last executing test programs:

25.225831205s ago: executing program 0 (id=268):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000073112f00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @sched_cls}, 0xba)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$inet6(r6, &(0x7f0000002d40)={0xa, 0x4e25, 0x7, @remote, 0x6}, 0x15)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
accept4(r4, 0x0, 0x0, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x4a7, 0x4, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000005040)=""/154, 0x9a}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000002000)=""/103, 0x67}, {&(0x7f0000002d40)=""/4101, 0x1005}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x10}], 0x5, 0x12002, 0x0)

25.095952951s ago: executing program 0 (id=270):
pipe(0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x20008040)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)
close(0x3)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r9 = socket(0x2, 0xa, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
close(0x3)
sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x24, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x0, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE, @NL80211_MNTR_FLAG_ACTIVE, @NL80211_MNTR_FLAG_PLCPFAIL]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x0, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL, @NL80211_MNTR_FLAG_ACTIVE, @NL80211_MNTR_FLAG_OTHER_BSS, @NL80211_MNTR_FLAG_CONTROL, @NL80211_MNTR_FLAG_OTHER_BSS, @NL80211_MNTR_FLAG_PLCPFAIL, @NL80211_MNTR_FLAG_PLCPFAIL, @NL80211_MNTR_FLAG_ACTIVE, @NL80211_MNTR_FLAG_OTHER_BSS, @NL80211_MNTR_FLAG_ACTIVE]}]]}, 0x36}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000480)=""/86, 0x56}], 0x5, &(0x7f0000000580)=""/154, 0x9a}, 0x10001)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)

24.232398972s ago: executing program 0 (id=282):
r0 = socket(0x2a, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>r4, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) (async)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r2, 0x8503}], 0x1, 0x0, 0x0, 0x0) (async)
close(r1) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0xca0, 0x2c, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffff}, {0x9}, {0xe, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc64, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x0, 0x2}}, @TCA_U32_MARK={0x10, 0xa, {0xb, 0x2}}, @TCA_U32_SEL={0x424, 0x5, {0x6, 0x3, 0x5, 0x6, 0x8, 0x4, 0xa, 0x6, [{0x0, 0x5f73, 0x80, 0x3}, {0xffff7fff, 0xa000000, 0x8001, 0x5}, {0xd, 0x2, 0x8, 0x81}, {0xc41, 0x9, 0xffffffff, 0xfff}, {0x6, 0xfff, 0x1, 0x10001}, {0xc9, 0x6, 0x829, 0xa}, {0x1, 0xa, 0x1, 0x1}, {0x1, 0x9, 0x4, 0x1000}, {0x3, 0x9, 0x5, 0xfffffe00}, {0x1, 0x7, 0x9, 0x9}, {0x683, 0x9, 0x200, 0x6}, {0x6, 0x2, 0xd5, 0x80000006}, {0x9, 0x2, 0x5, 0xda}, {0xfffffff6, 0xfffffffd, 0x3, 0xffff}, {0x116a, 0x636c, 0x6, 0x7f}, {0xfffffff9, 0x81, 0x48, 0x4}, {0x0, 0x4, 0x1, 0xff}, {0x2, 0x2, 0x7f, 0x9}, {0x2, 0x0, 0x8}, {0x45c, 0x9, 0xb, 0x2}, {0x4, 0x5, 0xa8, 0x2}, {0x4, 0x1, 0x3, 0xffffffa2}, {0x7, 0x7, 0x9, 0xd92}, {0x3, 0x5, 0x1, 0x6}, {0x1, 0x5, 0x7, 0x65}, {0x6, 0xfffffffa, 0x3, 0x8}, {0x6, 0x5, 0x8}, {0x1e9800, 0x2, 0x6, 0x81}, {0x10001, 0x8001, 0x7, 0xd30b}, {0x6, 0x53, 0x10, 0x6}, {0x5, 0x1000, 0x101, 0x2}, {0x2, 0x3, 0x366, 0x7f}, {0x950, 0xfffffffb, 0x3, 0x1}, {0xffffffff, 0xfffffff2, 0x3, 0x2}, {0x5, 0x4, 0x3, 0xfffff5c6}, {0xa7, 0x9, 0x0, 0x7fffffff}, {0x7f, 0x9, 0x1000, 0x8}, {0x3ff, 0xff, 0x11d5, 0x6}, {0x7, 0xd, 0x9, 0x1000}, {0x1, 0x145, 0x5, 0xedba}, {0x3ecd, 0x4, 0x80000001, 0x6}, {0x1ff, 0x10, 0x6, 0x5}, {0x8, 0xe, 0x1}, {0x29380, 0xd, 0x1, 0x7}, {0x8, 0x3, 0x9, 0x1}, {0x7, 0x1ff, 0x1, 0x1000}, {0x7, 0x3, 0x5, 0xa56}, {0x6e3, 0x7, 0x8, 0xdf2}, {0xb, 0x80, 0x1, 0x4}, {0xb3, 0x40, 0x39, 0x2}, {0x0, 0x9, 0x8, 0x5}, {0x1, 0xb, 0x3, 0x400}, {0xef3, 0x81, 0x8, 0x3ceb}, {0x5, 0x7fff, 0x8, 0x4}, {0x0, 0x7, 0x66, 0xd0}, {0xfffffffd, 0x9, 0x101, 0x8}, {0x10000, 0x35a6, 0x200, 0x7}, {0x6, 0x8, 0x1, 0x5}, {0x4, 0xd95e, 0x6, 0x5}, {0x4, 0x2, 0x7, 0x401}, {0x5, 0xec, 0x7fffffff, 0xc4}, {0x0, 0x80000000, 0x9c, 0x200}, {0xf36, 0x1, 0x2, 0x1}, {0x9, 0x8001, 0x1ff, 0xfff}, {0x3, 0x1ff, 0x7f, 0x2}]}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0x1, 0x2, 0x80, 0x5, 0xe44, 0x9, 0x80, 0xe000000, 0x3, 0x80, 0x9, 0x54da, 0x9, 0xfffffffd, 0x3, 0xd, 0x8001, 0x21f, 0x400, 0x8000000, 0x3, 0x1, 0x7, 0x81, 0xf, 0x3, 0x40, 0x5, 0xffffff61, 0x7fffffff, 0x800, 0x2, 0x3, 0x2, 0xf, 0x7, 0x10001, 0x10001, 0x3, 0xd, 0xffff737d, 0x5f2, 0x6, 0xd, 0x19, 0xf4, 0xffffff43, 0x9, 0x40, 0x8, 0x5, 0x7ff, 0x0, 0x9, 0x10001, 0x1000, 0x1, 0x6c2, 0x7fffffff, 0x2, 0x63, 0x2, 0x7fffffff, 0x2, 0x7, 0xad3, 0x7f, 0xfffffffb, 0x7, 0xc, 0x7, 0x5, 0xffffffff, 0x5, 0x10001, 0x1ff, 0xe0000000, 0xfffff8b3, 0xfffffd07, 0xffffff3a, 0x1, 0xed6, 0x8001, 0x5, 0x15b, 0xfffffffa, 0x401, 0x6, 0x80000000, 0x7, 0x0, 0xe, 0x22, 0x5, 0xfffffff5, 0x841, 0x7, 0x6, 0x8, 0x1, 0x1, 0xaf, 0x80000, 0x1, 0x7, 0x6, 0x6, 0x80000000, 0x0, 0x80000000, 0x4, 0xb3c, 0x845, 0x4c, 0x7, 0x8, 0x3, 0x4, 0x10, 0x7, 0x101, 0xff, 0x2, 0x40, 0x13, 0x10001, 0x6, 0x2, 0xae8, 0x0, 0x2, 0x8, 0x9d, 0xd, 0x7, 0xfffffffa, 0xe, 0x100, 0xffffff7f, 0x8, 0x3, 0x4, 0x3, 0x601, 0x3, 0x1, 0x3, 0x800, 0x6, 0x3, 0x600000, 0x2, 0x6e3, 0x4, 0x800, 0x4, 0x7, 0x3, 0x1, 0x0, 0x9, 0x8, 0x6, 0x1, 0x400, 0x14, 0x7, 0x80000001, 0xd, 0x3, 0x7, 0x9, 0x2, 0x7, 0x3, 0x7, 0xc0a, 0x6, 0x1, 0x8, 0xd4, 0x7fffffff, 0xa, 0x7ad7, 0xffffffff, 0x12000000, 0x92dc, 0xfffffc00, 0x1, 0x6, 0x7, 0xb9e1, 0x800, 0xfffffbff, 0x101, 0xffffffff, 0x4, 0x9, 0x401, 0x7, 0x3, 0x79afa1e7, 0xfffff800, 0x6, 0x8, 0x8, 0x0, 0x4, 0x80000000, 0x8001, 0x7, 0x2, 0x101, 0x75, 0xfffffffa, 0x1, 0x4, 0x2, 0x100, 0x0, 0xa, 0xffff9df3, 0x7f, 0x75c, 0x34e, 0x0, 0x0, 0x3, 0x8, 0x8, 0x6, 0x2, 0x7, 0x3, 0x5, 0xf2b0, 0x3, 0x81, 0x592, 0x9, 0x4, 0x4, 0xee7, 0xcb, 0x10001, 0x2, 0x6, 0x437d, 0x7f980000, 0x7, 0x3, 0x1000, 0x1, 0x81, 0x5]}]}, @TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff80000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x1, 0xfffffff9, 0x10001, 0x2, 0x4, 0x40, 0x8, 0x6, 0xd, 0x9, 0xc, 0x0, 0x5, 0x2, 0x9, 0x7, 0x6, 0xa, 0x1, 0xffffffff, 0x5, 0x1, 0x0, 0x6, 0x6, 0x7, 0x6, 0x3ff, 0xf83, 0x6, 0xa, 0x80000000, 0x5, 0x7fff, 0x0, 0x4, 0x0, 0x2a, 0x2, 0x7000000, 0x1, 0x4, 0x254988b5, 0x7, 0x979, 0xbc6c, 0x4, 0xf91, 0x0, 0xfffffe00, 0x5, 0x6a, 0x3, 0x8, 0x8, 0xf, 0x8, 0xd, 0xe, 0x9, 0x7, 0x9, 0x6, 0xd5, 0x5, 0x0, 0x3, 0x5, 0xd02, 0x10, 0xc, 0x5, 0x8001, 0x8, 0x9, 0xbbd4, 0x5, 0xb, 0x8, 0x6, 0x6, 0x1d98c010, 0x100, 0x40, 0xffffff00, 0x2, 0xc291, 0x0, 0xdbd4, 0x0, 0x800, 0x1, 0xd, 0x1, 0x3, 0x0, 0x8, 0x9, 0xfff, 0x101, 0x5, 0x2, 0x0, 0x9, 0x3, 0xebe6, 0x3, 0x7f1d38bc, 0x1000, 0x6, 0x1000, 0x4, 0x6, 0x400, 0x5, 0x4, 0x80, 0x70, 0xfa, 0x4, 0x6, 0x7, 0x8000, 0x400, 0x8, 0x61c4, 0x8001, 0x3, 0xd, 0x101, 0x4, 0x9, 0x71, 0xfffffffa, 0x4, 0xd30a, 0x8001, 0x1, 0x7fffffff, 0x3, 0x200, 0x0, 0x9, 0xf15c, 0x5, 0x1, 0x80000001, 0x9, 0x1, 0x9, 0x7fff, 0x9, 0x2, 0x4, 0x3, 0x6, 0x7ff, 0x2, 0x5, 0x9, 0x2, 0x2, 0x1c, 0x5, 0x7fffffff, 0x2f73, 0x9, 0x85, 0x7, 0x9, 0x4, 0x6, 0xfa, 0xf, 0x6, 0xfffff739, 0x1d, 0xe, 0x600698d4, 0x10, 0x9, 0x3, 0x2, 0xda, 0x5eae3209, 0xb41f, 0xfffff2a0, 0x200, 0x4, 0x5, 0x2, 0x460f, 0x4, 0xffffffff, 0x47, 0x2, 0xa4, 0x102, 0x4, 0xfffffff9, 0x2, 0x0, 0x6, 0x8, 0x6, 0x8, 0x400, 0x0, 0x9, 0x5, 0x10001, 0x7e7d, 0x6, 0x664, 0x7, 0x3, 0x800, 0x6, 0x101, 0x0, 0x8, 0x200, 0x5, 0x8, 0xe9a, 0x1, 0x1, 0x8, 0x7, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3, 0x8, 0x400, 0x0, 0x2, 0x4, 0x6, 0x7, 0xf, 0xe20, 0xa3, 0x1, 0xa902, 0x3, 0x2, 0xeb, 0x6fa, 0x4, 0x7, 0x1]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x10001}]}, 0xca0}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0x3}, {0x8, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) (async)
socket$netlink(0x10, 0x3, 0x0)
r12 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r12, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30) (async)
sendto$inet6(r12, &(0x7f0000000580)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b378151ab492e56b275d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c43f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xd9, 0xc001, 0x0, 0x0) (async)
setsockopt$inet6_mtu(r12, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)

24.065418811s ago: executing program 0 (id=283):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000fc0)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)

23.595229168s ago: executing program 0 (id=287):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefff, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x63, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x4e, 0x0, 0x4}]}}}}})
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002000)=@newtfilter={0x11ec, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x2}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x7}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0xd35f}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "3c30d312cae2e9136d6df4d7e8cd2f52"}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0xff, 0xffffff00, 0xff000000]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1148, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_U32_POLICE={0x834, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x3, 0x6, 0x2, 0x9, 0x7, 0x75, 0x8, 0x9, 0x9, 0x3, 0xfc49, 0x5, 0x4, 0x401, 0x2, 0x2, 0x2, 0x5, 0x400, 0x5, 0x5e71391b, 0x7, 0x4, 0x0, 0x1, 0x7fffffff, 0xfffffa57, 0x2, 0x7, 0x473c7ffa, 0x9, 0x4, 0x81, 0xffff, 0x2, 0xff, 0x7fff, 0x0, 0x7, 0x2, 0x7, 0x7, 0x6dc, 0x2, 0x1, 0xbb, 0x603, 0x1, 0x6, 0x441a7dfc, 0xff, 0x5, 0x80000001, 0xa2, 0x158b, 0x173, 0x80, 0xaa, 0x0, 0x1ff, 0x80000000, 0x5a, 0x37b7000, 0x11, 0x2, 0x10000, 0x0, 0x7fff, 0xf2fd, 0x1, 0x7, 0x0, 0x6, 0x2, 0x6, 0xe31a, 0x5, 0x9, 0x5, 0x40, 0x2, 0x5, 0x1, 0x81, 0xc, 0x2, 0x8, 0x40, 0x53, 0x6, 0x3, 0x8, 0x8000, 0xc25, 0xaf5, 0xffffff56, 0x6, 0x5c4, 0x9, 0x7, 0x4, 0x6, 0x8, 0x2, 0x5, 0x7898ec86, 0x2, 0xfffff6f3, 0x1, 0xe, 0x7f, 0x6, 0x0, 0x0, 0x400, 0x9, 0x0, 0x2, 0x3, 0x7fffffff, 0x1, 0x3, 0x2, 0x100, 0x40, 0x8, 0x3ff, 0x80000000, 0x6, 0xc11, 0x401, 0x9d, 0xfffffffc, 0x6c, 0x7, 0x401, 0x4, 0x2, 0x8, 0x800, 0x3dbf, 0x2, 0xf9, 0x8, 0x8b, 0x6, 0x3, 0x1000, 0x7f, 0x7ff0000, 0x7675218b, 0x4, 0x1, 0x1000, 0x9, 0x5, 0x7, 0x35d, 0x100, 0x4, 0x3, 0x101, 0x3ff, 0x2, 0x4, 0x8, 0x0, 0x3, 0x7fffffff, 0xfffffff9, 0x0, 0x7, 0x2, 0x8, 0x2, 0x6, 0x7f, 0xff, 0xdaab, 0x400, 0x0, 0x10, 0x0, 0x2, 0x81, 0x7d, 0x80000001, 0x9, 0x80000, 0x4, 0x7ff, 0x0, 0x6, 0x5, 0x6e54eeb8, 0x9, 0x3, 0x7, 0x8, 0x1, 0x7, 0xcc5, 0x6, 0x1ff, 0xf20, 0xb, 0x0, 0x5f, 0x2, 0x5, 0x6, 0x5, 0x2, 0xc, 0x8, 0x7, 0x2, 0xfffffff1, 0x9, 0x2, 0x978, 0x80, 0x9, 0x8, 0x7, 0xfd35, 0x4, 0x1, 0x6, 0xe697, 0xfff, 0x4, 0x0, 0x4, 0x7f, 0x94, 0x0, 0x1, 0x6, 0x9, 0xc4, 0x7, 0x4, 0x8, 0x101, 0x3c, 0x1, 0x7, 0x9, 0x200, 0x7f, 0x4, 0x0, 0x28b]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x48ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x7, 0x94e, 0x9, 0x0, 0x8, 0xfffffffd, 0x3, 0x9, 0x909, 0x2, 0x1, 0xa11d, 0xffffbacb, 0xa329, 0x200, 0x0, 0x40, 0x80000000, 0xf, 0x4, 0x6, 0xd, 0x2, 0x1, 0x100, 0xf, 0x0, 0x2, 0x7, 0x7, 0x2, 0x54, 0x1, 0x101, 0xfffffffd, 0x3, 0xfffffc01, 0x7, 0x3, 0x4c5cef0c, 0x5, 0x26, 0x80e, 0x7, 0x4, 0x5, 0x40, 0x4, 0x8, 0x7, 0xfa1, 0x9, 0x8, 0xfff, 0xbc3c, 0x40000000, 0xfd, 0x2, 0x0, 0x9, 0x3, 0x3, 0xffff0000, 0xfffffffc, 0x534b, 0x401, 0x3, 0x9, 0x7, 0x8, 0x4, 0x7, 0xbe, 0x7, 0xb3cf, 0x81, 0x2be, 0x2, 0x0, 0x4, 0x7ff, 0x8, 0x3, 0xfff, 0x4, 0xbae, 0x10, 0x6, 0x8, 0x2, 0x9, 0x95, 0x6af, 0x0, 0xfffff801, 0x1, 0x1, 0x3, 0x1, 0x3a16, 0xff, 0xffffffff, 0x8000, 0xe, 0x3, 0x5, 0x5, 0x7fffffff, 0x7fffffff, 0xde, 0x80000001, 0x1, 0x4, 0x6, 0x2, 0x1, 0x6, 0x3, 0x8000, 0x3, 0x8, 0x2, 0xb, 0x1, 0x8, 0x9, 0x9, 0x7f, 0x8, 0xf, 0x7, 0x9, 0x9, 0xfffffffe, 0x80, 0x31e4, 0xf075, 0x64, 0x10, 0xc72, 0x3, 0x0, 0x1, 0x0, 0x7ff, 0x5, 0x1, 0x9b6, 0xb, 0x2, 0x4, 0x8, 0x9, 0x8, 0x3, 0x4425, 0xa22, 0x1, 0x5, 0x200000, 0x2, 0x9, 0x3, 0x5, 0x2, 0x5, 0x1, 0x6, 0xffff0001, 0x8000, 0x9, 0xd, 0x7ff, 0x7, 0x3, 0xb542, 0x400, 0x1, 0x7, 0x4, 0x0, 0x3, 0x4, 0xffff8001, 0x3, 0x5, 0x0, 0x10, 0x2, 0x884, 0x8, 0xfff, 0xfffeffff, 0x9, 0x4, 0x3, 0x1, 0x7, 0xfffffff7, 0x8, 0x702337e7, 0x3, 0x0, 0xdb, 0x401, 0x4, 0x66, 0x9, 0xfffffffc, 0x4f35, 0x71d, 0x5, 0x3, 0x4, 0xffff, 0x3, 0x4, 0x10, 0x5, 0x80, 0x9, 0x0, 0x7, 0xbcac, 0xfc000000, 0x1, 0x896, 0xb, 0x8, 0x8, 0x9, 0xa, 0xf90, 0x1, 0x4, 0x313, 0x80, 0x3ff, 0x7, 0xd, 0x4, 0x0, 0x4dc, 0x45, 0xffff2112, 0xffffffff, 0x5, 0x3, 0x0, 0xfffffff0, 0x10, 0x1fdd, 0x9, 0x1, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x785f}]}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xc8}, @TCA_U32_ACT={0x73c, 0x7, [@m_nat={0x1b8, 0x2, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x8000, 0x2, 0x6, 0x5590}, @empty, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffd, 0x0, 0x0, 0x80000001}, @rand_addr=0x64010100, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff0a, 0x6, 0x3, 0x4, 0x3}, @private=0xa010100, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xe4, 0x4, 0x8000, 0x29d}, @rand_addr=0x64010100, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x2, 0x7fffffff, 0x90000000}, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x46, 0x6, 0x2, 0x3, 0x7fffffff}, @empty, @broadcast, 0xffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x0, 0x5, 0xd4f}, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1, 0x1, 0x1, 0x6}, @private=0xa010101, @rand_addr=0x64010100, 0xff, 0x1}}]}, {0x4d, 0x6, "45bab9e23ccb6d64585d433682a6cd148ea7d6fe97c988f03dccf7f006f80ef15c55a634efd7538f1d962ecba392ca77493deebd1f8b97e52b1a69a711ba623cfbbc54671c2e581c3b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_nat={0xfc, 0x0, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xf, 0x10000000, 0x9, 0x200}, @local, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffff7ea, 0x1, 0x5, 0x9, 0x1000}, @multicast2, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x2, 0x8, 0x9, 0x2}, @broadcast, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x81, 0x3, 0x3, 0x853}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x9, 0x3, 0x8, 0x3}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}]}, {0xa, 0x6, "e9d4c916b5ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xc0, 0x10, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9d6b}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xe0b}]}]}, {0x75, 0x6, "fce1ee5238b3e84883ca7df7886131168ac3d75f5ec5f45a8a3e080867a51af9cccfc442a95dc045ba43d0200d5dff7d006270554e2fc360b68733901dcaf7fe7116970ab491f6da626f918efefdd703988718925b321db7319e1dc5803861b709f6a3b90536952588046de89ccfa242a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x118, 0x5, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xc84e}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "01a0889202b526d857ae8e58825124d9"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x84, 0x6, "8796c4f73b0658ac20fec47bba946c05d46240295cf8d01e98d4491bb9b70fcfd7eaa616764b2f5be8158ab464e8ff2c6f7cf34b7c590a8c85c774b0ae93e84922b389fa6fbb6f841906cfa57b206529a0677993b0ad628426ccfeb38cbfdf98694b46577eb3d08469242eb047adefa119900fbc39fe9e14fa47886c1ad63aa4"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x144, 0xc, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x10000000, 0x4, 0x6}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x3, 0x10000000, 0x9, 0x80000000}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x6, 0x0, 0x7}, 0x7b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe2, 0x45414fde, 0x3, 0x8, 0x94c0}, 0xbe2f}}]}, {0xa1, 0x6, "e520fd0afc0dc4edb3f8e64b1c5a685380c4ee95c203d1b9b6ca2a41c6cb83500189f62991019a4ed3dde269a22f13b7033dd0dcf1c5436c8fbcdef246f982b2e0ef3519596b51ca2b5aefec6945a0f6340b16b6e6357e7dc37b257e538ba4cd7b5a0ec0c01162c4a963206fc63a3a1e123d6170a0cdc228e066bec655a91ab4ebafdb681f9e3d44a734453fa54724359614f24bcfdf384bf4896d0e83"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x168, 0x11, 0x0, 0x0, {{0x7}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x37}, @TCA_IPT_TARG={0x4f, 0x6, {0x0, 'security\x00', 0xee, 0x3, "b584964f196dc26c4a20aedd4191272a5e244988579dcac56c4655883122367852206db6c1"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8000}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x96, 0x6, "1fd9739c40074dcaaabcf26c1d071713e472b9c4286d1e4ef8158352a2f58c6afb03a2bf13c827c04f4460bf91e5660620d5728f4996e3e102ea472332e04b8366e4a655183fc5324812884e1f0de729bf2bce712cd9cc603cdaad4632708055590f2de44a593a9836bc9af15883e9d3182f42f62b2fdd33381125f0bcae41e94f8bd0bf7fb675fa9e7275f64f4e6a09e8f1"}, {0xc}, {0xc, 0x8, {0x1, 0xc9601c5d5e27bacb}}}}]}, @TCA_U32_ACT={0x1b4, 0x7, [@m_mirred={0xe0, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x7ff, 0x20000000, 0x4, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x400, 0x8, 0x40, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x47e9, 0xf, 0x10000000, 0x0, 0x7fff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5458, 0x9, 0x20000000, 0x6, 0xb0}, 0x3}}]}, {0x32, 0x6, "3cf102f57615db346f2c5b9a74741158fc0b86cbd4662c995b75a4c76e868ef655a1efeadc403032cbb222f3408f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xd0, 0x2, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x12000000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x3, 0x1, 0x6, 0x7fff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffe}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x7ff, 0x3, 0x2, 0x8}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xfff, 0x2, 0x4, 0x8001}}]}, {0x33, 0x6, "3533d55394be476373be3d022578e52d0cb0d33915b24f467ea941ff01519c022279a50f718823243e9fe07e70af69"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0x7}}]}}]}, 0x11ec}}, 0x0)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r6, r6, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r9, 0xffffffffffffffff, 0x24}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002e00000008002300610033f70fb3681174f9f09f94ff012afa74f29577", @ANYRES32=r12, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))

23.276368466s ago: executing program 1 (id=291):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async)

23.125059451s ago: executing program 1 (id=292):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1411, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x2f}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4)

23.065738842s ago: executing program 1 (id=293):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
shutdown(r1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r2, 0xffffc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000100001000000000000000004000000000000000001000000000700000314000000111f00000a00000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x200000, 0x7}, {0x2, 0x0, 0xae8}, 0x70bd27, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES8=r8, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440040000000002d2d00000000"], 0x6c}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)={0x1ac, r10, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x8e, 0x3, "e69b1c0835f9c87f84c508cc747c9b2ebc1000000000000000d9405962a3d86eb12d2f4cdac70000000000000000"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NODE_ID={0xb7, 0x3, "6afb7ddce677407bcdd7a443950ce64ccad1072bf47e42fbbd0b2e8f61c7bf2b2e9233253d3c855e9c8ccc5f1d3e88710174ef5b4dd8ad08dfad9da8e5810f1a687270499e90fe516f3b4144c079826672cef63aa696fb620ede0094f2999ed7711aa7560bd62f16c380cd0157eb31cc90d4480abf23dc7d58ead4bb2bbbb711eb2af671e5f2e3733f9d54123be2b803cdd94d6f416e18fae47aca2773c7c1323a4dfb12d1ca1d3eca1cb1f9d64b08c0891f34"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x8804)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x400, 0x10001, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x187}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24008095)
writev(r1, &(0x7f00000023c0)=[{&(0x7f0000002200)="b3158e2471", 0x5}], 0x1)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x400d1)
ioctl$sock_ifreq(r11, 0x8932, &(0x7f0000000140)={'team_slave_1\x00', @ifru_mtu=0x8})
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket(0x6, 0x400, 0x8)

22.975963671s ago: executing program 1 (id=295):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="40c4acf0c28aedb281b2514b823ad56d94e8653d0bc9036a0ddae57e4b85d4c7ae1cd05404c1eac9bdae21d9e91d56ff08a38b5ba3568feddef18162f8552179a0840c60d274e9e317d0d28ecb921d8786547627166cb14d35c195cd6416bdbd11b9b0f6efe44c82024e9cd231b4ad8bd874ec8e5fbf28cf663e179cbe960c16f7b113d460110c1a9a281136aa2e99", @ANYRES64=r1, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0xc0000000}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x5, @mcast2, 0x1}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0xc5, @mcast1, 0x40}, @in={0x2, 0x4e1d, @local}, @in6={0xa, 0x4e24, 0x9, @private0, 0x4}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @broadcast}], 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x6, 0x6, 0x2, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000580), 0x1f93, r4}, 0x38)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@allocspi={0x160, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x8}, {@in=@dev, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x7fff}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd2b, 0x70bd28, 0x70bd29, 0x70bd2b, 0x36405ff2, [0x27f4, 0x7]}}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3503, 0x1, 0x2, 0x4, 0x0, 0x7, 0x7ff}]}]}, 0x160}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300)
sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xff}, {0x3, 0x2, {0x2, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0x1, 0xff}, {0x0, 0xfffffffffffffffb, {0x2, 0xf0, 0x2}, {0x1}, 0xfe, 0xff}], 0x60)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r8, {0x5, 0xb}, {0x4, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
socket(0x23, 0x80805, 0x8000000)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)

22.781049062s ago: executing program 1 (id=297):
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$phonet(0x23, 0x2, 0x1)
sendmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)
sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}}, 0x40)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000380)="2cb16433697b0e15922ceb8c67faf3f9a13cf2cfd2ec9c3cef174c6c2bd0f789431ca21c8f2ae747991ae4c77714ef181b3bb8a7adc304cf997fd8e4eaad65a86643822972171e20f556d581251f3b1598018de726cb5d67b00aa8d00760ecac383486872b570d06cf799c004eac269e26259e", 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r8=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x7c, r10, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5f, 0x5b, "cf58701b0b552c663fe0e0f009000af233dafde99e6dd152f051f4311ee4977fb05fe273251d136ae402e1818d52cd9ac4c4b966e94602eb2ce70f000000d1d81519cfde34db920a179691951e2c361cc60a6f4a5b09c62d77b824"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x7c}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0)
r13 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r13, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r13, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @remote}, 0xffffffffffffffff}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r13, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x80, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2, 0x3}, 0x0, {[0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd2d]}}, 0x5c)
socket(0xa, 0x3, 0x3a) (async)
r14 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r14, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

22.683624991s ago: executing program 0 (id=298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
write$nci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000940)={0x2, 0xb, ['\x00', '\x00']})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async)
write$nci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) (async)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000940)={0x2, 0xb, ['\x00', '\x00']}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)

22.484864081s ago: executing program 1 (id=299):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
shutdown(r1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r2, 0xffffc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xf)
r6 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r11, 0x65, 0x3, &(0x7f0000000040), 0x4)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440040000000002d2d00000000"], 0x6c}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x1a0, r10, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x27, 0x3, "e69b1c0835f9c87f84ce08cc8c9555fb0d9e3d72747c9b2ebcb41eaddeae511b19d940"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NODE_ID={0xb7, 0x3, "6afb7ddce677407bcdd7a443250ce64ccad1072bf47e42fbbd0b2e8f61c7bf2b2e9233253d3c855e9c8ccc5f1d3e88710174ef5b4dd8ad08dfad9da8e5810f1a687270499e90fe3b4144c079826672cef63aa696fb620ede0094f2999ed7711aa7560bd62f16c380cd0157eb31cc90d4480abf23dc7d58ead4bb2bbbb711eb2af671e5f2e3733f9d54123be2b803cdd94d6f416e18fae47aca2773c7c1323a4dfb12d1ca1d3eca1cb1f9d64b08c0891f345b71"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x801}, 0x8880)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x400, 0x10001, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x187}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24008095)
writev(r1, &(0x7f00000023c0)=[{&(0x7f0000002200)="b3158e2471", 0x5}], 0x1)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_ifreq(r12, 0x8932, &(0x7f0000000140)={'team_slave_1\x00', @ifru_map={0x2, 0x38, 0x59, 0x8, 0x1, 0x9}})
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket(0x6, 0x400, 0x8)

15.725887422s ago: executing program 2 (id=336):
socket$inet6(0xa, 0x1, 0x84) (async)
socket$inet6(0xa, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r10}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r10}, 0x18)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

15.525586696s ago: executing program 2 (id=337):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) (async, rerun: 64)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async)
listen(r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0xc) (async, rerun: 64)
r2 = socket$phonet(0x23, 0x2, 0x1)
sendmmsg(r2, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)
sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), 0x0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r7=>0x0}) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0}) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) (async)
r13 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r13, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r13, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @remote}, 0xffffffffffffffff}, 0x5c)

15.434685667s ago: executing program 2 (id=338):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a310000000009000100f3797a3100000000100003800c00008008000340000000029308d898df9082f752082fdc1d096a0415fae09172518098b124a3421fec6db58c0e69eb79ca402f0fddbf04f5c25768cc8fa52ce82e05c997deaadc979e4584200beeca120169545a341da2967e6578aea9e90d4179ae8d79d1ac7b086a20b0926c11769a64f5a7d12bbb3741c33a86605c53e6ba1619f89e211138272f82ab81d661caeaa8ac1df94d1287b295838533b31a5edb180b307fa11fad853e891ba3800f7f57e0a71ca2ae93ed4daee4927ab1ee45edb6fff6bc7de8be4479cb11c9e86673d5e42be24c"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0005"], 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="d160dd6ee34195c9740f953346004c4e594aa4580061298a49a6972168df9e8c2ebc4f11db844f3d5934397e040c5692091d742c53693abbff8e4c21432a85caaf36b523fe3a37a6c6a07b723b7357a38905faadb0bd0cb2ead6", @ANYRES8=r9, @ANYRES32=r8, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e", @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async)
r11 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
r12 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r12, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1f0000000004000000000201000000000000", @ANYRES32=r13, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "b28f9168ff01d7a3fcd2ce0890aae107"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x65}, @NL80211_ATTR_PMK={0x14, 0xfe, "fd6cb9e41ddd9a8d3608915759189b2f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3395e4e9858afadbb8d999d28297915c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xffff}]}, 0x98}, 0x1, 0x0, 0x0, 0x44000}, 0x4000015)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000001c0)={0x1000, 0x1, 0x9645}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='tcp_retransmit_synack\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)

15.375477387s ago: executing program 2 (id=339):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8c1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x100000000001f, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9885, 0x10008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x4}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x88}]}}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9885, 0x10008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x4}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x88}]}}}]}, 0x44}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x907, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x10, 0x4, 0x0, 0x1, [@typed={0xc, 0xf, 0x0, 0x0, @u64=0x90}]}, @typed={0x6, 0x20, 0x0, 0x0, @str='\xbd\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYBLOB="0148"], 0xc4}}, 0x4004)
close(r7) (async)
close(r7)
syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async)
r9 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bind$llc(r9, &(0x7f0000000140)={0x1a, 0x0, 0x3, 0xf4, 0x3, 0x4a}, 0x10) (async)
bind$llc(r9, &(0x7f0000000140)={0x1a, 0x0, 0x3, 0xf4, 0x3, 0x4a}, 0x10)
close(r9) (async)
close(r9)

15.225068381s ago: executing program 2 (id=340):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async, rerun: 64)
r2 = socket(0x1, 0x80802, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) (async)
socketpair(0x1, 0x5, 0x0, 0x0) (async, rerun: 32)
sendmmsg$inet(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e80)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1b8f605103dcdbe0c8755554bf56fcb22df82948875dd027afbb587bec7", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d58016a26150617024d7194739ef7ec9e5d5", 0x58}, {&(0x7f0000001080)="54e9498763dd5250c697dbbefe317cc7f260b3aa6a7d42b697f9dc923a273271a7d209b622e1c666df05e011c00c052b2b12c1358bb59f004bde945032c5ab51b8a7eeac480480b2e86e73cea813da8c20d75b76af42c424017c909d330e195c38ac12ed085ca18365b3192a4a1936fbdd30ad895008b0212f872cb0eb5cadb3cbdedab6870c51b40897731d739106a4f2fe1e3dafac5b1caa252de07dfa508eefc200ac515173aac5138f72c54a3d4ce083e7f35d9bc9db2299b589bc54adf01c062bc510a0eec7069dafa2daffa0e435efa697293fd1ff22b3e288cf86ea1fcf69", 0xe2}], 0x2}}, {{&(0x7f00000005c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000c80)="16ffb03ec4d1960f59085a8c5acd5172817c47dcd271b64bf4eceb6ab00f9eb0bd72dc5881d4d069a66d652dc8034d9772d2da38f265049620cfccf3bc1470b466e068c85d4a3a5a4d3a3b2a2b541df075cc231be544b37fbef4cf4906c3b9a727ddcf21c745231328d37dd7dc7768810075ecf903a9e4871a80982d229fb38dc693bf6dfc5c60b405d9d1fad639ae2c7145b792b21028e53a83c88e795b1ec912c30a345e90f8a09eaaf25fdcade23fd0a44561d92908678ba0a63b0329d175108aff4c90a3ebf84c8ea806893524", 0xcf}], 0x1, &(0x7f0000001300)=ANY=[@ANYBLOB="14000000000000000000000001000000020000000000000014000000000000000000000002000000010000000000000014000000000000000000000002000000ff000000000000007800000000000000000000000700000001071f78ac1414aaffffffffac1e0101ac1e0001ffffffff0a010101ac14143a0007074dac14141944341ac3ffffffff00002433ffffffff0000000664010100000000086401010100000000ac1e000100000002ac1414aa000000020101440829100000000700001100000000000000000000000100000060000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbac1414bb000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e000070000000000000000001c0071032609000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141406000000010000000014000000000000000000000002000000ff00000000000000"], 0x150}}], 0x3, 0x0) (rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000f98926b0de2bcb0a15ca779f250f29c836faa9affb104f7869ae4a569fa84d72f0eff05274cf26f5d67812010b7e8a2aae15269925426902765a49eca529", @ANYRES32=0x1, @ANYBLOB="0001ffff145600000000000000b1569fc70000008576776aa7bccfb00d7200004de83a5a3447f474093f77fc9215dcc11651dd1f491ed20be53c295bba0f75306ea611662bb4d71df4da116a86b2eacbaf9086243a23b5bb2884e7c9e4af9f91393aa6969deede0151c0cd9b13a11bd4cd7638518bc5355fc1129cf06bde60eba8fa0db65a0c97f996020223051b6219b4cf45620a62a86a9d8e7baf92b5706cd85c0a727cb0b1b8343a0cca16dc1213eee1ef2272f56a1e3567f5011297a15eb61b9512d0dbf9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYBLOB="c2a466", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async, rerun: 64)
bind$rds(r4, &(0x7f0000000000)={0x2, 0x8, @rand_addr=0x64010100}, 0x10) (async, rerun: 64)
sendmsg$rds(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x5}], 0x18, 0x8000}, 0x0) (async)
close(r3) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) (async)
sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000780)="bd6101c2cc3db71eff77c298137d3c17a5450de475950074033001bfa88bea5ba1c090962d4e78dc7c433c231d776968c15fe5a282326ecfcbdd71cf79b06131f5629093988093c1cd477841c578bd23fc11502181fa625705c1ca5b5f8a8b02f0cd80c5a51245ea6d902cca7d39ef60bf55c6c3d5cc48a00e163ba75d5458faf8d644bdf9faf4184a0bcaf07a6fc340528f5a047cb2c9f5587d789194440b5779963519a56bcb456c20b1f978cb793f212b36f1b2200711bea38171b0e8c12bb97ec9bdecd978c7", 0xc8}, {&(0x7f0000000380)="4d28981a36e98a3781", 0x9}, {&(0x7f0000000880)="f6456652b8693350c50df7031665d154ef868be4c9f1ae9c96e0bc5da144502c49704613c4a42fd4daf24a0e75d97a5b8138fd431f0f29bbe448043377f1980ab9090ff9c70460ba77a50ec2b2233a50a0ed2baffc01ca5a6e57cd9de0297bfb1029a6a6805052fff3acebcab1749e7a21f62247043f", 0x76}, {&(0x7f0000000900)="f318442dcf94eb53edf872a6fd0c0f761a9f7134e33b9c61377bfdd8b3933d40c12aa04d9ac49e9091531ad9225d7400dc701abdfd0e950d372b9406f9daa196056e69a2725a95d23b8e80e94d3eab594d6df9b5305d6bab0e00abe8f1adc1ebb37466b7d0f2a482c21672e98394abc96ea31f35caf792477b7337bd77e00188751ae6cb86e6639e771763d5583e6392d60fda604af07620a64076a131d2e123da5c8b03daccfa4442fb5b0abec727ae97ec3ad5cbf36652e3b522a2", 0xbc}], 0x4, 0x0, 0x0, 0x4000810}, 0x804) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async, rerun: 32)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async, rerun: 32)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

15.22409908s ago: executing program 2 (id=341):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/69, 0x45, 0x12021, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c)
ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f00000000c0))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x58ab7cedab8b3dfd}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x20008005)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000380)="0757f9e927eae302d7471220bce4e88f76257f29d309dca50743a83f8d5688d7db5abfb0b14451ecafffeab9938a0ec4fcb705c4b72efe935eb975bfb452531d062a388713681e74b907c6b6d65108628a0fc166a9b17fd3296d3e738250826a438e4c7cf922391b1095625b29c346eb2af8282d18b6b45b42a6347cdba4b727c4737deda2c38dc9994a6d899bbf41d1c3", 0x91)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x844)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r2)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r8, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x2400c050)
syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r9, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xf, 0x34, @random="866c6e8b1f76095398c73c"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e1d1be0e57a3"}, @NL80211_ATTR_SSID={0xc, 0x34, @random="fe308e9cc97c29f5"}, @NL80211_ATTR_IE={0xf, 0x2a, [@dsss={0x3, 0x1, 0xb6}, @mesh_chsw={0x76, 0x6, {0x9, 0x4, 0x4, 0x81}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9241d8a963bd3abf}, 0x4004080)
r10 = socket$netlink(0x10, 0x3, 0x1)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r11, &(0x7f0000000880)="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", 0x1000, 0x8080, &(0x7f0000001880)={0x2, 0x1, @loopback}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001900)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r9, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "05a705c88f"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "cd2bef33"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "90cdf9473715109eedd88a393c"}]}, 0x54}, 0x1, 0x0, 0x0, 0x48004}, 0x20040024)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001a40), r10)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r14 = getuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000001a80)={{{@in=@multicast1, @in6=@remote, 0x4e22, 0x74ca, 0x4e20, 0xffff, 0xa, 0x0, 0x0, 0x2, r4, r14}, {0x48f4, 0x70, 0xe197, 0x1, 0xa52, 0xb4, 0xf8, 0xc}, {0x53b, 0x8, 0x800, 0xda88}, 0x18, 0x6e6bbe, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x6c}, 0xa, @in=@empty, 0x3504, 0x0, 0x2, 0x7, 0x7, 0x7, 0x5}}, 0xe8)
shutdown(r1, 0x1)

7.198662995s ago: executing program 32 (id=298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
write$nci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000940)={0x2, 0xb, ['\x00', '\x00']})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async)
write$nci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) (async)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000940)={0x2, 0xb, ['\x00', '\x00']}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)

7.149050439s ago: executing program 33 (id=299):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
shutdown(r1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r2, 0xffffc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xf)
r6 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r11, 0x65, 0x3, &(0x7f0000000040), 0x4)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440040000000002d2d00000000"], 0x6c}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x1a0, r10, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x27, 0x3, "e69b1c0835f9c87f84ce08cc8c9555fb0d9e3d72747c9b2ebcb41eaddeae511b19d940"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NODE_ID={0xb7, 0x3, "6afb7ddce677407bcdd7a443250ce64ccad1072bf47e42fbbd0b2e8f61c7bf2b2e9233253d3c855e9c8ccc5f1d3e88710174ef5b4dd8ad08dfad9da8e5810f1a687270499e90fe3b4144c079826672cef63aa696fb620ede0094f2999ed7711aa7560bd62f16c380cd0157eb31cc90d4480abf23dc7d58ead4bb2bbbb711eb2af671e5f2e3733f9d54123be2b803cdd94d6f416e18fae47aca2773c7c1323a4dfb12d1ca1d3eca1cb1f9d64b08c0891f345b71"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x801}, 0x8880)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x400, 0x10001, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x187}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24008095)
writev(r1, &(0x7f00000023c0)=[{&(0x7f0000002200)="b3158e2471", 0x5}], 0x1)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_ifreq(r12, 0x8932, &(0x7f0000000140)={'team_slave_1\x00', @ifru_map={0x2, 0x38, 0x59, 0x8, 0x1, 0x9}})
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket(0x6, 0x400, 0x8)

0s ago: executing program 34 (id=341):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/69, 0x45, 0x12021, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c)
ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f00000000c0))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x58ab7cedab8b3dfd}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x20008005)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000380)="0757f9e927eae302d7471220bce4e88f76257f29d309dca50743a83f8d5688d7db5abfb0b14451ecafffeab9938a0ec4fcb705c4b72efe935eb975bfb452531d062a388713681e74b907c6b6d65108628a0fc166a9b17fd3296d3e738250826a438e4c7cf922391b1095625b29c346eb2af8282d18b6b45b42a6347cdba4b727c4737deda2c38dc9994a6d899bbf41d1c3", 0x91)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x844)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r2)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r8, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x2400c050)
syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r9, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xf, 0x34, @random="866c6e8b1f76095398c73c"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e1d1be0e57a3"}, @NL80211_ATTR_SSID={0xc, 0x34, @random="fe308e9cc97c29f5"}, @NL80211_ATTR_IE={0xf, 0x2a, [@dsss={0x3, 0x1, 0xb6}, @mesh_chsw={0x76, 0x6, {0x9, 0x4, 0x4, 0x81}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9241d8a963bd3abf}, 0x4004080)
r10 = socket$netlink(0x10, 0x3, 0x1)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r11, &(0x7f0000000880)="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", 0x1000, 0x8080, &(0x7f0000001880)={0x2, 0x1, @loopback}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001900)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r9, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "05a705c88f"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "cd2bef33"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "90cdf9473715109eedd88a393c"}]}, 0x54}, 0x1, 0x0, 0x0, 0x48004}, 0x20040024)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001a40), r10)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r14 = getuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000001a80)={{{@in=@multicast1, @in6=@remote, 0x4e22, 0x74ca, 0x4e20, 0xffff, 0xa, 0x0, 0x0, 0x2, r4, r14}, {0x48f4, 0x70, 0xe197, 0x1, 0xa52, 0xb4, 0xf8, 0xc}, {0x53b, 0x8, 0x800, 0xda88}, 0x18, 0x6e6bbe, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x6c}, 0xa, @in=@empty, 0x3504, 0x0, 0x2, 0x7, 0x7, 0x7, 0x5}}, 0xe8)
shutdown(r1, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15493' (ED25519) to the list of known hosts.
syzkaller login: [   55.788272][ T5832] cgroup: Unknown subsys name 'net'
[   55.902306][ T5832] cgroup: Unknown subsys name 'cpuset'
[   55.908144][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.094705][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.391205][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.395952][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.400324][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.404033][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.407856][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.410451][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.413282][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.415814][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.419566][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.422148][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.425364][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.428168][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.440529][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.457324][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.459951][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.817140][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   63.858888][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   63.878182][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   63.953695][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.957038][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.959839][ T5853] bridge_slave_0: entered allmulticast mode
[   63.963024][ T5853] bridge_slave_0: entered promiscuous mode
[   63.993900][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.996300][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.999245][ T5853] bridge_slave_1: entered allmulticast mode
[   64.002306][ T5853] bridge_slave_1: entered promiscuous mode
[   64.110170][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.115104][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.119475][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.122818][ T5846] bridge_slave_0: entered allmulticast mode
[   64.128732][ T5846] bridge_slave_0: entered promiscuous mode
[   64.133049][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.136060][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.139315][ T5847] bridge_slave_0: entered allmulticast mode
[   64.143334][ T5847] bridge_slave_0: entered promiscuous mode
[   64.148738][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.151774][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.154819][ T5847] bridge_slave_1: entered allmulticast mode
[   64.160122][ T5847] bridge_slave_1: entered promiscuous mode
[   64.165468][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.184101][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.186831][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.189808][ T5846] bridge_slave_1: entered allmulticast mode
[   64.194083][ T5846] bridge_slave_1: entered promiscuous mode
[   64.235691][ T5853] team0: Port device team_slave_0 added
[   64.259525][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.278388][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.282671][ T5853] team0: Port device team_slave_1 added
[   64.287418][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.292798][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.350245][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.352895][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.362166][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.377920][ T5846] team0: Port device team_slave_0 added
[   64.380659][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.383232][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.392104][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.397812][ T5847] team0: Port device team_slave_0 added
[   64.401677][ T5846] team0: Port device team_slave_1 added
[   64.405426][ T5847] team0: Port device team_slave_1 added
[   64.475193][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.478827][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.489601][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.495299][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.498501][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.509367][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.521004][ T5853] hsr_slave_0: entered promiscuous mode
[   64.524427][ T5853] hsr_slave_1: entered promiscuous mode
[   64.528512][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.530821][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.538972][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.543699][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.546177][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.570696][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.703122][ T5847] hsr_slave_0: entered promiscuous mode
[   64.706430][ T5847] hsr_slave_1: entered promiscuous mode
[   64.710622][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   64.712637][ T5847] Cannot create hsr debugfs directory
[   64.737538][ T5846] hsr_slave_0: entered promiscuous mode
[   64.740467][ T5846] hsr_slave_1: entered promiscuous mode
[   64.742825][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   64.744778][ T5846] Cannot create hsr debugfs directory
[   65.009482][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.018335][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.028693][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.042174][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.091292][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.113444][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.120336][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.126416][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.181917][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.192418][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.209651][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.220221][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.309008][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.351621][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.360321][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   65.380134][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.382457][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.393209][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   65.401834][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.404109][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.418370][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.420652][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.430461][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.433239][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.454598][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.494855][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   65.498290][ T5237] Bluetooth: hci1: command tx timeout
[   65.500832][ T5237] Bluetooth: hci2: command tx timeout
[   65.503389][ T5852] Bluetooth: hci0: command tx timeout
[   65.530680][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.532978][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.538365][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.541057][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.824852][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.859789][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.884969][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.938779][ T5853] veth0_vlan: entered promiscuous mode
[   65.965646][ T5853] veth1_vlan: entered promiscuous mode
[   65.979279][ T5846] veth0_vlan: entered promiscuous mode
[   65.991228][ T5846] veth1_vlan: entered promiscuous mode
[   65.999411][ T5847] veth0_vlan: entered promiscuous mode
[   66.018650][ T5847] veth1_vlan: entered promiscuous mode
[   66.047785][ T5853] veth0_macvtap: entered promiscuous mode
[   66.054634][ T5846] veth0_macvtap: entered promiscuous mode
[   66.063849][ T5853] veth1_macvtap: entered promiscuous mode
[   66.070902][ T5846] veth1_macvtap: entered promiscuous mode
[   66.093957][ T5847] veth0_macvtap: entered promiscuous mode
[   66.101916][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.112457][ T5847] veth1_macvtap: entered promiscuous mode
[   66.120434][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.125652][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.146108][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.153059][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.161520][ T5881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.164982][ T5881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.175435][ T5881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.179949][ T5881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.183512][ T5881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.206052][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.211078][ T5881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.219986][ T5881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.251077][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.274582][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.281089][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.285569][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.300715][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.363922][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.367898][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.427499][ T5128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.430384][ T5128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.452565][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.455020][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.509797][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.514813][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.533257][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.571989][ T5128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.576145][ T5128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.588171][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.597608][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.795010][ T5935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4'.
[   66.802018][   T10] IPVS: starting estimator thread 0...
[   66.808225][ T5935] Zero length message leads to an empty skb
[   66.841724][ T5934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.887042][ T5937] IPVS: using max 45 ests per chain, 108000 per kthread
[   67.213052][ T5956] can: request_module (can-proto-0) failed.
[   67.264427][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'.
[   67.402618][ T5971] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   67.577686][ T5851] Bluetooth: hci2: command tx timeout
[   67.579965][ T5851] Bluetooth: hci1: command tx timeout
[   67.691444][ T5988] netlink: 'syz.2.17': attribute type 2 has an invalid length.
[   67.694161][ T5988] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17'.
[   67.710814][ T5988] nbd: must specify a device to reconfigure
[   67.729882][ T5989] netlink: 'syz.1.18': attribute type 30 has an invalid length.
[   67.733264][ T5989] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   67.736309][ T5989] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   67.854734][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'.
[   67.870783][ T5998] netlink: 'syz.1.21': attribute type 10 has an invalid length.
[   67.880809][ T5994] netlink: 'syz.2.20': attribute type 10 has an invalid length.
[   67.882742][ T5998] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   67.888953][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'.
[   67.903306][ T5994] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   68.084636][ T6004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.194011][ T6021] netlink: 200 bytes leftover after parsing attributes in process `syz.1.27'.
[   68.200126][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   68.442882][ T6032] netlink: 'syz.1.29': attribute type 12 has an invalid length.
[   68.446061][ T6032] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.29'.
[   68.658755][ T6045] netlink: 'syz.1.30': attribute type 13 has an invalid length.
[   68.662122][ T6045] netlink: 'syz.1.30': attribute type 17 has an invalid length.
[   68.676467][ T6044] netlink: 200 bytes leftover after parsing attributes in process `syz.0.31'.
[   68.724271][ T6045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.738651][ T6044] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET)
[   68.746172][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'.
[   68.803929][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.858110][  T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   68.868600][ T6037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.372217][ T6078] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   69.375608][ T6078] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   69.656988][ T5851] Bluetooth: hci2: command 0x040f tx timeout
[   69.659882][ T5237] Bluetooth: hci1: command tx timeout
[   69.983986][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.987788][ T6104] tipc: Invalid UDP bearer configuration
[   69.987818][ T6104] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   69.989094][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.150359][ T6111] netlink: 'syz.1.51': attribute type 11 has an invalid length.
[   70.279736][ T6118] netlink: 'syz.1.51': attribute type 1 has an invalid length.
[   70.286039][ T6118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.546244][ T6128] bond0: (slave wlan1): Releasing backup interface
[   70.943708][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.955349][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.015572][ T6159] syz_tun: entered allmulticast mode
[   71.036240][ T6159] dvmrp8: entered allmulticast mode
[   71.054340][ T6162] netlink: 'syz.0.59': attribute type 1 has an invalid length.
[   71.225293][ T6162] veth3: entered promiscuous mode
[   71.403993][  T790] IPVS: starting estimator thread 0...
[   71.451781][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.508539][ T6177] IPVS: using max 63 ests per chain, 151200 per kthread
[   71.545799][ T6180] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.565358][ T6182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.581891][ T6178] gretap1: entered promiscuous mode
[   71.737469][ T5237] Bluetooth: hci1: command tx timeout
[   71.739756][ T5237] Bluetooth: hci2: command 0x040f tx timeout
[   71.819755][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   72.054836][ T6197] __nla_validate_parse: 10 callbacks suppressed
[   72.054855][ T6197] netlink: 200 bytes leftover after parsing attributes in process `syz.0.66'.
[   72.206440][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'.
[   72.313424][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.321790][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.472122][ T6220] validate_nla: 7 callbacks suppressed
[   72.472158][ T6220] netlink: 'syz.1.70': attribute type 13 has an invalid length.
[   72.483788][ T6220] netlink: 'syz.1.70': attribute type 17 has an invalid length.
[   72.511011][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.514785][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.716420][ T6233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.70'.
[   72.723136][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.755488][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.783270][ T6228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.901915][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   72.948473][    C1] vcan0: j1939_tp_txtimer: 0xffff888115132400: tx aborted with unknown reason: -2
[   72.953588][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888115130400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[   72.962143][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888115132400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[   73.004191][ T6220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.036775][ T6211] syz.0.69 (6211) used greatest stack depth: 19960 bytes left
[   73.050310][ T5864] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.094209][ T5864] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.141429][ T5864] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.145101][ T5864] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.149488][ T6228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.380949][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'.
[   73.386296][ T6259] netlink: 'syz.0.76': attribute type 1 has an invalid length.
[   73.436002][ T6259] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   73.443151][ T6259] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.458552][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   73.470169][ T6259] veth3: entered promiscuous mode
[   73.474684][ T6259] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   73.494119][ T6259] bridge_slave_0: left allmulticast mode
[   73.495900][ T6259] bridge_slave_0: left promiscuous mode
[   73.505850][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.513002][ T6259] bridge_slave_1: left allmulticast mode
[   73.514819][ T6259] bridge_slave_1: left promiscuous mode
[   73.517406][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.522596][ T6259] bond0: (slave bond_slave_0): Releasing backup interface
[   73.528144][ T6259] bond0: (slave bond_slave_1): Releasing backup interface
[   73.532751][ T6259] team0: Port device team_slave_0 removed
[   73.535721][ T6259] team0: Port device team_slave_1 removed
[   73.541052][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.543977][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.548615][ T6259] bond1: (slave ip6gretap1): Removing an active aggregator
[   73.552964][ T6259] bond1: (slave ip6gretap1): Releasing backup interface
[   73.555212][ T6259] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 92:28:01:41:9a:86 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   73.564967][ T6259] bond1: (slave veth3): Releasing backup interface
[   73.680779][ T6272] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   73.754809][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.77'.
[   73.818863][ T5237] Bluetooth: hci2: command 0x040f tx timeout
[   74.015602][ T6289] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.81'.
[   74.021714][ T6289] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   74.039284][ T6289] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   74.425876][ T6325] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20004
[   74.585296][   T10] IPVS: starting estimator thread 0...
[   74.617030][ T6337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.678683][ T6341] IPVS: using max 45 ests per chain, 108000 per kthread
[   74.804597][ T6356] netlink: 'syz.0.90': attribute type 13 has an invalid length.
[   74.810601][ T6356] netlink: 'syz.0.90': attribute type 17 has an invalid length.
[   74.838999][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.845658][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.893406][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.897868][ T6356] 8021q: adding VLAN 0 to HW filter on device team0
[   74.905643][ T6356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.010199][ T6356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.90'.
[   75.039278][ T6356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.130098][ T6356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.281518][ T6382] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   75.302751][ T6382] bridge_slave_0: left allmulticast mode
[   75.304758][ T6382] bridge_slave_0: left promiscuous mode
[   75.307166][ T6377] netlink: 'syz.1.94': attribute type 12 has an invalid length.
[   75.309317][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.325953][ T6382] bridge_slave_1: left allmulticast mode
[   75.330587][ T6382] bridge_slave_1: left promiscuous mode
[   75.333246][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.346492][ T6382] bond0: (slave bond_slave_0): Releasing backup interface
[   75.354156][ T6382] bond0: (slave bond_slave_1): Releasing backup interface
[   75.368478][ T6382] team0: Port device team_slave_0 removed
[   75.376377][ T6382] team0: Port device team_slave_1 removed
[   75.381682][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.384576][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.390693][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.393550][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.409174][ T6389] netlink: 'syz.2.95': attribute type 10 has an invalid length.
[   75.419458][ T6382] bond0: (slave wlan1): Releasing backup interface
[   75.428044][  T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.433835][ T6389] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   75.450718][ T6389] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   75.526777][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.529199][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.657718][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'.
[   75.751470][ T6356] syz.0.90 (6356) used greatest stack depth: 19008 bytes left
[   75.766985][ T6410] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.100'.
[   75.785375][ T6410] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   75.802177][ T6410] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   75.896795][ T5237] Bluetooth: hci2: command 0x040f tx timeout
[   76.118599][   T24] cfg80211: failed to load regulatory.db
[   76.147192][ T6432] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.176242][ T6434] netlink: 'syz.0.106': attribute type 1 has an invalid length.
[   76.217594][ T6434] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.229477][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.236876][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.251252][ T6434] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.254133][ T6434] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   76.260544][ T6434] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   76.304154][ T6438] bond0: (slave wlan1): Releasing backup interface
[   76.333062][ T6442] veth5: entered promiscuous mode
[   76.338499][ T6442] bond2: (slave veth5): Enslaving as an active interface with a down link
[   76.377011][  T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.431378][ T6444] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[   76.818403][ T4318] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   76.981272][ T6467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.178982][ T6480] netlink: 'syz.1.116': attribute type 11 has an invalid length.
[   77.237632][ T6482] netlink: 'syz.0.115': attribute type 10 has an invalid length.
[   77.354306][ T6501] netlink: 'syz.0.118': attribute type 1 has an invalid length.
[   77.373971][ T6501] vlan2: entered allmulticast mode
[   77.376046][ T6501] veth1: entered allmulticast mode
[   77.441058][ T6504] __nla_validate_parse: 3 callbacks suppressed
[   77.441075][ T6504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.119'.
[   77.536277][ T6514] validate_nla: 1 callbacks suppressed
[   77.536297][ T6514] netlink: 'syz.2.122': attribute type 1 has an invalid length.
[   77.566365][ T6514] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.610294][ T6514] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.612610][ T6514] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   77.618836][ T6514] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   77.632364][ T6521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'.
[   77.664655][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'.
[   77.680735][ T6511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.711063][ T6516] netlink: 'syz.1.121': attribute type 10 has an invalid length.
[   77.794347][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.960768][ T6534] tipc: Started in network mode
[   77.962499][ T6534] tipc: Node identity 629598b006be, cluster identity 4711
[   77.963649][ T6527] netlink: 'syz.1.123': attribute type 10 has an invalid length.
[   77.965068][ T6534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.971138][ T6527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.123'.
[   77.980321][ T6534] syzkaller0: entered promiscuous mode
[   77.982300][ T6534] syzkaller0: entered allmulticast mode
[   77.994191][ T6534] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   78.015118][ T6534] tipc: Resetting bearer <eth:syzkaller0>
[   78.055710][ T6533] tipc: Resetting bearer <eth:syzkaller0>
[   78.079813][ T6533] tipc: Disabling bearer <eth:syzkaller0>
[   78.083640][ T6538] netlink: 200 bytes leftover after parsing attributes in process `syz.1.126'.
[   78.113670][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'.
[   78.198830][ T6540] netlink: 'syz.2.127': attribute type 1 has an invalid length.
[   78.251399][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'.
[   78.275291][ T6540] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   78.292076][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   78.297887][ T6540] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.348353][ T6540] veth3: entered promiscuous mode
[   78.367026][ T6540] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   78.393239][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[   78.406832][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   78.432830][ T6548] bond2: (slave ip6gretap1): Removing an active aggregator
[   78.440125][ T6548] bond2: (slave ip6gretap1): Releasing backup interface
[   78.443030][ T6548] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 66:3f:0c:39:5e:7c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   78.448151][  T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.459945][ T6548] bond2: (slave veth3): Releasing backup interface
[   78.562338][ T6551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.129'.
[   78.577725][ T6551] tipc: Invalid UDP bearer configuration
[   78.577783][ T6551] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   78.614431][ T6558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.769480][   T26] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   78.828557][ T6568] netlink: 'syz.2.134': attribute type 27 has an invalid length.
[   79.094439][ T6568] veth3: left promiscuous mode
[   79.106627][ T5864] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.109705][ T5864] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.112966][ T5864] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.115897][ T5864] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.196982][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.138'.
[   79.256141][ T6581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.564755][ T6605] net_ratelimit: 1 callbacks suppressed
[   79.564777][ T6605] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   79.603822][ T6605] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   79.681384][ T6604] warning: `syz.1.142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.774124][ T6621] netlink: 'syz.1.144': attribute type 27 has an invalid length.
[   79.928896][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.932254][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.046234][ T6639] netlink: 'syz.2.145': attribute type 10 has an invalid length.
[   80.063748][ T6641] netlink: 'syz.0.147': attribute type 1 has an invalid length.
[   80.113480][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.128344][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.351884][ T6641] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.447352][ T6643] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.462623][ T6643] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   80.482819][ T6643] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   80.529632][ T6644] veth7: entered promiscuous mode
[   80.543334][ T6644] bond3: (slave veth7): Enslaving as an active interface with a down link
[   80.554686][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.568158][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.578789][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.738594][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.850383][ T6675] netlink: 'syz.1.152': attribute type 2 has an invalid length.
[   80.853634][ T6675] nbd: must specify a device to reconfigure
[   81.395755][ T6709] netlink: 'syz.2.158': attribute type 13 has an invalid length.
[   81.473160][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.479472][ T6709] 8021q: adding VLAN 0 to HW filter on device team0
[   81.485606][ T6709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.495659][ T4318] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   81.575697][ T6726] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   81.578779][ T6726] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   81.654244][ T6732] netlink: zone id is out of range
[   81.656488][ T6732] netlink: zone id is out of range
[   81.662491][ T6732] netlink: zone id is out of range
[   81.672580][ T6732] netlink: zone id is out of range
[   81.674644][ T6732] netlink: zone id is out of range
[   81.676793][ T6732] netlink: zone id is out of range
[   81.678834][ T6732] netlink: zone id is out of range
[   81.840467][ T6739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.972039][ T5128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.975173][ T5128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.480718][ T6790] __nla_validate_parse: 11 callbacks suppressed
[   82.480730][ T6790] netlink: 248 bytes leftover after parsing attributes in process `syz.0.170'.
[   82.749970][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'.
[   82.882273][ T6824] validate_nla: 2 callbacks suppressed
[   82.882292][ T6824] netlink: 'syz.1.176': attribute type 1 has an invalid length.
[   82.919886][ T6824] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.176'.
[   83.049688][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.179'.
[   83.070023][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'.
[   83.298431][ T6851] netlink: 'syz.2.182': attribute type 10 has an invalid length.
[   83.397450][ T6857] netlink: 140 bytes leftover after parsing attributes in process `syz.2.182'.
[   83.502480][ T6890] netlink: 'syz.1.187': attribute type 10 has an invalid length.
[   83.560041][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'.
[   83.611529][   T32] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   83.685233][ T6905] netlink: 'syz.1.191': attribute type 2 has an invalid length.
[   83.690886][ T6905] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.191'.
[   83.694348][ T6905] nbd: must specify a device to reconfigure
[   83.702038][ T6908] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.192'.
[   83.865316][   T32] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   83.950463][ T6933] netlink: 'syz.0.196': attribute type 11 has an invalid length.
[   83.959897][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'.
[   84.388947][ T6962] netlink: 'syz.0.200': attribute type 2 has an invalid length.
[   84.392128][ T6962] nbd: must specify a device to reconfigure
[   84.653940][ T6983] netlink: 'syz.2.202': attribute type 10 has an invalid length.
[   84.711131][ T6984] bond2: (slave veth5): Releasing active interface
[   84.764817][ T6984] bond3: (slave veth7): Releasing active interface
[   84.807342][ T6984] netlink: 'syz.0.203': attribute type 10 has an invalid length.
[   84.992392][ T7003] netlink: 'syz.0.207': attribute type 9 has an invalid length.
[   85.325907][ T7021] netlink: 'syz.1.209': attribute type 10 has an invalid length.
[   85.479974][ T7059] netlink: 'syz.2.214': attribute type 27 has an invalid length.
[   85.896853][ T5851] Bluetooth: hci2: command 0x040f tx timeout
[   86.323808][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.326305][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.442282][   T26] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   87.437790][ T7238] net_ratelimit: 12 callbacks suppressed
[   87.437806][ T7238] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   87.443273][ T7238] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   87.528711][ T7249] __nla_validate_parse: 22 callbacks suppressed
[   87.528725][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'.
[   88.100606][ T7289] IPVS: Scheduler module ip_vs_sip not found
[   88.149328][ T7290] IPVS: Scheduler module ip_vs_sip not found
[   88.216356][ T7307] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.246'.
[   88.232974][ T7307] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   88.236424][ T7307] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   88.463780][ T7321] netlink: 48 bytes leftover after parsing attributes in process `syz.2.248'.
[   89.465813][ T7425] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.256'.
[   89.470083][ T7425] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   89.473449][ T7425] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   89.624252][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'.
[   92.478872][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.259'.
[   92.526952][ T7398] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   92.958149][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'.
[   93.013436][ T7483] validate_nla: 2 callbacks suppressed
[   93.013457][ T7483] netlink: 'syz.2.263': attribute type 1 has an invalid length.
[   93.069115][ T7483] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.091373][   T33] audit: type=1107 audit(1758655448.314:2): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   93.099956][ T7484] veth5: entered promiscuous mode
[   93.119616][ T7483] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.122768][ T7483] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   93.130211][ T7483] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   93.142847][ T5128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.145514][ T5128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.236449][ T7491] IPVS: Error connecting to the multicast addr
[   93.262727][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'.
[   93.648123][ T7508] netlink: 'syz.0.267': attribute type 2 has an invalid length.
[   93.651168][ T7508] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.267'.
[   93.654600][ T7508] nbd: must specify a device to reconfigure
[   93.842446][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'.
[   93.965922][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[   94.145141][ T7547] netlink: 360 bytes leftover after parsing attributes in process `syz.2.273'.
[   94.158485][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'.
[   94.262412][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'.
[   94.274009][ T7552] netlink: 200 bytes leftover after parsing attributes in process `syz.2.274'.
[   94.282797][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'.
[   94.384487][ T7560] netlink: 'syz.1.276': attribute type 10 has an invalid length.
[   94.569008][ T7562] netlink: 'syz.2.278': attribute type 10 has an invalid length.
[   94.639628][ T7576] raw_sendmsg: syz.2.280 forgot to set AF_INET. Fix it!
[   95.015263][ T7595] netlink: 'syz.0.283': attribute type 10 has an invalid length.
[   95.093430][ T7616] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   95.098942][ T7616] CPU: 1 UID: 0 PID: 7616 Comm: syz.2.285 Not tainted syzkaller #0 PREEMPT(full) 
[   95.098965][ T7616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.098973][ T7616] Call Trace:
[   95.098980][ T7616]  <TASK>
[   95.098989][ T7616]  dump_stack_lvl+0x189/0x250
[   95.099031][ T7616]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.099046][ T7616]  ? __pfx__printk+0x10/0x10
[   95.099069][ T7616]  ? kernfs_path_from_node+0x2f/0x290
[   95.099086][ T7616]  ? kernfs_path_from_node+0x250/0x290
[   95.099097][ T7616]  ? kernfs_path_from_node+0x2f/0x290
[   95.099114][ T7616]  sysfs_warn_dup+0x8e/0xa0
[   95.099129][ T7616]  sysfs_do_create_link_sd+0xc0/0x110
[   95.099147][ T7616]  device_add_class_symlinks+0x1cf/0x240
[   95.099170][ T7616]  device_add+0x475/0xb50
[   95.099191][ T7616]  wiphy_register+0x1ba6/0x28d0
[   95.099231][ T7616]  ? __pfx_wiphy_register+0x10/0x10
[   95.099245][ T7616]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   95.099272][ T7616]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   95.099293][ T7616]  ieee80211_register_hw+0x3484/0x4100
[   95.099325][ T7616]  ? ieee80211_register_hw+0x1461/0x4100
[   95.099352][ T7616]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   95.099375][ T7616]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.099404][ T7616]  ? __hrtimer_setup+0x187/0x210
[   95.099418][ T7616]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   95.099435][ T7616]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   95.099482][ T7616]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   95.099501][ T7616]  ? trace_kmalloc+0x1f/0xd0
[   95.099517][ T7616]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   95.099536][ T7616]  ? kstrndup+0xbf/0x160
[   95.099559][ T7616]  hwsim_new_radio_nl+0xea4/0x1b10
[   95.099581][ T7616]  ? __pfx___nla_validate_parse+0x10/0x10
[   95.099609][ T7616]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   95.099640][ T7616]  ? __nla_parse+0x40/0x60
[   95.099658][ T7616]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   95.099725][ T7616]  genl_family_rcv_msg_doit+0x215/0x300
[   95.099754][ T7616]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   95.099787][ T7616]  ? bpf_lsm_capable+0x9/0x20
[   95.099810][ T7616]  ? security_capable+0x7e/0x2e0
[   95.099839][ T7616]  genl_rcv_msg+0x60e/0x790
[   95.099864][ T7616]  ? __pfx_genl_rcv_msg+0x10/0x10
[   95.099882][ T7616]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   95.099913][ T7616]  netlink_rcv_skb+0x208/0x470
[   95.099927][ T7616]  ? __lock_acquire+0xab9/0xd20
[   95.099948][ T7616]  ? __pfx_genl_rcv_msg+0x10/0x10
[   95.099967][ T7616]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   95.099997][ T7616]  ? down_read+0x1ad/0x2e0
[   95.100017][ T7616]  genl_rcv+0x28/0x40
[   95.100034][ T7616]  netlink_unicast+0x82f/0x9e0
[   95.100063][ T7616]  ? __pfx_netlink_unicast+0x10/0x10
[   95.100086][ T7616]  ? netlink_sendmsg+0x642/0xb30
[   95.100099][ T7616]  ? skb_put+0x11b/0x210
[   95.100119][ T7616]  netlink_sendmsg+0x805/0xb30
[   95.100142][ T7616]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.100160][ T7616]  ? aa_sock_msg_perm+0xf1/0x1d0
[   95.100176][ T7616]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   95.100191][ T7616]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.100214][ T7616]  __sock_sendmsg+0x21c/0x270
[   95.100240][ T7616]  ____sys_sendmsg+0x505/0x830
[   95.100263][ T7616]  ? __pfx_____sys_sendmsg+0x10/0x10
[   95.100289][ T7616]  ? import_iovec+0x74/0xa0
[   95.100311][ T7616]  ___sys_sendmsg+0x21f/0x2a0
[   95.100331][ T7616]  ? __pfx____sys_sendmsg+0x10/0x10
[   95.100379][ T7616]  ? __fget_files+0x2a/0x420
[   95.100391][ T7616]  ? __fget_files+0x3a0/0x420
[   95.100412][ T7616]  __x64_sys_sendmsg+0x19b/0x260
[   95.100432][ T7616]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   95.100457][ T7616]  ? rcu_is_watching+0x15/0xb0
[   95.100476][ T7616]  ? do_syscall_64+0xbe/0x3b0
[   95.100495][ T7616]  do_syscall_64+0xfa/0x3b0
[   95.100510][ T7616]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.100524][ T7616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.100536][ T7616]  ? exc_page_fault+0x9f/0xf0
[   95.100554][ T7616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.100569][ T7616] RIP: 0033:0x7f081658ec29
[   95.100586][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.100599][ T7616] RSP: 002b:00007f08173f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   95.100618][ T7616] RAX: ffffffffffffffda RBX: 00007f08167d6090 RCX: 00007f081658ec29
[   95.100628][ T7616] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[   95.100636][ T7616] RBP: 00007f0816611e41 R08: 0000000000000000 R09: 0000000000000000
[   95.100644][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.100653][ T7616] R13: 00007f08167d6128 R14: 00007f08167d6090 R15: 00007ffe930b9028
[   95.100708][ T7616]  </TASK>
[   96.191594][ T7679] netlink: 'syz.2.296': attribute type 13 has an invalid length.
[   96.532714][ T7713] tipc: Invalid UDP bearer configuration
[   96.532746][ T7713] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   96.633275][ T7719] geneve2: entered promiscuous mode
[   96.635158][ T7719] geneve2: entered allmulticast mode
[   96.638801][ T5864] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[   96.643448][ T5864] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[   96.651814][ T5864] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[   96.654845][ T5864] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[   97.282098][ T7706] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   97.285190][ T7706] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   97.304414][ T7706] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   97.308666][ T7706] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   97.910391][ T7774] netlink: 'syz.2.303': attribute type 10 has an invalid length.
[   98.165603][ T7790] netlink: 'syz.2.304': attribute type 10 has an invalid length.
[   98.233932][ T7800] netlink: 'syz.2.305': attribute type 2 has an invalid length.
[   98.241687][ T7800] __nla_validate_parse: 8 callbacks suppressed
[   98.241706][ T7800] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.305'.
[   98.249728][ T7800] nbd: must specify a device to reconfigure
[   98.634067][ T7819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.641954][ T7819] syzkaller0: entered promiscuous mode
[   98.645201][ T7819] syzkaller0: entered allmulticast mode
[   98.672289][ T7819] tipc: Resetting bearer <eth:syzkaller0>
[   98.679428][ T7818] tipc: Resetting bearer <eth:syzkaller0>
[   98.696349][ T7818] tipc: Disabling bearer <eth:syzkaller0>
[   99.166917][ T7843] netlink: 'syz.2.310': attribute type 10 has an invalid length.
[   99.251496][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[   99.255211][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[   99.271511][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[   99.274326][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[   99.406480][ T7871] netlink: 'syz.2.314': attribute type 11 has an invalid length.
[   99.448891][ T7875] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   99.502533][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'.
[   99.679677][ T7891] netlink: 45 bytes leftover after parsing attributes in process `syz.2.317'.
[  100.665944][ T7950] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20003
[  100.778835][ T7956] netlink: 'syz.2.322': attribute type 11 has an invalid length.
[  101.043846][ T7985] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[  101.075416][ T7985] 8021q: adding VLAN 0 to HW filter on device bond4
[  101.097407][ T7985] veth7: entered promiscuous mode
[  101.102878][ T7985] bond4: (slave veth7): Enslaving as a backup interface with a down link
[  101.110396][ T7985] bond4: (slave veth7): Releasing backup interface
[  101.150610][ T7990] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.327'.
[  101.153475][ T7990] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  101.156151][ T7990] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  101.405975][ T8011] netlink: 'syz.2.328': attribute type 10 has an invalid length.
[  102.440252][ T8046] netlink: 'syz.2.335': attribute type 13 has an invalid length.
[  102.443327][ T8046] netlink: 'syz.2.335': attribute type 17 has an invalid length.
[  102.475468][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.479874][ T8046] 8021q: adding VLAN 0 to HW filter on device team0
[  102.484627][ T8046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.608458][ T8045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.335'.
[  103.592205][ T8075] syzkaller0: entered promiscuous mode
[  103.594399][ T8075] syzkaller0: entered allmulticast mode
[  132.381746][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.384327][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.821863][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.824407][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  239.896890][   T34] INFO: task kworker/0:1:10 blocked for more than 143 seconds.
[  239.899731][   T34]       Not tainted syzkaller #0
[  239.903025][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  239.908955][   T34] task:kworker/0:1     state:D stack:22888 pid:10    tgid:10    ppid:2      task_flags:0x4208060 flags:0x00004000
[  239.913254][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  239.915176][   T34] Call Trace:
[  239.916383][   T34]  <TASK>
[  239.917630][   T34]  __schedule+0x1798/0x4cc0
[  239.921135][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  239.922864][   T34]  ? __pfx___schedule+0x10/0x10
[  239.924561][   T34]  ? schedule+0x91/0x360
[  239.925968][   T34]  schedule+0x165/0x360
[  239.944170][   T34]  schedule_preempt_disabled+0x13/0x30
[  239.948870][   T34]  __mutex_lock+0x7e6/0x1350
[  239.950687][   T34]  ? __mutex_lock+0x5bb/0x1350
[  239.952700][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  239.955130][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  239.957362][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  239.959681][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  239.961962][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  239.964392][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  239.969406][   T34]  process_scheduled_works+0xae1/0x17b0
[  239.971669][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  239.973963][   T34]  worker_thread+0x8a0/0xda0
[  239.975774][   T34]  kthread+0x711/0x8a0
[  239.977609][   T34]  ? __pfx_worker_thread+0x10/0x10
[  239.979702][   T34]  ? __pfx_kthread+0x10/0x10
[  239.981543][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.983620][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.985627][   T34]  ? __pfx_kthread+0x10/0x10
[  239.989286][   T34]  ret_from_fork+0x439/0x7d0
[  239.991123][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  239.993184][   T34]  ? __switch_to_asm+0x39/0x70
[  239.995015][   T34]  ? __switch_to_asm+0x33/0x70
[  239.996860][   T34]  ? __pfx_kthread+0x10/0x10
[  239.998678][   T34]  ret_from_fork_asm+0x1a/0x30
[  240.000616][   T34]  </TASK>
[  240.002031][   T34] 
[  240.002031][   T34] Showing all locks held in the system:
[  240.004326][   T34] 3 locks held by kworker/0:1/10:
[  240.005880][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  240.010781][   T34]  #1: ffffc900000d7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  240.016344][   T34]  #2: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  240.021489][   T34] 1 lock held by khungtaskd/34:
[  240.023731][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  240.029398][   T34] 2 locks held by getty/5675:
[  240.031566][   T34]  #0: ffff88810cdad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  240.035884][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  240.040936][   T34] 1 lock held by syz-executor/5846:
[  240.043230][   T34]  #0: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  240.048104][   T34] 2 locks held by syz.0.298/7686:
[  240.050117][   T34]  #0: ffff8881199e4100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  240.053974][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  240.059083][   T34] 2 locks held by syz.1.299/7706:
[  240.061103][   T34]  #0: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  240.064802][   T34]  #1: ffff8881199e4100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  240.068197][   T34] 2 locks held by syz.2.341/8086:
[  240.070112][   T34]  #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  240.073428][   T34]  #1: ffffffff8f813fa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[  240.077149][   T34] 1 lock held by syz-executor/8092:
[  240.079072][   T34]  #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  240.081770][   T34] 1 lock held by syz-executor/8093:
[  240.083718][   T34]  #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  240.087119][   T34] 1 lock held by syz-executor/8096:
[  240.089162][   T34]  #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  240.092476][   T34] 1 lock held by syz-executor/8099:
[  240.094533][   T34]  #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  240.097689][   T34] 1 lock held by syz-executor/8100:
[  240.099393][   T34]  #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  240.102263][   T34] 1 lock held by syz-executor/8102:
[  240.104261][   T34]  #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  240.107685][   T34] 1 lock held by syz-executor/8109:
[  240.109761][   T34]  #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  240.113064][   T34] 1 lock held by syz-executor/8110:
[  240.115130][   T34]  #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  240.118120][   T34] 
[  240.118991][   T34] =============================================
[  240.118991][   T34] 
[  240.121628][   T34] NMI backtrace for cpu 0
[  240.121663][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  240.121673][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.121679][   T34] Call Trace:
[  240.121685][   T34]  <TASK>
[  240.121690][   T34]  dump_stack_lvl+0x189/0x250
[  240.121707][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.121716][   T34]  ? __pfx__printk+0x10/0x10
[  240.121732][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  240.121748][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  240.121760][   T34]  ? __pfx__printk+0x10/0x10
[  240.121772][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  240.121786][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  240.121799][   T34]  watchdog+0xf93/0xfe0
[  240.121813][   T34]  ? watchdog+0x1de/0xfe0
[  240.121825][   T34]  kthread+0x711/0x8a0
[  240.121838][   T34]  ? __pfx_watchdog+0x10/0x10
[  240.121848][   T34]  ? __pfx_kthread+0x10/0x10
[  240.121858][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.121871][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.121879][   T34]  ? __pfx_kthread+0x10/0x10
[  240.121889][   T34]  ret_from_fork+0x439/0x7d0
[  240.121899][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  240.121909][   T34]  ? __switch_to_asm+0x39/0x70
[  240.121918][   T34]  ? __switch_to_asm+0x33/0x70
[  240.121927][   T34]  ? __pfx_kthread+0x10/0x10
[  240.121937][   T34]  ret_from_fork_asm+0x1a/0x30
[  240.121954][   T34]  </TASK>
[  240.121957][   T34] Sending NMI from CPU 0 to CPUs 1:
[  240.177822][    C1] NMI backtrace for cpu 1
[  240.177841][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  240.177854][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.177861][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  240.177880][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  240.177889][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  240.177899][    C1] RAX: 2e30d55b6c5caa00 RBX: ffffffff819683f8 RCX: 2e30d55b6c5caa00
[  240.177907][    C1] RDX: 0000000000000001 RSI: ffffffff8d9ba373 RDI: ffffffff8be33f80
[  240.177914][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  240.177920][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa3a830
[  240.177927][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  240.177933][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c12000(0000) knlGS:0000000000000000
[  240.177942][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.177948][    C1] CR2: 00007fff728d9ff8 CR3: 0000000029c0e000 CR4: 00000000000006f0
[  240.177976][    C1] Call Trace:
[  240.177984][    C1]  <TASK>
[  240.177990][    C1]  default_idle+0x13/0x20
[  240.178004][    C1]  default_idle_call+0x74/0xb0
[  240.178017][    C1]  do_idle+0x1e8/0x510
[  240.178029][    C1]  ? __pfx_do_idle+0x10/0x10
[  240.178042][    C1]  ? do_idle+0xc/0x510
[  240.178051][    C1]  cpu_startup_entry+0x44/0x60
[  240.178060][    C1]  start_secondary+0x101/0x110
[  240.178075][    C1]  common_startup_64+0x13e/0x147
[  240.178092][    C1]  </TASK>
[  240.235020][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  240.237120][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  240.239758][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.243356][   T34] Call Trace:
[  240.244707][   T34]  <TASK>
[  240.245910][   T34]  dump_stack_lvl+0x99/0x250
[  240.247777][   T34]  ? __asan_memcpy+0x40/0x70
[  240.249247][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.250883][   T34]  ? __pfx__printk+0x10/0x10
[  240.252362][   T34]  vpanic+0x281/0x750
[  240.253643][   T34]  ? __pfx_vpanic+0x10/0x10
[  240.255075][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  240.256809][   T34]  ? preempt_schedule+0xae/0xc0
[  240.258438][   T34]  ? preempt_schedule_common+0x83/0xd0
[  240.260607][   T34]  panic+0xb9/0xc0
[  240.262122][   T34]  ? __pfx_panic+0x10/0x10
[  240.263899][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  240.265978][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  240.268091][   T34]  watchdog+0xfd2/0xfe0
[  240.269714][   T34]  ? watchdog+0x1de/0xfe0
[  240.271375][   T34]  kthread+0x711/0x8a0
[  240.272955][   T34]  ? __pfx_watchdog+0x10/0x10
[  240.274789][   T34]  ? __pfx_kthread+0x10/0x10
[  240.276543][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.278192][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.279874][   T34]  ? __pfx_kthread+0x10/0x10
[  240.281363][   T34]  ret_from_fork+0x439/0x7d0
[  240.282814][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  240.284391][   T34]  ? __switch_to_asm+0x39/0x70
[  240.285876][   T34]  ? __switch_to_asm+0x33/0x70
[  240.287359][   T34]  ? __pfx_kthread+0x10/0x10
[  240.288811][   T34]  ret_from_fork_asm+0x1a/0x30
[  240.290294][   T34]  </TASK>
[  240.291935][   T34] Kernel Offset: disabled
[  240.293531][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:26:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e13a0e0 RBP=ffffffff81aab64d RSP=ffffc9000322ec60
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000322edd8 R11=ffffffff81ac3b00
R12=0000000000000002 R13=ffffffff8e13a0e0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5d8a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555558244500 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdac3ef3a0 CR3=000000010e206000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007ffdac3ef480 00007ffdac3ef480 XMM01=0000000000000000 00007f249bba7d20
XMM02=000ffc0300000035 f803021000000000 XMM03=01ffffffffffffff fff3081080030004
XMM04=0000000000000000 0000000000000014 XMM05=0000000000000000 000000000003bf12
XMM06=6e1e0810b0030004 0010ac0300000037 XMM07=a803010100000000 01ffffffffffffff
XMM08=fff3081098030004 0010940300000036 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003e RBX=000000000000003e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888107038237 R9 =1ffff11020e07046 R10=dffffc0000000000 R11=ffffffff854fad60
R12=dffffc0000000000 R13=ffffffff99b038e0 R14=ffffffff99df8460 R15=0000000000000000
RIP=ffffffff854faddc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa85b81284a CR3=00000000209ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
