last executing test programs:

1m53.52425771s ago: executing program 32 (id=3132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r12, 0x0, 0x1}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r13, 0x0, 0x1}, 0x18)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1m53.495844158s ago: executing program 33 (id=3140):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100000000180000000000000000", @ANYRES32=r8, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r8, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0)

1m49.48302455s ago: executing program 34 (id=3156):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f00000002c0)=[{r3, 0x4129}, {r2, 0x1408}], 0x2, 0x200d)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)

1m46.807052672s ago: executing program 3 (id=3191):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)="d13c9633909a", 0x0, 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='consume_skb\x00', r1}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000}, 0x0)

1m46.635516925s ago: executing program 3 (id=3192):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0xc1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001f79cf5dcd00350000000000000000009a359e010b9d6f87bb392a3268560870c717f2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x919, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={r8}, 0x8)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m34.406024487s ago: executing program 35 (id=3169):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000fcffffff0000850000002e00"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r5}, 0x18)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x8004000)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)

1m31.002635559s ago: executing program 36 (id=3192):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0xc1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001f79cf5dcd00350000000000000000009a359e010b9d6f87bb392a3268560870c717f2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x919, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={r8}, 0x8)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m29.465326134s ago: executing program 5 (id=3255):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffe, 0x10000, 0xfffffffe}, 0x1c)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0) (async, rerun: 64)
write$cgroup_devices(r3, 0x0, 0x9) (async, rerun: 64)
mkdirat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x1ff) (async)
write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) (async, rerun: 64)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="dc76291cbbabbf79180000f1ff000000ff00950000002f9200003c2aed7af10f1c60204b5bb1dfbf7ebf7f6f9f8476a7e8b937919b11875cdf37d3263c881ea285aad844213068f0eaad1d7c000000008610e0a26d1ea4fac8fd6cdb0fcde203fd38d557f836732543b85a1a7af7436d0d1c755f1a3127cc8191"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r4}, 0x18) (async)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$netlink(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYRES32=r6], 0x14}, {&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESOCT=r5, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0400408040e4003280059700ac1ac904907a49301808b28405a97e7394c67bb8b1d4457bd3c36ed424431331c57dc2d8b6b1b1b630ec4c5857d1c1815487038311b11f252247df88e81de7f443ec2126724004257274e5b9bb4fa43d4f3f9284f53ed07adadfa0dc9382d508845639bb0f45f3e5ef2c7d8fc94888587b39e68cf4cb5bb094da639e42169b8d1e198fa6bf9366a7f892e42dac548b8008000a00", @ANYRES8=r4, @ANYBLOB="40abc6077716fe218a57c10767c7bd50ad47ba58bb2f841a3add67b9a62b7fedcc9d916b94d21fcac32e10bd7b167c62fe2ac130b9e6da81d0bbda3c1de28775f5855a995e5d0a7e75cc10291ea7092c86b11a010ee10e9896d1caacfdf84aaae965c4347668e396e2d6181712cf445e658701e99a917899c271830ffcbf5804ebd9b7b13054b10d469ef95dd69b592312ab03fab51106063c73296e6649771bb5cb917285b7a6cd7466235d164a55c429cfcf5612945d399b69fc6766a785e252dad2aa22da37bbc0b02863011a00df6c0e19270e614238b1b4d77a0daad0eb287f8a3521d58661f514099992421d7e0933f4a9af5ff23e08fb5775670d038fb24e94ce08de2c710795db1d6400000000000000004dfd0e2098e0a5d47f1c5322d56515f927c0087edff506298831be13fc5debcce3681ee27bc42d74e5bdfa5ea0566621570186f3e8562cda4949c0ff81492516258540c23a2e30a7461e7b9ef6115cbefd5cfcbe7c6efe5d84e0881b84cc0c75c45cdd30162f309a33c9878689e80be7d42a57baa02f06f15b3e2516c80273be6b9e0a47f50723e14024c3fbf07bac4218189df08b1b282355c2ca608523f5a5a3b79595868bf63a08ffbedd42ae8c5243df0ef99a26203a26ddcdf8ceb324df7c216339064e69ad41feff28aa9effd2d002be4f2b7b22365fb5c51f8e3425d173669e6896923ab4ae3e55a13af0dd9ad260173e671ca56e6507baf8ecede9679fc3363ff6c96ce2beb6740d66d9abf9e5d98fa42e05cc49ca009a19abb319eb2b932951ec1751156eb5e4739e49a12d5abe16512d4f347869e7450a194d936e7b3659d394b2520216714ef58f4b4f69a310e78f07fe3a9a828624b42874a356af94cd94611ecff40e461f66d7664577a912d05b30b7bd436e3f9a66a00ff7849a45b91336526bfdd2db1d513d5caa950a53646e8de1b0d89dea055fd754a14ecc813c69d930673cf01b1277eb263fa6a5ead1f2ddc013f8689d0130d2de6b5140b0830d46d3f4ab833df49181af2912c1f5541b1bf06417b17de11031b7b141dff1e118c347afa64be736b7b0e7236265ab7baa589d41e2fe4d39cf271bd0480fc719b380af4b566fd063fdf3329cbc63cda5b9642cd286fb9bafedf59e2cbb4b0789f487c92cafd2d104f2dab31ae1a97b41700b45d2819a89f0c1da58f0ccad488bb4e398e4079733aa741bd6c9a9ebde348395c46c39dd97410acfcc6831f0b5d34e68d88bb09007e0bd13857e21cc7ba4f7b30927fc7abf612074b874de0d7bdd7c582801682dd403cfdc08f28d67715dd0260597c96259dd06ebced443577cd6746a4c3ab4c377a1b78f2c06af946a7b994074898a4e9b1e0d2cfc2d46e318133f5826382eae332f73b5898539c6a6d3e1249028b9d5530d4aa4150c63ad2bf2bb81c375466a8c4f8b330cee6d028f193d3a8463064beeae19e426c690707fd28a0b9bd5f297d5c7477af807f9c89afd3b880610416b7869f53f11b0a5f058765419576bdb81521117faf92edf0ae0d592d2b33b3344adee693f34946f2397c59abe0853f3197a2ec541f6ab12a2135d85dca3a163e68c3ad3fc4c95dca648c90024ec2b8ee1e785c8e98379307b3a75960201ac3b292a218c712d71a9b5f5cc910e051f96b15f32006a16e6cf9d24cd0acc8da16b4f72de1d1c70776ec3c044f2837908ad3ab14f6d513b3878533e0bde72a5e7bc3ae72bca2b3382b54362ffddb80f6997d16e02f5747173d759b37443f6166aa76d499ad083ad0d1f7e7fba09338f8efb94f2a54ba74eab16b712997f9d319b13316feb27e0d45abaef3ef9f36da1c154215e65994023cd6b7a4171af4a1e933e8f98059a25e54947a94ba8430e7cb2947f5f0aeaa56923729b447392447e6f1c58626343cfac3b0dd0ebf999d9825a861b7a659f506397f91a9f411e37ffea5140534a56e1113fbbdabcc6dd3427fa11344a8a2d069809f9aa4b022e2cf773272991d47b67163ec537042efc5f2eb17f0c2e1cfc3f8c0e1b25f666d7d6e187b91fa2200d585ae3941729d8b0a3b194389ff9e7f9f4e51a624df844dab6efb2e5457cbb1e39ba6d292e278d74b7fe5577c41ba53f50aa544f30e85ab2e7df0be457328f77ade85081523630cd6cf87e977b711876d9753a7490dc50e10fca59f05571f9901a7c9102938d8604cbd8e65f8ad3277b53e783ef256ad83968f72b0fef3f6c91956d6ab0848d81c9d6824c4272bf0cbb23aa1f10ee7c2cccd4373688e78daaaf00b1ccd19d8d00f455bac5d9a8a8ee974fbd193d9dea29331d3d88a575c99449c516f30878ec2a4db90df18227089bc44fe80b0755d7f74fe44469658a9d40ca3fb73ef951209f1c8597d2f57a3ba9cf7595f549a60c9701b09b62f62dfb975c30d3fb32b2ea9024e02ad5a1344e676203046d85a774aeb45345157bc5d9cde34689c1c0ab16f869c7e27e94cdcb44a5a2b3eae863a3bd8f7564397fa2e5a7166cc2540a44fc7969b80676bd438a33f98d94b7eda51f41fc5a0d63ce09598e34e650e4fe35d5ced35a187894a2a4de4bcc52f5e4419e6cf9a9b3952147b69d52aed69cc75224489048d18efd7ef235e0030944c364f8d077df4029ba8b0c8f8f6831ca9e8fa8865f5c6232ca7a8cd852feabc883e3360c9e26f1cdf64994cfcf6caa78087c96de97d4de91a904da62d46d93826d49ea9c746b4d4c811a2ca2c0aa982fb453fe1a06cc97d8e8c59588e5346329da3ec4b3e49af4b42a58de7e787cb0a2c6359fa670830a227e71929ae7c0c8cd15d1f409c823cb7c16f57ea5487442c047416e52e2dc4d5649c55006d47c4f836c0bad4525603b0aa725a147abbce07821ed92a01dbe27e345aebfe1e7a37add7a01aad44f4a3fc0965f64978b547128ce167ecfe5aeef4502c8f053821a00b331f779b085c30cfebd105ec318053a7b230bce1223f7ff2a593cecf5edfd0325ccafacd72f7053b5e5300d69e3c8538a97fa94c63c6f5ed7a42ba4836805a3a55a7adf89962ab553873c741df3ce8fae5b116a3bd8770d5057c9700f23b6ef9a9d7354cf468e00ee81e9706cf741d74307facab373f7b88fbe4027e8c66ac9a91d317fcaef3e021fc0766f4489970134c7673fb9089e60ce5dd24675cd3695ee3fb15ed2c3ae0cb0974705dc60feb3d04602fb41c2d6154da31e9043f4317f4a161f39bd372745b2e0e7061a468bbb49d48dabc9cbbd323084e3ce71bc41b12a1e2e849351b8211d1140451c12ba9eac906591cfb47a1fe0f5e4c7c69b8fc2f6d043c432222bc36a0bdb95d4990cdcc15e48f0e2786841a0cb89550365ccf022dfc7c95e8888307fcd3ee30361b0510d6ac928158f36e610f8706307f777804130b63c912149d32ce1febad96ab9e9a2db3049b3e3aea24af52c1bc0ea45c474f0fa7e63e58b0c2e970e67c3bef953b7ecc2bbe518171dfe6d741e506f00869ba700ca4293b320721bcbd0b650f7346738c6b7df275170cd9a4d4ec14235608417fe74dedff96b5717f1a216e178ae9e6bd68ff6a7a240b5b471a9d949f381201a309e70ad0f229668d0c150ed8d61339d143a4089ceff2e78756fec4fa9b5958898408f64bf725d88626147ed6de3785fbed4f5175bda9f8ea4db2ddcda88b47e856e5af380f635d5748a103ade500a383e96a70f70810c305be26951e98f48cc0c8d1543b372e9c66dd001c0464512107168e61db06c762d8d20caa6db8dcc0e149e785fcff77c705c07ee5c699f4f57ae86223f108fd6f4d2513cf36b6d1b9954e1ce76f0ad605a54ef34c624c1e880bf0da25be4b6656a840355c0c21e2066989aeb556bcc032e7bdd0119c38b1d963bc607b2f18bc59ebf4e39bbf39c8fe2184f4e0adda5f8090e6b4190d2e3bc9682394c55ed49c3218801c5cdd1124c12c0a6d585a890c29f24dda11b2137881ae4e41167669ee1d78fb887bbb7367e641dde297e8bedc0a4e7baf98350de7cfcc852482ec48ecf30cfd82e7d835c2329be9098a4230c71e694803c2b8fabceb67ac7303008cd995465b87e41ba28662972fbcdce542362f3377629f50c3263d577d558d376e3f6cc95de8d42717064409404b99e3fcd7db772aa328545881e31a0e353f37fafec613723a27e1e606f931ce1a94d037b9bb28aa6eb49cf2ccc6389375937b79178e9b0575500b647a0af4a1d962a8c6384a44d87650512cf89e98fad2a213b7cc5739183d5799904bbd4d3cce751851d6cc45899b8f2a59577c02bcb33fdac279a2425cf56875547d3b714e51ed8611be1d2884bc0bf2088fe0fcea5beeca3a6fd36be754da1a2bddf88e52778c588d9b9ada745097ef01f6f451cfd067bee58870ef2a9fd2ee4d4f67b71a632429a1ba5c1d3e5b9a72c21c7f9b9b4383ae4d9c0e3906dca30adb0c5ff55ea743f539f356916b6a50ba2edc67a64b2849cce829bd86323c5d2aaa1bbfc15073a1845d46b592ddccbfa25ead022158a1c1578de5c2192a0860d0df906a39ffbd7d3e9b58561eb475e80ce2998ad29c3f019ce0facf694f4f7d4d918f9d8f19f7b0ca9a158e5bab1179b45c8581118303b4696029111c4182e4193dede9d88080df919b8ec227a80df3e18e85c6a5af50cf8e15c123f16958c2360c02fcca2fa4124aa0d82ef1459957a483dc892c4b640038ec78565d6dd0c82de40ef97a9b9fb2ab9a6d47814bf8e112cc0531b4fedd969504e7779fbe001fc1b800187956b07e320e7629679343acf12a06b78b4befc1f8c5e3c2dc398b28aba783487a08e3ae0cba778e5c03189ec6735caa9e36652dbde3576c5229e715d422152e4598d300f898f2683935ca615b0279e834e5e36fea615053a315c5a4e5749148eb3ae2e3f21eac5f0a2cfcc16b8dcaf816ad02bdfa1820aeb19698918a935520ba9f792453d3103e36cbde904073ded71ae4a72f1f0a06dedc347f3890ca909ed16d1cf7a1314ba03bbf79d73c9b1107f81dbfb8da9051924451dfffe9e887b794c03420f737c0e9ce501df5c502c24b804fb31f9b523f73246695a4bc2e9ed12b05ae1cc67136bd3ed3be31f52672a7f45d3db37a77e1a65fbe9382816e89426e8363f5f87bd12d012b4d3a79293402d52c868b40abb0c8766cfbc9017e557805dd3965d3a6d30c5798357d213b888032d5e7bdd86c9dd365b0ed32ca946beb0d05b2bdbb498e21d0b2b1d627cb1666fe15f091f68119d192d908b8beaa6a2102a80a1d01a4cd6d820eb0386701e42cd43ebe81319e2cd565e6cff79c67ddb056cdf0f7f7ed7ec20a2bf752c056fafb6bd2d9360c8d80a6706329094a6c2390378e863b8c55cf99aca8e411974dccb1e7732e6485970354da34205ab6cd055af7a58aee4432e67056ba39dce273736a53d3d1d111f1f73a290ddd5b874490515577f08db9a0e08b1e35e059f131afa0543eba077cff82430ec1b7c77fd3104b28853ccf4ef93a095e6db2851117252ef1bf42f20bb9afc29659fd83367c260e22793ed12c28daa20e1fb4a05cddf781c369ed72525c0d306a385053513035031bc288934845b42f1f6e91f00ecfd610d9daac57c292b11defe0d2839e27e38fbdae9432a06caa8174e67609d2b551f57ce26a02d2e577a9a71d276bdfea4a6e25b7dccb4ba92c78e87e75966af9127bf6bbebaedb5f49c0fbf141cb84d58530844ee3d1defef5b9dc4ad4741bb45468862aee709cdca972bf724dd9962886b7fcda57207321e60d81c6f58bd871c51bf7fa6384f674d1a806ff5bb47037a42df9ccf825a422303e0607ae2dcf561bab360ca71f87b07fbccf8d6e812491d0711d71266b48b89fce028898f46280db0868d83e076fa09b7e6b2e5dac7da8dec9ff35e04a39dc936e22a44fb28608b7a65de598da336b9bff18a3b470deebbf22976186a3e389193c04186a4579d3d839505985f30b39ec03edb2f1235e881234944dc094d3a3cfc2492d2b4bbcc23ac8bc4429e4ee613520ee70bf8778383d67c2a6484da9b5e1cf31dc9a58a7687a7d441d65a527d97c9239c5a1302ad6d41f81b97996f859812a73adc769969b4c735684e0da52e8d08892d4f3831e85e557009037e0156a4a3b716fbaa4db7a555ae6ab5b98be9ff74be451be91f3b6321bd9f8f26b626546ebd3fe521c1b6b231000d2f2f4b334d8a0912f10e889f2f65339cc382375475a2c65b3aef5def153b7e43bd5abf24c1d69f222d35fb177ebd2bdf3c6823a5610e238950b302fe103229dc106f23c2106bc7c0fffd6f7165a1d2e5e63427b13e6ba25090db5b27e9c13515178f3a365dc17fdcbefda288a1ef0be8d28d4fc45333a71a048123a83b703f3e73fdc4e7376561c36b061b7d2d06d41fb15560db9033340a3210c557fb9f0d1b018aa99a6f65bf7923ffb88dc7b964fdcb0bdeadc089bf0dbc5b00ff0f7bdea2e114c39a977611b463155818a2b0a21fab781470d7a457f08eec648707b52396a930ad59d03e148a8cb9a9f25e88b12b366a731eb18efca69e8298b063238d7c597ddbabc3632dd15c9d6e1a0abb75ee4a4d1f3a8fea4eb7595400150002eba099ea38d351e55a940824b6c58cdd849af30f7bebbd18683d3dd2178cd070bfe27d184597b67c41f0cff85f6bb247c6f0cc41a2dcf2d12c19029c56dfaf2eac0b647939a324782ffa98477bcb1b0000e10247d3afc230bb45c6ef49ace95e7a5d75a8bb566f06c061edabddb8d00cfa351214a50b30a4e35818cc68b10adb81d4bfaa725ff89d40870d7e0e6567e914589620514bb4b896e966171b1b59cf2dad86312756f62addac67431ed7223815dade96067fd23a3daccc4488874d1b3063eb1a7660133a18c6fbef4a4c616428e1fe52426b239f6e01c813710d39966b45d5e8230f651e12b286856c1e93f7713690df85b49934ed6bbe6fc2d081491a87bcf7506cc0ef3a13c8b10b04b685cb893879b936a2d90940b6534b0b2e1d5430c48c54403faa1d5052a48a218e1de96b36b5c942ad0000d97681073563a26b9cb5b97563581ba845ac4cc77e19c1c3c6b3f6f7b4ed34e0da6e2f4576e394dfaf79e01988395b9dca6630bae6006a77456d1e6b509a7799c179d971efd4e58f0c546cc722de81340afbd32b851ca7e41554adaff957c80aa8b0f63c440c3d01c34f68e5bc43e6dc0b843d2f7c7109660532b0afafb581d3980a777562e4a00fadc3cef679d6833901ab939d1af7bfef7941d9db4b8e65769d156f5022ff96a8df6fab69bd8a1699eda239c73993f7adad762129996843899967c9687732b1a322c27bf191bb9a5e1145b39b632a2e2f94d9e818082a56fbfe87b32db54d0c2e2f9794357bcefc16b5b17fa5355d9733a0a61d1009f19b9fab86d36c6863f875ca5eb3c4b41ea7a7afbed26cafbb2caee54c42bb4c9e381a5bd86084ec470b72ce89a2273f47342dfc000000"], 0x1804}], 0x2, 0x0, 0x0, 0x400048c0}, 0x4004010) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c) (async, rerun: 32)
setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, 0x0, 0x0) (rerun: 32)

1m29.349705304s ago: executing program 5 (id=3257):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90020000", @ANYRES16=r0, @ANYBLOB="0107000000000000000067000000080001000c0000000c009900090000004c0000000800c400050000008a00c500ef6a4e2a84f0ce5d60f807d0014a5522a86d750f7a8a0dbeecc48f498f3b6d2ce0a10a164695d411ee6e2062b3871bfb9e8df8d45e0190d9ef7f92fea570390434393eadb326c8ec2d08a92cf8672dca738fbbe0b900597a2709a0fa339438a41a36f02eae99722a427032921454472ce4c6ecca193e90290227e7d0d6e81380f327ac73967c00000800c300"], 0x290}, 0x1, 0x0, 0x0, 0x44844}, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$inet6_sctp(0xa, 0x2, 0x84) (async, rerun: 64)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xc51e000) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef)

1m29.234073086s ago: executing program 5 (id=3258):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x8, 0x2c}, 0x50)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x4, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x40040)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x708, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000014}, 0x44850)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e1f, 0x5, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}}, 0x0, 0x0, 0x4e, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000001840), 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x8, &(0x7f0000000000)=0x1000, 0x4)
getsockopt$inet_buf(r6, 0x118, 0x26, 0x0, &(0x7f0000000140)=0x3d)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f00000000c0)={{0x5c, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 'sed\x00', 0x0, 0x0, 0x53}, {@empty, 0x4e22, 0x1, 0x9, 0x4, 0x8}}, 0x44)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x0, "9049921cad43a287f7c27b935b93a3ab4cec30f9d65b0656be472de28e93bd614da4791d3a6f52724549175947b634123d362a278e4da59f07d3676b44e88dff0e17e335dff376c6376d2f591b83417cd8b3e067cd8e245f0370a210c87e908f653b598049e905bf514640073175dfb50ebc4e55e2aca11ac0049448967a9e8e7adcbab1e935b6336787e6300394d8f1de75"}})

1m29.155395828s ago: executing program 5 (id=3260):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x5, 0x101}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

1m29.053313901s ago: executing program 5 (id=3263):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000200000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0)

1m28.914786582s ago: executing program 5 (id=3264):
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c000280050016000000000006000f000000000006000e0040"], 0x4c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c000280050016000000000006000f000000000006000e0040"], 0x4c}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r5, 0x0, 0x9)
mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) (async)
write$cgroup_devices(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000039a64d7381724eef60000070100"/26], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x6, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x6d) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x6, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x6d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r6}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r6}, 0x18)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)

1m28.52467705s ago: executing program 6 (id=3267):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={<r2=>0x0, 0x29, "f89136e7a1f10e183e3646b6a0ce16b7e7db69221af9f565eb85d509eb0f9dad2f5b097fc2bf61183d"}, &(0x7f00000000c0)=0x31)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x9}, 0x8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast1, @in=@loopback}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x120, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x9}, @nested={0x10c, 0x11, 0x0, 0x1, [@nested={0x108, 0x13e, 0x0, 0x1, [@nested={0x101, 0x23, 0x0, 0x1, [@generic="ff12228a20f57c5a6e243065e767b6e40ba937d2550d4e8f43ee84b04ca3ba78f6e5bf095489c17a2b40410c80112f5e5246be915aec2f15c2d99dbdfcae02cc95809cc5712c137c4d827e761ec1702b322b18dc8dd01d27cc97dc819677766817841adf9f661f374dc35192b6011f23d228a365a96f0b812d441f576e4e6ab26889061fadb3eb4bbbeece4eb37bb68b3c8568e52fdaa17188db756e8e405575c5ba12ab3298abff9510e5670a7970350a9ddded1f9beb944c0ef3eaf983bf964bf1463c9be8bdf61f9018132ea5769ef11840989d60", @typed={0x8, 0x137, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x127}, @generic="a6baa71b38fe4e", @typed={0x14, 0xf4, 0x0, 0x0, @ipv6=@mcast1}]}]}]}]}, 0x120}], 0x1}, 0x300)

1m28.404563329s ago: executing program 6 (id=3268):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='~\x00\x00\x00', @ANYBLOB="0700020000000000000005000000180001"], 0x40}}, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000106000000000000000007"], 0x18}], 0x1}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
pread64(r6, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) (async)
pread64(r6, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0xa10f}}, 0x1, 0xb, 0x8, 0x7, 0x7fff}, &(0x7f0000000180)=0x98) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={<r9=>0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0xa10f}}, 0x1, 0xb, 0x8, 0x7, 0x7fff}, &(0x7f0000000180)=0x98)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f00000003c0)={r9, @in6={{0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}, 0x84)

1m28.314017603s ago: executing program 6 (id=3269):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000210000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0)

1m28.205368243s ago: executing program 6 (id=3270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x80, r3, 0x5, 0x70bd2a, 0xfffffffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x47, 0x1, 0x1, 0x8d64}}}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@mesh_chsw={0x76, 0x6, {0xd, 0xfd, 0x24, 0x4}}]}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

1m27.885961963s ago: executing program 6 (id=3271):
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0xb2, @empty, 0x100400}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0xb2, @empty, 0x100400}]}, &(0x7f0000000080)=0x10)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket$netlink(0x10, 0x3, 0xf) (async)
r1 = socket$netlink(0x10, 0x3, 0xf)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f"], 0x4c}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000380)="38657ba63fc15d99553a85d6453a9ef5633f805fdf207ef116687d5d9e36b08af95b0cb70cc9183d70176173bf68592d28dd52ea0d74c39feedd6b8d323580319ddd0197fc60bf3ede03d08e6e74a440ba3e57ec0c258dd3bcc054ec9e3f5ec00e9a70978538cf67348721e39198ef2af6a5295aa5137e47d9c74ec5f2f78c745b0ae0340cf86936cf5a39b3136fb7b468a30c517650fa6bcc3f7367c84aa06104e7de16949ce3f586b9392e6dbab1fbcd3ee65d736b2d0da60e4fbde540624a51a51ee60262b247b8f84a3cb0585b7d76a5ad861d610150cde1e2d6530e3be11b074bf44b980fbe1442f7da2dde0e842880", &(0x7f0000000280)=""/180, &(0x7f0000000480)="bbd31bab1236a3a66877279eae5e9621ec0f4dca0805062e7be58bfdbd0f51286368a60826ad42cc1df7e876508f37db76d6f19aa59a95b43aef24500735205577f553372103d4e6dbca9897793316f21cb183f676f08ae3308edf703c208e9ca67ee5e686a48118f2b97055160eb3e85986dc390f7ee08f316939b5bce5483cfa5242ed7b96e0b86b14b669d21a96be97e335e4cfbaf72d178f0360087c7879d0b297892224ce23f136de232e52b9c78c", &(0x7f0000000540)="6ede9feb607afc6f515bdd37c44fb6a48c0bd2accadc0c9c29ca308ed07b13406ce91c263f197474c579768e7d1605860d450c0ee293d0ca49386ba5cb412c9b78f5ccd2dc48114a6790a857bf0b517d626fccad7dccf5188a5a530c4f6c499b4756699b61d36e0c015423e499ee037af179b4c79d8ffd84390dc7820bf7a960c76e258d97cf21e5fedf37688b0eaf600b7d98ae73c5bee94d1b94d4", 0x809, r2, 0x4}, 0x38)

1m27.883622726s ago: executing program 6 (id=3272):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000200)={'virt_wifi0\x00', @multicast})
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x1402, 0x400, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0)

1m23.605550549s ago: executing program 7 (id=3292):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={0xfffffffffffffffc, 0x23000, 0x1000, 0x8, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x20000, 0xe, 0x0, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='/\x00'], 0x20)
recvmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/158, 0x9e}, 0x2}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair(0x72e29e8cf4bb5f0e, 0x800, 0x8, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000180)={{0x3c, @loopback, 0x4e21, 0x1, 'lblcr\x00', 0x20, 0x0, 0x46}, {@private=0xa010102, 0x4e20, 0x1, 0xe, 0x3fef, 0xffffff80}}, 0x44)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100000000c50000ff7f00001811000094f0369ad86edc7c", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000280ff030001000085100000fdffffff8520000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)
unshare(0x2000c00)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

1m22.742910687s ago: executing program 7 (id=3293):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110960000000000040f0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xb748, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"})

1m22.742216514s ago: executing program 7 (id=3294):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)="d13c9633909a", 0x0, 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='consume_skb\x00', r1}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0xffc3)

1m22.655006435s ago: executing program 7 (id=3295):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x1, 0x5, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)

1m22.594416549s ago: executing program 7 (id=3296):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x2, 0x84)
getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xc51e000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef)

1m22.292705898s ago: executing program 7 (id=3297):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'gre0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff9, 0xf}}, [@qdisc_kind_options=@q_netem={{}, {0x0, 0x2, {{0x5, 0x8, 0x9, 0x2, 0x1, 0x4}, [@TCA_NETEM_CORR={0x0, 0x1, {0xfffffff4, 0x7, 0xf17}}, @TCA_NETEM_SLOT={0x0, 0xc, {0x7, 0x401, 0x9, 0x0, 0x2, 0x3}}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {0x5, 0x5}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80488c1}, 0x44010)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)

1m13.513171788s ago: executing program 37 (id=3264):
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c000280050016000000000006000f000000000006000e0040"], 0x4c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c000280050016000000000006000f000000000006000e0040"], 0x4c}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r5, 0x0, 0x9)
mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) (async)
write$cgroup_devices(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000039a64d7381724eef60000070100"/26], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x6, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x6d) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x6, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x6d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r6}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r6}, 0x18)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)

1m12.489593721s ago: executing program 38 (id=3272):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000200)={'virt_wifi0\x00', @multicast})
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x1402, 0x400, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0)

1m8.893224679s ago: executing program 9 (id=3306):
socket(0x28, 0x80000, 0x200000a)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000000)=0x40093, 0x4)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, {[@routing={0x0, 0x0, 0x1, 0x4, 0x300}]}}}}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x2004})
epoll_wait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x1fffc002)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r1)
openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="b60bb7001b791900b0828180ce00f3fc26480000000000ad000000"], 0x2c}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1m7.307505445s ago: executing program 39 (id=3297):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'gre0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff9, 0xf}}, [@qdisc_kind_options=@q_netem={{}, {0x0, 0x2, {{0x5, 0x8, 0x9, 0x2, 0x1, 0x4}, [@TCA_NETEM_CORR={0x0, 0x1, {0xfffffff4, 0x7, 0xf17}}, @TCA_NETEM_SLOT={0x0, 0xc, {0x7, 0x401, 0x9, 0x0, 0x2, 0x3}}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {0x5, 0x5}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80488c1}, 0x44010)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)

1m6.690281961s ago: executing program 9 (id=3313):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async, rerun: 64)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) (async)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async, rerun: 32)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
socket(0xa, 0x3, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10) (async, rerun: 32)
sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) (async, rerun: 32)
sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) (async)
sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)

1m6.632124768s ago: executing program 9 (id=3314):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r0, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newaddr={0x34, 0x14, 0x800, 0x70bd28, 0x25dfdbff, {0xa, 0x1f, 0x13, 0xff, r6}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x34}}, 0x8000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)

1m6.471392682s ago: executing program 9 (id=3315):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000fe0f00005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0)

1m6.41226876s ago: executing program 9 (id=3317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000020000000000000d00000006000a00ffff000030a1fb38502e1631547a0dea57f727655ee5ee504a8da5d92d6000a03a3b57797a40020c71bb794945b8490411b8dd5d81224dc256df52e128da8c884b54e5672e62038688cc17f50b37ac5b7edfd2311710d3615faeceec204361488cd1731311ec2e9b8d859dfe7c877c000000000082d5c9051dbe1d9cd97990808a782dcc4f9a6104050e99760d8f87a5da694a9b364505fe24068dafbc90ef3e106700a2847f582825630660897b13703901e0f3a1e3918f3299794d6d40268a89ee17d1d3ef046276988d764eaed79a3155f63258a17cc8cb88ed048d2643e8111a243fdeffabffc9fe6df8751b9ff3ff11d01249a35471921dc875739aa4b1a5b8e7707687371ca8cd740baade76d4e557804f8483ca365f81a0"], 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x4)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r5, 0x0, 0x9)
mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r5, &(0x7f0000000480)=ANY=[@ANYRESOCT=r2], 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000040000000000850000002e0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r6}, 0x18)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x400041c0}, 0x880)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f00000005c0)=[{r4, 0x801c}, {r3, 0x2100}, {r0, 0x2}, {r8, 0x200}, {0xffffffffffffffff, 0x8005}], 0x5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, 0x0, 0x0)

1m5.410345683s ago: executing program 9 (id=3320):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095089831b1052443"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0)
gettid()
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005bf989bfb7ffff95d80000000000000000000000f900000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r6, 0x0, 0x0}, 0x10)
unshare(0x10000000)
gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0)
socket$key(0xf, 0x3, 0x2)

59.926432596s ago: executing program 8 (id=3364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x41, 0xfffffffffffffffe}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB="9294e7c4ff0343c685a061ba8443bc2816f70b5133584439fe6a3ebf9b92bbfae08a058b89d9b6d5c67ef5c2b673c1052679b43d0b37b65d125fd22d306e9a9800433471912a1d2eee8ae809507952d7bdc1ce21a10679fd521d6217e5678937859573c94996640c4ab20ca760785f9a30c1c43d2da9b40f96051dfc5e39103261524608cf500344ef2264e7978916d94795d40ba64323c58dcb6fe5f5a73b5b3a952d91e629e99fa75104de953832388889565234709fb57e661151ef1813fb9b29ce5884e11482f92ac4200b3e1fdd1f236716a5000609a989859956"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'caif0\x00'})
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)

59.81035308s ago: executing program 8 (id=3367):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01ffffffff39cae7e23d2e9aa50000000000", @ANYRES32=r10, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x17) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01ffffffff39cae7e23d2e9aa50000000000", @ANYRES32=r10, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)

59.691723457s ago: executing program 8 (id=3369):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000780)=ANY=[@ANYRESOCT=0x0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f01, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x86)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x4e010100)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r6)
syz_init_net_socket$ax25(0x3, 0x2, 0xc9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff})
r9 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
getsockopt$inet6_int(r9, 0x29, 0xd1, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYRES32=r8], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={<r11=>r8})
setsockopt$inet6_tcp_int(r11, 0x6, 0xa, &(0x7f0000000240)=0x3, 0x4)

59.593736972s ago: executing program 8 (id=3371):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) (async, rerun: 32)
r1 = socket(0x22, 0x6, 0x1) (rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x7f, 0x0, 0x1}, 0x3)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="28f7ff00520001000000001c00001014000000000000d65b147466a3035c10e7eefbf54a69c6a57055d531c3bb27f4f18866318924d6b17b179bdc8cc9caf38c", @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0) (async, rerun: 64)
accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x80000) (rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a00010000000500040002"], 0x88}}, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=<r3=>0x0, @ANYBLOB="0000000000000000000400000001000000800000", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="40000000100001042abd70000020000000000000", @ANYRES32=0x0, @ANYRES8=r3], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc2002062}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000306050000000000000000080a00000a0000020073797a31000000000900020073797a320025bc1ef3ec0000000900020073797a30000000000900020073797a310000000005000100070000000200020073797a"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x2)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="40000000090601020000000000000000020000000900020073797a31000000000500010007000000180007800c00018008000140000000000800094000000009a08da35dc21767856896aa75ac0fd03dc111868c860a5aa26a10fb55b0b0604d531c01e255f0883f0ae319409e46197f6f6313"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x8000) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) (async, rerun: 64)
r9 = epoll_create1(0x0) (rerun: 64)
ioctl$FS_IOC_SETFLAGS(r9, 0x40088a01, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000600)={0x40000008})
sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000300"], 0x28}, 0x1, 0x40030000000000, 0x0, 0x4}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})

59.533489202s ago: executing program 8 (id=3373):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0}) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="400100001000010028bd700000000000fc010000000000000000000000000001e000000100000000000000000000000000000000200000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000046c000000fe8000000000000000000000000000bb7298ffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000050000000000000004000000000000000d000000000000000ae6ffffff000000000000000004000000000000fcffffff02350000020001068a000000000000000800160040000000480003"], 0x140}}, 0x20000804) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

59.413541376s ago: executing program 8 (id=3375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r3, 0x0, 0x9)
mkdirat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
close(r1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r4}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000300)={0x3, 0xffffffff7fffffff})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000002c0))
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, 0x0, 0x0)

50.332233692s ago: executing program 40 (id=3320):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095089831b1052443"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0)
gettid()
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005bf989bfb7ffff95d80000000000000000000000f900000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r6, 0x0, 0x0}, 0x10)
unshare(0x10000000)
gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0)
socket$key(0xf, 0x3, 0x2)

44.274654153s ago: executing program 41 (id=3375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r3, 0x0, 0x9)
mkdirat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
close(r1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r4}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000300)={0x3, 0xffffffff7fffffff})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000002c0))
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, 0x0, 0x0)

38.01108373s ago: executing program 0 (id=3457):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

37.93213081s ago: executing program 0 (id=3458):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x34, r5, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x34, r5, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

37.621449915s ago: executing program 0 (id=3459):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000065400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0)

37.491284292s ago: executing program 0 (id=3460):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)=ANY=[@ANYBLOB="fade7126299bb2140000000402828b686a573e07040000bd70f17ab49382fd928d"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x80000001}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f00000000c0)={0x9, 0x2, 0x1, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x70}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$can_bcm(r4, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

37.439500469s ago: executing program 0 (id=3463):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f01, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x886b, 0x956b4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0)
unshare(0x62040200)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2d, 'rdma'}, {0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2b, 'cpu'}]}, 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r2, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f01, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x886b, 0x956b4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0) (async)
unshare(0x62040200) (async)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2d, 'rdma'}, {0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2b, 'cpu'}]}, 0x1c) (async)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r2, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8) (async)

35.553866181s ago: executing program 0 (id=3473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(r0, 0x0)
write$cgroup_devices(r3, 0x0, 0x9)
mkdirat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000009535c6dbde7cb83b45ee815592bc3211788352a8d29a5461ca36a93665429dd69037bf94c822a9591314580e910902525624009e1e6748fb48544f5280ce1c4949aeec48d5dd03434a077bc21fc07314c15cd6c08c3fbb3b4d1e601ab96c23d9188891dabcb7403cc76efaa6fe0ad59aae7fbe0baf3cb65872676b94cded10e1a43210cc5135b1739d485d57e0f953f9db085bf16eb2b62dde2193cef3d88c3063515ef01a596b29e473cb3911"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r4}, 0x18)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6, 0x8008}, {r5, 0x4464}, {r7, 0x710}, {r3, 0x4008}, {r4, 0xe59a}, {r0, 0x400}, {r2, 0x340}, {0xffffffffffffffff, 0x95e18e4e84369900}, {r3, 0x6030}], 0x9, 0x7f)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r11, @ANYBLOB="14002c80080000009d03"], 0x30}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)

35.105871856s ago: executing program 2 (id=3479):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x1c}}, 0x0)
write(r0, &(0x7f0000000180)="21cd829a16a43d71c955654f8c9f9459a30681291842573624e9a03478031a0f1a9c63768c8c120da2819dc969e544b1dd6d16dacf45ff32d378b9210514f8bb95fab755b52d9dcebd16bd0df482e27199", 0x51)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r4, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000180), &(0x7f00000002c0)=r6}, 0x20)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r2}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x100d76}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x1}}]}]}]}, 0x58}}, 0x0)

34.97182041s ago: executing program 2 (id=3480):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x20) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b80)={0x1014, 0x2d, 0x9, 0x70bd2c, 0x25dfdbfc, {0x3}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x11, &(0x7f0000000700)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRES8=r2, @ANYBLOB="1e5583d3b15c80d656b7b890d2ac9fcfc101140fac8ac8c483f4048890eb693510d941d541a04568a639fa43961cedb1f986991888a96f941af90d7286f8cac4e4e8f75fb1cd6a67cbfdab3d18991d1a63c17769a37b6c8a59200340ceec49bb5121f54d855bf0a597f02995fed326d6c0e7c6baa2ebbd11f06253c8a8349fa22a9975125bd30d5277b71073f99a52889412bc69903af6e7589787b444c5c9de8eea0a294dc9230029cf6e974f702d596299de350e23fef87ec4c41a20"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, 0x0, 0x0) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080), 0x2, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r7, r7, 0x0, 0x1) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000002c0)=ANY=[@ANYRES64=r8, @ANYRES16=r4, @ANYRES8=0x0, @ANYRESHEX=r8], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r10}, 0xc) (async)
r11 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r11, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0xc6120000) (async)
ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x8) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

34.89175919s ago: executing program 2 (id=3482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000140)={r3}, 0x8) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0}) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
bind$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendfile(0xffffffffffffffff, r7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0x28}}, 0x40000) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r10=>0x0}) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000400)={0x4, 0x800a, 0x2b, 0x11, r3}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r14, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x14, 0x1, 0xa, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x20004040)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="05005b"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

34.888830974s ago: executing program 2 (id=3483):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f01, 0x2b, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
unshare(0x62040200) (async)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r1, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)

33.689905978s ago: executing program 2 (id=3493):
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3d}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x850)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8001, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x80)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000340)=""/220, &(0x7f0000000440)=0xdc)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x74}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x800)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000580)={0x8, [0x6, 0xd, 0x7f, 0x3, 0x5862, 0x5, 0xc814, 0x9a56]}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@newtclass={0x54, 0x28, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0x10, 0xc}, {0xfff3, 0x1ffe2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @tclass_kind_options=@c_mq={0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008090}, 0x4000000)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r1)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000800)={0x31c, r6, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1c4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x13}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x12}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x138}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xc, @private0, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1928}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xe1a0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa483}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff8ff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x24000080}, 0x88c0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r2, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048811}, 0x8000)
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x94, r2, 0x110, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r8)
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x110, r10, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xf}, @void, @val={0xc, 0x99, {0x5, 0x56}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "14d99dd7aff7a7949440b597e3e064963c3007ead858972f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "504b6f557fea5e692d177209c3c41028bfca2828a579e573"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fff9746586c831ecbc3b394c87ebf6309df93c54cb728fd7"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a4231bf887f6dd5375ffd3d26e7c218178a0f9c71c0437ad"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x48000}, 0x20000041)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0xa0, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1e}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25b0f6547c79bea707cb6693e2292c2ccd47d7c376d05b1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000009}, 0x48000)
sendmsg$nl_route_sched(r4, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@getchain={0x44, 0x66, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1, 0xffe0}, {0x4, 0x8}, {0xa, 0x7}}, [{0x8, 0xb, 0xe3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xbc0}, {0x8, 0xb, 0x4b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
read(r8, &(0x7f00000013c0)=""/240, 0xf0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000014c0)={<r11=>0x0, 0xfc, "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"}, &(0x7f0000001600)=0x104)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001640)={r11, 0xfffe, 0x7}, &(0x7f0000001680)=0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r1)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r12, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x58, r10, 0xa00, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x4}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x49}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x4048004)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000001840))

32.830785309s ago: executing program 2 (id=3495):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x701, 0x70bd29, 0x25dfdbfb, {0x2, 0x80, 0x10, 0xf9, 0xfd, 0x5, 0xfd, 0xb, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000844}, 0x4800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, 0x0, 0x0)

30.390401996s ago: executing program 1 (id=3503):
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x401, 0x9, 0x1}, 0x10)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={<r1=>0x0, 0x1332, 0x1, [0x800]}, &(0x7f0000000080)=0xa)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x400, 0x10}, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, &(0x7f0000000180)=0x4)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/70, 0x46}, {&(0x7f0000000380)=""/160, 0xa0}], 0x3}, 0x10000)
r5 = accept4(r0, 0x0, &(0x7f00000004c0), 0x800)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000500)=@int=0x8, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000540)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x5f, 0x61, 0x61, 0x5f, 0x30]}}, &(0x7f00000005c0)=""/142, 0x2c, 0x8e, 0x0, 0x8}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r6, 0x20, &(0x7f0000000800)={&(0x7f00000006c0)=""/191, 0xbf, 0x0, &(0x7f0000000780)=""/82, 0x52}}, 0x10)
write$ppp(0xffffffffffffffff, &(0x7f0000000880)="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", 0x1000)
sendmsg$NFT_BATCH(r5, &(0x7f00000023c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002380)={&(0x7f00000018c0)={{0x14}, [@NFT_MSG_DELOBJ={0x170, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x66, 0x8, "49b7c793f15217b8b580c5146a96a249a26062169e453c143a3dee1ea21a24c60af7f1d4a85f0f7b7fa7093833b43d760fee944aff0d4683fc6132e932b1452910d2a34ebfa9840c8a65557560f85c5ec1f45797cffc8aa5ff3ab78c64896246ef1d"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xdd, 0x8, "9bfad513a38b38522b927dea9bf69c60faa0c339b8be348586775c34f72c3d47880faebc639565485ce05b4fcee9994b645f759e068b65538a29d9cf49fcab8b4070f8e30f16182c37c2a63e4358548307bd5a463db96cfe6794713d90b8cd055f4c905b5119f5f201b606e60d1b5600fcc73f613df2268385fee319734fefd9f7a69f93f46fb37ae3a51690ee4bab0831bf9fb67809a1a1a29ffe2986458107f1ce029500d005598d6508620cf9eb5e67c4a74ba97eaa136a8c6c37db1e038a6814e4225a79c778eccd179151f4e2047d4dd57f0b2ebea8e4"}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5d0, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x588, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1cd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, @NFTA_SET_DESC_CONCAT={0x1f4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x22f7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x94cd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd71a}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcd}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffaa7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfbd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca38}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf9c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x47a3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x1a4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd052}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbb8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x146f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xda}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x25}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3be}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2eb2b1c6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0xf0, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffde4c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x45bc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x29c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c4, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x2eb658f7e31b9d46}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xcc, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x9c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x24, 0x1, "6a7272d3b89adee12c240cf3cd342a1cb8d0ea56669146af232604f0502b106a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3b}]}}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0xaa0}, 0x1, 0x0, 0x0, 0x8814}, 0x4004)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000002400)=@generic={0x1, 0x0, 0xff})
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000002440)=@sack_info={r1, 0x0, 0x604}, 0xc)
pipe(&(0x7f0000002480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$ITER_CREATE(0x21, &(0x7f00000024c0)={r6}, 0x8)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002740)={0x1b, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r6, 0x2, 0x3, 0x5}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@bloom_filter={0x1e, 0x9, 0x1, 0x2, 0x8, 0x1, 0x30c8, '\x00', 0x0, r6, 0x5, 0x5, 0x0, 0xc}, 0x50)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r6, 0x2, 0x3, 0x4}, 0x50)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000028c0)='cpuacct.usage_percpu\x00', 0x0, 0x0)
pipe(&(0x7f0000002900)={<r13=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000029c0)={{0xffffffffffffffff, <r14=>0xffffffffffffffff}, &(0x7f0000002940), &(0x7f0000002980)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a40)={0x18, 0xd, &(0x7f0000002500)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], &(0x7f0000002580)='GPL\x00', 0x4, 0xef, &(0x7f00000025c0)=""/239, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000026c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000002700)={0x3, 0xc, 0x9, 0xfffff8ce}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002a00)=[r9, r10, 0xffffffffffffffff, r11, 0xffffffffffffffff, r12, r13, r14], 0x0, 0x10, 0x15}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0x7, &(0x7f0000002b00)={0x0, 0x5, 0x4c, 0x7f}, 0x10)

29.539397216s ago: executing program 1 (id=3504):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000185400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0)

29.419776063s ago: executing program 1 (id=3505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x2000000) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x2000000)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x1, 0x3, 0x2, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x1, 0x3, 0x2, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x5, 0xa, 0x5) (async)
socket(0x5, 0xa, 0x5)
ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000580)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20)
sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="16", 0x1}], 0x1}}], 0x2, 0x4000050) (async)
sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="16", 0x1}], 0x1}}], 0x2, 0x4000050)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_BEACON_TAIL={0x4}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

29.361653845s ago: executing program 1 (id=3506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6ad}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040080}, 0x1) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0}) (async)
r10 = socket(0xa, 0x2, 0x0)
getsockopt$nfc_llcp(r10, 0x88, 0xb, 0x0, 0x20000000)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

29.357732215s ago: executing program 1 (id=3507):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802eff"], 0x20}], 0x1}, 0x300)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$alg(r2, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004011}, 0x4c040)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x2, 0x4)

28.441398201s ago: executing program 1 (id=3508):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0) (async)
write$cgroup_devices(r2, 0x0, 0x9) (async)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff) (async)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000008500c3a9db111ee409e800002e00000071629164b8268220044d8947c3a1e867bb18"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0)

20.418461436s ago: executing program 42 (id=3473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(r0, 0x0)
write$cgroup_devices(r3, 0x0, 0x9)
mkdirat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000009535c6dbde7cb83b45ee815592bc3211788352a8d29a5461ca36a93665429dd69037bf94c822a9591314580e910902525624009e1e6748fb48544f5280ce1c4949aeec48d5dd03434a077bc21fc07314c15cd6c08c3fbb3b4d1e601ab96c23d9188891dabcb7403cc76efaa6fe0ad59aae7fbe0baf3cb65872676b94cded10e1a43210cc5135b1739d485d57e0f953f9db085bf16eb2b62dde2193cef3d88c3063515ef01a596b29e473cb3911"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r4}, 0x18)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f00000003c0)=[{r6, 0x8008}, {r5, 0x4464}, {r7, 0x710}, {r3, 0x4008}, {r4, 0xe59a}, {r0, 0x400}, {r2, 0x340}, {0xffffffffffffffff, 0x95e18e4e84369900}, {r3, 0x6030}], 0x9, 0x7f)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r11, @ANYBLOB="14002c80080000009d03"], 0x30}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)

17.762888214s ago: executing program 43 (id=3495):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x701, 0x70bd29, 0x25dfdbfb, {0x2, 0x80, 0x10, 0xf9, 0xfd, 0x5, 0xfd, 0xb, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000844}, 0x4800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, 0x0, 0x0)

13.579371387s ago: executing program 4 (id=3522):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x2f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0xfca1}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl(r2, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1216409507ef4a44e")
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @random="b33ccef3b175"}}]}]}]}, 0x6c}}, 0x0)
setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0xff, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r5, &(0x7f0000000540)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x5}, @mpls={[], @ipv6=@icmpv6={0x2, 0x6, "a88a5c", 0x38, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, {[], @dest_unreach={0x1, 0x5, 0x0, 0x6, '\x00', {0x4, 0x6, "31ef2d", 0x2, 0x0, 0x1, @private0, @mcast1, [@hopopts]}}}}}}, 0x6e)
unshare(0x20000400)
socket(0xa, 0x3, 0x87)

13.207659775s ago: executing program 4 (id=3523):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0}) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000019e7fd0000000000000000001d0109004d000f80b6aa883c187282c63edaa1b3ea115e04461472d9973f4b900698029295939c4cbea231f241a3303a20c23a798bb88410e2247554e77adbc729a361e05fb347fbb89e064fa08f0bc302dedd15b1829ca49900000016801b53f9b7b9cbda246cdb27bec8c018ef5b7fbfd34b8ae89e37306aa30768731e8379134ed5b956bc847e532a6256f7"], 0x64}}, 0x0) (async)
setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f00000000c0)=0x5, 0x4) (async)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x1, 0x4) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1}, 0x40)
syz_emit_ethernet(0x3a, &(0x7f00000007c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802eff"], 0x20}], 0x1}, 0x300) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r6=>0x0}) (async)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000400)={0x1d, r1}, 0x10)
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r5, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x20048001)

13.205168973s ago: executing program 44 (id=3508):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0) (async)
write$cgroup_devices(r2, 0x0, 0x9) (async)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff) (async)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000008500c3a9db111ee409e800002e00000071629164b8268220044d8947c3a1e867bb18"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0)

12.830274028s ago: executing program 4 (id=3525):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xffffffffffffff59, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0xb2, @empty, 0x400}]}, &(0x7f0000000080)=0x10)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xf)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={<r4=>r0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="110000000000000000000a000000faff0680"], 0x18}}, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2aa93489", @ANYRES16=r6, @ANYBLOB="20002dbd7000fcdbdf25080000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008084)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, 0x0, &(0x7f00000001c0))
ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000080)={0x10000, 0x58, 0x9, 0xc, 0x3})
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x4048090)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f"], 0x4c}}, 0x0)

11.412134391s ago: executing program 4 (id=3526):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f00000003c0)=ANY=[@ANYBLOB="f900000058000000780c6f781c25f5e0c2c5a57968e6fb03354b774b9687baecd6aea8ebcd27890fb3cdce79542749d12ed3131df1a2261b8c65a2ce1d439d475f242ad3c84f6248f9e422b8bde10c105ea20e1bec9ca84ad69feea6816952cb"])
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', r4, @sk_msg}, 0x94)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r6, r6, 0x0, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x1a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r9}, 0xc)
r10 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r10, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0xc6120000)
ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}}, [@policy_type={0xa, 0x10, {0x3}}]}, 0x5c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

11.103914683s ago: executing program 3 (id=3510):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000850000002e0000809500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r5, 0x29, 0x1d, 0x0, &(0x7f0000000640))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300021c000000000003a715cd0c001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b140936aefd5769368f40653727f7526af11d10fafc11b91ced9d4ae3916383fb98fc275e11f5bed4ec3469dd878bea99164e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d6200000000000000030006000000000002000000ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x8800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)

4.583386667s ago: executing program 4 (id=3527):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea", 0xb5}], 0x1}}], 0x1, 0x81)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x11e, 0x484, 0x0, &(0x7f0000000040))
r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYBLOB="3c00ff00"/16], 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, 0x140c, 0x300, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x144, r7, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x288}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x165}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffe01}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c2}]]}, 0x144}, 0x1, 0x0, 0x0, 0x14}, 0x4040001)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x1c, r3, 0x8, 0x4, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r11, @ANYBLOB="bbb0ba2b982da7c8907ac3cb2be3b51b954580ef816af48d89477587f1d3aa734fefb5bbb0724d78c0ede1e860662d3d7d9d20fe00afd537238566d6b7cd"], 0x1c}, 0x1, 0x0, 0x0, 0x4c845}, 0x20068041)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0xd956ce61b30c7ab8]}}, 0x0, 0x28, 0x0, 0x1}, 0x28)
ioctl$SIOCSIFHWADDR(r13, 0x8923, &(0x7f00000000c0)={'batadv_slave_1\x00', @random="01320136b1ff"})
r14 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', <r15=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="00022bbd70dbdf2501000008003b000600000005003300000000000800060000", @ANYRES32=r15, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2)

4.581523792s ago: executing program 3 (id=3528):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100fa000000000000000c0000000c00000004fffffffb0000000000000402000000005f306000"], 0x0, 0x29}, 0x28) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
syz_emit_ethernet(0x2eb, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="34000000060000000000000006"], 0x48) (rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000) (async)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4040010) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="010000201000"}) (async)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
epoll_pwait(r4, &(0x7f0000000040)=[{}, {}], 0x2, 0x2d516fb6, 0x0, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001})
getpeername$unix(r5, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e)

1.320030289s ago: executing program 4 (id=3529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000080))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d39, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000300)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x66}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}]}]}, 0x28}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r8)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)

1.319506776s ago: executing program 3 (id=3530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0, 0x4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0, 0x4}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r5, 0x8b2d, &(0x7f0000000040))
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r1}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r8, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan4\x00'})

0s ago: executing program 3 (id=3531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
r6 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_proto_private(r6, 0x89ee, &(0x7f0000000080)="decb9b3443a0")
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)

kernel console output (not intermixed with test programs):

netlink: 'syz.0.2793': attribute type 1 has an invalid length.
[  330.816959][T18232] 8021q: adding VLAN 0 to HW filter on device bond11
[  330.848399][T18232] veth17: entered promiscuous mode
[  331.396994][T18305] netlink: 'syz.0.2808': attribute type 2 has an invalid length.
[  331.399600][T18305] netlink: 'syz.0.2808': attribute type 1 has an invalid length.
[  331.406375][T18305] netlink: 'syz.0.2808': attribute type 23 has an invalid length.
[  331.411346][T18299] netlink: 'syz.1.2804': attribute type 10 has an invalid length.
[  331.793413][T18324] dvmrp8: entered allmulticast mode
[  332.167621][T18323] dvmrp8: left allmulticast mode
[  332.381199][T18342] __nla_validate_parse: 14 callbacks suppressed
[  332.381219][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'.
[  332.412199][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'.
[  332.423549][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2819'.
[  332.438930][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2819'.
[  332.441869][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2819'.
[  332.944771][T18373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  333.015334][T18367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.820714][T18406] validate_nla: 3 callbacks suppressed
[  333.820730][T18406] netlink: 'syz.1.2831': attribute type 13 has an invalid length.
[  333.826681][T18406] netlink: 'syz.1.2831': attribute type 17 has an invalid length.
[  333.835929][T18406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  333.972324][T18416] mac80211_hwsim hwsim227 wlan0: entered promiscuous mode
[  333.979011][T18416] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  333.991406][T18416] netlink: 'syz.2.2832': attribute type 1 has an invalid length.
[  333.999684][T18416] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2832'.
[  334.014163][T18418] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2835'.
[  334.342496][T18436] batadv_slave_0: left promiscuous mode
[  334.346828][T18436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  334.670233][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2843'.
[  335.550664][T18483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2848'.
[  335.646521][T18477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.649148][T18477] syzkaller0: entered promiscuous mode
[  335.651080][T18477] syzkaller0: entered allmulticast mode
[  335.665534][T18484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2848'.
[  335.704443][T18477] tipc: Resetting bearer <eth:syzkaller0>
[  335.785103][T18470] tipc: Resetting bearer <eth:syzkaller0>
[  335.798968][T18470] tipc: Disabling bearer <eth:syzkaller0>
[  335.821722][T18492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.827525][T18492] syzkaller0: entered promiscuous mode
[  335.829527][T18492] syzkaller0: entered allmulticast mode
[  335.837004][T18490] tipc: Resetting bearer <eth:syzkaller0>
[  335.864380][T18490] tipc: Disabling bearer <eth:syzkaller0>
[  336.561717][T18520] syzkaller1: entered promiscuous mode
[  336.564446][T18520] syzkaller1: entered allmulticast mode
[  337.442809][T18554] __nla_validate_parse: 5 callbacks suppressed
[  337.442821][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2863'.
[  337.517963][T18558] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  337.763164][T18580] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  337.951921][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2873'.
[  338.008963][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2874'.
[  338.012610][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2874'.
[  338.102901][T18614] IPv6: sit3: Disabled Multicast RS
[  338.113179][T18614] sit3: entered allmulticast mode
[  338.489848][T18643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2884'.
[  338.493333][T18643] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2884'.
[  338.518017][T18641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  338.559281][T18643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'.
[  338.636185][T18652] netlink: 'syz.0.2885': attribute type 13 has an invalid length.
[  338.639170][T18652] netlink: 'syz.0.2885': attribute type 17 has an invalid length.
[  338.645679][T18652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  339.045332][T18662] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  339.195271][T18679] netlink: 'syz.2.2890': attribute type 1 has an invalid length.
[  339.215149][T18679] 8021q: adding VLAN 0 to HW filter on device bond10
[  339.233636][T18679] veth17: entered promiscuous mode
[  339.243029][T18679] bond10: (slave veth17): Enslaving as a backup interface with a down link
[  339.260847][T18680] veth19: entered promiscuous mode
[  339.266816][T18680] bond10: (slave veth19): Enslaving as a backup interface with a down link
[  339.452442][T18696] tipc: MTU too low for tipc bearer
[  339.732408][T18725] netlink: 'syz.2.2899': attribute type 1 has an invalid length.
[  339.771458][T18725] 8021q: adding VLAN 0 to HW filter on device bond11
[  339.793457][T18725] veth21: entered promiscuous mode
[  339.799577][T18725] bond11: (slave veth21): Enslaving as a backup interface with a down link
[  339.805469][T18725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2899'.
[  339.977342][T18745] netlink: 'syz.1.2905': attribute type 3 has an invalid length.
[  340.057477][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'.
[  340.061825][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'.
[  340.099385][T18758] netlink: 'syz.0.2909': attribute type 13 has an invalid length.
[  340.102411][T18758] netlink: 'syz.0.2909': attribute type 17 has an invalid length.
[  340.109923][T18758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  340.142700][T18759] netlink: 'syz.1.2908': attribute type 10 has an invalid length.
[  340.188322][T18770] netlink: 'syz.0.2911': attribute type 11 has an invalid length.
[  340.500555][T18795] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[  340.506543][T18795] netlink: 'syz.1.2918': attribute type 3 has an invalid length.
[  340.644274][T18801] 8021q: adding VLAN 0 to HW filter on device bond10
[  340.669629][T18801] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  340.674947][T18801] bond10: (slave macvlan2): Enslaving as a backup interface with a down link
[  340.713238][T18801] bond10: (slave macvlan2): Releasing backup interface
[  341.309690][T18853] netlink: 'syz.0.2929': attribute type 12 has an invalid length.
[  341.412155][T18860] netlink: 'syz.1.2931': attribute type 74 has an invalid length.
[  341.477035][T18866] mac80211_hwsim hwsim220 wlan1: left allmulticast mode
[  342.198924][T18915] syzkaller0: entered promiscuous mode
[  342.200697][T18915] syzkaller0: entered allmulticast mode
[  342.205610][ T5876] syzkaller0: tun_net_xmit 70
[  342.208826][T18915] syzkaller0: tun_chr_ioctl cmd 1074025677
[  342.210784][T18915] syzkaller0: Linktype set failed because interface is up
[  342.437039][T18935] team0: Mode changed to "loadbalance"
[  342.549745][T18946] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  342.700238][T18963] netlink: 'syz.1.2955': attribute type 12 has an invalid length.
[  343.057159][T18982] __nla_validate_parse: 15 callbacks suppressed
[  343.057179][T18982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2960'.
[  343.098643][T18983] mac80211_hwsim hwsim235 wlan0: entered promiscuous mode
[  343.101237][T18983] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  343.829522][T19059] IPVS: sync thread started: state = BACKUP, mcast_ifn = caif0, syncid = 4, id = 0
[  344.920081][T19113] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2987'.
[  345.303258][T19143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2994'.
[  345.406430][T19147] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2996'.
[  345.452882][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'.
[  345.459329][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'.
[  345.482383][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'.
[  345.486881][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'.
[  345.605603][T19160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3001'.
[  345.929409][T19170] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  345.933241][T19170] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  346.097943][T19190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3007'.
[  346.216913][T19195] can: request_module (can-proto-0) failed.
[  346.360762][T19210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  346.410953][T19199] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  346.630831][T19238] netlink: 'syz.2.3017': attribute type 10 has an invalid length.
[  346.739510][T19245] netlink: 'syz.1.3019': attribute type 1 has an invalid length.
[  348.040639][T19266] infiniband syz0: set down
[  348.050077][T19266] infiniband syz0: added veth1_to_hsr
[  348.052436][T19266] syz0: rxe_create_cq: returned err = -12
[  348.064258][T19266] infiniband syz0: Couldn't create ib_mad CQ
[  348.068754][T19266] infiniband syz0: Couldn't open port 1
[  348.106451][T19266] RDS/IB: syz0: added
[  348.107752][T19266] smc: adding ib device syz0 with port count 1
[  348.109955][T19266] smc:    ib device syz0 port 1 has pnetid 
[  348.483669][T19316] netlink: 'syz.2.3031': attribute type 6 has an invalid length.
[  348.586738][T19313] netlink: 'syz.2.3031': attribute type 10 has an invalid length.
[  348.822418][T19324] __nla_validate_parse: 5 callbacks suppressed
[  348.822435][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'.
[  349.168042][T19347] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  349.228759][ T5914] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  349.231531][ T5914] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  349.237547][ T5914] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  349.240459][ T5914] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  349.243381][ T5914] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  349.249811][ T5914] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  349.257685][ T5914] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  349.261502][ T5914] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  349.279734][T19347] ip6erspan0: entered promiscuous mode
[  350.422967][T19436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3051'.
[  351.037478][T19473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3061'.
[  351.040435][T19473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3061'.
[  351.043372][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3061'.
[  351.145825][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3062'.
[  351.163603][T19481] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.223397][T19488] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3064'.
[  351.620949][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'.
[  351.675441][T19524] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3071'.
[  351.984749][T19565] netlink: 'syz.1.3078': attribute type 10 has an invalid length.
[  352.057681][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'.
[  353.531016][T19689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.575888][T19686] lo: entered allmulticast mode
[  353.589335][T19694] netlink: 'syz.0.3108': attribute type 1 has an invalid length.
[  353.681483][T19694] veth19: entered promiscuous mode
[  353.692530][T19700] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.701262][T19700] bond0: (slave rose0): Enslaving as an active interface with an up link
[  353.843204][T19713] netlink: 'syz.2.3112': attribute type 10 has an invalid length.
[  353.863514][T19711] __nla_validate_parse: 15 callbacks suppressed
[  353.863531][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3113'.
[  354.135040][T19726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3114'.
[  354.142017][T19726] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  354.148039][T19726] CPU: 1 UID: 0 PID: 19726 Comm: syz.1.3114 Not tainted syzkaller #0 PREEMPT(full) 
[  354.148053][T19726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  354.148059][T19726] Call Trace:
[  354.148064][T19726]  <TASK>
[  354.148069][T19726]  dump_stack_lvl+0x189/0x250
[  354.148085][T19726]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.148097][T19726]  ? __pfx__printk+0x10/0x10
[  354.148111][T19726]  ? kernfs_path_from_node+0x2f/0x290
[  354.148122][T19726]  ? kernfs_path_from_node+0x250/0x290
[  354.148146][T19726]  ? kernfs_path_from_node+0x2f/0x290
[  354.148158][T19726]  sysfs_warn_dup+0x8e/0xa0
[  354.148167][T19726]  sysfs_do_create_link_sd+0xc0/0x110
[  354.148177][T19726]  device_add_class_symlinks+0x1cf/0x240
[  354.148189][T19726]  device_add+0x475/0xb50
[  354.148199][T19726]  wiphy_register+0x1ba6/0x28d0
[  354.148238][T19726]  ? __pfx_wiphy_register+0x10/0x10
[  354.148250][T19726]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  354.148264][T19726]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  354.148276][T19726]  ieee80211_register_hw+0x3425/0x4080
[  354.148294][T19726]  ? ieee80211_register_hw+0x1471/0x4080
[  354.148308][T19726]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  354.148320][T19726]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  354.148340][T19726]  ? __hrtimer_setup+0x187/0x210
[  354.148353][T19726]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  354.148376][T19726]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  354.148414][T19726]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  354.148425][T19726]  ? trace_kmalloc+0x1f/0xd0
[  354.148436][T19726]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  354.148447][T19726]  ? kstrndup+0xbf/0x160
[  354.148462][T19726]  hwsim_new_radio_nl+0xea4/0x1b10
[  354.148474][T19726]  ? __pfx___nla_validate_parse+0x10/0x10
[  354.148493][T19726]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  354.148510][T19726]  ? __nla_parse+0x40/0x60
[  354.148523][T19726]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  354.148538][T19726]  genl_family_rcv_msg_doit+0x215/0x300
[  354.148551][T19726]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  354.148568][T19726]  ? bpf_lsm_capable+0x9/0x20
[  354.148579][T19726]  ? security_capable+0x7e/0x2e0
[  354.148594][T19726]  genl_rcv_msg+0x60e/0x790
[  354.148607][T19726]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.148615][T19726]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  354.148632][T19726]  netlink_rcv_skb+0x208/0x470
[  354.148643][T19726]  ? __lock_acquire+0xab9/0xd20
[  354.148655][T19726]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.148665][T19726]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.148686][T19726]  ? down_read+0x1ad/0x2e0
[  354.148695][T19726]  genl_rcv+0x28/0x40
[  354.148703][T19726]  netlink_unicast+0x82f/0x9e0
[  354.148725][T19726]  ? __pfx_netlink_unicast+0x10/0x10
[  354.148738][T19726]  ? netlink_sendmsg+0x642/0xb30
[  354.148749][T19726]  ? skb_put+0x11b/0x210
[  354.148760][T19726]  netlink_sendmsg+0x805/0xb30
[  354.148777][T19726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.148791][T19726]  ? aa_sock_msg_perm+0xf1/0x1d0
[  354.148800][T19726]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  354.148809][T19726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.148821][T19726]  __sock_sendmsg+0x21c/0x270
[  354.148834][T19726]  ____sys_sendmsg+0x505/0x830
[  354.148845][T19726]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.148858][T19726]  ? import_iovec+0x74/0xa0
[  354.148869][T19726]  ___sys_sendmsg+0x21f/0x2a0
[  354.148879][T19726]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.148905][T19726]  ? __fget_files+0x2a/0x420
[  354.148917][T19726]  ? __fget_files+0x3a0/0x420
[  354.148958][T19726]  __x64_sys_sendmsg+0x19b/0x260
[  354.148972][T19726]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.148986][T19726]  ? rcu_is_watching+0x15/0xb0
[  354.148998][T19726]  ? do_syscall_64+0xbe/0x3b0
[  354.149014][T19726]  do_syscall_64+0xfa/0x3b0
[  354.149025][T19726]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.149036][T19726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.149044][T19726]  ? exc_page_fault+0x9f/0xf0
[  354.149056][T19726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.149064][T19726] RIP: 0033:0x7f41cb18ebe9
[  354.149073][T19726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.149081][T19726] RSP: 002b:00007f41cc009038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.149091][T19726] RAX: ffffffffffffffda RBX: 00007f41cb3b5fa0 RCX: 00007f41cb18ebe9
[  354.149097][T19726] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d
[  354.149103][T19726] RBP: 00007f41cb211e19 R08: 0000000000000000 R09: 0000000000000000
[  354.149109][T19726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.149114][T19726] R13: 00007f41cb3b6038 R14: 00007f41cb3b5fa0 R15: 00007ffc470ac9b8
[  354.149129][T19726]  </TASK>
[  354.741653][T19762] netlink: 'syz.1.3124': attribute type 10 has an invalid length.
[  354.916509][T19772] netlink: 'syz.2.3127': attribute type 10 has an invalid length.
[  355.318624][T19788] netlink: 'syz.2.3129': attribute type 10 has an invalid length.
[  355.336796][T19794] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3130'.
[  355.610565][T19806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3133'.
[  355.834237][T19824] netlink: 'syz.1.3136': attribute type 13 has an invalid length.
[  355.837619][T19824] netlink: 'syz.1.3136': attribute type 17 has an invalid length.
[  355.841420][T19824] lo: left allmulticast mode
[  355.878206][T19824] 8021q: adding VLAN 0 to HW filter on device team0
[  355.890512][T19824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  355.952857][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'.
[  356.081697][T19839] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  358.171408][T19850] pimreg: tun_chr_ioctl cmd 2147767506
[  358.408853][T19852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3144'.
[  359.552235][T19891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  359.674767][T19894] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  360.070329][T19908] mac80211_hwsim hwsim136 syzkaller0: Caught tx_queue_len zero misconfig
[  371.562979][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.568175][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.571947][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.592788][T19924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.598519][T19924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.602513][T19924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.607204][T19924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.610538][T19924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.620656][T19925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.623581][T19925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.710527][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.712992][T19925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.717043][T19925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.720615][T19925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.722952][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.726368][T19925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.729348][T19925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.732529][T19925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.745341][T19925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.748556][T19925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  372.227312][T19922] chnl_net:caif_netlink_parms(): no params data found
[  372.305859][T19922] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.308212][T19922] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.310533][T19922] bridge_slave_0: entered allmulticast mode
[  372.313324][T19922] bridge_slave_0: entered promiscuous mode
[  372.319493][T19922] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.321774][T19922] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.325181][T19922] bridge_slave_1: entered allmulticast mode
[  372.328143][T19922] bridge_slave_1: entered promiscuous mode
[  372.355837][T19922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.361800][T19922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.397291][T19922] team0: Port device team_slave_0 added
[  372.402957][T19922] team0: Port device team_slave_1 added
[  372.450694][T19922] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.453086][T19922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.461517][T19922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.467660][T19922] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.469880][T19922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.478754][T19922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.498289][T19919] chnl_net:caif_netlink_parms(): no params data found
[  372.545724][T19922] hsr_slave_0: entered promiscuous mode
[  372.548642][T19922] hsr_slave_1: entered promiscuous mode
[  372.551345][T19922] debugfs: 'hsr0' already exists in 'hsr'
[  372.553554][T19922] Cannot create hsr debugfs directory
[  372.623437][T19919] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.626360][T19919] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.628723][T19919] bridge_slave_0: entered allmulticast mode
[  372.631547][T19919] bridge_slave_0: entered promiscuous mode
[  372.635643][T19919] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.637845][T19919] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.640177][T19919] bridge_slave_1: entered allmulticast mode
[  372.643184][T19919] bridge_slave_1: entered promiscuous mode
[  372.682729][T19919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.691760][T19919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.731697][T19919] team0: Port device team_slave_0 added
[  372.739533][T19919] team0: Port device team_slave_1 added
[  372.770103][T19919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.773107][T19919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.783191][T19919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.787813][T19919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.789980][T19919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.798210][T19919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.843526][T19919] hsr_slave_0: entered promiscuous mode
[  372.846247][T19919] hsr_slave_1: entered promiscuous mode
[  372.848446][T19919] debugfs: 'hsr0' already exists in 'hsr'
[  372.850204][T19919] Cannot create hsr debugfs directory
[  372.877248][T19922] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  372.892348][T19922] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  372.902020][T19922] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  372.912037][T19922] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  372.982526][T19922] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.985306][T19922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.987987][T19922] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.990424][T19922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.064573][T19919] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  373.073288][T19919] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  373.080448][T19919] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  373.087314][T19919] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  373.109939][T19922] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.127070][T19919] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.129992][T19919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.133088][T19919] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.136053][T19919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.149034][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.153333][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.160521][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.163622][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.176417][T19922] 8021q: adding VLAN 0 to HW filter on device team0
[  373.193834][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.196226][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.210008][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.212547][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.271723][T19919] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.288844][T19919] 8021q: adding VLAN 0 to HW filter on device team0
[  373.295423][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.297691][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.307051][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.309347][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.386380][T19922] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.460917][T19919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.505643][T19919] veth0_vlan: entered promiscuous mode
[  373.512463][T19919] veth1_vlan: entered promiscuous mode
[  373.541443][T19919] veth0_macvtap: entered promiscuous mode
[  373.548723][T19919] veth1_macvtap: entered promiscuous mode
[  373.576058][T19919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.589365][T19919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.609518][ T5914] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.617264][ T5711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.628392][ T5711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.631183][ T5711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.635910][T19922] veth0_vlan: entered promiscuous mode
[  373.658847][T19922] veth1_vlan: entered promiscuous mode
[  373.705981][T19922] veth0_macvtap: entered promiscuous mode
[  373.720366][T19922] veth1_macvtap: entered promiscuous mode
[  373.725640][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.728773][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.737262][T19922] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.744050][ T5234] Bluetooth: hci4: command tx timeout
[  373.783759][T19922] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.800953][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.803392][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.803947][ T5876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.823332][ T5876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.828743][ T5234] Bluetooth: hci3: command tx timeout
[  373.841245][ T5876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.848238][ T5876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.949869][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.953368][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.990269][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.992636][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.613944][T20003] netlink: 'syz.3.3165': attribute type 10 has an invalid length.
[  374.618043][T20003] bond0: (slave wlan1): Opening slave failed
[  374.915588][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3170'.
[  374.973343][T20017] netlink: 'syz.3.3170': attribute type 10 has an invalid length.
[  374.977848][T20017] bond0: (slave wlan1): Opening slave failed
[  375.287657][T20033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3174'.
[  375.676359][T20046] netlink: 'syz.3.3178': attribute type 13 has an invalid length.
[  375.678717][T20046] netlink: 'syz.3.3178': attribute type 17 has an invalid length.
[  375.697003][T20015] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  375.698849][T20015] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  375.707684][T20015] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  375.709551][T20015] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  375.742168][T20046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.757981][T19925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  375.762268][T19925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  375.767199][T19925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  375.773118][T19925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  375.778842][T19925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  375.865121][T20052] netlink: 'syz.3.3179': attribute type 13 has an invalid length.
[  375.875323][T20052] netlink: 'syz.3.3179': attribute type 17 has an invalid length.
[  375.898403][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  375.904673][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  375.907542][T20052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.916905][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  375.922271][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  375.929228][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.415879][T20061] tc_dump_action: action bad kind
[  376.507664][T20061] netlink: 'syz.3.3181': attribute type 12 has an invalid length.
[  376.510236][T20061] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3181'.
[  376.519596][T20044] chnl_net:caif_netlink_parms(): no params data found
[  376.616756][T20074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3182'.
[  376.618715][T20044] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.623266][T20044] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.628116][T20044] bridge_slave_0: entered allmulticast mode
[  376.630979][T20044] bridge_slave_0: entered promiscuous mode
[  376.636672][T20044] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.639134][T20044] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.641771][T20044] bridge_slave_1: entered allmulticast mode
[  376.650008][T20044] bridge_slave_1: entered promiscuous mode
[  376.676086][T20044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.681496][T20044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.707685][T20044] team0: Port device team_slave_0 added
[  376.711212][T20044] team0: Port device team_slave_1 added
[  376.744229][T20044] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.746571][T20044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.756382][T20044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.765658][T20044] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.768497][T20044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.778870][T20044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.829514][T20044] hsr_slave_0: entered promiscuous mode
[  376.832930][T20044] hsr_slave_1: entered promiscuous mode
[  376.836441][T20044] debugfs: 'hsr0' already exists in 'hsr'
[  376.838694][T20044] Cannot create hsr debugfs directory
[  377.118539][T20081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.125559][T20081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3184'.
[  377.196064][T20044] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  377.201749][T20044] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  377.208485][T20044] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  377.215565][T20044] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  377.239917][T20044] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.242254][T20044] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.245228][T20044] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.247564][T20044] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.300487][T20044] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.318930][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.322995][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.337218][T20044] 8021q: adding VLAN 0 to HW filter on device team0
[  377.346177][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.349103][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.368723][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.371144][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.524557][T20044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.729505][T20044] veth0_vlan: entered promiscuous mode
[  377.746879][T20044] veth1_vlan: entered promiscuous mode
[  377.772478][T20044] veth0_macvtap: entered promiscuous mode
[  377.778652][T20044] veth1_macvtap: entered promiscuous mode
[  377.791628][T20044] batman_adv: batadv0: Interface activated: batadv_slave_0
[  377.802374][T20044] batman_adv: batadv0: Interface activated: batadv_slave_1
[  377.812097][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.815713][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.818596][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.821356][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.859017][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'.
[  377.861988][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'.
[  377.985257][T19925] Bluetooth: hci5: command tx timeout
[  378.104732][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.108760][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.122674][T20122] netlink: 'syz.3.3191': attribute type 13 has an invalid length.
[  378.138604][T20122] netlink: 'syz.3.3191': attribute type 17 has an invalid length.
[  378.189959][T20122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  378.213631][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.218604][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.099744][T20124] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  379.101827][T20124] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  379.760083][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3197'.
[  379.778485][T20150] mac80211_hwsim hwsim252 wlan0: entered promiscuous mode
[  379.781006][T20150] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  382.107347][T20165] vlan2: entered promiscuous mode
[  382.109477][T20165] bridge0: entered promiscuous mode
[  382.112590][T20165] bridge0: port 3(vlan2) entered blocking state
[  382.116310][T20165] bridge0: port 3(vlan2) entered disabled state
[  382.118433][T20165] vlan2: entered allmulticast mode
[  382.120060][T20165] bridge0: entered allmulticast mode
[  382.123039][T20165] vlan2: left allmulticast mode
[  382.125024][T20165] bridge0: left allmulticast mode
[  383.412158][T20181] netlink: 'syz.5.3204': attribute type 10 has an invalid length.
[  383.424962][T20181] bond0: (slave wlan1): Opening slave failed
[  383.650751][T20189] smc: net device bond0 applied user defined pnetid SYZ2
[  383.656274][T20189] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3206'.
[  383.772061][T20189] smc: removing net device bond0 with user defined pnetid SYZ2
[  383.776965][T20189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  383.783330][T20189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  383.789531][T20189] bond0 (unregistering): Released all slaves
[  384.298100][T20195] smc: adding net device bond0 with user defined pnetid SYZ2
[  384.302210][T20195] bond0: entered promiscuous mode
[  384.307060][T20195] bond0: entered allmulticast mode
[  384.309578][T20195] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.399153][T20195] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.401919][T20195] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.479222][T20195] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.491240][T20195] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.577088][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.587483][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.590495][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.593602][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.818664][T20205] netlink: 'syz.5.3211': attribute type 10 has an invalid length.
[  384.894720][T20210] mac80211_hwsim hwsim253 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  384.963391][T20214] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.104477][T20221] netlink: 'syz.5.3218': attribute type 13 has an invalid length.
[  385.107639][T20221] netlink: 'syz.5.3218': attribute type 17 has an invalid length.
[  385.172654][T20221] 8021q: adding VLAN 0 to HW filter on device team0
[  385.181133][T20221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.353689][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3222'.
[  388.037968][T20257] netlink: 'syz.5.3226': attribute type 13 has an invalid length.
[  388.040638][T20257] netlink: 'syz.5.3226': attribute type 17 has an invalid length.
[  388.048497][T20257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  388.145026][T20264] tipc: Failed to obtain node identity
[  388.147236][T20264] tipc: Enabling of bearer <ib:ip6gre0> rejected, failed to enable media
[  388.152604][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3228'.
[  388.157207][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3228'.
[  388.265535][T20269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3230'.
[  388.268854][T20269] netlink: 'syz.5.3230': attribute type 1 has an invalid length.
[  388.271854][T20269] netlink: 'syz.5.3230': attribute type 2 has an invalid length.
[  388.277525][T20269] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3230'.
[  388.404425][T20274] netlink: 'syz.5.3231': attribute type 10 has an invalid length.
[  388.957231][T20282] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3233'.
[  389.453370][T20292] vxcan1 speed is unknown, defaulting to 1000
[  389.458707][T20292] vxcan1 speed is unknown, defaulting to 1000
[  389.461156][T20292] vxcan1 speed is unknown, defaulting to 1000
[  389.508895][T20296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3236'.
[  389.566187][T20292] infiniband syz2: set down
[  389.568168][ T5899] vxcan1 speed is unknown, defaulting to 1000
[  389.570814][T20292] infiniband syz2: added vxcan1
[  389.602961][T20292] RDS/IB: syz2: added
[  389.604791][T20292] smc: adding ib device syz2 with port count 1
[  389.606830][T20292] smc:    ib device syz2 port 1 has pnetid 
[  389.608687][ T5899] vxcan1 speed is unknown, defaulting to 1000
[  389.612023][T20292] vxcan1 speed is unknown, defaulting to 1000
[  389.729602][T20292] vxcan1 speed is unknown, defaulting to 1000
[  389.841877][T20292] vxcan1 speed is unknown, defaulting to 1000
[  390.024960][T20292] vxcan1 speed is unknown, defaulting to 1000
[  390.193225][T20292] vxcan1 speed is unknown, defaulting to 1000
[  390.330734][T20292] vxcan1 speed is unknown, defaulting to 1000
[  390.521547][T20301] netlink: 'syz.5.3237': attribute type 10 has an invalid length.
[  390.655651][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  390.660858][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  390.665514][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  390.669892][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  390.673148][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  390.720583][T19925] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  390.724823][T19925] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  390.728014][T19925] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  390.735457][T19925] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  390.741241][T19925] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  391.254494][T20302] vxcan1 speed is unknown, defaulting to 1000
[  391.456327][T20310] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3239'.
[  391.515844][T20302] chnl_net:caif_netlink_parms(): no params data found
[  391.608795][T20302] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.615614][T20302] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.622555][T20302] bridge_slave_0: entered allmulticast mode
[  391.628795][T20302] bridge_slave_0: entered promiscuous mode
[  391.640306][T20302] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.643649][T20302] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.650013][T20302] bridge_slave_1: entered allmulticast mode
[  391.652996][T20302] bridge_slave_1: entered promiscuous mode
[  391.730093][T20302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.741459][T20302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.790459][T20302] team0: Port device team_slave_0 added
[  391.795914][T20302] team0: Port device team_slave_1 added
[  391.821097][T20302] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.823702][T20302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.835441][T20302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.844524][T20302] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.847474][T20302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.858654][T20302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.902358][T20302] hsr_slave_0: entered promiscuous mode
[  391.907932][T20302] hsr_slave_1: entered promiscuous mode
[  391.910283][T20302] debugfs: 'hsr0' already exists in 'hsr'
[  391.912370][T20302] Cannot create hsr debugfs directory
[  392.008834][T20319] vxcan1 speed is unknown, defaulting to 1000
[  392.106335][T20302] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  392.110998][T20302] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  392.117148][T20302] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  392.123621][T20302] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  392.199066][T20302] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.201850][T20302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.204955][T20302] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.207822][T20302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.267340][T20332] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3241'.
[  392.310946][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.315798][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.360138][T20302] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.385789][T20302] 8021q: adding VLAN 0 to HW filter on device team0
[  392.396265][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.399110][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.435659][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.438488][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.658918][T20302] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.796717][T19925] Bluetooth: hci6: command tx timeout
[  393.069991][T20302] veth0_vlan: entered promiscuous mode
[  393.099260][T20302] veth1_vlan: entered promiscuous mode
[  393.130619][T20302] veth0_macvtap: entered promiscuous mode
[  393.137175][T20302] veth1_macvtap: entered promiscuous mode
[  393.187792][T20302] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.201395][T20302] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.222124][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.238003][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.255991][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.265988][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.731030][T20354] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  393.733434][T20354] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  393.951837][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.957488][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.099412][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.102535][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.429518][T20368] 8021q: adding VLAN 0 to HW filter on device bond1
[  394.432825][T20368] bridge0: port 3(bond1) entered blocking state
[  394.435665][T20368] bridge0: port 3(bond1) entered disabled state
[  394.438229][T20368] bond1: entered allmulticast mode
[  394.442367][T20368] bond1: entered promiscuous mode
[  394.459310][T20368] bridge0: port 3(bond1) entered blocking state
[  394.462177][T20368] bridge0: port 3(bond1) entered forwarding state
[  394.502658][ T1095] bridge0: port 3(bond1) entered disabled state
[  394.530162][T20368] mac80211_hwsim hwsim254 wlan0: entered promiscuous mode
[  394.536648][T20368] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  394.548831][T20372] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3249'.
[  394.570940][ T5234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  394.575747][ T5234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  394.579771][ T5234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  394.585396][ T5234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  394.589073][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  394.746948][T20376] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  394.762633][T20376] CPU: 0 UID: 0 PID: 20376 Comm: syz.6.3250 Not tainted syzkaller #0 PREEMPT(full) 
[  394.762654][T20376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  394.762664][T20376] Call Trace:
[  394.762670][T20376]  <TASK>
[  394.762677][T20376]  dump_stack_lvl+0x189/0x250
[  394.762712][T20376]  ? __pfx_dump_stack_lvl+0x10/0x10
[  394.762731][T20376]  ? __pfx__printk+0x10/0x10
[  394.762756][T20376]  ? kernfs_path_from_node+0x2f/0x290
[  394.762774][T20376]  ? kernfs_path_from_node+0x250/0x290
[  394.762792][T20376]  ? kernfs_path_from_node+0x2f/0x290
[  394.762811][T20376]  sysfs_warn_dup+0x8e/0xa0
[  394.762826][T20376]  sysfs_do_create_link_sd+0xc0/0x110
[  394.762844][T20376]  device_add_class_symlinks+0x1cf/0x240
[  394.762864][T20376]  device_add+0x475/0xb50
[  394.762900][T20376]  wiphy_register+0x1ba6/0x28d0
[  394.762939][T20376]  ? __pfx_wiphy_register+0x10/0x10
[  394.762958][T20376]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  394.762981][T20376]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  394.762999][T20376]  ieee80211_register_hw+0x3425/0x4080
[  394.763054][T20376]  ? ieee80211_register_hw+0x1471/0x4080
[  394.763078][T20376]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  394.763105][T20376]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  394.763132][T20376]  ? __hrtimer_setup+0x187/0x210
[  394.763146][T20376]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  394.763170][T20376]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  394.763215][T20376]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  394.763233][T20376]  ? trace_kmalloc+0x1f/0xd0
[  394.763251][T20376]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  394.763271][T20376]  ? kstrndup+0xbf/0x160
[  394.763294][T20376]  hwsim_new_radio_nl+0xea4/0x1b10
[  394.763316][T20376]  ? __pfx___nla_validate_parse+0x10/0x10
[  394.763350][T20376]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  394.763380][T20376]  ? __nla_parse+0x40/0x60
[  394.763403][T20376]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  394.763428][T20376]  genl_family_rcv_msg_doit+0x215/0x300
[  394.763452][T20376]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  394.763480][T20376]  ? bpf_lsm_capable+0x9/0x20
[  394.763499][T20376]  ? security_capable+0x7e/0x2e0
[  394.763524][T20376]  genl_rcv_msg+0x60e/0x790
[  394.763547][T20376]  ? __pfx_genl_rcv_msg+0x10/0x10
[  394.763563][T20376]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  394.763594][T20376]  netlink_rcv_skb+0x208/0x470
[  394.763613][T20376]  ? __lock_acquire+0xab9/0xd20
[  394.763635][T20376]  ? __pfx_genl_rcv_msg+0x10/0x10
[  394.763674][T20376]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  394.763715][T20376]  ? down_read+0x1ad/0x2e0
[  394.763733][T20376]  genl_rcv+0x28/0x40
[  394.763756][T20376]  netlink_unicast+0x82f/0x9e0
[  394.763787][T20376]  ? __pfx_netlink_unicast+0x10/0x10
[  394.763813][T20376]  ? netlink_sendmsg+0x642/0xb30
[  394.763832][T20376]  ? skb_put+0x11b/0x210
[  394.763850][T20376]  netlink_sendmsg+0x805/0xb30
[  394.763879][T20376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  394.763903][T20376]  ? aa_sock_msg_perm+0xf1/0x1d0
[  394.763919][T20376]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  394.763933][T20376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  394.763955][T20376]  __sock_sendmsg+0x21c/0x270
[  394.763977][T20376]  ____sys_sendmsg+0x505/0x830
[  394.763998][T20376]  ? __pfx_____sys_sendmsg+0x10/0x10
[  394.764047][T20376]  ? import_iovec+0x74/0xa0
[  394.764071][T20376]  ___sys_sendmsg+0x21f/0x2a0
[  394.764095][T20376]  ? __pfx____sys_sendmsg+0x10/0x10
[  394.764142][T20376]  ? __fget_files+0x2a/0x420
[  394.764163][T20376]  ? __fget_files+0x3a0/0x420
[  394.764194][T20376]  __x64_sys_sendmsg+0x19b/0x260
[  394.764212][T20376]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  394.764236][T20376]  ? rcu_is_watching+0x15/0xb0
[  394.764254][T20376]  ? do_syscall_64+0xbe/0x3b0
[  394.764279][T20376]  do_syscall_64+0xfa/0x3b0
[  394.764299][T20376]  ? lockdep_hardirqs_on+0x9c/0x150
[  394.764318][T20376]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.764331][T20376]  ? exc_page_fault+0x9f/0xf0
[  394.764352][T20376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.764365][T20376] RIP: 0033:0x7f76f758ebe9
[  394.764379][T20376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.764392][T20376] RSP: 002b:00007f76f57f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  394.764408][T20376] RAX: ffffffffffffffda RBX: 00007f76f77b5fa0 RCX: 00007f76f758ebe9
[  394.764418][T20376] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  394.764428][T20376] RBP: 00007f76f7611e19 R08: 0000000000000000 R09: 0000000000000000
[  394.764437][T20376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  394.764446][T20376] R13: 00007f76f77b6038 R14: 00007f76f77b5fa0 R15: 00007fff93b8d4a8
[  394.764471][T20376]  </TASK>
[  395.203265][T20388] bond0: left promiscuous mode
[  395.217155][T20388] bond0: left allmulticast mode
[  395.269307][T20392] netlink: 'syz.6.3254': attribute type 23 has an invalid length.
[  395.321493][T20392] netlink: 'syz.6.3254': attribute type 10 has an invalid length.
[  395.325351][T20392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  395.332621][T20392] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.340728][T20392] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  395.468392][T20373] vxcan1 speed is unknown, defaulting to 1000
[  395.506747][T20398] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  395.509420][T20398] Bluetooth: hci7: Error when powering off device on rfkill (-4)
[  395.562807][T20405] netlink: 460 bytes leftover after parsing attributes in process `syz.5.3257'.
[  395.861330][T20430] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3263'.
[  395.879890][T20432] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  395.893133][T20373] chnl_net:caif_netlink_parms(): no params data found
[  395.950190][T20373] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.952581][T20373] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.957535][T20373] bridge_slave_0: entered allmulticast mode
[  395.961162][T20373] bridge_slave_0: entered promiscuous mode
[  395.969981][T20373] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.972717][T20373] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.976228][T20373] bridge_slave_1: entered allmulticast mode
[  395.980114][T20373] bridge_slave_1: entered promiscuous mode
[  396.013364][T20373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.021105][T20373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.059337][T20373] team0: Port device team_slave_0 added
[  396.064731][T20373] team0: Port device team_slave_1 added
[  396.089651][T20373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.091997][T20373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.103015][T20373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.109438][T20373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.112157][T20373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.122884][T20373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.178127][T20373] hsr_slave_0: entered promiscuous mode
[  396.180726][T20373] hsr_slave_1: entered promiscuous mode
[  396.182873][T20373] debugfs: 'hsr0' already exists in 'hsr'
[  396.187220][T20373] Cannot create hsr debugfs directory
[  396.189994][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3265'.
[  396.478462][T20373] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  396.496851][T20373] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  396.502198][T20373] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  396.507917][T20373] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  396.542576][T20373] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.544937][T20373] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.547605][T20373] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.550426][T20373] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.559103][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.563674][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.592981][T20462] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3269'.
[  396.655643][T20373] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.686596][T20373] 8021q: adding VLAN 0 to HW filter on device team0
[  396.706051][T20245] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.709001][T20245] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.722584][T20244] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.725300][T20244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.749125][T20464] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3270'.
[  396.756626][T20464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  396.926342][T20373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.992830][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3271'.
[  396.997258][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3271'.
[  397.089253][T20373] veth0_vlan: entered promiscuous mode
[  397.097546][T20373] veth1_vlan: entered promiscuous mode
[  397.121876][T20373] veth0_macvtap: entered promiscuous mode
[  397.127264][T20373] veth1_macvtap: entered promiscuous mode
[  397.139217][T20373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.149382][T20373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.157749][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.161162][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.167108][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.171969][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.313274][T11018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.317745][T11018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.406412][T20244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.409822][T20244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.759337][T20492] netlink: 'syz.7.3273': attribute type 10 has an invalid length.
[  398.809999][T20498] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3275'.
[  399.085469][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3276'.
[  399.098256][   T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  399.102179][   T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  399.106437][   T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  399.109466][   T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  399.306337][T20500] vxcan1 speed is unknown, defaulting to 1000
[  399.632977][T20506] __nla_validate_parse: 1 callbacks suppressed
[  399.632997][T20506] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3277'.
[  399.643933][T20506] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3277'.
[  400.243394][T20520] netlink: 'syz.7.3282': attribute type 10 has an invalid length.
[  400.247602][T20520] bond0: (slave wlan1): Opening slave failed
[  400.381312][T20530] netlink: 'syz.7.3285': attribute type 1 has an invalid length.
[  400.530740][T20533] netlink: 248 bytes leftover after parsing attributes in process `syz.7.3286'.
[  400.780185][T20545] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  400.787347][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3289'.
[  401.251527][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3292'.
[  402.131388][T20569] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  402.654986][T20581] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3297'.
[  411.594843][ T5234] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  411.600000][ T5234] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  411.607084][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  411.612139][ T5234] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  411.616149][ T5234] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  411.686923][T19925] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  411.691032][T19925] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  411.696177][T19925] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  411.701338][T19925] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  411.704897][T19925] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  412.233240][T20584] vxcan1 speed is unknown, defaulting to 1000
[  412.564926][T20584] chnl_net:caif_netlink_parms(): no params data found
[  412.715912][T20584] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.718429][T20584] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.720967][T20584] bridge_slave_0: entered allmulticast mode
[  412.734931][T20584] bridge_slave_0: entered promiscuous mode
[  412.739844][T20584] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.742577][T20584] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.746055][T20584] bridge_slave_1: entered allmulticast mode
[  412.750587][T20584] bridge_slave_1: entered promiscuous mode
[  412.760275][ T5234] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  412.766714][ T5234] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  412.771565][ T5234] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  412.778494][ T5234] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  412.781231][ T5234] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  412.805554][T20584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.811811][T20584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.845999][T20584] team0: Port device team_slave_0 added
[  412.850255][T20584] team0: Port device team_slave_1 added
[  412.882536][T20584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.885227][T20584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.895095][T20584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.900607][T20584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.903100][T20584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.913040][T20584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.951842][T20584] hsr_slave_0: entered promiscuous mode
[  412.955237][T20584] hsr_slave_1: entered promiscuous mode
[  412.957999][T20584] debugfs: 'hsr0' already exists in 'hsr'
[  412.959830][T20584] Cannot create hsr debugfs directory
[  413.084848][T20584] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  413.090667][T20584] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  413.099099][T20584] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  413.104691][T20584] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  413.142126][T20584] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.145152][T20584] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.148267][T20584] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.151139][T20584] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.188381][T20603] vxcan1 speed is unknown, defaulting to 1000
[  413.203523][T20584] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.219613][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.225513][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.246933][T20584] 8021q: adding VLAN 0 to HW filter on device team0
[  413.272109][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.274718][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.295633][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.297854][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.376141][T20584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  413.557236][T20584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.580004][T20603] chnl_net:caif_netlink_parms(): no params data found
[  413.669834][T20603] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.672837][T20603] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.677463][T20603] bridge_slave_0: entered allmulticast mode
[  413.681498][T20603] bridge_slave_0: entered promiscuous mode
[  413.688092][T20603] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.691111][T20603] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.695595][T20603] bridge_slave_1: entered allmulticast mode
[  413.699790][T20603] bridge_slave_1: entered promiscuous mode
[  413.747028][ T5234] Bluetooth: hci8: command tx timeout
[  413.748330][T20603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.761339][T20603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.804479][T20603] team0: Port device team_slave_0 added
[  413.813202][T20603] team0: Port device team_slave_1 added
[  413.855854][T20603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.858690][T20603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.869808][T20603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.882939][T20603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.885974][T20603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.896970][T20603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.935067][T20603] hsr_slave_0: entered promiscuous mode
[  413.937957][T20603] hsr_slave_1: entered promiscuous mode
[  413.940251][T20603] debugfs: 'hsr0' already exists in 'hsr'
[  413.942154][T20603] Cannot create hsr debugfs directory
[  413.970839][T20584] veth0_vlan: entered promiscuous mode
[  413.993075][T20584] veth1_vlan: entered promiscuous mode
[  414.117084][T20584] veth0_macvtap: entered promiscuous mode
[  414.120612][T20603] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  414.130187][T20603] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  414.143227][T20584] veth1_macvtap: entered promiscuous mode
[  414.148460][T20603] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  414.158172][T20603] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  414.191572][T20584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.204980][T20584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.217220][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.220108][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.223008][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.237821][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.336568][ T9895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.339239][ T9895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.397821][ T9895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.400821][ T9895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.439228][T20603] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.467274][T20603] 8021q: adding VLAN 0 to HW filter on device team0
[  414.489052][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.491653][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.514699][T20245] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.517629][T20245] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.526349][ T9895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.529483][ T9895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.570576][T20603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  414.641330][T20638] netlink: 248 bytes leftover after parsing attributes in process `syz.8.3300'.
[  414.707926][T20603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.782253][T20644] netlink: 'syz.8.3301': attribute type 13 has an invalid length.
[  414.786826][T20644] netlink: 'syz.8.3301': attribute type 17 has an invalid length.
[  414.839802][T20644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  414.867982][ T5234] Bluetooth: hci9: command tx timeout
[  414.919249][T20650] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  414.994504][T20650] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.997738][T20650] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.087258][T20650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  415.096542][T20650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  415.212265][ T5876] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.217161][ T5876] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.220625][ T5876] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.235647][ T5876] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.240847][T20603] veth0_vlan: entered promiscuous mode
[  415.255873][T20603] veth1_vlan: entered promiscuous mode
[  415.296930][T20603] veth0_macvtap: entered promiscuous mode
[  415.301487][T20603] veth1_macvtap: entered promiscuous mode
[  415.312405][T20603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.320583][T20603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.327938][ T5711] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.330835][ T5711] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.337059][ T5711] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.339728][ T5711] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.344658][T20653] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  415.442886][T20244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.451953][T20244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.478991][T20244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.481610][T20244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.541374][T20656] mac80211_hwsim hwsim268 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  415.826056][ T5234] Bluetooth: hci8: command tx timeout
[  416.096483][T20667] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.126026][T20668] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3306'.
[  416.427288][T20658] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  416.429383][T20658] Bluetooth: hci8: Error when powering off device on rfkill (-4)
[  416.434833][T20658] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  416.437073][T20658] Bluetooth: hci9: Error when powering off device on rfkill (-4)
[  416.573282][T20667] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.581060][T20670] netlink: 'syz.8.3307': attribute type 10 has an invalid length.
[  416.585435][T20670] bond0: (slave wlan1): Opening slave failed
[  416.620605][T20673] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  417.361936][T20667] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.757136][T19925] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  417.763343][T19925] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  417.768695][T19925] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  417.772806][T19925] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  417.778441][T19925] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  417.821651][ T5234] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  417.832808][ T5234] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  417.837325][ T5234] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  417.842816][ T5234] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  417.846596][ T5234] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  417.888472][T20667] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.098826][ T5711] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.102545][ T5711] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.125283][ T5711] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.140566][ T5876] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.409611][T20704] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3315'.
[  418.606378][T20691] vxcan1 speed is unknown, defaulting to 1000
[  418.864664][T20691] chnl_net:caif_netlink_parms(): no params data found
[  418.949062][T20691] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.951568][T20691] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.955067][T20691] bridge_slave_0: entered allmulticast mode
[  418.958494][T20691] bridge_slave_0: entered promiscuous mode
[  418.961551][T20710] vxcan1 speed is unknown, defaulting to 1000
[  418.962156][T20691] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.971121][T20691] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.973721][T20691] bridge_slave_1: entered allmulticast mode
[  418.977378][T20691] bridge_slave_1: entered promiscuous mode
[  419.012869][T20691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  419.018441][T20691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  419.051619][T20691] team0: Port device team_slave_0 added
[  419.056058][T20691] team0: Port device team_slave_1 added
[  419.092302][T20691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.095364][T20691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.112103][T20691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.130056][T20691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.132632][T20691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.142562][T20691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.228194][T20691] hsr_slave_0: entered promiscuous mode
[  419.230992][T20691] hsr_slave_1: entered promiscuous mode
[  419.234406][T20691] debugfs: 'hsr0' already exists in 'hsr'
[  419.236800][T20691] Cannot create hsr debugfs directory
[  419.339284][T20708] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  419.341216][T20708] Bluetooth: hci10: Error when powering off device on rfkill (-4)
[  419.477203][T20721] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3319'.
[  419.480028][T20721] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3319'.
[  420.230532][T20691] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  420.243694][T20735] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3322'.
[  420.253047][T20691] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  420.291577][T20691] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  420.313040][T20691] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  420.389555][T20739] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.3323'.
[  420.421017][T20728] vxcan1 speed is unknown, defaulting to 1000
[  420.481597][T20691] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.492329][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3324'.
[  420.506376][T20691] 8021q: adding VLAN 0 to HW filter on device team0
[  420.578069][ T9895] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.580325][ T9895] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.607567][ T9895] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.609833][ T9895] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.747701][T20748] netlink: 'syz.8.3325': attribute type 8 has an invalid length.
[  420.849529][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3327'.
[  420.881269][T20759] netlink: 'syz.8.3327': attribute type 12 has an invalid length.
[  420.905934][T20691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.991489][T20691] veth0_vlan: entered promiscuous mode
[  421.006072][T20691] veth1_vlan: entered promiscuous mode
[  421.043454][T20691] veth0_macvtap: entered promiscuous mode
[  421.070556][T20691] veth1_macvtap: entered promiscuous mode
[  421.080316][T20691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.088585][T20691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  421.110742][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.117369][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.143514][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.163419][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.328247][T20761] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3328'.
[  421.341911][T20761] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3328'.
[  421.410641][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.413236][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.599443][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.602587][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.950051][T20775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3330'.
[  422.187632][T20782] netlink: 'syz.0.3333': attribute type 13 has an invalid length.
[  422.190835][T20782] netlink: 'syz.0.3333': attribute type 17 has an invalid length.
[  422.251217][T20782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  422.695331][T20805] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3340'.
[  422.751536][T20807] dvmrp1: entered allmulticast mode
[  422.841596][T20811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3343'.
[  422.891193][T20812] netlink: 'syz.8.3342': attribute type 13 has an invalid length.
[  422.893653][T20812] netlink: 'syz.8.3342': attribute type 17 has an invalid length.
[  422.915213][T20812] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.918896][T20812] 8021q: adding VLAN 0 to HW filter on device team0
[  422.923512][T20812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  423.305164][T20821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3345'.
[  423.593003][T20831] mac80211_hwsim hwsim272 wlan0: entered promiscuous mode
[  423.604126][T20831] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  423.789163][T20812] vxcan1 speed is unknown, defaulting to 1000
[  423.791287][T20839] netlink: 'syz.0.3350': attribute type 1 has an invalid length.
[  423.816211][T20839] netlink: 'syz.0.3350': attribute type 4 has an invalid length.
[  424.100394][T20854] mac80211_hwsim hwsim273 wlan1: entered allmulticast mode
[  424.111732][T20854] bridge_slave_0: left allmulticast mode
[  424.113688][T20854] bridge_slave_0: left promiscuous mode
[  424.116690][T20854] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.121998][T20854] bridge_slave_1: left allmulticast mode
[  424.125488][T20854] bridge_slave_1: left promiscuous mode
[  424.127322][T20854] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.132838][T20854] bond0: (slave bond_slave_0): Releasing backup interface
[  424.142590][T20854] bond0: (slave bond_slave_1): Releasing backup interface
[  424.153208][T20854] team0: Port device team_slave_0 removed
[  424.165389][T20854] team0: Port device team_slave_1 removed
[  424.167800][T20854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.170241][T20854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.177522][T20854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.180648][T20854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.204177][T20854] netlink: 'syz.0.3355': attribute type 10 has an invalid length.
[  424.271301][T20854] mac80211_hwsim hwsim273 wlan1: left allmulticast mode
[  424.279182][T20854] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.282195][T20854] bond0: (slave wlan1): Opening slave failed
[  424.289963][T20855] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  424.293052][T20855] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  424.566159][T20871] batman_adv: batadv0: Adding interface: dummy0
[  424.570018][T20871] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.580558][T20871] batman_adv: batadv0: Interface activated: dummy0
[  424.591785][T20871] batadv0: mtu less than device minimum
[  424.594440][T20871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  424.599310][T20871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  424.603665][T20871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  424.607562][T20871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  424.611445][T20871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  424.615313][T20871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  425.006715][T20887] mac80211_hwsim hwsim272 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  425.092387][T20893] netlink: 'syz.0.3366': attribute type 1 has an invalid length.
[  425.229322][T20905] sit1: entered promiscuous mode
[  425.430153][T20928] __nla_validate_parse: 1 callbacks suppressed
[  425.430171][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'.
[  425.912775][T20920] vxcan1 speed is unknown, defaulting to 1000
[  426.181287][T20939] validate_nla: 1 callbacks suppressed
[  426.181310][T20939] netlink: 'syz.0.3377': attribute type 23 has an invalid length.
[  426.700405][T20955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.750921][T20955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.829783][T20955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.906234][T20955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.974522][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.987816][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.001449][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.020373][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.062599][T20958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3382'.
[  427.883707][T20999] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.927961][T20999] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.980618][T20999] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.030052][T20999] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.968360][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.982452][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.996216][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.010050][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.119645][T21006] netlink: 786 bytes leftover after parsing attributes in process `syz.0.3393'.
[  434.890312][T19925] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  434.896113][T19925] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  434.900006][T19925] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  434.905884][T19925] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  434.909333][T19925] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  434.915110][T21034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3397'.
[  435.457359][T21046] mac80211_hwsim hwsim272 wlan0: left promiscuous mode
[  435.461313][T21046] sit1: left promiscuous mode
[  435.467273][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.474530][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.484083][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.486616][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.597857][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3400'.
[  435.597914][T21040] vxcan1 speed is unknown, defaulting to 1000
[  435.977362][T21040] chnl_net:caif_netlink_parms(): no params data found
[  436.228012][T21040] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.230869][T21040] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.240892][T21040] bridge_slave_0: entered allmulticast mode
[  436.273494][T21040] bridge_slave_0: entered promiscuous mode
[  436.287600][T21040] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.290512][T21040] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.293471][T21040] bridge_slave_1: entered allmulticast mode
[  436.311737][T21040] bridge_slave_1: entered promiscuous mode
[  436.421212][T21040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.430874][T21040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.461014][T21040] team0: Port device team_slave_0 added
[  436.466955][T21040] team0: Port device team_slave_1 added
[  436.491056][T21040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.493127][T21040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.505495][T21040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.508870][T21059] vxcan1 speed is unknown, defaulting to 1000
[  436.509867][T21040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.512854][T21040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.523734][T21040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.580145][T21040] hsr_slave_0: entered promiscuous mode
[  436.583308][T21040] hsr_slave_1: entered promiscuous mode
[  436.589571][T21040] debugfs: 'hsr0' already exists in 'hsr'
[  436.591781][T21040] Cannot create hsr debugfs directory
[  436.944593][T19925] Bluetooth: hci11: command tx timeout
[  437.305934][T21040] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  437.312083][T21040] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  437.317667][T21040] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  437.323668][T21040] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  437.426722][T21040] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.445818][T21040] 8021q: adding VLAN 0 to HW filter on device team0
[  437.453047][T21088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3404'.
[  437.453640][T11018] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.458120][T11018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.465445][T21088] mac80211_hwsim hwsim272 ;z1: renamed from wlan0
[  437.475657][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.478258][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.523375][T21040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  437.672144][T21040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.726477][T21040] veth0_vlan: entered promiscuous mode
[  437.751474][T21040] veth1_vlan: entered promiscuous mode
[  437.826784][T21040] veth0_macvtap: entered promiscuous mode
[  437.842127][T21040] veth1_macvtap: entered promiscuous mode
[  438.002105][T21101] batadv_slave_1: entered promiscuous mode
[  438.017793][T21040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.025177][T21040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.030482][T21099] batadv_slave_1: left promiscuous mode
[  438.048110][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.051742][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.062198][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.071337][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.120989][T21104] netlink: 'syz.0.3407': attribute type 12 has an invalid length.
[  438.233197][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.237017][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.286920][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.289381][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.950756][T21119] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3411'.
[  439.024411][T19925] Bluetooth: hci11: command tx timeout
[  439.050924][T21121] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3412'.
[  439.199284][T21127] netlink: 'syz.2.3413': attribute type 10 has an invalid length.
[  439.318613][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'.
[  439.328992][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'.
[  439.657912][T21136] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3417'.
[  439.668667][T21136] batadv1: entered promiscuous mode
[  439.670419][T21136] batadv1: entered allmulticast mode
[  439.850199][T21142] netlink: 'syz.0.3418': attribute type 3 has an invalid length.
[  439.912433][T21142] netlink: 'syz.0.3418': attribute type 10 has an invalid length.
[  440.192113][T21152] netlink: 'syz.2.3422': attribute type 10 has an invalid length.
[  440.196526][T21152] bond0: (slave wlan1): Opening slave failed
[  440.319650][T21156] net_ratelimit: 13 callbacks suppressed
[  440.319667][T21156] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  440.353708][T21145] vxcan1 speed is unknown, defaulting to 1000
[  440.354964][T21156] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3423'.
[  440.360150][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'.
[  440.363180][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'.
[  440.440238][T21158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci11/hci11:200/input4
[  441.064086][T21178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3430'.
[  441.104425][T19925] Bluetooth: hci11: command tx timeout
[  441.205615][ T5234] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  441.210519][ T5234] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  441.224214][ T5234] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  441.229626][ T5234] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  441.233589][ T5234] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  441.315845][T21190] netlink: 'syz.0.3433': attribute type 1 has an invalid length.
[  441.457021][T21194] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  441.922956][T21204] mac80211_hwsim hwsim276 wlan0: entered promiscuous mode
[  441.929816][T21204] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  441.941307][T21184] vxcan1 speed is unknown, defaulting to 1000
[  442.141895][T21207] tipc: Started in network mode
[  442.145906][T21207] tipc: Node identity , cluster identity 4711
[  442.148292][T21207] tipc: Failed to obtain node identity
[  442.150456][T21207] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  442.223679][T21207] syzkaller0: entered promiscuous mode
[  442.227376][T21207] syzkaller0: entered allmulticast mode
[  443.186289][ T5234] Bluetooth: hci11: command tx timeout
[  443.355961][ T5234] Bluetooth: hci12: command tx timeout
[  444.068740][T21214] __nla_validate_parse: 4 callbacks suppressed
[  444.068753][T21214] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3439'.
[  444.100317][T21184] chnl_net:caif_netlink_parms(): no params data found
[  444.193266][T21184] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.202636][T21184] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.206111][T21184] bridge_slave_0: entered allmulticast mode
[  444.210075][T21184] bridge_slave_0: entered promiscuous mode
[  444.215226][T21184] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.218163][T21184] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.221031][T21184] bridge_slave_1: entered allmulticast mode
[  444.226004][T21184] bridge_slave_1: entered promiscuous mode
[  444.276443][T21229] netlink: 'syz.2.3442': attribute type 12 has an invalid length.
[  444.279713][T21229] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3442'.
[  444.280654][T21184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.293216][T21184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.393920][T21184] team0: Port device team_slave_0 added
[  444.401811][T21184] team0: Port device team_slave_1 added
[  444.460044][T21184] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.462947][T21184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.477364][T21184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.482850][T21184] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.486711][T21184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.495533][T21184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.537024][T21184] hsr_slave_0: entered promiscuous mode
[  444.541347][T21184] hsr_slave_1: entered promiscuous mode
[  444.547639][T21184] debugfs: 'hsr0' already exists in 'hsr'
[  444.551018][T21184] Cannot create hsr debugfs directory
[  444.553303][T21237] mac80211_hwsim hwsim283 wlan1: entered allmulticast mode
[  445.219971][T21184] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  445.236178][T21184] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  445.242556][T21184] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  445.249563][T21184] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  445.398169][T21184] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.434538][ T5234] Bluetooth: hci12: command tx timeout
[  445.489759][T21184] 8021q: adding VLAN 0 to HW filter on device team0
[  445.518083][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.520542][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.563488][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.565877][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.810104][T21257] vxcan1 speed is unknown, defaulting to 1000
[  445.927562][T21184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.009417][T21184] veth0_vlan: entered promiscuous mode
[  446.023196][T21184] veth1_vlan: entered promiscuous mode
[  446.057092][T21274] netlink: 'syz.0.3451': attribute type 1 has an invalid length.
[  446.073422][T21184] veth0_macvtap: entered promiscuous mode
[  446.097155][T21184] veth1_macvtap: entered promiscuous mode
[  446.140926][T21184] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.200953][T21184] batman_adv: batadv0: Interface activated: batadv_slave_1
[  446.220780][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.244436][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.247962][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.269772][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.315732][T21283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3453'.
[  446.592949][T20244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.602873][T20244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.721243][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3456'.
[  446.769843][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.778539][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.900192][T21295] netlink: 'syz.0.3457': attribute type 10 has an invalid length.
[  446.995663][T21298] mac80211_hwsim hwsim285 wlan1: entered allmulticast mode
[  447.028469][T21298] bridge_slave_0: left allmulticast mode
[  447.030694][T21298] bridge_slave_0: left promiscuous mode
[  447.032807][T21298] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.050937][T21298] bridge_slave_1: left allmulticast mode
[  447.053049][T21298] bridge_slave_1: left promiscuous mode
[  447.062100][T21298] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.104246][T21298] bond0: (slave bond_slave_0): Releasing backup interface
[  447.129670][T21298] bond0: (slave bond_slave_1): Releasing backup interface
[  447.152797][T21298] team0: Port device team_slave_0 removed
[  447.163492][T21308] netlink: 'syz.1.3425': attribute type 10 has an invalid length.
[  447.182431][T21298] team0: Port device team_slave_1 removed
[  447.186710][T21298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.189599][T21298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.203131][T21298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.208446][T21298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.240176][T21308] mac80211_hwsim hwsim285 wlan1: left allmulticast mode
[  447.245732][T21308] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.250527][T21308] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  447.260211][T21309] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  447.276911][T21311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3459'.
[  447.280325][T21309] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  447.504173][ T5234] Bluetooth: hci12: command tx timeout
[  447.619727][T21321] Bluetooth: hci11: Opcode 0x0c1a failed: -4
[  447.628906][T21321] Bluetooth: hci11: Error when powering off device on rfkill (-4)
[  447.654702][T21321] Bluetooth: hci12: Opcode 0x0c1a failed: -4
[  447.659843][T21321] Bluetooth: hci12: Error when powering off device on rfkill (-4)
[  447.926632][T21335] syz_tun: entered allmulticast mode
[  447.958448][T21335] dvmrp8: entered allmulticast mode
[  448.067494][T21338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3467'.
[  448.243465][T21319] vxcan1 speed is unknown, defaulting to 1000
[  448.253324][T21342] netlink: 'syz.2.3468': attribute type 11 has an invalid length.
[  448.462503][T21335] vxcan1 speed is unknown, defaulting to 1000
[  448.743039][T21334] syz_tun: left allmulticast mode
[  448.749363][T21334] dvmrp8: left allmulticast mode
[  449.469206][T21364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3474'.
[  449.787769][T21375] netlink: 'syz.1.3478': attribute type 12 has an invalid length.
[  449.791039][T21375] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3478'.
[  449.903737][T21379] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.3480'.
[  449.931519][T21384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3481'.
[  450.111584][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3485'.
[  450.122123][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3485'.
[  450.310205][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'.
[  450.321176][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'.
[  450.344474][T21394] vxcan1 speed is unknown, defaulting to 1000
[  451.283603][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3494'.
[  451.287991][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3494'.
[  451.291643][T21438] netlink: 'syz.1.3494': attribute type 14 has an invalid length.
[  451.297040][T21438] netlink: 'syz.1.3494': attribute type 13 has an invalid length.
[  451.360127][T21438] net veth1_virt_wifi : renamed from virt_wifi0
[  453.219955][T21454] mac80211_hwsim hwsim284 wlan0: entered promiscuous mode
[  453.464476][T21456] netlink: 'syz.1.3501': attribute type 2 has an invalid length.
[  453.526417][T21456] netlink: 'syz.1.3501': attribute type 10 has an invalid length.
[  453.611480][T21459] mac80211_hwsim hwsim285 wlan1: entered allmulticast mode
[  453.646281][T21459] bond0: (slave wlan1): Releasing backup interface
[  453.658202][T21459] netlink: 'syz.1.3502': attribute type 10 has an invalid length.
[  453.660944][T21459] mac80211_hwsim hwsim285 wlan1: left allmulticast mode
[  453.670115][T21459] bond0: (slave wlan1): Opening slave failed
[  453.676477][T21459] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  453.679491][T21459] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  454.470562][T21461] sctp: [Deprecated]: syz.1.3503 (pid 21461) Use of int in maxseg socket option.
[  454.470562][T21461] Use struct sctp_assoc_value instead
[  455.333009][T21464] __nla_validate_parse: 3 callbacks suppressed
[  455.333022][T21464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3504'.
[  455.552614][T21476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'.
[  464.692797][T19925] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  464.700268][T19925] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  464.706501][T19925] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  464.710414][T19925] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  464.715850][T19925] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  464.786420][ T5234] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  464.791165][ T5234] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  464.795494][ T5234] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  464.803535][ T5234] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  464.809344][ T5234] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  465.263103][T21488] vxcan1 speed is unknown, defaulting to 1000
[  465.532421][T21488] chnl_net:caif_netlink_parms(): no params data found
[  465.622160][T21488] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.625506][T21488] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.628587][T21488] bridge_slave_0: entered allmulticast mode
[  465.632587][T21488] bridge_slave_0: entered promiscuous mode
[  465.638491][T21488] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.643039][T21488] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.647172][T21488] bridge_slave_1: entered allmulticast mode
[  465.651182][T21488] bridge_slave_1: entered promiscuous mode
[  465.685873][T21488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.692211][T21488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.724807][T21488] team0: Port device team_slave_0 added
[  465.730544][T21488] team0: Port device team_slave_1 added
[  465.766732][T21488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.769598][T21488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.780599][T21488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.785985][T21488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.788196][T21488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.797346][T21488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.841556][T21488] hsr_slave_0: entered promiscuous mode
[  465.845426][T21488] hsr_slave_1: entered promiscuous mode
[  465.848482][T21488] debugfs: 'hsr0' already exists in 'hsr'
[  465.850833][T21488] Cannot create hsr debugfs directory
[  465.997254][T21488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.073050][T21488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.162192][T21488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.233316][T21488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.331254][T21488] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  466.348512][T21488] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  466.356195][T21488] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  466.361211][T21488] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  466.387100][T21488] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.389555][T21488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  466.392088][T21488] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.394830][T21488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.456631][T21488] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.479400][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.485578][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.503234][T21488] 8021q: adding VLAN 0 to HW filter on device team0
[  466.512279][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.515289][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.528175][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.531706][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  466.699511][T21488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.849158][T21488] veth0_vlan: entered promiscuous mode
[  466.860119][T21488] veth1_vlan: entered promiscuous mode
[  466.865163][ T5234] Bluetooth: hci13: command tx timeout
[  466.880282][T21488] veth0_macvtap: entered promiscuous mode
[  466.890214][T21488] veth1_macvtap: entered promiscuous mode
[  466.901026][T21488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.908943][T21488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.917593][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.923642][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.927975][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.931822][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.033120][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.035770][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.090803][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.093245][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.338153][T21525] mac80211_hwsim hwsim289 wlan0: entered promiscuous mode
[  467.360077][T21525] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  467.539245][T19925] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  467.545134][T19925] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  467.549913][T19925] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  467.556584][T19925] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  467.561573][T19925] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  467.679190][T21530] netlink: 'syz.4.3512': attribute type 10 has an invalid length.
[  467.696888][T21530] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  468.202523][T21527] vxcan1 speed is unknown, defaulting to 1000
[  468.244563][T21534] netlink: 'syz.4.3513': attribute type 10 has an invalid length.
[  468.948322][T19925] Bluetooth: hci13: command tx timeout
[  468.950339][T21527] chnl_net:caif_netlink_parms(): no params data found
[  469.279962][T21540] Bluetooth: hci13: Opcode 0x0c1a failed: -4
[  469.282180][T21540] Bluetooth: hci13: Error when powering off device on rfkill (-4)
[  469.402586][T21540] Bluetooth: hci14: Opcode 0x0c1a failed: -4
[  469.407269][T21540] Bluetooth: hci14: Error when powering off device on rfkill (-4)
[  469.414721][T21527] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.434110][T21527] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.437164][T21527] bridge_slave_0: entered allmulticast mode
[  469.464630][T21527] bridge_slave_0: entered promiscuous mode
[  469.469232][T21527] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.472128][T21527] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.484679][T21527] bridge_slave_1: entered allmulticast mode
[  469.488833][T21527] bridge_slave_1: entered promiscuous mode
[  469.598783][T21527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  469.603334][T21550] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  469.608968][T21550] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  469.661985][T21527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  469.709708][T21527] team0: Port device team_slave_0 added
[  469.732465][T21527] team0: Port device team_slave_1 added
[  469.818018][T21554] mac80211_hwsim hwsim290 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  469.822704][T21527] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.844958][T21527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.875498][T21527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  469.881250][T21527] batman_adv: batadv0: Adding interface: batadv_slave_1
[  469.924763][T21527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.943940][T21527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.039322][T21557] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3517'.
[  470.039367][T21560] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3517'.
[  470.066029][T21556] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3517'.
[  470.077544][T21527] hsr_slave_0: entered promiscuous mode
[  470.080153][T21527] hsr_slave_1: entered promiscuous mode
[  470.082917][T21527] debugfs: 'hsr0' already exists in 'hsr'
[  470.095841][T21527] Cannot create hsr debugfs directory
[  470.398355][T21569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3519'.
[  470.461333][T21527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.566214][T21527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.610323][T21572] netlink: 'syz.4.3520': attribute type 1 has an invalid length.
[  470.613313][T21573] netlink: 'syz.4.3520': attribute type 1 has an invalid length.
[  470.656886][T21527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.722658][T21574] veth3: entered promiscuous mode
[  470.770920][T21573] veth3: entered promiscuous mode
[  470.818987][T21527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.855420][T21572] bridge_slave_0: left allmulticast mode
[  470.857221][T21572] bridge_slave_0: left promiscuous mode
[  470.859443][T21572] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.878341][T21572] bridge_slave_1: left allmulticast mode
[  470.880194][T21572] bridge_slave_1: left promiscuous mode
[  470.882001][T21572] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.915371][T21572] bond0: (slave bond_slave_0): Releasing backup interface
[  470.927222][T21572] bond0: (slave bond_slave_1): Releasing backup interface
[  470.935755][T21572] team0: Port device team_slave_0 removed
[  470.941034][T21572] team0: Port device team_slave_1 removed
[  470.943326][T21572] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.954824][T21572] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.959901][T21572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.962663][T21572] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.978465][T21572] bond0: (slave wlan1): Releasing backup interface
[  471.245584][T21527] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  471.255500][T21527] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  471.267475][T21527] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  471.298417][T21527] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  471.408851][T21588] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  471.495028][T21527] 8021q: adding VLAN 0 to HW filter on device bond0
[  471.520612][T21527] 8021q: adding VLAN 0 to HW filter on device team0
[  471.536078][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.538668][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  471.555110][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.557611][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  471.729941][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3523'.
[  472.000739][T21527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.130717][T21527] veth0_vlan: entered promiscuous mode
[  472.159115][T21527] veth1_vlan: entered promiscuous mode
[  472.224991][T21527] veth0_macvtap: entered promiscuous mode
[  472.247144][T21527] veth1_macvtap: entered promiscuous mode
[  472.283383][T21527] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.293287][T21527] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.348198][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3525'.
[  472.351596][ T5711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.356138][ T5711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.358966][ T5711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.362155][ T5711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.439016][T21600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'.
[  472.954298][T20247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.956764][T20247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.390499][T20247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.404528][T20247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.436706][ T5234] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  473.462436][ T5234] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  473.468134][ T5234] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  473.474925][ T5234] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  473.479790][ T5234] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  475.152005][T21603] vxcan1 speed is unknown, defaulting to 1000
[  475.506795][ T5234] Bluetooth: hci15: command tx timeout
[  475.669571][T21607] syz.3.3510 (21607) used greatest stack depth: 19320 bytes left
[  475.684556][T21608] Bluetooth: hci15: Opcode 0x0c1a failed: -4
[  475.686583][T21608] Bluetooth: hci15: Error when powering off device on rfkill (-4)
[  481.202548][T21603] chnl_net:caif_netlink_parms(): no params data found
[  482.416266][T21603] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.433919][T21603] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.436546][T21603] bridge_slave_0: entered allmulticast mode
[  482.439773][T21603] bridge_slave_0: entered promiscuous mode
[  482.484744][T21603] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.487043][T21603] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.500151][T21603] bridge_slave_1: entered allmulticast mode
[  482.514145][T21603] bridge_slave_1: entered promiscuous mode
[  482.806582][T21603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.848416][T21603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.815664][T21603] team0: Port device team_slave_0 added
[  483.819856][T21603] team0: Port device team_slave_1 added
[  484.569110][T21621] syz.4.3529 (21621) used greatest stack depth: 18704 bytes left
[  484.849237][T21603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.851628][T21603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.901660][T21603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.986417][T21603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.988995][T21603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.042297][T21603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.710686][T21603] hsr_slave_0: entered promiscuous mode
[  486.744512][T21603] hsr_slave_1: entered promiscuous mode
[  486.748229][T21603] debugfs: 'hsr0' already exists in 'hsr'
[  486.750685][T21603] Cannot create hsr debugfs directory
[  508.305329][   T34] INFO: task syz.2.3140:19837 blocked for more than 143 seconds.
[  508.308349][   T34]       Not tainted syzkaller #0
[  508.311492][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.334290][   T34] task:syz.2.3140      state:D stack:25352 pid:19837 tgid:19836 ppid:5854   task_flags:0x400140 flags:0x00004004
[  508.339687][   T34] Call Trace:
[  508.341008][   T34]  <TASK>
[  508.342280][   T34]  __schedule+0x1798/0x4cc0
[  508.362302][   T34]  ? __lock_acquire+0xab9/0xd20
[  508.376122][   T34]  ? __lock_acquire+0xab9/0xd20
[  508.378574][   T34]  ? __pfx___schedule+0x10/0x10
[  508.380558][   T34]  ? schedule+0x91/0x360
[  508.382263][   T34]  schedule+0x165/0x360
[  508.394111][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.396256][   T34]  __mutex_lock+0x7e6/0x1350
[  508.397842][   T34]  ? __mutex_lock+0x5bb/0x1350
[  508.399416][   T34]  ? nfsd_nl_listener_set_doit+0x137/0x1690
[  508.401550][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.403265][   T34]  ? __asan_memset+0x22/0x50
[  508.440562][   T34]  ? ____sys_sendmsg+0x505/0x830
[  508.442646][   T34]  ? ___sys_sendmsg+0x21f/0x2a0
[  508.462242][   T34]  ? __x64_sys_sendmsg+0x19b/0x260
[  508.465198][   T34]  nfsd_nl_listener_set_doit+0x137/0x1690
[  508.467840][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  508.470196][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  508.472698][   T34]  ? __nla_parse+0x40/0x60
[  508.504259][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  508.506820][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  508.509034][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  508.511496][   T34]  ? bpf_lsm_capable+0x9/0x20
[  508.513362][   T34]  ? security_capable+0x7e/0x2e0
[  508.539690][   T34]  genl_rcv_msg+0x60e/0x790
[  508.541609][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.543658][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  508.574196][   T34]  netlink_rcv_skb+0x208/0x470
[  508.576184][   T34]  ? __lock_acquire+0xab9/0xd20
[  508.578132][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.580195][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.582361][   T34]  ? down_read+0x1ad/0x2e0
[  508.614218][   T34]  genl_rcv+0x28/0x40
[  508.615834][   T34]  netlink_unicast+0x82f/0x9e0
[  508.617713][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  508.619909][   T34]  ? netlink_sendmsg+0x642/0xb30
[  508.621941][   T34]  ? skb_put+0x11b/0x210
[  508.623588][   T34]  netlink_sendmsg+0x805/0xb30
[  508.663983][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.666151][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  508.668145][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  508.670266][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.672379][   T34]  __sock_sendmsg+0x21c/0x270
[  508.709493][   T34]  ____sys_sendmsg+0x505/0x830
[  508.711032][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  508.712665][   T34]  ? import_iovec+0x74/0xa0
[  508.715055][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  508.716554][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  508.718299][   T34]  ? __fget_files+0x2a/0x420
[  508.719794][   T34]  ? __fget_files+0x3a0/0x420
[  508.721269][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  508.723036][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  508.773962][   T34]  ? rcu_is_watching+0x15/0xb0
[  508.775468][   T34]  ? do_syscall_64+0xbe/0x3b0
[  508.776979][   T34]  do_syscall_64+0xfa/0x3b0
[  508.778419][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  508.780053][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.782254][   T34]  ? exc_page_fault+0x9f/0xf0
[  508.783604][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.821803][   T34] RIP: 0033:0x7fe81458ebe9
[  508.843968][   T34] RSP: 002b:00007fe815498038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.847434][   T34] RAX: ffffffffffffffda RBX: 00007fe8147b5fa0 RCX: 00007fe81458ebe9
[  508.850205][   T34] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  508.852973][   T34] RBP: 00007fe814611e19 R08: 0000000000000000 R09: 0000000000000000
[  508.888811][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.891949][   T34] R13: 00007fe8147b6038 R14: 00007fe8147b5fa0 R15: 00007ffd20a44f58
[  508.922073][   T34]  </TASK>
[  508.923440][   T34] INFO: task syz.1.3156:19912 blocked for more than 143 seconds.
[  508.934376][   T34]       Not tainted syzkaller #0
[  508.936454][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.939892][   T34] task:syz.1.3156      state:D stack:25896 pid:19912 tgid:19911 ppid:5850   task_flags:0x400140 flags:0x00004004
[  508.982866][   T34] Call Trace:
[  508.984410][   T34]  <TASK>
[  508.985590][   T34]  __schedule+0x1798/0x4cc0
[  508.987431][   T34]  ? __lock_acquire+0xab9/0xd20
[  508.989350][   T34]  ? __lock_acquire+0xab9/0xd20
[  508.991142][   T34]  ? __pfx___schedule+0x10/0x10
[  508.993079][   T34]  ? schedule+0x91/0x360
[  509.028486][   T34]  schedule+0x165/0x360
[  509.030263][   T34]  schedule_preempt_disabled+0x13/0x30
[  509.032428][   T34]  __mutex_lock+0x7e6/0x1350
[  509.064309][   T34]  ? __mutex_lock+0x5bb/0x1350
[  509.066347][   T34]  ? nfsd_nl_listener_set_doit+0x137/0x1690
[  509.068774][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  509.070937][   T34]  ? __asan_memset+0x22/0x50
[  509.072922][   T34]  ? ____sys_sendmsg+0x505/0x830
[  509.113012][   T34]  ? ___sys_sendmsg+0x21f/0x2a0
[  509.115955][   T34]  ? __x64_sys_sendmsg+0x19b/0x260
[  509.118049][   T34]  nfsd_nl_listener_set_doit+0x137/0x1690
[  509.120250][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  509.122504][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  509.147857][   T34]  ? __nla_parse+0x40/0x60
[  509.149868][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  509.152182][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  509.181111][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  509.183539][   T34]  ? bpf_lsm_capable+0x9/0x20
[  509.194329][   T34]  ? security_capable+0x7e/0x2e0
[  509.196464][   T34]  genl_rcv_msg+0x60e/0x790
[  509.198342][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.200363][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  509.202825][   T34]  netlink_rcv_skb+0x208/0x470
[  509.237678][   T34]  ? __lock_acquire+0xab9/0xd20
[  509.240028][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.242461][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  509.273969][   T34]  ? down_read+0x1ad/0x2e0
[  509.275757][   T34]  genl_rcv+0x28/0x40
[  509.277299][   T34]  netlink_unicast+0x82f/0x9e0
[  509.279183][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  509.281228][   T34]  ? netlink_sendmsg+0x642/0xb30
[  509.283166][   T34]  ? skb_put+0x11b/0x210
[  509.318866][   T34]  netlink_sendmsg+0x805/0xb30
[  509.320887][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.323041][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  509.354583][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  509.356830][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.358971][   T34]  __sock_sendmsg+0x21c/0x270
[  509.360861][   T34]  ____sys_sendmsg+0x505/0x830
[  509.362777][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  509.397685][   T34]  ? import_iovec+0x74/0xa0
[  509.399614][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  509.401518][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  509.403661][   T34]  ? __fget_files+0x2a/0x420
[  509.432999][   T34]  ? __fget_files+0x3a0/0x420
[  509.451620][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  509.453594][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  509.464330][   T34]  ? do_syscall_64+0xbe/0x3b0
[  509.466326][   T34]  do_syscall_64+0xfa/0x3b0
[  509.468129][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  509.470133][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.472569][   T34]  ? exc_page_fault+0x9f/0xf0
[  509.510138][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.512305][   T34] RIP: 0033:0x7f41cb18ebe9
[  509.524209][   T34] RSP: 002b:00007f41cc009038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.527947][   T34] RAX: ffffffffffffffda RBX: 00007f41cb3b5fa0 RCX: 00007f41cb18ebe9
[  509.531044][   T34] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  509.569941][   T34] RBP: 00007f41cb211e19 R08: 0000000000000000 R09: 0000000000000000
[  509.573112][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  509.594068][   T34] R13: 00007f41cb3b6038 R14: 00007f41cb3b5fa0 R15: 00007ffc470ac9b8
[  509.597251][   T34]  </TASK>
[  509.604051][   T34] 
[  509.604051][   T34] Showing all locks held in the system:
[  509.606835][   T34] 2 locks held by kworker/u8:1/13:
[  509.608503][   T34] 1 lock held by khungtaskd/34:
[  509.610296][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  509.634173][   T34] 1 lock held by kswapd1/90:
[  509.636018][   T34] 1 lock held by klogd/5282:
[  509.637447][   T34] 3 locks held by udevd/5293:
[  509.639093][   T34] 2 locks held by getty/5677:
[  509.640550][   T34]  #0: ffff88810d92c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  509.684061][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  509.687358][   T34] 1 lock held by sshd/5834:
[  509.689135][   T34]  #0: ffff888108a05200 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x86a/0x1200
[  509.693029][   T34] 2 locks held by syz-executor/5836:
[  509.717098][   T34] 2 locks held by syz.0.3132/19803:
[  509.718902][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.721668][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  509.751999][   T34] 2 locks held by syz.2.3140/19837:
[  509.756232][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.759372][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  509.762787][   T34] 2 locks held by syz.1.3156/19912:
[  509.794615][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.797399][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  509.801306][   T34] 2 locks held by syz.4.3169/20018:
[  509.803228][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.836869][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  509.840326][   T34] 2 locks held by syz.3.3192/20125:
[  509.842229][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.884363][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  509.887522][   T34] 2 locks held by syz.5.3264/20437:
[  509.889207][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.892041][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  509.933999][   T34] 2 locks held by syz.5.3264/20438:
[  509.936082][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.939303][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  509.943286][   T34] 2 locks held by syz.6.3272/20484:
[  509.974028][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.977341][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  509.981400][   T34] 2 locks held by syz.7.3297/20580:
[  509.983482][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  510.004610][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  510.033897][   T34] 2 locks held by syz.9.3320/20727:
[  510.035561][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  510.038077][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  510.041162][   T34] 2 locks held by syz.8.3375/20930:
[  510.043252][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  510.075654][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  510.078853][   T34] 2 locks held by syz.0.3473/21361:
[  510.080451][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  510.082960][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  510.123962][   T34] 2 locks held by syz.2.3495/21441:
[  510.125649][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  510.128203][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  510.131277][   T34] 2 locks held by syz.1.3508/21481:
[  510.132899][   T34]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  510.163872][   T34]  #1: ffffffff8e418588 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  510.167790][   T34] 1 lock held by syz-executor/21603:
[  510.189476][   T34] 
[  510.190672][   T34] =============================================
[  510.190672][   T34] 
[  510.203477][   T34] NMI backtrace for cpu 1
[  510.203495][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  510.203507][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  510.203513][   T34] Call Trace:
[  510.203519][   T34]  <TASK>
[  510.203524][   T34]  dump_stack_lvl+0x189/0x250
[  510.203547][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  510.203569][   T34]  ? __pfx__printk+0x10/0x10
[  510.203592][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  510.203606][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  510.203622][   T34]  ? __pfx__printk+0x10/0x10
[  510.203643][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  510.203665][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  510.203683][   T34]  watchdog+0xf93/0xfe0
[  510.203696][   T34]  ? watchdog+0x1de/0xfe0
[  510.203709][   T34]  kthread+0x711/0x8a0
[  510.203721][   T34]  ? __pfx_watchdog+0x10/0x10
[  510.203757][   T34]  ? __pfx_kthread+0x10/0x10
[  510.203782][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.203794][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.203804][   T34]  ? __pfx_kthread+0x10/0x10
[  510.203816][   T34]  ret_from_fork+0x3fc/0x770
[  510.203825][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  510.203835][   T34]  ? __switch_to_asm+0x39/0x70
[  510.203845][   T34]  ? __switch_to_asm+0x33/0x70
[  510.203854][   T34]  ? __pfx_kthread+0x10/0x10
[  510.203864][   T34]  ret_from_fork_asm+0x1a/0x30
[  510.203880][   T34]  </TASK>
[  510.260656][   T34] Sending NMI from CPU 1 to CPUs 0:
[  510.262850][    C0] NMI backtrace for cpu 0
[  510.262862][    C0] CPU: 0 UID: 0 PID: 5834 Comm: sshd Not tainted syzkaller #0 PREEMPT(full) 
[  510.262871][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  510.262876][    C0] RIP: 0010:kasan_check_range+0xb/0x2c0
[  510.262891][    C0] Code: ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 55 <41> 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d 04 37 49 39 f8 0f
[  510.262898][    C0] RSP: 0000:ffffc900032a6018 EFLAGS: 00000246
[  510.262906][    C0] RAX: 1ffffd4000300051 RBX: ffffea0001800280 RCX: ffffffff82157d7f
[  510.262911][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001800280
[  510.262916][    C0] RBP: ffffea0001800288 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  510.262921][    C0] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: 000000000006000a
[  510.262926][    C0] R13: ffffea0001800280 R14: ffffea0001800288 R15: 0000000000000000
[  510.262931][    C0] FS:  00007fd1cbd20800(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  510.262938][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  510.262942][    C0] CR2: 00007fd1cbd211a8 CR3: 000000010df6c000 CR4: 00000000000006f0
[  510.262966][    C0] Call Trace:
[  510.262971][    C0]  <TASK>
[  510.262976][    C0]  free_unref_folios+0x25f/0x1520
[  510.262992][    C0]  shrink_folio_list+0x44dd/0x4cd0
[  510.263007][    C0]  ? __pfx_lru_gen_add_folio+0x10/0x10
[  510.263019][    C0]  ? __pfx_shrink_folio_list+0x10/0x10
[  510.263035][    C0]  ? __pfx_css_rstat_updated+0x10/0x10
[  510.263043][    C0]  ? __mod_zone_page_state+0xd7/0x140
[  510.263053][    C0]  ? folio_try_get+0x1c/0x340
[  510.263062][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.263072][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.263083][    C0]  evict_folios+0x47f2/0x58b0
[  510.263100][    C0]  ? __pfx_evict_folios+0x10/0x10
[  510.263107][    C0]  ? shrink_slab+0x129/0x10d0
[  510.263119][    C0]  ? mem_cgroup_get_nr_swap_pages+0x32/0x110
[  510.263131][    C0]  ? get_swappiness+0x358/0x3c0
[  510.263142][    C0]  try_to_shrink_lruvec+0x8a3/0xb50
[  510.263157][    C0]  shrink_one+0x21b/0x7c0
[  510.263165][    C0]  ? shrink_node+0x2f10/0x3760
[  510.263171][    C0]  shrink_node+0x314e/0x3760
[  510.263180][    C0]  ? shrink_node+0x2f10/0x3760
[  510.263192][    C0]  ? rcu_read_lock_sched_held+0x89/0x100
[  510.263200][    C0]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  510.263207][    C0]  ? rcu_is_watching+0x15/0xb0
[  510.263214][    C0]  ? __pfx_shrink_node+0x10/0x10
[  510.263223][    C0]  ? attach_entity_load_avg+0x437/0x4f0
[  510.263234][    C0]  ? vmpressure_prio+0x33/0x150
[  510.263243][    C0]  do_try_to_free_pages+0x668/0x1960
[  510.263257][    C0]  ? __pfx_do_try_to_free_pages+0x10/0x10
[  510.263266][    C0]  ? allow_direct_reclaim+0x53/0x8d0
[  510.263274][    C0]  try_to_free_pages+0x8a2/0xdd0
[  510.263282][    C0]  ? psi_group_change+0xab8/0x1050
[  510.263291][    C0]  ? __pfx_try_to_free_pages+0x10/0x10
[  510.263301][    C0]  ? __lock_acquire+0xab9/0xd20
[  510.263317][    C0]  ? fs_reclaim_acquire+0x7d/0x100
[  510.263328][    C0]  __alloc_pages_direct_reclaim+0x144/0x300
[  510.263339][    C0]  ? __pfx___alloc_pages_direct_reclaim+0x10/0x10
[  510.263349][    C0]  ? wake_all_kswapds+0x111/0x280
[  510.263359][    C0]  __alloc_pages_slowpath+0x5ff/0xce0
[  510.263370][    C0]  __alloc_frozen_pages_noprof+0x319/0x370
[  510.263378][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  510.263387][    C0]  ? policy_nodemask+0x27c/0x720
[  510.263398][    C0]  alloc_pages_mpol+0x232/0x4a0
[  510.263409][    C0]  folio_alloc_mpol_noprof+0x39/0x70
[  510.263419][    C0]  __read_swap_cache_async+0x166/0x510
[  510.263429][    C0]  swap_cluster_readahead+0x4cf/0x5f0
[  510.263438][    C0]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  510.263449][    C0]  ? get_vma_policy+0x27c/0x3c0
[  510.263459][    C0]  swapin_readahead+0x17d/0xb50
[  510.263466][    C0]  ? __pfx_filemap_get_entry+0x10/0x10
[  510.263475][    C0]  ? __pfx_swapin_readahead+0x10/0x10
[  510.263483][    C0]  ? __filemap_get_folio+0x9a6/0xaf0
[  510.263491][    C0]  ? swap_cache_get_folio+0xae/0x3b0
[  510.263500][    C0]  do_swap_page+0x525/0x5ac0
[  510.263509][    C0]  ? __lock_acquire+0xab9/0xd20
[  510.263522][    C0]  ? do_swap_page+0x184/0x5ac0
[  510.263530][    C0]  ? __pfx_do_swap_page+0x10/0x10
[  510.263545][    C0]  ? __pfx_default_wake_function+0x10/0x10
[  510.263556][    C0]  ? ___pte_offset_map+0x1cf/0x250
[  510.263567][    C0]  ? pte_offset_map_rw_nolock+0xea/0x160
[  510.263576][    C0]  __handle_mm_fault+0xe55/0x5440
[  510.263589][    C0]  ? __pfx___handle_mm_fault+0x10/0x10
[  510.263602][    C0]  ? find_vma+0xe7/0x160
[  510.263611][    C0]  ? __pfx_find_vma+0x10/0x10
[  510.263620][    C0]  handle_mm_fault+0x40a/0x8e0
[  510.263632][    C0]  do_user_addr_fault+0x764/0x1390
[  510.263647][    C0]  exc_page_fault+0x76/0xf0
[  510.263657][    C0]  asm_exc_page_fault+0x26/0x30
[  510.263665][    C0] RIP: 0010:__get_user_8+0x14/0x30
[  510.263674][    C0] Code: 00 e9 90 02 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 1f 00 <48> 8b 10 31 c0 0f 1f 00 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90
[  510.263680][    C0] RSP: 0000:ffffc900032a7dd8 EFLAGS: 00010283
[  510.263686][    C0] RAX: 00007fd1cbd211a8 RBX: ffff888020a2ebb0 RCX: 5131a0b54ae5e600
[  510.263691][    C0] RDX: 00007ffffffff000 RSI: ffffffff8dba6d0d RDI: ffffffff8be33680
[  510.263697][    C0] RBP: ffffc900032a7ef0 R08: 0000000000000000 R09: ffffffff820b7d00
[  510.263701][    C0] R10: dffffc0000000000 R11: fffff52000654fb5 R12: dffffc0000000000
[  510.263706][    C0] R13: ffffc900032a7fd8 R14: 00007fd1cbd211a8 R15: ffff888020a2d640
[  510.263713][    C0]  ? __might_fault+0xb0/0x130
[  510.263759][    C0]  __rseq_handle_notify_resume+0x137/0x11f0
[  510.263785][    C0]  ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[  510.263798][    C0]  ? __pfx___rseq_handle_notify_resume+0x10/0x10
[  510.263808][    C0]  irqentry_exit_to_user_mode+0x90/0x120
[  510.263819][    C0]  exc_page_fault+0x9f/0xf0
[  510.263828][    C0]  asm_exc_page_fault+0x26/0x30
[  510.263835][    C0] RIP: 0033:0x7fd1cbb4721c
[  510.263843][    C0] Code: c4 98 00 00 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 8b 47 04 c3 48 8b 07 8b 40 04 c3 8b 47 30 c3 48 8b 07 89 c9 ff 60 20 <48> 8b 07 c3 8b 47 10 c3 48 8b 47 10 c3 48 8b 47 60 c3 48 89 77 60
[  510.263849][    C0] RSP: 002b:00007ffe875afd68 EFLAGS: 00010246
[  510.263855][    C0] RAX: 0000000000000000 RBX: 0000559bd57b0520 RCX: 0000000000000000
[  510.263860][    C0] RDX: 000000000000009c RSI: 00007fd1cbbfc4cc RDI: 0000559bd57b0520
[  510.263864][    C0] RBP: 00007ffe875afde8 R08: 00007ffe875afde8 R09: 0000000000000001
[  510.263869][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  510.263873][    C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[  510.263881][    C0]  </TASK>
[  510.497071][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  510.499889][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  510.503515][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  510.507488][   T34] Call Trace:
[  510.508874][   T34]  <TASK>
[  510.510246][   T34]  dump_stack_lvl+0x99/0x250
[  510.511785][   T34]  ? __asan_memcpy+0x40/0x70
[  510.513309][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  510.515227][   T34]  ? __pfx__printk+0x10/0x10
[  510.517055][   T34]  vpanic+0x281/0x750
[  510.518596][   T34]  ? __pfx_vpanic+0x10/0x10
[  510.520332][   T34]  ? preempt_schedule+0xae/0xc0
[  510.522218][   T34]  ? preempt_schedule_common+0x83/0xd0
[  510.524518][   T34]  panic+0xb9/0xc0
[  510.526250][   T34]  ? __pfx_panic+0x10/0x10
[  510.528169][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  510.530569][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  510.533051][   T34]  watchdog+0xfd2/0xfe0
[  510.534738][   T34]  ? watchdog+0x1de/0xfe0
[  510.536504][   T34]  kthread+0x711/0x8a0
[  510.538214][   T34]  ? __pfx_watchdog+0x10/0x10
[  510.540114][   T34]  ? __pfx_kthread+0x10/0x10
[  510.541964][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.544025][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.546140][   T34]  ? __pfx_kthread+0x10/0x10
[  510.547948][   T34]  ret_from_fork+0x3fc/0x770
[  510.549808][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  510.551830][   T34]  ? __switch_to_asm+0x39/0x70
[  510.553687][   T34]  ? __switch_to_asm+0x33/0x70
[  510.555534][   T34]  ? __pfx_kthread+0x10/0x10
[  510.557348][   T34]  ret_from_fork_asm+0x1a/0x30
[  510.559359][   T34]  </TASK>
[  510.561288][   T34] Kernel Offset: disabled
[  510.563174][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:49:56  Registers:
info registers vcpu 0

CPU#0
RAX=bd84442c1d61a800 RBX=0000000000000000 RCX=bd84442c1d61a800 RDX=0000000000000000
RSI=ffffffff8d9cb37d RDI=ffffffff8be33680 RBP=ffffffff81fde19c RSP=ffffc900082962f8
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff940001a0621
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff8b79c162 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555654ea500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f676ccd8b08 CR3=00000001204c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 0000000000000000 XMM01=41540075253a7325 206e692074692078
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 ffff00000000ff00 XMM05=0000000000000041 002f303132303865
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ff00000000000000 XMM09=66722f3439327968 702f313132303865
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bde60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99def6b0 RSP=ffffc9000068f650
R8 =ffff888020c80237 R9 =1ffff11004190046 R10=dffffc0000000000 R11=ffffffff854f32b0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f3327 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555656a5e28 CR3=000000010df6c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
