last executing test programs:

1.740984173s ago: executing program 0 (id=438):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r2, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x84)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002100)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6ccc8788009406a5aca69f8bf06cf6393423710f84bee029d778198d36", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250a00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000002)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan3\x00', <r6=>0x0})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000780)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000980)=[{&(0x7f00000008c0)="11ff117dee0a1cd1a6de7a3e01bc460807a1a157f6df3ed83e03300a34802e8e207d70db9395350638c2703ed298e32ddec5aaca1f6261c757f6ad39ceeeb95f29b6a1b596dadf", 0x47}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1400000000000000d1d5000007000000e108535100000000a895f2cf6065d3aa"], 0x18}}], 0x1, 0x40000)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x8051}, 0x80)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x402, 0xffffffffffffffff, 0x6}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r8}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800a10f59122c31e63200"/20, @ANYBLOB="fb26d00cdeb1c15374ab60a92e51a23db48ef0111641930f3f6b2343b3b64a1eeac367a3c2bc", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b114b000000000006000000090000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32=0x0, @ANYRES16=r3], 0x44}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x250, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x18}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x55}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xaa5}, @NL80211_ATTR_FRAME={0x1e5, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x80}, @broadcast, @device_a, @random="b2bcfa318998", {0x5, 0x4}, @value=@ver_80211n={0x0, 0xaf, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x1, 0x4, 0x64, @val={0x10, 0x1, 0xc0}, [{0xdd, 0x3c, "12fa8b1b42f3139bd5e4b5582bca041ab647267d5f8ad5f3bd17703cbecc17eff22723bbd5791b60d64f3ab4e4269db9a77559f2f6e2afcd36547922"}, {0xdd, 0xd3, "ab11715039068e37481cf2550883789c03aaa9ab9728b7302550c9802dc96e8fb0e2f42cde7f814ff858f2fbf001601feda66d66a62e5618a2ef7f4ae544a6bf725b8f64e096bf280bfc7e3b3f3409fc0865891add6d98ee32076b0cc89431a3b4060d797f8530b9290f8a8c8cef0447cb7d961f71b0eeec1fb8a0e8f0a6506e0dcab152ffa3bf57492cc1a222372e9322dbc774cba394ad512f4c1d1a3017babc4a034049c16260a9c97441a6afbfb71e999b22dbfe4a79896d6d918af2c38db77b584b4d39d515f7e393e7a82a9854812f35"}, {0xdd, 0xa7, "5c05f2917d3de169a3efd8e5912758cacab594e440b3e22bdee35220a7095a70214ee004cbfbc1e1182f6ba229843e0c72d5af2ba8643c399b8d4f2f88cd6c8849b982c3047402fff14ba8394aaafbf06efd7c5e3d5dce2be222bfe83c71817b4dccc423efc3b58061a2b1e9c1b0c1c588cd6e56bebc5ee7211aee2fdbafe6804569807f3bdabec54296f90846598857fbe3bb2c97fe843852516b80e2810fef652c195ead68d7"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x250}, 0x1, 0x0, 0x0, 0x40800}, 0x8000)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010229bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
r11 = socket(0x10, 0x3, 0x0)
getsockopt$bt_hci(r11, 0x0, 0x1, &(0x7f00000000c0)=""/219, &(0x7f0000000000)=0xdb)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'pim6reg0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000006800010025bd7000feffffec0a00070000000000180008801400010001000000000000001f00040002080400060007000700000008000500", @ANYRES32=r12], 0x40}}, 0x40040d0)

1.202951841s ago: executing program 0 (id=441):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'geneve0\x00', {'veth0_virt_wifi\x00'}, 0x8})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010003704000000000000010000000000", @ANYRES32=r2, @ANYBLOB="83040500000000002800128008000100677470001c000280080004000100000008000200", @ANYRES32, @ANYBLOB="0500060002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000000002010400000000000000000a0000b8b90004000180180003801400018008000100ac1e010108000200ac1414aa100008800c0002"], 0x40}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r5, 0x9}, &(0x7f0000000180)=0x8) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

900.747049ms ago: executing program 1 (id=449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000fadfb66fcffdfff000000001b7c0000aa9f58f3403469f9881c9c622c3a2de0e8ca938c0460ff7dfbea50b0279137a1e212fc154a946b850ac3f7f837638c0d594cae083a5c0cb182e2277984050f8b292cd4a864d72762d3a257a8266d5b05d68a0f800d6f9503f321924bf557bc5da8c426fc71edbb828af14af16ebf0512735dd68f87afe54e18f149c830cf255ccfd67a8a48bb9693e29ff58bd3f4e7c8fa497bd5343b9b9730152662ec2d5afc1d4b1d2eaa4ffb166bf8de717352c56e3cf267f124804843ecc23ee62df341e8e2205898a67032a5751aba1e064af2723d30e5be8cb9d0df6a44f34f0cdd52837f263f5b0517b9bfd4f086a4d0aaa6e07bf7a5b19bf09ef064c66e6abdfad149d84add0bfc87bf46a526e21dc35949063df889d47b536b56c3fe59628eb3b4b3eca5afe08b2ab0170ec1085a6a774e2a"], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0)
setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000000c0), 0x4)

898.877137ms ago: executing program 1 (id=451):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRES32=0x0], 0x40}}, 0x0)

843.492128ms ago: executing program 1 (id=452):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x24040810}, 0x24040808)
r2 = socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000001480)={0x1})
ioctl(r2, 0xa57a, &(0x7f0000000080)="fa3462")
close(0x3)

842.688332ms ago: executing program 1 (id=453):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x0)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@const={0x3}, @volatile={0xd, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x30, 0x61, 0x5f, 0x18, 0x5f, 0x2e, 0x0, 0x61, 0x61]}}, &(0x7f0000000040)=""/16, 0x3c, 0x10, 0x0, 0x8, 0x10000}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1d, 0x4, 0x4, 0x1f, 0x9221, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x50)
r3 = socket$inet(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000000c0))
recvmmsg(r4, &(0x7f00000037c0), 0x0, 0x2050041, &(0x7f0000003700))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x0) (async)
socket(0x840000000002, 0x3, 0x100) (async)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@const={0x3}, @volatile={0xd, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x30, 0x61, 0x5f, 0x18, 0x5f, 0x2e, 0x0, 0x61, 0x61]}}, &(0x7f0000000040)=""/16, 0x3c, 0x10, 0x0, 0x8, 0x10000}, 0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1d, 0x4, 0x4, 0x1f, 0x9221, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x50) (async)
socket$inet(0x2, 0x2, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20) (async)
socket(0x10, 0x803, 0x0) (async)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
recvmmsg(r4, &(0x7f00000037c0), 0x0, 0x2050041, &(0x7f0000003700)) (async)

732.535113ms ago: executing program 1 (id=455):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4080)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes-asm)\x00'}, 0x58)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f0000001840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001800)={&(0x7f0000000480)=@newtaction={0x1380, 0x30, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{0x136c, 0x1, [@m_ipt={0x1194, 0x6, 0x0, 0x0, {{0x8}, {0x1160, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x102a, 0x6, {0x1, 'raw\x00', 0x3, 0x1, "2b8f832d539d65cc0dfc94bb5ae282d660b57bf495d35f96d35103cd8e9673ed1d056fbcc31cb0fb3bde24106cc60cf93c042a0b8075085e85cd13ab1b2ec47ced99ff11a1263460a930cd9005e4cd6961aff0c36e2d0297af21d9101a4f80cdeba16bff272650da52b13c77e78780d09e11286f7519365ab07ae1e18b3b68bb8d8eef09e725280b05cd3d755fad846ab40e0b0706c86ab331ace56e0bc29c459674d40cc25ce9d3d1a11f4ee807fe7129e1b6b5dadf033bef5c1446b3cece3398e199ff784d83b9257b762a240714f7374b1a4c828bce911364a63a9b70edec63df06886c238e6132dd76bb13d8aa1517c979165fea5f3a42c5c8330fbec5f8f3f167bc4350f78f54f9ecb9c3d17d473bc6da613939297c81c8952a4f853dc543736ba92188ba3407cbc152a8b85210d5d9d2387b273cdec14542ce3648143a5df857b458af2e636c27153d9b5637c4a1077fbfe5307a39a2be53ab3e1b366d9b2ea43daaf966b914b12162f3749d521690bcbf246c82caec74bfb3607eca0e0977dd1d7a4ebe52349ed3c537240eea8d39e616badd70836b30e8ef1e4f5f1b2ec707b751049705e91fa5912507ad47c30e3625f76d432da9464ad8c208c863ca17b0340e19a4c4a61215eca0660f9601f24113466702ada543419fc68d84f3d8a77cba757238ccd5ba4cfabeae25ac78880cc0ab22de8554ed1a68b8e95ad3ca90b153f06e2c7c855cc916c664055c8c7352b8d5388d0094cd86ca79ce6b3b3b0bf3ec92daa38895fa3e6004b500b3c4b6987e58709200821e223cc8f66aac35cdbd05262a6732dfaee440cdc004ab6f6756be1403ffc2123c3de995d6f462542534d25d4bfd8735377aad8ec0f1972317233a11098f390b187fb0f96761bb57864c7fdcd467bea911852c796c78071233835d9282ad44204749eff3fca0fb838d4a883def3d1ab338c1edd4ecb8c0ca1f8a75e4539c4727c22fbfe0a5d499e82f0e5d4c474796dee6be316043d96774f287264d4573553e87f4a12708229c25f0fc29396f73087be2b9a04c4af83802e4af8283e0256a78ba2957bd5af4bc204d95ce1d95f5af26733b026fb65a83b580458c32f3a91bd999a27de494979d3e2672cb0558f2b37b0bf8aad28ec6a38756587677606bb6ed3c35dad0f2a16393cb3f04a2e7d2c4ddf8da3515720c8175afe41def8664aaf7a7e2f4fe92b8f79dd724990e0c9253bcfff501bb131e2f282e866e0c87c87e50cb62ca33cb86350a8ec144c3cb3d9705cc6a27684c78369529bec8a619b22903ebdfbb748da7d6ff6ae7db0cc0e5196b3684e4462bc14203034d30b8b828e0d807e4ff090b5a54ee6f5d346f4a0db1f8492523337ef8eb29a4ee32cace12340a9e991faf2b52e2de510f01740c97a8f3124d2cc536f2b0d60b07b706a9f2de3863d2d7efab6626ff099b00871ae50f891e4b4e5e6ba2b7cb57738c3c61c29ff6714cfe0a3819249b66b454a5d7b84f2eef8543e3f42b98908039b932080698f7bdaabe3756829f4a0310cee8b02c41713937f389f69e1aeb9f8bea27806c26b1f860921e6f45d6122702d48b1b02e906c1bea85803ef446bef8ff9d29c0c272142ca6fcf264f593b1c1b1849af105d798f2b667f337f4aeca30d19b556cbbfb62708321ed3f8ae04522ee5f20d4b92d8e72cac7b7939163d5628fcde0b83f856a91f1abb3a8d156838d5aa7bb6405e1853b572bffaa27d6b12aa6e3eff8419c978fa1f8b94394f727624ca07318cbc4690ca128b2732641561afa2832150b7ef3d0141286632763d219445a744c3a617fa50a7c3a86b30468a7f805424620dd1b9dd2cf433058be6d9b4bfd483f7a186b5a2ad41e39f8e17228c0299192cf7d72291ad4b069050898da97228a510817bb05df6092f8f8483fa8693ae0e1aa5fb9a91f44e7db3bf68816ea9801d30939aedfacf4979f3fb5758b335c83437dc83a93ea33defa12d6bdebb9452c450883219ed9cfd96cad6b093929279b466fd9aae6afc59219613162ba8af00871aa9b8905d1ea52a556d5de9701e6b56b84339badc2a3f3371d6ed62ef3709715f3ff84caada2dd969b644eea7e1314334902a7a1de83e4530ac0b2d566d397b968ae533a0636b04cbce79303fcae3ba5b90a7254b3fa033fd32cefd3cbb63693bbcee7422476ceaa935798a514cfdcf249cadfbf959b21efc5aa0a3beefcb62d55b56f7dd11aaec1e2f30d50c7e8ee7b8024020d452d893c67de02723010f31c12009254e56e33eb6665c9044b01c1a8349e44d884da26f568e8e1ffb0dae931da4c347e8ef60f1347e16dc0daa0a42bd2704e7ec0507639e8e610bac580c808465cb08ec2297698832ada497ed9c585d4745dcd724f2803615d9c1617b43a5f6d737d1a1f3f3f73b82b2a116d0306daecca118227c8deb00679560bdfb3a6e40be04f863342e2e78ddc67d5cc2d316998082c2bb7a017c32a4d35f07f09141a1ad2056e09c1cbe901c5018460bc3053b4cb2ee66be3664b2d021a81631d82f4c3378d3d2c6b8d94a3b88f7fa1bc7e66292650d8edd81faff116e4f35cc023d2e3cef636eb954559b686c4a11fcee4f7b9ed3501668a6e43c91a554a013b01ba3fe920a3360790bf8dcde8fc9a7235fe9b05e0b6677bd16b4f387f0d6ecf4dfc09a4335f54cf60da09d180ea0503211a0ef5ea173dd22657c1b58ca9ce22e02e443dca6942de9a7f1b5b0ed0e467239775c875cb6372828b911bf5717c092addad8f7a3d3e1548104ba0f6055108a5d4af171c8c6f070a6b7a403214b96ed600049ba9ce86cf680e657bf48958630714ac367439ca024d05ce3bb8111ae86249ecb996f5eb911cb52e33865f280a5f73f3b5c8a523abdb2d1a647f8c84792deaff4dc100c0ce88cd210b991c68188907286ee54fe12fa2aaf389d782e038c26265ade10e8bcb6ebb144001531671037ce58b60c4cacfe8402a795c3b84b7884da61d273b3826d72b2b6c1e41f84ce0cac4b24de49d393773ec7da1b4a2d115f1bd7258152d361664c2e7ed93dd3bb187b6e963d8fa86af2684040d7fd6bb2076df7e73bb21eca4194acf164492bc9e6042464b1f96dc1af24d1ddd4ef1d77335a8182d6b39976df8e16a1040733db16f6be257ff17550ab1092d90b6e04a3a8020e395ab826e1a524cd8011cb55d8ab880530a6a1f0cf940e47636ca1a207b5d616cc54653309ac030988536eae07e36be4a87194503947e12ca49ae135269bce770cfd7d4532f93584485dc8f8b441ab510dff8d9af7e8f36771778d00f0c84f777e51892d40730775b5fa3a021925a6a91c998aea38e99084a30705c2a8b1e5eeae97a9686b8fa152c0dcce7c50b4d08c503832eae62042d45ed816f8b31a40241ef7a502acddb2c6bed436111374f181e5b35ed4cd6178ba7db3a54011ea556bd204f6e3fd055bd48b51d3ebbb2da54147fea4580207d23a019178fa466de5972f97117278ba8b0361a67b127d60e4b88ce84d71b02ad3160778f0fc139bb13af31bcbe783f04829a1795ba015449860afac38db8c5dc07c981df3f957bdef65acc5d48a97c14abf3571b213db7f125e73828c8e5cc3bec361a014015be1bb63887c52e9d23e01f08dfaaa6b93718d403fd2ededebe99e38a593f3b659b58a66edf56b831bde40b3af06febe713a8cb7ba1af2aefd9c57c3f6c6a8c126b8f13f187b539bb68bcdc9ea9688abbae8ed417901d2661b3c35e84a8823615b00a8ad9d5d451a76b930fc66255a9e8926a02e791d099f2c5c15503fecd8c3383acfcf91ce7015c07ea578cfae1ab677e0430c771eb1f568ffacf098449d4c6f958f77b5fb8111cbb5bd941f21154606f3b80975786aa4e9b681651facd38d7299370939dfbcafd7fc5851ef454bac148f0a477783c336daeb3189009ee50ea7833b7f9c62cb021d210ab1e1e248bde05be25316a532963abc932793248e2a4635009434271c026debda60c769d4ef1851a0e1e37af1a395e3d1dbfcfbfe4e14957fc69af8f9ce9210b61e4a70e8cc61e1baba0d8fe63b172925a32050a805734851580b204efc5b00a6e0176574afa5919d9ab1adcb8de397b87264cbcbae46895ff93ef647046050c17d461280d8a30751b5ac2af73d026a20a174f4254a67d89d1f80034a4a1233d2ca4a7aeef2e9dee3eb691cb8a8ff50024980d570c3675dcff2a421871c8409516dcc67c0ee014022dfb0e7e567310d891b6d3519c9614617d7011a7a17819c7d403a55bee701641a1dbd98b3891050b6d50595855d976afadc4c6e66c03b35c0bddad48aa03c4dc4837e40bbcd0af05b0b435adc8e2ac5f311ea2717ab50c5c0f4ce0f370c8a2aee8d7d8298cc2c4001e1d8b865e88bc98c94fdaf617493dd0c7255579b1493acf62f73d2d3852c538c4f3b3e6a3f8950466780e11a7efc61e95b14d263848586a6c4da97afaabf19c308802b66d09161f5261603969ecbe488466c0e375e1fd4c99fcc2ce433edfe89661139c9d98e2d6d3eab18ad121b421ecfa872b29785f390583972b148e769f7c991f33b14abda1efc66bdb76f34cc1aecdf08802bac549e48f37687a259baf29cf5f0c91ceea9edbf3cf6015c20620af040c7d4a2ef017491f40bbaa77497edbd2c1319f622d033aceb2dae7408b5c88584204bfd3eda7772fbfd63cfc0e82558017820fa36cbc4797fff528682c7857a2d59a0e282e3cf698955cb0162d22bdfa0a29caaa5c234276c393170c88592f12724657a7795110417c0e53b5fc5660c113a664397cf2c92913ed5f0a637056e3184fc4a9b6ca45c0cb278543a8f887c80a3fcaab9851adbebf6991c959a798b71551a7f223143d8a007a62b819cbf84416b5d4bf49e9a6497c6fb7743a31dd3d7f9062abb49e87ace9153c43c41e63e20517826e0d64c9b78886e0c488e490e2e06a3e1a64974cfa9324a9a07ed3f7eb8aab6c7b40b4edd3e3b7ae8f21a3838af76c96c23405f99ea333304c641047ee466123c7b8d20f4943f56cddb466238371b0502d405bc9dc8a3d6aec40bfe485bf5e4b35a0dcc1b938319e8d81255f2bfc266223a58aa7560646784940ce3f2b04622022999bad084046c4d9ee01265355e899d0ebfdff1c020c342c07f5b9887ac81fce471725d727d812171208241e19bdaa2905c52aad34c0cdfe0024348c80d12260f8f7d8f84245ec91afb84568bb7af87d5a713975e83c3c65d977c5144d63da548aec54087027c3a098e0e15dcdd7ff0f8eace0e366a4c28cad0f359114139907b01b0685ce8105026259cfa1184d5fdac879b263327332e250c96ca3995d634429b6f8ad240d1157f8f33ab8df009d69b7daa1b0a226e68e67b814972784f5799907e0bb297464e47e410acf197fe972f0be55a6745873d37d210f32b7330b1ddf202235a80130b7bdef8dd51db209008f955c0921b2573a2caae4be388de54cc2718e76b61c188e69efc23b984e912039e2baedb3eabe0e58c9e3f784f54ac6e416cca1f6f94cbf78804dfb8d3aabfd65be36e5bd54c4109977883b90295106d55d5d1a925d38ea6657c70a169f0950adef806e44f26c09b45da25f82762544909cf7fd190f48b4cf089a375a950b43b5ab2dc006c3edc00709a204f422017bf247d5f4d0c5bf35fd03e24dd0d8cd5fc205ebc1ad43c4ae0afa21c9e0e2e8e83c762861dcd44c8c89f97081f5415f86586741092796c53b13f147516ea3bfe7536e242e10599b20c044f584378a30ba1810b4c9d055c828f2d2331"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xe}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xf0e}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xbe, 0x6, {0x0, 'nat\x00', 0x2, 0x8, "2bc1031a9e6688c9eb1de08acbc064a02493bfee310b862747c4d55b7e5129b12adf346ef51d59d6f6d15fd49c8605cda37777f175be25535f8938452024d06918ca363610aa679a89572cb6c46b192ec4af7c0b509dc4a1aeaa108382c5701428fb909f94d2b40aa788104ff7a63526aeb8245a828daffc82b17cbb29e5b07312ce50ac59ec3cf5a2180632f0349b6479afe2e0"}}, @TCA_IPT_HOOK={0x8}]}, {0xe, 0x6, "e093a26044f0dbde5dfa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x13c, 0x1b, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x200}, @TCA_IPT_INDEX={0x8, 0x3, 0x1ff}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xb8, 0x6, "4e39b481009838cfd4233bf52d8ffe2263099216e861f002aa6dc12474f0f882ff3698f898900696ad11b19fd76eb85a738bbbb73182513fee235fd82e34b281f31aff345fca3d0f8741e3fab77d910a1c13faa6c4974674066b7e513a530549e477767fe792a27212ba6f22853e7a5d8093320739399b2089fe5536a3df0d06162f51fe6cdf93e9e866852f1135b85907c76751eab4e67ce0a33372ae9b5765a2922508208d34c0233a6f2652053f6b0e043c71"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x98, 0x19, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x65, 0x6, "d058453bc4397634bf9e622a81de60a4decf9cf952957f5c2bdfc9c9e6d5b65e17952e753cf3606c1ab625091cb9851ad5fe80627b237738dd710477934b1961bcc63e58ca161549a2b102e05e91b5610f1c8d36c00f6f5cde6a00842008810e88"}, {0xc}, {0xc}}}]}]}, 0x1380}, 0x1, 0x0, 0x0, 0x40000}, 0x44)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wpan4\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'wpan3\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001d40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000002200)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000021c0)={&(0x7f0000001d80)={0x420, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8bd9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x174, 0x111, 0x0, 0x1, {0x170, 0x5, 0x0, 0x1, [{0x16c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x876b}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x27c, 0x111, 0x0, 0x1, {0x278, 0x5, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x75}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x154}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}]}, {0x180, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbc69}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x185}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x66}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}]}, 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004040)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002340)={&(0x7f0000002280)={0xac, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}]}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfd231139f92fddf9}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4c000)

640.68605ms ago: executing program 1 (id=458):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c4d9106}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)
sendto$inet(r4, &(0x7f0000000240), 0x0, 0x80, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400001c0016801800018014000b00070000ce"], 0x58}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="b70000000a000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e50003000000000026b3a217398f109d04fdffff02000016010000033800001d13f8", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94)
r10 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r10, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000040)=0x9da857d7)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x2, 0x6, 0x2}, {0x6, 0x81, 0x7, 0xd}]}, 0x10)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r12)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)

342.086698ms ago: executing program 0 (id=462):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x220c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(r6, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@private}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8)
listen(r7, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
pwritev(r10, &(0x7f00000007c0)=[{&(0x7f00000000c0)="624a307a35e05d782ba6f3aec7ff2c6b409de27ee98371aac50ebe68c68aa3b1a6a966d4574d377c0ce28c061aab2f883496d5da7d97d5360bddfa6106cceb4b556d83f71884c69452115a9f1627c748602f9a24a19fe198c53026acb4b63aa9f8f744a448761b39ebe93a9d608862ae4a2d4bd11b657335f70cdaa05dcfa6c67148c175c11d223755d4618d8b0712d1f0223416ffd69044c4c80607cad07ae0da731d", 0xa3}, {&(0x7f0000000300)="eaa8b1ca07b67a7977dea189945454f20a2a09349f8837d6624ea907e84300cec9b357aa7fbdf46bc072687a9b38f1c2efd525870e6b7958b5f0342c64561269f98d1a2655aa63a490490b383b5328febda383eda1cd9958a408607741660bb7776251e61f8cf6ac22f96e18bc7f486c74b7d1d2c9b0e0dd781b35ddfe83b19fda1666e11e435b78d981cfb64c36395bedb53fd1a4c1e8514e35750fa850260d97fe01cf5e1c26a1b773b27dd7260ff7347239903d0aeebd524e019d093fa64151690cefbad18c58b0b3a7b48fa2dd60f4fc776eb6e72cdc", 0xd8}, {&(0x7f0000000400)="58e3c95ab6a3ff3a3a0bf69a7d95edbfa8acb4908feec147588ef4e863bf805b5753458bd1d708a6dfc7e3c3315352f6b24d99ab62fe549813c5eac2b44402dab7adb6ab1ad1e76ce0bbe607c0bbe661e32335717d00465c586fe2adf3fac4e3931fcd335a0e403ef08dba198338037ad8f7ba3b8582b6dae101cb71827747320e0b437d7746bea9be0e9c3f278c1707c1c0b83e53717481bed8f5356bff9196f35b3c4827335e5358088c298122156cb05d058c468d7d191f20488cf5dbfeb7915c67409e6301b28d24a118fcfc33db332528d15a531040bf43c48020451abee2f70d066d705f182d3e050a1a2992ebe31cf2c218eb1777cb", 0xf9}, {&(0x7f0000000580)="300a575c0d88e7f015dd01df0475d0935b65a615ce32606030edaedc359b11c285c8eb5a43a0c438572340d3a1f7a41bb0ac1fb0f67bf4e46d6a9d39cc8b7c9afdda4b4a3b569510c79cea3ed2b0257225628e302589c81b1e50c9", 0x5b}, {&(0x7f0000000600)="19b6ae872c2e2358e55293b4551abde5fbeac0c5ebe617aa1fa3c39ed30845f8578b936413769859b092262e3381e1987b45e86019d0c662603588a14ff349474572a276361ef005c1870706c91f007bcc60f6de670c322b4cfe38fc58e662c482e5df725641d0066f6f86d3a8a46fca83ed1d3fe637f3e48466fd41e7ee535b", 0x80}, {&(0x7f0000000700)="045caa1c9a30df49bca4f65f4b3971a21ab4337a6140797a244132e1de1fe382365f70ea67cd929d2e51f8960eb3f934b1da0da943c242decb1cd383c65e22e190dab5bd1f596ef72fee7e3b52c1b37af87b683269b0bb6dc95dd111ace6626dfeadbdb935223636d7768df39d18d54bb08100d9dd34f605c41359f4badc02e5a45ce614efe47ebf1d8b03ff3d1b964b9b46d5dad7e9744155fcada8b1ce5fa94020423a5c35f17bcc45b2cf29bb89dee65ac5c3310513917ac64746", 0xbc}, {&(0x7f0000000240)="89eb3bd07e7d0d7b076f0e30af304e062e88d7194225763e874e63218ee229bf5bbac1fb2cff5fa60c783b49731ddd06", 0x30}], 0x7, 0x6, 0x3ff)
sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

341.153501ms ago: executing program 0 (id=464):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000810003c3bfa300000000000007030000f0ffffff720af1fff8ffffff71a4f0ff0000000065040200000000ff2d400400000000003400000001ede4ff7b1300ff000000001d440100000000007a0a00fe00ffffffdb03000040000000b500f7ff350900009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4fc2495f74baaa876156de9078d687348ef1e50becb19bc461e94f4061cff1db39271a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cd90eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a950812d7aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031bc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d86047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a97429ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10ef454c7702c98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800"/3222], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5b000d0010008506000000006128a270697400000000000540", @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (async)
socket(0x11, 0x1, 0xffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async, rerun: 64)
socket(0x11, 0x800000003, 0x0) (async, rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) (async)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000940)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500000000000000000000000000000000000000000000002800fd6bb73b905c2f788168f97c8e019b7212bd97ae96d4a446f1ba2547fc12be9c69ba67fba2642ea55847d193e96c294284edc32b53b40e9d93a59ba9f2a5668045f823"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r0], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r10}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r10}, 0x38)

178.106191ms ago: executing program 2 (id=467):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x402101, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x101, 0x5, 0x5, 0x8, 0x7})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x804)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xe}, {0xffe0, 0xffe9}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x9}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}]}}, @qdisc_kind_options=@q_drr={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd05}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x365}]}, 0x78}}, 0x40)

102.750848ms ago: executing program 0 (id=468):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)

101.178344ms ago: executing program 2 (id=469):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004)
ppoll(&(0x7f0000000280)=[{r2, 0x701}], 0x1, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000240)={'bridge_slave_0\x00', @ifru_map={0xc, 0x7, 0x7, 0x2, 0x9}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00"], 0x48)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4)
recvmmsg(r4, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x12002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x7, 0x7, 0x101, 0x8]}]}, 0x5c}}, 0x0)

96.32731ms ago: executing program 0 (id=470):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x200, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000106"], 0x18}, 0xfc00)
close(r0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x4e5, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x400c2}, 0x80c0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

95.97567ms ago: executing program 2 (id=471):
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4)
setsockopt$inet6_buf(r1, 0x29, 0x4, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x4000000)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

2.054553ms ago: executing program 2 (id=472):
syz_emit_ethernet(0xea, &(0x7f0000000240)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @tcp={{0x0, 0x4, 0x3, 0x8, 0x0, 0x67, 0x0, 0x3, 0x6, 0x0, @multicast2, @remote, {[@ra={0x94, 0x0, 0x1}, @cipso={0x86, 0x0, 0xffffffffffffffff, [{0x2, 0x0, "5cf7eb54df551f324c832aa8fa"}, {0x1, 0x0, "f9e7104789f0894e503b6f61611e"}, {0x1, 0x0, '\n+'}]}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, {[@mss={0x2, 0x0, 0x8}, @exp_fastopen={0xfe, 0x0, 0xf989, "1b85bc834c9763402797fd6d"}, @mss={0x2, 0x0, 0xa}, @mptcp=@synack={0x1e, 0x0, 0x5, 0x2, 0x8, 0x6, 0xf}, @sack={0x5, 0x0, [0xa2]}, @timestamp={0x8, 0x0, 0x3d, 0x7513}, @md5sig={0x13, 0x0, "0f7e8d75f8e361abc6367dfbf5dc26f7"}, @mptcp=@mp_join={0x1e, 0x0, 0x6}, @exp_fastopen={0xfe, 0x0, 0xf989, "ebb83ff147"}]}}, {"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"}}}}}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x11, r0, 0xb12f8000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0)
r3 = socket(0x11, 0x2, 0x0)
ioctl$SIOCPNENABLEPIPE(r3, 0x5411, 0x1000000000000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x5, 0x2000000000010000})
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)

886.63µs ago: executing program 2 (id=473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', <r1=>0x0, 0x8081, 0x8, 0x5, 0x3, {{0x44, 0x4, 0x0, 0x3, 0x110, 0x66, 0x0, 0xc, 0x2f, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x17, 0x71, [@remote, @private=0xa010102, @multicast2, @multicast2, @broadcast]}, @cipso={0x86, 0x46, 0x1, [{0x6, 0x5, "66b7b4"}, {0x2d1f6e01b7e29347, 0x7, "7c798890c0"}, {0x1, 0x5, "e5977f"}, {0x2, 0x9, "d0c0366a1ea966"}, {0x0, 0xb, "30d58c0c8231f0b225"}, {0x1, 0xb, "e6e744309926c9d979"}, {0x6, 0x2}, {0x2, 0xe, "252cabe1cdd7f259899fca21"}]}, @cipso={0x86, 0x55, 0x2, [{0x7, 0xc, "dfca0d839e1d0be34033"}, {0x1, 0x3, 'z'}, {0x6, 0x11, "58a72d7256ea9433dc3adc14c4d714"}, {0x7, 0x10, "62eeb5d90f94f1329969997420d4"}, {0x5, 0xa, "bb123c8aa6c54bad"}, {0x5, 0x10, "19f78f970fa2f09424df4985e14c"}, {0x2, 0x5, "106ad1"}]}, @lsrr={0x83, 0x1f, 0x8b, [@private=0xa010102, @multicast2, @broadcast, @remote, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x28, 0xb0, 0x0, 0x7, [0x2, 0x9, 0x9, 0x800, 0x2, 0xd9, 0x5, 0x3, 0x3]}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@bridge_getneigh={0xdc, 0x1e, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2804c, 0x669a10fdf09dfcd7}, [@IFLA_MTU={0x8, 0x4, 0x96}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'team_slave_0\x00'}, {0x14, 0x35, 'macsec0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'pim6reg0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'pim6reg1\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0xdc}}, 0x0)

0s ago: executing program 2 (id=474):
syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x4000000) (async)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async)
r6 = socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r8=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r11=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'})
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000680)={0x1, 0x8, @status={[0xfffffffffffffffe, 0x0, 0x100000000, 0x8, 0x4, 0xfb4]}, [0x7, 0x417, 0x1cde, 0x81, 0x5, 0x40, 0x7, 0x7, 0xee, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1, 0xffff, 0xfffffffffffffffc, 0x9, 0x1, 0xd27, 0x6, 0x2, 0x7, 0xffbd, 0x1000, 0xf34, 0xff, 0x4bd, 0x18000000, 0x8, 0x62, 0x8001, 0xb1b, 0x7, 0x9, 0x8, 0x0, 0x0, 0x5, 0x8, 0x2, 0x9, 0x0, 0xfffffffffffffff9, 0xb24c, 0x4, 0x800, 0x0, 0x2, 0xe, 0x3, 0x9, 0xffffffff, 0x1, 0x3, 0x6, 0x7fff, 0x401, 0x1, 0xfffffffffffffffd, 0xf, 0x100000001, 0x0, 0x6, 0x8]}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000600)=@get={0x1, &(0x7f0000000500)=""/247, 0x7ff}) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32465' (ED25519) to the list of known hosts.
syzkaller login: [   48.679418][ T5772] cgroup: Unknown subsys name 'net'
[   48.827983][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.835310][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.313677][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.663468][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.674334][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.678281][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.679990][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.682177][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.688366][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.692285][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.693976][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.704179][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.708127][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.830758][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.834763][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.838613][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.842576][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.853418][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.039312][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   57.191067][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.195102][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.197985][ T5844] bridge_slave_0: entered allmulticast mode
[   57.201573][ T5844] bridge_slave_0: entered promiscuous mode
[   57.206408][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   57.245922][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.249003][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.252917][ T5844] bridge_slave_1: entered allmulticast mode
[   57.256364][ T5844] bridge_slave_1: entered promiscuous mode
[   57.285778][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   57.324461][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.348898][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.367766][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.370356][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.372775][ T5840] bridge_slave_0: entered allmulticast mode
[   57.376473][ T5840] bridge_slave_0: entered promiscuous mode
[   57.409061][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.411383][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.414440][ T5840] bridge_slave_1: entered allmulticast mode
[   57.417654][ T5840] bridge_slave_1: entered promiscuous mode
[   57.421488][ T5844] team0: Port device team_slave_0 added
[   57.426174][ T5844] team0: Port device team_slave_1 added
[   57.483990][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.487682][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.490591][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.493597][ T5850] bridge_slave_0: entered allmulticast mode
[   57.496526][ T5850] bridge_slave_0: entered promiscuous mode
[   57.500256][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.503117][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.513134][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.520275][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.545001][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.547909][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.550231][ T5850] bridge_slave_1: entered allmulticast mode
[   57.557212][ T5850] bridge_slave_1: entered promiscuous mode
[   57.571445][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.574393][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.583392][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.596419][ T5840] team0: Port device team_slave_0 added
[   57.599738][ T5840] team0: Port device team_slave_1 added
[   57.641567][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.659467][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.662100][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.672176][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.679858][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.682514][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.692445][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.698934][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.755514][ T5844] hsr_slave_0: entered promiscuous mode
[   57.758895][ T5844] hsr_slave_1: entered promiscuous mode
[   57.764276][ T5850] team0: Port device team_slave_0 added
[   57.788411][ T5850] team0: Port device team_slave_1 added
[   57.826156][ T5840] hsr_slave_0: entered promiscuous mode
[   57.829377][ T5840] hsr_slave_1: entered promiscuous mode
[   57.832356][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   57.835307][ T5840] Cannot create hsr debugfs directory
[   57.850058][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.852296][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.862406][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.886340][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.888795][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.898918][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.956396][ T5850] hsr_slave_0: entered promiscuous mode
[   57.959661][ T5850] hsr_slave_1: entered promiscuous mode
[   57.962689][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   57.965702][ T5850] Cannot create hsr debugfs directory
[   58.205007][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.212694][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.228578][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.235719][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.288823][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.299340][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.305846][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.316367][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.390150][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.400424][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.412356][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.421063][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.472109][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.514241][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   58.522675][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.534975][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.538130][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.556464][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   58.562643][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.565680][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.579581][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.582319][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.596310][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.598603][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.639702][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.675939][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   58.685481][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.687821][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.712245][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.715333][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.774744][ T5847] Bluetooth: hci0: command tx timeout
[   58.776775][ T5235] Bluetooth: hci1: command tx timeout
[   58.818322][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.867724][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.880967][ T5844] veth0_vlan: entered promiscuous mode
[   58.892327][ T5844] veth1_vlan: entered promiscuous mode
[   58.899820][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.933560][ T5235] Bluetooth: hci2: command tx timeout
[   58.946001][ T5840] veth0_vlan: entered promiscuous mode
[   58.955126][ T5844] veth0_macvtap: entered promiscuous mode
[   58.965332][ T5840] veth1_vlan: entered promiscuous mode
[   58.974017][ T5844] veth1_macvtap: entered promiscuous mode
[   58.981422][ T5850] veth0_vlan: entered promiscuous mode
[   58.998460][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.005360][ T5850] veth1_vlan: entered promiscuous mode
[   59.016737][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.036052][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.040150][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.045609][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.063850][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.069436][ T5840] veth0_macvtap: entered promiscuous mode
[   59.072414][ T5850] veth0_macvtap: entered promiscuous mode
[   59.077990][ T5850] veth1_macvtap: entered promiscuous mode
[   59.080802][ T5840] veth1_macvtap: entered promiscuous mode
[   59.104954][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.124139][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.134757][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.142500][ T5694] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.158192][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.161170][ T5694] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.166149][ T5694] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.185207][ T5694] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.195667][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.201161][ T5694] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.203701][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.219442][ T5694] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.232035][ T5694] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.237585][ T5694] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.290714][  T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.293724][  T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.315109][ T4057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.318372][ T4057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.339668][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.360252][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.360906][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.362897][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.368117][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.408743][ T5911] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.417640][ T4057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.421097][ T4057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.481911][ T5916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.504643][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4'.
[   59.512893][ T5920] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3'.
[   59.525160][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4'.
[   59.533423][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   59.544750][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4'.
[   59.559246][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4'.
[   59.562667][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4'.
[   59.569381][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4'.
[   59.573552][ T5914] Zero length message leads to an empty skb
[   59.580545][ T5924] syz.0.5: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   59.590728][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.0.5 Not tainted syzkaller #0 PREEMPT(full) 
[   59.590744][ T5924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.590752][ T5924] Call Trace:
[   59.590757][ T5924]  <TASK>
[   59.590762][ T5924]  dump_stack_lvl+0x189/0x250
[   59.590803][ T5924]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.590818][ T5924]  ? __pfx__printk+0x10/0x10
[   59.590834][ T5924]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   59.590851][ T5924]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   59.590863][ T5924]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   59.590878][ T5924]  warn_alloc+0x214/0x310
[   59.590900][ T5924]  ? __pfx_warn_alloc+0x10/0x10
[   59.590941][ T5924]  ? __get_vm_area_node+0x28f/0x300
[   59.590958][ T5924]  ? xskq_create+0xbf/0x170
[   59.590974][ T5924]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   59.591028][ T5924]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   59.591050][ T5924]  ? __kasan_kmalloc+0x93/0xb0
[   59.591069][ T5924]  vmalloc_user_noprof+0xad/0xf0
[   59.591082][ T5924]  ? xskq_create+0xbf/0x170
[   59.591093][ T5924]  xskq_create+0xbf/0x170
[   59.591108][ T5924]  xsk_init_queue+0xb0/0x110
[   59.591119][ T5924]  xsk_setsockopt+0x57b/0x8d0
[   59.591139][ T5924]  ? __pfx_xsk_setsockopt+0x10/0x10
[   59.591153][ T5924]  ? __pfx_aa_sk_perm+0x10/0x10
[   59.591177][ T5924]  ? __fget_files+0x2a/0x420
[   59.591188][ T5924]  ? aa_sock_opt_perm+0xff/0x1b0
[   59.591202][ T5924]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   59.591216][ T5924]  ? __pfx_xsk_setsockopt+0x10/0x10
[   59.591232][ T5924]  do_sock_setsockopt+0x17c/0x1b0
[   59.591250][ T5924]  __x64_sys_setsockopt+0x13f/0x1b0
[   59.591268][ T5924]  do_syscall_64+0xfa/0x3b0
[   59.591282][ T5924]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.591294][ T5924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.591306][ T5924]  ? exc_page_fault+0x9f/0xf0
[   59.591317][ T5924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.591327][ T5924] RIP: 0033:0x7f852bf8ec29
[   59.591339][ T5924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.591349][ T5924] RSP: 002b:00007f852cec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   59.591363][ T5924] RAX: ffffffffffffffda RBX: 00007f852c1d6090 RCX: 00007f852bf8ec29
[   59.591371][ T5924] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[   59.591378][ T5924] RBP: 00007f852c011e41 R08: 0000000000000004 R09: 0000000000000000
[   59.591385][ T5924] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   59.591392][ T5924] R13: 00007f852c1d6128 R14: 00007f852c1d6090 R15: 00007ffc6b68b158
[   59.591412][ T5924]  </TASK>
[   59.592183][ T5924] Mem-Info:
[   59.709763][ T5924] active_anon:5674 inactive_anon:0 isolated_anon:0
[   59.709763][ T5924]  active_file:878 inactive_file:38232 isolated_file:0
[   59.709763][ T5924]  unevictable:1768 dirty:1444 writeback:0
[   59.709763][ T5924]  slab_reclaimable:9531 slab_unreclaimable:50167
[   59.709763][ T5924]  mapped:17950 shmem:2426 pagetables:977
[   59.709763][ T5924]  sec_pagetables:0 bounce:0
[   59.709763][ T5924]  kernel_misc_reclaimable:0
[   59.709763][ T5924]  free:300822 free_pcp:22594 free_cma:0
[   59.767938][ T5939] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET)
[   59.776173][ T5939] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6'.
[   59.776498][ T5924] Node 0 active_anon:14704kB inactive_anon:0kB active_file:3036kB inactive_file:142904kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49676kB dirty:4548kB writeback:0kB shmem:4744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6968kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   59.798632][ T5924] Node 1 active_anon:7924kB inactive_anon:0kB active_file:476kB inactive_file:10024kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22328kB dirty:1228kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4428kB pagetables:1500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   59.810798][ T5924] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   59.822651][ T5924] lowmem_reserve[]: 0 811 811 811 811
[   59.825933][ T5924] Node 0 DMA32 free:277048kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14772kB inactive_anon:0kB active_file:3240kB inactive_file:142904kB unevictable:3536kB writepending:4548kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:45208kB local_pcp:20876kB free_cma:0kB
[   59.847476][ T5924] lowmem_reserve[]: 0 0 0 0 0
[   59.849735][ T5924] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   59.860793][ T5924] lowmem_reserve[]: 0 0 854 854 854
[   59.863233][ T5924] Node 1 Normal free:451620kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7924kB inactive_anon:0kB active_file:476kB inactive_file:10024kB unevictable:3536kB writepending:1228kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:45424kB local_pcp:22924kB free_cma:0kB
[   59.882279][ T5924] lowmem_reserve[]: 0 0 0 0 0
[   59.885002][ T5924] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   59.893568][ T5924] Node 0 DMA32: 6458*4kB (ME) 40*8kB (UM) 39*16kB (UME) 12*32kB (UM) 3*64kB (M) 1*128kB (M) 2*256kB (ME) 4*512kB (M) 3*1024kB (UM) 1*2048kB (M) 59*4096kB (M) = 276824kB
[   59.910852][ T5924] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   59.926294][ T5924] Node 1 Normal: 3*4kB (UE) 211*8kB (UM) 149*16kB (U) 5*32kB (UME) 7*64kB (UM) 4*128kB (M) 8*256kB (UME) 4*512kB (M) 6*1024kB (UME) 5*2048kB (UM) 104*4096kB (M) = 451668kB
[   59.940410][ T5924] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   59.946621][ T5924] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   59.950264][ T5924] 41631 total pagecache pages
[   59.953773][ T5924] 0 pages in swap cache
[   59.955827][ T5924] Free swap  = 124996kB
[   59.957742][ T5924] Total swap = 124996kB
[   59.963047][ T5924] 786301 pages RAM
[   59.964354][ T5924] 0 pages HighMem/MovableOnly
[   59.969612][ T5924] 241356 pages reserved
[   59.971360][ T5924] 0 pages cma reserved
[   60.086440][ T5963] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   60.086681][ T5897] bond0: (slave bond_slave_0): interface is now down
[   60.091406][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.094117][ T5897] bond0: (slave bond_slave_1): interface is now down
[   60.105757][ T5897] bond0: now running without any active interface!
[   60.355104][ T5982] geneve2: entered promiscuous mode
[   60.357473][ T5982] geneve2: entered allmulticast mode
[   60.420029][ T5983] netlink: 'syz.1.14': attribute type 12 has an invalid length.
[   60.853612][ T5235] Bluetooth: hci1: command tx timeout
[   60.856041][ T5235] Bluetooth: hci0: command tx timeout
[   61.013410][ T5847] Bluetooth: hci2: command tx timeout
[   61.166005][ T6003] netlink: 'syz.2.21': attribute type 2 has an invalid length.
[   61.169032][ T6003] netlink: 'syz.2.21': attribute type 8 has an invalid length.
[   61.368368][ T6019] netlink: 'syz.1.27': attribute type 1 has an invalid length.
[   61.371033][ T6019] netlink: 'syz.1.27': attribute type 4 has an invalid length.
[   61.464928][ T6024] !: renamed from dummy0 (while UP)
[   62.036847][ T6049] batadv_slave_1: entered promiscuous mode
[   62.058090][ T6048] batadv_slave_1: left promiscuous mode
[   62.252926][ T6056] veth3: entered promiscuous mode
[   62.638567][ T6072] netlink: 'syz.1.43': attribute type 1 has an invalid length.
[   62.642376][ T6074] netlink: 'syz.1.43': attribute type 1 has an invalid length.
[   62.659207][ T6076] netlink: 'syz.0.42': attribute type 1 has an invalid length.
[   62.797277][ T6085] syzkaller1: entered promiscuous mode
[   62.800019][ T6085] syzkaller1: entered allmulticast mode
[   62.931143][ T6098] netlink: 'syz.1.50': attribute type 7 has an invalid length.
[   62.945064][ T5847] Bluetooth: hci0: command tx timeout
[   62.947382][ T5847] Bluetooth: hci1: command tx timeout
[   62.956337][ T6096] netlink: 'syz.0.49': attribute type 1 has an invalid length.
[   63.093894][ T5235] Bluetooth: hci2: command tx timeout
[   63.547042][  T792] cfg80211: failed to load regulatory.db
[   63.577801][ T6124] Bluetooth: MGMT ver 1.23
[   64.159585][ T6160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.240342][ T6160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.350511][ T6160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.371323][ T6166] warning: `syz.1.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.463881][ T6160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.571811][ T6170] bond1: entered promiscuous mode
[   64.574331][ T6170] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.641637][ T5897] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.654550][ T6173] __nla_validate_parse: 18 callbacks suppressed
[   64.654585][ T6173] netlink: 112 bytes leftover after parsing attributes in process `syz.1.67'.
[   64.671735][ T5897] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.684273][ T5897] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.700967][ T5897] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.773384][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.014069][ T5235] Bluetooth: hci1: command tx timeout
[   65.016481][ T5235] Bluetooth: hci0: command tx timeout
[   65.041353][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.72'.
[   65.051091][ T6186] IPv6: sit1: Disabled Multicast RS
[   65.054325][ T6186] sit1: entered allmulticast mode
[   65.183725][ T5847] Bluetooth: hci2: command tx timeout
[   65.273187][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'.
[   65.359217][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'.
[   65.365393][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'.
[   65.376329][ T6199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.77'.
[   65.508794][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'.
[   65.599039][ T6223] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   65.604894][ T6225] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:0
[   65.648947][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[   65.674727][ T6230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.84'.
[   65.743369][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.87'.
[   65.776325][ T6232] netlink: 'syz.1.86': attribute type 12 has an invalid length.
[   65.889566][ T6241] bridge_slave_1: left allmulticast mode
[   65.892188][ T6241] bridge_slave_1: left promiscuous mode
[   65.896775][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.918692][ T6241] bridge_slave_0: left allmulticast mode
[   65.921074][ T6241] bridge_slave_0: left promiscuous mode
[   65.924994][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.007082][ T6245] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   66.081817][ T6245] bond1: entered promiscuous mode
[   66.086187][ T6245] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.108921][ T6244] bond1: (slave bridge1): making interface the new active one
[   66.121775][ T6244] bridge1: entered promiscuous mode
[   66.129995][ T6244] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   66.187356][ T6257] tipc: Started in network mode
[   66.191374][ T6257] tipc: Node identity ca2b93890367, cluster identity 4711
[   66.196449][ T6257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.221733][ T6255] tipc: Disabling bearer <eth:syzkaller0>
[   66.454375][ T6281] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   66.457793][ T6281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.477852][ T6285] netlink: 'syz.0.103': attribute type 6 has an invalid length.
[   66.785743][ T3142] IPVS: starting estimator thread 0...
[   66.826990][ T6324] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   66.875725][ T6322] IPVS: using max 79 ests per chain, 189600 per kthread
[   67.186648][ T6345] vlan0: entered promiscuous mode
[   67.192064][ T6345] gretap0: entered promiscuous mode
[   67.218207][ T6355] netlink: 'syz.1.118': attribute type 23 has an invalid length.
[   67.337608][ T6364] netlink: 'syz.2.121': attribute type 10 has an invalid length.
[   67.358197][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.362741][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.374948][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.378122][ T6364] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.381496][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.384620][ T6364] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.392709][ T6364] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   67.395890][ T5694] bond0: (slave bridge0): interface is now down
[   67.403320][ T6365] bridge_slave_1: left allmulticast mode
[   67.411664][ T6365] bridge_slave_1: left promiscuous mode
[   67.415956][ T5897] bond0: (slave bridge0): interface is now down
[   67.424877][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.431366][ T6365] bridge_slave_0: left allmulticast mode
[   67.434043][ T5897] bond0: (slave bridge0): interface is now down
[   67.434151][ T6365] bridge_slave_0: left promiscuous mode
[   67.439492][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.459864][ T6365] bond0: (slave bridge0): Releasing backup interface
[   67.513107][ T6362] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.517622][ T6362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   67.530947][ T6366] syzkaller0: entered promiscuous mode
[   67.532938][ T6366] syzkaller0: entered allmulticast mode
[   67.640347][ T6376] netlink: 'syz.0.124': attribute type 2 has an invalid length.
[   67.702707][ T6367] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   67.712794][ T6367] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   67.725891][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.738769][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.940493][ T6366] tipc: Resetting bearer <eth:syzkaller0>
[   67.949883][ T6376] : entered promiscuous mode
[   67.963285][ T6361] tipc: Resetting bearer <eth:syzkaller0>
[   67.984347][ T6361] tipc: Disabling bearer <eth:syzkaller0>
[   67.995595][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.004367][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.008123][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.022937][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.122659][ T6398] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[   68.148946][ T6398] bond2: entered promiscuous mode
[   68.150928][ T6398] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.166889][ T6398] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.185559][ T6403] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   68.336662][ T6415] wireguard0: entered promiscuous mode
[   68.400203][ T6414] 8021q: adding VLAN 0 to HW filter on device bond3
[   68.537918][ T6431] sctp: [Deprecated]: syz.0.140 (pid 6431) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.537918][ T6431] Use struct sctp_sack_info instead
[   68.751072][ T6451] netlink: 'syz.1.145': attribute type 13 has an invalid length.
[   68.756415][ T6451] netlink: 'syz.1.145': attribute type 17 has an invalid length.
[   68.851725][ T6451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.859167][ T6453] xfrm0: entered promiscuous mode
[   68.861187][ T6453] xfrm0: entered allmulticast mode
[   68.962895][ T6465] netlink: 'syz.0.148': attribute type 4 has an invalid length.
[   68.971667][ T6465] sit2: entered promiscuous mode
[   69.073903][ T6469] : entered promiscuous mode
[   69.268735][ T6485] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[   69.272926][ T6485] bond2: (slave vxcan1): Error -95 calling set_mac_address
[   69.281213][ T6488] C: renamed from team_slave_0 (while UP)
[   69.285841][ T6488] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   69.389034][ T6496] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   69.393891][ T6496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.396799][ T6496] syzkaller0: entered promiscuous mode
[   69.398979][ T6496] syzkaller0: entered allmulticast mode
[   69.406544][ T6495] tipc: Resetting bearer <eth:syzkaller0>
[   69.428018][ T6495] tipc: Disabling bearer <eth:syzkaller0>
[   69.450824][ T6498] veth3: left promiscuous mode
[   69.454296][ T6498] bond1: left promiscuous mode
[   69.457221][ T6498] bridge1: left promiscuous mode
[   69.461284][ T6498] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   69.472329][ T6498] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   69.482595][ T6498] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   69.491318][ T6498] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   69.587996][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.598147][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.601986][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.609023][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.669987][ T6521] __nla_validate_parse: 22 callbacks suppressed
[   69.670006][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'.
[   69.679265][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'.
[   69.689867][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'.
[   69.694245][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'.
[   69.698179][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'.
[   69.702574][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'.
[   69.865124][ T6525] block nbd0: server does not support multiple connections per device.
[   69.871930][ T6525] block nbd0: shutting down sockets
[   69.931822][ T6535] netlink: 224 bytes leftover after parsing attributes in process `syz.2.171'.
[   69.931857][ T6536] netlink: 224 bytes leftover after parsing attributes in process `syz.2.171'.
[   69.951638][ T6535] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   69.971510][ T6535] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   70.004752][ T6535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.171'.
[   70.033559][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   70.057894][ T6544] hsr_slave_0: left promiscuous mode
[   70.061168][ T6544] hsr_slave_1: left promiscuous mode
[   70.452173][ T6558] lo: entered promiscuous mode
[   70.456274][ T6558] net_ratelimit: 14 callbacks suppressed
[   70.456299][ T6558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.531011][ T6567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.637400][ T6576] : entered promiscuous mode
[   70.654214][ T6579] Bluetooth: MGMT ver 1.23
[   70.680216][ T6579] gretap1: entered promiscuous mode
[   70.797017][ T6594] bond0: entered promiscuous mode
[   70.799020][ T6594] bond_slave_0: entered promiscuous mode
[   70.801180][ T6594] bond_slave_1: entered promiscuous mode
[   70.821087][ T6598] batadv1: entered promiscuous mode
[   70.823390][ T6598] batadv1: entered allmulticast mode
[   70.925583][ T6606] validate_nla: 6 callbacks suppressed
[   70.925607][ T6606] netlink: 'syz.1.191': attribute type 16 has an invalid length.
[   70.930647][ T6606] netlink: 'syz.1.191': attribute type 17 has an invalid length.
[   71.428502][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.717748][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.727413][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.852728][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.858278][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.862129][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.868739][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.879783][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.882807][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.894161][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.897180][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.910430][ T6614] netlink: 'syz.1.193': attribute type 5 has an invalid length.
[   71.914760][ T6614] netlink: 'syz.1.193': attribute type 1 has an invalid length.
[   71.940722][ T6614] 8021q: adding VLAN 0 to HW filter on device bond4
[   71.953860][ T6614] bond4: (slave geneve3): making interface the new active one
[   71.958403][ T6614] bond4: (slave geneve3): Enslaving as an active interface with an up link
[   71.963144][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.968774][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.976562][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.989287][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.003822][ T6625] netlink: 'syz.0.196': attribute type 4 has an invalid length.
[   72.037970][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.041026][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.110574][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.119535][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.208533][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.218167][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.221671][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.223900][ T6622] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   72.224521][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.228195][ T6622] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   72.245528][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.251293][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.255494][ T6632] bond0: left promiscuous mode
[   72.257580][ T6632] bond_slave_0: left promiscuous mode
[   72.265292][ T6632] bond_slave_1: left promiscuous mode
[   72.270820][ T6632] xfrm0: left promiscuous mode
[   72.272920][ T6632] xfrm0: left allmulticast mode
[   72.279127][ T6632] geneve2: left promiscuous mode
[   72.281109][ T6632] geneve2: left allmulticast mode
[   72.283986][ T6632] bond1: left promiscuous mode
[   72.285824][ T6632] bond2: left promiscuous mode
[   72.302455][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.306730][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.310401][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.314293][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.356499][ T6639] 8021q: adding VLAN 0 to HW filter on device bond3
[   72.371986][ T6639] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   72.379767][ T6639] bond3: (slave macvlan2): Enslaving as a backup interface with an up link
[   72.391472][ T6639] bond0: (slave bond_slave_0): Releasing backup interface
[   72.398108][ T6639] bond0: (slave bond_slave_1): Releasing backup interface
[   72.402679][ T6639] team0: Port device C removed
[   72.409210][ T6639] team0: Port device team_slave_1 removed
[   72.411853][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.425529][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.430266][ T6639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   72.463377][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   72.472133][   T13] bond3: (slave macvlan2): link status up again after 0 ms
[   72.477293][   T13] bond3: (slave macvlan2): failed to get link speed/duplex
[   72.555265][ T6646] wireguard0: entered promiscuous mode
[   72.573620][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   72.584220][   T13] bond3: (slave macvlan2): failed to get link speed/duplex
[   72.589163][ T6651] netlink: 'syz.0.204': attribute type 58 has an invalid length.
[   72.645507][ T6651] netlink: 'syz.0.204': attribute type 58 has an invalid length.
[   72.697501][   T12] bond3: (slave macvlan2): failed to get link speed/duplex
[   72.704166][ T6651] netlink: 'syz.0.204': attribute type 58 has an invalid length.
[   72.764660][ T6651] netlink: 'syz.0.204': attribute type 58 has an invalid length.
[   72.803199][   T12] bond3: (slave macvlan2): failed to get link speed/duplex
[   72.824988][ T6651] netlink: 'syz.0.204': attribute type 58 has an invalid length.
[   73.138689][ T6681] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.336207][ T6694] tipc: Started in network mode
[   73.340394][ T6694] tipc: Node identity a6f1455deffc, cluster identity 4711
[   73.343933][ T6694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.349031][ T6694] syzkaller0: entered promiscuous mode
[   73.351620][ T6694] syzkaller0: entered allmulticast mode
[   73.362736][ T6696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.373178][ T6696] syzkaller0: entered promiscuous mode
[   73.375748][ T6696] syzkaller0: entered allmulticast mode
[   73.382136][ T6695] tipc: Resetting bearer <eth:syzkaller0>
[   73.394730][ T6695] tipc: Disabling bearer <eth:syzkaller0>
[   73.420921][ T6697] tipc: Resetting bearer <eth:syzkaller0>
[   73.561961][ T6709] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   73.681912][ T6714] bridge_slave_1: left allmulticast mode
[   73.684486][ T6714] bridge_slave_1: left promiscuous mode
[   73.686628][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.691277][ T6714] bridge_slave_0: left allmulticast mode
[   73.693673][ T6714] bridge_slave_0: left promiscuous mode
[   73.695703][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.144179][ T6693] tipc: Resetting bearer <eth:syzkaller0>
[   74.155703][ T6693] tipc: Disabling bearer <eth:syzkaller0>
[   74.563873][ T6378] tipc: Node number set to 3377238921
[   74.696157][ T6749] __nla_validate_parse: 40 callbacks suppressed
[   74.696176][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'.
[   74.823534][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'.
[   74.835692][ T6756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.239'.
[   75.254044][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.245'.
[   75.260445][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.245'.
[   75.412072][ T6791] 8021q: adding VLAN 0 to HW filter on device bond5
[   75.423519][ T6791] erspan0: entered allmulticast mode
[   75.431566][ T6791] bond5: (slave erspan0): making interface the new active one
[   75.437633][ T6791] bond5: (slave erspan0): Enslaving as an active interface with an up link
[   75.556608][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[   75.563259][ T6796] syz_tun: entered promiscuous mode
[   75.566784][ T6796] syz_tun: left promiscuous mode
[   75.584275][   T13] net_ratelimit: 21 callbacks suppressed
[   75.584307][   T13] bond3: (slave macvlan2): failed to get link speed/duplex
[   75.589752][ T6807] netlink: 48 bytes leftover after parsing attributes in process `syz.0.252'.
[   75.669394][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.254'.
[   75.703491][   T13] bond3: (slave macvlan2): failed to get link speed/duplex
[   75.740337][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.258'.
[   75.789701][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'.
[   75.813632][   T12] bond3: (slave macvlan2): failed to get link speed/duplex
[   75.903114][   T40] wlan1: Trigger new scan to find an IBSS to join
[   75.925272][   T12] bond3: (slave macvlan2): failed to get link speed/duplex
[   76.064522][   T12] bond3: (slave macvlan2): failed to get link speed/duplex
[   76.173305][   T13] bond3: (slave macvlan2): failed to get link speed/duplex
[   76.188798][ T6870] validate_nla: 14 callbacks suppressed
[   76.188808][ T6870] netlink: 'syz.0.269': attribute type 1 has an invalid length.
[   76.188827][ T6871] netlink: 'syz.0.269': attribute type 1 has an invalid length.
[   76.230699][ T6870] bond3: entered promiscuous mode
[   76.237546][ T6870] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.254249][ T6870] bond3: (slave bridge0): making interface the new active one
[   76.257472][ T6870] bridge0: entered promiscuous mode
[   76.260435][ T6870] bond3: (slave bridge0): Enslaving as an active interface with an up link
[   76.276909][ T6875] bond3: (slave bridge1): Enslaving as a backup interface with an up link
[   76.286208][ T6874] bond0: entered promiscuous mode
[   76.287896][ T6874] bond_slave_0: entered promiscuous mode
[   76.290045][ T6874] bond_slave_1: entered promiscuous mode
[   76.295192][ T6874] bond0: left promiscuous mode
[   76.297377][ T6874] bond_slave_0: left promiscuous mode
[   76.299433][ T6874] bond_slave_1: left promiscuous mode
[   76.313789][ T6379] bond3: (slave macvlan2): failed to get link speed/duplex
[   76.368545][ T6880] netlink: 'syz.0.272': attribute type 10 has an invalid length.
[   76.374809][ T6880] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   76.423850][ T6379] bond3: (slave macvlan2): failed to get link speed/duplex
[   76.520367][ T6893] netlink: 'syz.0.277': attribute type 7 has an invalid length.
[   76.535431][ T6893] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   76.543411][   T12] bond3: (slave macvlan2): failed to get link speed/duplex
[   76.680083][ T6896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.693575][   T12] bond3: (slave macvlan2): failed to get link speed/duplex
[   76.792858][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.832773][ T6918] gretap1: left promiscuous mode
[   76.850646][ T6918] hsr_slave_0: left promiscuous mode
[   76.856749][ T6918] hsr_slave_1: left promiscuous mode
[   76.886250][ T6922] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   77.784992][ T6966] wireguard1: entered promiscuous mode
[   77.830020][ T6972] netlink: 'syz.0.295': attribute type 13 has an invalid length.
[   77.843442][ T6972] netlink: 'syz.0.295': attribute type 17 has an invalid length.
[   77.846203][ T6972] lo: left promiscuous mode
[   77.902872][ T6972] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.906891][ T6972] 8021q: adding VLAN 0 to HW filter on device team0
[   77.914345][ T6978] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   77.917611][ T6978] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   77.927600][ T6980] xfrm0: entered promiscuous mode
[   77.929415][ T6980] xfrm0: entered allmulticast mode
[   78.010334][ T6989] xfrm1: entered allmulticast mode
[   78.017058][ T6990] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   78.020476][ T6990] bond2: (slave macvlan2): Enslaving as an active interface with a down link
[   78.187020][ T6990] infiniband syz1: set down
[   78.189216][ T6990] infiniband syz1: added syz_tun
[   78.209612][ T6990] RDS/IB: syz1: added
[   78.211914][ T6990] smc: adding ib device syz1 with port count 1
[   78.214323][ T6990] smc:    ib device syz1 port 1 has no pnetid
[   78.436851][ T7012] netlink: 'syz.0.304': attribute type 10 has an invalid length.
[   78.462612][ T7012] team0: Failed to send options change via netlink (err -105)
[   78.473135][ T7012] team0: Port device 0! added
[   78.481873][ T7008] netlink: 'syz.0.304': attribute type 10 has an invalid length.
[   78.496334][ T7008] team0: Failed to send port change of device 0! via netlink (err -105)
[   78.514165][ T7008] team0: Failed to send options change via netlink (err -105)
[   78.517735][ T7008] team0: Failed to send port change of device 0! via netlink (err -105)
[   78.521319][ T7008] team0: Port device 0! removed
[   78.528019][ T7008] bond0: (slave 0!): Enslaving as an active interface with an up link
[   79.164307][ T7046] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[   79.238704][ T7050] syz.2.315: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   79.247616][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.2.315 Not tainted syzkaller #0 PREEMPT(full) 
[   79.247634][ T7050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.247642][ T7050] Call Trace:
[   79.247648][ T7050]  <TASK>
[   79.247654][ T7050]  dump_stack_lvl+0x189/0x250
[   79.247701][ T7050]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.247715][ T7050]  ? __pfx__printk+0x10/0x10
[   79.247733][ T7050]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   79.247750][ T7050]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   79.247765][ T7050]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   79.247780][ T7050]  warn_alloc+0x214/0x310
[   79.247803][ T7050]  ? __pfx_warn_alloc+0x10/0x10
[   79.247846][ T7050]  ? __get_vm_area_node+0x28f/0x300
[   79.247865][ T7050]  ? hash_ipportip_create+0x358/0xfe0
[   79.247887][ T7050]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   79.247903][ T7050]  ? do_syscall_64+0xfa/0x3b0
[   79.247938][ T7050]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   79.247957][ T7050]  ? rcu_is_watching+0x15/0xb0
[   79.247971][ T7050]  ? hash_ipportip_create+0x358/0xfe0
[   79.247985][ T7050]  ? hash_ipportip_create+0x358/0xfe0
[   79.247998][ T7050]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   79.248014][ T7050]  ? hash_ipportip_create+0x358/0xfe0
[   79.248029][ T7050]  ? hash_ipportip_create+0x2fe/0xfe0
[   79.248047][ T7050]  hash_ipportip_create+0x358/0xfe0
[   79.248067][ T7050]  ? __nla_parse+0x40/0x60
[   79.248084][ T7050]  ? __pfx_hash_ipportip_create+0x10/0x10
[   79.248101][ T7050]  ip_set_create+0xa97/0x1940
[   79.248113][ T7050]  ? ip_set_create+0x4a2/0x1940
[   79.248133][ T7050]  ? __pfx_ip_set_create+0x10/0x10
[   79.248177][ T7050]  nfnetlink_rcv_msg+0xb4d/0x1130
[   79.248192][ T7050]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   79.248218][ T7050]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   79.248283][ T7050]  ? is_bpf_text_address+0x26/0x2b0
[   79.248314][ T7050]  netlink_rcv_skb+0x208/0x470
[   79.248330][ T7050]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   79.248343][ T7050]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   79.248383][ T7050]  ? bpf_lsm_capable+0x9/0x20
[   79.248401][ T7050]  ? security_capable+0x7e/0x2e0
[   79.248426][ T7050]  nfnetlink_rcv+0x26a/0x2520
[   79.248438][ T7050]  ? is_bpf_text_address+0x26/0x2b0
[   79.248457][ T7050]  ? kernel_text_address+0xa5/0xe0
[   79.248476][ T7050]  ? __kernel_text_address+0xd/0x40
[   79.248490][ T7050]  ? unwind_get_return_address+0x4d/0x90
[   79.248506][ T7050]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   79.248519][ T7050]  ? arch_stack_walk+0xfc/0x150
[   79.248545][ T7050]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   79.248558][ T7050]  ? stack_depot_save_flags+0x40/0x860
[   79.248578][ T7050]  ? __lock_acquire+0xab9/0xd20
[   79.248615][ T7050]  ? __lock_acquire+0xab9/0xd20
[   79.248638][ T7050]  ? netlink_deliver_tap+0x2e/0x1b0
[   79.248657][ T7050]  ? netlink_deliver_tap+0x2e/0x1b0
[   79.248677][ T7050]  netlink_unicast+0x82f/0x9e0
[   79.248696][ T7050]  ? __pfx_netlink_unicast+0x10/0x10
[   79.248710][ T7050]  ? netlink_sendmsg+0x642/0xb30
[   79.248721][ T7050]  ? skb_put+0x11b/0x210
[   79.248740][ T7050]  netlink_sendmsg+0x805/0xb30
[   79.248760][ T7050]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.248777][ T7050]  ? aa_sock_msg_perm+0xf1/0x1d0
[   79.248792][ T7050]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   79.248805][ T7050]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.248819][ T7050]  __sock_sendmsg+0x21c/0x270
[   79.248834][ T7050]  ____sys_sendmsg+0x505/0x830
[   79.248853][ T7050]  ? __pfx_____sys_sendmsg+0x10/0x10
[   79.248876][ T7050]  ? import_iovec+0x74/0xa0
[   79.248894][ T7050]  ___sys_sendmsg+0x21f/0x2a0
[   79.248911][ T7050]  ? __pfx____sys_sendmsg+0x10/0x10
[   79.248952][ T7050]  ? __fget_files+0x2a/0x420
[   79.248963][ T7050]  ? __fget_files+0x3a0/0x420
[   79.248981][ T7050]  __x64_sys_sendmsg+0x19b/0x260
[   79.248998][ T7050]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   79.249022][ T7050]  ? rcu_is_watching+0x15/0xb0
[   79.249037][ T7050]  ? do_syscall_64+0xbe/0x3b0
[   79.249053][ T7050]  do_syscall_64+0xfa/0x3b0
[   79.249065][ T7050]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.249077][ T7050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.249090][ T7050]  ? exc_page_fault+0x9f/0xf0
[   79.249104][ T7050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.249115][ T7050] RIP: 0033:0x7fc45e98ec29
[   79.249128][ T7050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.249138][ T7050] RSP: 002b:00007fc45f797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   79.249153][ T7050] RAX: ffffffffffffffda RBX: 00007fc45ebd6090 RCX: 00007fc45e98ec29
[   79.249161][ T7050] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003
[   79.249168][ T7050] RBP: 00007fc45ea11e41 R08: 0000000000000000 R09: 0000000000000000
[   79.249175][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.249181][ T7050] R13: 00007fc45ebd6128 R14: 00007fc45ebd6090 R15: 00007fff3f050d98
[   79.249202][ T7050]  </TASK>
[   79.249494][ T7050] Mem-Info:
[   79.451746][ T7050] active_anon:5831 inactive_anon:0 isolated_anon:0
[   79.451746][ T7050]  active_file:1126 inactive_file:38246 isolated_file:0
[   79.451746][ T7050]  unevictable:1768 dirty:108 writeback:0
[   79.451746][ T7050]  slab_reclaimable:10032 slab_unreclaimable:81895
[   79.451746][ T7050]  mapped:18216 shmem:2464 pagetables:963
[   79.451746][ T7050]  sec_pagetables:0 bounce:0
[   79.451746][ T7050]  kernel_misc_reclaimable:0
[   79.451746][ T7050]  free:266314 free_pcp:19548 free_cma:0
[   79.469895][ T7050] Node 0 active_anon:14336kB inactive_anon:0kB active_file:3736kB inactive_file:142940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50452kB dirty:400kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7140kB pagetables:2160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.483157][ T7050] Node 1 active_anon:8852kB inactive_anon:0kB active_file:768kB inactive_file:10044kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22412kB dirty:32kB writeback:0kB shmem:5044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4844kB pagetables:1692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.496113][ T7050] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   79.508384][ T7050] lowmem_reserve[]: 0 811 811 811 811
[   79.510744][ T7050] Node 0 DMA32 free:143024kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14472kB inactive_anon:0kB active_file:3736kB inactive_file:142940kB unevictable:3536kB writepending:400kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:40264kB local_pcp:20524kB free_cma:0kB
[   79.524155][ T7050] lowmem_reserve[]: 0 0 0 0 0
[   79.526269][ T7050] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   79.540395][ T7050] lowmem_reserve[]: 0 0 854 854 854
[   79.544145][ T7050] Node 1 Normal free:448256kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8852kB inactive_anon:0kB active_file:768kB inactive_file:10044kB unevictable:3536kB writepending:32kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38124kB local_pcp:21208kB free_cma:0kB
[   79.557619][ T7050] lowmem_reserve[]: 0 0 0 0 0
[   79.559704][ T7050] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   79.565581][ T7050] Node 0 DMA32: 1424*4kB (UME) 574*8kB (UME) 264*16kB (UM) 68*32kB (UM) 48*64kB (UM) 15*128kB (M) 10*256kB (M) 12*512kB (UM) 6*1024kB (ME) 4*2048kB (ME) 24*4096kB (M) = 143024kB
[   79.574647][ T7050] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   79.581778][ T7050] Node 1 Normal: 147*4kB (UME) 76*8kB (ME) 505*16kB (UME) 217*32kB (UM) 152*64kB (UME) 45*128kB (UM) 25*256kB (UME) 9*512kB (UM) 6*1024kB (UM) 1*2048kB (M) 97*4096kB (M) = 448220kB
[   79.589535][ T7050] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.593865][ T7050] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.597790][ T7050] 41887 total pagecache pages
[   79.599803][ T7050] 0 pages in swap cache
[   79.601568][ T7050] Free swap  = 124996kB
[   79.612562][ T7050] Total swap = 124996kB
[   79.614668][ T7050] 786301 pages RAM
[   79.616108][ T7050] 0 pages HighMem/MovableOnly
[   79.617622][ T7050] 241356 pages reserved
[   79.618953][ T7050] 0 pages cma reserved
[   79.677120][ T7062] bond0: (slave vlan2): Opening slave failed
[   79.909159][ T7092] __nla_validate_parse: 24 callbacks suppressed
[   79.909175][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.328'.
[   80.380643][ T7122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.338'.
[   80.419375][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'.
[   80.438873][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'.
[   80.525032][   T56] block nbd0: Receive control failed (result -32)
[   80.542928][ T7126] wireguard0: entered promiscuous mode
[   80.568716][ T7120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.619545][ T7130] sit3: entered allmulticast mode
[   80.628829][ T7120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.872436][ T7149] : renamed from veth0_to_bond
[   80.924994][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'.
[   80.964121][ T7156] geneve2: entered promiscuous mode
[   80.967998][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.971757][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.976761][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.980736][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.461532][ T7166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'.
[   81.651684][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.355'.
[   81.663324][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'.
[   82.246779][ T7198] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.249657][ T7198] net_ratelimit: 27 callbacks suppressed
[   82.249666][ T7198] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   82.259641][ T6378] syz1: Port: 1 Link ACTIVE
[   82.343432][ T7206] openvswitch: netlink: IP tunnel TTL not specified.
[   82.403997][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'.
[   82.408014][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'.
[   82.410053][   T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[   82.425703][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.431185][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.436921][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.442294][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.181884][ T7227] bond0: entered promiscuous mode
[   83.187389][ T7227] bond0: left promiscuous mode
[   83.714063][ T7269] geneve6: entered promiscuous mode
[   83.847890][ T7276] validate_nla: 5 callbacks suppressed
[   83.847907][ T7276] netlink: 'syz.1.381': attribute type 9 has an invalid length.
[   83.854029][ T7276] netlink: 'syz.1.381': attribute type 7 has an invalid length.
[   83.857164][ T7276] netlink: 'syz.1.381': attribute type 8 has an invalid length.
[   84.172844][ T7306] netlink: 'syz.1.385': attribute type 2 has an invalid length.
[   84.172845][ T7305] netlink: 'syz.1.385': attribute type 2 has an invalid length.
[   84.339004][ T7318] sctp: [Deprecated]: syz.1.389 (pid 7318) Use of int in maxseg socket option.
[   84.339004][ T7318] Use struct sctp_assoc_value instead
[   84.379286][ T7318] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.383628][ T7318] 8021q: adding VLAN 0 to HW filter on device team0
[   84.396118][ T7318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.444570][ T7320] bond3: (slave bridge0): Releasing backup interface
[   84.447350][ T7320] bond3: (slave bridge0): the permanent HWaddr of slave - 7e:19:b7:a0:73:59 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   84.459279][ T7320] bridge0 (unregistering): left promiscuous mode
[   84.464222][ T7320] bond3: (slave bridge1): making interface the new active one
[   84.468366][ T7320] bridge1: entered promiscuous mode
[   84.605922][ T7329] netlink: 'syz.0.392': attribute type 10 has an invalid length.
[   84.648196][ T7329] netlink: 'syz.0.392': attribute type 5 has an invalid length.
[   84.685397][ T7331] Set syz0 is full, maxelem 0 reached
[   85.280791][ T7365] erspan0: left allmulticast mode
[   85.287013][ T7366] Driver unsupported XDP return value 0 on prog  (id 168) dev N/A, expect packet loss!
[   85.314443][ T7365] tipc: Resetting bearer <ib:ip6gre0>
[   85.359865][ T7365] wireguard0: left promiscuous mode
[   85.362600][ T7365] wireguard1: left promiscuous mode
[   85.365860][ T7365] xfrm1: left allmulticast mode
[   85.461037][ T7370] batman_adv: batadv0: Adding interface: macvtap0
[   85.465821][ T7370] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.474535][ T7370] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[   85.611827][ T7374] __nla_validate_parse: 23 callbacks suppressed
[   85.611842][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'.
[   85.887327][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'.
[   85.891529][ T7384] openvswitch: netlink: IP tunnel TTL not specified.
[   86.028344][ T7397] netlink: 56 bytes leftover after parsing attributes in process `syz.0.414'.
[   86.189622][ T7413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.418'.
[   86.199993][ T7413] netlink: 260 bytes leftover after parsing attributes in process `syz.0.418'.
[   86.223866][ T7416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.418'.
[   86.233965][ T7416] netlink: 260 bytes leftover after parsing attributes in process `syz.0.418'.
[   86.434898][ T7420] delete_channel: no stack
[   86.477937][ T7429] siw: device registration error -23
[   86.691356][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.423'.
[   86.892542][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'.
[   86.958509][ T7448] delete_channel: no stack
[   86.996834][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'.
[   87.454240][ T7480] syzkaller0: entered promiscuous mode
[   87.456823][ T7480] syzkaller0: entered allmulticast mode
[   88.341898][ T7508] sctp: [Deprecated]: syz.0.441 (pid 7508) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.341898][ T7508] Use struct sctp_sack_info instead
[   88.397754][ T7514] netlink: 'syz.2.443': attribute type 1 has an invalid length.
[   88.427283][ T7514] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.440198][  T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.443466][ T7518] netlink: 'syz.1.445': attribute type 1 has an invalid length.
[   88.446777][  T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.620029][ T7525] netlink: 'syz.1.448': attribute type 21 has an invalid length.
[   88.877610][ T7558] vxcan1: entered allmulticast mode
[   88.879858][ T7558] vxcan1: left allmulticast mode
[   88.974721][ T7565] validate_nla: 2 callbacks suppressed
[   88.974736][ T7565] netlink: 'syz.2.459': attribute type 1 has an invalid length.
[   89.027148][ T7566] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   89.030384][ T7566] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   89.183553][ T7572] netlink: 'syz.2.461': attribute type 1 has an invalid length.
[   89.275440][ T7585] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   89.308417][ T7581] batadv1: entered promiscuous mode
[   89.439360][ T7602] ip6gre1: entered allmulticast mode
[   89.528369][ T7610] netlink: 'syz.0.470': attribute type 10 has an invalid length.
[   89.595606][ T7617] netlink: 'syz.2.474': attribute type 10 has an invalid length.
[   89.623049][ T7616] ------------[ cut here ]------------
[   89.625068][ T7616] WARNING: CPU: 0 PID: 7616 at net/mac80211/chan.c:833 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   89.628630][ T7616] Modules linked in:
[   89.630117][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.0.470 Not tainted syzkaller #0 PREEMPT(full) 
[   89.635130][ T7616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.639403][ T7616] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   89.642514][ T7616] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bb a0 23 f7 4d 8b 36 4d 39 fe 74 22 e8 be 20 c0 f6 e9 ef f8 ff ff e8 b4 20 c0 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 a6 20 c0 f6 e9 39 07 00 00 48 83 7c 24
[   89.651162][ T7616] RSP: 0018:ffffc900073ce260 EFLAGS: 00010283
[   89.654415][ T7616] RAX: ffffffff8aff9522 RBX: 0000000000000000 RCX: 0000000000080000
[   89.657789][ T7616] RDX: ffffc90008f5a000 RSI: 00000000000523a7 RDI: 00000000000523a8
[   89.661180][ T7616] RBP: ffffc900073ce420 R08: ffff88802716d737 R09: 1ffff11004e2dae6
[   89.664652][ T7616] R10: dffffc0000000000 R11: ffffed1004e2dae7 R12: dffffc0000000000
[   89.668063][ T7616] R13: 0000000000000070 R14: ffff88803bffa8c0 R15: ffff88803bffa8c0
[   89.671477][ T7616] FS:  00007f852cea46c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[   89.675376][ T7616] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   89.678216][ T7616] CR2: 00007fc45f775fc8 CR3: 0000000110d60000 CR4: 00000000000006f0
[   89.681610][ T7616] Call Trace:
[   89.683237][ T7616]  <TASK>
[   89.684514][ T7616]  ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10
[   89.687447][ T7616]  ? __pfx___might_resched+0x10/0x10
[   89.689754][ T7616]  ieee80211_assign_link_chanctx+0x5ca/0xd70
[   89.692329][ T7616]  __ieee80211_link_release_channel+0x33b/0x4a0
[   89.695197][ T7616]  ieee80211_leave_mesh+0xc5/0x130
[   89.697446][ T7616]  cfg80211_leave_mesh+0x293/0x800
[   89.699778][ T7616]  cfg80211_netdev_notifier_call+0x1b0/0x1440
[   89.702449][ T7616]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[   89.705453][ T7616]  ? finish_task_switch+0x266/0x950
[   89.707782][ T7616]  ? finish_task_switch+0x32b/0x950
[   89.709934][ T7616]  ? rcu_is_watching+0x15/0xb0
[   89.712035][ T7616]  ? trace_sched_exit_tp+0x36/0x110
[   89.714422][ T7616]  ? __lock_acquire+0xab9/0xd20
[   89.716573][ T7616]  ? do_raw_spin_lock+0x121/0x290
[   89.718762][ T7616]  ? inetdev_event+0x464/0x15b0
[   89.720895][ T7616]  ? igmp_netdev_event+0x7c/0x770
[   89.723179][ T7616]  notifier_call_chain+0x1b6/0x3e0
[   89.725306][ T7616]  __dev_close_many+0x106/0x6f0
[   89.727288][ T7616]  ? __local_bh_enable_ip+0x13e/0x1c0
[   89.729534][ T7616]  ? __pfx___dev_close_many+0x10/0x10
[   89.731750][ T7616]  __dev_change_flags+0x2c7/0x6d0
[   89.734016][ T7616]  ? __pfx___dev_change_flags+0x10/0x10
[   89.736293][ T7616]  ? netif_state_change+0x256/0x3a0
[   89.738439][ T7616]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   89.740925][ T7616]  ? __pfx_netif_state_change+0x10/0x10
[   89.743377][ T7616]  netif_change_flags+0x88/0x1a0
[   89.745475][ T7616]  do_setlink+0xc55/0x41c0
[   89.747396][ T7616]  ? __kernel_text_address+0xd/0x40
[   89.749617][ T7616]  ? arch_stack_walk+0xfc/0x150
[   89.751707][ T7616]  ? __pfx_do_setlink+0x10/0x10
[   89.754012][ T7616]  ? __lock_acquire+0xab9/0xd20
[   89.756073][ T7616]  ? __mutex_trylock_common+0x153/0x260
[   89.758494][ T7616]  ? __pfx___mutex_trylock_common+0x10/0x10
[   89.760931][ T7616]  ? rcu_is_watching+0x15/0xb0
[   89.763235][ T7616]  ? trace_contention_end+0x39/0x120
[   89.765559][ T7616]  ? __mutex_lock+0x335/0x1350
[   89.767520][ T7616]  ? rtnl_newlink+0x8db/0x1c70
[   89.769554][ T7616]  ? __pfx___mutex_lock+0x10/0x10
[   89.771704][ T7616]  ? ns_capable+0x8a/0xf0
[   89.773653][ T7616]  ? rtnl_link_get_net_capable+0x16a/0x350
[   89.776091][ T7616]  rtnl_newlink+0x149f/0x1c70
[   89.778130][ T7616]  ? netlink_sendmsg+0x805/0xb30
[   89.780215][ T7616]  ? __pfx_rtnl_newlink+0x10/0x10
[   89.782337][ T7616]  ? kasan_quarantine_put+0xdd/0x220
[   89.784632][ T7616]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.786750][ T7616]  ? nlmon_xmit+0xb0/0x100
[   89.788544][ T7616]  ? kmem_cache_free+0x18f/0x400
[   89.790547][ T7616]  ? __local_bh_enable_ip+0x12d/0x1c0
[   89.792721][ T7616]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.794981][ T7616]  ? __local_bh_enable_ip+0x12d/0x1c0
[   89.797153][ T7616]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   89.799398][ T7616]  ? __dev_queue_xmit+0x27b/0x3b50
[   89.801464][ T7616]  ? __dev_queue_xmit+0x27b/0x3b50
[   89.803649][ T7616]  ? __dev_queue_xmit+0x27b/0x3b50
[   89.805720][ T7616]  ? __dev_queue_xmit+0x1d79/0x3b50
[   89.807787][ T7616]  ? __lock_acquire+0xab9/0xd20
[   89.809775][ T7616]  ? __pfx_rtnl_newlink+0x10/0x10
[   89.811795][ T7616]  rtnetlink_rcv_msg+0x7cf/0xb70
[   89.814038][ T7616]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   89.816151][ T7616]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   89.818339][ T7616]  ? ref_tracker_free+0x63a/0x7d0
[   89.820398][ T7616]  ? __asan_memcpy+0x40/0x70
[   89.822269][ T7616]  ? __pfx_ref_tracker_free+0x10/0x10
[   89.824607][ T7616]  ? __skb_clone+0x63/0x7a0
[   89.826534][ T7616]  netlink_rcv_skb+0x208/0x470
[   89.828454][ T7616]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   89.830668][ T7616]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   89.832840][ T7616]  ? netlink_deliver_tap+0x2e/0x1b0
[   89.835066][ T7616]  netlink_unicast+0x82f/0x9e0
[   89.837035][ T7616]  ? __pfx_netlink_unicast+0x10/0x10
[   89.839204][ T7616]  ? netlink_sendmsg+0x642/0xb30
[   89.841176][ T7616]  ? skb_put+0x11b/0x210
[   89.842910][ T7616]  netlink_sendmsg+0x805/0xb30
[   89.844973][ T7616]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.847121][ T7616]  ? aa_sock_msg_perm+0xf1/0x1d0
[   89.849151][ T7616]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   89.851278][ T7616]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.853542][ T7616]  __sock_sendmsg+0x21c/0x270
[   89.855453][ T7616]  ____sys_sendmsg+0x505/0x830
[   89.857433][ T7616]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.859612][ T7616]  ? import_iovec+0x74/0xa0
[   89.861455][ T7616]  ___sys_sendmsg+0x21f/0x2a0
[   89.863631][ T7616]  ? __pfx____sys_sendmsg+0x10/0x10
[   89.865757][ T7616]  ? __fget_files+0x2a/0x420
[   89.867642][ T7616]  ? __fget_files+0x3a0/0x420
[   89.869514][ T7616]  __x64_sys_sendmsg+0x19b/0x260
[   89.871527][ T7616]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   89.873942][ T7616]  ? rcu_is_watching+0x15/0xb0
[   89.875955][ T7616]  ? do_syscall_64+0xbe/0x3b0
[   89.877946][ T7616]  do_syscall_64+0xfa/0x3b0
[   89.879806][ T7616]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.881960][ T7616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.884680][ T7616]  ? exc_page_fault+0x9f/0xf0
[   89.886715][ T7616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.889237][ T7616] RIP: 0033:0x7f852bf8ec29
[   89.891117][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.899165][ T7616] RSP: 002b:00007f852cea4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.902488][ T7616] RAX: ffffffffffffffda RBX: 00007f852c1d6180 RCX: 00007f852bf8ec29
[   89.905812][ T7616] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[   89.908984][ T7616] RBP: 00007f852c011e41 R08: 0000000000000000 R09: 0000000000000000
[   89.912298][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.915669][ T7616] R13: 00007f852c1d6218 R14: 00007f852c1d6180 R15: 00007ffc6b68b158
[   89.918837][ T7616]  </TASK>
[   89.920122][ T7616] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   89.923084][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.0.470 Not tainted syzkaller #0 PREEMPT(full) 
[   89.926773][ T7616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.930827][ T7616] Call Trace:
[   89.932250][ T7616]  <TASK>
[   89.933393][ T7616]  dump_stack_lvl+0x99/0x250
[   89.935234][ T7616]  ? __asan_memcpy+0x40/0x70
[   89.937022][ T7616]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.939021][ T7616]  ? __pfx__printk+0x10/0x10
[   89.940830][ T7616]  vpanic+0x281/0x750
[   89.942309][ T7616]  ? __pfx__printk+0x10/0x10
[   89.943798][ T7616]  ? __pfx_vpanic+0x10/0x10
[   89.945302][ T7616]  ? is_bpf_text_address+0x26/0x2b0
[   89.946991][ T7616]  panic+0xb9/0xc0
[   89.948218][ T7616]  ? __pfx_panic+0x10/0x10
[   89.949667][ T7616]  __warn+0x31b/0x4b0
[   89.950973][ T7616]  ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   89.953165][ T7616]  ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   89.955428][ T7616]  report_bug+0x2be/0x4f0
[   89.956979][ T7616]  ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   89.959411][ T7616]  ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   89.961738][ T7616]  ? ieee80211_recalc_chanctx_chantype+0x89f/0x10f0
[   89.963876][ T7616]  handle_bug+0x84/0x160
[   89.965298][ T7616]  exc_invalid_op+0x1a/0x50
[   89.966797][ T7616]  asm_exc_invalid_op+0x1a/0x20
[   89.968678][ T7616] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   89.971212][ T7616] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bb a0 23 f7 4d 8b 36 4d 39 fe 74 22 e8 be 20 c0 f6 e9 ef f8 ff ff e8 b4 20 c0 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 a6 20 c0 f6 e9 39 07 00 00 48 83 7c 24
[   89.977593][ T7616] RSP: 0018:ffffc900073ce260 EFLAGS: 00010283
[   89.979661][ T7616] RAX: ffffffff8aff9522 RBX: 0000000000000000 RCX: 0000000000080000
[   89.982442][ T7616] RDX: ffffc90008f5a000 RSI: 00000000000523a7 RDI: 00000000000523a8
[   89.985260][ T7616] RBP: ffffc900073ce420 R08: ffff88802716d737 R09: 1ffff11004e2dae6
[   89.987974][ T7616] R10: dffffc0000000000 R11: ffffed1004e2dae7 R12: dffffc0000000000
[   89.990925][ T7616] R13: 0000000000000070 R14: ffff88803bffa8c0 R15: ffff88803bffa8c0
[   89.993782][ T7616]  ? ieee80211_recalc_chanctx_chantype+0x10e2/0x10f0
[   89.996297][ T7616]  ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10
[   89.998522][ T7616]  ? __pfx___might_resched+0x10/0x10
[   90.000310][ T7616]  ieee80211_assign_link_chanctx+0x5ca/0xd70
[   90.002304][ T7616]  __ieee80211_link_release_channel+0x33b/0x4a0
[   90.004557][ T7616]  ieee80211_leave_mesh+0xc5/0x130
[   90.006761][ T7616]  cfg80211_leave_mesh+0x293/0x800
[   90.008728][ T7616]  cfg80211_netdev_notifier_call+0x1b0/0x1440
[   90.011126][ T7616]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[   90.013390][ T7616]  ? finish_task_switch+0x266/0x950
[   90.015236][ T7616]  ? finish_task_switch+0x32b/0x950
[   90.017122][ T7616]  ? rcu_is_watching+0x15/0xb0
[   90.018960][ T7616]  ? trace_sched_exit_tp+0x36/0x110
[   90.020942][ T7616]  ? __lock_acquire+0xab9/0xd20
[   90.022750][ T7616]  ? do_raw_spin_lock+0x121/0x290
[   90.024749][ T7616]  ? inetdev_event+0x464/0x15b0
[   90.026390][ T7616]  ? igmp_netdev_event+0x7c/0x770
[   90.028073][ T7616]  notifier_call_chain+0x1b6/0x3e0
[   90.029792][ T7616]  __dev_close_many+0x106/0x6f0
[   90.031579][ T7616]  ? __local_bh_enable_ip+0x13e/0x1c0
[   90.033339][ T7616]  ? __pfx___dev_close_many+0x10/0x10
[   90.035418][ T7616]  __dev_change_flags+0x2c7/0x6d0
[   90.037295][ T7616]  ? __pfx___dev_change_flags+0x10/0x10
[   90.039295][ T7616]  ? netif_state_change+0x256/0x3a0
[   90.041334][ T7616]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   90.043778][ T7616]  ? __pfx_netif_state_change+0x10/0x10
[   90.045831][ T7616]  netif_change_flags+0x88/0x1a0
[   90.047761][ T7616]  do_setlink+0xc55/0x41c0
[   90.049583][ T7616]  ? __kernel_text_address+0xd/0x40
[   90.051503][ T7616]  ? arch_stack_walk+0xfc/0x150
[   90.053365][ T7616]  ? __pfx_do_setlink+0x10/0x10
[   90.055243][ T7616]  ? __lock_acquire+0xab9/0xd20
[   90.056968][ T7616]  ? __mutex_trylock_common+0x153/0x260
[   90.058885][ T7616]  ? __pfx___mutex_trylock_common+0x10/0x10
[   90.060823][ T7616]  ? rcu_is_watching+0x15/0xb0
[   90.062377][ T7616]  ? trace_contention_end+0x39/0x120
[   90.064135][ T7616]  ? __mutex_lock+0x335/0x1350
[   90.065737][ T7616]  ? rtnl_newlink+0x8db/0x1c70
[   90.067558][ T7616]  ? __pfx___mutex_lock+0x10/0x10
[   90.069565][ T7616]  ? ns_capable+0x8a/0xf0
[   90.071351][ T7616]  ? rtnl_link_get_net_capable+0x16a/0x350
[   90.073756][ T7616]  rtnl_newlink+0x149f/0x1c70
[   90.075767][ T7616]  ? netlink_sendmsg+0x805/0xb30
[   90.077881][ T7616]  ? __pfx_rtnl_newlink+0x10/0x10
[   90.079642][ T7616]  ? kasan_quarantine_put+0xdd/0x220
[   90.081432][ T7616]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.083227][ T7616]  ? nlmon_xmit+0xb0/0x100
[   90.084701][ T7616]  ? kmem_cache_free+0x18f/0x400
[   90.086391][ T7616]  ? __local_bh_enable_ip+0x12d/0x1c0
[   90.088284][ T7616]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.090049][ T7616]  ? __local_bh_enable_ip+0x12d/0x1c0
[   90.091879][ T7616]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   90.093824][ T7616]  ? __dev_queue_xmit+0x27b/0x3b50
[   90.095586][ T7616]  ? __dev_queue_xmit+0x27b/0x3b50
[   90.097666][ T7616]  ? __dev_queue_xmit+0x27b/0x3b50
[   90.099644][ T7616]  ? __dev_queue_xmit+0x1d79/0x3b50
[   90.101568][ T7616]  ? __lock_acquire+0xab9/0xd20
[   90.103227][ T7616]  ? __pfx_rtnl_newlink+0x10/0x10
[   90.104907][ T7616]  rtnetlink_rcv_msg+0x7cf/0xb70
[   90.106717][ T7616]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   90.108508][ T7616]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   90.110345][ T7616]  ? ref_tracker_free+0x63a/0x7d0
[   90.112046][ T7616]  ? __asan_memcpy+0x40/0x70
[   90.113605][ T7616]  ? __pfx_ref_tracker_free+0x10/0x10
[   90.115428][ T7616]  ? __skb_clone+0x63/0x7a0
[   90.117192][ T7616]  netlink_rcv_skb+0x208/0x470
[   90.119223][ T7616]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   90.121557][ T7616]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   90.123948][ T7616]  ? netlink_deliver_tap+0x2e/0x1b0
[   90.126248][ T7616]  netlink_unicast+0x82f/0x9e0
[   90.128311][ T7616]  ? __pfx_netlink_unicast+0x10/0x10
[   90.130574][ T7616]  ? netlink_sendmsg+0x642/0xb30
[   90.132651][ T7616]  ? skb_put+0x11b/0x210
[   90.134511][ T7616]  netlink_sendmsg+0x805/0xb30
[   90.136553][ T7616]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.138816][ T7616]  ? aa_sock_msg_perm+0xf1/0x1d0
[   90.140846][ T7616]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   90.143087][ T7616]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.145309][ T7616]  __sock_sendmsg+0x21c/0x270
[   90.147335][ T7616]  ____sys_sendmsg+0x505/0x830
[   90.149349][ T7616]  ? __pfx_____sys_sendmsg+0x10/0x10
[   90.151267][ T7616]  ? import_iovec+0x74/0xa0
[   90.152966][ T7616]  ___sys_sendmsg+0x21f/0x2a0
[   90.154820][ T7616]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.156587][ T7616]  ? __fget_files+0x2a/0x420
[   90.158179][ T7616]  ? __fget_files+0x3a0/0x420
[   90.160129][ T7616]  __x64_sys_sendmsg+0x19b/0x260
[   90.162245][ T7616]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   90.164117][ T7616]  ? rcu_is_watching+0x15/0xb0
[   90.165660][ T7616]  ? do_syscall_64+0xbe/0x3b0
[   90.167362][ T7616]  do_syscall_64+0xfa/0x3b0
[   90.168919][ T7616]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.170756][ T7616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.173312][ T7616]  ? exc_page_fault+0x9f/0xf0
[   90.174922][ T7616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.177037][ T7616] RIP: 0033:0x7f852bf8ec29
[   90.178572][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.185012][ T7616] RSP: 002b:00007f852cea4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.188198][ T7616] RAX: ffffffffffffffda RBX: 00007f852c1d6180 RCX: 00007f852bf8ec29
[   90.190891][ T7616] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[   90.193512][ T7616] RBP: 00007f852c011e41 R08: 0000000000000000 R09: 0000000000000000
[   90.196625][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.199661][ T7616] R13: 00007f852c1d6218 R14: 00007f852c1d6180 R15: 00007ffc6b68b158
[   90.202355][ T7616]  </TASK>
[   90.204144][ T7616] Kernel Offset: disabled
[   90.205984][ T7616] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:11:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000062978 RDI=0000000000062979 RBP=00000000000003f8 RSP=ffffc900073cda10
R8 =ffff88801f4a0237 R9 =1ffff11003e94046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b028d1 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f852cea46c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc45f775fc8 CR3=0000000110d60000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff173a12e7b
XMM06=0000000000000000 00007ff173a12e75 XMM07=0000000000000000 00007ff173a12e89
XMM08=0000000000000000 00007ff173a12f0f XMM09=0000000000000000 00007ff173a12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0305168f74e5ae00 RBX=ffffffff819683f8 RCX=0305168f74e5ae00 RDX=0000000000000001
RSI=ffffffff8d9ba1da RDI=ffffffff8be33f00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc45f776d58 CR3=0000000109c7a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
