last executing test programs:

1.430346112s ago: executing program 2 (id=310):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'hsr0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010003704bbda68500000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0)
ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000001300)) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async, rerun: 32)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async)
r10 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

1.341731883s ago: executing program 2 (id=312):
r0 = socket(0x1e, 0x1, 0xc1)
setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000100)="74f24316fa3e292db98ae4c909ff39768493049145aa21e59397f4", 0x1b)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000004c0)={0x0, 0x2, 0x6, 0x6, @vifc_lcl_addr=@broadcast, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0xc23, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x96}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfcd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc080}, 0xc000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x190, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x6, 0xc, 0x7, 0x0, 0x1, 0xa, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0xde, 0x5, 0x8, 0x2, 0x8, 0x3, 0x3}}, {0xa, 0x2, [0xfff, 0x0, 0x0]}}, {{0x1c, 0x1, {0x6, 0xd, 0x3, 0x0, 0x3, 0x3, 0x76cc, 0xa}}, {0x18, 0x2, [0x81d, 0x6e, 0x2e5b, 0x8, 0x400, 0x1, 0x8000, 0x0, 0x9, 0x6]}}, {{0x1c, 0x1, {0x7, 0x5, 0x40, 0x8, 0x0, 0x7, 0x9, 0x4}}, {0xc, 0x2, [0x3, 0x8, 0xe, 0x30]}}, {{0x1c, 0x1, {0x1, 0x5, 0x4, 0x80000001, 0x2, 0x3, 0xe8b, 0x8}}, {0x14, 0x2, [0x31f, 0x6, 0x420c, 0x8, 0x800, 0xe, 0x3ff, 0x6]}}, {{0x1c, 0x1, {0x3, 0xd, 0x6, 0x2c8d, 0x0, 0x6, 0x8000, 0xa}}, {0x18, 0x2, [0x2, 0xfff8, 0x8, 0x0, 0x9, 0x4, 0xb43d, 0x9448, 0x8f1, 0x0]}}, {{0x1c, 0x1, {0x5, 0x2, 0x8000, 0x1, 0x0, 0x2, 0x3, 0x5}}, {0xe, 0x2, [0x1d61, 0xf9a, 0x1, 0xff, 0x8]}}, {{0x1c, 0x1, {0x8, 0x7f, 0x1, 0x100, 0x0, 0x1d, 0x40, 0x4}}, {0xc, 0x2, [0x3b8b, 0x101, 0x2, 0x8]}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r6=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x9}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x22008054}, 0x8040) (async, rerun: 64)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf250400000004000d8008000c00", @ANYRES32=r1, @ANYBLOB="49b8f65c4b44df1d2f9669b8877123e8eebf8187a1e6ff61d89087fe5c78b6d41a09043fcab6000015da803a7c7c35c1e25586bbc727d745255556ba292c82f0deaeefc66a5aa8a802581b53ed7d87b8b30a3eb7e953afcfd3"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

1.268455068s ago: executing program 2 (id=314):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1)
r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800)
connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x65010)

1.2677543s ago: executing program 2 (id=315):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c79c7b19d5808847000000000000000000000002849d58ce7f2e82712ebe7944e60bbda2fa2ce0d411b54ff2e999ac51e1e91c6c01eb27270a1f72b67a7cff6e6021a40aa363d8a748ccb0a47e29d2bbdb14dff5606c8b2371cba2900d15f529e6108df3d0921d9f065e7b6cc722fd5ef2c81296cc96e7e2ee523fb5756a7547e6789476f92c914952a2b3ce1e7fa5b18fc819da184e794dac3584"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff7b)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x50, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x10)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
recvmmsg(r1, &(0x7f0000006080), 0x0, 0x10142, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

1.00150443s ago: executing program 2 (id=316):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}}, 0x16c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
r4 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bind$rxrpc(r3, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r3, 0x4)
listen(r3, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xe7be759}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x6, 0x6, 0x1}, {0x5, 0x1, 0x1, 0xa, 0xd3d, 0x1}, 0x26, 0x4b3b, 0x19c5}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc068fa965e4d9ca}]}}]}, 0x6c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x6}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

827.844005ms ago: executing program 2 (id=317):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x9}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="2407000015fedbb315607bf4bd35f6b4df2c6a1372099e3c71b751e035f6952acbacfc83ee0d6995fae2eeba7a781caccf51fa954ee3eafdcdab104676f7896b79ac968de06375aa4256a398d709c823911478bf00674a5d62499fc170f8ede490991f89f87a58206cb83fce6f856d37e8ce87d90317600a0509076c5c7e8fe38aad292dcd0ecd36b01ae728e26a66fd184095e190169f75f6455b79c03ea8293945c33ac49f724f986b842d55117a6c9bbec65e3bf5f94b85021b26e210f825762c71eff838a76f155b95e23a368d64027818ea05ec5c713bdd5a91116d38d689c3a40e360388db", @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r9, 0x5, 0x0, 0xfffffffc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100010882848b960c1618"], 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @broadcast, @device_a, @random="71aef439e258", {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

804.847191ms ago: executing program 1 (id=319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x8901, &(0x7f0000000100)) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x8901, &(0x7f0000000100))
close(r3) (async)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
socket$qrtr(0x2a, 0x2, 0x0) (async)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r9, 0x8919, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
socket$unix(0x1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r13)
sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="001f577cf82da13a7fc77924185c200d38c1b1edb1edd34318c56b7a6697099db9ca01401cc6ddc9a56636aff89fff670fc62edea15f36c34f2cd2a6d18bc53d722a6175173c5ba732d0f17b14bdfdc6ec94a0b264a9d046845aae89ea5b6829e83314f23697832dbc56adca267ff39d90237594d998e2da3d952b7ec9f45c22e992edd9787b66ab8849e64f44a86ab59fc987c3aaec14318d86b56a9849ecf740bfeb087604a03775b2fed83754f75d09baf7f6661773d5bdae632e1e97bb282c2710a8da8f9c8e206036eb57b696194d090e30", @ANYRES16=r14, @ANYBLOB="010028bd7000ffdbdf25010000000800030002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r10, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r14, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c085}, 0x800) (async)
sendmsg$SEG6_CMD_SET_TUNSRC(r10, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r14, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c085}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

643.649198ms ago: executing program 1 (id=320):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev, 0xfffffffe}}, 0xe8)
socket$pptp(0x18, 0x1, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r8, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffc}]}, 0x40}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)

640.97845ms ago: executing program 1 (id=322):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)

511.249393ms ago: executing program 1 (id=324):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d00010027bd700000000000030100800c0002"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newlink={0x250, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r14, 0x21eae}, [@IFLA_VFINFO_LIST={0x230, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x9b8, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x10000, 0xa, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xdc95, 0x9}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @multicast}}]}, {0xac, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2c, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0xeb, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @link_local}}, @IFLA_VF_MAC={0x28, 0x1, {0x4fc9e961, @local}}]}, {0xac, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xd7d, 0x81, 0x88a8}}, {0x14, 0x1, {0x2, 0x773, 0x8, 0x8100}}, {0x14, 0x1, {0x5, 0x3f4, 0x2, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x7fff, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x0, 0xa, {0x2, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0x42f, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xb, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x611e}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x2, 0x401, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9e, 0x1ff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x95c5}}, @IFLA_VF_IB_NODE_GUID={0x5b, 0xa, {0x9, 0xf0}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8001, 0x200}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xffffff27}}]}]}]}, 0x250}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x8000)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="021004051400000026bd7000ffdbdf250800120002000000aa01feb56b6e00070000000600ab5fedca00003800000000000000ff02000000000000000000000000000120010000000000000000000000000002010014000300000002001000000004d4000004d30000000005001a00ac1414aa000000000000000000000000ffffffff0000000000000000000000000800001002001300900000002bbd700002350000623fea2cf3bfaecb1a23fa49018162cdd08781da67"], 0xa0}}, 0x8000)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000001400048008000240000000000800014000000000"], 0xa4}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x0)

358.519981ms ago: executing program 0 (id=326):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8)
sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x3ff, 0xc1, 0x7}, 0x20)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600000009078000022020000"], 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x35}, 0x7a, 0x0, 0x0, 0x2, 0x1, 0xf22f}, 0x20)

353.824898ms ago: executing program 1 (id=327):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
connect$inet6(r5, 0x0, 0x0)
socket$inet6(0xa, 0x5, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r11], 0x40}}, 0x0)
close(r4)
socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00'})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@gettaction={0xd4, 0x32, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

192.291334ms ago: executing program 0 (id=328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000640)=ANY=[@ANYBLOB="df2501000008000000000000000000000000000095f2676d2ddcdab62590310f3c0d14d541be100619e74f60ccc84aeb8a3a18ca2846ff0162abad0a2a32fb4f6820e1c8b398a549fe84d8afd5af8f98c5726e8194259455173796b221d36097f3b19ab919b0cf9e9d88dc31d41c50ecb0e0a39ad856b7c2accceb83e345b2756ccbf7a57cefb1a8c7f51f9cf25e6e6b6720e82e2ca279550bc193afdedca50b6925163a4962679216f89782"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1700000056000100000000000000000007"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0}) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32)
connect$inet(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32)
socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
r4 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32)
connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$can_bcm(r4, 0x0, 0x0) (async)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc"], 0x48}}, 0x0)

190.560938ms ago: executing program 1 (id=329):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="d8000000000203000000000000000000020000053c0002802c00018014000300fc00000000000000000000000000000114000400000000000000000000000000000000010c00028005000100210000000400038004000180"], 0xd8}}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000002c00128009000100626f6e64000000001c000280050001000600000008000a000000000008000b00", @ANYRES32=r4], 0x4c}}, 0x28000000)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x38}}, 0x20040810)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10)
write(r7, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0)
setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000240), 0x4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x110, r9, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_IE={0xdd, 0x2a, [@ibss={0x6, 0x2, 0x8001}, @rann={0x7e, 0x15, {{0x0, 0x6d}, 0x9, 0x5, @broadcast, 0x10000, 0xe0e1, 0x9009}}, @tim={0x5, 0x81, {0x2, 0x53, 0xb, "54311defd8311fe363bb28f93d6a7f31ffd7eeb34e971aba27c3e7cea7697605352fccbe56f349a66849686a75d1bf97699713bcef5a4791fb0e8ee18a213d51aa1d907974f6cbf9ab28214b2b5ead5abbea13d653cdc3810091b7d4f0966a0f1ddd93d506003927672432c9f41291c1a89ec3603a0080b21ada9205fde6"}}, @prep={0x83, 0x1f, {{}, 0xa8, 0x8, @device_b, 0x0, @void, 0x1, 0x101, @broadcast, 0x7}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @peer_mgmt={0x75, 0x4, {0x1, 0x2, @void, @void, @void}}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x20044051)

91.113983ms ago: executing program 0 (id=330):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x15, 0x8, &(0x7f00000038c0)=ANY=[@ANYRESDEC], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0xffffffbd, 0x7, 0xffffffff, 0x4}, 0x10}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='rcu_utilization\x00', r0, 0x0, 0x1}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0x5}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x2]}}]}]}, 0x54}}, 0x0) (async)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000900)=[r5, r5, 0xffffffffffffffff, r5, r5], &(0x7f00000006c0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x40000007, 0x2}, {0x5, 0x4, 0x8, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002", @ANYRES16=r1, @ANYRESDEC=r3], 0x58}, 0x1, 0x0, 0x0, 0x92631b5856f1d19}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x400c0c0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r11=>0x0}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYBLOB="538b4c429ee074361c99b6124ff0b0eae6e5aa8c771026e3ebffa8274c9030f56144cea7b14983439e8561885aaede80", @ANYBLOB="08000d0000000283"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0000fcffffff000000002300000008000300", @ANYRES32=r11, @ANYBLOB="2a00fe006a5d0e0b94c1833f52cc63179f6cc028184d812041a7c221f7509a1fd05d00000000000000800000040008010600660006000000040049000400050108003500000000000800350006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100010882848b960c1618"], 0x2e) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000800)=ANY=[@ANYBLOB="b00000400802110000e4afcf56a91100c4c1000010ae020023000000c4ffe0c127ef00500abcfe3481dc3aed4f24b03b9cfe8256a1641c5fab7e5ccfa14195c631371dcff79a27313a23e9e24609bf66989642eaabfe8058361381af72c631a27c3a266257036e6bfe2a0e7c75c91bcc8f571c8d4d90d4b0834538fc7b818264ac9e656badccd71763dd51c6b94346e2f931d44f2db4a90f0866fd3fffdb43cf7c667a7c99245f7b31b6ee92707efa50cf85f1d27bae0990977c09f68035518bdb8c8885ec876b42843f8069ba3a854cd770ac17"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

90.084034ms ago: executing program 0 (id=331):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x11) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x28}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x39}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x44880) (async)
sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1e4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0xc1}, 0x8048) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r5 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (rerun: 64)
ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000580)) (async)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x1407, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2031}, 0x144)
r8 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f00000006c0)=0x6, 0x4) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r2)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10828901}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r9, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4000081)
readv(r1, &(0x7f0000000c00)=[{&(0x7f0000000840)=""/71, 0x47}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f00000009c0)=""/13, 0xd}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/97, 0x61}, {&(0x7f0000000b80)=""/103, 0x67}], 0x6) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)=@ipmr_newroute={0x54, 0x18, 0x10, 0x70bd28, 0x25dfdbfc, {0x80, 0x20, 0x20, 0x68, 0xfc, 0x0, 0xfd, 0x4, 0x2700}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x6, 0x2, '!\x00'}}}, @RTA_NH_ID={0x8, 0x1e, 0x5}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48045}, 0x4000) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000dc0)=0x8, 0x4) (async)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, r3, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xd}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x46}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xc6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000f80)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000010c0)={'erspan0\x00', &(0x7f0000000fc0)={'tunl0\x00', <r11=>0x0, 0x8, 0x7800, 0x4, 0x1, {{0x29, 0x4, 0x2, 0x38, 0xa4, 0x4e5, 0x0, 0x7f, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp_prespec={0x44, 0x34, 0xe1, 0x3, 0x6, [{@broadcast, 0x10001}, {@local, 0x5a}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x3}, {@multicast2, 0x6}]}, @timestamp_addr={0x44, 0x14, 0x72, 0x1, 0x5, [{@loopback, 0x6}, {@private=0xa010102, 0x1}]}, @generic={0x83, 0x11, "eacdc403fbde21bfb7ee87d8c0ff2c"}, @ssrr={0x89, 0xf, 0xeb, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @generic={0x44, 0x7, "8a8f72058d"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x9, 0x0, 0x8, [0x3, 0x6, 0xfffff36c, 0xe63, 0x5]}, @noop, @end]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001100)={'team0\x00', <r12=>0x0}) (async, rerun: 64)
getsockname$packet(r2, &(0x7f0000001140)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001180)=0x14) (rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001200)={'gretap0\x00', &(0x7f00000011c0)={'gretap0\x00', <r14=>0x0, 0x8000, 0x8000, 0xffffffff, 0x0, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x66, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010101, {[@timestamp_addr={0x44, 0xc, 0x97, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001240)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002240)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002200)={&(0x7f00000019c0)={0x820, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x3, 0xe, 0x800}, {0x40, 0xa, 0x5, 0x5e0bf54c}, {0x9b51, 0x7a, 0x1, 0x1}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x0, 0x2, 0xd4}, {0x2, 0x2, 0x2, 0x200}, {0x9, 0x80, 0x6, 0x2}, {0x1, 0xfc, 0x61, 0x7ff}, {0x0, 0x3, 0x8d}, {0x6, 0x1, 0x7, 0xfff}, {0x3, 0x7, 0x9, 0x10000}]}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x6, 0x8, 0x4}, {0x7, 0xc, 0x3, 0x5}, {0x6, 0x3, 0xc9, 0x7}, {0x7f, 0x7, 0xe, 0xfff}, {0x8001, 0xda, 0xd, 0x9}, {0xa, 0x5, 0x1, 0xc}, {0x4, 0xf, 0x5, 0x5}, {0xfff9, 0x5, 0x0, 0x8560}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x14c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x4, 0x40, 0x7}, {0x1, 0xd, 0x8, 0x4}, {0x732, 0x9, 0xf4, 0x1}]}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x820}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

668.172µs ago: executing program 0 (id=332):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x5502000000000000}, 0x4000) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) (async)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}]}, {0x0, [0x2e]}}, &(0x7f0000000440)=""/82, 0x3f, 0x52, 0x1, 0x0, 0x10000}, 0x28) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x7c, <r5=>0x0}, 0x8) (async)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pB    \x00'}, 0x20) (async)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x115b, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000000c0)='GPL\x00', 0xe, 0x96, &(0x7f0000000340)=""/150, 0x41000, 0x5, '\x00', 0x0, @fallback=0x2f, r4, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x9, &(0x7f0000000800)=[r7, r8, 0xffffffffffffffff, 0x1, r9], &(0x7f0000000840)=[{0x2, 0x2, 0x3, 0x3}, {0x5, 0x2, 0xb, 0x144bfd2a17c39af7}, {0x4, 0x5, 0xa, 0x6}, {0x4, 0x5, 0xc, 0x7}, {0x1, 0x4, 0x7}, {0x3, 0x1, 0x3, 0x7}, {0x0, 0x4, 0xc, 0x3}, {0x2, 0x2, 0x10, 0x6}, {0x4, 0x2, 0xb, 0x4}], 0x10, 0x7}, 0x94)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="880000000103040200000000000000000700000718000f800e000600736e6d705f747261700000000400ba5e99eb870a14f187e403805c000b800600124000030000320002802c00018014000300ff020000000000000000000000ff0200000000000000000000000c000120001640000000040000000800000b80020000080000"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) (async)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000180)={0x1d, r11, 0x0, {0x0, 0xf0}, 0x1}, 0x18) (async)
connect$can_j1939(r10, &(0x7f0000000080)={0x1d, r11, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) (async)
sendmsg$can_j1939(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1}}, 0x2044000) (async)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa032}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20009010}, 0x0)

0s ago: executing program 0 (id=333):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001500)={0x1344, 0x1a, 0x2, 0x70bd2c, 0x25dfdbff, "", [@generic="149dbdaadf37a571d3632f0b1de2bfb311e25e057674035c9412cf38b0242dddd08e52734716dd26898950fce8439c2467780d6cd461eedfc1fd13be8d442c968fd2ae6b1eb31fc7334a13784939f23ac3746676a2d332d0d98221b7720c6a9c1a1c06823a4212865d900d42b018f7156bf4f8cb1893e9b93f88482620f6f33b04ab0051fc903558ceeb4bf73461f1e2fb9e5dc5f542", @generic="b5a2296527010e1af86f8d758448d61f105bd6ba6d778b954df8fa9b4412cd88613daf381375eef334033e9b344ff976dabc137b07462793d40da0", @typed={0x8f, 0x109, 0x0, 0x0, @binary="b7bca6a5f2ebdf91505fed8f4d0ce72dbe9f53b352a5ca5f34e43b7e58ca405f7f1b65182b652cf2169dc8d09b1f4092c6158715327d10d1aff8ecbf645230ef8d0d4f44fcb31918d82b7aca93df6e6b74c57473ddadf7dd7183a3efe944081f5aec78451d7351779f45f3e79cb6a7ef5b7f6f47370c812866ec79fe33518c3c2ce27d31f719e9a677d817"}, @nested={0x11bc, 0x3d, 0x0, 0x1, [@typed={0xe7, 0x9e, 0x0, 0x0, @binary="319af04939040690e7598af65f05e2e361a76ef8b50305a02df65513f17424f781a782a9dc72d528d1e455d030cedd83b1101b7558d2b6c5221f63857042013e0786272ebef93d9d14a31ce2d414f79eba17e2446f48204ddf4af2b21d4f92c1da4cf0a6580a469c80f84625fb03e02b77e4fc07957c2e480e12cc29930b7488103fe41d3247615f2d94702f24b4db7990e24054f67c2e75dd3e3fd664385ea7acf2acb01cb3e425c76cf77e5e2a4882f7a177e5339f25c3352c9a4e3c332fbb59f43487412484601f720f2f5c4ea57945fc38a292d69623d025e6677b1385f91ea801"}, @nested={0x4, 0x119}, @generic="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", @typed={0xc, 0x30, 0x0, 0x0, @u64=0x9}, @generic="76a008cba390c6bb932a6daf31495496e09f38789d71633449bb421d4e448bbb5a9d97b6a7420d9bfd73b58b16bb332a532e4b0a7db70295d7235c89790249c218b60ef0ef60bb5694b165a6cd482cc142b94638d3df0d428b9b41bd4bebe48489d53b381942194bc9acd54c9d6f7205871c09737569fa2eef1726a65e725c9d94d5a7405a8ebba126f69cc3705eebe84de95d0b3ce6dccf2adf448284abe64af225c1f9db7ff501765a1c28877355e1b2a2ba3a151997d3468d7c284264de76"]}, @typed={0x14, 0xd2, 0x0, 0x0, @ipv6=@mcast2}]}, 0x1344}, {&(0x7f0000000040)={0x2c, 0x2b, 0x8, 0x70bd28, 0x25dfdbfe, "", [@nested={0x10, 0x14a, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x4, 0x126}, @nested={0x4, 0x9d}]}, @nested={0xc, 0xdb, 0x0, 0x1, [@nested={0x4, 0x62}, @nested={0x4, 0xbc}]}]}, 0x2c}], 0x2, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49019' (ED25519) to the list of known hosts.
syzkaller login: [   48.761623][ T5831] cgroup: Unknown subsys name 'net'
[   48.927595][ T5831] cgroup: Unknown subsys name 'cpuset'
[   48.934101][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.625373][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.734973][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.738434][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.753818][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.757720][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.760382][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.763776][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.768083][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.770659][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.795470][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.798967][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.819069][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.823214][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.826331][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.829275][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.832691][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.062384][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   55.142318][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.147911][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   55.191878][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.195448][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.198393][ T5844] bridge_slave_0: entered allmulticast mode
[   55.201272][ T5844] bridge_slave_0: entered promiscuous mode
[   55.212352][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.215144][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.218043][ T5844] bridge_slave_1: entered allmulticast mode
[   55.221779][ T5844] bridge_slave_1: entered promiscuous mode
[   55.274356][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.284095][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.316188][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.319065][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.321415][ T5847] bridge_slave_0: entered allmulticast mode
[   55.324623][ T5847] bridge_slave_0: entered promiscuous mode
[   55.336419][ T5844] team0: Port device team_slave_0 added
[   55.339023][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.341947][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.345702][ T5847] bridge_slave_1: entered allmulticast mode
[   55.348556][ T5847] bridge_slave_1: entered promiscuous mode
[   55.367307][ T5844] team0: Port device team_slave_1 added
[   55.387590][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.390733][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.394485][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.397405][ T5853] bridge_slave_0: entered allmulticast mode
[   55.400854][ T5853] bridge_slave_0: entered promiscuous mode
[   55.415397][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.418668][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.421586][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.424774][ T5853] bridge_slave_1: entered allmulticast mode
[   55.427592][ T5853] bridge_slave_1: entered promiscuous mode
[   55.430676][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.433756][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.442753][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.449185][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.451474][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.460714][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.514401][ T5847] team0: Port device team_slave_0 added
[   55.518289][ T5847] team0: Port device team_slave_1 added
[   55.540172][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.567263][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.578924][ T5844] hsr_slave_0: entered promiscuous mode
[   55.582263][ T5844] hsr_slave_1: entered promiscuous mode
[   55.598412][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.601291][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.611613][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.635072][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.637471][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.646693][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.659357][ T5853] team0: Port device team_slave_0 added
[   55.672106][ T5853] team0: Port device team_slave_1 added
[   55.715159][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.717514][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.726642][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.744236][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.746488][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.755474][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.761723][ T5847] hsr_slave_0: entered promiscuous mode
[   55.765341][ T5847] hsr_slave_1: entered promiscuous mode
[   55.767489][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   55.769426][ T5847] Cannot create hsr debugfs directory
[   55.865444][ T5853] hsr_slave_0: entered promiscuous mode
[   55.868165][ T5853] hsr_slave_1: entered promiscuous mode
[   55.870375][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   55.872345][ T5853] Cannot create hsr debugfs directory
[   56.003678][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.009082][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.032985][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.054900][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.120764][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.127474][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.136820][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.144105][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.225959][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.236003][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.245838][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.252215][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.318125][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.358520][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   56.378161][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.386026][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.389155][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.410235][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.413406][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.429950][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.457834][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.460921][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.479233][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.481738][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.491804][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.514701][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   56.535443][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.538563][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.549323][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.552354][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.597825][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.660199][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.708611][ T5844] veth0_vlan: entered promiscuous mode
[   56.733548][ T5844] veth1_vlan: entered promiscuous mode
[   56.752980][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.760191][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.789775][ T5844] veth0_macvtap: entered promiscuous mode
[   56.795847][ T5844] veth1_macvtap: entered promiscuous mode
[   56.820125][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.830169][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.835336][   T54] Bluetooth: hci0: command tx timeout
[   56.837907][ T5845] Bluetooth: hci1: command tx timeout
[   56.845739][ T5847] veth0_vlan: entered promiscuous mode
[   56.865901][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.874908][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.880467][ T5853] veth0_vlan: entered promiscuous mode
[   56.886330][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.892765][ T5847] veth1_vlan: entered promiscuous mode
[   56.904844][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.913332][ T5845] Bluetooth: hci2: command tx timeout
[   56.924266][ T5853] veth1_vlan: entered promiscuous mode
[   56.966209][ T5847] veth0_macvtap: entered promiscuous mode
[   56.982702][ T4981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.987750][ T4981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.991260][ T5847] veth1_macvtap: entered promiscuous mode
[   57.018946][ T5853] veth0_macvtap: entered promiscuous mode
[   57.022505][  T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.027431][  T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.036113][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.039990][ T5853] veth1_macvtap: entered promiscuous mode
[   57.055441][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.072250][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.078720][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.081401][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.091999][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.102542][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.117686][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.127148][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.137079][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.140398][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.145028][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.148642][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.214255][  T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.220571][  T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.238996][  T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.243524][  T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.261301][  T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.265716][  T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.276061][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.279424][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.307900][ T5916] netlink: 'syz.0.1': attribute type 9 has an invalid length.
[   57.310867][ T5916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.409159][ T5926] netlink: 'syz.0.4': attribute type 1 has an invalid length.
[   57.470268][ T5934] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6'.
[   57.638585][ T5940] netlink: 'syz.0.7': attribute type 13 has an invalid length.
[   57.645895][ T5940] netlink: 'syz.0.7': attribute type 17 has an invalid length.
[   57.724583][ T5940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.734344][ T5952] xfrm0: entered promiscuous mode
[   57.736333][ T5952] xfrm0: entered allmulticast mode
[   57.794250][ T5960] netlink: 'syz.1.9': attribute type 9 has an invalid length.
[   57.804230][ T5960] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9'.
[   57.921730][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'.
[   58.097250][ T5975] netlink: 'syz.1.11': attribute type 10 has an invalid length.
[   58.103462][ T5975] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   58.147784][ T5982] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13'.
[   58.262050][ T5987] netlink: 'syz.2.14': attribute type 10 has an invalid length.
[   58.269364][ T5987] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   58.308567][ T5995] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.326362][ T5987] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   58.401087][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'.
[   58.424294][ T6003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17'.
[   58.445991][ T6003] xfrm0: entered promiscuous mode
[   58.447921][ T6003] xfrm0: entered allmulticast mode
[   58.517784][ T6015] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET)
[   58.695600][ T6034] netlink: 'syz.0.20': attribute type 1 has an invalid length.
[   58.770815][ T6037] veth3: entered promiscuous mode
[   58.777696][ T3984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.780381][ T3984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.846115][ T6043] netlink: 'syz.0.21': attribute type 4 has an invalid length.
[   58.850744][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[   58.914226][   T54] Bluetooth: hci0: command tx timeout
[   58.919047][ T5845] Bluetooth: hci1: command tx timeout
[   58.945352][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22'.
[   58.993403][ T5845] Bluetooth: hci2: command tx timeout
[   59.075367][ T6060] netlink: 248 bytes leftover after parsing attributes in process `syz.0.24'.
[   59.262134][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.265157][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.306039][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.312644][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.319675][ T6071] xfrm0: left promiscuous mode
[   59.321498][ T6071] xfrm0: left allmulticast mode
[   59.390719][ T6071] veth3: left promiscuous mode
[   59.412990][ T6080] hsr_slave_0: left promiscuous mode
[   59.419398][ T6080] hsr_slave_1: left promiscuous mode
[   59.430431][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.444504][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.451639][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.459405][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.669204][ T6097] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   59.738736][ T6099] veth3: entered promiscuous mode
[   59.877863][ T6105] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   59.886999][ T6105] CPU: 1 UID: 0 PID: 6105 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) 
[   59.887018][ T6105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.887026][ T6105] Call Trace:
[   59.887033][ T6105]  <TASK>
[   59.887039][ T6105]  dump_stack_lvl+0x189/0x250
[   59.887064][ T6105]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.887080][ T6105]  ? __pfx__printk+0x10/0x10
[   59.887125][ T6105]  ? kernfs_path_from_node+0x2f/0x290
[   59.887140][ T6105]  ? kernfs_path_from_node+0x250/0x290
[   59.887152][ T6105]  ? kernfs_path_from_node+0x2f/0x290
[   59.887168][ T6105]  sysfs_warn_dup+0x8e/0xa0
[   59.887181][ T6105]  sysfs_do_create_link_sd+0xc0/0x110
[   59.887198][ T6105]  device_add_class_symlinks+0x1cf/0x240
[   59.887215][ T6105]  device_add+0x475/0xb50
[   59.887241][ T6105]  wiphy_register+0x1ba6/0x28d0
[   59.887277][ T6105]  ? __pfx_wiphy_register+0x10/0x10
[   59.887296][ T6105]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   59.887319][ T6105]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   59.887339][ T6105]  ieee80211_register_hw+0x3425/0x4080
[   59.887369][ T6105]  ? ieee80211_register_hw+0x1461/0x4080
[   59.887390][ T6105]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   59.887408][ T6105]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   59.887431][ T6105]  ? __hrtimer_setup+0x187/0x210
[   59.887443][ T6105]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   59.887464][ T6105]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   59.887535][ T6105]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   59.887551][ T6105]  ? trace_kmalloc+0x1f/0xd0
[   59.887568][ T6105]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   59.887586][ T6105]  ? kstrndup+0xbf/0x160
[   59.887610][ T6105]  hwsim_new_radio_nl+0xea4/0x1b10
[   59.887632][ T6105]  ? __pfx___nla_validate_parse+0x10/0x10
[   59.887662][ T6105]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   59.887687][ T6105]  ? __nla_parse+0x40/0x60
[   59.887708][ T6105]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   59.887734][ T6105]  genl_family_rcv_msg_doit+0x215/0x300
[   59.887757][ T6105]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   59.887784][ T6105]  ? bpf_lsm_capable+0x9/0x20
[   59.887801][ T6105]  ? security_capable+0x7e/0x2e0
[   59.887826][ T6105]  genl_rcv_msg+0x60e/0x790
[   59.887845][ T6105]  ? __pfx_genl_rcv_msg+0x10/0x10
[   59.887858][ T6105]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   59.887886][ T6105]  netlink_rcv_skb+0x208/0x470
[   59.887903][ T6105]  ? __lock_acquire+0xab9/0xd20
[   59.887922][ T6105]  ? __pfx_genl_rcv_msg+0x10/0x10
[   59.887937][ T6105]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   59.887970][ T6105]  ? down_read+0x1ad/0x2e0
[   59.887985][ T6105]  genl_rcv+0x28/0x40
[   59.888017][ T6105]  netlink_unicast+0x82f/0x9e0
[   59.888044][ T6105]  ? __pfx_netlink_unicast+0x10/0x10
[   59.888064][ T6105]  ? netlink_sendmsg+0x642/0xb30
[   59.888073][ T6105]  ? skb_put+0x11b/0x210
[   59.888089][ T6105]  netlink_sendmsg+0x805/0xb30
[   59.888108][ T6105]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.888122][ T6105]  ? aa_sock_msg_perm+0xf1/0x1d0
[   59.888137][ T6105]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   59.888150][ T6105]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.888163][ T6105]  __sock_sendmsg+0x21c/0x270
[   59.888185][ T6105]  ____sys_sendmsg+0x505/0x830
[   59.888203][ T6105]  ? __pfx_____sys_sendmsg+0x10/0x10
[   59.888223][ T6105]  ? import_iovec+0x74/0xa0
[   59.888247][ T6105]  ___sys_sendmsg+0x21f/0x2a0
[   59.888263][ T6105]  ? __pfx____sys_sendmsg+0x10/0x10
[   59.888306][ T6105]  ? __fget_files+0x2a/0x420
[   59.888318][ T6105]  ? __fget_files+0x3a0/0x420
[   59.888337][ T6105]  __x64_sys_sendmsg+0x19b/0x260
[   59.888352][ T6105]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   59.888373][ T6105]  ? rcu_is_watching+0x15/0xb0
[   59.888391][ T6105]  ? do_syscall_64+0xbe/0x3b0
[   59.888406][ T6105]  do_syscall_64+0xfa/0x3b0
[   59.888415][ T6105]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.888431][ T6105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.888443][ T6105]  ? exc_page_fault+0x9f/0xf0
[   59.888462][ T6105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.888499][ T6105] RIP: 0033:0x7fe5f7b8ebe9
[   59.888514][ T6105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.888525][ T6105] RSP: 002b:00007fe5f8a36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.888539][ T6105] RAX: ffffffffffffffda RBX: 00007fe5f7dc5fa0 RCX: 00007fe5f7b8ebe9
[   59.888550][ T6105] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f
[   59.888558][ T6105] RBP: 00007fe5f7c11e19 R08: 0000000000000000 R09: 0000000000000000
[   59.888565][ T6105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.888573][ T6105] R13: 00007fe5f7dc6038 R14: 00007fe5f7dc5fa0 R15: 00007ffea8bd47d8
[   59.888596][ T6105]  </TASK>
[   60.182794][ T6108] Zero length message leads to an empty skb
[   60.279701][ T6114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.484802][ T6139] bond_slave_0: entered promiscuous mode
[   60.486833][ T6139] bond_slave_1: entered promiscuous mode
[   60.488776][ T6139] dummy0: entered promiscuous mode
[   60.490823][ T6139] macvlan2: entered promiscuous mode
[   60.492608][ T6139] bond0: entered promiscuous mode
[   60.507905][ T6139] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   60.994329][   T54] Bluetooth: hci0: command tx timeout
[   60.996871][ T5845] Bluetooth: hci1: command tx timeout
[   61.074695][ T5845] Bluetooth: hci2: command tx timeout
[   61.967412][ T6252] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   61.973866][ T6252] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.079537][ T6271] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   62.220782][ T6282] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   62.268052][ T6286] syz_tun: entered allmulticast mode
[   62.837610][ T6270] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   62.841000][ T6270] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   62.853519][ T6270] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   62.856443][ T6270] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   62.864330][ T6270] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   62.867200][ T6270] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   62.985311][ T6318] __nla_validate_parse: 17 callbacks suppressed
[   62.985327][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'.
[   63.019535][ T6319] dvmrp8: entered allmulticast mode
[   63.154310][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.66'.
[   63.158913][ T6329] validate_nla: 7 callbacks suppressed
[   63.158924][ T6329] netlink: 'syz.0.66': attribute type 16 has an invalid length.
[   63.175499][ T6329] netlink: 'syz.0.66': attribute type 17 has an invalid length.
[   63.212196][ T6331] bond0: (slave wlan1): Releasing backup interface
[   63.323972][ T6341] netlink: 68 bytes leftover after parsing attributes in process `syz.1.68'.
[   63.478445][ T6351] netlink: 'syz.1.69': attribute type 11 has an invalid length.
[   63.481679][ T6351] netlink: 244 bytes leftover after parsing attributes in process `syz.1.69'.
[   63.656797][ T6351] netlink: 'syz.1.69': attribute type 10 has an invalid length.
[   63.777841][ T6314] dvmrp8: left allmulticast mode
[   63.942429][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.71'.
[   64.021822][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'.
[   64.087282][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'.
[   64.107021][ T6400] netlink: 'syz.1.75': attribute type 1 has an invalid length.
[   64.112021][ T6403] netlink: 'syz.0.74': attribute type 13 has an invalid length.
[   64.115224][ T6403] netlink: 'syz.0.74': attribute type 17 has an invalid length.
[   64.150915][ T6400] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.195289][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.198293][ T6408] netlink: 'syz.2.77': attribute type 10 has an invalid length.
[   64.202415][ T6403] 8021q: adding VLAN 0 to HW filter on device team0
[   64.211994][ T6403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.219931][ T6409] xfrm0: entered promiscuous mode
[   64.222005][ T6409] xfrm0: entered allmulticast mode
[   64.262756][ T6408] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   64.431473][ T6424] netlink: 'syz.2.79': attribute type 9 has an invalid length.
[   64.557815][ T6436] veth0_to_bridge: entered allmulticast mode
[   64.568293][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.576301][ T6436] warning: `syz.2.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.591430][ T6436] bridge_slave_0: left allmulticast mode
[   64.594056][ T6436] bridge_slave_0: left promiscuous mode
[   64.595993][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.601925][ T6436] bridge_slave_1: left allmulticast mode
[   64.604524][ T6436] bridge_slave_1: left promiscuous mode
[   64.606649][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.629869][ T6436] bond0: (slave bond_slave_0): Releasing backup interface
[   64.705172][ T6436] bond0: (slave bond_slave_1): Releasing backup interface
[   64.709097][ T6443] netlink: 'syz.2.81': attribute type 10 has an invalid length.
[   64.743819][ T6436] team0: Port device team_slave_0 removed
[   64.752639][ T6436] team0: Port device team_slave_1 removed
[   64.757027][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.759878][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.764013][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.766778][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.793737][ T6436] bond0: (slave wlan1): Releasing backup interface
[   64.834089][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.884246][ T6443] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   64.910380][ T6443] syz.2.81 (6443) used greatest stack depth: 19576 bytes left
[   64.997557][ T6452] netlink: 56 bytes leftover after parsing attributes in process `syz.1.82'.
[   65.198522][ T6464] netlink: 'syz.0.84': attribute type 10 has an invalid length.
[   65.207707][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'.
[   65.210911][ T6464] netlink: 68 bytes leftover after parsing attributes in process `syz.0.84'.
[   65.700146][ T6496] 8021q: adding VLAN 0 to HW filter on device team0
[   65.705865][ T6496] bond0: (slave team0): Enslaving as an active interface with an up link
[   65.728349][ T6496] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   65.942344][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.945110][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.029281][ T6507] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.043324][ T6507] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.154360][ T6507] bond0: left promiscuous mode
[   66.156154][ T6507] bond_slave_0: left promiscuous mode
[   66.158524][ T6507] bond_slave_1: left promiscuous mode
[   66.180598][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.184519][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.187697][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.215018][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.540254][ T6543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.686780][ T6548] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.704074][ T6548] vlan2: entered allmulticast mode
[   66.706497][ T6548] macsec0: entered allmulticast mode
[   66.708868][ T6548] veth1_macvtap: entered allmulticast mode
[   67.381168][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.384986][ T6589] 8021q: adding VLAN 0 to HW filter on device team0
[   67.387807][ T6589] dummy0: left promiscuous mode
[   67.390958][ T6589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.791869][ T6608] bond0: (slave wlan1): Releasing backup interface
[   67.801981][ T6608] bond0: Destroying bond
[   67.854616][ T6608] bond0 (unregistering): Released all slaves
[   67.956597][ T4981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.959701][ T4981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.217986][ T6621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.257896][ T6630] __nla_validate_parse: 12 callbacks suppressed
[   68.257911][ T6630] netlink: 68 bytes leftover after parsing attributes in process `syz.2.109'.
[   68.476544][ T6639] validate_nla: 10 callbacks suppressed
[   68.476562][ T6639] netlink: 'syz.2.112': attribute type 10 has an invalid length.
[   68.838645][ T6670] netlink: 248 bytes leftover after parsing attributes in process `syz.2.117'.
[   69.000967][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'.
[   69.029506][ T6672] netlink: 'syz.2.118': attribute type 10 has an invalid length.
[   69.177535][ T6696] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[   69.188346][ T6696] bond0: (slave dummy0): Releasing backup interface
[   69.196866][ T6696] bridge_slave_0: left allmulticast mode
[   69.200188][ T6696] bridge_slave_0: left promiscuous mode
[   69.203342][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.207329][ T6696] bridge_slave_1: left allmulticast mode
[   69.209291][ T6696] bridge_slave_1: left promiscuous mode
[   69.211830][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.218830][ T6696] bond0: (slave bond_slave_0): Releasing backup interface
[   69.222626][ T6696] bond0: (slave bond_slave_1): Releasing backup interface
[   69.228143][ T6696] team0: Port device team_slave_0 removed
[   69.231346][ T6696] team0: Port device team_slave_1 removed
[   69.235221][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.239261][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.247880][ T6696] netlink: 'syz.1.124': attribute type 10 has an invalid length.
[   69.494046][ T6700] veth1_macvtap: left allmulticast mode
[   69.541290][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.549005][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.553397][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.557391][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.762393][ T6711] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.127'.
[   69.769572][ T6711] netlink: 'syz.0.127': attribute type 10 has an invalid length.
[   69.777133][ T6711] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   69.879687][ T4981] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   69.974108][ T6720] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   69.977173][ T6720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'.
[   69.980574][ T6720] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   70.015794][    T9] cfg80211: failed to load regulatory.db
[   70.025276][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'.
[   70.247380][ T6736] netlink: 'syz.0.133': attribute type 10 has an invalid length.
[   70.314364][ T6736] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   70.371226][ T6739] bond0: (slave wlan1): Releasing backup interface
[   70.444364][ T6741] netlink: 'syz.0.135': attribute type 1 has an invalid length.
[   70.447199][ T6741] netlink: 224 bytes leftover after parsing attributes in process `syz.0.135'.
[   70.479600][ T6747] netlink: 'syz.0.136': attribute type 1 has an invalid length.
[   70.503948][ T6747] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.509381][ T6746] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   70.512613][ T6746] bond1: (slave wlan0): Opening slave failed
[   70.516624][ T6747] bond1: (slave wlan0): Opening slave failed
[   70.525450][ T6746] vlan2: entered allmulticast mode
[   70.527246][ T6746] veth1: entered allmulticast mode
[   70.529661][ T6746] bond1: (slave vlan2): Opening slave failed
[   70.672377][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   70.681844][ T6762] netlink: 348 bytes leftover after parsing attributes in process `syz.2.140'.
[   70.692032][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   70.767027][ T6768] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   70.837612][ T6770] netlink: 'syz.2.142': attribute type 11 has an invalid length.
[   70.923304][ T6775] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   70.926111][ T6775] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   71.107341][ T6791] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   71.111351][ T6791] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   71.157032][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.159633][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.250290][ T6800] veth0_to_bridge: left allmulticast mode
[   71.262368][ T6800] vlan2: left allmulticast mode
[   71.265887][ T6800] macsec0: left allmulticast mode
[   71.851447][ T6820] netlink: 'syz.2.155': attribute type 10 has an invalid length.
[   72.079958][ T6838] mac80211_hwsim hwsim34 wlan1: left allmulticast mode
[   72.086378][ T6840] netlink: 'syz.1.161': attribute type 10 has an invalid length.
[   72.091727][ T6840] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[   72.204162][ T6849] netlink: 'syz.0.163': attribute type 11 has an invalid length.
[   72.299377][ T6844] netlink: 'syz.0.163': attribute type 10 has an invalid length.
[   72.846991][ T6896] lo speed is unknown, defaulting to 1000
[   72.849591][ T6896] lo speed is unknown, defaulting to 1000
[   72.856231][ T6896] lo speed is unknown, defaulting to 1000
[   72.862198][ T6896] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.872437][ T6896] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   72.902852][ T6896] lo speed is unknown, defaulting to 1000
[   72.907897][ T6896] lo speed is unknown, defaulting to 1000
[   72.912391][ T6896] lo speed is unknown, defaulting to 1000
[   72.934362][ T6902] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.939902][ T6902] bond0: (slave wlan0): Opening slave failed
[   72.951143][ T6902] vlan3: entered allmulticast mode
[   72.953315][ T6902] veth1: entered allmulticast mode
[   73.660699][ T6912] __nla_validate_parse: 17 callbacks suppressed
[   73.660712][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'.
[   73.668063][ T6912] validate_nla: 5 callbacks suppressed
[   73.668073][ T6912] netlink: 'syz.0.180': attribute type 10 has an invalid length.
[   73.681216][ T6912] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   73.693642][ T6912] tipc: Started in network mode
[   73.695825][ T6912] tipc: Node identity aacd7f6bd67b, cluster identity 4711
[   73.699361][ T6912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.706183][ T6911] tipc: Resetting bearer <eth:syzkaller0>
[   73.718258][ T6911] tipc: Disabling bearer <eth:syzkaller0>
[   73.780200][ T6914] netlink: 'syz.1.181': attribute type 1 has an invalid length.
[   73.805349][ T6914] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.826792][ T6914] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.830142][ T6914] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   73.836095][ T6914] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   73.881265][ T6918] veth3: entered promiscuous mode
[   74.021639][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'.
[   74.025335][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'.
[   74.097038][ T6936] netlink: 220 bytes leftover after parsing attributes in process `syz.0.190'.
[   74.101098][ T6936] netlink: 220 bytes leftover after parsing attributes in process `syz.0.190'.
[   74.105386][ T6936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.190'.
[   74.120807][ T6936] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[   74.125067][ T6936] netlink: 'syz.0.190': attribute type 10 has an invalid length.
[   74.238827][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'.
[   74.282475][ T6948] netlink: 'syz.0.194': attribute type 178 has an invalid length.
[   74.418445][ T6960] netlink: 'syz.1.195': attribute type 2 has an invalid length.
[   74.534976][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.197'.
[   74.664297][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.199'.
[   74.670668][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.199'.
[   74.805941][ T6972] xfrm0: left promiscuous mode
[   74.807696][ T6972] xfrm0: left allmulticast mode
[   74.809552][ T6972] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   74.812605][    T9] lo speed is unknown, defaulting to 1000
[   74.814976][    T9] syz2: Port: 1 Link DOWN
[   75.362205][ T6989] netlink: 'syz.2.206': attribute type 13 has an invalid length.
[   75.365346][ T6989] netlink: 'syz.2.206': attribute type 17 has an invalid length.
[   75.405815][ T6989] 8021q: adding VLAN 0 to HW filter on device team0
[   75.412697][ T6989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.419544][ T6991] xfrm0: entered promiscuous mode
[   75.421746][ T6991] xfrm0: entered allmulticast mode
[   75.455935][ T6987] lo speed is unknown, defaulting to 1000
[   76.079017][ T7002] syzkaller0: entered promiscuous mode
[   76.081486][ T7002] syzkaller0: entered allmulticast mode
[   76.323708][ T7010] ieee802154 phy0 wpan0: encryption failed: -22
[   76.929312][ T7008] xfrm0: left promiscuous mode
[   76.931300][ T7008] xfrm0: left allmulticast mode
[   76.934021][ T7008] vlan3: left allmulticast mode
[   76.936204][ T7008] veth1: left allmulticast mode
[   77.552963][ T7057] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   77.570181][ T7057] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[   77.609716][ T7059] syz_tun: entered allmulticast mode
[   77.628615][ T7059] mac80211_hwsim hwsim38 wlan1: left allmulticast mode
[   77.672191][ T7061] netlink: 'syz.2.225': attribute type 12 has an invalid length.
[   77.828526][ T7065] netlink: 'syz.2.226': attribute type 10 has an invalid length.
[   78.356468][ T7099] hsr_slave_0: left promiscuous mode
[   78.359175][ T7099] hsr_slave_1: left promiscuous mode
[   78.398532][ T7101] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode
[   78.414484][ T7101] bond0: (slave team0): Releasing backup interface
[   78.418482][ T7101] bond0: (slave dummy0): Releasing backup interface
[   78.422108][ T7101] bridge_slave_0: left allmulticast mode
[   78.424733][ T7101] bridge_slave_0: left promiscuous mode
[   78.427421][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.432572][ T7101] bridge_slave_1: left allmulticast mode
[   78.435753][ T7101] bridge_slave_1: left promiscuous mode
[   78.439629][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.450481][ T7101] bond0: (slave bond_slave_0): Releasing backup interface
[   78.455508][ T7101] bond0: (slave bond_slave_1): Releasing backup interface
[   78.459713][ T7101] team0: Port device team_slave_0 removed
[   78.462666][ T7101] team0: Port device team_slave_1 removed
[   78.465348][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.468274][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.476900][ T7101] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   78.480279][ T7101] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   78.981726][ T7110] __nla_validate_parse: 12 callbacks suppressed
[   78.981736][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'.
[   79.066986][ T7113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.241'.
[   79.122263][ T7115] validate_nla: 1 callbacks suppressed
[   79.122277][ T7115] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[   79.122308][ T7116] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[   79.146966][ T7115] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.170239][ T7115] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.174611][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'.
[   79.178473][ T7122] netlink: 'syz.1.244': attribute type 5 has an invalid length.
[   79.179205][ T7115] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   79.181723][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'.
[   79.191747][ T7115] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   79.197471][ T7123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.244'.
[   79.220536][ T7122] geneve2: entered promiscuous mode
[   79.222956][ T7122] geneve2: entered allmulticast mode
[   79.228596][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   79.243258][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   79.247228][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   79.252359][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   79.272836][ T7127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.245'.
[   79.290952][ T7127] netlink: 'syz.0.245': attribute type 10 has an invalid length.
[   79.362813][ T7136] xfrm0: left promiscuous mode
[   79.365764][ T7133] netlink: 248 bytes leftover after parsing attributes in process `syz.0.248'.
[   79.371684][ T7136] xfrm0: left allmulticast mode
[   79.377623][ T7136] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[   79.380862][ T7136] macvlan2: left promiscuous mode
[   79.383814][ T7136] mac80211_hwsim hwsim34 wlan1: left allmulticast mode
[   79.388201][ T7136] veth3: left promiscuous mode
[   79.391828][ T7136] geneve2: left promiscuous mode
[   79.395985][ T7136] geneve2: left allmulticast mode
[   79.417300][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[   79.431119][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[   79.434895][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[   79.441205][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[   79.462746][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'.
[   79.467056][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'.
[   79.472288][ T7136] hsr_slave_0: left promiscuous mode
[   79.474467][ T7141] netlink: 248 bytes leftover after parsing attributes in process `syz.0.249'.
[   79.479720][ T7136] hsr_slave_1: left promiscuous mode
[   79.559673][ T7145] netlink: 'syz.0.250': attribute type 9 has an invalid length.
[   79.626333][ T7151] veth1_vlan: mtu greater than device maximum
[   79.792961][ T7170] netlink: 'syz.1.258': attribute type 9 has an invalid length.
[   79.913625][ T7178] vlan2: entered allmulticast mode
[   79.915459][ T7178] bridge0: entered allmulticast mode
[   79.917527][ T7178] bridge1: port 1(vlan2) entered blocking state
[   79.919815][ T7178] bridge1: port 1(vlan2) entered disabled state
[   79.922941][ T7178] vlan2: entered promiscuous mode
[   79.925248][ T7178] bridge0: entered promiscuous mode
[   79.939137][ T7178] dummy0: entered allmulticast mode
[   79.963611][ T7177] xt_policy: neither incoming nor outgoing policy selected
[   80.007407][ T7183] netlink: 'syz.2.263': attribute type 10 has an invalid length.
[   80.043458][ T7185] netlink: 'syz.2.264': attribute type 10 has an invalid length.
[   80.122253][ T7193] lo speed is unknown, defaulting to 1000
[   80.200501][ T7199] netlink: 'syz.2.268': attribute type 10 has an invalid length.
[   80.204163][ T7199] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[   80.281265][ T7201] netlink: 'syz.2.270': attribute type 10 has an invalid length.
[   80.350658][ T7204] mac80211_hwsim hwsim44 wlan1: left allmulticast mode
[   80.456560][ T7216] mac80211_hwsim hwsim38 wlan1: left allmulticast mode
[   80.479601][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.482545][ T7217] 8021q: adding VLAN 0 to HW filter on device team0
[   80.485664][ T7217] dummy0: left allmulticast mode
[   80.489279][ T7217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.495490][ T7221] xfrm0: entered promiscuous mode
[   80.495714][ T7217] syz.1.274 (7217) used greatest stack depth: 19136 bytes left
[   80.497311][ T7221] xfrm0: entered allmulticast mode
[   80.558278][ T7231] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[   80.565099][ T7231] CPU: 1 UID: 0 PID: 7231 Comm: syz.1.278 Not tainted syzkaller #0 PREEMPT(full) 
[   80.565114][ T7231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   80.565120][ T7231] Call Trace:
[   80.565126][ T7231]  <TASK>
[   80.565131][ T7231]  dump_stack_lvl+0x189/0x250
[   80.565151][ T7231]  ? __pfx_dump_stack_lvl+0x10/0x10
[   80.565164][ T7231]  ? __pfx__printk+0x10/0x10
[   80.565182][ T7231]  ? kernfs_path_from_node+0x2f/0x290
[   80.565194][ T7231]  ? kernfs_path_from_node+0x250/0x290
[   80.565202][ T7231]  ? kernfs_path_from_node+0x2f/0x290
[   80.565226][ T7231]  sysfs_warn_dup+0x8e/0xa0
[   80.565238][ T7231]  sysfs_do_create_link_sd+0xc0/0x110
[   80.565252][ T7231]  device_add_class_symlinks+0x1cf/0x240
[   80.565266][ T7231]  device_add+0x475/0xb50
[   80.565281][ T7231]  wiphy_register+0x1ba6/0x28d0
[   80.565310][ T7231]  ? __pfx_wiphy_register+0x10/0x10
[   80.565323][ T7231]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   80.565338][ T7231]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   80.565352][ T7231]  ieee80211_register_hw+0x3425/0x4080
[   80.565405][ T7231]  ? ieee80211_register_hw+0x1461/0x4080
[   80.565424][ T7231]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   80.565438][ T7231]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   80.565459][ T7231]  ? __hrtimer_setup+0x187/0x210
[   80.565470][ T7231]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   80.565487][ T7231]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   80.565517][ T7231]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   80.565528][ T7231]  ? trace_kmalloc+0x1f/0xd0
[   80.565541][ T7231]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   80.565553][ T7231]  ? kstrndup+0xbf/0x160
[   80.565569][ T7231]  hwsim_new_radio_nl+0xea4/0x1b10
[   80.565583][ T7231]  ? __pfx___nla_validate_parse+0x10/0x10
[   80.565606][ T7231]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   80.565629][ T7231]  ? __nla_parse+0x40/0x60
[   80.565646][ T7231]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   80.565665][ T7231]  genl_family_rcv_msg_doit+0x215/0x300
[   80.565682][ T7231]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   80.565703][ T7231]  ? bpf_lsm_capable+0x9/0x20
[   80.565716][ T7231]  ? security_capable+0x7e/0x2e0
[   80.565734][ T7231]  genl_rcv_msg+0x60e/0x790
[   80.565749][ T7231]  ? __pfx_genl_rcv_msg+0x10/0x10
[   80.565760][ T7231]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   80.565780][ T7231]  netlink_rcv_skb+0x208/0x470
[   80.565792][ T7231]  ? __lock_acquire+0xab9/0xd20
[   80.565807][ T7231]  ? __pfx_genl_rcv_msg+0x10/0x10
[   80.565819][ T7231]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   80.565846][ T7231]  ? down_read+0x1ad/0x2e0
[   80.565857][ T7231]  genl_rcv+0x28/0x40
[   80.565867][ T7231]  netlink_unicast+0x82f/0x9e0
[   80.565886][ T7231]  ? __pfx_netlink_unicast+0x10/0x10
[   80.565899][ T7231]  ? netlink_sendmsg+0x642/0xb30
[   80.565906][ T7231]  ? skb_put+0x11b/0x210
[   80.565918][ T7231]  netlink_sendmsg+0x805/0xb30
[   80.565933][ T7231]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.565945][ T7231]  ? aa_sock_msg_perm+0xf1/0x1d0
[   80.565955][ T7231]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   80.565964][ T7231]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.565974][ T7231]  __sock_sendmsg+0x21c/0x270
[   80.565988][ T7231]  ____sys_sendmsg+0x505/0x830
[   80.566003][ T7231]  ? __pfx_____sys_sendmsg+0x10/0x10
[   80.566019][ T7231]  ? import_iovec+0x74/0xa0
[   80.566033][ T7231]  ___sys_sendmsg+0x21f/0x2a0
[   80.566045][ T7231]  ? __pfx____sys_sendmsg+0x10/0x10
[   80.566078][ T7231]  ? __fget_files+0x2a/0x420
[   80.566086][ T7231]  ? __fget_files+0x3a0/0x420
[   80.566101][ T7231]  __x64_sys_sendmsg+0x19b/0x260
[   80.566112][ T7231]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   80.566130][ T7231]  ? rcu_is_watching+0x15/0xb0
[   80.566143][ T7231]  ? do_syscall_64+0xbe/0x3b0
[   80.566155][ T7231]  do_syscall_64+0xfa/0x3b0
[   80.566163][ T7231]  ? lockdep_hardirqs_on+0x9c/0x150
[   80.566176][ T7231]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.566186][ T7231]  ? exc_page_fault+0x9f/0xf0
[   80.566201][ T7231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.566222][ T7231] RIP: 0033:0x7fe5f7b8ebe9
[   80.566233][ T7231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.566243][ T7231] RSP: 002b:00007fe5f8a36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   80.566254][ T7231] RAX: ffffffffffffffda RBX: 00007fe5f7dc5fa0 RCX: 00007fe5f7b8ebe9
[   80.566261][ T7231] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[   80.566268][ T7231] RBP: 00007fe5f7c11e19 R08: 0000000000000000 R09: 0000000000000000
[   80.566274][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.566280][ T7231] R13: 00007fe5f7dc6038 R14: 00007fe5f7dc5fa0 R15: 00007ffea8bd47d8
[   80.566297][ T7231]  </TASK>
[   80.788120][  T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.790913][  T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.954411][ T7237] delete_channel: no stack
[   81.440822][ T7255] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   81.546750][ T7269] netlink: 'syz.0.287': attribute type 11 has an invalid length.
[   81.943549][ T7282] 8021q: adding VLAN 0 to HW filter on device team0
[   81.949791][ T7282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.007086][ T7291] netlink: 'syz.2.293': attribute type 11 has an invalid length.
[   82.127489][ T7303] xfrm0: entered promiscuous mode
[   82.129712][ T7303] xfrm0: entered allmulticast mode
[   82.174226][ T7303] lo speed is unknown, defaulting to 1000
[   82.202694][ T7305] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   82.208052][ T7305] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   82.302204][ T7313] netlink: 'syz.0.301': attribute type 11 has an invalid length.
[   82.348174][ T7319] netlink: 'syz.0.302': attribute type 11 has an invalid length.
[   82.354149][ T7319] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode
[   82.469242][ T7324] trusted_key: syz.0.303 sent an empty control message without MSG_MORE.
[   83.152791][ T7326] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   83.381144][ T7339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.385971][ T7339] syzkaller0: entered promiscuous mode
[   83.387852][ T7339] syzkaller0: entered allmulticast mode
[   83.439702][ T7339] tipc: Resetting bearer <eth:syzkaller0>
[   83.449999][ T7338] tipc: Resetting bearer <eth:syzkaller0>
[   83.464529][ T7338] tipc: Disabling bearer <eth:syzkaller0>
[   83.474771][ T7342] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[   83.746201][ T7362] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.750490][ T7362] 8021q: adding VLAN 0 to HW filter on device team0
[   83.756066][ T7362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.762831][ T5314] lo speed is unknown, defaulting to 1000
[   83.766901][ T5314] syz2: Port: 1 Link ACTIVE
[   83.778785][ T7362] xfrm0: entered promiscuous mode
[   83.781899][ T7362] xfrm0: entered allmulticast mode
[   83.811112][ T7361] lo speed is unknown, defaulting to 1000
[   84.126458][ T7385] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[   84.130844][ T7381] validate_nla: 24 callbacks suppressed
[   84.130855][ T7381] netlink: 'syz.0.318': attribute type 1 has an invalid length.
[   84.142052][ T7385] bond0: (slave dummy0): Releasing backup interface
[   84.147835][ T7385] vlan2: left promiscuous mode
[   84.149517][ T7385] bridge0: left promiscuous mode
[   84.151305][ T7385] bridge1: port 1(vlan2) entered disabled state
[   84.176691][ T7381] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.191762][ T7381] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.195476][ T7381] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   84.201153][ T7391] netlink: 'syz.2.317': attribute type 13 has an invalid length.
[   84.202249][ T7381] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   84.206468][ T7391] netlink: 'syz.2.317': attribute type 17 has an invalid length.
[   84.218492][ T7385] netlink: 'syz.1.319': attribute type 10 has an invalid length.
[   84.222575][ T7391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.259681][ T7392] veth5: entered promiscuous mode
[   84.299654][ T7391] lo speed is unknown, defaulting to 1000
[   84.347437][ T7402] netlink: 'syz.1.322': attribute type 9 has an invalid length.
[   84.350124][ T7402] __nla_validate_parse: 29 callbacks suppressed
[   84.350131][ T7402] netlink: 224 bytes leftover after parsing attributes in process `syz.1.322'.
[   84.442931][ T7410] mac80211_hwsim hwsim34 wlan1: left allmulticast mode
[   84.449681][ T7410] netlink: 'syz.1.324': attribute type 11 has an invalid length.
[   84.456341][ T7410] netlink: 244 bytes leftover after parsing attributes in process `syz.1.324'.
[   84.464129][ T7409] netlink: 'syz.0.323': attribute type 1 has an invalid length.
[   84.481712][ T7409] 8021q: adding VLAN 0 to HW filter on device bond4
[   84.486839][ T7410] netlink: 'syz.1.324': attribute type 10 has an invalid length.
[   84.507440][ T7409] veth7: entered promiscuous mode
[   84.542800][ T7413] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[   84.550764][ T7410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.324'.
[   84.610832][ T7420] tipc: Started in network mode
[   84.613016][ T7420] tipc: Node identity 026f678a5b9, cluster identity 4711
[   84.617530][ T7420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.620465][ T7420] syzkaller0: entered promiscuous mode
[   84.622308][ T7420] syzkaller0: entered allmulticast mode
[   84.631545][ T7420] bond0: entered promiscuous mode
[   84.636305][ T7420] bond0: left promiscuous mode
[   84.686122][ T7420] tipc: Resetting bearer <eth:syzkaller0>
[   84.691521][ T7419] tipc: Resetting bearer <eth:syzkaller0>
[   84.702599][ T7419] tipc: Disabling bearer <eth:syzkaller0>
[   84.760503][ T7426] netlink: 128 bytes leftover after parsing attributes in process `syz.1.329'.
[   84.780892][ T7428] xfrm0: left promiscuous mode
[   84.782528][ T7428] xfrm0: left allmulticast mode
[   84.786855][ T7428] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   84.789438][ T7428] mac80211_hwsim hwsim44 wlan1: left allmulticast mode
[   84.792559][ T7428] veth5: left promiscuous mode
[   84.795061][ T7428] veth7: left promiscuous mode
[   84.797021][    T9] lo speed is unknown, defaulting to 1000
[   84.799460][    T9] syz2: Port: 1 Link DOWN
[   84.810036][ T7426] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.818813][ T7426] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   84.822867][ T7426] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   84.834264][ T7432] netlink: 'syz.0.330': attribute type 13 has an invalid length.
[   84.837596][ T7432] netlink: 'syz.0.330': attribute type 17 has an invalid length.
[   85.058060][ T7455] netlink: 'syz.2.336': attribute type 10 has an invalid length.
[   85.061074][ T7455] syz_tun: entered promiscuous mode
[   85.112162][ T7451] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.116475][ T7451] 8021q: adding VLAN 0 to HW filter on device team0
[   85.121551][ T7451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.130093][ T7451] xfrm0: entered promiscuous mode
[   85.132482][ T7451] xfrm0: entered allmulticast mode
[   85.137440][   T24] lo speed is unknown, defaulting to 1000
[   85.139672][   T24] syz2: Port: 1 Link ACTIVE
[   85.154280][ T7455] lo speed is unknown, defaulting to 1000
[  132.597274][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.600194][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.047009][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.049927][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.477417][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.480178][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  316.918017][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  316.920382][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  378.357733][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.359885][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
19:38:02  Registers:
info registers vcpu 0

CPU#0
RAX=6be36b2051dbbd00 RBX=ffffffff819683c8 RCX=6be36b2051dbbd00 RDX=0000000000000001
RSI=ffffffff8d9b8241 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efe6a000218 CR3=0000000026500000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=f65c9dbdc8001000 RBX=ffffffff819683c8 RCX=f65c9dbdc8001000 RDX=0000000000000001
RSI=ffffffff8d9b8241 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39030 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2b1a88e348 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
