.372'.
[   93.102934][ T7201] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   93.112124][ T7199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.370'.
[   93.373563][ T7220] netlink: 'syz.0.377': attribute type 11 has an invalid length.
[   93.381458][   T27] IPVS: starting estimator thread 0...
[   93.383130][ T7210] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   93.480536][ T7221] IPVS: using max 53 ests per chain, 127200 per kthread
[   94.176297][ T7236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.313329][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   94.460042][ T7227] .`: renamed from bond0 (while UP)
[   94.535578][ T7238] geneve0: entered promiscuous mode
[   94.546669][ T7238] geneve0: left promiscuous mode
[   94.828656][ T7255] No such timeout policy "s	"
[   94.829289][ T7259] No such timeout policy "s	"
[   94.829300][ T7259] netlink: Failed to associated timeout policy 's	'
[   94.836571][ T7255] netlink: Failed to associated timeout policy 's	'
[   94.847229][ T7255] No such timeout policy "s	"
[   94.848032][ T7255] netlink: Failed to associated timeout policy 's	'
[   94.851119][ T7255] No such timeout policy "s	"
[   94.851130][ T7255] netlink: Failed to associated timeout policy 's	'
[   94.853968][ T7255] No such timeout policy "s	"
[   94.853978][ T7255] netlink: Failed to associated timeout policy 's	'
[   94.856761][ T7255] No such timeout policy "s	"
[   94.856944][ T7255] netlink: Failed to associated timeout policy 's	'
[   94.859131][ T7255] No such timeout policy "s	"
[   94.859139][ T7255] netlink: Failed to associated timeout policy 's	'
[   94.861602][ T7255] No such timeout policy "s	"
[   94.863990][ T7255] No such timeout policy "s	"
[   94.866249][ T7255] No such timeout policy "s	"
[   95.690083][ T7317] block nbd0: server does not support multiple connections per device.
[   95.698212][ T7317] block nbd0: shutting down sockets
[   98.267654][    C0] ------------[ cut here ]------------
[   98.267706][    C0] hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw)
[   98.267730][    C0] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:2263 at mac80211_hwsim_tx+0x1bea/0x2580, CPU#0: kworker/u8:0/12
[   98.277826][    C0] Modules linked in:
[   98.279488][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[   98.282678][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.285993][    C0] Workqueue: ipv6_addrconf addrconf_dad_work
[   98.287939][    C0] RIP: 0010:mac80211_hwsim_tx+0x1bea/0x2580
[   98.290151][    C0] Code: c6 05 b2 f7 28 09 01 48 c7 c7 20 7f bd 8c be a3 08 00 00 48 c7 c2 60 80 bd 8c e8 e1 da 68 fa e9 65 f4 ff ff e8 b7 2e 8d fa 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 18 e9 3b ff ff
[   98.297628][    C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00010246
[   98.299760][    C0] RAX: ffffffff873a8c69 RBX: 0000000000000000 RCX: ffff888102eb8000
[   98.302395][    C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000028
[   98.304846][    C0] RBP: ffffc90000007a80 R08: 0000000000000100 R09: 000000000000000e
[   98.307341][    C0] R10: 000000000000000d R11: 8000000000000100 R12: 0000000000000028
[   98.309947][    C0] R13: ffff8881156984b0 R14: 0000000000000014 R15: 0000000000000030
[   98.312636][    C0] FS:  0000000000000000(0000) GS:ffff88818d6d9000(0000) knlGS:0000000000000000
[   98.315452][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   98.317621][    C0] CR2: 00007f19419f5fe0 CR3: 00000001bdf0c000 CR4: 00000000000006f0
[   98.320478][    C0] Call Trace:
[   98.321615][    C0]  <IRQ>
[   98.322570][    C0]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[   98.324434][    C0]  ? __pfx_mac80211_hwsim_tx+0x10/0x10
[   98.326216][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   98.327998][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[   98.329744][    C0]  ? ieee80211_queue_skb+0x16dd/0x22e0
[   98.332178][    C0]  ieee80211_hwsim_wake_tx_queue+0xd4/0x150
[   98.334205][    C0]  ieee80211_queue_skb+0x1918/0x22e0
[   98.335875][    C0]  ieee80211_tx+0x2c2/0x4b0
[   98.337367][    C0]  ? __pfx_ieee80211_tx+0x10/0x10
[   98.339062][    C0]  ieee80211_tx_pending+0x754/0xba0
[   98.340988][    C0]  ? ieee80211_tx_pending+0xa5/0xba0
[   98.342706][    C0]  ? __pfx_ieee80211_tx_pending+0x10/0x10
[   98.344525][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   98.346374][    C0]  ? __pfx_wake_up_bit+0x10/0x10
[   98.348053][    C0]  ? rcu_is_watching+0x16/0xb0
[   98.349654][    C0]  tasklet_action_common+0x2d7/0x490
[   98.351402][    C0]  handle_softirqs+0x226/0x860
[   98.352975][    C0]  ? do_softirq+0x77/0xd0
[   98.354347][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[   98.355973][    C0]  do_softirq+0x77/0xd0
[   98.357311][    C0]  </IRQ>
[   98.358223][    C0]  <TASK>
[   98.359183][    C0]  __local_bh_enable_ip+0x100/0x140
[   98.361003][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[   98.362625][    C0]  __dev_queue_xmit+0x1edc/0x3820
[   98.364294][    C0]  ? __lock_acquire+0x6df/0x2e50
[   98.365881][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[   98.367575][    C0]  ? __pfx_mroute6_is_socket+0x10/0x10
[   98.369322][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[   98.371159][    C0]  ? lock_acquire+0x115/0x350
[   98.372659][    C0]  ? ip6_output+0x337/0x540
[   98.374110][    C0]  ? ip6_finish_output2+0x9f8/0x1460
[   98.375768][    C0]  ? __asan_memcpy+0x40/0x70
[   98.377236][    C0]  ? ip6_finish_output2+0xc1c/0x1460
[   98.379032][    C0]  ? ip6_output+0x11e/0x540
[   98.380632][    C0]  ip6_output+0x337/0x540
[   98.382007][    C0]  ? __pfx_ip6_output+0x10/0x10
[   98.383590][    C0]  NF_HOOK+0x177/0x4f0
[   98.384887][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[   98.386365][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[   98.387958][    C0]  ? __pfx_dst_output+0x10/0x10
[   98.389527][    C0]  ? __local_bh_enable_ip+0xd6/0x140
[   98.391288][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[   98.392910][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[   98.394499][    C0]  mld_sendpack+0x890/0xe10
[   98.395970][    C0]  ? mld_sendpack+0x206/0xe10
[   98.397482][    C0]  ? __pfx_mld_sendpack+0x10/0x10
[   98.399094][    C0]  ? mld_send_initial_cr+0x352/0x550
[   98.400850][    C0]  ipv6_mc_dad_complete+0x87/0x410
[   98.402522][    C0]  addrconf_dad_completed+0x8af/0xe60
[   98.404279][    C0]  ? __pfx_addrconf_dad_completed+0x10/0x10
[   98.406160][    C0]  ? addrconf_dad_work+0xe57/0x15c0
[   98.407836][    C0]  ? __local_bh_enable_ip+0xd6/0x140
[   98.409539][    C0]  addrconf_dad_work+0xcf8/0x15c0
[   98.411211][    C0]  ? __pfx_addrconf_dad_work+0x10/0x10
[   98.412979][    C0]  ? rcu_is_watching+0x16/0xb0
[   98.414500][    C0]  ? process_scheduled_works+0x97a/0x1630
[   98.416293][    C0]  process_scheduled_works+0xc3d/0x1630
[   98.418116][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[   98.420046][    C0]  ? assign_work+0x3cf/0x5d0
[   98.421628][    C0]  worker_thread+0xa47/0xfb0
[   98.423139][    C0]  kthread+0x38b/0x480
[   98.424472][    C0]  ? __pfx_worker_thread+0x10/0x10
[   98.426126][    C0]  ? __pfx_kthread+0x10/0x10
[   98.427590][    C0]  ret_from_fork+0x514/0xb70
[   98.429094][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   98.430836][    C0]  ? __switch_to+0xc89/0x1420
[   98.432465][    C0]  ? __pfx_kthread+0x10/0x10
[   98.433938][    C0]  ret_from_fork_asm+0x1a/0x30
[   98.435498][    C0]  </TASK>
[   98.436526][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   98.438912][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[   98.441891][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.445110][    C0] Workqueue: ipv6_addrconf addrconf_dad_work
[   98.447010][    C0] Call Trace:
[   98.448080][    C0]  <IRQ>
[   98.449059][    C0]  vpanic+0x56d/0xa60
[   98.450374][    C0]  ? __pfx__printk+0x10/0x10
[   98.451872][    C0]  ? __pfx_vpanic+0x10/0x10
[   98.453339][    C0]  ? is_bpf_text_address+0x292/0x2b0
[   98.455009][    C0]  ? is_bpf_text_address+0x26/0x2b0
[   98.456648][    C0]  panic+0xc5/0xd0
[   98.457838][    C0]  ? __pfx_panic+0x10/0x10
[   98.459335][    C0]  ? ret_from_fork_asm+0x1a/0x30
[   98.460985][    C0]  __warn+0x315/0x4c0
[   98.462253][    C0]  ? mac80211_hwsim_tx+0x1bea/0x2580
[   98.463895][    C0]  ? mac80211_hwsim_tx+0x1bea/0x2580
[   98.465543][    C0]  __report_bug+0x276/0x570
[   98.467038][    C0]  ? mac80211_hwsim_tx+0x1bea/0x2580
[   98.468753][    C0]  ? __pfx___report_bug+0x10/0x10
[   98.470446][    C0]  ? ieee80211_tx_dequeue+0x5283/0x56c0
[   98.472222][    C0]  ? __lock_acquire+0x6df/0x2e50
[   98.473814][    C0]  ? ieee80211_encrypt_tx_skb+0x2fc/0x3f0
[   98.475645][    C0]  ? mac80211_hwsim_tx+0x1bea/0x2580
[   98.477303][    C0]  report_bug+0x16b/0x220
[   98.478717][    C0]  ? mac80211_hwsim_tx+0x1bea/0x2580
[   98.480493][    C0]  ? mac80211_hwsim_tx+0x1bec/0x2580
[   98.482129][    C0]  handle_bug+0x9c/0x200
[   98.483440][    C0]  exc_invalid_op+0x1a/0x50
[   98.484861][    C0]  asm_exc_invalid_op+0x1a/0x20
[   98.486379][    C0] RIP: 0010:mac80211_hwsim_tx+0x1bea/0x2580
[   98.488196][    C0] Code: c6 05 b2 f7 28 09 01 48 c7 c7 20 7f bd 8c be a3 08 00 00 48 c7 c2 60 80 bd 8c e8 e1 da 68 fa e9 65 f4 ff ff e8 b7 2e 8d fa 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 18 e9 3b ff ff
[   98.494900][    C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00010246
[   98.496806][    C0] RAX: ffffffff873a8c69 RBX: 0000000000000000 RCX: ffff888102eb8000
[   98.499172][    C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000028
[   98.501782][    C0] RBP: ffffc90000007a80 R08: 0000000000000100 R09: 000000000000000e
[   98.504251][    C0] R10: 000000000000000d R11: 8000000000000100 R12: 0000000000000028
[   98.506738][    C0] R13: ffff8881156984b0 R14: 0000000000000014 R15: 0000000000000030
[   98.509212][    C0]  ? mac80211_hwsim_tx+0x1be9/0x2580
[   98.510998][    C0]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[   98.512812][    C0]  ? __pfx_mac80211_hwsim_tx+0x10/0x10
[   98.514521][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   98.516213][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[   98.517819][    C0]  ? ieee80211_queue_skb+0x16dd/0x22e0
[   98.519654][    C0]  ieee80211_hwsim_wake_tx_queue+0xd4/0x150
[   98.521546][    C0]  ieee80211_queue_skb+0x1918/0x22e0
[   98.523188][    C0]  ieee80211_tx+0x2c2/0x4b0
[   98.524747][    C0]  ? __pfx_ieee80211_tx+0x10/0x10
[   98.526758][    C0]  ieee80211_tx_pending+0x754/0xba0
[   98.528849][    C0]  ? ieee80211_tx_pending+0xa5/0xba0
[   98.530959][    C0]  ? __pfx_ieee80211_tx_pending+0x10/0x10
[   98.533238][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   98.535569][    C0]  ? __pfx_wake_up_bit+0x10/0x10
[   98.537520][    C0]  ? rcu_is_watching+0x16/0xb0
[   98.539217][    C0]  tasklet_action_common+0x2d7/0x490
[   98.540932][    C0]  handle_softirqs+0x226/0x860
[   98.542436][    C0]  ? do_softirq+0x77/0xd0
[   98.543828][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[   98.545479][    C0]  do_softirq+0x77/0xd0
[   98.546802][    C0]  </IRQ>
[   98.547763][    C0]  <TASK>
[   98.548717][    C0]  __local_bh_enable_ip+0x100/0x140
[   98.550462][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[   98.552142][    C0]  __dev_queue_xmit+0x1edc/0x3820
[   98.553827][    C0]  ? __lock_acquire+0x6df/0x2e50
[   98.555403][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[   98.557058][    C0]  ? __pfx_mroute6_is_socket+0x10/0x10
[   98.558801][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[   98.560571][    C0]  ? lock_acquire+0x115/0x350
[   98.562129][    C0]  ? ip6_output+0x337/0x540
[   98.563625][    C0]  ? ip6_finish_output2+0x9f8/0x1460
[   98.565324][    C0]  ? __asan_memcpy+0x40/0x70
[   98.566805][    C0]  ? ip6_finish_output2+0xc1c/0x1460
[   98.568457][    C0]  ? ip6_output+0x11e/0x540
[   98.570097][    C0]  ip6_output+0x337/0x540
[   98.571589][    C0]  ? __pfx_ip6_output+0x10/0x10
[   98.573211][    C0]  NF_HOOK+0x177/0x4f0
[   98.574562][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[   98.576029][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[   98.577624][    C0]  ? __pfx_dst_output+0x10/0x10
[   98.579255][    C0]  ? __local_bh_enable_ip+0xd6/0x140
[   98.581146][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[   98.582820][    C0]  ? icmp6_dst_alloc+0x39b/0x430
[   98.584436][    C0]  mld_sendpack+0x890/0xe10
[   98.585892][    C0]  ? mld_sendpack+0x206/0xe10
[   98.587399][    C0]  ? __pfx_mld_sendpack+0x10/0x10
[   98.589055][    C0]  ? mld_send_initial_cr+0x352/0x550
[   98.590764][    C0]  ipv6_mc_dad_complete+0x87/0x410
[   98.592463][    C0]  addrconf_dad_completed+0x8af/0xe60
[   98.594241][    C0]  ? __pfx_addrconf_dad_completed+0x10/0x10
[   98.596096][    C0]  ? addrconf_dad_work+0xe57/0x15c0
[   98.597740][    C0]  ? __local_bh_enable_ip+0xd6/0x140
[   98.599492][    C0]  addrconf_dad_work+0xcf8/0x15c0
[   98.601145][    C0]  ? __pfx_addrconf_dad_work+0x10/0x10
[   98.602975][    C0]  ? rcu_is_watching+0x16/0xb0
[   98.604526][    C0]  ? process_scheduled_works+0x97a/0x1630
[   98.606314][    C0]  process_scheduled_works+0xc3d/0x1630
[   98.608111][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[   98.610082][    C0]  ? assign_work+0x3cf/0x5d0
[   98.611626][    C0]  worker_thread+0xa47/0xfb0
[   98.613175][    C0]  kthread+0x38b/0x480
[   98.614519][    C0]  ? __pfx_worker_thread+0x10/0x10
[   98.616129][    C0]  ? __pfx_kthread+0x10/0x10
[   98.617592][    C0]  ret_from_fork+0x514/0xb70
[   98.619079][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   98.620751][    C0]  ? __switch_to+0xc89/0x1420
[   98.622486][    C0]  ? __pfx_kthread+0x10/0x10
[   98.624027][    C0]  ret_from_fork_asm+0x1a/0x30
[   98.625587][    C0]  </TASK>
[   98.627233][    C0] Kernel Offset: disabled
[   98.628622][    C0] Rebooting in 86400 seconds..
