last executing test programs:

2m27.985976199s ago: executing program 1 (id=2739):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000680)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @random="2d130dd79af7", {0x4, 0x9}}, @a_msdu=[{@device_b, @device_a, 0x40, "0b07eca09d1b1e0bdfd57f155eb9db185c21f219ea78dc7e378b73559bb967f3c1b71e77ebe0c2b54579123d20e8342199ed29c8eeceba5621c1eb10dbb26d29"}, {@broadcast, @broadcast, 0x2c, "ec081768291bd82edd75ad78b4973c983505125d3538f49619a63fe6db5e1f7b74bcd8eada7d6c4b03b5a096"}, {@broadcast, @device_b, 0x8b, "a90f31119c65a68de3e06c36e99aa873bf6c64c06445852c6758a981b3d14d319a63457ce1868a923a8b22c0cc1007ee283ca0b54255d41d869faa51ad1f369f38d410de434dda3f15a59b72c682e43b6c951173149880ad3e25dd3ddec9d5f063870ef7c84aa7548b6757ae877fc082c77f6ab3076385d9798bb06df7f99410217b428abcaf332cd7efb4"}, {@broadcast, @device_b, 0xb5, "1fc0e268bceac36c82db8def7bd0865c3174263b4f0d28bb2fc6249623b24c0db0568fc23171bd4e238f302963b8f1d96109f98afe5c0371e28c6f9051b16c4c551c2481d4afa28165c616a1d636f12d1a7712be282837ac678439a76ecfaf42c81363b56fed43682d9955031051f23b0d2d68806027cc0edc793d2a55cd57073d98ae59f49d6ac2a5dae833000406feb178083b6963c182e253c102fd718df6b4b9bda99776b56f7181561ab32d3adb4a3eeee125"}, {@device_b, @device_b, 0x47, "f7b5043361ab2c8ad2aeb43a87b087e8ba345a580b9a5f190d96945ae798d01ceb0d0c1aa0777e4723ffec8680c68bc4fd6dc964959bedf8a93e22a196390c1b3b82434e5c0812"}, {@device_b, @device_b, 0x3b, "76f01c0b084ad3ca6a75a1b45fd457c44e748e27d515e26ad64f4c6ab74101c7cc6d8db229a940731d5dd99a977e76d2d759fee6044cec002b40b0"}]}, 0x2a8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000f8000000000002000418851000000200000020000000000000009500007b0000000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x8c, &(0x7f0000000280)=""/140, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
r6 = socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r6, 0x29, 0x48, &(0x7f0000000100)=r7, 0x120)
sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000048000000000000000000008fbfe644187bdea10182e7d3ff4f6eace72edc42aea956bf77dd8eb86e6970720571b50d1c2c76e20000000000", @ANYRES32=r5, @ANYBLOB="14005e80080002000000000108000100ffffffef"], 0x30}}, 0x0)

2m27.414742854s ago: executing program 1 (id=2741):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800000a0000002dbd7000fbdbdf2505000600000000000a00000000000000000000000000000000000000000000e7ffffff0000000000030005000000000002004e24e00000010000000000000000"], 0x50}}, 0x10) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0001001800010000330002002100001d01080005000d000100000079e5a78aceea92274161c30a0098a17fdd99997d0b6951f81764521d77f4df4130f33ecd3011e2509548bf336f966209d002a27dd71e53656e7c465460e8ebdec205774334819093487c"], 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x2000000000000188, &(0x7f0000000840)=ANY=[@ANYBLOB="61125c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b643d0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd60492edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac81978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed555967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3c63aa868c9380375695163073e18017443ddf85b63e25357c51fec0000"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x2, &(0x7f0000000380)='\x00', 0x1)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10022, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e)
sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x8000, 0x81, 0x8}}) (async)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000000001f1ebff000000000000000a0000003c0002802c00018014000300ff01000000000002000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00477814000300ff00000001140004002001000000000000000000000000000106000340000200bdbae258707cf63256b56efa2bc608e83f93000800074000000001000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10625}, 0x94) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea725000000", @ANYRESHEX=r0], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x0, 0x24008081}, 0x0) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async)
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x810, r0, 0x60acc000)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

2m27.301002109s ago: executing program 1 (id=2742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000180), 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x10000008ebc, 0x0)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x80000025a5, 0x0)
close(0x3)
close(0x4)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x20008044)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES8=r12, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="04015b400600060000000000"], 0x28}}, 0x800)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=<r15=>r3, @ANYRES16=0x0, @ANYRES32=r6, @ANYRES64=0x0], 0x24}}, 0x4040040)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffda5, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYRES32=r1, @ANYRES64=r9, @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010)

2m27.246029509s ago: executing program 1 (id=2744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000240)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1}})
sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553)
socket$inet(0x2, 0x2, 0x400)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x2e, 0x0, &(0x7f00000001c0))
sendmsg$FOU_CMD_ADD(r12, 0x0, 0x0)

2m27.185455975s ago: executing program 1 (id=2745):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000020000061117100000000001800000000000000000000000000000595dd480000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

2m27.116057291s ago: executing program 1 (id=2746):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x18}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x800}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa00000}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r9=>0xffffffffffffffff})
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

2m12.093460637s ago: executing program 32 (id=2746):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x18}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x800}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa00000}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r9=>0xffffffffffffffff})
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

1m51.392301794s ago: executing program 2 (id=3105):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5d50d5a4ea7f1dfa9f550fcda3747dd3df9d23e9f33f7fa75525942d11da2be869d86b110ed1ad302a9653a00bcad228de04000000000000399553557b55ffcb43054947bfaff41b98bbb2d136", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250200000008000200020000000800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00028006"], 0x24}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000014000780080017400000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}}, 0x0)

1m51.321423312s ago: executing program 2 (id=3106):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='ext4_insert_range\x00'}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x0, 0x1a, 0x0, 0x8}, 0x28)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000020000000200000004000000000000000000000b03"], 0x0, 0x5a}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="21acf0d600001da400000000000000000000000078544a66ed87644400906c214696742bc9b3475dd98f0673354c97e9403a7f76ec24db7fa1e36eaac4868f2420c30edd168348f632c4c7053d0cfd336590cb5f30e5cb64f558f02b4de4b32b05d87689c59fb0da2b6e09233c940b0cf23cb8d04e521943a5a5f389aa45d9c3e0f9c8b15ca33c21c743ce1fa7eac8bfbf10f20033b7ea2f5a22d2575136e3cf8ac405510180000000000000b26e48311685adff2e4ac0dff0", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="040000000400"/28], 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r10}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20)
r11 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_xfrm(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000d80)=@acquire={0x128, 0x17, 0x502, 0x70bd27, 0x25dfdbfd, {{@in=@remote, 0x4d2, 0xff}, @in=@multicast2, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e22, 0x0, 0x4e20, 0x7, 0xa, 0x80, 0x80, 0x3a}, {{@in=@broadcast, @in=@broadcast, 0x4e21, 0x8001, 0x4e23, 0x7, 0xa, 0x0, 0x80, 0x25}, {0x7961, 0x81, 0x5, 0x0, 0x6, 0x38000, 0x7, 0x1c}, {0x5474, 0x6, 0x822, 0x200}, 0x2, 0x6e6bbe, 0x2, 0x0, 0x1, 0x2}, 0x5, 0x457, 0x5, 0x70bd2d}}, 0x128}, 0x1, 0x0, 0x0, 0x40100}, 0x4004)
r12 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"/4214], 0x11f0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})

1m51.319773451s ago: executing program 2 (id=3107):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
listen(r0, 0x400004)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0})
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14002d89e9f274cefb000400000000040a010128bd7000ffdbdf2501000008"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {0xfb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108000000000000000000000d00", @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001080030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c0002800800030001000000"], 0x38}}, 0x0)
connect$can_bcm(r9, &(0x7f0000000000), 0x10)

1m51.141973065s ago: executing program 2 (id=3108):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x2, 0x2, 0x0, r2}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)

1m51.071656887s ago: executing program 2 (id=3110):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="0105000000000000000000003b0000005123687a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="ae1e020000008000a3a515817b3a61f7ff341de2517b68782d08c545bd755508fa75a55d810000007cdb5b5892b9b969013ac891abbd934147ef04b60bdeda2abafe1861a79f224dfbb398eab96146c87528fea055f06d3506ee55856779244155d3dcae7c6705171aa94264060680bdc56243b7e66267c88c1fc07ec5065c701c71e6babc413f1728f9c1bbfeee782e1d834d7fcc3b50"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x19, 0x16, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="580010000158ed8d594bbfbd960a7bf000000000171cfeb6cc2cebe93b3602ebed7ce2c3c22d527951661f8ac51834cf862473b5314d160b09402b2bcfb32a85c325e433e83f28b60e4a40f8e43a6ed3b068f31ddaf6056ecf11aee364a39b92b9180ee1670d606aa2d884189ea6a2a39b", @ANYRES32=r7, @ANYBLOB="24000400858d0000380012800e00010069703665727370616e00000024000280040012000800150034230f0014000700ff020000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20004846)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r10 = accept$alg(r9, 0x0, 0x0)
sendmmsg$alg(r10, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc7", 0x6}, {&(0x7f0000000a80)="7ba863ad0844e1bd4dbef819ad938d2eee02cc1497ea33634963307c75b71ef12b9fbbea39f886b64512ad1872b4a443bc9cc208de87c837a95fd97febf6075d78c0403a08a84d9a3ba8cbb6ea4a407c45d4dc24888128c42aa1d6717e0edd917db8439b8b5f51eee2dceaab1ef9d195286d1b5764996c37012da4", 0x7b}], 0x2, 0x0, 0x0, 0x4c004}], 0x1, 0x51)
recvmmsg(r10, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)

1m50.946068222s ago: executing program 2 (id=3115):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}})
unshare(0x6a040000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600) (async)
unshare(0x600)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r5, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24) (async)
connect$rxrpc(r5, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24)
socket$kcm(0x10, 0x2, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r3, 0x4}, 0x38)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2fa39, 0x9894}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xa1ffffff}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc0000002d00010027bd7000fcdbdf2504000000040012800a00090027"], 0xdc}}, 0x8004)

1m38.527150144s ago: executing program 0 (id=3245):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x2)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'batadv_slave_0\x00', {0xfffffff7}, 0x4})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

1m37.671798074s ago: executing program 0 (id=3247):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x6, 0x0, 0x2000001, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x1}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000380)={{r1}, &(0x7f0000000300), 0x0}, 0x20)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)

1m37.671123584s ago: executing program 0 (id=3248):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000000), 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}], 0x10) (async)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) (async)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) (async)
setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000380)={@rand_addr=0x64010102, @private=0xa010101}, 0xc)
close(r4)
r7 = socket$unix(0x1, 0x1, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtclass={0x84, 0x28, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff2, 0xc}, {0x7, 0x2}, {0xffff, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x32, 0xff}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0x4, 0x41}}, @TCA_RATE={0x6, 0x5, {0xf8, 0xfb}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0xffffb15c, 0x60, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x3, 0x3b}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x100, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1b, 0x7ff, 0x6}}}}]}, 0x48}}, 0x4000810) (async)
r10 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r10, 0x89ee, &(0x7f0000000300)) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
socket$xdp(0x2c, 0x3, 0x0) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0)

1m37.580559475s ago: executing program 0 (id=3249):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000780000001400040073797a6b616c6c65723000000000000008000500070000001400040073797a5f74756e000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1402, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24020000}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000805}, 0x22008004)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

1m37.580078531s ago: executing program 0 (id=3250):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000000000000000000000000e834ac8533d91b9181672e11e6fa000000000000000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESHEX=r1], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000740)='q', 0x0, 0x0, 0x0, 0xa09, r2}, 0x38)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = accept$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={<r7=>0x0, 0x8, 0x3, [0x0, 0x1, 0x3]}, &(0x7f0000000380)=0xe)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000003c0)={r7, 0x85a, 0x6, 0x9, 0x3, 0xb}, &(0x7f0000000400)=0x14)
sendmsg$inet6(r5, &(0x7f0000001940)={&(0x7f0000000280)={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x18}, 0x3)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040), 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)
getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
r9 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11e, 0x1, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$l2tp6(0xa, 0x2, 0x73)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'pim6reg\x00', <r10=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, r8}]}, &(0x7f0000000040)='GPL\x00', 0x468, 0x0, 0x0, 0x40f00, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000140)=@null)

1m37.47142071s ago: executing program 0 (id=3251):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
unshare(0x62000000) (async)
r2 = socket(0x3, 0x80000, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x80, 0x4) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r3=>0x0}, {0x0, @struct, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000004c0)={r3, 0xfffffffffffffff7, 0x1, [0x6, 0x0, 0x7ff, 0xffffffffffff0001, 0xffffffffffffffc0], [0x6, 0x7, 0xc0, 0x86e9, 0x3, 0xe7, 0x8001, 0x7dd, 0x1, 0x1ff8000, 0x81, 0x647, 0x1ffe, 0xfffffffffffffffe, 0x2, 0x10001, 0x76, 0x0, 0x5, 0xc, 0x3f, 0xb81, 0x91, 0x1, 0x1b, 0x6, 0x5, 0x6, 0x5, 0x7fff, 0x100, 0x3, 0x75, 0xb, 0x2e6f, 0x6, 0x80, 0x7fff, 0x2, 0x40, 0x8000, 0xffffffffffffff00, 0x7fffffff, 0x0, 0x7, 0x8, 0x200, 0x5cc, 0x0, 0x8c1, 0x475b, 0xece, 0x1, 0x2, 0x6, 0x8, 0x6, 0x80, 0x40, 0xffffffffffffffff, 0x8000000000, 0x7fffffffffffffff, 0x0, 0x5, 0x361, 0x4, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0, 0x1, 0x7fc0000000, 0xbc6, 0x8243, 0xfff, 0x5, 0x7, 0xa6d, 0x2, 0x100000000, 0x5, 0x101, 0x6, 0x5, 0x7f, 0x8, 0x8, 0x5, 0x6, 0x5, 0x7fffffffffffffff, 0x7, 0x9, 0x1, 0x8, 0x9, 0xe, 0x4, 0x4, 0x8, 0xd32, 0x1802, 0x2ef, 0xff, 0x5, 0x6, 0x2, 0xe, 0x18000, 0x3, 0x100000000, 0x4c, 0x4, 0x0, 0x200, 0x4, 0x9, 0x3, 0x0, 0x40, 0x0, 0x1]}) (async)
r5 = getpid() (async)
r6 = getuid() (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={<r7=>0x0, 0x0, <r8=>0x0}, &(0x7f0000000a40)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={<r9=>0x0, <r10=>0x0}, &(0x7f0000000ac0)=0xc) (async)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000c00)=0xe8) (async)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000c40)=<r12=>0x0)
r13 = getgid() (async)
r14 = socket$nl_route(0x10, 0x3, 0x0) (async)
r15 = socket$nl_route(0x10, 0x3, 0x0) (async)
r16 = accept4$vsock_stream(r2, &(0x7f0000000c80)={0x28, 0x0, 0x0, @local}, 0x10, 0x0)
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="57adfc7789e4dcf66e4dc302be881b556411130aba872be3eb3eca9ad65c3a63bb46c3e5fe5ef2052306e06f093ee5ed22187fe2a2ca5d8d2fb2526da9308ed03fae407dcf1c9f03f9def75c104e839d3f205e33ba73471d357ebd97644fd44cc37b53774479980dbd8d3f35237fee5f22196769980e5c6738fef9299b3a5bc6d67287c01f", 0x85}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, r13}}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x28, 0x1, 0x1, [r14, r15, r16, r0, r1, r2]}}], 0xb8, 0x8080}, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000dc0)={{{@in=@broadcast, @in=@private}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000ec0)=0xe8)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r14, 0x80047210, &(0x7f0000000f00))
ioctl$FIBMAP(r16, 0x1, &(0x7f0000000f40)=0x400) (async)
r17 = socket$phonet_pipe(0x23, 0x5, 0x2)
r18 = openat$nci(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0)
write$nci(r18, &(0x7f0000000fc0)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x8f, {0xc7, 0x40}}, 0x5) (async)
r19 = socket$caif_stream(0x25, 0x1, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r19, 0xc020f509, &(0x7f0000001000)={<r20=>r17, 0x7, 0x43})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001040)={r4, 0x200, 0xfffffffffffffff9}) (async)
setsockopt$RXRPC_SECURITY_KEY(r20, 0x110, 0x1, &(0x7f0000001440)='\\-\x00', 0x3) (async)
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001480)={r7, r10, r8}, 0xc)

1m35.699402434s ago: executing program 33 (id=3115):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}})
unshare(0x6a040000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600) (async)
unshare(0x600)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r5, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24) (async)
connect$rxrpc(r5, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24)
socket$kcm(0x10, 0x2, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r3, 0x4}, 0x38)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2fa39, 0x9894}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xa1ffffff}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc0000002d00010027bd7000fcdbdf2504000000040012800a00090027"], 0xdc}}, 0x8004)

1m22.428422851s ago: executing program 34 (id=3251):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
unshare(0x62000000) (async)
r2 = socket(0x3, 0x80000, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x80, 0x4) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r3=>0x0}, {0x0, @struct, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000004c0)={r3, 0xfffffffffffffff7, 0x1, [0x6, 0x0, 0x7ff, 0xffffffffffff0001, 0xffffffffffffffc0], [0x6, 0x7, 0xc0, 0x86e9, 0x3, 0xe7, 0x8001, 0x7dd, 0x1, 0x1ff8000, 0x81, 0x647, 0x1ffe, 0xfffffffffffffffe, 0x2, 0x10001, 0x76, 0x0, 0x5, 0xc, 0x3f, 0xb81, 0x91, 0x1, 0x1b, 0x6, 0x5, 0x6, 0x5, 0x7fff, 0x100, 0x3, 0x75, 0xb, 0x2e6f, 0x6, 0x80, 0x7fff, 0x2, 0x40, 0x8000, 0xffffffffffffff00, 0x7fffffff, 0x0, 0x7, 0x8, 0x200, 0x5cc, 0x0, 0x8c1, 0x475b, 0xece, 0x1, 0x2, 0x6, 0x8, 0x6, 0x80, 0x40, 0xffffffffffffffff, 0x8000000000, 0x7fffffffffffffff, 0x0, 0x5, 0x361, 0x4, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0, 0x1, 0x7fc0000000, 0xbc6, 0x8243, 0xfff, 0x5, 0x7, 0xa6d, 0x2, 0x100000000, 0x5, 0x101, 0x6, 0x5, 0x7f, 0x8, 0x8, 0x5, 0x6, 0x5, 0x7fffffffffffffff, 0x7, 0x9, 0x1, 0x8, 0x9, 0xe, 0x4, 0x4, 0x8, 0xd32, 0x1802, 0x2ef, 0xff, 0x5, 0x6, 0x2, 0xe, 0x18000, 0x3, 0x100000000, 0x4c, 0x4, 0x0, 0x200, 0x4, 0x9, 0x3, 0x0, 0x40, 0x0, 0x1]}) (async)
r5 = getpid() (async)
r6 = getuid() (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={<r7=>0x0, 0x0, <r8=>0x0}, &(0x7f0000000a40)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={<r9=>0x0, <r10=>0x0}, &(0x7f0000000ac0)=0xc) (async)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000c00)=0xe8) (async)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000c40)=<r12=>0x0)
r13 = getgid() (async)
r14 = socket$nl_route(0x10, 0x3, 0x0) (async)
r15 = socket$nl_route(0x10, 0x3, 0x0) (async)
r16 = accept4$vsock_stream(r2, &(0x7f0000000c80)={0x28, 0x0, 0x0, @local}, 0x10, 0x0)
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="57adfc7789e4dcf66e4dc302be881b556411130aba872be3eb3eca9ad65c3a63bb46c3e5fe5ef2052306e06f093ee5ed22187fe2a2ca5d8d2fb2526da9308ed03fae407dcf1c9f03f9def75c104e839d3f205e33ba73471d357ebd97644fd44cc37b53774479980dbd8d3f35237fee5f22196769980e5c6738fef9299b3a5bc6d67287c01f", 0x85}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, r13}}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x28, 0x1, 0x1, [r14, r15, r16, r0, r1, r2]}}], 0xb8, 0x8080}, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000dc0)={{{@in=@broadcast, @in=@private}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000ec0)=0xe8)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r14, 0x80047210, &(0x7f0000000f00))
ioctl$FIBMAP(r16, 0x1, &(0x7f0000000f40)=0x400) (async)
r17 = socket$phonet_pipe(0x23, 0x5, 0x2)
r18 = openat$nci(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0)
write$nci(r18, &(0x7f0000000fc0)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x8f, {0xc7, 0x40}}, 0x5) (async)
r19 = socket$caif_stream(0x25, 0x1, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r19, 0xc020f509, &(0x7f0000001000)={<r20=>r17, 0x7, 0x43})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001040)={r4, 0x200, 0xfffffffffffffff9}) (async)
setsockopt$RXRPC_SECURITY_KEY(r20, 0x110, 0x1, &(0x7f0000001440)='\\-\x00', 0x3) (async)
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001480)={r7, r10, r8}, 0xc)

1m21.325053011s ago: executing program 3 (id=3362):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000055}, 0x4c041)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40800)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0xfffffffffffffec3}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) (async)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}]}, 0x30}}, 0x0)
clock_gettime(0x37ad3e8caf423423, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x7, [{0x16, 0x1}, {0x3}, {0x18}, {0x49, 0x1}, {0x6}, {0x6c, 0x1}, {0x2, 0x1}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x2, 0x6}}, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x7, 0x7, 0x3f, 0xa}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4007965}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}]}, 0x74}}, 0x0)

1m21.219093554s ago: executing program 3 (id=3363):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) (async)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) (async)
r4 = accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async)
recvmsg(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r9, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)

1m21.216975321s ago: executing program 3 (id=3365):
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)

1m21.150774598s ago: executing program 3 (id=3366):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
socket(0x10, 0x80002, 0x0) (async)
r1 = socket(0x10, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0x444c4) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0x444c4)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r3, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) (async)
getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000200000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000200000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800000000010800010002000000050009000100000005000c"], 0x90}}, 0x0)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, r9, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
socket$inet_sctp(0x2, 0x5, 0x84)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r10, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r10, 0x89eb, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x88, 0x17, 0xfd, 0x5, "ad8400200000000000000000e0ff000000000d66", "0000000000200000000000000000100000001700"})

1m20.949676113s ago: executing program 3 (id=3369):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[{0x10, 0x10b, 0xb}, {0x10, 0x110, 0x2d7}], 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x20000004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x34}, 0xffffffff}], 0x1c)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff00"], 0x50}}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x122a, <r4=>0x0}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m20.868409874s ago: executing program 3 (id=3370):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
shutdown(r1, 0x2000000) (async, rerun: 64)
unshare(0x62040200) (async, rerun: 64)
r2 = socket(0x10, 0x80003, 0x0) (async)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)=0x6) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xf5, 0x40000, @dev}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000100)="daffc38b69363a52fe8000480000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000200)="01", 0x1}], 0x2}, 0xb00) (async)
close(0x3) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@gettfilter={0x74, 0x2e, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {0xd}, {0xfff1, 0xfff2}}, [{0x8, 0xb, 0x10000}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0xc}, {0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r6, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1m18.427851556s ago: executing program 4 (id=3394):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="00000000ffffffffd4000000"], 0x48)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r4, &(0x7f0000000b40)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x8, 0xca6}, @mpls={[], @ipv6=@dccp_packet={0x5, 0x6, "1a94ed", 0x268, 0x21, 0x1, @mcast1, @mcast1, {[@srh={0x33, 0x12, 0x4, 0x9, 0x1, 0x50, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x2b}, @loopback, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}, @hopopts={0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x0, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0xff, 0x45, "27723cb232010600001dee191f1b6348aafe626897259c0d54edf09dbd6d2c4f85effe8ec44df065a9a59d5800e070b7b6bd803d7687269e5f159d558b3d31bc6d8764266d"}]}, @routing={0x0, 0xc, 0x1, 0x7c, 0x0, [@remote, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x2c, 0xc, 0x1, 0x4, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, @mcast2, @empty]}, @routing={0x11, 0xa, 0x0, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast2]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x2, 0x7, "000080", 0x5, "aa87b1"}, "acd62a9e6d82a40b7ff9f07df74b13adee13456f8c533e21a97ba842c1be9580b93417e0dc9eb3cf"}}}}}, 0x29e)

1m18.270383807s ago: executing program 4 (id=3395):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x8, 0x0, 0x8000}, {0x0, 0x4000000}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x40, "25cac521"}}]}, 0x140}}, 0x4000080)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
socket$packet(0x11, 0x2, 0x300)

1m18.160083917s ago: executing program 4 (id=3396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x54, r8, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x77e0}, {0x6, 0x16, 0x3}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x24040085)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

1m18.11045331s ago: executing program 4 (id=3397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xe0, 0x3, 0xa, 0x4, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x52a3552}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x85be8e8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x19e}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELFLOWTABLE={0x90, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x238}, 0x1, 0x0, 0x0, 0x14000000}, 0x0)

1m18.109364896s ago: executing program 4 (id=3398):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000800008500000018000000850000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0xc1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000780)={0x5, {{0xa, 0x4e24, 0x5, @remote, 0x6d00}}, {{0xa, 0x4623, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0xffffffffffffffd2)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x2)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f0000000000)={0x3ff, 0xd, 0x8, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, r9, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

1m17.190513728s ago: executing program 4 (id=3399):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async)
unshare(0x6a040000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="03000800ec0619000c0061760448"], 0xfdef)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r5=>0x0}) (async)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r7], 0x20}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f00000012c0)={0x0, 0x16, &(0x7f0000000500)={&(0x7f00000013c0)=@ipv6_newnexthop={0x0, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x4, 0x0, 0x11}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x1}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x3}, @NHA_FDB]}, 0x64}}, 0x0) (async, rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (rerun: 32)

1m5.433019327s ago: executing program 35 (id=3370):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
shutdown(r1, 0x2000000) (async, rerun: 64)
unshare(0x62040200) (async, rerun: 64)
r2 = socket(0x10, 0x80003, 0x0) (async)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)=0x6) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xf5, 0x40000, @dev}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000100)="daffc38b69363a52fe8000480000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000200)="01", 0x1}], 0x2}, 0xb00) (async)
close(0x3) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@gettfilter={0x74, 0x2e, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {0xd}, {0xfff1, 0xfff2}}, [{0x8, 0xb, 0x10000}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0xc}, {0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r6, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1m2.025232619s ago: executing program 36 (id=3399):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async)
unshare(0x6a040000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="03000800ec0619000c0061760448"], 0xfdef)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r5=>0x0}) (async)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r7], 0x20}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f00000012c0)={0x0, 0x16, &(0x7f0000000500)={&(0x7f00000013c0)=@ipv6_newnexthop={0x0, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x4, 0x0, 0x11}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x1}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x3}, @NHA_FDB]}, 0x64}}, 0x0) (async, rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (rerun: 32)

44.716992462s ago: executing program 6 (id=3636):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x91, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x80800)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/27}, 0x20)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

44.576150277s ago: executing program 6 (id=3637):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000000109010800000000000000000a0000042c0002001400018008000100e000000208000200ac14142a0c000280050001000100000006000340000100000c00020004000200"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1, @v={0x6, 0x3, 0x1, 0x6, 0x9, 0x3, 0xd1, {0xb, 0x3, "459112cef22f0d08"}, 0x6, 0x81, 0x4, 0x2, 0x5, "229ebd1a32"}}, 0x1e) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in=@broadcast, 0x4e24, 0x0, 0x4e23, 0x40, 0x2, 0xa0, 0x80, 0x3a}, {0x1000a, 0x1, 0x2, 0x0, 0x7, 0x6, 0x1, 0xe3}, {0x40, 0x1, 0x7, 0x1}, 0x4, 0x6e6bc0, 0x2, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3501, 0x1, 0x1, 0xd, 0x719c, 0x7, 0x1}}, 0xe8)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002d00090027bd70000000000004000000040019000c00090000000080"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

44.517416633s ago: executing program 6 (id=3638):
r0 = socket(0xa, 0x3, 0x3a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c700000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0x0) (async)
r3 = socket$kcm(0x2d, 0x7, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000040)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async)
r10 = socket(0x10, 0x3, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xdd}]}, 0x2c}}, 0x800)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xbe, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) (async)
write$tun(r5, &(0x7f0000000040)=ANY=[], 0x82)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="80210000000008001400030024f52fb6486c03270000000000000800168004000180"], 0x44}}, 0x0)

44.517199926s ago: executing program 6 (id=3639):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a0000002000006111710000000000180000000000000000000000007b000095dd480000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

44.456846745s ago: executing program 6 (id=3640):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060078000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

43.58674039s ago: executing program 6 (id=3650):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) (async)
unshare(0x62040200) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0xe, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x20000000) (async)
r2 = socket(0x10, 0x80003, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dvmrp1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000081"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, 0x0, 0xffffffffffffffff}, 0x20) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r6, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

41.165446782s ago: executing program 5 (id=3685):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
listen(r0, 0x400004)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48)
bind$netrom(r5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0})
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14007000ff3de22e7eecc08af1317c865cd70a1dc7f644574eb1cb167a21bee44ebe596357ca50cbd9ae9f22c704c84c5210831615c5e07e409e908dcf9cc7bf0066560a9a8893e73c2aeb49636cb82d23440d1366fa59"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0080000000000000b9060c2f397cfb47", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$can_bcm(0x1d, 0x2, 0x2)

41.037174134s ago: executing program 5 (id=3686):
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0xb, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x17}}, [0x4, 0xb8e, 0x8, 0x1, 0x8, 0x6, 0x8, 0x9, 0x200, 0x3, 0x3, 0xc0b, 0x3, 0x9, 0x1ff]}, &(0x7f0000000040)=0x100)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$netlink(r4, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x5)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

40.167072908s ago: executing program 5 (id=3691):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xe040000000000000}, 0x0, 0x0)

39.306865341s ago: executing program 5 (id=3694):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e6963766630000000000000000000000800050007000000f03729fc66d1692cb1d36e1b9f913833d261f7a36a3b50bf3abf7ecb"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r4, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x3d, 0xa9, @random="b6ed8da394feb9e0ddd3a8751b498b901abd23f0a6273bed95c965f3ad56b5f13690e586c9a1baaef96de54c554a0e0b73e50d92c3acd2ea8d"}]}, 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x20000000)

39.216903908s ago: executing program 5 (id=3696):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000020000061117100000000001800000000000000000000000008000095dd480000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

39.20621025s ago: executing program 5 (id=3697):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket(0x21, 0xa, 0x10000) (async)
r5 = socket(0x21, 0xa, 0x10000)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) (async)
bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10)
bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0)
syz_genetlink_get_family_id$team(0x0, r5)
recvfrom$netrom(r5, 0x0, 0x0, 0x12000, 0x0, 0x0) (async)
recvfrom$netrom(r5, 0x0, 0x0, 0x12000, 0x0, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000040008500000011e8ffff17110000e4ad6db9f73241a3cca984b725c0a9fd8d4a", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000040a87ba0ca6bf837b30be30ee95a7566057c18412637c5bbc6f1d0a750bacd8c0906ad84600f0402f3ca3ce6ee5b8865983ed795f550286b98348aec98fc010db0452891c4dd1f6fff16ede59765411f4af6d2a525a0ce3c5d35fed6aad424beff8b134d65bdbba95d693b962325533651dc234042f38007417764bf3e6758da70af15430d29c7e2a12b7f58fa2da500baf3d0352ceefd9f55e742e275d51cf7c74a90295114e5e51437f02dd018969a0b47d074908faf291fc44dec6033d8"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000040008500000011e8ffff17110000e4ad6db9f73241a3cca984b725c0a9fd8d4a", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x48000280) (async)
unshare(0x48000280)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000df100bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x0, 0x10, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003876e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x0, 0x10, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003876e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)

28.041363002s ago: executing program 37 (id=3650):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) (async)
unshare(0x62040200) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0xe, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x20000000) (async)
r2 = socket(0x10, 0x80003, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dvmrp1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000081"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, 0x0, 0xffffffffffffffff}, 0x20) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r6, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

24.154447227s ago: executing program 38 (id=3697):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket(0x21, 0xa, 0x10000) (async)
r5 = socket(0x21, 0xa, 0x10000)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) (async)
bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10)
bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0)
syz_genetlink_get_family_id$team(0x0, r5)
recvfrom$netrom(r5, 0x0, 0x0, 0x12000, 0x0, 0x0) (async)
recvfrom$netrom(r5, 0x0, 0x0, 0x12000, 0x0, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000040008500000011e8ffff17110000e4ad6db9f73241a3cca984b725c0a9fd8d4a", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000040008500000011e8ffff17110000e4ad6db9f73241a3cca984b725c0a9fd8d4a", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x48000280) (async)
unshare(0x48000280)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x0, 0x10, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003876e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x0, 0x10, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003876e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)

1.763684548s ago: executing program 9 (id=4001):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) (async)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 32)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32)
listen(r2, 0x2) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r5=>0xffffffffffffffff}) (async)
r6 = getpid()
sendmsg$unix(r5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x40488d1}, 0x8000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xb}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64)
getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) (rerun: 64)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async, rerun: 32)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) (async)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) (rerun: 64)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x68, r10, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) (async)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async, rerun: 32)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) (rerun: 32)

1.6932695s ago: executing program 9 (id=4002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0xe, 0x6, @multicast}, 0x14)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000000c0)="6f4901d32cbca87e2d49b231701fe81209ffd9000000000000ffff3929cfd511154752faf25db44e0aca477496b6a99960e61aa8e51d5b09718615970867d5ec65020f01cde9cbd15e41c1f85fa9a98cb68e70e628a5837e5a", 0x4, r8}, 0x38)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='blkio.bfq.idle_time\x00', 0x26e1, 0x0)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48)
ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @broadcast})
write$rfkill(r5, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)
accept4(r2, 0x0, 0x0, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20000400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x4, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.132781619s ago: executing program 8 (id=4006):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001180)={'syztnl2\x00', &(0x7f00000010c0)={'sit0\x00', <r0=>0x0, 0x7, 0x8000, 0x54, 0x1, {{0x21, 0x4, 0x2, 0x6, 0x84, 0x64, 0x0, 0xb1, 0x2f, 0x0, @remote, @loopback, {[@cipso={0x86, 0x2e, 0x3, [{0x0, 0xc, "af71246a0208c46e177d"}, {0x2, 0xd, "2eaf828fac1c70dc60c14b"}, {0x0, 0x9, "f377d39f73be18"}, {0x0, 0x6, "60d7a32a"}]}, @rr={0x7, 0x17, 0xcb, [@remote, @private=0xa010100, @broadcast, @broadcast, @multicast1]}, @end, @ssrr={0x89, 0x7, 0x92, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x27, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x4}]}, @rr={0x7, 0x17, 0xdd, [@local, @empty, @loopback, @broadcast, @loopback]}]}}}}})
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0x20, &(0x7f0000001380)={&(0x7f0000001280)=""/21, 0x15, <r2=>0x0, &(0x7f00000012c0)=""/185, 0xb9}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x1, 0x0, 0x4, 0x100, 0xfffffffffffffffc}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x8495fa58e3363b54, 0x0, 0x3, 0xb, 0x7, 0x6, 0x8}, @generic={0x9, 0x6, 0xc, 0x1, 0x8000}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @generic={0x0, 0x1, 0xf, 0x1}], &(0x7f0000000080)='GPL\x00', 0x80000001, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x34, '\x00', r0, @fallback=0x18, r1, 0x8, &(0x7f0000001200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001240)={0x2, 0xd, 0x1ff, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000001400)=[{0x4, 0x2, 0x2, 0x1}, {0x2, 0x1, 0x9, 0xa}, {0x4, 0x5, 0xf, 0x9}, {0x3, 0x1, 0xa, 0x6}], 0x10, 0x7fffffff}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000001500), 0x4)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001540)={<r4=>0x0, 0xe32}, &(0x7f0000001580)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000015c0)={r4, 0x1d, "988a5c03453e2019b1812305e0b0da94564b70198927572c997a57d926"}, &(0x7f0000001600)=0x25)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet(0x2, 0x2, 0x4)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000001640)={0x2b, @remote, 0x4e23, 0x4, 'fo\x00', 0xc, 0x6, 0xe}, 0x2c)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001680)={<r7=>r6})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001700), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, r8, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x44000)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x70, r9, 0x10, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "23a175e9070ddc4f625aef1ee21f7fcc7ac0c06d49161332ff23b8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0800}, 0x40)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000001980)={r4, @in={{0x2, 0x4e22, @loopback}}, 0x102000, 0x2, 0xffffffff, 0xffd, 0x40, 0x84, 0xff}, 0x9c)
ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000001a80)={0x0, @ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, @llc={0x1a, 0x312, 0x13, 0x3, 0x2, 0xb, @local}, 0xb, 0x0, 0x0, 0x0, 0x3f2f, &(0x7f0000001a40)='ipvlan1\x00', 0x6, 0x3000000000, 0x99d})
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
sendmsg$802154_dgram(r11, &(0x7f0000001c80)={&(0x7f0000001b40)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14, &(0x7f0000001c40)={&(0x7f0000001b80)="f8b7c8eb0a54c20d9936863ab2b55360a28055f21c4836edb26211a285e1581c24cde9a82709d37126b1584a0ac10bfdf89ceabfbefafafc679b68f441e3acbb538c0f4facec93275a112448553dfce492b82f375c7209dbe12022bd9213626adb17457c91281f7ff0c98f1f4dc2e6d678b44238dc07b88cab4728c5e4998f12aaf479f9a89dafd341", 0x89}, 0x1, 0x0, 0x0, 0x80}, 0x2c004801)
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000001cc0)={0x9, 0xbc5, 0x1, 0x2, 0x3, [0xfffffffc, 0x0, 0x5, 0x8]})
bind$bt_hci(r7, &(0x7f0000001d00)={0x1f, 0x2, 0x1}, 0x6)
socket$tipc(0x1e, 0x2, 0x0)
sendto$inet6(r3, &(0x7f0000001d40)="baef9713a0f62978eeee87e33443fbca6029011c4c021628b590a57ed20aca2f54140bcfe9e3760d097c63db75a586e46bbdb11f4420dc610881e0616fc49848f2dd8190394c3074e9c97ec6523b19e1e3e369b527f7d6b5578060ac7048636454", 0x61, 0x0, &(0x7f0000001dc0)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}, 0x81}, 0x1c)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x44, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
ioctl$sock_inet_SIOCGIFPFLAGS(r11, 0x8935, &(0x7f0000001f40)={'batadv_slave_1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80))
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000001fc0)={r4, 0x5}, &(0x7f0000002000)=0x8)
setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000002040)={0x4, @broadcast, 0x4e23, 0x3, 'lblc\x00', 0x2b, 0xa8f4, 0x24}, 0x2c)

1.127507849s ago: executing program 7 (id=4007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000700000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028008000240000000010d000100434f4e4e4d41524b0000000014000300e4624777db9d97adbf2cd16d6fb1131f0900020073797a32000000000900010073797a30"], 0x98}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x44, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x44}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r1)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000001100)=ANY=[@ANYBLOB="d71ebf4d9df752e06c722d62020000", @ANYRES16=r4, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) (async)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd70000000000068bd9cf156f66a30c72a0000000e0001006e657464677673696d0000000f0002006e6574"], 0x34}}, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000180), &(0x7f00000006c0)}, 0x20) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff070000000000000000000085100000020000009500000000000000242e71b152a5cbe927d5e5cf72b4e3ff8115badff1f78a353348fe290bea45409b014225dc4707d46fb30f7bad2ef4a61c715f6e1c2749f6d3a41fe30880feb93b888a5252b70fd2ecf2d69f6a51d9ade9fdcd2739b66c3ed13b23f90301c107a24588"], &(0x7f0000000140)='GPL\x00', 0x4, 0x1c, &(0x7f00000001c0)=""/28, 0x41100, 0x48, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x2, 0x80, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000280)=[{0x3, 0x4, 0xa, 0x5}, {0x3, 0x3, 0x7, 0x9}, {0x0, 0x4, 0x1}], 0x10, 0x10000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r9)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff0000000108000700263a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r11, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40080)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r7)
sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r13, @ANYBLOB="02002bbd7000fcdbdf250400000008000500010000800c007f00000108000500960e00000000038008000100020000000800010001000000060007004e20000008000500e000000214000600ff0200000000000000000000000000010800010001000000060007000022000008000400020000006c000380060007004e2100001400020076657468305f766972745f776966690014000200766c616e300000000000000000000000140006002001000000000000000000000000000214000600ff010000000000000000000000000001060004000400000008000300"/230], 0xec}, 0x1, 0x0, 0x0, 0x20084001}, 0x4)
r14 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r14, 0x114, 0x7, &(0x7f0000000600)={@isdn={0x22, 0x8, 0x1, 0x5, 0x8}, {&(0x7f0000000580)=""/122, 0x7a}, &(0x7f0000000040), 0x25}, 0xa0)

1.041503621s ago: executing program 7 (id=4008):
connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = accept(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000140)=0x80)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@broadcast, @remote, 0x0, 0xff000000, 0x7, 0x2, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x94, 0x1, 0x4, 0x9, 0x6, 'macvlan1\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x4, 0xffffffff}}}, {{@arp={@multicast2, @empty, 0xffffff00, 0xff000000, 0x6, 0xd, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xf, 0x1, 0x8, 0x5, 0x200, 0x1f, 'veth1_macvtap\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x104}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000600)={@dev={0xac, 0x14, 0x14, 0x2d}, 0x1, 0x0, 0x80, 0x0, [{@multicast1}, {@initdev}, {@initdev}, {@empty}, {@initdev}, {@broadcast}, {@initdev}, {@broadcast}]}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$int_out(r4, 0x2a30, &(0x7f0000000700))
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000007c0)={@rand_addr, <r6=>0x0}, &(0x7f0000000800)=0x14)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xee, 0xee, 0x3, [@enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0x8, [{0xa, 0x8, 0x9}, {0x7, 0x3}, {0x9, 0x5, 0x1}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x4, 0x2}, @datasec={0xe, 0x9, 0x0, 0xf, 0x2, [{0x3, 0x7, 0x3}, {0x2, 0x10, 0xeb}, {0x3, 0x3, 0x7}, {0x2, 0xfa69, 0x349bca6d}, {0x3, 0x800, 0x8}, {0x3, 0x3, 0x9}, {0x2, 0x8, 0xfff}, {0x4, 0xec, 0x3}, {0x1, 0x9}], "ebc0"}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x5, 0x2}, @volatile={0xf}]}, {0x0, [0x61]}}, &(0x7f0000000980)=""/223, 0x10b, 0xdf, 0x1, 0x99}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x5, 0x0, r5, 0x4, '\x00', r6, r7, 0x5}, 0x50)
socket$netlink(0x10, 0x3, 0x15)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b40)='syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000b80)='devices.list\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001c40)={0xffffffffffffffff, &(0x7f0000000bc0)="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", &(0x7f0000001bc0)=@buf="84073560ee9deae75c438b63138df997e99fbd4924a5b795e15bc609b119746d18eab48fa090e863f477c0cb703543f94768855b874cabf7c07806d3f37446b7d75f15e68b8f3fa174c19e9410afce8043784d2bf5e3ad45bf8e8f1eec738f246b772f48aca142857e987feeaf45fd7abe061966", 0x2}, 0x20)
connect$llc(r1, &(0x7f0000001c80)={0x1a, 0xf, 0x9, 0x3, 0x9, 0x6, @remote}, 0x10)
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000001cc0)={'wg0\x00', {0x2, 0x0, @dev}})
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000001d00)={0x0, 0x100, 0x3, 0x2}, 0x10)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(r10, 0x0, 0x20, &(0x7f0000001d40)={@multicast2, @loopback}, &(0x7f0000001d80)=0xc)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001e40)=0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000001e80)={<r11=>0x0, 0x8, 0x9, 0x2, 0x7, 0x3}, &(0x7f0000001ec0)=0x14)
setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000001f00)={r11, 0xbae6}, 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001f40)={r11, 0x9, 0x7}, &(0x7f0000001f80)=0x8)
sendmsg$inet6(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001fc0)="7c8766a9f6a09f2f1ada1cceeaae02bb77018437494b7e66e3c413aee893e0ecaf91ea4e39b45a605e3514bac43ba313c37313f4e58d", 0x36}], 0x1}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000020c0)={'ip_vti0\x00', &(0x7f0000002080)={'syztnl1\x00', r6, 0x8, 0x20, 0x24, 0x9, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}}}})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000002100)={0x6, 'ip6erspan0\x00', {0x4}, 0xe747})

1.037539872s ago: executing program 8 (id=4009):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYRES8=r1, @ANYRES8=r0, @ANYRES64=r2, @ANYRES8=r0, @ANYRES16=r0, @ANYRES64=r0], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000340)=""/88, 0x58)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.036743455s ago: executing program 7 (id=4010):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x81, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0xe, 0x6, @multicast}, 0x14)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
socket$qrtr(0x2a, 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180))
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r12, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r5, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)
accept4(r2, 0x0, 0x0, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

943.810267ms ago: executing program 7 (id=4011):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 64)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r12, 0x0, 0x0, 0xff7, 0x0, &(0x7f0000001700)=""/4087, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)

883.348812ms ago: executing program 7 (id=4012):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0x5, @mcast2, 0x5}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x2)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_buf(r3, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="3bff45ce03e613180000000000000000000000000000009535be3325e68bc15f1f8dbb2275a168a3768788b4a574a4bbdb5384befd36a4e22913c1c7645d3e58e4d52bd366bba9d209ca3953724aa6c5757afaa45c701ab86d6a50f9c5f54ec6bd09b789969c8cb8d92360c7395d675b793333bee231ced21c1eaa8dc6fc163b195a94b8b17604fadf887c980abf6c142ed68ebf21047f78549fd466c7e926d8dafecffeb839e8bd33cd1cbaef0102c1a7cc1e"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r7)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={<r9=>0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040027bd7000ff0100000200000014000180040006802800068014000400fc020000000000000000000000000001060001000a040000060005004e2100000c00068008000700", @ANYRES32=0x0, @ANYBLOB="080003000200000008000400ff000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYRES8=r5, @ANYRESHEX=r8, @ANYRESDEC=r2, @ANYRESHEX=r5, @ANYRES64=r7, @ANYRESOCT], 0xffffffffffffff27)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES8=r1, @ANYRESOCT=r9, @ANYRES8=r6], 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x2000c041)
socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
socket$inet(0x2, 0x80001, 0x84)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r11, 0x0)

823.119055ms ago: executing program 9 (id=4013):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

773.690526ms ago: executing program 9 (id=4014):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
listen(r0, 0x5) (async)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000080)) (async, rerun: 64)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000080)=0x1, 0x4) (async)
getsockopt$inet6_int(r4, 0x29, 0x48, 0x0, &(0x7f00007d0000))
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x1) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x40}}, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1e, 0x1, 0x0)
listen(r8, 0xfff) (async)
shutdown(r8, 0x2) (async)
recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) (async)
sendmsg$alg(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="b212f1e995f0318f7558f7c1341ac1b779969a6941161ab4777ca3ed30bf3b4fe7", 0x21}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f00000003c0)="c2851c4ebab0adc80b1fc074f8186ce251f601c66f2ac753b0d29e980d0d2661d94dd0ff38b0089d81dbeadd2c8cc8f3003f493527fd9f85a6", 0x39}], 0x4, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18, 0x40}, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdb5be4b8df25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000ff7f00000b008700000006001100040000000800150009000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) (async)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r10, 0x72ec355d2dc6b6c1, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x8}}, {0x14, 0x2, [0x9, 0x7, 0x200, 0x6, 0x5, 0x6, 0x5fcd, 0x0]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000100)={'vcan0\x00', @local})

643.527489ms ago: executing program 9 (id=4015):
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000470000010000000000000400000000da"], 0x0, 0x52}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r1, &(0x7f0000008540)=[{{&(0x7f00000003c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)="f65dc06008d337ca6fd32a87b23b0ca6bdc47c2376b33da264e4f3b29a6f69e471ce8ce4915f96f45cd95d6d7bb25a5d1935311a22cb83a740933811571e33b9b12eb04e33857edd74046f37dad45aa05856f1258d8164077bbdaf9f9768c8d4527c20b152ca1eca5af8375e2bb69b4c12111578afd5e2d8fb76232243047f10c721d6ba7005e4cd404da032df95f8a7eeab95ed03fd9af6498db22cb911672bae0e39bfb06932d147d8b43a7cfdc1dfae9fcde4171ebac9c4afd0fd5ed9770e25436ac53bd76fade4df192d0c43d190d70142a51c331aca9493", 0xda}, {&(0x7f0000000500)="33ec018e56a7a77bf15e3505922de3cd9dde6edc4bf0dd8e213688043915ea3cc1d17c4f1c1d6f26282d3574cd75f0c404e9b908ed9d9a3821133abde4cd9cc088108de429a0e6c31b51405d92c31330d3fb2cd008081d73c34e057bce558ecd238d36b4e0d35bd8386a982dab9e1b8028d9923c24cce616fd6f3ca09e7dc11cc5d7e1b48640ef257c5ec4a7863467ced819e54fa728ad1aefa35ceff4c082e26df0c8e8d325a13d4576878e4f4de96a4d68b1953264afb998c70d6ce1", 0xbd}, {&(0x7f00000005c0)="cac90f5addb0e51e58e0132f88530531f3e048b8ec26a932b5a21d3952a87387cc387f0c3e049fad577f6c8603861ce7e9974e9cc7308f8a48815f1c357f3a36529c01427547bd1f221e915ea2cfe2bf9af0372544e91dc27d47ed9ec0ac95121b0e82d906d50e23b811c47689d8cbd13535f156ff1b24b342cc13bbf5f5cc8d89775234437544211980b3aa301dd0bd80b1b4cbf8f738f55c46b5c25ff6e6b1946e2479e476b9cca00f81bf37798f32b5cd73c1e68e5d985e840f0b8b2bff945902cfeffc84d4ba4dc7df10ca262ffc296b94a631aab6a3621ec2a99a38ced737bc8bb3dc8bb90cb0e3ff354c623c343dca0afd19ee476cc1edb61bc761", 0xfe}, {&(0x7f00000007c0)="0719e04580973538763c12dc18f7b6596b22664c023d6682605bd1df28ea6efac733c5d99e7974507ffd1671b0d32a23194a9022b6b3758f307ae2a925c92066fa5e707281a1946f16c1adbc675ecf2efa8aacd7634ababa18681f11ce89f326c69f455f039a86f54f8fc653fa2893d4fabd22a6ebed2cde81d573468736a549445a35c0c456fb22efb0f3d522010f5f1a4e5377e892783be31446f3e2", 0x9d}, {&(0x7f0000000880)="823f0a739f732953914b48ef43c38390024a706ac204da022813bbd421b65104311d8fdf55b485c594f8dd817cf0037e130bbd8c96bdf6cd8884c4dd67e6b80cb650be47176dd2f4a37c556cae68a1d3648d94bcf9ff7d5bb55fcd8bdb3060c1737fead174c67fd75a1a61b9e2e1cde130433eac2c9795a47417da8f9d35bd8d3a20a9a63b28b9c54607e10546f6c388df16daee86b86817ac6ef2d7f392411aec011db6c3f4f9eb17", 0xa9}, {&(0x7f0000000d40)}], 0x6, &(0x7f0000002d40)}}], 0x2, 0x40)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010004b04fcffffff000000007a000040", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100677265746170000004000280"], 0x34}}, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0)
shutdown(r6, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1d, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe5", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r8, 0x107, 0xb, 0x0, 0x0)
write(r7, &(0x7f0000000040)="05000000010000", 0x7)

533.459539ms ago: executing program 9 (id=4016):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000700)={'sit0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r8, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe)
r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r8])
recvmsg(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x3, 0x5a, 0x8, 0x9, 0x10000, 0xffffffffffffffff, 0x5, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000b000000000000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000851000000000000018110000c306004a4737a98609f26b9ed38f49686b69906d93ecec87132e7397d7bc5b75c90d2b79626568d16140fd441e8158b3ac3fd0bfefae144bb25a5866e753a9dc78439788a5d112c6e5c7c972002758b3759408db458fd160dfcaa774f2d0dc35859e2a971b2c380bd4512493d2486dbd2fea379a00acd82a5c056502ceb2c01d884c7eb9160ffc9c0d8ba1818e1431923f58a666565280860e9db64cfaf3b7c34cbbea25dc398154779f813d09d7da51d2d000"/259, @ANYRES32=r15, @ANYBLOB="0000000000000000b7020000000000008500000086000000186300001000000000000000e6000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0xae, 0xc9, &(0x7f00000004c0)=""/201, 0x41000, 0x24, '\x00', r12, 0x25, r10, 0x8, &(0x7f00000005c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x2, 0x1, 0xd}], 0x10, 0x7}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r12, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)

153.668301ms ago: executing program 8 (id=4017):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000020000061117100000000001800000000000000000000000000008595dd480000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

153.210856ms ago: executing program 8 (id=4018):
r0 = socket(0x10, 0x80002, 0x0) (async)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0}) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'veth0_to_team\x00'})
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r5], 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r6=>0x0}) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000100020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="2000d104", @ANYRES32=r6, @ANYBLOB="3fe8401f"], 0x38}}, 0x40084c0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000d000000000000000000000000009500000000000000e2483bccb69312d09cb8cf83ed82ba"], &(0x7f0000000180)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80a00, 0x0)
ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r10, 0x8b2a, &(0x7f0000000040))

78.872112ms ago: executing program 8 (id=4019):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket(0x8000000010, 0x2, 0x0) (async)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) (async)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async)
recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async)
write(r3, &(0x7f00000002c0)="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", 0xfc)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
pselect6(0x40, &(0x7f0000000240)={0x6, 0x5e6, 0xa, 0x6, 0xa88, 0x74f, 0xffffffffffffffff, 0x8000000000000001}, &(0x7f0000000280)={0x5, 0x3, 0xffff, 0xffffffff, 0x139, 0x2937, 0x3, 0x401}, &(0x7f0000000400)={0x2, 0x2, 0x2, 0x1, 0x3, 0x7, 0xfd, 0x1}, &(0x7f0000000440), 0x0) (async)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
r8 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004600002000000000000190780a010102ac1414aa07d9632119612fa2e8000003"], 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

76.85097ms ago: executing program 8 (id=4020):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x80, 0xee, 0x5}, [@NDA_LLADDR={0xa, 0x2, @random="aae6dd462c02"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "000000000000a5c3e0bf000000"}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x1a, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000100000000000000cf00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000003230000", @ANYRES32=r3, @ANYBLOB="00000000030000006c180600fcffffff18130000d6e4c2eb90cbb5b494da195d3382e81ae9f4e1f3edfd19288c67fd274ef93b0549d24832fae02caafd1a124862d0f634ab08fb7b96a56a4008640d64c997c8ed3afb7468d5729854c683485c33c27c819154d734e39789dc161027f076f2d1e6ba7ba16e779a7365c456bba02c0f80931b59e4d29477fbd532fb2717eafae25e186d4ca5bdc0b35cfd4b12ed0c9ddd2fc89f7c8241c9ff44afa7cb8ce854c697781e02a45303fc229f05e80492d51c51b5a6b242e273f856db", @ANYRES32=r0, @ANYBLOB="0000000000000000186900000600000000000000010000002db21800ffffffffc298fcff10000000180000000200000000000000ff7f0000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, &(0x7f00000002c0), 0x41000, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x10003, 0x9, 0x646a, 0x5e}, 0x10, 0x1aa37, 0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x5, 0xc, 0x8}, {0x0, 0x5, 0x5, 0xb}], 0x10, 0xdb}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a80)=@newsa={0x234, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@tmpl={0x144, 0x5, [{{@in=@broadcast, 0xfffff801, 0x3c}, 0xa, @in=@empty, 0x0, 0x2, 0x3, 0x80, 0x7f, 0x5, 0x6}, {{@in6=@loopback, 0x4d2, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x0, 0xf, 0x2, 0x3, 0x6}, {{@in=@private=0xa010100, 0x4d5, 0x3c}, 0xa, @in6=@local, 0x3504, 0x1, 0x2, 0x3, 0x6, 0x0, 0xffff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x2b}, 0xa, @in=@private=0xa010102, 0x3503, 0x0, 0x0, 0x1, 0x8, 0x7, 0x7}, {{@in=@multicast2, 0x4d2, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x5, 0x0, 0xfa, 0x2, 0x87a3, 0x6}]}]}, 0x234}}, 0x20000000)
r6 = accept4(r4, 0x0, 0x0, 0x80000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000002000010000000000000000000a202000000000000000000008000d000a00000014000200fc000000000000000000000000000000050016002f0000fe8000000000000000000000000000bb0000000000"], 0x54}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)
setsockopt(r7, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r6)
sendmsg$alg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20000001)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r9 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r10, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0086f2363b00fedb5f2512000000dbae94f44f3e39de657660f4bc606f08ed9e7d854e66dba14ab7f95cfade98afced71ea308ed10ba1de0b6397b97c793d45b251592da4a679d52913394c5d841ed39b45bde318338a9826120ad48a997318514acd43badaa1604827a8abfc0cf08f90c869e60faac87eaf3e1c55c8245dfe2df"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$alg(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56a52c34ebc1631b116f88bc7dc2c97a577284031c913339227f53553945bf818031e4200d5328d1e92a16869713ffdef988acbff08f5e20032d42677fac", 0xdc}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb930bde", 0x18}, {&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b398bc15b", 0x78}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e6716bb1d646bcca45485a11272d312c6bb1b36aea56f0e24830676bf6b733175cfcf1b19dd6a7a85f523f8e348f9128a4ef48f560a8e0a1b9ff73a04699e6645f0f670b25e3ae799f7a2ee4fd95e80e00189dc7d93e1e4cca9c8ce4ca7ee203c3155b3623ee24e995dd42e67d22f5eb7f766567a247a0f981782f525b126919b9b0adeadff07f29ce8c874", 0xe3}, {&(0x7f0000000640)="1dcbc85af9feec85cdaa90a1f6bb5eca3475c705496a92d182147efa66cf148382493989558a401839427396285c136c7fb1ebd274e08452a219d6f628ebb9408650139466606c4c0b1a2bfeff287f23d5151bdeb54e8d21e2d1916360a117fbcbcf6cfa61c24dde9f441b300f4e4d66698caa882bf762bfa566e76cbf8e4bd1ed199dacf2367d50ec09216127e9e5f168fb85d01333cba55a89ad021e0c79d79b9ccb75fb50059fcd959664abb5600ac38d", 0xb2}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0e4387aa3e2d356dcb1c5eb1d0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x90)

0s ago: executing program 7 (id=4021):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x174, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x6, 0x44f7, 0x5, 0x1, 0x2, 0x1003, 0x4}}, {0xc, 0x2, [0xf, 0x4, 0x7, 0x3]}}, {{0x1c, 0x1, {0x1, 0x3, 0x5, 0x0, 0x1, 0x5, 0x76e9, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x8, 0x4, 0x5b, 0x10, 0x0, 0x9, 0x5, 0x6}}, {0x10, 0x2, [0x4, 0x2, 0x6, 0xfff, 0x1000, 0x3]}}, {{0x1c, 0x1, {0x2, 0x4, 0x3124, 0x10001, 0x0, 0x400, 0x10, 0x9}}, {0x16, 0x2, [0x8, 0x5, 0x6, 0x2, 0x8, 0x2, 0x72, 0x1, 0x3]}}, {{0x1c, 0x1, {0x6, 0x9, 0x7, 0x7ff, 0x0, 0x1000, 0x1, 0x2}}, {0x8, 0x2, [0xfffc, 0x100]}}, {{0x1c, 0x1, {0x6, 0x7, 0x7fff, 0x6, 0x1, 0xfffffff9, 0x5c, 0x3}}, {0xa, 0x2, [0x40, 0x4, 0x3]}}, {{0x1c, 0x1, {0xe, 0xf9, 0x7a, 0x1, 0x2, 0x8000, 0xffffffff, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x9, 0xe3, 0x9, 0x0, 0x1, 0x0, 0x9, 0x7}}, {0x12, 0x2, [0x8ab8, 0x81, 0x6, 0x98c, 0x6c8, 0x3, 0x7]}}]}]}, 0x174}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
socket$inet_sctp(0x2, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r11, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)

kernel console output (not intermixed with test programs):

ng bearer <eth:syzkaller0>
[  328.434595][T17889] tipc: Resetting bearer <eth:syzkaller0>
[  328.449618][T17889] tipc: Disabling bearer <eth:syzkaller0>
[  328.477302][ T5853] Bluetooth: hci2: command tx timeout
[  328.490103][T17897] lo speed is unknown, defaulting to 1000
[  328.532231][T17898] netlink: 'syz.2.2885': attribute type 12 has an invalid length.
[  328.534764][T17898] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2885'.
[  328.713576][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'.
[  329.607222][T17932] netlink: 'syz.0.2893': attribute type 1 has an invalid length.
[  329.617067][T17932] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2893'.
[  330.334735][T17971] IPVS: Unknown mcast interface: vetN1_macvtap
[  330.445167][T17977] erspan0: entered promiscuous mode
[  330.555911][   T55] Bluetooth: hci2: command tx timeout
[  330.639962][T17986] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.643129][T17986] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.739365][T17986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.752938][T17986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.920526][T17991] hsr_slave_0: left promiscuous mode
[  330.923027][T17991] hsr_slave_1: left promiscuous mode
[  330.933992][ T5879] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.938196][ T5879] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.941753][ T5879] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.945166][ T5879] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.642672][T18015] netlink: 'syz.2.2919': attribute type 10 has an invalid length.
[  331.884733][T18022] syzkaller1: entered promiscuous mode
[  331.888780][T18022] syzkaller1: entered allmulticast mode
[  332.091114][T18033] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.094769][T18033] mac80211_hwsim hwsim137 syzkaller0: entered promiscuous mode
[  332.098858][T18033] mac80211_hwsim hwsim137 syzkaller0: entered allmulticast mode
[  332.635922][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  332.838794][T18061] netlink: 'syz.2.2931': attribute type 10 has an invalid length.
[  332.857797][T18063] C: renamed from team_slave_0
[  332.862047][T18063] netlink: 'syz.3.2932': attribute type 4 has an invalid length.
[  332.864951][T18063] __nla_validate_parse: 10 callbacks suppressed
[  332.864961][T18063] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2932'.
[  332.870324][T18063] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  332.923257][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'.
[  332.952658][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'.
[  332.993299][T18073] TCP: TCP_TX_DELAY enabled
[  333.010242][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'.
[  333.083105][T18080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2936'.
[  333.088989][T18080] netlink: 'syz.2.2936': attribute type 11 has an invalid length.
[  333.092365][T18080] netlink: 'syz.2.2936': attribute type 4 has an invalid length.
[  333.095985][T18080] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2936'.
[  333.100881][T18080] netlink: 'syz.2.2936': attribute type 23 has an invalid length.
[  333.323102][T18093] mac80211_hwsim hwsim264 wlan0: entered promiscuous mode
[  333.327727][T18093] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  333.395033][T18099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2943'.
[  333.417638][T18099] netlink: 'syz.3.2943': attribute type 10 has an invalid length.
[  333.421233][T18099] bond0: (slave wlan1): Opening slave failed
[  333.454295][T18106] netlink: 'syz.0.2946': attribute type 10 has an invalid length.
[  333.503041][T18108] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  333.620841][T18126] IPVS: length: 209 != 24
[  333.761773][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'.
[  333.888962][T18140] netlink: 'syz.2.2956': attribute type 21 has an invalid length.
[  333.891846][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2956'.
[  334.124378][T18149] netlink: 'syz.2.2959': attribute type 10 has an invalid length.
[  334.172647][T18151] netlink: 'syz.2.2960': attribute type 10 has an invalid length.
[  334.297812][T18156] unknown channel width for channel at 909000KHz?
[  334.313771][T18156] pim6reg1: entered promiscuous mode
[  334.317346][T18156] pim6reg1: entered allmulticast mode
[  334.627034][T18163] tipc: Resetting bearer <eth:syzkaller0>
[  334.715493][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  335.228600][T18191] netlink: 'syz.2.2971': attribute type 10 has an invalid length.
[  335.233386][T18191] mac80211_hwsim hwsim266 wlan1: entered allmulticast mode
[  335.237606][T18191] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2971'.
[  335.513447][T18216] IPv6: NLM_F_REPLACE set, but no existing node found!
[  335.652199][T18229] mac80211_hwsim hwsim266 wlan1: left allmulticast mode
[  336.029742][T18252] bond0: (slave dummy0): Releasing backup interface
[  336.249981][T18267] lo speed is unknown, defaulting to 1000
[  336.795602][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  337.331807][T18308] mac80211_hwsim hwsim262 wlan1: left allmulticast mode
[  337.347807][T18308] mac80211_hwsim hwsim262 wlan1: entered allmulticast mode
[  338.418982][T18336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  338.439184][T18336] mac80211_hwsim hwsim264 wlan0: left promiscuous mode
[  338.620072][T18349] pimreg: entered allmulticast mode
[  339.309360][T18380] validate_nla: 5 callbacks suppressed
[  339.309377][T18380] netlink: 'syz.0.3016': attribute type 16 has an invalid length.
[  339.314028][T18380] netlink: 'syz.0.3016': attribute type 17 has an invalid length.
[  339.317714][T18380] __nla_validate_parse: 12 callbacks suppressed
[  339.317723][T18380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'.
[  339.608480][T18394] netlink: 'syz.2.3020': attribute type 10 has an invalid length.
[  339.671673][T18396] netlink: 'syz.2.3021': attribute type 29 has an invalid length.
[  339.675041][T18396] netlink: 'syz.2.3021': attribute type 29 has an invalid length.
[  339.680607][T18396] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3021'.
[  340.060933][T18417] netlink: 'syz.2.3027': attribute type 23 has an invalid length.
[  340.142104][T18422] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  340.144935][T18422] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  340.171534][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'.
[  340.228828][T18427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3029'.
[  340.228829][T18423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3029'.
[  340.244684][T18423] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3029'.
[  341.195477][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  341.518730][T18465] netlink: 'syz.0.3040': attribute type 10 has an invalid length.
[  341.530718][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'.
[  341.536596][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'.
[  341.540336][T18465] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3040'.
[  341.552457][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'.
[  341.769174][T18483] mac80211_hwsim hwsim262 wlan1: left allmulticast mode
[  341.887760][T18498] netlink: 'syz.0.3048': attribute type 16 has an invalid length.
[  341.890277][T18498] netlink: 'syz.0.3048': attribute type 17 has an invalid length.
[  341.940218][T18499] mac80211_hwsim hwsim265 syzkaller0: entered allmulticast mode
[  343.180501][T18553] netlink: 'syz.2.3065': attribute type 10 has an invalid length.
[  343.287815][T18559] team0: Cannot enslave team device to itself
[  343.337220][T18562] IPv6: NLM_F_REPLACE set, but no existing node found!
[  344.467052][T18684] __nla_validate_parse: 13 callbacks suppressed
[  344.467072][T18684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3081'.
[  344.800179][T18722] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  345.010029][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'.
[  345.031936][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'.
[  345.364193][T18753] validate_nla: 3 callbacks suppressed
[  345.364207][T18753] netlink: 'syz.3.3094': attribute type 8 has an invalid length.
[  345.370674][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3094'.
[  345.377896][T18753] bond0: entered promiscuous mode
[  345.379789][T18753] bond_slave_0: entered promiscuous mode
[  345.382023][T18753] bond_slave_1: entered promiscuous mode
[  345.388603][T18753] bond0: left promiscuous mode
[  345.391017][T18753] bond_slave_0: left promiscuous mode
[  345.393703][T18753] bond_slave_1: left promiscuous mode
[  345.397688][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3092'.
[  345.415888][T18754] netlink: 'syz.3.3094': attribute type 8 has an invalid length.
[  345.419176][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3094'.
[  345.430256][T18754] bond0: entered promiscuous mode
[  345.432521][T18754] bond_slave_0: entered promiscuous mode
[  345.435183][T18754] bond_slave_1: entered promiscuous mode
[  345.439329][T18754] bond0: left promiscuous mode
[  345.441200][T18754] bond_slave_0: left promiscuous mode
[  345.443446][T18754] bond_slave_1: left promiscuous mode
[  345.474307][T18753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.484099][T18753] mac80211_hwsim hwsim265 syzkaller0: entered promiscuous mode
[  345.495787][T18753] tipc: Resetting bearer <eth:syzkaller0>
[  345.838657][T18770] lo speed is unknown, defaulting to 1000
[  345.929663][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3098'.
[  346.325137][T18786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3101'.
[  346.414039][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'.
[  346.428516][T18786] mac80211_hwsim hwsim80 wlan0: left promiscuous mode
[  346.433766][T18786] mac80211_hwsim hwsim137 syzkaller0: left promiscuous mode
[  346.437005][T18786] mac80211_hwsim hwsim137 syzkaller0: left allmulticast mode
[  346.475653][ T5886] tipc: Node number set to 1962412670
[  346.733873][T18799] netlink: 'syz.2.3104': attribute type 9 has an invalid length.
[  347.024241][T18805] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  347.146280][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'.
[  347.404566][T18835] lo speed is unknown, defaulting to 1000
[  347.430173][T18836] netlink: 'syz.2.3115': attribute type 10 has an invalid length.
[  347.455190][T18836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.460191][T18836] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  347.509442][T18848] policy can only be matched on NF_INET_PRE_ROUTING
[  347.509465][T18848] unable to load match
[  348.404311][T18871] Bluetooth: MGMT ver 1.23
[  348.833167][T18882] bridge_slave_0: left allmulticast mode
[  348.837384][T18882] bridge_slave_0: left promiscuous mode
[  348.839705][T18882] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.844551][T18882] bridge_slave_1: left allmulticast mode
[  348.848754][T18882] bridge_slave_1: left promiscuous mode
[  348.850721][T18882] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.857205][T18882] bond0: (slave bond_slave_0): Releasing backup interface
[  348.861514][T18882] bond0: (slave bond_slave_1): Releasing backup interface
[  348.868116][T18882] team0: Port device C removed
[  348.871189][T18882] team0: Port device team_slave_1 removed
[  348.873505][T18882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.878552][T18882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.887842][T18882] netlink: 'syz.3.3126': attribute type 10 has an invalid length.
[  348.892170][T18882] bond0: (slave wlan1): Opening slave failed
[  348.989733][    T9] IPVS: starting estimator thread 0...
[  349.075500][T18887] IPVS: using max 46 ests per chain, 110400 per kthread
[  349.198685][T18894] mac80211_hwsim hwsim265 syzkaller0: left promiscuous mode
[  349.201935][T18894] mac80211_hwsim hwsim265 syzkaller0: left allmulticast mode
[  349.400834][T18902] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  349.403905][T18902] CPU: 0 UID: 0 PID: 18902 Comm: syz.3.3133 Not tainted syzkaller #0 PREEMPT(full) 
[  349.403926][T18902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  349.403935][T18902] Call Trace:
[  349.403943][T18902]  <TASK>
[  349.403951][T18902]  dump_stack_lvl+0x189/0x250
[  349.403979][T18902]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.403994][T18902]  ? __pfx__printk+0x10/0x10
[  349.404014][T18902]  ? kernfs_path_from_node+0x2f/0x290
[  349.404031][T18902]  ? kernfs_path_from_node+0x250/0x290
[  349.404046][T18902]  ? kernfs_path_from_node+0x2f/0x290
[  349.404065][T18902]  sysfs_warn_dup+0x8e/0xa0
[  349.404079][T18902]  sysfs_do_create_link_sd+0xc0/0x110
[  349.404099][T18902]  device_add_class_symlinks+0x1cf/0x240
[  349.404120][T18902]  device_add+0x475/0xb50
[  349.404138][T18902]  wiphy_register+0x1c81/0x2aa0
[  349.404176][T18902]  ? __pfx_wiphy_register+0x10/0x10
[  349.404196][T18902]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  349.404218][T18902]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  349.404238][T18902]  ieee80211_register_hw+0x3442/0x40a0
[  349.404294][T18902]  ? ieee80211_register_hw+0x1411/0x40a0
[  349.404318][T18902]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  349.404337][T18902]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  349.404365][T18902]  ? __hrtimer_setup+0x187/0x210
[  349.404382][T18902]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  349.404400][T18902]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  349.404445][T18902]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  349.404464][T18902]  ? trace_kmalloc+0x1f/0xd0
[  349.404484][T18902]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  349.404503][T18902]  ? __x64_sys_sendmsg+0x19b/0x260
[  349.404518][T18902]  ? kstrndup+0xbf/0x160
[  349.404549][T18902]  hwsim_new_radio_nl+0xea4/0x1b10
[  349.404574][T18902]  ? __pfx___nla_validate_parse+0x10/0x10
[  349.404608][T18902]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  349.404634][T18902]  ? rcu_is_watching+0x15/0xb0
[  349.404661][T18902]  ? __nla_parse+0x40/0x60
[  349.404683][T18902]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  349.404707][T18902]  genl_family_rcv_msg_doit+0x215/0x300
[  349.404730][T18902]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  349.404764][T18902]  ? bpf_lsm_capable+0x9/0x20
[  349.404783][T18902]  ? security_capable+0x7e/0x2e0
[  349.404805][T18902]  genl_rcv_msg+0x60e/0x790
[  349.404822][T18902]  ? __pfx_genl_rcv_msg+0x10/0x10
[  349.404831][T18902]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  349.404857][T18902]  netlink_rcv_skb+0x208/0x470
[  349.404874][T18902]  ? __lock_acquire+0xab9/0xd20
[  349.404888][T18902]  ? __pfx_genl_rcv_msg+0x10/0x10
[  349.404900][T18902]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  349.404930][T18902]  ? down_read+0x1ad/0x2e0
[  349.404944][T18902]  genl_rcv+0x28/0x40
[  349.404954][T18902]  netlink_unicast+0x82f/0x9e0
[  349.404975][T18902]  ? __pfx_netlink_unicast+0x10/0x10
[  349.404991][T18902]  ? netlink_sendmsg+0x642/0xb30
[  349.405007][T18902]  ? skb_put+0x11b/0x210
[  349.405030][T18902]  netlink_sendmsg+0x805/0xb30
[  349.405056][T18902]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.405078][T18902]  ? aa_sock_msg_perm+0xf1/0x1d0
[  349.405097][T18902]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  349.405112][T18902]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.405132][T18902]  __sock_sendmsg+0x21c/0x270
[  349.405153][T18902]  ____sys_sendmsg+0x505/0x830
[  349.405172][T18902]  ? __pfx_____sys_sendmsg+0x10/0x10
[  349.405195][T18902]  ? import_iovec+0x74/0xa0
[  349.405213][T18902]  ___sys_sendmsg+0x21f/0x2a0
[  349.405229][T18902]  ? __pfx____sys_sendmsg+0x10/0x10
[  349.405319][T18902]  ? __fget_files+0x2a/0x420
[  349.405337][T18902]  ? __fget_files+0x3a0/0x420
[  349.405360][T18902]  __x64_sys_sendmsg+0x19b/0x260
[  349.405377][T18902]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  349.405407][T18902]  ? do_syscall_64+0xbe/0xfa0
[  349.405431][T18902]  do_syscall_64+0xfa/0xfa0
[  349.405450][T18902]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.405470][T18902]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.405484][T18902]  ? exc_page_fault+0xab/0x100
[  349.405505][T18902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.405517][T18902] RIP: 0033:0x7f26fb58eba9
[  349.405531][T18902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.405544][T18902] RSP: 002b:00007f26fc356038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  349.405560][T18902] RAX: ffffffffffffffda RBX: 00007f26fb7d5fa0 RCX: 00007f26fb58eba9
[  349.405571][T18902] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  349.405579][T18902] RBP: 00007f26fb611e19 R08: 0000000000000000 R09: 0000000000000000
[  349.405587][T18902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  349.405595][T18902] R13: 00007f26fb7d6038 R14: 00007f26fb7d5fa0 R15: 00007fffa20ffc58
[  349.405620][T18902]  </TASK>
[  349.612769][T18907] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  349.619015][T18907] mac80211_hwsim hwsim137 syzkaller0: entered promiscuous mode
[  349.622331][T18907] mac80211_hwsim hwsim137 syzkaller0: entered allmulticast mode
[  349.648098][T18907] bridge: RTM_NEWNEIGH with invalid ether address
[  349.744248][T18918] netlink: 'syz.0.3137': attribute type 2 has an invalid length.
[  349.749832][T18920] netlink: 'syz.0.3137': attribute type 2 has an invalid length.
[  349.847285][T18928] bond0: option all_slaves_active: invalid value (3)
[  350.043032][T18933] __nla_validate_parse: 9 callbacks suppressed
[  350.043045][T18933] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3142'.
[  350.061578][T18933] batadv1: entered promiscuous mode
[  350.063613][T18933] batadv1: entered allmulticast mode
[  350.356216][T18946] netlink: 'syz.0.3145': attribute type 9 has an invalid length.
[  350.359496][T18946] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3145'.
[  350.613387][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3146'.
[  350.618916][T18948] mac80211_hwsim hwsim264 wlan0: entered promiscuous mode
[  350.621588][T18948] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  351.629350][T18969] tc_dump_action: action bad kind
[  351.867720][T18981] netlink: 'syz.3.3153': attribute type 10 has an invalid length.
[  351.878189][T18981] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  351.941911][T18990] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3156'.
[  351.947433][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3156'.
[  352.037329][T18996] bond0: (slave wlan1): Releasing backup interface
[  352.050639][T18999] netlink: 'syz.0.3160': attribute type 10 has an invalid length.
[  352.059745][T18999] mac80211_hwsim hwsim137 syzkaller0: left promiscuous mode
[  352.062750][T18999] mac80211_hwsim hwsim137 syzkaller0: left allmulticast mode
[  352.066626][T18999] tipc: Resetting bearer <eth:syzkaller0>
[  352.090177][T18996] netlink: 'syz.3.3159': attribute type 10 has an invalid length.
[  352.097736][T18996] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  352.233747][T19012] tipc: Resetting bearer <eth:syzkaller0>
[  353.148687][T19025] netlink: 'syz.3.3167': attribute type 16 has an invalid length.
[  353.151139][T19025] netlink: 'syz.3.3167': attribute type 17 has an invalid length.
[  353.154515][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3167'.
[  353.161871][T19025] IPv6: NLM_F_REPLACE set, but no existing node found!
[  353.232466][T19031] netlink: 'syz.0.3170': attribute type 11 has an invalid length.
[  353.744651][T19046] sctp: [Deprecated]: syz.0.3174 (pid 19046) Use of struct sctp_assoc_value in delayed_ack socket option.
[  353.744651][T19046] Use struct sctp_sack_info instead
[  353.752569][T19046] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3174'.
[  353.878613][T19056] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  353.939007][T19061] netlink: 'syz.0.3177': attribute type 9 has an invalid length.
[  354.155065][T19078] netlink: 'syz.0.3182': attribute type 10 has an invalid length.
[  354.191919][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3183'.
[  354.339207][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'.
[  354.392777][T19096] netlink: 'syz.0.3188': attribute type 10 has an invalid length.
[  354.407791][T19096] ipvlan0: entered promiscuous mode
[  354.410262][T19096] ipvlan0: entered allmulticast mode
[  354.412458][T19096] @: entered allmulticast mode
[  354.443384][T19100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3190'.
[  354.446309][T19100] tipc: Invalid UDP bearer configuration
[  354.446337][T19100] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  354.491540][T19102] netlink: 'syz.3.3191': attribute type 10 has an invalid length.
[  354.637663][T19108] batadv1: entered promiscuous mode
[  354.639842][T19108] batadv1: entered allmulticast mode
[  354.688385][T19109] unsupported nlmsg_type 40
[  354.817374][T19115] bond0: (slave wlan1): Releasing backup interface
[  355.097491][T19129] __nla_validate_parse: 2 callbacks suppressed
[  355.097505][T19129] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3201'.
[  355.107422][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3201'.
[  355.386670][T19148] netlink: 'syz.0.3204': attribute type 16 has an invalid length.
[  355.471484][T19151] lo speed is unknown, defaulting to 1000
[  355.509368][T19154] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3206'.
[  356.230474][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'.
[  356.633203][T19176] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  356.722272][T19181] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  356.726421][T19181] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  356.914108][   T33] audit: type=1800 audit(1758173143.980:6): pid=19186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3213" name="memory.events" dev="tmpfs" ino=4620 res=0 errno=0
[  357.589918][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'.
[  357.589921][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'.
[  357.601969][T19191] validate_nla: 4 callbacks suppressed
[  357.601983][T19191] netlink: 'syz.3.3215': attribute type 10 has an invalid length.
[  357.608317][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3215'.
[  357.896902][T19206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3220'.
[  358.067382][T19225] netlink: 'syz.0.3224': attribute type 10 has an invalid length.
[  358.331457][T19230] netlink: 'syz.0.3227': attribute type 16 has an invalid length.
[  358.334468][T19230] netlink: 'syz.0.3227': attribute type 17 has an invalid length.
[  358.339137][T19230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'.
[  359.009578][T19236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3229'.
[  359.016715][T19236] netlink: 'syz.3.3229': attribute type 10 has an invalid length.
[  359.208147][T19249] netlink: 'syz.0.3231': attribute type 9 has an invalid length.
[  359.270928][T19254] netlink: 'syz.3.3233': attribute type 10 has an invalid length.
[  359.286091][T19248] delete_channel: no stack
[  359.579777][T19280] unsupported nla_type 52263
[  359.594247][T19280] netlink: 'syz.0.3242': attribute type 12 has an invalid length.
[  360.574369][T19300] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.578270][T19300] mac80211_hwsim hwsim137 syzkaller0: entered promiscuous mode
[  360.581490][T19300] mac80211_hwsim hwsim137 syzkaller0: entered allmulticast mode
[  360.585504][T19300] tipc: Resetting bearer <eth:syzkaller0>
[  360.621783][T19306] netlink: 'syz.0.3249': attribute type 10 has an invalid length.
[  360.664498][T19298] netlink: 'syz.3.3246': attribute type 16 has an invalid length.
[  360.676582][T19298] __nla_validate_parse: 5 callbacks suppressed
[  360.676606][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3246'.
[  360.745716][T19313] lo speed is unknown, defaulting to 1000
[  362.622786][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'.
[  362.628011][T19341] mac80211_hwsim hwsim264 wlan0: left promiscuous mode
[  362.668505][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.672686][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.675696][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.678856][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.681557][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.691286][T19341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'.
[  362.721697][T19346] lo speed is unknown, defaulting to 1000
[  362.920627][T19346] chnl_net:caif_netlink_parms(): no params data found
[  362.975238][T19346] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.977943][T19346] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.980297][T19346] bridge_slave_0: entered allmulticast mode
[  362.983644][T19346] bridge_slave_0: entered promiscuous mode
[  362.988183][T19346] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.990972][T19346] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.993795][T19346] bridge_slave_1: entered allmulticast mode
[  362.997228][T19346] bridge_slave_1: entered promiscuous mode
[  363.021238][T19346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.027161][T19346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.051081][T19346] team0: Port device team_slave_0 added
[  363.054847][T19346] team0: Port device team_slave_1 added
[  363.077472][T19346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.079760][T19346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.090342][T19346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.095997][T19346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.098328][T19346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.107103][T19346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.137962][T19346] hsr_slave_0: entered promiscuous mode
[  363.140411][T19346] hsr_slave_1: entered promiscuous mode
[  363.279054][T19346] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  363.286508][T19346] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  363.291795][T19346] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  363.297984][T19346] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  363.331219][T19346] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.334072][T19346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.337132][T19346] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.339912][T19346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.398235][T19346] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.410628][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.413822][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.424130][T19346] 8021q: adding VLAN 0 to HW filter on device team0
[  363.434553][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.437335][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.448177][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.450795][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.461537][T19371] validate_nla: 2 callbacks suppressed
[  363.461549][T19371] netlink: 'syz.3.3263': attribute type 10 has an invalid length.
[  363.467456][T19370] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3263'.
[  363.625621][T19381] tipc: Resetting bearer <eth:syzkaller0>
[  363.668209][T19346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.821993][T19346] veth0_vlan: entered promiscuous mode
[  363.841563][T19346] veth1_vlan: entered promiscuous mode
[  363.873420][T19346] veth0_macvtap: entered promiscuous mode
[  363.879204][T19346] veth1_macvtap: entered promiscuous mode
[  363.893039][T19346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.903003][T19346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.911699][T19374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.919294][T19374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.922212][T19374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.014001][ T8984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.019623][ T8984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.056300][T19374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.075480][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.077938][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.119273][T19396] netlink: 'syz.4.3260': attribute type 23 has an invalid length.
[  364.199962][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3267'.
[  364.218365][T19398] mac80211_hwsim hwsim292 wlan0: entered promiscuous mode
[  364.221905][T19398] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  364.532660][T19406] veth1_macvtap: left promiscuous mode
[  364.534775][T19406] macsec0: entered allmulticast mode
[  364.573919][T19406] lo speed is unknown, defaulting to 1000
[  364.629207][T19409] netlink: 'syz.4.3270': attribute type 12 has an invalid length.
[  364.646781][T19409] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3270'.
[  364.716355][ T5853] Bluetooth: hci4: command tx timeout
[  364.903814][T19419] netlink: 'syz.4.3273': attribute type 10 has an invalid length.
[  364.923779][T19419] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  365.100124][T19427] bridge_slave_0: left allmulticast mode
[  365.102588][T19427] bridge_slave_0: left promiscuous mode
[  365.105369][T19427] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.118039][T19427] bridge_slave_1: left allmulticast mode
[  365.120353][T19427] bridge_slave_1: left promiscuous mode
[  365.122893][T19427] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.134234][T19427] bond0: (slave bond_slave_0): Releasing backup interface
[  365.142913][T19427] bond0: (slave bond_slave_1): Releasing backup interface
[  365.163372][T19427] team0: Port device team_slave_0 removed
[  365.174792][T19427] team0: Port device team_slave_1 removed
[  365.178695][T19427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.181649][T19427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.187704][T19427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.190671][T19427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.197282][T19430] netlink: 'syz.4.3277': attribute type 10 has an invalid length.
[  365.202142][T19427] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  365.242493][T19427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3277'.
[  365.247895][T19427] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  365.251706][T19427] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  365.963646][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3279'.
[  366.024066][T19439] netlink: 'syz.4.3279': attribute type 16 has an invalid length.
[  366.027694][T19439] netlink: 'syz.4.3279': attribute type 17 has an invalid length.
[  366.189338][ T5879] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.193083][ T5879] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.198547][ T5879] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.201355][ T5879] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.738904][T19444] netlink: 'syz.3.3281': attribute type 10 has an invalid length.
[  366.746654][T19444] tun0: tun_chr_ioctl cmd 1074025675
[  366.748601][T19444] tun0: persist enabled
[  366.750539][T19444] tun0: tun_chr_ioctl cmd 1074025675
[  366.752255][T19444] tun0: persist disabled
[  366.797121][ T5853] Bluetooth: hci4: command tx timeout
[  366.827145][T19446] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  366.830751][T19446] CPU: 1 UID: 0 PID: 19446 Comm: syz.4.3282 Not tainted syzkaller #0 PREEMPT(full) 
[  366.830763][T19446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  366.830769][T19446] Call Trace:
[  366.830774][T19446]  <TASK>
[  366.830779][T19446]  dump_stack_lvl+0x189/0x250
[  366.830796][T19446]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.830826][T19446]  ? __pfx__printk+0x10/0x10
[  366.830841][T19446]  ? kernfs_path_from_node+0x2f/0x290
[  366.830852][T19446]  ? kernfs_path_from_node+0x250/0x290
[  366.830861][T19446]  ? kernfs_path_from_node+0x2f/0x290
[  366.830872][T19446]  sysfs_warn_dup+0x8e/0xa0
[  366.830882][T19446]  sysfs_do_create_link_sd+0xc0/0x110
[  366.830893][T19446]  device_add_class_symlinks+0x1cf/0x240
[  366.830906][T19446]  device_add+0x475/0xb50
[  366.830917][T19446]  wiphy_register+0x1c81/0x2aa0
[  366.830938][T19446]  ? __pfx_wiphy_register+0x10/0x10
[  366.830949][T19446]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  366.830962][T19446]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  366.830973][T19446]  ieee80211_register_hw+0x3442/0x40a0
[  366.830989][T19446]  ? ieee80211_register_hw+0x1411/0x40a0
[  366.831001][T19446]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  366.831011][T19446]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  366.831027][T19446]  ? __hrtimer_setup+0x187/0x210
[  366.831039][T19446]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  366.831063][T19446]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  366.831090][T19446]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  366.831100][T19446]  ? trace_kmalloc+0x1f/0xd0
[  366.831111][T19446]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  366.831121][T19446]  ? __x64_sys_sendmsg+0x19b/0x260
[  366.831129][T19446]  ? kstrndup+0xbf/0x160
[  366.831144][T19446]  hwsim_new_radio_nl+0xea4/0x1b10
[  366.831156][T19446]  ? __pfx___nla_validate_parse+0x10/0x10
[  366.831175][T19446]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  366.831189][T19446]  ? rcu_is_watching+0x15/0xb0
[  366.831204][T19446]  ? __nla_parse+0x40/0x60
[  366.831215][T19446]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  366.831229][T19446]  genl_family_rcv_msg_doit+0x215/0x300
[  366.831246][T19446]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  366.831260][T19446]  ? bpf_lsm_capable+0x9/0x20
[  366.831271][T19446]  ? security_capable+0x7e/0x2e0
[  366.831285][T19446]  genl_rcv_msg+0x60e/0x790
[  366.831297][T19446]  ? __pfx_genl_rcv_msg+0x10/0x10
[  366.831305][T19446]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  366.831323][T19446]  netlink_rcv_skb+0x208/0x470
[  366.831333][T19446]  ? __lock_acquire+0xab9/0xd20
[  366.831345][T19446]  ? __pfx_genl_rcv_msg+0x10/0x10
[  366.831354][T19446]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  366.831373][T19446]  ? down_read+0x1ad/0x2e0
[  366.831382][T19446]  genl_rcv+0x28/0x40
[  366.831389][T19446]  netlink_unicast+0x82f/0x9e0
[  366.831403][T19446]  ? __pfx_netlink_unicast+0x10/0x10
[  366.831414][T19446]  ? netlink_sendmsg+0x642/0xb30
[  366.831423][T19446]  ? skb_put+0x11b/0x210
[  366.831437][T19446]  netlink_sendmsg+0x805/0xb30
[  366.831453][T19446]  ? __pfx_netlink_sendmsg+0x10/0x10
[  366.831465][T19446]  ? aa_sock_msg_perm+0xf1/0x1d0
[  366.831477][T19446]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  366.831485][T19446]  ? __pfx_netlink_sendmsg+0x10/0x10
[  366.831495][T19446]  __sock_sendmsg+0x21c/0x270
[  366.831507][T19446]  ____sys_sendmsg+0x505/0x830
[  366.831517][T19446]  ? __pfx_____sys_sendmsg+0x10/0x10
[  366.831529][T19446]  ? import_iovec+0x74/0xa0
[  366.831539][T19446]  ___sys_sendmsg+0x21f/0x2a0
[  366.831547][T19446]  ? __pfx____sys_sendmsg+0x10/0x10
[  366.831572][T19446]  ? __fget_files+0x2a/0x420
[  366.831581][T19446]  ? __fget_files+0x3a0/0x420
[  366.831594][T19446]  __x64_sys_sendmsg+0x19b/0x260
[  366.831603][T19446]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  366.831619][T19446]  ? do_syscall_64+0xbe/0xfa0
[  366.831632][T19446]  do_syscall_64+0xfa/0xfa0
[  366.831642][T19446]  ? lockdep_hardirqs_on+0x9c/0x150
[  366.831653][T19446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.831660][T19446]  ? exc_page_fault+0xab/0x100
[  366.831672][T19446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.831679][T19446] RIP: 0033:0x7f604018eba9
[  366.831688][T19446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.831695][T19446] RSP: 002b:00007f60410a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  366.831705][T19446] RAX: ffffffffffffffda RBX: 00007f60403d5fa0 RCX: 00007f604018eba9
[  366.831710][T19446] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  366.831715][T19446] RBP: 00007f6040211e19 R08: 0000000000000000 R09: 0000000000000000
[  366.831720][T19446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  366.831724][T19446] R13: 00007f60403d6038 R14: 00007f60403d5fa0 R15: 00007ffd53849db8
[  366.831739][T19446]  </TASK>
[  366.887459][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3282'.
[  366.939925][T19452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3282'.
[  367.054332][T19458] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  367.093898][T19458] syzkaller1: entered promiscuous mode
[  367.100204][T19458] syzkaller1: entered allmulticast mode
[  367.104605][T19458] netlink: 'syz.4.3285': attribute type 10 has an invalid length.
[  367.173303][T19465] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3287'.
[  367.259933][T19471] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3287'.
[  367.350532][T19474] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3289'.
[  367.360551][T19474] batadv1: entered promiscuous mode
[  367.363026][T19474] batadv1: entered allmulticast mode
[  368.618716][T19512] netlink: 'syz.4.3298': attribute type 12 has an invalid length.
[  368.749843][T19517] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3299'.
[  368.762088][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3299'.
[  368.805255][T19519] netlink: 'syz.4.3300': attribute type 5 has an invalid length.
[  368.877491][ T5853] Bluetooth: hci4: command tx timeout
[  368.940699][T19527] netlink: 'syz.4.3302': attribute type 16 has an invalid length.
[  368.943241][T19527] netlink: 'syz.4.3302': attribute type 17 has an invalid length.
[  368.947015][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3302'.
[  368.950518][T19527] IPv6: NLM_F_REPLACE set, but no existing node found!
[  369.099894][T19529] netlink: 'syz.3.3303': attribute type 10 has an invalid length.
[  369.103107][T19529] mac80211_hwsim hwsim288 wlan1: entered allmulticast mode
[  369.160758][T19533] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3305'.
[  370.069629][T19542] netlink: 'syz.3.3308': attribute type 33 has an invalid length.
[  370.075053][T19542] netlink: 'syz.3.3308': attribute type 10 has an invalid length.
[  370.184413][T19551] netlink: 'syz.3.3311': attribute type 12 has an invalid length.
[  370.285183][T19553] mac80211_hwsim hwsim288 wlan1: left allmulticast mode
[  370.298821][T19553] netlink: 'syz.3.3312': attribute type 10 has an invalid length.
[  370.302771][T19553] mac80211_hwsim hwsim288 wlan1: entered allmulticast mode
[  370.392381][T19556] netlink: 'syz.3.3313': attribute type 16 has an invalid length.
[  370.396249][T19556] IPv6: NLM_F_REPLACE set, but no existing node found!
[  370.955545][ T5853] Bluetooth: hci4: command tx timeout
[  371.610383][T19561] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  371.612687][T19561] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  371.622306][T19561] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  371.624753][T19561] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  371.738553][T19582] __nla_validate_parse: 3 callbacks suppressed
[  371.738567][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'.
[  372.563289][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'.
[  372.567621][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'.
[  372.593690][T19596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'.
[  372.598088][T19596] IPv6: NLM_F_REPLACE set, but no existing node found!
[  372.918906][T19601] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3329'.
[  372.929922][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'.
[  373.026855][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3330'.
[  373.030809][T19604] IPv6: NLM_F_REPLACE set, but no existing node found!
[  373.440590][T19606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  373.446024][T19607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  373.698881][T19621] validate_nla: 13 callbacks suppressed
[  373.698892][T19621] netlink: 'syz.4.3336': attribute type 16 has an invalid length.
[  373.703933][T19621] netlink: 'syz.4.3336': attribute type 17 has an invalid length.
[  373.708147][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'.
[  373.712472][T19621] IPv6: NLM_F_REPLACE set, but no existing node found!
[  373.825138][T19623] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  373.969804][T19625] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.977738][T19625] bond0: (slave rose0): Enslaving as an active interface with an up link
[  373.989120][T19625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3338'.
[  374.087842][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3340'.
[  374.091342][T19636] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  374.549376][T19652] pimreg: entered allmulticast mode
[  375.389924][T19661] netlink: 'syz.4.3343': attribute type 10 has an invalid length.
[  375.582366][T19665] macsec0: left allmulticast mode
[  375.587056][T19665] mac80211_hwsim hwsim292 wlan0: left promiscuous mode
[  375.969174][T19684] netlink: 'syz.3.3350': attribute type 1 has an invalid length.
[  376.010469][T19687] netlink: 'syz.4.3351': attribute type 29 has an invalid length.
[  376.014363][T19687] netlink: 'syz.4.3351': attribute type 29 has an invalid length.
[  376.093151][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.099214][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.102658][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.106477][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.109735][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.144102][T19689] lo speed is unknown, defaulting to 1000
[  376.457920][T19689] chnl_net:caif_netlink_parms(): no params data found
[  376.550949][T19711] mac80211_hwsim hwsim288 wlan1: left allmulticast mode
[  376.554224][T19689] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.559175][T19689] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.562038][T19689] bridge_slave_0: entered allmulticast mode
[  376.565232][T19689] bridge_slave_0: entered promiscuous mode
[  376.570956][T19689] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.573459][T19689] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.578917][T19689] bridge_slave_1: entered allmulticast mode
[  376.582166][T19689] bridge_slave_1: entered promiscuous mode
[  376.585210][T19711] netlink: 'syz.3.3356': attribute type 10 has an invalid length.
[  376.589581][T19712] netlink: 'syz.3.3356': attribute type 10 has an invalid length.
[  376.604098][T19712] mac80211_hwsim hwsim288 wlan1: entered allmulticast mode
[  376.610512][T19689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.616397][T19689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.649802][T19689] team0: Port device team_slave_0 added
[  376.655750][T19689] team0: Port device team_slave_1 added
[  376.701983][T19689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.704242][T19689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.714795][T19689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.748501][T19689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.750968][T19689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.759783][T19689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.813248][T19689] hsr_slave_0: entered promiscuous mode
[  376.818145][T19689] hsr_slave_1: entered promiscuous mode
[  376.820812][T19689] debugfs: 'hsr0' already exists in 'hsr'
[  376.823020][T19689] Cannot create hsr debugfs directory
[  376.913697][T19736] __nla_validate_parse: 2 callbacks suppressed
[  376.913713][T19736] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3362'.
[  376.921235][T19734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3362'.
[  376.924111][T19734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3362'.
[  376.930142][T19735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3362'.
[  376.933902][T19735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3362'.
[  377.030743][T19744] netlink: 'syz.4.3364': attribute type 11 has an invalid length.
[  377.081034][T19748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3366'.
[  377.099740][ T5879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.104158][ T5879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.107555][ T5879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.131723][ T5879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.142724][T19689] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  377.152119][T19689] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  377.158738][T19689] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  377.165122][T19689] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  377.273293][ T8983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.276703][ T8983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.285266][T19689] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.303936][T19763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3369'.
[  377.327559][T19689] 8021q: adding VLAN 0 to HW filter on device team0
[  377.343862][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.346295][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.361520][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.364015][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.410050][T19689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  377.443381][T19771] lo speed is unknown, defaulting to 1000
[  377.588714][T19689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.779682][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'.
[  377.784108][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'.
[  377.803430][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3374'.
[  377.814997][T19794] hsr_slave_0: left promiscuous mode
[  377.824434][T19794] hsr_slave_1: left promiscuous mode
[  377.852972][T19689] veth0_vlan: entered promiscuous mode
[  377.861738][T19689] veth1_vlan: entered promiscuous mode
[  377.882759][T19689] veth0_macvtap: entered promiscuous mode
[  377.888574][T19689] veth1_macvtap: entered promiscuous mode
[  377.899496][T19689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  377.909452][T19689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  377.917468][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.923554][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.931205][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.934778][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.042921][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.046859][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.097508][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.100142][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.157035][ T5853] Bluetooth: hci5: command tx timeout
[  378.381404][T19808] netlink: 'syz.5.3377': attribute type 10 has an invalid length.
[  378.395066][T19808] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  378.533436][T19811] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  378.633520][T19815] batadv1: entered promiscuous mode
[  378.635869][T19815] batadv1: entered allmulticast mode
[  378.813549][T19831] netlink: 'syz.4.3382': attribute type 10 has an invalid length.
[  378.962007][T19846] netlink: 'syz.5.3387': attribute type 10 has an invalid length.
[  379.031934][T19846] lo speed is unknown, defaulting to 1000
[  379.083500][T19849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  379.215683][ T5886] IPVS: starting estimator thread 0...
[  379.315468][T19853] IPVS: using max 41 ests per chain, 98400 per kthread
[  379.329393][T19858] netlink: 'syz.5.3389': attribute type 10 has an invalid length.
[  379.385378][T19859] mac80211_hwsim hwsim309 wlan1: entered allmulticast mode
[  379.494413][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.497698][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.821407][T19873] tipc: Started in network mode
[  379.822970][T19873] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711
[  379.826652][T19873] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  380.061048][   T26] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  380.235538][ T5853] Bluetooth: hci5: command tx timeout
[  381.018569][T19897] lo speed is unknown, defaulting to 1000
[  381.259424][   T27] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  381.313593][T19906] bridge_slave_0: left allmulticast mode
[  381.316060][T19906] bridge_slave_0: left promiscuous mode
[  381.318438][T19906] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.325122][T19906] bridge_slave_1: left allmulticast mode
[  381.327800][T19906] bridge_slave_1: left promiscuous mode
[  381.329832][T19906] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.342464][T19906] bond0: (slave bond_slave_0): Releasing backup interface
[  381.349115][T19906] bond0: (slave bond_slave_1): Releasing backup interface
[  381.358039][T19906] team0: Port device team_slave_0 removed
[  381.363948][T19906] team0: Port device team_slave_1 removed
[  381.368441][T19906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.370843][T19906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.374096][T19906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.377120][T19906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.380578][T19906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  381.417585][T19906] netlink: 'syz.5.3401': attribute type 10 has an invalid length.
[  381.420185][T19906] mac80211_hwsim hwsim309 wlan1: left allmulticast mode
[  381.426121][T19906] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  381.429480][T19906] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  382.232339][T19910] netlink: 'syz.5.3402': attribute type 16 has an invalid length.
[  382.236476][T19910] netlink: 'syz.5.3402': attribute type 17 has an invalid length.
[  382.315991][ T5853] Bluetooth: hci5: command tx timeout
[  382.491935][T19911] __nla_validate_parse: 6 callbacks suppressed
[  382.491952][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3402'.
[  382.505477][T19374] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.509790][T19374] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.513472][T19374] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.520040][T19374] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.580865][T19917] geneve2: entered promiscuous mode
[  382.680558][T19921] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3405'.
[  382.699746][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3405'.
[  382.773867][T19925] netlink: 'syz.5.3407': attribute type 10 has an invalid length.
[  384.388124][T19944] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3412'.
[  384.395978][ T5853] Bluetooth: hci5: command tx timeout
[  384.487794][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3413'.
[  384.512975][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3413'.
[  384.516859][T19947] hsr_slave_0: left promiscuous mode
[  384.519979][T19947] hsr_slave_1: left promiscuous mode
[  385.416530][T19958] netlink: 'syz.5.3415': attribute type 10 has an invalid length.
[  386.380449][T19967] netlink: 'syz.5.3417': attribute type 16 has an invalid length.
[  386.383641][T19967] netlink: 'syz.5.3417': attribute type 17 has an invalid length.
[  386.387445][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'.
[  386.390717][T19967] IPv6: NLM_F_REPLACE set, but no existing node found!
[  387.200325][T19969] netlink: 'syz.5.3418': attribute type 9 has an invalid length.
[  387.203155][T19969] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3418'.
[  387.368644][T19974] netlink: 'syz.5.3420': attribute type 16 has an invalid length.
[  387.371139][T19974] netlink: 'syz.5.3420': attribute type 17 has an invalid length.
[  387.374092][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3420'.
[  387.377787][T19974] IPv6: NLM_F_REPLACE set, but no existing node found!
[  389.141334][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3423'.
[  389.152410][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3423'.
[  389.949495][T19987] pimreg: entered allmulticast mode
[  390.777650][T19991] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3425'.
[  390.790365][T19991] bond0: entered promiscuous mode
[  390.792540][T19991] mac80211_hwsim hwsim309 wlan1: entered promiscuous mode
[  390.798156][T19991] bond0: left promiscuous mode
[  390.800092][T19991] mac80211_hwsim hwsim309 wlan1: left promiscuous mode
[  391.051513][T20001] tipc: Started in network mode
[  391.053432][T20001] tipc: Node identity 080211000001, cluster identity 4711
[  391.056547][T20001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.062692][T20001] mac80211_hwsim hwsim309 syzkaller0: entered promiscuous mode
[  391.066015][T20001] mac80211_hwsim hwsim309 syzkaller0: entered allmulticast mode
[  391.383912][T20016] netlink: 'syz.5.3433': attribute type 10 has an invalid length.
[  391.393768][T20016] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  391.398759][T20016] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  392.185573][ T5886] tipc: Node number set to 134418688
[  392.315075][T20020] netlink: 'syz.5.3434': attribute type 23 has an invalid length.
[  392.979065][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  392.983582][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  392.986786][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  392.990150][   T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  392.993548][   T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  393.022526][T20022] lo speed is unknown, defaulting to 1000
[  393.227136][T20022] chnl_net:caif_netlink_parms(): no params data found
[  393.289378][T20022] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.291886][T20022] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.294354][T20022] bridge_slave_0: entered allmulticast mode
[  393.300512][T20022] bridge_slave_0: entered promiscuous mode
[  393.306285][T20022] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.309064][T20022] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.311851][T20022] bridge_slave_1: entered allmulticast mode
[  393.315218][T20022] bridge_slave_1: entered promiscuous mode
[  393.338101][T20022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.344370][T20022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.370329][T20022] team0: Port device team_slave_0 added
[  393.374433][T20022] team0: Port device team_slave_1 added
[  393.394163][T20022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.396905][T20022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.406071][T20022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.412212][T20022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.414809][T20022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.423383][T20022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.453904][T20022] hsr_slave_0: entered promiscuous mode
[  393.457303][T20022] hsr_slave_1: entered promiscuous mode
[  393.580185][T20022] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  393.585422][T20022] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  393.590645][T20022] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  393.598070][T20022] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  393.635568][T20022] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.638576][T20022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.641725][T20022] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.644629][T20022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.692520][T20022] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.702141][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.705236][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.715952][T20022] 8021q: adding VLAN 0 to HW filter on device team0
[  393.725092][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.727545][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.737119][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.740101][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.896233][T20022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.059407][T20022] veth0_vlan: entered promiscuous mode
[  394.074776][T20022] veth1_vlan: entered promiscuous mode
[  394.104097][T20022] veth0_macvtap: entered promiscuous mode
[  394.109182][T20022] veth1_macvtap: entered promiscuous mode
[  394.127894][T20022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  394.140673][T20022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  394.150146][ T5879] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.153685][T19429] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.165896][T19429] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.169314][T19429] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.276667][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.279628][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.332838][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.335927][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.401395][T20058] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3435'.
[  394.459013][T20059] mac80211_hwsim hwsim314 wlan1: entered allmulticast mode
[  394.582462][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3441'.
[  394.601711][T20063] netlink: 'syz.6.3441': attribute type 10 has an invalid length.
[  394.604789][T20063] mac80211_hwsim hwsim314 wlan1: left allmulticast mode
[  394.704154][T20067] bridge_slave_0: left allmulticast mode
[  394.711638][T20067] bridge_slave_0: left promiscuous mode
[  394.714237][T20067] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.721412][T20067] bridge_slave_1: left allmulticast mode
[  394.723849][T20067] bridge_slave_1: left promiscuous mode
[  394.729599][T20067] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.738158][T20067] bond0: (slave bond_slave_0): Releasing backup interface
[  394.747075][T20067] bond0: (slave bond_slave_1): Releasing backup interface
[  394.758774][T20067] team0: Port device team_slave_0 removed
[  394.768993][T20067] team0: Port device team_slave_1 removed
[  394.772179][T20067] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.774982][T20067] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.778746][T20067] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.781385][T20067] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.787238][T20067] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  394.807704][T20068] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  394.950358][T20077] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3446'.
[  394.963474][T20077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3446'.
[  394.969803][T20078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3445'.
[  395.035663][   T55] Bluetooth: hci6: command tx timeout
[  395.086207][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3445'.
[  395.230394][T20081] hsr_slave_0: left promiscuous mode
[  395.245359][T20081] hsr_slave_1: left promiscuous mode
[  395.266748][T19429] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.270228][T19429] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.273732][T19429] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.280731][ T5879] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.289126][T20084] netlink: 'syz.5.3447': attribute type 10 has an invalid length.
[  395.293617][T20084] mac80211_hwsim hwsim309 wlan1: entered allmulticast mode
[  395.338516][T20086] netlink: 'syz.5.3448': attribute type 10 has an invalid length.
[  395.341854][T20086] mac80211_hwsim hwsim309 wlan1: left allmulticast mode
[  395.347408][T20086] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3448'.
[  395.363941][T20086] mac80211_hwsim hwsim309 syzkaller0: left promiscuous mode
[  395.367495][T20086] mac80211_hwsim hwsim309 syzkaller0: left allmulticast mode
[  395.870683][T20099] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3453'.
[  395.886895][T20099] lo speed is unknown, defaulting to 1000
[  396.081471][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3453'.
[  396.086430][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3453'.
[  396.332241][T19348] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  396.340185][T19348] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  396.344829][T19348] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  396.354424][T19348] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  396.358333][T19348] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  396.379978][T20107] tipc: Resetting bearer <eth:syzkaller0>
[  396.418246][T20108] lo speed is unknown, defaulting to 1000
[  396.682106][T20108] chnl_net:caif_netlink_parms(): no params data found
[  396.793934][T20108] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.797478][T20108] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.800695][T20108] bridge_slave_0: entered allmulticast mode
[  396.804030][T20108] bridge_slave_0: entered promiscuous mode
[  396.808138][T20108] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.810963][T20108] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.813419][T20108] bridge_slave_1: entered allmulticast mode
[  396.817211][T20108] bridge_slave_1: entered promiscuous mode
[  396.843967][T20108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.850381][T20108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.891493][T20108] team0: Port device team_slave_0 added
[  396.895021][T20108] team0: Port device team_slave_1 added
[  396.939513][T20108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.942276][T20108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.951698][T20108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.957756][T20108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.960022][T20108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.969437][T20108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.006072][T20108] hsr_slave_0: entered promiscuous mode
[  397.009452][T20108] hsr_slave_1: entered promiscuous mode
[  397.116352][   T55] Bluetooth: hci6: command 0x041b tx timeout
[  397.150643][T20108] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  397.157804][T20108] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  397.166057][T20108] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  397.173721][T20108] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  397.213941][T20108] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.216891][T20108] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.219901][T20108] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.222705][T20108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.271241][T20108] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.277365][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.281286][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.301837][T20108] 8021q: adding VLAN 0 to HW filter on device team0
[  397.310642][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.313001][ T8467] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.323054][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.326033][ T8467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.464053][T20108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.623871][T20108] veth0_vlan: entered promiscuous mode
[  397.632731][T20108] veth1_vlan: entered promiscuous mode
[  397.656175][T20108] veth0_macvtap: entered promiscuous mode
[  397.660834][T20108] veth1_macvtap: entered promiscuous mode
[  397.671763][T20108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.683459][T20108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.691237][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.694679][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.701658][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.704404][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.803289][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.810309][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.870503][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.873299][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.951612][T20165] netlink: 'syz.5.3465': attribute type 16 has an invalid length.
[  397.954139][T20165] netlink: 'syz.5.3465': attribute type 17 has an invalid length.
[  397.958427][T20165] IPv6: NLM_F_REPLACE set, but no existing node found!
[  398.066737][T20167] netlink: 'syz.7.3466': attribute type 10 has an invalid length.
[  398.075827][T20167] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  398.218135][T20169] netlink: 'syz.7.3467': attribute type 1 has an invalid length.
[  398.220652][T20169] netlink: 'syz.7.3467': attribute type 3 has an invalid length.
[  398.360392][T20172] mac80211_hwsim hwsim316 wlan0: entered promiscuous mode
[  398.363286][T20172] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  398.405785][ T5853] Bluetooth: hci7: command tx timeout
[  398.529879][T20180] syzkaller0: entered promiscuous mode
[  398.532291][T20180] syzkaller0: entered allmulticast mode
[  398.640540][T20189] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  398.683853][T20192] mac80211_hwsim hwsim313 wlan0: entered promiscuous mode
[  398.686804][T20192] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  398.764678][T20202] netlink: 'syz.5.3480': attribute type 10 has an invalid length.
[  398.770225][T20203] mac80211_hwsim hwsim309 wlan1: entered allmulticast mode
[  398.773621][T20202] mac80211_hwsim hwsim309 wlan1: left allmulticast mode
[  398.823920][T20208] pimreg: entered allmulticast mode
[  399.194266][T20228] tipc: Started in network mode
[  399.196590][T20228] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[  399.200616][T20228] tipc: Enabled bearer <udp:syz1>, priority 10
[  399.205819][ T5853] Bluetooth: hci6: command 0x041b tx timeout
[  399.312932][T20230] syzkaller0: entered promiscuous mode
[  399.316019][T20230] syzkaller0: entered allmulticast mode
[  399.764112][T20243] bond0: (slave wlan1): Releasing backup interface
[  399.783422][T20243] netlink: 'syz.5.3491': attribute type 10 has an invalid length.
[  399.790626][T20243] bond0: (slave wlan1): Opening slave failed
[  399.867934][T20247] lo speed is unknown, defaulting to 1000
[  399.909780][T20251] netlink: 'syz.6.3494': attribute type 6 has an invalid length.
[  399.921568][T20251] IPv6: NLM_F_CREATE should be specified when creating new route
[  399.956926][T20251] __nla_validate_parse: 7 callbacks suppressed
[  399.956943][T20251] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3494'.
[  400.008981][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3494'.
[  400.015500][T20254] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3494'.
[  400.018962][T20254] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3494'.
[  400.022456][T20254] netlink: 540 bytes leftover after parsing attributes in process `syz.6.3494'.
[  400.042208][T20254] netlink: 'syz.6.3494': attribute type 10 has an invalid length.
[  400.077247][T20249] lo speed is unknown, defaulting to 1000
[  400.091094][T20254] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  400.316213][ T5916] tipc: Node number set to 4269801494
[  400.476003][ T5853] Bluetooth: hci7: command tx timeout
[  400.590125][T20276] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3499'.
[  400.872192][T20285] bond0: (slave netdevsim0): Releasing backup interface
[  400.890911][T20285] netlink: 'syz.6.3501': attribute type 10 has an invalid length.
[  400.953421][T20288] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  400.956785][T20288] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  401.275593][   T55] Bluetooth: hci6: command 0x041b tx timeout
[  401.507926][T20296] lo speed is unknown, defaulting to 1000
[  401.753028][T20315] bond0: (slave wlan1): Opening slave failed
[  401.759891][T20315] mac80211_hwsim hwsim309 wlan1: entered allmulticast mode
[  402.510029][T20302] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  402.512535][T20302] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  402.519130][T20302] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  402.521566][T20302] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  402.536917][T20302] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  402.539233][T20302] Bluetooth: hci7: Error when powering off device on rfkill (-4)
[  402.644759][T20324] vlan2: entered allmulticast mode
[  402.647326][T20324] batadv0: entered allmulticast mode
[  402.790523][T20334] mac80211_hwsim hwsim309 wlan1: left allmulticast mode
[  402.794303][T20334] bond0: (slave wlan1): Opening slave failed
[  402.822632][T20334] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  402.826906][T20334] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  402.842277][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3518'.
[  402.852100][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3518'.
[  403.274612][T20364] validate_nla: 2 callbacks suppressed
[  403.274631][T20364] netlink: 'syz.6.3522': attribute type 10 has an invalid length.
[  403.432323][T20370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3523'.
[  403.651977][T20386] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3528'.
[  403.820339][T20391] pimreg: entered allmulticast mode
[  403.957867][T20409] netlink: 'syz.7.3532': attribute type 3 has an invalid length.
[  404.366785][T20432] bridge0: port 1(batadv1) entered blocking state
[  404.369622][T20432] bridge0: port 1(batadv1) entered disabled state
[  404.372497][T20432] batadv1: entered allmulticast mode
[  404.376208][T20432] batadv1: entered promiscuous mode
[  404.470467][T20437] tipc: Invalid UDP bearer configuration
[  404.470515][T20437] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  404.798822][T20449] netlink: 'syz.6.3542': attribute type 10 has an invalid length.
[  404.805944][T20449] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  404.871392][ T5879] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  404.875584][ T5879] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  405.849118][T20479] __nla_validate_parse: 11 callbacks suppressed
[  405.849135][T20479] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3548'.
[  405.932470][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3548'.
[  406.340468][T20494] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3552'.
[  406.577028][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3555'.
[  407.641565][T20560] netlink: 'syz.7.3568': attribute type 10 has an invalid length.
[  407.650548][T20560] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  407.890660][T20566] netlink: 'syz.7.3570': attribute type 16 has an invalid length.
[  407.893235][T20566] netlink: 'syz.7.3570': attribute type 17 has an invalid length.
[  407.994518][T20575] IPv6: NLM_F_REPLACE set, but no existing node found!
[  408.002753][T20566] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.006228][T20566] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.105522][T20566] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.117544][T20566] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  408.242148][T20574] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3570'.
[  408.252566][   T13] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.259235][   T13] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.269171][   T13] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.277239][   T13] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.433005][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3572'.
[  408.437001][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3572'.
[  408.561017][T20594] lo speed is unknown, defaulting to 1000
[  408.564521][T20589] netlink: 'syz.7.3575': attribute type 12 has an invalid length.
[  408.571352][T20589] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.3575'.
[  408.767759][T20596] bond0: default FDB implementation only supports local addresses
[  408.779544][   T27] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  409.003159][T20601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3578'.
[  409.059993][T20609] netlink: 'syz.5.3579': attribute type 10 has an invalid length.
[  409.063414][T20609] bond0: (slave wlan1): Opening slave failed
[  409.164901][T20614] netlink: 'syz.6.3581': attribute type 10 has an invalid length.
[  409.337685][T20621] netlink: 'syz.5.3584': attribute type 10 has an invalid length.
[  409.341787][T20621] bond0: (slave wlan1): Opening slave failed
[  409.350000][T20623] tipc: Started in network mode
[  409.352203][T20623] tipc: Node identity 4200000144, cluster identity 4711
[  409.356421][T20623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.360110][T20624] mac80211_hwsim hwsim324 syzkaller0: entered promiscuous mode
[  409.362915][T20624] mac80211_hwsim hwsim324 syzkaller0: entered allmulticast mode
[  409.375136][T20621] tipc: Resetting bearer <eth:syzkaller0>
[  409.490878][T20633] lo speed is unknown, defaulting to 1000
[  409.526034][T20628] netlink: 'syz.6.3586': attribute type 12 has an invalid length.
[  409.529139][T20628] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.3586'.
[  409.573947][T20634] tipc: Resetting bearer <eth:syzkaller0>
[  409.857502][T20643] 8021q: adding VLAN 0 to HW filter on device bond1
[  409.868332][T20643] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  409.875175][T20643] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  409.884586][T20651] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  409.912471][T20641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  409.970229][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  410.000377][   T13] bond1: (slave macvlan2): link status up again after 0 ms
[  410.005138][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.029321][T20662] netlink: 'syz.7.3593': attribute type 10 has an invalid length.
[  410.106451][T20662] mac80211_hwsim hwsim317 wlan1: entered allmulticast mode
[  410.110199][T19374] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  410.136820][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.266044][T19374] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.331504][T20676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.335886][T20676] mac80211_hwsim hwsim317 syzkaller0: entered promiscuous mode
[  410.339088][T20676] mac80211_hwsim hwsim317 syzkaller0: entered allmulticast mode
[  410.343471][T20678] netlink: 'syz.6.3596': attribute type 16 has an invalid length.
[  410.343692][T20676] tipc: Resetting bearer <eth:syzkaller0>
[  410.355036][T20678] netlink: 'syz.6.3596': attribute type 17 has an invalid length.
[  410.367670][ T5899] tipc: Node number set to 100663297
[  410.375267][T20678] tipc: Resetting bearer <eth:syzkaller0>
[  410.413820][T20683] netlink: 'syz.7.3600': attribute type 3 has an invalid length.
[  410.418475][T20678] IPv6: NLM_F_REPLACE set, but no existing node found!
[  410.426735][T20680] lo speed is unknown, defaulting to 1000
[  410.435594][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.547375][T19374] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.677751][T19374] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.774641][T20699] mac80211_hwsim hwsim317 wlan1: left allmulticast mode
[  410.782169][T20699] netlink: 'syz.7.3603': attribute type 10 has an invalid length.
[  410.805678][T19374] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.939001][T20706] tipc: Resetting bearer <eth:syzkaller0>
[  410.975253][T20708] bond0: (slave wlan1): Opening slave failed
[  410.978196][T20706] __nla_validate_parse: 5 callbacks suppressed
[  410.978206][T20706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3605'.
[  410.978899][T20708] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3607'.
[  410.987267][T20706] IPv6: NLM_F_REPLACE set, but no existing node found!
[  410.992104][T20708] tipc: Resetting bearer <eth:syzkaller0>
[  411.243240][T20724] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3611'.
[  411.300609][T20729] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  411.323660][T20729] tipc: Resetting bearer <eth:syzkaller0>
[  411.719579][T20744] bond0: (slave dummy0): Releasing backup interface
[  411.781544][T20755] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  411.784794][T20755] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  411.943899][ T8984] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  412.116922][T20761] mac80211_hwsim hwsim308 wlan0: entered promiscuous mode
[  412.646193][   T33] audit: type=1800 audit(1758173199.700:7): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3622" name="cgroup.controllers" dev="tmpfs" ino=347 res=0 errno=0
[  412.704728][T20769] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3623'.
[  412.974632][T20780] !: renamed from dummy0
[  412.980703][T20778] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3627'.
[  412.984256][T20778] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3627'.
[  412.985540][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3625'.
[  413.237130][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3631'.
[  413.290028][T20796] tipc: Resetting bearer <eth:syzkaller0>
[  413.324577][T20799] mac80211_hwsim hwsim317 wlan1: entered allmulticast mode
[  413.334803][ T8467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.338487][ T8467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.341914][T20796] tipc: Resetting bearer <eth:syzkaller0>
[  413.629542][T20809] validate_nla: 7 callbacks suppressed
[  413.629554][T20809] netlink: 'syz.6.3637': attribute type 2 has an invalid length.
[  413.766114][T20824] netlink: 'syz.6.3640': attribute type 10 has an invalid length.
[  413.773107][T20824] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  413.777144][T20824] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  414.423410][T20845] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3647'.
[  414.650496][T20859] lo speed is unknown, defaulting to 1000
[  414.760903][T20869] bond0: (slave dummy0): Releasing backup interface
[  414.763958][T20869] bridge_slave_0: left allmulticast mode
[  414.769441][T20869] bridge_slave_0: left promiscuous mode
[  414.771493][T20869] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.778449][T20869] bridge_slave_1: left allmulticast mode
[  414.780774][T20869] bridge_slave_1: left promiscuous mode
[  414.782826][T20869] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.789729][T20869] bond0: (slave bond_slave_0): Releasing backup interface
[  414.793814][T20869] bond0: (slave bond_slave_1): Releasing backup interface
[  414.799448][T20869] team0: Port device team_slave_0 removed
[  414.803073][T20869] team0: Port device team_slave_1 removed
[  414.805716][T20869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  414.810581][T20869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.839022][T20869] netlink: 'syz.7.3652': attribute type 10 has an invalid length.
[  414.854714][T20869] mac80211_hwsim hwsim317 wlan1: left allmulticast mode
[  414.886559][T20872] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3653'.
[  414.964634][T20876] netlink: 'syz.7.3654': attribute type 29 has an invalid length.
[  415.227017][T20899] net_ratelimit: 4 callbacks suppressed
[  415.227042][T20899] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  415.238679][T20899] netlink: 'syz.7.3664': attribute type 10 has an invalid length.
[  415.244135][T20899] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  415.249014][T20899] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  416.155226][T20914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  416.179551][T20914] bridge0: port 1(batadv1) entered blocking state
[  416.181902][T20914] bridge0: port 1(batadv1) entered disabled state
[  416.184380][T20914] batadv1: entered allmulticast mode
[  416.192629][T20914] batadv1: entered promiscuous mode
[  416.203597][T20914] netlink: 'syz.7.3668': attribute type 10 has an invalid length.
[  416.475856][T20933] __nla_validate_parse: 5 callbacks suppressed
[  416.475877][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3672'.
[  416.515197][T20936] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3674'.
[  416.537989][T20936] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3674'.
[  416.569490][T20938] netlink: 'syz.5.3675': attribute type 12 has an invalid length.
[  416.590888][T20943] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3676'.
[  416.676751][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  416.680474][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  416.704251][T20959] netlink: 788 bytes leftover after parsing attributes in process `syz.7.3679'.
[  416.828794][T20974] netlink: 'syz.5.3681': attribute type 10 has an invalid length.
[  416.832804][T20974] bond0: (slave wlan1): Opening slave failed
[  416.836522][T20974] mac80211_hwsim hwsim309 wlan1: entered allmulticast mode
[  416.908064][T20976] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3682'.
[  416.958369][T20982] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3683'.
[  416.980794][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3683'.
[  417.140068][T20988] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3685'.
[  417.224702][T20992] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3686'.
[  417.842103][T21005] mac80211_hwsim hwsim316 wlan0: left promiscuous mode
[  417.844921][T21005] mac80211_hwsim hwsim317 syzkaller0: left promiscuous mode
[  417.847511][T21005] mac80211_hwsim hwsim317 syzkaller0: left allmulticast mode
[  417.860757][T21005] hsr_slave_0: left promiscuous mode
[  417.863138][T21005] hsr_slave_1: left promiscuous mode
[  417.980499][T21009] bond0: (slave wlan1): Releasing backup interface
[  418.939284][T21028] netlink: 'syz.5.3694': attribute type 178 has an invalid length.
[  419.056896][T21036] mac80211_hwsim hwsim309 wlan1: left allmulticast mode
[  419.097554][T21036] lo speed is unknown, defaulting to 1000
[  419.191965][T21039] lo speed is unknown, defaulting to 1000
[  419.211855][T21044] lo speed is unknown, defaulting to 1000
[  419.747344][T21056] netlink: 'syz.7.3702': attribute type 21 has an invalid length.
[  419.752637][T21056] netlink: 'syz.7.3702': attribute type 10 has an invalid length.
[  422.622159][T21077] mac80211_hwsim hwsim317 syzkaller0: entered promiscuous mode
[  422.625259][T21077] mac80211_hwsim hwsim317 syzkaller0: entered allmulticast mode
[  422.637918][T21077] tipc: Resetting bearer <eth:syzkaller0>
[  423.704000][T21103] tipc: Resetting bearer <eth:syzkaller0>
[  424.531701][T21113] __nla_validate_parse: 7 callbacks suppressed
[  424.531714][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3716'.
[  424.543244][T21113] netlink: 'syz.7.3716': attribute type 11 has an invalid length.
[  424.776567][T21125] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3719'.
[  424.823155][T21125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3719'.
[  424.837917][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3719'.
[  425.705013][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3721'.
[  428.492084][T21171] netlink: 1020 bytes leftover after parsing attributes in process `syz.7.3727'.
[  428.495656][T21171] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3727'.
[  428.588207][T21175] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3728'.
[  428.595074][T21175] batadv2: entered promiscuous mode
[  428.598485][T21175] batadv2: entered allmulticast mode
[  428.857872][T21181] netlink: 'syz.7.3730': attribute type 10 has an invalid length.
[  429.005059][T21195] netlink: 'syz.7.3732': attribute type 10 has an invalid length.
[  429.059040][T21195] mac80211_hwsim hwsim317 syzkaller0: left promiscuous mode
[  429.062046][T21195] mac80211_hwsim hwsim317 syzkaller0: left allmulticast mode
[  429.069729][T21195] tipc: Resetting bearer <eth:syzkaller0>
[  429.231742][T21199] IPVS: Scheduler module ip_vs_sip not found
[  429.271116][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3733'.
[  429.332762][T21208] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3734'.
[  430.223501][T21213] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3736'.
[  430.413739][T21217] netlink: 'syz.7.3737': attribute type 10 has an invalid length.
[  430.448441][ T5853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  430.452142][ T5853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  430.459058][ T5853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  430.464364][ T5853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  430.472256][ T5853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  430.516511][T21226] lo speed is unknown, defaulting to 1000
[  430.785396][T21226] chnl_net:caif_netlink_parms(): no params data found
[  430.847737][T21226] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.850186][T21226] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.852654][T21226] bridge_slave_0: entered allmulticast mode
[  430.855696][T21226] bridge_slave_0: entered promiscuous mode
[  430.864862][T21242] tipc: Resetting bearer <eth:syzkaller0>
[  430.885203][T21226] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.889119][T21226] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.894832][T21226] bridge_slave_1: entered allmulticast mode
[  430.898993][T21226] bridge_slave_1: entered promiscuous mode
[  430.935910][T21226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.943230][T21226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.973656][T21226] team0: Port device team_slave_0 added
[  430.978358][T21226] team0: Port device team_slave_1 added
[  431.003409][T21226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.010225][T21226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.023218][T21226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.033611][T21226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.036794][T21226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.047309][T21226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.077335][T21226] hsr_slave_0: entered promiscuous mode
[  431.077984][T21253] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3743'.
[  431.080704][T21226] hsr_slave_1: entered promiscuous mode
[  431.083252][T21253] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3743'.
[  431.263044][T21226] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  431.268655][T21226] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  431.273866][T21226] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  431.280036][T21226] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  431.360286][T21226] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.376207][T21226] 8021q: adding VLAN 0 to HW filter on device team0
[  431.383431][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.385876][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.396399][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.398833][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.545758][T21226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.700763][T21226] veth0_vlan: entered promiscuous mode
[  431.707869][T21226] veth1_vlan: entered promiscuous mode
[  431.725039][T21226] veth0_macvtap: entered promiscuous mode
[  431.729752][T21226] veth1_macvtap: entered promiscuous mode
[  431.740940][T21226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.748397][T21226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.757746][T19429] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.760711][T19429] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.764687][T19429] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.768358][T19429] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.870462][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.873553][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.953048][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.956166][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.997973][T21282] bridge_slave_0: left allmulticast mode
[  431.999838][T21282] bridge_slave_0: left promiscuous mode
[  432.001679][T21282] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.009341][T21282] bridge_slave_1: left allmulticast mode
[  432.011633][T21282] bridge_slave_1: left promiscuous mode
[  432.014047][T21282] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.029610][T21282] bond0: (slave bond_slave_0): Releasing backup interface
[  432.042357][T21282] bond0: (slave bond_slave_1): Releasing backup interface
[  432.071939][T21282] team0: Port device team_slave_0 removed
[  432.086861][T21282] team0: Port device team_slave_1 removed
[  432.089981][T21282] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  432.092972][T21282] batman_adv: batadv0: Removing interface: batadv_slave_0
[  432.102000][T21282] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  432.105051][T21282] batman_adv: batadv0: Removing interface: batadv_slave_1
[  432.110264][T21282] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  432.169809][T21288] netlink: 200 bytes leftover after parsing attributes in process `syz.8.3745'.
[  432.217308][T21293] netlink: 'syz.8.3746': attribute type 9 has an invalid length.
[  432.220444][T21293] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3746'.
[  432.276749][T21295] netlink: 'syz.8.3746': attribute type 9 has an invalid length.
[  432.279592][T21295] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3746'.
[  432.391079][T21298] pimreg: entered allmulticast mode
[  432.458931][T21304] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3749'.
[  432.468069][T21304] batadv_slave_1: entered promiscuous mode
[  432.471616][T21304] netlink: 248 bytes leftover after parsing attributes in process `syz.8.3749'.
[  432.543959][T21303] batadv_slave_1: left promiscuous mode
[  432.555886][ T5853] Bluetooth: hci8: command tx timeout
[  432.582989][T21307] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3750'.
[  432.588551][T21307] netlink: 'syz.8.3750': attribute type 4 has an invalid length.
[  432.591637][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3750'.
[  432.663350][T21308] syzkaller1: entered promiscuous mode
[  432.665229][T21308] syzkaller1: entered allmulticast mode
[  433.943165][T21339] netlink: 'syz.8.3757': attribute type 16 has an invalid length.
[  433.947853][T21339] netlink: 'syz.8.3757': attribute type 17 has an invalid length.
[  434.037125][T21342] netlink: 'syz.7.3758': attribute type 10 has an invalid length.
[  434.322865][   T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  434.327296][   T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  434.330766][   T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  434.334018][   T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  434.337564][   T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  434.413751][T21349] tipc: Resetting bearer <eth:syzkaller0>
[  434.424471][ T5879] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  434.429806][ T5879] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  434.433461][ T5879] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  434.446298][ T5879] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  434.458538][T21350] lo speed is unknown, defaulting to 1000
[  434.480820][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.490196][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.502710][T21354] netlink: 'syz.8.3760': attribute type 9 has an invalid length.
[  434.636010][   T55] Bluetooth: hci8: command tx timeout
[  434.778592][T21350] chnl_net:caif_netlink_parms(): no params data found
[  434.826321][T21373] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  434.834750][T21373] mac80211_hwsim hwsim317 syzkaller0: entered promiscuous mode
[  434.838554][T21373] mac80211_hwsim hwsim317 syzkaller0: entered allmulticast mode
[  434.867216][T21373] tipc: Resetting bearer <eth:syzkaller0>
[  434.886972][T21350] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.890434][T21350] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.894402][T21350] bridge_slave_0: entered allmulticast mode
[  434.899065][T21350] bridge_slave_0: entered promiscuous mode
[  434.908594][T21350] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.911164][T21350] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.913779][T21350] bridge_slave_1: entered allmulticast mode
[  434.917477][T21350] bridge_slave_1: entered promiscuous mode
[  434.950705][T21350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.957613][T21350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.967999][T21379] netlink: 'syz.7.3766': attribute type 10 has an invalid length.
[  434.995933][T21350] team0: Port device team_slave_0 added
[  435.000433][T21350] team0: Port device team_slave_1 added
[  435.027902][T21350] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.030338][T21350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.040379][T21350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  435.050802][T21350] batman_adv: batadv0: Adding interface: batadv_slave_1
[  435.053737][T21350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.063584][T21350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.121975][T21350] hsr_slave_0: entered promiscuous mode
[  435.124795][T21350] hsr_slave_1: entered promiscuous mode
[  435.128539][T21350] debugfs: 'hsr0' already exists in 'hsr'
[  435.130980][T21350] Cannot create hsr debugfs directory
[  435.161882][T21381] netlink: 'syz.7.3767': attribute type 10 has an invalid length.
[  435.307663][T21350] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  435.313642][T21350] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  435.321733][T21350] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  435.327648][T21350] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  435.360369][T21350] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.362717][T21350] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.365233][T21350] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.367525][T21350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.440451][T21350] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.448126][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.452418][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.513374][T21350] 8021q: adding VLAN 0 to HW filter on device team0
[  435.524942][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.527369][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.531641][T21395] tipc: Resetting bearer <eth:syzkaller0>
[  435.576799][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.579086][ T8467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.840148][T21350] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.174282][T21350] veth0_vlan: entered promiscuous mode
[  436.181410][T21350] veth1_vlan: entered promiscuous mode
[  436.217333][T21350] veth0_macvtap: entered promiscuous mode
[  436.222290][T21350] veth1_macvtap: entered promiscuous mode
[  436.236840][T21350] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.246189][T21350] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.253786][T19374] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.257501][T19374] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.260989][T19374] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.264476][T19374] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.365896][T21430] netlink: 'syz.7.3778': attribute type 23 has an invalid length.
[  436.395620][   T55] Bluetooth: hci9: command tx timeout
[  436.408448][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.410917][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.463241][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.466325][T21432] __nla_validate_parse: 4 callbacks suppressed
[  436.466325][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.466335][T21432] netlink: 288 bytes leftover after parsing attributes in process `syz.7.3779'.
[  436.524796][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3779'.
[  436.528717][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3779'.
[  436.628764][T21432] netlink: 'syz.7.3779': attribute type 10 has an invalid length.
[  436.640749][T21444] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3781'.
[  436.690401][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  436.700232][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  436.703752][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  436.708679][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  436.715713][   T55] Bluetooth: hci8: command tx timeout
[  437.713628][T21485] bridge_slave_0: left allmulticast mode
[  437.718281][T21485] bridge_slave_0: left promiscuous mode
[  437.721147][T21485] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.728407][T21485] bridge_slave_1: left allmulticast mode
[  437.730293][T21485] bridge_slave_1: left promiscuous mode
[  437.732206][T21485] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.741123][T21485] bond0: (slave bond_slave_0): Releasing backup interface
[  437.748842][T21485] bond0: (slave bond_slave_1): Releasing backup interface
[  437.763227][T21485] team0: Port device team_slave_0 removed
[  437.770288][T21485] team0: Port device team_slave_1 removed
[  437.772641][T21485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.775085][T21485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.779846][T21485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.782281][T21485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.786640][T21485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  438.485645][   T55] Bluetooth: hci9: command tx timeout
[  438.762582][T21522] netlink: 'syz.9.3800': attribute type 10 has an invalid length.
[  438.794213][T21522] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  438.816358][   T55] Bluetooth: hci8: command tx timeout
[  438.824922][T21527] tipc: Started in network mode
[  438.826915][T21527] tipc: Node identity 823f43c204e3, cluster identity 4711
[  438.829329][T21527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.832089][T21527] syzkaller0: entered promiscuous mode
[  438.834121][T21527] syzkaller0: entered allmulticast mode
[  438.868806][T21524] tipc: Resetting bearer <eth:syzkaller0>
[  438.900460][T21524] tipc: Disabling bearer <eth:syzkaller0>
[  438.973767][T21540] netlink: 'syz.9.3805': attribute type 10 has an invalid length.
[  439.022763][T21540] mac80211_hwsim hwsim347 syzkaller0: entered promiscuous mode
[  439.036753][T21544] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.143820][T21542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  439.171641][T21542] netlink: 'syz.8.3806': attribute type 10 has an invalid length.
[  439.229455][T21542] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  439.232683][T21542] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  439.905144][T21566] netlink: 176 bytes leftover after parsing attributes in process `syz.8.3810'.
[  439.911239][T21566] netlink: 200 bytes leftover after parsing attributes in process `syz.8.3810'.
[  439.919564][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3810'.
[  440.063145][T21578] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3814'.
[  440.162901][T21584] macvtap0: entered promiscuous mode
[  440.270857][T21594] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  440.291388][T21594] netlink: 'syz.9.3819': attribute type 10 has an invalid length.
[  440.350296][T21590] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  440.353476][T21590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  440.392066][T21604] netlink: 'syz.7.3821': attribute type 10 has an invalid length.
[  440.399291][T21604] mac80211_hwsim hwsim344 wlan1: entered allmulticast mode
[  440.460777][T21609] bond1: (slave macvlan2): Removing an active aggregator
[  440.464699][T21609] bond1: (slave macvlan2): Releasing backup interface
[  440.471458][T21609] batadv1: left allmulticast mode
[  440.473461][T21609] batadv1: left promiscuous mode
[  440.476668][T21609] bridge0: port 1(batadv1) entered disabled state
[  440.485022][T21609] netlink: 'syz.7.3823': attribute type 10 has an invalid length.
[  440.549569][T21612] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3824'.
[  440.554791][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3824'.
[  440.559004][   T55] Bluetooth: hci9: command tx timeout
[  440.592128][T21612] lo speed is unknown, defaulting to 1000
[  440.967556][T21620] netlink: 'syz.7.3825': attribute type 11 has an invalid length.
[  441.020081][T21621] netlink: 'syz.7.3825': attribute type 11 has an invalid length.
[  441.242230][T21632] syzkaller1: entered promiscuous mode
[  441.244428][T21632] syzkaller1: entered allmulticast mode
[  441.422589][T21635] tipc: Resetting bearer <eth:syzkaller0>
[  441.477745][T21644] __nla_validate_parse: 3 callbacks suppressed
[  441.477761][T21644] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3830'.
[  441.815115][T21659] pimreg: entered allmulticast mode
[  442.367641][T21670] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3835'.
[  442.453293][T21676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3837'.
[  442.566683][T21681] syzkaller1: entered promiscuous mode
[  442.568961][T21681] syzkaller1: entered allmulticast mode
[  442.635792][   T55] Bluetooth: hci9: command tx timeout
[  442.644175][T21676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3837'.
[  442.923307][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3846'.
[  443.035125][T21723] mac80211_hwsim hwsim316 wlan0: entered promiscuous mode
[  443.037976][T21723] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  443.244941][T21733] lo speed is unknown, defaulting to 1000
[  443.378750][T21740] netlink: 'syz.7.3853': attribute type 49 has an invalid length.
[  443.381762][T21740] netlink: 'syz.7.3853': attribute type 49 has an invalid length.
[  443.711251][T21745] netlink: 22 bytes leftover after parsing attributes in process `syz.7.3855'.
[  443.742419][T21745] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3855'.
[  443.965103][T21756] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3857'.
[  444.145789][T21763] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3859'.
[  444.153093][T21763] IPv6: NLM_F_REPLACE set, but no existing node found!
[  444.409719][T21767] netlink: 'syz.9.3861': attribute type 16 has an invalid length.
[  444.412975][T21767] netlink: 'syz.9.3861': attribute type 17 has an invalid length.
[  444.515020][T21769] IPv6: NLM_F_REPLACE set, but no existing node found!
[  444.661098][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3861'.
[  444.666185][T19429] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.674218][T19429] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.681500][T19429] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.686835][T19429] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.734114][T21771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  444.749926][T21771] netlink: 'syz.9.3862': attribute type 10 has an invalid length.
[  444.756003][T21771] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  444.760123][T21771] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  444.984092][T21783] mac80211_hwsim hwsim344 wlan1: left allmulticast mode
[  445.000475][T21783] netlink: 'syz.7.3866': attribute type 10 has an invalid length.
[  445.340403][T21808] netlink: 'syz.8.3871': attribute type 10 has an invalid length.
[  445.965184][T21842] netlink: 'syz.9.3880': attribute type 16 has an invalid length.
[  445.968306][T21842] netlink: 'syz.9.3880': attribute type 17 has an invalid length.
[  445.972349][T21842] IPv6: NLM_F_REPLACE set, but no existing node found!
[  446.496444][T21862] netlink: 'syz.7.3884': attribute type 10 has an invalid length.
[  446.500374][T21862] mac80211_hwsim hwsim344 wlan1: entered allmulticast mode
[  446.534006][T21864] netlink: 'syz.7.3885': attribute type 12 has an invalid length.
[  446.837518][T21875] __nla_validate_parse: 2 callbacks suppressed
[  446.837534][T21875] netlink: 121 bytes leftover after parsing attributes in process `syz.8.3888'.
[  446.844822][T21874] netlink: 'syz.8.3888': attribute type 16 has an invalid length.
[  446.854432][T21875] IPv6: NLM_F_REPLACE set, but no existing node found!
[  446.857355][T21874] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3888'.
[  446.867414][T21871] mac80211_hwsim hwsim347 syzkaller0: left promiscuous mode
[  446.936305][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3890'.
[  446.947497][T21886] syzkaller0: mtu less than device minimum
[  446.952109][T21886] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3891'.
[  446.962528][T21886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3891'.
[  447.024297][T19429] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  447.857648][T21905] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3896'.
[  447.934092][T21913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  447.943508][T21913] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  447.946978][T21913] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  448.566529][T21936] lo speed is unknown, defaulting to 1000
[  448.756662][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3902'.
[  448.765785][T21942] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3902'.
[  448.959180][T19374] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[  448.971943][T19374] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  448.974782][T19374] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  448.978427][T19374] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  448.982662][T21961] IPv6: NLM_F_REPLACE set, but no existing node found!
[  449.000190][T21959] lo speed is unknown, defaulting to 1000
[  449.025831][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3908'.
[  449.029299][T21964] IPv6: NLM_F_REPLACE set, but no existing node found!
[  449.369391][T21978] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3912'.
[  449.613736][T21985] validate_nla: 10 callbacks suppressed
[  449.613754][T21985] netlink: 'syz.9.3915': attribute type 10 has an invalid length.
[  449.623492][T21985] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  449.627444][T21985] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  449.733008][T21988] mac80211_hwsim hwsim344 wlan1: left allmulticast mode
[  449.744305][T21988] mac80211_hwsim hwsim344 wlan1: entered allmulticast mode
[  450.201677][T22010] macvtap0: left promiscuous mode
[  450.203588][T22010] mac80211_hwsim hwsim316 wlan0: left promiscuous mode
[  450.205972][T22010] mac80211_hwsim hwsim317 syzkaller0: left promiscuous mode
[  450.208269][T22010] mac80211_hwsim hwsim317 syzkaller0: left allmulticast mode
[  450.221330][T22013] hsr_slave_0: left promiscuous mode
[  450.224315][T22013] hsr_slave_1: left promiscuous mode
[  451.089939][T22033] netlink: 'syz.7.3927': attribute type 4 has an invalid length.
[  451.246568][T22039] netlink: 'syz.8.3929': attribute type 12 has an invalid length.
[  451.314869][T22040] netlink: 'syz.8.3929': attribute type 12 has an invalid length.
[  451.386651][T22044] lo speed is unknown, defaulting to 1000
[  451.423606][T22047] netlink: 'syz.9.3930': attribute type 12 has an invalid length.
[  451.466328][T22047] 8021q: adding VLAN 0 to HW filter on device bond1
[  451.472177][T22047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.122827][T22070] __nla_validate_parse: 15 callbacks suppressed
[  452.122846][T22070] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3936'.
[  452.145105][T22064] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3935'.
[  452.209621][T22061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3935'.
[  452.216281][T22061] netlink: 'syz.7.3935': attribute type 10 has an invalid length.
[  452.263522][T22076] netlink: 'syz.9.3937': attribute type 10 has an invalid length.
[  452.341205][T22081] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3938'.
[  452.345033][T22081] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3938'.
[  452.353428][T22081] netlink: 'syz.8.3938': attribute type 10 has an invalid length.
[  452.357275][T22081] mac80211_hwsim hwsim354 wlan1: entered allmulticast mode
[  452.478378][T22088] mac80211_hwsim hwsim354 wlan1: left allmulticast mode
[  452.484240][T22083] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  452.484940][T22088] netlink: 'syz.8.3941': attribute type 10 has an invalid length.
[  452.498108][T22083] netlink: 'syz.9.3939': attribute type 10 has an invalid length.
[  452.502822][T22088] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3941'.
[  452.684591][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.687336][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.760251][T22109] lo speed is unknown, defaulting to 1000
[  452.814623][T22122] geneve2: entered promiscuous mode
[  452.816478][T22122] geneve2: entered allmulticast mode
[  453.062351][T22142] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  453.067022][T22142] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3955'.
[  453.123657][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3956'.
[  453.211130][T22150] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  453.214172][T22150] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  453.600946][T22159] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3959'.
[  453.603746][T22159] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3959'.
[  453.980934][T22160] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  453.990872][T22161] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  454.085178][T22166] mac80211_hwsim hwsim354 wlan1: entered allmulticast mode
[  454.138005][T22174] IPv6: NLM_F_REPLACE set, but no existing node found!
[  454.344177][T22194] hsr_slave_0: left promiscuous mode
[  454.348256][T22194] hsr_slave_1: left promiscuous mode
[  454.363887][T22193] IPv6: NLM_F_REPLACE set, but no existing node found!
[  454.544479][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.549228][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.749617][T22223] mac80211_hwsim hwsim354 wlan1: left allmulticast mode
[  454.761756][T22223] validate_nla: 8 callbacks suppressed
[  454.761767][T22223] netlink: 'syz.8.3977': attribute type 10 has an invalid length.
[  454.770894][T22223] mac80211_hwsim hwsim354 wlan1: entered allmulticast mode
[  454.871205][T22227] netlink: 'syz.8.3979': attribute type 3 has an invalid length.
[  454.873961][T22227] netlink: 'syz.8.3979': attribute type 1 has an invalid length.
[  454.884459][   T26] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  454.932895][T22231] netlink: 'syz.7.3980': attribute type 4 has an invalid length.
[  455.430615][T22255] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  455.949975][T22297] netlink: 'syz.8.3995': attribute type 10 has an invalid length.
[  456.972817][T22326] batadv1: entered promiscuous mode
[  456.975021][T22326] batadv1: entered allmulticast mode
[  457.061749][T22328] mac80211_hwsim hwsim354 wlan1: left allmulticast mode
[  457.181941][T22345] netlink: 'syz.8.4009': attribute type 10 has an invalid length.
[  457.191152][T22345] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  457.208041][T22345] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  457.722111][T22374] netlink: 'syz.9.4016': attribute type 16 has an invalid length.
[  457.724733][T22374] netlink: 'syz.9.4016': attribute type 17 has an invalid length.
[  457.731201][T22374] __nla_validate_parse: 18 callbacks suppressed
[  457.731211][T22374] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4016'.
[  457.738465][T22374] IPv6: NLM_F_REPLACE set, but no existing node found!
[  458.160064][T22389] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4020'.
[  458.163323][T22389] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  458.166539][T22389] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  458.235742][   T34] INFO: task syz.1.2746:17342 blocked for more than 143 seconds.
[  458.239407][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  458.242052][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  458.247166][   T34] task:syz.1.2746      state:D stack:24296 pid:17342 tgid:17341 ppid:5846   task_flags:0x400140 flags:0x00004004
[  458.252000][   T34] Call Trace:
[  458.253471][   T34]  <TASK>
[  458.254783][   T34]  __schedule+0x1798/0x4cc0
[  458.256799][   T34]  ? validate_chain+0x897/0x2140
[  458.258966][   T34]  ? __lock_acquire+0xab9/0xd20
[  458.261432][   T34]  ? __pfx___schedule+0x10/0x10
[  458.263737][   T34]  ? schedule+0x91/0x360
[  458.266820][T22396] trusted_key: syz.8.4020 sent an empty control message without MSG_MORE.
[  458.266912][   T34]  schedule+0x165/0x360
[  458.274160][   T34]  schedule_timeout+0x9a/0x270
[  458.281079][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  458.301889][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  458.304190][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.306478][   T34]  ? wait_for_completion+0x267/0x5d0
[  458.309274][   T34]  wait_for_completion+0x2bf/0x5d0
[  458.313750][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  458.324363][   T34]  ? up_write+0x1c4/0x420
[  458.328476][   T34]  ? remove_client_context+0xc0/0x1e0
[  458.333504][   T34]  disable_device+0x1c6/0x320
[  458.335598][T22391] netlink: 'syz.7.4021': attribute type 10 has an invalid length.
[  458.336633][   T34]  ? __pfx_disable_device+0x10/0x10
[  458.340013][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  458.342425][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  458.350185][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  458.356730][   T34]  nldev_dellink+0x2d1/0x320
[  458.358430][   T34]  ? __lock_acquire+0xab9/0xd20
[  458.362304][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  458.374515][   T34]  ? apparmor_capable+0x137/0x1b0
[  458.376741][   T34]  ? bpf_lsm_capable+0x9/0x20
[  458.378602][   T34]  ? security_capable+0x7e/0x2e0
[  458.380526][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  458.382459][   T34]  rdma_nl_rcv+0x6ae/0x980
[  458.384142][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  458.391197][   T34]  ? __lock_acquire+0xab9/0xd20
[  458.396309][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  458.397959][   T34]  netlink_unicast+0x82f/0x9e0
[  458.399468][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  458.401154][   T34]  ? netlink_sendmsg+0x642/0xb30
[  458.431066][   T34]  ? skb_put+0x11b/0x210
[  458.436551][   T34]  netlink_sendmsg+0x805/0xb30
[  458.447868][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  458.453277][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  458.454921][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  458.475550][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  458.477344][   T34]  __sock_sendmsg+0x21c/0x270
[  458.478922][   T34]  ____sys_sendmsg+0x505/0x830
[  458.480480][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  458.482257][   T34]  ? import_iovec+0x74/0xa0
[  458.483922][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  458.493508][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  458.495421][   T34]  ? __fget_files+0x2a/0x420
[  458.497024][   T34]  ? __fget_files+0x3a0/0x420
[  458.498582][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  458.500148][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  458.501871][   T34]  ? do_syscall_64+0xbe/0xfa0
[  458.503374][   T34]  do_syscall_64+0xfa/0xfa0
[  458.504814][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.507368][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.509306][   T34]  ? exc_page_fault+0xab/0x100
[  458.510804][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.512652][   T34] RIP: 0033:0x7fbab7d8eba9
[  458.514065][   T34] RSP: 002b:00007fbab8b45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  458.516837][   T34] RAX: ffffffffffffffda RBX: 00007fbab7fd5fa0 RCX: 00007fbab7d8eba9
[  458.519308][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009
[  458.521675][   T34] RBP: 00007fbab7e11e19 R08: 0000000000000000 R09: 0000000000000000
[  458.524090][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.526947][   T34] R13: 00007fbab7fd6038 R14: 00007fbab7fd5fa0 R15: 00007fff7c3e9c68
[  458.529369][   T34]  </TASK>
[  458.530466][   T34] 
[  458.530466][   T34] Showing all locks held in the system:
[  458.532959][   T34] 1 lock held by khungtaskd/34:
[  458.535114][   T34]  #0: ffffffff8e33d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  458.540102][   T34] 2 locks held by getty/5674:
[  458.541957][   T34]  #0: ffff888107fa70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  458.545801][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  458.549533][   T34] 4 locks held by kworker/u8:2/5715:
[  458.551570][   T34]  #0: ffff88801b6ff148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  458.556328][   T34]  #1: ffffc900030ffba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  458.560282][   T34]  #2: ffffffff8f738410 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x810
[  458.563890][   T34]  #3: ffff888120328700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  458.568326][   T34] 4 locks held by kworker/1:3/5899:
[  458.570310][   T34] 2 locks held by syz.1.2746/17342:
[  458.572308][   T34]  #0: ffffffff9a0a2bb8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  458.576308][   T34]  #1: ffff888120328700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  458.580750][   T34] 2 locks held by syz.2.3115/18835:
[  458.582378][   T34]  #0: ffffffff8f738410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  458.585588][   T34]  #1: ffff888120328700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  458.589132][   T34] 2 locks held by syz.0.3251/19313:
[  458.590843][   T34]  #0: ffffffff8f738410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  458.593807][   T34]  #1: ffff888120328700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  458.598038][   T34] 2 locks held by syz.3.3370/19771:
[  458.599669][   T34]  #0: ffffffff8f738410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  458.602623][   T34]  #1: ffff888120328700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  458.606504][   T34] 2 locks held by syz.4.3399/19897:
[  458.608142][   T34]  #0: ffffffff8f738410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  458.611187][   T34]  #1: ffff888120328700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  458.614558][   T34] 2 locks held by syz.6.3650/20859:
[  458.616409][   T34]  #0: ffffffff8f738410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  458.619622][   T34]  #1: ffff888120328700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  458.622956][   T34] 2 locks held by syz.5.3697/21036:
[  458.624822][   T34]  #0: ffffffff8f738410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  458.628182][   T34]  #1: ffff888120328700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  458.631813][   T34] 2 locks held by syz.5.3697/21039:
[  458.633370][   T34]  #0: ffffffff8f738410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  458.636482][   T34]  #1: ffff888120328700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  458.639858][   T34] 2 locks held by syz.5.3697/21044:
[  458.641596][   T34]  #0: ffffffff8f738410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  458.644870][   T34]  #1: ffff888120328700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  458.648525][   T34] 1 lock held by syz.7.4021/22391:
[  458.650132][   T34]  #0: ffffffff8e3430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  458.653501][   T34] 
[  458.656889][   T34] =============================================
[  458.656889][   T34] 
[  458.659522][   T34] NMI backtrace for cpu 0
[  458.659533][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  458.659542][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.659548][   T34] Call Trace:
[  458.659553][   T34]  <TASK>
[  458.659557][   T34]  dump_stack_lvl+0x189/0x250
[  458.659571][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.659580][   T34]  ? __pfx__printk+0x10/0x10
[  458.659596][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  458.659608][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  458.659617][   T34]  ? __pfx__printk+0x10/0x10
[  458.659629][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  458.659642][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  458.659652][   T34]  watchdog+0xf60/0xfa0
[  458.659666][   T34]  ? watchdog+0x1e2/0xfa0
[  458.659683][   T34]  kthread+0x711/0x8a0
[  458.659693][   T34]  ? __pfx_watchdog+0x10/0x10
[  458.659702][   T34]  ? __pfx_kthread+0x10/0x10
[  458.659710][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  458.659723][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.659733][   T34]  ? __pfx_kthread+0x10/0x10
[  458.659742][   T34]  ret_from_fork+0x4bc/0x870
[  458.659755][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  458.659768][   T34]  ? __switch_to_asm+0x39/0x70
[  458.659777][   T34]  ? __switch_to_asm+0x33/0x70
[  458.659785][   T34]  ? __pfx_kthread+0x10/0x10
[  458.659793][   T34]  ret_from_fork_asm+0x1a/0x30
[  458.659809][   T34]  </TASK>
[  458.659812][   T34] Sending NMI from CPU 0 to CPUs 1:
[  458.709868][    C1] NMI backtrace for cpu 1
[  458.709881][    C1] CPU: 1 UID: 0 PID: 22389 Comm: syz.8.4020 Not tainted syzkaller #0 PREEMPT(full) 
[  458.709894][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.709900][    C1] RIP: 0010:__lock_acquire+0x2d/0xd20
[  458.709917][    C1] Code: 41 56 41 55 41 54 53 48 83 ec 30 48 89 fb 65 48 8b 3c 25 08 00 c4 92 45 31 ff 83 3d 2c f9 26 0e 00 0f 84 7e 0c 00 00 48 8b 03 <48> 3d 40 c3 87 93 0f 84 6f 0c 00 00 41 89 cc 41 89 d6 8b 0d bb 6d
[  458.709923][    C1] RSP: 0018:ffffc900210e7630 EFLAGS: 00000002
[  458.709931][    C1] RAX: ffffffff99ebd440 RBX: ffffffff99f455f0 RCX: 0000000000000000
[  458.709936][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888020138000
[  458.709941][    C1] RBP: ffffffff84d57aea R08: 0000000000000001 R09: 0000000000000001
[  458.709946][    C1] R10: dffffc0000000000 R11: fffffbfff1f88787 R12: 0000000000000000
[  458.709950][    C1] R13: ffffffff99f455f0 R14: 0000000000000001 R15: 0000000000000000
[  458.709955][    C1] FS:  00007fed1bb5f6c0(0000) GS:ffff8881a39e0000(0000) knlGS:0000000000000000
[  458.709961][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  458.709966][    C1] CR2: 00007fd86225d440 CR3: 0000000111c5c000 CR4: 00000000000006f0
[  458.709989][    C1] Call Trace:
[  458.709993][    C1]  <TASK>
[  458.709998][    C1]  ? debug_check_no_obj_freed+0x17a/0x470
[  458.710009][    C1]  lock_acquire+0x120/0x360
[  458.710017][    C1]  ? debug_check_no_obj_freed+0x17a/0x470
[  458.710028][    C1]  _raw_spin_lock_irqsave+0xa7/0xf0
[  458.710040][    C1]  ? debug_check_no_obj_freed+0x17a/0x470
[  458.710048][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  458.710058][    C1]  debug_check_no_obj_freed+0x17a/0x470
[  458.710066][    C1]  ? __page_table_check_zero+0xba/0x530
[  458.710079][    C1]  ? __page_table_check_zero+0xba/0x530
[  458.710089][    C1]  __free_frozen_pages+0x4dd/0xd30
[  458.710102][    C1]  vfree+0x25a/0x400
[  458.710111][    C1]  ? __pfx_kcov_close+0x10/0x10
[  458.710121][    C1]  kcov_close+0x28/0x50
[  458.710128][    C1]  __fput+0x44c/0xa70
[  458.710139][    C1]  task_work_run+0x1d4/0x260
[  458.710148][    C1]  ? __pfx_task_work_run+0x10/0x10
[  458.710156][    C1]  ? do_exit+0x6b0/0x2300
[  458.710165][    C1]  ? kmem_cache_free+0x19d/0x690
[  458.710177][    C1]  do_exit+0x6b5/0x2300
[  458.710185][    C1]  ? do_raw_spin_lock+0x121/0x290
[  458.710193][    C1]  ? __pfx_do_exit+0x10/0x10
[  458.710203][    C1]  do_group_exit+0x21c/0x2d0
[  458.710210][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.710249][    C1]  get_signal+0x1286/0x1340
[  458.710263][    C1]  arch_do_signal_or_restart+0xa0/0x790
[  458.710273][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  458.710282][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  458.710292][    C1]  ? exit_to_user_mode_loop+0x40/0x130
[  458.710303][    C1]  exit_to_user_mode_loop+0x75/0x130
[  458.710312][    C1]  do_syscall_64+0x2bd/0xfa0
[  458.710322][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.710331][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.710337][    C1]  ? exc_page_fault+0xab/0x100
[  458.710347][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.710353][    C1] RIP: 0033:0x7fed1ad8eba9
[  458.710359][    C1] Code: Unable to access opcode bytes at 0x7fed1ad8eb7f.
[  458.710363][    C1] RSP: 002b:00007fed1bb5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  458.710371][    C1] RAX: 000000000000001c RBX: 00007fed1afd5fa0 RCX: 00007fed1ad8eba9
[  458.710376][    C1] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000009
[  458.710380][    C1] RBP: 00007fed1ae11e19 R08: 0000000000000000 R09: 0000000000000000
[  458.710385][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.710389][    C1] R13: 00007fed1afd6038 R14: 00007fed1afd5fa0 R15: 00007ffff884d728
[  458.710396][    C1]  </TASK>
[  458.863146][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  458.865304][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  458.868123][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.871099][   T34] Call Trace:
[  458.872104][   T34]  <TASK>
[  458.873037][   T34]  dump_stack_lvl+0x99/0x250
[  458.874455][   T34]  ? __asan_memcpy+0x40/0x70
[  458.875961][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.877571][   T34]  ? __pfx__printk+0x10/0x10
[  458.879024][   T34]  vpanic+0x237/0x6d0
[  458.880273][   T34]  ? __pfx_vpanic+0x10/0x10
[  458.881702][   T34]  ? preempt_schedule_common+0x83/0xd0
[  458.883620][   T34]  panic+0xb9/0xc0
[  458.884874][   T34]  ? __pfx_panic+0x10/0x10
[  458.886272][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  458.887857][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  458.889681][   T34]  watchdog+0xf9f/0xfa0
[  458.890930][   T34]  ? watchdog+0x1e2/0xfa0
[  458.892229][   T34]  kthread+0x711/0x8a0
[  458.893495][   T34]  ? __pfx_watchdog+0x10/0x10
[  458.894948][   T34]  ? __pfx_kthread+0x10/0x10
[  458.896687][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  458.898370][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.900105][   T34]  ? __pfx_kthread+0x10/0x10
[  458.901617][   T34]  ret_from_fork+0x4bc/0x870
[  458.903147][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  458.904865][   T34]  ? __switch_to_asm+0x39/0x70
[  458.906447][   T34]  ? __switch_to_asm+0x33/0x70
[  458.908049][   T34]  ? __pfx_kthread+0x10/0x10
[  458.909547][   T34]  ret_from_fork_asm+0x1a/0x30
[  458.911103][   T34]  </TASK>
[  458.912789][   T34] Kernel Offset: disabled
[  458.914223][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:27:25  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822fe7fb RBX=0000000000000024 RCX=ffff88801f0a3a00 RDX=0000000000000000
RSI=0000000000001000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc900033cf550
R8 =0000000000000000 R9 =ffffffff822ff8b7 R10=dffffc0000000000 R11=fffff940009162d9
R12=0000000000122c5b R13=dffffc0000000000 R14=ffff88805fffa400 R15=0000000000001000
RIP=ffffffff81bfd357 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83e0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7604907d60 CR3=000000000e138000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f7603da76c3 00007f7603da76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=00005555593a6750 00005555593a58e0
XMM06=0000000000000000 0000000000000000 XMM07=c088848004880007 880302b8c6048400
XMM08=0784030404000780 0307800408900320 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f690
R8 =ffff888020118237 R9 =1ffff11004023046 R10=dffffc0000000000 R11=ffffffff85548780
R12=dffffc0000000000 R13=ffffffff99d358f3 R14=ffffffff9a02a180 R15=0000000000000000
RIP=ffffffff855487fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39e0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc072b4008 CR3=0000000069108000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0009000c00000000 000000000000000a
XMM02=000000080009000c 0000000000000000 XMM03=0000000a00000000 0000000001ef0018
XMM04=0000000000000095 00000000000000b7 XMM05=0000008400000085 00000001000002b7
XMM06=00000000000091bf 000000e600000000 XMM07=0000001000006318 0000008600000085
XMM08=31148e81a18b0d9c fc0f16b97e4c881d XMM09=0000000000000000 00007f79cec12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
