last executing test programs:

4.730838131s ago: executing program 2 (id=208):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100000000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r1, 0x5, 0x10001, 0xbd0d})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000008000000ffffac14142a0500090029000000080004000005fb18e57a3fe8ac36d7e6"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)

3.862147493s ago: executing program 2 (id=222):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a0300000000000000000002000000090002"], 0x34}}, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r5, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r5, 0x1)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r10=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000380)={r10, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r8, 0x0, 0x47, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r11, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r5, @ANYRES64=r3], 0x1c}}, 0x0)

3.697476927s ago: executing program 2 (id=225):
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r3=>0x0}, &(0x7f0000000880)=0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="900000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e162bd006800128009000100766c616e00000000580002804c0003800c000100e22a0000061b00000c00010000040000090000000c000100f5fe3f94e0a91c440880d5f9ffff020000000c0001000400715b80000000e6e14b8407000000034000000c0001000008000500"/126, @ANYRES32=0x0, @ANYBLOB], 0x90}}, 0x2)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9, 0xa}, {0xfffa, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r3, 0xef, 0x6}, 0xc)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r3, 0x8}, 0x8)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xaa00689f191c08e3}, 0x94)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYRESOCT, @ANYRESHEX=r10, @ANYRES64=r12, @ANYBLOB="0c0099004000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r12, 0x2, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0))

3.563315075s ago: executing program 1 (id=229):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYRES32=r1], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800)={0x0, r0}, 0xfffffffffffffee9)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8098}, 0x48854)

3.482925379s ago: executing program 2 (id=230):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x4)
syz_genetlink_get_family_id$l2tp(0x0, r0)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000283afffe800000000000000000000000000000fe8000000000000000000000000000aa890090780000000000000000000000000000000100000001ff02000000000000000000000040"], 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="a547ae412132", @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x4, 0x0, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r9, @ANYBLOB, @ANYRES32=r8], 0x38}, 0x1, 0x0, 0x0, 0x68040}, 0x4)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r6, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x2d}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xdadb}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

3.479816657s ago: executing program 0 (id=231):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x3}, 0x50)
r4 = socket$inet6(0xa, 0x1, 0xb)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x20)
shutdown(r2, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r6, 0x400454ce, 0xa)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03210000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)

3.478976668s ago: executing program 1 (id=232):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0xe}, 0x48)
unshare(0x8000000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000280), 0x0}, 0x20)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r2, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xe0000, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, 0x1, [@null, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

3.322429055s ago: executing program 1 (id=233):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000380)={'erspan0\x00', <r3=>0x0, 0x10, 0x8000, 0x7f, 0x0, {{0x3f, 0x4, 0x2, 0x3d, 0xfc, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010101, {[@timestamp={0x44, 0x18, 0xde, 0x0, 0x0, [0x4, 0x8, 0x8001, 0x10, 0x6]}, @end, @ssrr={0x89, 0x2b, 0xe4, [@remote, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010101, @multicast1, @empty, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @local]}, @ssrr={0x89, 0x23, 0xcc, [@empty, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x44, 0x9f, 0x3, 0x7, [{@remote, 0x6}, {@local}, {@multicast1, 0x5}, {@multicast2, 0x82}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010100, 0x6}, {@empty, 0x8cf}, {@local, 0x5}]}, @noop, @timestamp={0x44, 0x18, 0x6a, 0x0, 0xd, [0xe7e7, 0x0, 0xa, 0x9, 0x1]}, @lsrr={0x83, 0xf, 0xb4, [@remote, @multicast2, @rand_addr=0x64010100]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x5, 0xe, "b783356c92b78eec7f65088c"}]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48084}, 0x810)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, 0x0, 0x4040004)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000800", @ANYRES16=r10, @ANYBLOB="3183000000000000000019000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r9)

3.319111845s ago: executing program 1 (id=234):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x800, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ac00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r6 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYRES16=r6], 0x1000f)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x4, 0x6, @remote}, 0x14)

3.317289919s ago: executing program 2 (id=235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
accept4$llc(r2, 0x0, &(0x7f0000000040), 0x800)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r8 = accept(r7, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
sendmsg$can_j1939(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)="087ea2dfc163244d79860424f578b3b35640b9b5727f9915ef621778087eaa293be402da584b2feb815f", 0x2a}, 0x1, 0x0, 0x0, 0x24000000}, 0x14)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x1, 0x5, 0x400, 0x3}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r9, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030425bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000800000140012802d00010062726902006500000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r12 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r12, &(0x7f0000000980)={&(0x7f00000003c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/174, 0xae}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000680)=""/241, 0xf1}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000440)=""/48, 0x30}], 0x6, &(0x7f0000000800)=""/180, 0xb4}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

3.222378453s ago: executing program 0 (id=236):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
syz_genetlink_get_family_id$l2tp(0x0, r6)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r7, 0x8000000000000002, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="94001000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fedbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="780002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x94}}, 0x4)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, 0x0, 0x24008045)
epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r9, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'tunl0\x00'})

3.162467389s ago: executing program 0 (id=237):
r0 = socket$inet(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vxcan1\x00'})
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1e2febc4, 0x0, 0x8}, 0x10, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000380)=""/202, &(0x7f0000000200)=0xca)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r8=>0x0})
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r9, 0x104, 0x6, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@getchain={0x34, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xf, 0xb}, {0xc, 0xe}, {0x10, 0x5}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x6}]}, 0x34}}, 0x0)

3.161621304s ago: executing program 0 (id=238):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0x10000, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0400, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
openat$cgroup_ro(r9, &(0x7f0000000600)='freezer.self_freezing\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000100001040000fffffffb7164475430d797c9acb78c6a87f4598861179cd984653652d8490ae739497c00"/55, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e000300000003000000"], 0x40}}, 0x0)
accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000780)={{{@in=@initdev, @in6=@empty}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8)

3.08128855s ago: executing program 1 (id=239):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x120, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x68}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9d8aa05c514f9604}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x136}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb45d}]}, 0x120}}, 0x40000)
unshare(0x20000400)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x80088a02, &(0x7f0000000000))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs, &(0x7f0000000740)=0x6e, 0x80000)
recvmmsg$unix(r6, &(0x7f00000018c0)=[{{&(0x7f0000000780), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/40, 0x28}, {&(0x7f0000000840)=""/198, 0xc6}, {&(0x7f0000000940)=""/168, 0xa8}, {&(0x7f0000000a00)=""/223, 0xdf}, {&(0x7f0000000b00)=""/98, 0x62}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)=""/30, 0x1e}, {&(0x7f0000000c40)=""/187, 0xbb}, {&(0x7f0000000d00)=""/134, 0x86}, {&(0x7f0000000dc0)=""/34, 0x22}], 0x4, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000f80)=""/127, 0x7f}, {&(0x7f0000001000)=""/236, 0xec}], 0x2, &(0x7f0000001140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f00000011c0), 0x6e, &(0x7f0000001280)=[{&(0x7f0000001240)=""/39, 0x27}], 0x1}}, {{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001340)=""/147, 0x93}], 0x1, &(0x7f0000001440)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000001840)=[{&(0x7f0000001600)=""/132, 0x84}, {&(0x7f00000016c0)=""/247, 0xf7}, {&(0x7f00000017c0)=""/79, 0x4f}], 0x3, &(0x7f0000001880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}}], 0x6, 0x10020, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x2c, 0x48, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, 0x0, 0x401}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)

61.798054ms ago: executing program 0 (id=240):
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r1=>r0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f00000006c0)=@ethtool_ts_info})
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004200)=ANY=[@ANYBLOB="ac0c0000", @ANYRES16=r7, @ANYBLOB="050027bd7000bddbdf25010000001400020077673000000000000000000000000000840c088050000080200004000a004e2200000000000000000000000000000000000000010500000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b060005"], 0xcac}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0xc4, r8, 0x1, 0xfffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x4}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x1b, 0x4, 0x1b, 0x30, 0xb, 0x16, 0x48, 0x48, 0x1, 0x4, 0x60, 0x55, 0x18, 0x2, 0x9, 0x6, 0x0, 0x4, 0x1b]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3}, {0x2, 0x5}, {0x3, 0x4}, {0x7}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x4}, {0x7, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0xb}, {0x1, 0x7}, {0x2, 0x3}, {0x5, 0x7}, {0x6, 0x6}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x6, 0x9}, {0x5, 0xa}, {0x3, 0x2}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd510, 0xaf9e, 0x0, 0x7ff, 0x2, 0x691, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x80, 0x8000, 0x50, 0x2, 0x68b, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0xc, 0x30, 0x24, 0x76, 0x3b, 0x6c, 0x4, 0x36, 0x60, 0x6, 0x0, 0x6, 0xc, 0x18, 0x6c, 0x2, 0x30, 0x36, 0x18, 0x5, 0x24, 0x36, 0x16, 0x0, 0x3, 0x1b, 0x12, 0x3, 0x60]}]}]}]}, 0xc4}}, 0x4000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x404c894)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x20000000)
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18)
ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000040)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})
r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8)
close(r12)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="0a001c008e9381064e81f7a2db44b9b545c7910006007c09", 0x18}], 0x1}, 0x40008c4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r13})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r14 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r12}, 0x8)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r14, 0x80047210, &(0x7f00000004c0))
socket$nl_generic(0x10, 0x3, 0x10)

61.393373ms ago: executing program 2 (id=241):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fddbdf250100000008000300fdffffff050006000600000008000300030000000500050000000000100004000a0000000f000000040000002c186e4ddc312eb5c4832472643e15530ed53d6b2fee6bb2512351fd17e0269dc297bbe27fbee8e5635115eba02eb6f40c36efb3275b71a2cdfc62b65ade1fa7f4933ea8c3cd2b1c06cfa56aa806c2040bb83f5ad16b03890e3330fb38e4ef583709ec777c8d8d36bb8d45857ae6d851fe700932b149ccba91bbeef797f04e0c6ba826a4fb7defcd6f379e5a39ed0736739589335f59cb0ba7c04639d4e8d5e2dad3ecd8bc090d638c87ce100a32214b84b709532f9d52ee192255b12f406698301348b81431ee5f721b8d95c755"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x44800)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0xffff, 0x4, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00'}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r3, 0x1)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'nr0\x00', 0x400})
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r4 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x90000005})
epoll_pwait(r7, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0)
epoll_wait(r7, &(0x7f00000001c0)=[{}], 0x1, 0x80000001)
connect$unix(r5, &(0x7f0000000200)=@file={0x0, './file0/file0\x00'}, 0x6e)
socket(0x22, 0x2, 0x2)

809.402µs ago: executing program 0 (id=242):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000002f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r3=>0x0}) (rerun: 64)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x23, &(0x7f0000000c80), 0x4) (async)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc, r3}, 0xc) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}) (rerun: 64)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11330200318800003000128009000100766c616e00000000200002800c000200fe00000006000100020000000600050088a800000800050000000000", @ANYRES32=r7, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

0s ago: executing program 1 (id=243):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="bbaea44b9bec2dfedcf553118bcdbfad81b7ea5e4badaf87b5d1320644d7a7b10d5cd9c073514e5eebf826a132428ae13a3435efde66d373a114b7eaaacef3a634d117c273d82de8cbfa82beccbc1bb22afc48317c7feabd6281f79b88d84575d2324432e05dde5a7549b89c3d0096188671411ab3b8ccf3f6266be8324cfd36c0bc85a43c1b3fd8e69bf8b3d55dd423", 0x90, 0x40050, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt(r0, 0x6, 0xad9f, &(0x7f0000000100)=""/171, &(0x7f00000001c0)=0xab)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00', 0x200})
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000280)={0x3, 0x8, 0x29, &(0x7f0000000240)=""/41})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000002c0)={'team_slave_1\x00'})
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x1405, 0x100, 0x70bd28, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
ioctl$SIOCRSACCEPT(r0, 0x89e3)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1)
r4 = socket$inet(0x2, 0x800, 0x5)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r5, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x62}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
r7 = accept$inet(r4, &(0x7f0000000680)={0x2, 0x0, @empty}, &(0x7f00000006c0)=0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r8, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780)=0x4)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x18, 0x1412, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4856}, 0x4000001)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r9)
r10 = accept4$inet(r4, &(0x7f0000000900), &(0x7f0000000940)=0x10, 0x80800)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000000980), &(0x7f00000009c0)=0x4)
socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r9)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f0000000a40), {[{{@ip={@multicast1, @broadcast, 0xff000000, 0xffffff00, 'caif0\x00', 'rose0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x8}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0x6], 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}, {0x0, [0x7, 0x8, 0x1, 0x3, 0x0, 0x4], 0x5, 0x1}}}}, {{@ip={@broadcast, @broadcast, 0xff000000, 0xffffff00, 'pim6reg1\x00', 'wg1\x00', {}, {0xff}, 0x11, 0x4, 0x77}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x1, 0x7, [0x33, 0xa, 0x39, 0x30, 0x20, 0x3b, 0x39, 0x30, 0x40, 0xb, 0x15, 0x3c, 0x19, 0x24, 0x12, 0xc], 0x0, 0x1, 0x3f391ce5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)
setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000dc0)={{0x88, @loopback, 0x4e23, 0x4, 'dh\x00', 0x11, 0xee, 0x34}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x4e22, 0x10000, 0x14, 0x7, 0x3}}, 0x44)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20016' (ED25519) to the list of known hosts.
syzkaller login: [   47.619957][ T5773] cgroup: Unknown subsys name 'net'
[   47.738047][ T5773] cgroup: Unknown subsys name 'cpuset'
[   47.744271][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.744758][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.631087][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.635242][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.638842][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.642433][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.646057][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.665673][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.672588][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.676309][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.679599][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.683668][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.688514][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.692296][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.728732][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.743686][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.754575][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.045310][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.090573][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.152599][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.216897][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.219861][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.223083][ T5841] bridge_slave_0: entered allmulticast mode
[   55.227833][ T5841] bridge_slave_0: entered promiscuous mode
[   55.277625][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.280637][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.286145][ T5841] bridge_slave_1: entered allmulticast mode
[   55.290075][ T5841] bridge_slave_1: entered promiscuous mode
[   55.294118][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.297075][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.300155][ T5846] bridge_slave_0: entered allmulticast mode
[   55.305127][ T5846] bridge_slave_0: entered promiscuous mode
[   55.310122][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.313087][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.316498][ T5846] bridge_slave_1: entered allmulticast mode
[   55.320510][ T5846] bridge_slave_1: entered promiscuous mode
[   55.417450][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.421404][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.425390][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.428363][ T5845] bridge_slave_0: entered allmulticast mode
[   55.432102][ T5845] bridge_slave_0: entered promiscuous mode
[   55.438680][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.445814][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.450971][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.468062][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.471064][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.474199][ T5845] bridge_slave_1: entered allmulticast mode
[   55.477948][ T5845] bridge_slave_1: entered promiscuous mode
[   55.535017][ T5846] team0: Port device team_slave_0 added
[   55.552755][ T5841] team0: Port device team_slave_0 added
[   55.557549][ T5846] team0: Port device team_slave_1 added
[   55.562520][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.568564][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.573102][ T5841] team0: Port device team_slave_1 added
[   55.626637][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.629484][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.639467][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.645971][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.648845][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.659502][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.678550][ T5845] team0: Port device team_slave_0 added
[   55.689766][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.692747][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.703671][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.709042][ T5845] team0: Port device team_slave_1 added
[   55.712514][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.715968][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.726630][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.785406][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.788020][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.797272][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.814526][ T5846] hsr_slave_0: entered promiscuous mode
[   55.817332][ T5846] hsr_slave_1: entered promiscuous mode
[   55.827110][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.829650][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.839579][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.864669][ T5841] hsr_slave_0: entered promiscuous mode
[   55.868068][ T5841] hsr_slave_1: entered promiscuous mode
[   55.871170][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   55.873924][ T5841] Cannot create hsr debugfs directory
[   55.959309][ T5845] hsr_slave_0: entered promiscuous mode
[   55.962726][ T5845] hsr_slave_1: entered promiscuous mode
[   55.966603][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   55.969050][ T5845] Cannot create hsr debugfs directory
[   56.270615][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.285008][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.290856][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.304777][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.355250][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.370464][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.385926][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.393022][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.447344][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.464156][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.478599][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.487635][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.560030][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.599478][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.612495][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.615760][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.637153][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.640161][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.667364][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.676460][   T54] Bluetooth: hci0: command tx timeout
[   56.708103][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.729402][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.732529][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.755608][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.758615][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.763859][   T54] Bluetooth: hci1: command tx timeout
[   56.791816][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.843438][   T54] Bluetooth: hci2: command tx timeout
[   56.869908][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.889937][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.893086][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.915824][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.919000][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.975226][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.058038][ T5846] veth0_vlan: entered promiscuous mode
[   57.068007][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.079733][ T5846] veth1_vlan: entered promiscuous mode
[   57.140809][ T5846] veth0_macvtap: entered promiscuous mode
[   57.161225][ T5846] veth1_macvtap: entered promiscuous mode
[   57.181810][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.187196][ T5841] veth0_vlan: entered promiscuous mode
[   57.211448][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.220057][ T5841] veth1_vlan: entered promiscuous mode
[   57.230069][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.249889][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.255525][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.259300][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.262916][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.291472][ T5841] veth0_macvtap: entered promiscuous mode
[   57.311327][ T5841] veth1_macvtap: entered promiscuous mode
[   57.330916][ T5845] veth0_vlan: entered promiscuous mode
[   57.362178][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.366825][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.371950][ T5845] veth1_vlan: entered promiscuous mode
[   57.397005][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.412372][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.415751][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.428830][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.435351][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.438731][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.495249][ T5845] veth0_macvtap: entered promiscuous mode
[   57.498831][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.504588][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.520280][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.521908][ T5845] veth1_macvtap: entered promiscuous mode
[   57.523000][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.575563][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.577006][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.586002][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.594136][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.602865][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.644142][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.656767][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.660412][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.669623][ T5912] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.715584][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.860696][ T5914] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.882465][ T3616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.886855][ T3616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.922889][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.927530][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.105804][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'.
[   58.115456][ T5933] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8'.
[   58.226406][ T5942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'.
[   58.230980][ T5942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'.
[   58.240934][ T5942] gretap0: entered promiscuous mode
[   58.246302][ T5942] gretap0: left promiscuous mode
[   58.312196][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'.
[   58.373539][ T5947] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET)
[   58.443121][ T5953] Zero length message leads to an empty skb
[   58.507599][ T5958] netlink: 'syz.2.16': attribute type 10 has an invalid length.
[   58.518696][ T5960] openvswitch: netlink: IP tunnel TTL not specified.
[   58.532385][ T5958] 8021q: adding VLAN 0 to HW filter on device team0
[   58.537888][ T5958] bond0: (slave team0): Enslaving as an active interface with an up link
[   58.546241][ T5958] netlink: 'syz.2.16': attribute type 10 has an invalid length.
[   58.565680][ T5958] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   58.646268][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   58.657641][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'.
[   58.754092][   T54] Bluetooth: hci0: command tx timeout
[   58.833478][   T54] Bluetooth: hci1: command tx timeout
[   58.913893][   T54] Bluetooth: hci2: command tx timeout
[   58.930053][ T5914] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.268706][ T5914] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.579418][ T5914] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.834089][   T54] Bluetooth: hci0: command tx timeout
[   60.913867][   T54] Bluetooth: hci1: command tx timeout
[   60.993521][   T54] Bluetooth: hci2: command tx timeout
[   61.056521][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'.
[   61.061526][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'.
[   61.153137][ T6055] netlink: 'syz.1.41': attribute type 11 has an invalid length.
[   61.157350][ T6055] netlink: 'syz.1.41': attribute type 4 has an invalid length.
[   61.160324][ T6055] netlink: 224 bytes leftover after parsing attributes in process `syz.1.41'.
[   61.375799][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.43'.
[   61.386992][ T6066] tipc: Started in network mode
[   61.389333][ T6066] tipc: Node identity aa06a7955fda, cluster identity 4711
[   61.392683][ T6066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.399586][ T6066] syzkaller0: entered promiscuous mode
[   61.401898][ T6066] syzkaller0: entered allmulticast mode
[   61.409724][ T6066] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   61.419386][ T6066] tipc: Resetting bearer <eth:syzkaller0>
[   61.433496][ T6065] tipc: Resetting bearer <eth:syzkaller0>
[   61.447943][ T6065] tipc: Disabling bearer <eth:syzkaller0>
[   61.557237][ T6071] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.680238][ T6079] tipc: Enabling of bearer <et:g> rejected, media not registered
[   61.688100][ T6079] syzkaller0: entered promiscuous mode
[   61.690569][ T6079] syzkaller0: entered allmulticast mode
[   61.748409][ T6082] pim6reg: entered allmulticast mode
[   61.825314][ T6081] pim6reg: left allmulticast mode
[   61.981465][ T6093] netlink: 'syz.1.52': attribute type 10 has an invalid length.
[   61.997376][ T6093] 8021q: adding VLAN 0 to HW filter on device team0
[   62.001847][ T6093] bond0: (slave team0): Enslaving as an active interface with an up link
[   62.007608][ T6094] netlink: 'syz.1.52': attribute type 10 has an invalid length.
[   62.015989][ T6094] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   62.253835][ T5873] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.257630][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.261924][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.351260][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.354352][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.416751][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.426360][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.568549][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.586336][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   62.590305][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.600871][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   62.606082][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.611961][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   62.633583][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.740265][ T6133] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   62.914556][   T54] Bluetooth: hci0: command tx timeout
[   62.994969][   T54] Bluetooth: hci1: command tx timeout
[   63.045825][ T6164] warning: `syz.0.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.068598][ T6170] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   63.074987][   T54] Bluetooth: hci2: command tx timeout
[   63.088279][ T6169] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   63.409349][ T6193] __nla_validate_parse: 13 callbacks suppressed
[   63.409364][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'.
[   63.492986][ T6194] pim6reg: entered allmulticast mode
[   63.519585][ T6194] pim6reg: left allmulticast mode
[   63.576288][ T6199] netlink: 80 bytes leftover after parsing attributes in process `syz.1.83'.
[   63.780662][ T6209] netlink: 'syz.2.90': attribute type 1 has an invalid length.
[   63.875668][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'.
[   64.185517][ T6229] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   64.385803][ T6238] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001
[   64.711611][ T6268] netlink: 'syz.2.107': attribute type 1 has an invalid length.
[   64.752803][ T6268] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.814048][ T6268] bond1: (slave veth3): Enslaving as an active interface with a down link
[   64.828793][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'.
[   64.838284][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv1
[   64.846207][ T6268] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   64.861676][ T6273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.109'.
[   64.870359][ T6273] netlink: 34 bytes leftover after parsing attributes in process `syz.0.109'.
[   64.934542][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.937312][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.012678][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.019553][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.282953][ T6294] netlink: 'syz.0.114': attribute type 1 has an invalid length.
[   65.285982][ T6294] netlink: 120 bytes leftover after parsing attributes in process `syz.0.114'.
[   65.861255][ T6312] vlan2: entered promiscuous mode
[   65.865650][ T6312] vlan2: entered allmulticast mode
[   65.868001][ T6312] hsr_slave_1: entered allmulticast mode
[   65.872874][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'.
[   65.890440][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.921027][ T6312] bridge_slave_1 (unregistering): left allmulticast mode
[   65.927438][ T6312] bridge_slave_1 (unregistering): left promiscuous mode
[   65.929815][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.353193][ T6343] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   66.565042][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   66.569110][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   66.572912][ T6354] netlink: 'syz.1.136': attribute type 19 has an invalid length.
[   66.580029][ T6355] netlink: 'syz.1.136': attribute type 19 has an invalid length.
[   66.625890][ T6355] netlink: 'syz.1.136': attribute type 19 has an invalid length.
[   66.628150][ T6354] netlink: 'syz.1.136': attribute type 19 has an invalid length.
[   66.727793][ T6357] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   66.770866][ T6361] bond0: (slave syz_tun): Releasing backup interface
[   66.777859][ T6361] bond0: (slave team0): Releasing backup interface
[   66.781693][ T6361] bridge_slave_0: left allmulticast mode
[   66.785996][ T6361] bridge_slave_0: left promiscuous mode
[   66.788762][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.796234][ T6361] bridge_slave_1: left allmulticast mode
[   66.799257][ T6361] bridge_slave_1: left promiscuous mode
[   66.801567][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.808719][ T6361] bond0: (slave bond_slave_0): Releasing backup interface
[   66.813877][ T6361] bond0: (slave bond_slave_1): Releasing backup interface
[   66.819932][ T6361] team0: Port device team_slave_0 removed
[   66.825737][ T6361] team0: Port device team_slave_1 removed
[   66.828487][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.832324][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.863766][ T6361] team0: Mode changed to "activebackup"
[   67.003025][ T6372] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   67.549478][ T6408] netlink: 'syz.0.152': attribute type 7 has an invalid length.
[   67.552549][ T6408] netlink: 'syz.0.152': attribute type 8 has an invalid length.
[   67.567336][ T6408] gretap0: entered promiscuous mode
[   67.570646][ T6408] batadv_slave_1: entered promiscuous mode
[   67.576464][ T6408] erspan0: entered promiscuous mode
[   67.816276][ T6416] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   67.820856][ T6416] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   67.866467][ T6419] macvlan3: entered promiscuous mode
[   67.869398][ T6419] macvlan3: entered allmulticast mode
[   67.871808][ T6419] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   68.256064][ T6448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.260512][ T6453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.366366][ T6462] netlink: 'syz.2.165': attribute type 1 has an invalid length.
[   68.397279][ T6462] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.506682][ T6469] __nla_validate_parse: 15 callbacks suppressed
[   68.506693][ T6469] netlink: 68 bytes leftover after parsing attributes in process `syz.1.167'.
[   68.537695][ T6471] tipc: Started in network mode
[   68.539887][ T6471] tipc: Node identity 8a5d7db2fd43, cluster identity 4711
[   68.543066][ T6471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.549419][ T6471] syzkaller0: entered promiscuous mode
[   68.551777][ T6471] syzkaller0: entered allmulticast mode
[   68.575387][ T5874] IPVS: starting estimator thread 0...
[   68.577184][ T6471] tipc: Resetting bearer <eth:syzkaller0>
[   68.595934][ T6465] tipc: Resetting bearer <eth:syzkaller0>
[   68.607633][ T6465] tipc: Disabling bearer <eth:syzkaller0>
[   68.641928][ T6477] netlink: 32 bytes leftover after parsing attributes in process `syz.1.170'.
[   68.680652][ T6467] bond2: (slave gretap1): making interface the new active one
[   68.684452][ T6474] IPVS: using max 80 ests per chain, 192000 per kthread
[   68.704946][ T6467] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   68.896724][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[   68.920304][ T6486] pim6reg: entered allmulticast mode
[   68.935973][ T6486] pim6reg: left allmulticast mode
[   68.987751][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[   69.152092][ T6496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.247888][ T6496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.262915][ T6499] netlink: 104 bytes leftover after parsing attributes in process `syz.0.175'.
[   69.310470][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'.
[   69.319262][ T6496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.331868][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'.
[   69.340884][ T6505] bridge5: entered promiscuous mode
[   69.346955][ T6505] macsec1: entered promiscuous mode
[   69.351775][ T6505] macsec1: entered allmulticast mode
[   69.353960][ T6505] bridge5: entered allmulticast mode
[   69.359700][ T6505] bridge5: port 1(macsec1) entered blocking state
[   69.361969][ T6505] bridge5: port 1(macsec1) entered disabled state
[   69.366264][ T6505] bridge5: left allmulticast mode
[   69.368313][ T6505] bridge5: left promiscuous mode
[   69.396364][ T6496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.506658][ T5873] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.522861][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.534698][ T5873] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.550972][ T5873] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.731679][ T6552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.189'.
[   70.960482][ T6555] batadv_slave_1: entered promiscuous mode
[   71.237316][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.239486][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.367385][ T6475] delete_channel: no stack
[   71.556519][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.201'.
[   71.561001][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.201'.
[   71.601268][ T6553] batadv_slave_1: left promiscuous mode
[   72.234644][ T6613] syzkaller0: entered promiscuous mode
[   72.236672][ T6613] syzkaller0: entered allmulticast mode
[   72.649289][ T6620] openvswitch: netlink: Flow actions attr not present in new flow.
[   72.857102][ T6628] validate_nla: 1 callbacks suppressed
[   72.857112][ T6628] netlink: 'syz.1.212': attribute type 15 has an invalid length.
[   73.081488][ T6633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.304385][ T6650] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   73.410473][ T6657] netlink: 'syz.1.221': attribute type 1 has an invalid length.
[   73.482098][ T6657] bond1: (slave veth3): Enslaving as an active interface with a down link
[   73.635870][ T6669] __nla_validate_parse: 8 callbacks suppressed
[   73.635881][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[   73.641224][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[   73.644958][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.2.225'.
[   74.011049][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'.
[   74.024336][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'.
[   74.069194][ T6709] netlink: 'syz.2.235': attribute type 1 has an invalid length.
[   74.087980][ T6709] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.112638][ T6709] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.125225][ T6709] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.131069][ T6709] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   74.155765][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.235'.
[   74.214908][ T6717] netlink: 64 bytes leftover after parsing attributes in process `syz.0.238'.
[   77.368774][ T6732] lo: entered allmulticast mode
[   77.378824][ T6729] bridge0: entered allmulticast mode
[   77.487148][ T6742] tap0: tun_chr_ioctl cmd 2147767507
[   77.564117][ T6747] netlink: 'syz.1.248': attribute type 1 has an invalid length.
[   77.566696][ T6747] netlink: 224 bytes leftover after parsing attributes in process `syz.1.248'.
[   77.582621][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'.
[   77.605585][ T6753] ip6gretap0: entered promiscuous mode
[   77.625402][ T6753] macsec1: entered promiscuous mode
[   77.627894][ T6753] macsec1: entered allmulticast mode
[   77.630170][ T6753] ip6gretap0: entered allmulticast mode
[   81.475072][   T24] cfg80211: failed to load regulatory.db
[  132.676210][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.679331][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  180.833515][ T5240] Bluetooth: hci1: command 0x0406 tx timeout
[  194.116303][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.119158][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  196.193731][ T5240] Bluetooth: hci2: command 0x0406 tx timeout
[  255.556298][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.559484][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.996944][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.000189][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.439676][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.445897][ T1364] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
18:28:55  Registers:
info registers vcpu 0

CPU#0
RAX=62bd54b365d45400 RBX=ffffffff819683c8 RCX=62bd54b365d45400 RDX=0000000000000001
RSI=ffffffff8d9b7ff7 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005618412babb8 CR3=0000000106a4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=785c71b496cdec00 RBX=ffffffff819683c8 RCX=785c71b496cdec00 RDX=0000000000000001
RSI=ffffffff8d9b7ff7 RDI=ffffffff8be33800 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005566d3ce6600 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fabddd97d20
XMM02=9803000800169003 01d598829d80aecc XMM03=00020016a2033202 0016a00300080016
XMM04=0009b00328100008 900300040016a403 XMM05=0100100009800401 000008080606015a
XMM06=c004808081800800 09e00300100009d0 XMM07=0300100009c00302 100009b003281000
XMM08=08900300040016a4 0300020016a20332 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
