last executing test programs:

2.159363692s ago: executing program 1 (id=700):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x4}, 0x38)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xf, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x0, 0x6}}}}]}, 0x44}}, 0x4010)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x5c}}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="051c32a484a48498d3e0da201d58ed45", 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000006f382ca5b3c4bfdd191d9b9481c5353e40a40ac7918cbc56f83ace048284ec387ddbe7d60871ceb0ab125014", @ANYRES16=r9, @ANYBLOB="010600000000000000000600000008000300", @ANYRES32, @ANYBLOB="05005300010000000800050004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x4}, 0x38) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xf, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x0, 0x6}}}}]}, 0x44}}, 0x4010) (async)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x5c}}, 0x80) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="051c32a484a48498d3e0da201d58ed45", 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000006f382ca5b3c4bfdd191d9b9481c5353e40a40ac7918cbc56f83ace048284ec387ddbe7d60871ceb0ab125014", @ANYRES16=r9, @ANYBLOB="010600000000000000000600000008000300", @ANYRES32, @ANYBLOB="05005300010000000800050004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) (async)

2.05108789s ago: executing program 1 (id=702):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0)
socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151", 0xc4}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c1efdf8db3b99ed18fb67c1f7", 0x52}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c33", 0x6b}, {&(0x7f0000000900)="5c3eb8799e8565193cf737e01055d298a4", 0x11}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x104}], 0x1}}], 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x60}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000004010000008ffff4e769e8d5932972e69d7e660f1c8014532000000000000", @ANYRES32=0x0, @ANYBLOB="01c000000000000008002900114d000008000500", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x800)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0xc02)

1.192952548s ago: executing program 2 (id=716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x7ffff, 0x4)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0xf, 0x4)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0xbd1bc94eac99adf1)

1.072664284s ago: executing program 1 (id=717):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x3e}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x44, 0x4)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)
close(0xffffffffffffffff)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
readv(r1, &(0x7f0000001540)=[{&(0x7f0000004580)=""/4107, 0x100b}], 0x17f)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r1, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000021000008000000003b810000850000006d0000000700000000000000959dcff92ca8a7a115265a1b6e1b38308b954ceb21dbda4b752aa36b1b6ec1d32e500b1c19f71807ca77c27b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='kfree_skb\x00', r4, 0x0, 0x8}, 0x18)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r5, &(0x7f00000085c0)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @remote}, 0x77b, 0x4}, 0x80, 0x0}}, {{&(0x7f0000000580)=@xdp={0x2c, 0xb, 0x0, 0x12}, 0x80, 0x0}}], 0x2, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
socket(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd6d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xe, 0xfff1}, {0xffff, 0x2}, {0x1, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

452.167314ms ago: executing program 0 (id=722):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000340)=""/219, 0xdb}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0)

372.008212ms ago: executing program 0 (id=723):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x31)
ioctl$SIOCAX25NOUID(r0, 0x891d, 0x0) (async)
ioctl$SIOCAX25NOUID(r0, 0x891d, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e, 0x84004}}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000)

370.880999ms ago: executing program 0 (id=724):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b0c28bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120006000f000b000000060010084e230000"], 0x48}}, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r5=>0x0})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@typedef={0x10, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x30, 0x61, 0x0, 0x30, 0x2e, 0x30, 0x61]}}, &(0x7f0000000240)=""/4096, 0x2e, 0x1000, 0x1, 0x2}, 0x28)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', r5, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@exit], &(0x7f0000000180)='GPL\x00', 0x1fa, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001300)=[r1, r9], &(0x7f0000001340)=[{0x1, 0x5, 0x2, 0xc}, {0x0, 0x2, 0xb, 0xa}], 0x10, 0x3}, 0x94)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r10 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}})
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r11, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

370.661573ms ago: executing program 2 (id=725):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4e22, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x9}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14fff4002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

303.359202ms ago: executing program 2 (id=726):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040)=0xffffffb7)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/175, 0xaf}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/59, 0x3b}], 0x6)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000004c0)={<r1=>r0, 0x589, 0x90, 0x2})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x37, 0x1, 0x80000001, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
pipe(&(0x7f0000000800)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$pppoe(r4, &(0x7f0000000840)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip6gretap0\x00'}}, 0x1e)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000880)=0x1)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r3)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000900)=0x7, 0x4)
connect$inet6(r3, &(0x7f0000000940)={0xa, 0x4e24, 0x43a5, @mcast1, 0x5}, 0x1c)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000009c0)={'rose0\x00', &(0x7f0000000980)=@ethtool_rxfh={0x47, 0x4, 0x9, 0x7, 0x8, "53172f", 0x3, [0x80000000, 0x5977, 0x101, 0x8096, 0x1281, 0x1, 0x7, 0x9, 0x6, 0xcf07]}})
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000a00)={0x18, 0x0, {0x2, @random="d2bf2dc3611e", 'geneve1\x00'}})
connect$vsock_stream(r1, &(0x7f0000000a40)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f0000000a80)=0x5)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x7c}}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c00)={'wlan0\x00'})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000c40)={0x6, 'ip6gre0\x00', {0x9}, 0x5})
r6 = openat$cgroup_ro(r4, &(0x7f0000000c80)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000cc0)=<r7=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000d40)={r7, r6, 0x0, 0x8, &(0x7f0000000d00)='geneve1\x00'}, 0x30)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x8081)
bpf$ITER_CREATE(0x21, &(0x7f0000000ec0)={r3}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f40), r8)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f0000001000)={&(0x7f0000000f00), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084)

302.310063ms ago: executing program 2 (id=727):
socketpair(0xf, 0x2, 0x482c43e6, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x144, 0x10, 0xffffff1f, 0x70bd27, 0x1, {0x0, 0x0, 0x0, 0x0, 0x31}, [@IFLA_LINKINFO={0x11c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x726, 0xe36c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcc80, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xd}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x6, 0xa}}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xffffffc0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x297}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x27b1a81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1cfb, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xbd, 0x4}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xd}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x200}}]}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x144}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900040200802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf400}, 0x90)
getpeername$netlink(r3, &(0x7f0000000600), &(0x7f0000000640)=0xc)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x498, 0x0, 0x4, 0x70bd25, 0xd58, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x5fd9}, @NL80211_ATTR_IE={0x1e, 0x2a, [@cf={0x4, 0x6, {0x5, 0x1, 0x7, 0x6}}, @mic={0x8c, 0x10, {0x2ee, "232b57094913", @short="1001a8865e7ec43f"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x89a}, @NL80211_ATTR_IE={0x193, 0x2a, [@dsss={0x3, 0x1, 0xd}, @peer_mgmt={0x75, 0x16, {0x0, 0x5, @val=0x5, @void, @val="cdb5ce3d0b475fd761d2fe21365c2451"}}, @mic={0x8c, 0x10, {0x1, "8f7f16c19cb6", @short="a16de0b712e8ec5b"}}, @supported_rates={0x1, 0x7, [{0x36, 0x1}, {0x1}, {0x0, 0x1}, {0xc}, {0xb, 0x1}, {0x9, 0x1}, {0x9, 0x1}]}, @channel_switch={0x25, 0x3, {0x0, 0xb0, 0x9b}}, @ht={0x2d, 0x1a, {0x0, 0x0, 0x3, 0x0, {0x2, 0xf2, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x401, 0xe9, 0x88}}, @tim={0x5, 0xfe, {0x2, 0xac, 0x5, "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"}}, @measure_req={0x26, 0x36, {0xfa, 0x2, 0x1f, "6f17aaff4481f7cfa1104bd0e17032740aa3087941c1aed32a2f537e4791bc988f521192a0ae14466ee278617a2fb7fa83514a"}}]}, @NL80211_ATTR_IE={0x17d, 0x2a, [@random_vendor={0xdd, 0x59, "70f1a73aba320b7a830d3bd351fe508d70309ad994e2674a28e5efdbaf2522060e56593d106ffcbd0e0cbdcb05af5837222cc168bc4d05d70fc5744a087c56776f18c8f7d885acbfdb2c206e6ff43b555b7bb7ad45210a8a76"}, @random={0x9, 0x1e, "0e562e35685f2fdc1018d92fb1f9ffc72445f9e59b627be04e176d751e79"}, @fast_bss_trans={0x37, 0x6b, {0x6b, 0x1, "47c253b7cbe6412a426b49e9a296fb50", "9f209c4f5bf9b11ee9b845b66a32f5dc6c759f71814b39ab937178ebe6877335", "6a60642440e0ccca4144318e14b2ff86ecc84efdc85cd058e2aee6748d895610", [{0x3, 0x17, "a1c8c14dcdcca1dd614c0948c3ed90396e794f5d5f3216"}]}}, @preq={0x82, 0x6d, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0xff, 0xfd, 0x2, @broadcast, 0x3ff, @value, 0x6, 0x4, 0x7, [{{0x0, 0x0, 0x1}, @broadcast, 0x81}, {{}, @device_a, 0x9}, {{}, @device_a, 0xd6}, {{0x0, 0x0, 0x1}, @device_a, 0x4ef6dd34}, {{0x1}, @device_b, 0x12f}, {{0x1, 0x0, 0x1}, @device_a, 0xad}, {{0x0, 0x0, 0x1}, @device_a, 0x2}]}}, @gcr_ga={0xbd, 0x6, @device_b}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @chsw_timing={0x68, 0x4, {0x0, 0xa21}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa}, @NL80211_ATTR_IE={0xae, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x4a}, 0x4, 0x4, @device_b, 0x10010001, 0x7ff}}, @perr={0x84, 0x6e, {0x0, 0x6, [{{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x1f}, {{}, @broadcast, 0x684, @void, 0x33}, {{0x0, 0x1}, @broadcast, 0x80, @value, 0x24}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x31}, {{0x0, 0x1}, @broadcast, 0x800, @value, 0x8}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x1e}]}}, @peer_mgmt={0x75, 0x16, {0x0, 0x6, @val=0xf, @void, @val="9420c0564383014063ff0fbfe70fea2c"}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0x6}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x1, 0x63}}]}, @NL80211_ATTR_IE={0x77, 0x2a, [@link_id={0x65, 0x12, {@random="6e872022912c", @device_a, @device_b}}, @preq={0x82, 0x57, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xf, 0x3, @broadcast, 0x6, @value=@device_b, 0x9, 0x2, 0x5, [{{0x1, 0x0, 0x1}, @broadcast, 0x401}, {{}, @device_b, 0x6}, {{0x0, 0x0, 0x1}, @device_a, 0x5}, {{}, @device_a, 0x4}, {{0x1}, @device_b, 0x126}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xf5, 0x78, 0x8}}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x8000}, 0x4040800)
mmap(&(0x7f000011e000/0x1000)=nil, 0x1000, 0x3000006, 0x80010, 0xffffffffffffffff, 0x0)

139.926034ms ago: executing program 1 (id=728):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0)

137.874641ms ago: executing program 0 (id=729):
ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={'veth0\x00', 0x8, 0x4})
r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80, 0x80800)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={<r1=>0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x5, 0x3, 0xf, 0x6}, &(0x7f00000002c0)=0x98)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r1, 0x7}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000480)={'ip_vti0\x00', <r2=>0x0, 0x8000, 0x10, 0x7ff, 0x0, {{0x4a, 0x4, 0x1, 0x0, 0x128, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x2, [{@multicast2, 0x3}, {@multicast2, 0x4}, {@empty, 0x2}, {@rand_addr=0x64010102, 0x7}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0xb, "f8caf4536d93ba15ec"}, {0xe27726714d32ba72, 0x6, "b9cf407e"}]}, @rr={0x7, 0xf, 0x2b, [@local, @empty, @private=0xa010102]}, @cipso={0x86, 0x46, 0x0, [{0x7, 0x7, "0936918885"}, {0x2, 0xb, "7da395183eca8236ca"}, {0x0, 0x11, "8f1e6cbf51828f5a556303360874f9"}, {0x7, 0x10, "cde09e7d95a08d533998f638cb07"}, {0x0, 0xd, "7d33014b15094da9207c6c"}]}, @cipso={0x86, 0x6d, 0x3, [{0x5, 0x10, "b5a3edb1afff2d550bc531f37cab"}, {0x2f7adf7ee250baa5, 0x10, "be52a361366a1fd8d688ff390dd1"}, {0x0, 0xe, "be6df12168d4bee84d11b250"}, {0x5, 0x2}, {0x5, 0x10, "fa1e8cd31ceea38b50362aefe709"}, {0x0, 0x9, "ac238c56b4ae50"}, {0x6, 0x10, "bf7b79baed56bbf3b1cc1b8e3436"}, {0x0, 0xc, "7090a47ce71a675e760f"}, {0x6, 0x2}]}, @end, @rr={0x7, 0x13, 0xc7, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}]}, @end]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@bridge_delvlan={0x24, 0x71, 0x20, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

137.602885ms ago: executing program 1 (id=730):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x30, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='@'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

135.634453ms ago: executing program 2 (id=731):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) (async, rerun: 32)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_merged\x00', 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x1402, 0x308, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x41)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (rerun: 32)

62.08769ms ago: executing program 1 (id=732):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4eaa00000000000071102d000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x1a0, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x128, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x124, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff30}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x61}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x97}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcc81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x412}]}]}]}, @NFTA_SET_EXPRESSIONS={0x34, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}], {0x14}}, 0x1c8}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
socket(0x40000000015, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000000000000000000000000000000000000df7822a300", @ANYRES32=0x0], 0x30}], 0x1, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)

61.475397ms ago: executing program 0 (id=733):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r2)
sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x14, r3, 0xf03}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x11}, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r4)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2d8, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_PEERS={0x2ac, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7fff, @mcast1, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x82}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x200, @loopback, 0x7fffffff}}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x10001, @mcast1, 0x7}}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1e75feaa4ac31c59b11f40cfc1913cf3aef5bb8828b217366b265ffa1454e8e8"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4ddf9ba1b19c36f81dc00ea598c806a6887d8b53c7ec426af01600b4abb4c84a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "04bf9ab61ae5bea88dc6109fed6605e3ffd5419141b29ed44d8b95bd9fc698f7"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x112, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x90}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001d0800434000000007540000000c0a01020000000000000000010000020900020073797a320000000028000380240000800400018008000340000000011400078097000100696e6e6572000000040002800900010073797a30"], 0xe0}}, 0x0)
socketpair(0x15, 0x5, 0x0, &(0x7f0000000080))
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@fwd={0x2}, @volatile={0xd}, @typedef={0xc}]}, {0x0, [0x30, 0x5f, 0x30, 0x5f, 0x30, 0x5f, 0x71]}}, &(0x7f0000000340)=""/16, 0x45, 0x10, 0x1, 0x8, 0x10000}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r9}, 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, r10}, 0x94)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r12, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r13, 0x97fd5ac6ae563c5b, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x55)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r11, 0x2000000, 0x9, 0x0, &(0x7f0000000180)="91b90de4962e337161", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1806000002010400000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b700000000000000950021000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x110, r14, 0x4e101000)

628.907µs ago: executing program 0 (id=734):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xdd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40488d0)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xa237}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4003}, 0x80)
close(r4)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg$unix(r9, &(0x7f00000005c0)={&(0x7f0000000380), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000440)}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x40002100)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b00"], 0x30}, 0x1, 0x0, 0x0, 0x24004804}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 2 (id=735):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b0c28bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120006000f000b000000060010084e230000"], 0x48}}, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r5=>0x0})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@typedef={0x10, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x30, 0x61, 0x0, 0x30, 0x2e, 0x30, 0x61]}}, &(0x7f0000000240)=""/4096, 0x2e, 0x1000, 0x1, 0x2}, 0x28)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', r5, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@exit], &(0x7f0000000180)='GPL\x00', 0x1fa, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001300)=[r1, r9], &(0x7f0000001340)=[{0x1, 0x5, 0x2, 0xc}, {0x0, 0x2, 0xb, 0xa}], 0x10, 0x3}, 0x94)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r10 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}})
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r11, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11871' (ED25519) to the list of known hosts.
syzkaller login: [   48.288315][ T5749] cgroup: Unknown subsys name 'net'
[   48.435976][ T5749] cgroup: Unknown subsys name 'cpuset'
[   48.442873][ T5749] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.809152][ T5749] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.972578][ T5201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.975788][ T5201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.979078][ T5201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.982897][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.985785][ T5201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.017743][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.021880][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.024850][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.027904][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.032027][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.058032][ T5201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.061122][ T5201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.064518][ T5201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.068262][ T5201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.070983][ T5201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.224275][ T5809] chnl_net:caif_netlink_parms(): no params data found
[   54.355564][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.359099][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.362628][ T5809] bridge_slave_0: entered allmulticast mode
[   54.365498][ T5809] bridge_slave_0: entered promiscuous mode
[   54.385789][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.392117][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.395385][ T5809] bridge_slave_1: entered allmulticast mode
[   54.399500][ T5809] bridge_slave_1: entered promiscuous mode
[   54.418306][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   54.452636][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   54.469702][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.480712][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.549544][ T5809] team0: Port device team_slave_0 added
[   54.567514][ T5809] team0: Port device team_slave_1 added
[   54.603064][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.605942][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.608342][ T5816] bridge_slave_0: entered allmulticast mode
[   54.611089][ T5816] bridge_slave_0: entered promiscuous mode
[   54.615204][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.617604][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.620095][ T5816] bridge_slave_1: entered allmulticast mode
[   54.623764][ T5816] bridge_slave_1: entered promiscuous mode
[   54.626296][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.628933][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.633216][ T5814] bridge_slave_0: entered allmulticast mode
[   54.636042][ T5814] bridge_slave_0: entered promiscuous mode
[   54.639126][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.641422][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.644240][ T5814] bridge_slave_1: entered allmulticast mode
[   54.647032][ T5814] bridge_slave_1: entered promiscuous mode
[   54.660827][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.663577][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.672191][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.711389][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.714263][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.723383][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.729058][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.735097][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.747994][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.769556][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.774741][ T5816] team0: Port device team_slave_0 added
[   54.798525][ T5816] team0: Port device team_slave_1 added
[   54.837998][ T5814] team0: Port device team_slave_0 added
[   54.840637][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.844496][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.853401][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.859892][ T5809] hsr_slave_0: entered promiscuous mode
[   54.863363][ T5809] hsr_slave_1: entered promiscuous mode
[   54.867824][ T5814] team0: Port device team_slave_1 added
[   54.871065][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.873963][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.883091][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.933643][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.936333][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.946125][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.956058][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.958679][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.968318][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.014912][ T5816] hsr_slave_0: entered promiscuous mode
[   55.017322][ T5816] hsr_slave_1: entered promiscuous mode
[   55.019513][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.022803][ T5816] Cannot create hsr debugfs directory
[   55.048300][ T5814] hsr_slave_0: entered promiscuous mode
[   55.050637][ T5814] hsr_slave_1: entered promiscuous mode
[   55.053613][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.056062][ T5814] Cannot create hsr debugfs directory
[   55.270332][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.283217][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.293891][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.313006][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.353614][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.363339][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.373827][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.389437][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.435504][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.441485][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.450502][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.459259][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.529515][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.566998][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[   55.581546][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.584590][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.600517][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.603603][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.624358][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.646185][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   55.655726][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.675488][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.677925][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.695203][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.697980][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.716710][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   55.739599][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.742266][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.778011][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.781019][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.869641][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.874352][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.949637][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.000251][ T5809] veth0_vlan: entered promiscuous mode
[   56.006835][ T5809] veth1_vlan: entered promiscuous mode
[   56.019595][ T5201] Bluetooth: hci0: command tx timeout
[   56.037490][ T5809] veth0_macvtap: entered promiscuous mode
[   56.058213][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.069489][ T5809] veth1_macvtap: entered promiscuous mode
[   56.089487][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.093967][ T5201] Bluetooth: hci2: command tx timeout
[   56.102337][ T5201] Bluetooth: hci1: command tx timeout
[   56.104408][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.126082][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.131364][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.135981][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.139010][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.142655][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.183343][ T5816] veth0_vlan: entered promiscuous mode
[   56.229478][ T5816] veth1_vlan: entered promiscuous mode
[   56.243839][ T5814] veth0_vlan: entered promiscuous mode
[   56.253294][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.256287][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.275591][ T5814] veth1_vlan: entered promiscuous mode
[   56.300593][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.306351][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.331834][ T5816] veth0_macvtap: entered promiscuous mode
[   56.339439][ T5816] veth1_macvtap: entered promiscuous mode
[   56.379893][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.382406][ T5814] veth0_macvtap: entered promiscuous mode
[   56.404652][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.436746][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.457487][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.461067][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.467056][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.470013][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.483505][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   56.487169][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   56.492888][ T5814] veth1_macvtap: entered promiscuous mode
[   56.507840][ T5877] Bluetooth: MGMT ver 1.23
[   56.551406][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.574481][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.579897][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.601725][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.605381][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.608933][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.684475][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.693168][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.768189][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.774888][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.846542][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.849641][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.900217][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.903460][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.959291][ T5880] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.980258][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.994381][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.003707][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.015353][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.025804][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.457633][ T5897] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   57.521834][ T5903] 8021q: VLANs not supported on ip6tnl0
[   57.553231][ T5905] xt_l2tp: invalid flags combination: 4
[   57.556050][ T5905] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET)
[   57.560090][ T5905] Zero length message leads to an empty skb
[   57.747516][ T5915] xt_connbytes: Forcing CT accounting to be enabled
[   57.749777][ T5915] x_tables: ip_tables: ah match: only valid for protocol 51
[   57.874160][ T5925] delete_channel: no stack
[   58.044693][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'.
[   58.092010][   T54] Bluetooth: hci0: command tx timeout
[   58.114508][ T5937] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18'.
[   58.172291][   T54] Bluetooth: hci1: command tx timeout
[   58.174568][   T54] Bluetooth: hci2: command tx timeout
[   58.291171][ T5945] netlink: 'syz.1.19': attribute type 11 has an invalid length.
[   58.310292][ T5945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19'.
[   58.446027][ T5953] @: renamed from bond_slave_0 (while UP)
[   58.572330][ T5201] Bluetooth: hci0: Opcode 0x0401 failed: -110
[   58.624689][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27'.
[   58.642060][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   58.725051][ T5967] netlink: 'syz.1.28': attribute type 11 has an invalid length.
[   58.727687][ T5967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.28'.
[   58.736458][ T5967] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   58.749226][ T5967] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   58.839331][ T5969] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   58.977696][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   59.112666][ T5986] netlink: 'syz.0.34': attribute type 1 has an invalid length.
[   59.915702][ T6047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.995487][ T6051] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.007194][ T6048] netlink: 'syz.1.50': attribute type 1 has an invalid length.
[   60.007258][ T6053] netlink: 'syz.1.50': attribute type 1 has an invalid length.
[   60.088532][ T6057] ipvlan0: entered promiscuous mode
[   60.178812][ T5201] Bluetooth: hci0: command 0x040f tx timeout
[   60.257031][ T5201] Bluetooth: hci2: command tx timeout
[   60.259717][ T5938] Bluetooth: hci1: command tx timeout
[   60.804512][ T6074] tipc: Started in network mode
[   60.807058][ T6074] tipc: Node identity f6e7d8be82f7, cluster identity 4711
[   60.810656][ T6074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.820284][ T6074] syzkaller0: entered promiscuous mode
[   60.823118][ T6074] syzkaller0: entered allmulticast mode
[   60.834380][ T6074] tipc: Resetting bearer <eth:syzkaller0>
[   60.841533][ T6073] tipc: Resetting bearer <eth:syzkaller0>
[   60.853568][ T6073] tipc: Disabling bearer <eth:syzkaller0>
[   61.198983][ T6082] syzkaller0: entered promiscuous mode
[   61.206269][ T6082] syzkaller0: entered allmulticast mode
[   61.219888][ T6082] netlink: 'syz.2.61': attribute type 21 has an invalid length.
[   61.498949][ T6093] netlink: 'syz.2.64': attribute type 1 has an invalid length.
[   61.907141][ T6103] "syz.1.69" (6103) uses obsolete ecb(arc4) skcipher
[   61.985225][ T6114] __nla_validate_parse: 13 callbacks suppressed
[   61.985244][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'.
[   61.995972][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'.
[   62.008455][ T6112] netlink: 76 bytes leftover after parsing attributes in process `syz.1.72'.
[   62.160455][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'.
[   62.220542][ T6127] netlink: 'syz.0.76': attribute type 62 has an invalid length.
[   62.252048][ T5938] Bluetooth: hci0: command 0x040f tx timeout
[   62.342863][ T5201] Bluetooth: hci2: command tx timeout
[   62.344762][ T5938] Bluetooth: hci1: command tx timeout
[   62.475786][ T6140] netlink: 'syz.1.80': attribute type 142 has an invalid length.
[   62.492891][ T6140] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   62.684341][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'.
[   62.697695][ T6155] netlink: 'syz.0.84': attribute type 10 has an invalid length.
[   62.734289][ T6155] veth0_vlan: left promiscuous mode
[   62.738422][ T6155] veth0_vlan: entered promiscuous mode
[   62.747590][ T6155] team0: Device veth0_vlan failed to register rx_handler
[   62.779302][ T6164] batadv1: entered allmulticast mode
[   62.782805][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv1
[   62.791418][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   62.858955][ T6170] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   62.862780][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'.
[   62.867856][ T6169] xt_TCPMSS: Only works on TCP SYN packets
[   63.420703][ T6172] netlink: 'syz.2.86': attribute type 1 has an invalid length.
[   63.426261][ T6172] netlink: 220 bytes leftover after parsing attributes in process `syz.2.86'.
[   63.429982][ T6172] netlink: 'syz.2.86': attribute type 1 has an invalid length.
[   63.576178][ T6178] veth0: entered promiscuous mode
[   63.596582][ T6179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'.
[   63.605810][ T6177] veth0: left promiscuous mode
[   63.708732][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   64.333774][ T5938] Bluetooth: hci0: command 0x040f tx timeout
[   64.496947][ T6219] IPVS: Scheduler module ip_vs_sip not found
[   64.836143][ T6229] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   65.199452][ T6243] netlink: 'syz.1.104': attribute type 1 has an invalid length.
[   65.281474][ T6245] netlink: 'syz.0.105': attribute type 1 has an invalid length.
[   65.363790][ T6245] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.390293][ T6249] bond1: (slave bridge1): making interface the new active one
[   65.400789][ T6249] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   65.417472][ T6245] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   65.470640][ T6251] syzkaller1: entered promiscuous mode
[   65.475622][ T6251] syzkaller1: entered allmulticast mode
[   65.609809][ T6259] netlink: 'syz.1.111': attribute type 10 has an invalid length.
[   65.779818][ T6271] netlink: 'syz.0.115': attribute type 1 has an invalid length.
[   65.820872][ T6271] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.853192][ T6271] bond2: (slave bridge2): making interface the new active one
[   65.856464][ T6271] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   65.894503][ T6271] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   66.425238][ T6314] netlink: 'syz.2.123': attribute type 1 has an invalid length.
[   66.475365][ T6314] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.499681][ T6320] bond1: (slave bridge1): making interface the new active one
[   66.505053][ T6320] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   66.549707][ T6314] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   67.017103][ T6343] ip6gretap1: entered promiscuous mode
[   67.265461][ T6348] __nla_validate_parse: 14 callbacks suppressed
[   67.265474][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'.
[   67.401522][ T6362] netlink: 332 bytes leftover after parsing attributes in process `syz.0.136'.
[   67.406633][ T6362] netlink: 104 bytes leftover after parsing attributes in process `syz.0.136'.
[   67.410303][ T6362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.136'.
[   67.478308][ T6366] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   67.489602][ T6366] openvswitch: netlink: Duplicate or invalid key (type 0).
[   67.493325][ T6366] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.825629][ T6382] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.841840][ T6382] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   67.936830][ T6385] : renamed from batadv_slave_1 (while UP)
[   68.031751][ T6387] netlink: 256 bytes leftover after parsing attributes in process `syz.2.146'.
[   68.370636][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   68.458779][ T6426] sctp: [Deprecated]: syz.0.157 (pid 6426) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.458779][ T6426] Use struct sctp_sack_info instead
[   68.551316][ T6432] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.158'.
[   68.619614][ T6436] sctp: [Deprecated]: syz.0.159 (pid 6436) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.619614][ T6436] Use struct sctp_sack_info instead
[   68.640448][ T6437] sctp: [Deprecated]: syz.0.159 (pid 6437) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.640448][ T6437] Use struct sctp_sack_info instead
[   68.783786][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'.
[   68.910625][ T6454] validate_nla: 1 callbacks suppressed
[   68.910641][ T6454] netlink: 'syz.1.165': attribute type 2 has an invalid length.
[   69.032801][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'.
[   69.070179][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.166'.
[   69.320232][ T6482] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   69.356587][ T6482] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.405629][ T6482] bond1: (slave bridge1): making interface the new active one
[   69.410059][ T6482] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   69.497244][ T6487] team0 (unregistering): Port device team_slave_0 removed
[   69.507150][ T6487] team0 (unregistering): Port device team_slave_1 removed
[   69.528694][ T6482] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   69.745083][ T6504] netlink: 'syz.1.179': attribute type 29 has an invalid length.
[   69.749219][ T6504] netlink: 'syz.1.179': attribute type 29 has an invalid length.
[   70.008627][ T6518] netlink: 'syz.2.185': attribute type 1 has an invalid length.
[   70.073685][ T6518] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.161393][ T6522] bond2: (slave bridge2): making interface the new active one
[   70.197393][ T6522] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   70.288389][ T6518] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   71.057133][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.068046][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.208503][ T6573] netlink: 'syz.2.202': attribute type 4 has an invalid length.
[   71.467487][ T6570] netlink: 'syz.1.201': attribute type 4 has an invalid length.
[   71.573565][ T6570] IPVS: Unknown mcast interface: batadv0
[   71.674814][ T6589] syzkaller1: entered promiscuous mode
[   71.676677][ T6589] syzkaller1: entered allmulticast mode
[   71.745915][ T6591] openvswitch: netlink: Actions may not be safe on all matching packets
[   71.939388][ T6603] netlink: 'syz.2.209': attribute type 6 has an invalid length.
[   72.426391][ T6629] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[   72.429393][ T6629] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[   72.436449][ T6629] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[   72.439677][ T6629] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[   72.444610][ T6629] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[   72.457709][ T6629] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[   72.460503][ T6629] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[   72.464477][ T6629] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[   72.473657][ T6629] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[   72.477523][ T6629] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[   72.559654][ T6639] netlink: 'syz.2.221': attribute type 1 has an invalid length.
[   72.565255][ T6639] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   72.855826][    T9] IPVS: starting estimator thread 0...
[   72.952336][ T6660] IPVS: using max 80 ests per chain, 192000 per kthread
[   73.109885][ T6673] netlink: 'syz.0.232': attribute type 1 has an invalid length.
[   73.143020][ T6673] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.159435][ T6673] bond3: (slave bridge3): making interface the new active one
[   73.164260][ T6673] bond3: (slave bridge3): Enslaving as an active interface with an up link
[   73.188349][ T6673] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   73.214740][ T6679] __nla_validate_parse: 75 callbacks suppressed
[   73.214756][ T6679] netlink: 2 bytes leftover after parsing attributes in process `syz.2.234'.
[   73.223682][ T6679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.785514][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.790187][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.825536][ T6722] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.828591][ T6722] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.833710][ T6722] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.836270][ T6722] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.847276][ T6722] ipvlan0: left promiscuous mode
[   73.854838][ T6722] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   73.857679][ T6722] batadv1: left allmulticast mode
[   73.864842][ T6722] ip6gretap1: left promiscuous mode
[   74.374151][ T6749] netlink: 48 bytes leftover after parsing attributes in process `syz.0.255'.
[   74.760581][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.257'.
[   74.811993][ T5938] Bluetooth: hci0: Opcode 0x0401 failed: -110
[   74.811998][ T5201] Bluetooth: hci0: command 0x040f tx timeout
[   74.820458][ T6754] SET target dimension over the limit!
[   74.974086][ T6764] validate_nla: 2 callbacks suppressed
[   74.974107][ T6764] netlink: 'syz.2.260': attribute type 2 has an invalid length.
[   75.027702][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810db65c00: rx timeout, send abort
[   75.032875][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810db65c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   75.039168][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810db64c00: rx timeout, send abort
[   75.043120][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810db64c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   75.047580][ T6764] bpq0: entered promiscuous mode
[   75.051443][ T6764] bpq0: entered allmulticast mode
[   75.429893][ T6783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.267'.
[   75.633290][ T6804] netlink: 152 bytes leftover after parsing attributes in process `syz.2.271'.
[   75.988271][ T6808] netlink: 'syz.0.273': attribute type 1 has an invalid length.
[   76.075187][ T6808] bond4: entered promiscuous mode
[   76.090056][ T6808] 8021q: adding VLAN 0 to HW filter on device bond4
[   76.233785][ T6810] bond4: (slave bridge4): making interface the new active one
[   76.240190][ T6810] bridge4: entered promiscuous mode
[   76.275731][ T6810] bond4: (slave bridge4): Enslaving as an active interface with an up link
[   76.532704][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'.
[   76.664885][ T6832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.280'.
[   76.987299][ T6851] netlink: 'syz.0.286': attribute type 2 has an invalid length.
[   77.189851][ T6863] netlink: 'syz.0.290': attribute type 1 has an invalid length.
[   77.198455][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'.
[   77.202857][ T6864] lo speed is unknown, defaulting to 1000
[   77.205564][ T6864] lo speed is unknown, defaulting to 1000
[   77.208187][ T6864] lo speed is unknown, defaulting to 1000
[   77.215351][ T6864] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   77.238659][ T6863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.251036][ T6864] lo speed is unknown, defaulting to 1000
[   77.255979][ T6864] lo speed is unknown, defaulting to 1000
[   77.261095][ T6864] lo speed is unknown, defaulting to 1000
[   77.348452][ T6863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.415037][ T6872] netlink: 64 bytes leftover after parsing attributes in process `syz.1.294'.
[   77.477653][ T6863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.539092][ T6881] netlink: 240 bytes leftover after parsing attributes in process `syz.2.296'.
[   77.559850][ T6863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.621112][ T6881] bridge_slave_0: left allmulticast mode
[   77.626363][ T6881] bridge_slave_0: left promiscuous mode
[   77.628512][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.635428][ T6881] bridge_slave_1: left allmulticast mode
[   77.637537][ T6881] bridge_slave_1: left promiscuous mode
[   77.639753][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.647695][ T6881] bond0: (slave bond_slave_0): Releasing backup interface
[   77.658321][ T6881] bond0: (slave bond_slave_1): Releasing backup interface
[   77.670474][ T6881] team0: Port device team_slave_0 removed
[   77.678634][ T6881] team0: Port device team_slave_1 removed
[   77.687073][ T6881] bond1: (slave bridge1): Releasing active interface
[   77.697789][ T6881] bond2: (slave bridge2): Releasing active interface
[   77.746914][ T6863] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.756197][ T6863] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.776391][ T6863] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.785334][ T6863] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.887162][ T6892] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.890575][ T6892] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.894043][ T6892] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.897548][ T6892] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.905591][ T6892] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   77.909210][ T6892] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   77.913266][ T6892] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   77.917019][ T6892] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.147815][ T6906] netlink: 'syz.1.305': attribute type 10 has an invalid length.
[   78.150858][ T6906] dummy0: entered promiscuous mode
[   78.153991][ T6906] bridge0: port 3(dummy0) entered blocking state
[   78.156346][ T6906] bridge0: port 3(dummy0) entered disabled state
[   78.158615][ T6906] dummy0: entered allmulticast mode
[   78.168458][ T6906] bridge0: port 3(dummy0) entered blocking state
[   78.170938][ T6906] bridge0: port 3(dummy0) entered forwarding state
[   78.222319][   T33] audit: type=1800 audit(1751906453.856:2): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.301" name="cgroup.controllers" dev="tmpfs" ino=569 res=0 errno=0
[   78.339340][ T6919] ip6gre1: entered allmulticast mode
[   78.536046][ T6930] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[   78.565295][ T6930] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.582676][ T6930] bond2: (slave bridge2): making interface the new active one
[   78.586712][ T6930] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   78.600926][ T6930] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   78.877794][ T6945] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   78.885385][ T6945] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   78.885404][ T6946] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   78.948456][ T6945] lo speed is unknown, defaulting to 1000
[   78.995910][ T6946] __nla_validate_parse: 5 callbacks suppressed
[   78.995928][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   79.002770][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   79.006334][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   79.009777][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   79.016454][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   79.020059][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   79.024455][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   79.028054][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   79.035734][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   79.041123][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   79.319305][ T5874] IPVS: starting estimator thread 0...
[   79.401719][ T6963] IPVS: using max 47 ests per chain, 112800 per kthread
[   79.518643][ T6979] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20003
[   79.760940][ T6996] netlink: 'syz.2.332': attribute type 2 has an invalid length.
[   79.777249][ T6996] netlink: 'syz.2.332': attribute type 8 has an invalid length.
[   80.033233][ T7008] netlink: 'syz.1.335': attribute type 4 has an invalid length.
[   80.083302][ T7010] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   80.717204][ T7052] lo speed is unknown, defaulting to 1000
[   81.139714][ T7067] lo speed is unknown, defaulting to 1000
[   81.297384][   T24] cfg80211: failed to load regulatory.db
[   81.610008][ T7071] netlink: 'syz.1.354': attribute type 10 has an invalid length.
[   81.840757][ T7082] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.848864][ T7080] lo speed is unknown, defaulting to 1000
[   81.985653][ T7088] veth0: entered promiscuous mode
[   82.139555][ T7088] netlink: 'syz.2.361': attribute type 10 has an invalid length.
[   82.194355][ T7088] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   82.561332][ T7120] netlink: 'syz.1.371': attribute type 25 has an invalid length.
[   82.638017][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.640820][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.651320][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.659240][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.731732][ T5201] Bluetooth: hci0: Opcode 0x0401 failed: -110
[   82.733676][ T5938] Bluetooth: hci0: command 0x040f tx timeout
[   83.064413][ T7143] netlink: 'syz.2.377': attribute type 1 has an invalid length.
[   83.112108][ T7143] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.153564][ T7143] bond3: (slave bridge3): making interface the new active one
[   83.165167][ T7143] bond3: (slave bridge3): Enslaving as an active interface with an up link
[   83.207494][ T7143] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   83.326294][ T7151] sctp: [Deprecated]: syz.0.380 (pid 7151) Use of int in max_burst socket option.
[   83.326294][ T7151] Use struct sctp_assoc_value instead
[   83.344271][ T7151] ieee802154 phy0 wpan0: encryption failed: -22
[   83.663580][ T7159] netlink: 'syz.2.382': attribute type 29 has an invalid length.
[   83.667332][ T7159] netlink: 'syz.2.382': attribute type 29 has an invalid length.
[   83.966107][ T7178] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[   83.983189][ T7178] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.995181][ T7178] bond3: (slave bridge3): making interface the new active one
[   83.999062][ T7178] bond3: (slave bridge3): Enslaving as an active interface with an up link
[   84.058589][ T7178] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   84.199204][ T7194] netlink: 'syz.1.394': attribute type 12 has an invalid length.
[   84.343146][ T7208] __nla_validate_parse: 61 callbacks suppressed
[   84.343159][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'.
[   84.563046][ T7216] syz.0.402 (7216) used greatest stack depth: 18776 bytes left
[   84.618125][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'.
[   84.643402][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.406'.
[   84.738343][ T7239] ipvlan2: entered promiscuous mode
[   84.757148][ T7239] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   84.760513][ T7239] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   84.790282][ T7243] geneve2: entered promiscuous mode
[   84.801035][ T7241] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.804550][ T7241] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.807377][ T7241] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.810152][ T7241] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.823567][ T7241] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.832727][ T7241] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.849615][ T7239] netlink: 'syz.2.409': attribute type 1 has an invalid length.
[   84.885478][ T7241] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.888710][ T7241] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.964952][ T7241] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.981634][ T7241] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.016514][ T7241] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.020222][ T7241] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.038884][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'.
[   85.120173][ T7241] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.124232][ T7241] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.137986][ T7241] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.144906][ T7241] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.155262][ T7241] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.158062][ T7241] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.172180][ T7241] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.175183][ T7241] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.192780][ T7266] No such timeout policy "syz0"
[   85.196105][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'.
[   85.259488][ T7268] netlink: 'syz.1.420': attribute type 1 has an invalid length.
[   85.285236][ T7268] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.304836][ T7268] bond4: (slave bridge4): making interface the new active one
[   85.309403][ T7268] bond4: (slave bridge4): Enslaving as an active interface with an up link
[   85.326729][ T7268] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   85.770333][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'.
[   85.888334][ T7298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'.
[   85.896881][ T7301] netlink: 'syz.1.428': attribute type 1 has an invalid length.
[   85.925891][ T7301] 8021q: adding VLAN 0 to HW filter on device bond5
[   85.947698][ T7301] bond5: (slave bridge5): making interface the new active one
[   85.952683][ T7301] bond5: (slave bridge5): Enslaving as an active interface with an up link
[   85.986192][ T7301] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   86.180212][ T7311] x_tables: duplicate underflow at hook 1
[   86.190986][ T7313] ipt_REJECT: TCP_RESET invalid for non-tcp
[   86.192271][ T7311] netlink: 'syz.1.432': attribute type 39 has an invalid length.
[   86.318585][ T7317] netlink: 248 bytes leftover after parsing attributes in process `syz.2.434'.
[   86.363376][ T7319] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   86.490108][ T7325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.520748][ T7327] ipvlan2: entered promiscuous mode
[   86.526868][ T7327] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   86.598216][ T7335] netlink: 'syz.2.438': attribute type 1 has an invalid length.
[   86.600995][ T7325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.637269][ T7335] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.658307][ T7335] bond4: (slave bridge4): making interface the new active one
[   86.673337][ T7335] bond4: (slave bridge4): Enslaving as an active interface with an up link
[   86.750545][ T7325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.769425][ T7335] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   86.882527][ T7325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.927441][ T7348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.441'.
[   87.016338][ T7325] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.044056][ T7325] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.058891][ T7325] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.087682][ T7325] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.157831][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'.
[   88.306900][ T7434] netlink: 'syz.0.468': attribute type 1 has an invalid length.
[   88.345167][ T7434] bond5: (slave gretap1): making interface the new active one
[   88.350053][ T7434] bond5: (slave gretap1): Enslaving as an active interface with an up link
[   88.453243][ T7447] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004
[   88.779163][ T7472] netlink: 'syz.1.477': attribute type 7 has an invalid length.
[   88.784572][ T7472] netlink: 'syz.1.477': attribute type 8 has an invalid length.
[   88.868670][ T7481] geneve2: entered promiscuous mode
[   88.870500][ T7481] geneve2: entered allmulticast mode
[   89.116418][ T7501] netlink: 'syz.2.488': attribute type 1 has an invalid length.
[   89.186690][ T7505] netlink: 'syz.2.489': attribute type 1 has an invalid length.
[   89.218173][ T7505] 8021q: adding VLAN 0 to HW filter on device bond5
[   89.232889][ T7505] bond5: (slave bridge5): making interface the new active one
[   89.236395][ T7505] bond5: (slave bridge5): Enslaving as an active interface with an up link
[   89.247886][ T7505] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   89.354466][ T7509] __nla_validate_parse: 9 callbacks suppressed
[   89.354477][ T7509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.490'.
[   89.355013][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.490'.
[   89.532002][ T5938] Bluetooth: hci2: command 0x0405 tx timeout
[   89.672894][ T7523] lo speed is unknown, defaulting to 1000
[   89.831058][ T7535] xt_time: unknown flags 0x4
[   89.881058][ T7536] x_tables: duplicate underflow at hook 2
[   90.168702][ T7553] lo speed is unknown, defaulting to 1000
[   90.242803][ T7557] bridge0: port 3(dummy0) entered disabled state
[   90.245120][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.247994][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.456817][ T7557] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   90.488243][ T7557] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.491227][ T7557] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.494918][ T7557] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.497805][ T7557] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.500914][ T7557] geneve2: left promiscuous mode
[   90.530313][ T5818] lo speed is unknown, defaulting to 1000
[   90.537057][ T5818] syz2: Port: 1 Link DOWN
[   90.650287][ T7566] syzkaller1: entered promiscuous mode
[   90.655236][ T7566] syzkaller1: entered allmulticast mode
[   90.856966][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'.
[   90.924200][ T7585] netlink: 'syz.0.512': attribute type 1 has an invalid length.
[   90.933789][ T7588] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.511'.
[   90.948392][ T7585] 8021q: adding VLAN 0 to HW filter on device bond6
[   90.965967][ T7585] bond6: (slave bridge6): making interface the new active one
[   90.972944][ T7585] bond6: (slave bridge6): Enslaving as an active interface with an up link
[   90.987473][ T7585] vlan2: entered allmulticast mode
[   90.991729][ T7585] bond6: entered allmulticast mode
[   90.994945][ T7585] bridge6: entered allmulticast mode
[   90.999701][ T7585] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   91.139044][ T7595] netlink: 'syz.0.514': attribute type 6 has an invalid length.
[   91.142602][ T7595] netlink: 'syz.0.514': attribute type 7 has an invalid length.
[   91.145983][ T7595] netlink: 'syz.0.514': attribute type 8 has an invalid length.
[   91.275618][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'.
[   91.288682][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.291107][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.304151][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.306483][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.582435][ T7603] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   91.738820][ T7606] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   91.750445][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'.
[   91.828813][ T7590] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   91.888497][ T7618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'.
[   92.026124][ T7626] pim6reg1: entered allmulticast mode
[   92.030275][ T7626] pim6reg1: left allmulticast mode
[   92.036279][ T7626] netlink: 44 bytes leftover after parsing attributes in process `syz.0.526'.
[   92.039595][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'.
[   92.069529][ T7633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   92.257941][ T7640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.301012][ T7645] netlink: 'syz.0.532': attribute type 2 has an invalid length.
[   92.313615][ T7645] netlink: 40 bytes leftover after parsing attributes in process `syz.0.532'.
[   93.052362][ T5938] Bluetooth: hci0: command 0x040f tx timeout
[   93.514503][ T7665] ip6erspan0: entered allmulticast mode
[   93.860200][ T7686] lo speed is unknown, defaulting to 1000
[   93.906659][ T7681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.966547][ T7686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.022903][ T7681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.416463][ T7691] __nla_validate_parse: 2 callbacks suppressed
[   94.416503][ T7691] netlink: 172 bytes leftover after parsing attributes in process `syz.2.543'.
[   94.530566][ T7681] syz.0.542 (7681) used greatest stack depth: 18552 bytes left
[   94.635520][ T7700] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   94.996313][ T7737] netlink: 'syz.2.555': attribute type 1 has an invalid length.
[   94.996828][ T7739] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   95.033970][ T7737] 8021q: adding VLAN 0 to HW filter on device bond6
[   95.060318][ T7737] bond6: (slave bridge6): making interface the new active one
[   95.065863][ T7737] bond6: (slave bridge6): Enslaving as an active interface with an up link
[   95.079816][ T7737] vlan2: entered allmulticast mode
[   95.083945][ T7737] bond6: entered allmulticast mode
[   95.086085][ T7737] bridge6: entered allmulticast mode
[   95.089475][ T7737] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   95.143017][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.559'.
[   95.146672][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.559'.
[   95.165784][ T7751] lo speed is unknown, defaulting to 1000
[   95.215249][ T7751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.317470][ T7762] Illegal XDP return value 4294967274 on prog  (id 196) dev N/A, expect packet loss!
[   95.755204][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'.
[   96.316266][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'.
[   96.452382][ T7814] bpq0: left promiscuous mode
[   96.453976][ T7814] bpq0: left allmulticast mode
[   96.493861][ T7818] netlink: 27 bytes leftover after parsing attributes in process `syz.0.579'.
[   96.501194][ T7820] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[   96.524237][ T7820] 8021q: adding VLAN 0 to HW filter on device bond7
[   96.526781][ T7823] xt_hashlimit: max too large, truncated to 1048576
[   96.532651][ T7823] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   96.545791][ T7820] bond7: (slave bridge7): making interface the new active one
[   96.549648][ T7820] bond7: (slave bridge7): Enslaving as an active interface with an up link
[   96.556646][ T7823] sctp: [Deprecated]: syz.0.581 (pid 7823) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.556646][ T7823] Use struct sctp_sack_info instead
[   96.568944][ T7820] vlan2: entered allmulticast mode
[   96.571086][ T7820] bond7: entered allmulticast mode
[   96.574171][ T7820] bridge7: entered allmulticast mode
[   96.577445][ T7820] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   96.703792][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.583'.
[   96.707942][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.583'.
[   96.711030][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.583'.
[   96.720929][ T7836] gretap2: entered promiscuous mode
[   96.732090][ T7836] gretap2: entered allmulticast mode
[   96.827178][ T7843] xt_l2tp: v2 tid > 0xffff: 4294967295
[   96.829526][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.586'.
[   96.920589][ T7857] netlink: 'syz.2.590': attribute type 1 has an invalid length.
[   96.947502][ T7857] 8021q: adding VLAN 0 to HW filter on device bond8
[   96.965357][ T7857] bond8: (slave bridge9): making interface the new active one
[   96.971910][ T7857] bond8: (slave bridge9): Enslaving as an active interface with an up link
[   96.986037][ T7857] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   97.328216][ T7899] netlink: 'syz.0.603': attribute type 1 has an invalid length.
[   97.345905][ T7899] 8021q: adding VLAN 0 to HW filter on device bond7
[   97.357174][ T7899] bond7: (slave bridge7): making interface the new active one
[   97.360705][ T7899] bond7: (slave bridge7): Enslaving as an active interface with an up link
[   97.380983][ T7899] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   97.580312][ T7925] xt_hashlimit: size too large, truncated to 1048576
[   97.643412][ T7935] netlink: 'syz.2.612': attribute type 10 has an invalid length.
[   97.654262][ T7935] 8021q: adding VLAN 0 to HW filter on device team0
[   97.657929][ T7935] bond0: (slave team0): Enslaving as an active interface with an up link
[   97.680036][ T7937] netlink: 'syz.0.616': attribute type 1 has an invalid length.
[   97.714788][ T7937] 8021q: adding VLAN 0 to HW filter on device bond8
[   97.733758][ T7937] bond8: (slave bridge9): making interface the new active one
[   97.736982][ T7937] bond8: (slave bridge9): Enslaving as an active interface with an up link
[   97.772508][ T7937] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   98.030569][ T7968] lo speed is unknown, defaulting to 1000
[   98.146924][ T7978] openvswitch: netlink: IPv4 tun info is not correct
[   98.248569][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.389754][ T8002] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   98.390192][   T13] bond0: (slave bond_slave_0): interface is now down
[   98.409588][   T13] bond0: (slave bond_slave_1): interface is now down
[   98.428453][   T13] bond0: now running without any active interface!
[   98.852863][ T8048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[   99.949255][ T8096] __nla_validate_parse: 140 callbacks suppressed
[   99.949273][ T8096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'.
[   99.962706][ T8096] netlink: 64 bytes leftover after parsing attributes in process `syz.1.660'.
[   99.965499][ T8096] tipc: Invalid UDP bearer configuration
[   99.965528][ T8096] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   99.977612][ T8100] bridge10: entered promiscuous mode
[   99.979377][ T8100] bridge10: entered allmulticast mode
[  100.043196][ T8096] netlink: 'syz.1.660': attribute type 27 has an invalid length.
[  100.077047][ T8104] netlink: 'syz.2.661': attribute type 1 has an invalid length.
[  100.260614][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'.
[  100.385229][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'.
[  100.388267][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'.
[  100.469714][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[  100.661944][ T8166] netlink: 'syz.2.678': attribute type 1 has an invalid length.
[  100.667581][ T8166] netlink: 228 bytes leftover after parsing attributes in process `syz.2.678'.
[  100.684374][ T8164] SET target dimension over the limit!
[  100.973741][ T8183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.974291][ T8182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.993880][ T8183] netlink: 'syz.2.683': attribute type 10 has an invalid length.
[  101.045775][ T8187] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.684'.
[  101.168277][ T8200] xt_HMARK: spi-set and port-set can't be combined
[  101.179317][ T8200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.688'.
[  101.260809][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'.
[  101.395729][ T8224] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  101.499058][ T8233] xt_cgroup: xt_cgroup: no path or classid specified
[  101.602740][ T8237] lo speed is unknown, defaulting to 1000
[  102.163208][ T8269] bond0: (slave team0): Releasing backup interface
[  102.173036][ T8269] bond0: (slave bridge_slave_1): Releasing backup interface
[  102.188352][ T8269] bond3: (slave bridge3): Releasing active interface
[  102.196357][ T8269] bond4: (slave bridge4): Releasing active interface
[  102.201910][ T8269] bond5: (slave bridge5): Releasing active interface
[  102.208202][ T8269] bond6: (slave bridge6): Releasing active interface
[  102.210965][ T8269] bridge6: left allmulticast mode
[  102.219918][ T8269] bond7: (slave bridge7): Releasing active interface
[  102.223294][ T8269] bridge7: left allmulticast mode
[  102.228077][ T8269] bond8: (slave bridge9): Releasing active interface
[  102.780534][ T8299] sock: sock_timestamping_bind_phc: sock not bind to device
[  103.611279][ T8327] netlink: 'syz.2.727': attribute type 1 has an invalid length.
[  103.624939][ T8327] 8021q: adding VLAN 0 to HW filter on device bond9
[  103.635677][ T8327] bond9: (slave bridge10): making interface the new active one
[  103.638806][ T8327] bond9: (slave bridge10): Enslaving as an active interface with an up link
[  103.657684][ T8327] vlan2: entered allmulticast mode
[  103.659948][ T8327] bond9: entered allmulticast mode
[  103.662267][ T8327] bridge10: entered allmulticast mode
[  103.665662][ T8327] bond9: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  103.827662][ T8343] netlink: 'syz.2.731': attribute type 1 has an invalid length.
[  103.829474][ T8342] netlink: 'syz.0.733': attribute type 1 has an invalid length.
[  103.973204][ T8352] tipc: Started in network mode
[  103.974939][ T8352] tipc: Node identity 6e1bad90f5f9, cluster identity 4711
[  103.977385][ T8352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.980246][ T8352] syzkaller0: entered promiscuous mode
[  103.982683][ T8352] syzkaller0: entered allmulticast mode
[  104.039280][ T8352] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI
[  104.043112][ T8352] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[  104.046967][ T8352] CPU: 1 UID: 0 PID: 8352 Comm: syz.0.734 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  104.051258][ T8352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.054823][ T8352] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  104.056890][ T8352] Code: 89 ef e8 d0 7e b3 f8 4d 89 ef 85 db 74 0d e8 04 fb 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 99 7e b3 f8 48 8b
[  104.063241][ T8352] RSP: 0018:ffffc9000254f0a8 EFLAGS: 00010202
[  104.065255][ T8352] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  104.068491][ T8352] RDX: ffff888106230000 RSI: 0000000000000000 RDI: 0000000000000000
[  104.071781][ T8352] RBP: 0000000000000000 R08: ffff888106230000 R09: 0000000000000002
[  104.074981][ T8352] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002
[  104.078242][ T8352] R13: ffff888123c7f000 R14: dffffc0000000000 R15: ffff888123c7f000
[  104.081153][ T8352] FS:  00007fc63f8626c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  104.084787][ T8352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.087521][ T8352] CR2: 00007f07611b9d58 CR3: 000000010d910000 CR4: 00000000000006f0
[  104.090982][ T8352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  104.094414][ T8352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  104.097656][ T8352] Call Trace:
[  104.098788][ T8352]  <TASK>
[  104.099792][ T8352]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  104.102001][ T8352]  fq_codel_change+0xa96/0xef0
[  104.104099][ T8352]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  104.106443][ T8352]  ? __pfx_fq_codel_change+0x10/0x10
[  104.108779][ T8352]  ? __sock_sendmsg+0x21c/0x270
[  104.110962][ T8352]  fq_codel_init+0x355/0x960
[  104.113000][ T8352]  ? lockdep_rtnl_is_held+0x26/0x40
[  104.115354][ T8352]  ? __pfx_fq_codel_init+0x10/0x10
[  104.117488][ T8352]  qdisc_create+0x7ac/0xea0
[  104.119429][ T8352]  tc_modify_qdisc+0x1426/0x2010
[  104.121527][ T8352]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  104.123791][ T8352]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  104.126011][ T8352]  rtnetlink_rcv_msg+0x77c/0xb70
[  104.128105][ T8352]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  104.130117][ T8352]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  104.132388][ T8352]  ? ref_tracker_free+0x63a/0x7d0
[  104.134507][ T8352]  ? __copy_skb_header+0xa7/0x550
[  104.136624][ T8352]  ? __pfx_ref_tracker_free+0x10/0x10
[  104.138888][ T8352]  ? __skb_clone+0x63/0x7a0
[  104.140811][ T8352]  netlink_rcv_skb+0x208/0x470
[  104.142862][ T8352]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  104.145129][ T8352]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  104.147306][ T8352]  ? netlink_deliver_tap+0x2e/0x1b0
[  104.149485][ T8352]  ? netlink_deliver_tap+0x2e/0x1b0
[  104.151406][ T8352]  netlink_unicast+0x75b/0x8d0
[  104.152960][ T8352]  netlink_sendmsg+0x805/0xb30
[  104.154481][ T8352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.156244][ T8352]  ? aa_sock_msg_perm+0x94/0x160
[  104.157869][ T8352]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  104.159695][ T8352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.161883][ T8352]  __sock_sendmsg+0x21c/0x270
[  104.163885][ T8352]  ____sys_sendmsg+0x505/0x830
[  104.165505][ T8352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.167534][ T8352]  ? import_iovec+0x74/0xa0
[  104.169258][ T8352]  ___sys_sendmsg+0x21f/0x2a0
[  104.170782][ T8352]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.172462][ T8352]  ? __fget_files+0x2a/0x420
[  104.173958][ T8352]  ? __fget_files+0x3a0/0x420
[  104.175510][ T8352]  __x64_sys_sendmsg+0x19b/0x260
[  104.177191][ T8352]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  104.179162][ T8352]  ? rcu_is_watching+0x15/0xb0
[  104.180781][ T8352]  ? do_syscall_64+0xbe/0x3b0
[  104.182323][ T8352]  do_syscall_64+0xfa/0x3b0
[  104.183825][ T8352]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.185584][ T8352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.188233][ T8352]  ? exc_page_fault+0x9f/0xf0
[  104.190260][ T8352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.192761][ T8352] RIP: 0033:0x7fc63e98e929
[  104.194750][ T8352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.202860][ T8352] RSP: 002b:00007fc63f862038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.206303][ T8352] RAX: ffffffffffffffda RBX: 00007fc63ebb5fa0 RCX: 00007fc63e98e929
[  104.209671][ T8352] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000008
[  104.212915][ T8352] RBP: 00007fc63ea10b39 R08: 0000000000000000 R09: 0000000000000000
[  104.216243][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.219550][ T8352] R13: 0000000000000000 R14: 00007fc63ebb5fa0 R15: 00007ffdd5ad0db8
[  104.222852][ T8352]  </TASK>
[  104.224150][ T8352] Modules linked in:
[  104.226204][ T8352] ---[ end trace 0000000000000000 ]---
[  104.228485][ T8352] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  104.231201][ T8352] Code: 89 ef e8 d0 7e b3 f8 4d 89 ef 85 db 74 0d e8 04 fb 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 99 7e b3 f8 48 8b
[  104.239254][ T8352] RSP: 0018:ffffc9000254f0a8 EFLAGS: 00010202
[  104.241932][ T8352] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  104.245241][ T8352] RDX: ffff888106230000 RSI: 0000000000000000 RDI: 0000000000000000
[  104.248634][ T8352] RBP: 0000000000000000 R08: ffff888106230000 R09: 0000000000000002
[  104.252165][ T8352] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002
[  104.255557][ T8352] R13: ffff888123c7f000 R14: dffffc0000000000 R15: ffff888123c7f000
[  104.258967][ T8352] FS:  00007fc63f8626c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  104.262937][ T8352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.265803][ T8352] CR2: 00007f07611b9d58 CR3: 000000010d910000 CR4: 00000000000006f0
[  104.269269][ T8352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  104.272700][ T8352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  104.275993][ T8352] Kernel panic - not syncing: Fatal exception in interrupt
[  104.279843][ T8352] Kernel Offset: disabled
[  104.281731][ T8352] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:41:19  Registers:
info registers vcpu 0

CPU#0
RAX=00007f075fa300d0 RBX=00007f075fa29fa8 RCX=ffffffff81b91ce7 RDX=ffffffff81f72775
RSI=ffffffff81b91d45 RDI=00007f075fa3d5f0 RBP=00007f075fa145d0 RSP=00007ffdf2588420
R8 =00007f075fa28dd8 R9 =00007f07605a2000 R10=00007f075f9ff008 R11=000000000000000e
R12=00007f075fa145c8 R13=000000000000001d R14=00007ffdf2588578 R15=00007f075f9ff008
RIP=00007f0760267d50 RFL=00000287 [--S--PC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555566199500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f781255b440 CR3=0000000020adf000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff81f72775 ffffffff81f728e6 XMM01=ffffffff81f728e6 ffffffff81f72775
XMM02=00007f0760584478 ffffffff81f72775 XMM03=00007f0760584488 00007f0760584480
XMM04=00007f07610ed100 00007f0760584440 XMM05=00007f0760584458 00007f07605844a0
XMM06=00007f0760584498 00007f0760584490 XMM07=00007f0760584488 00007f0760584480
XMM08=dfbcae7f7fbb6204 f6bdad5289d0e9a3 XMM09=0000000000000000 00007f0760411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001045 RDI=0000000000001046 RBP=00000000000003f8 RSP=ffffc9000254e8d0
R8 =ffff888020968237 R9 =1ffff1100412d046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4919 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc63f8626c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f07611b9d58 CR3=000000010d910000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fc63f6ed100 00007fc63eb84440 XMM05=00007fc63eb84458 00007fc63eb844a0
XMM06=00007fc63eb84498 00007fc63eb84490 XMM07=00007fc63eb84488 00007fc63eb84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc63ea11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
