last executing test programs:

12.242621904s ago: executing program 2 (id=170):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200ddff03000000080003000000000080037566", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x19, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x54, 0x30, 0x12f, 0x0, 0x25dfdbff, {}, [{0x40, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a80080002801100e500080000003e120000080002"], 0x44}}, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c)

12.170764689s ago: executing program 2 (id=173):
syz_emit_ethernet(0x7e, &(0x7f0000000100)={@empty, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x3, 0x0, 0x2}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x1, 0xaa, "79ea", "86d647", 0x805, "e3d498481cb60d731292d03fa3bed03fd87d19616adb39730cc622c78f405c5e9dc049bdd21f974f4f669b79b6518d5f6309bdfdcd621dee0dc715de07d0e661876349c001d83335fc4b197c5df2c3de709338f2529da85f459af99effd8e5"}}}}}}, &(0x7f0000000180)={0x0, 0x4, [0xa4, 0xbbe, 0x329, 0x500]}) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

12.113208275s ago: executing program 2 (id=174):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x2b, 0xb, 0x0, 0x0, {0x6}, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@remote}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x34}}, 0xc00)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02000000"], 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f00000000c0)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, {}, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@local}}, 0xe8)
r7 = socket$key(0xf, 0x3, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="bfc628bd7000ffdbdf251a00000005009200800000000700210062620008100022800400008004"], 0x34}, 0x1, 0x0, 0x0, 0x20044044}, 0x800)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r8)
sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[@ANYBLOB="19000000", @ANYRES16=r11, @ANYBLOB="010029bd7000fbdbdf250c000000280005801c0002800800030000080000080004003c00000008000200be0d00000800010075647000"], 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)

11.753770609s ago: executing program 2 (id=178):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4002850}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@deltaction={0xf4, 0x31, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x381f}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x800)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, &(0x7f0000000100))

7.518822561s ago: executing program 2 (id=232):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc6ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r5, 0x704, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x30}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4008000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0xe79cccea089a010}, 0x20004050)
sendto(r9, &(0x7f0000000740)="120000001200e7ef64783dec0000000000a1", 0x12, 0x0, 0x0, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x38, r14, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='@'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0x240040d7}, 0x0)
recvmmsg(r9, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4090, 0xffa}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000001a40)=""/152, 0x98}, {&(0x7f0000000200)=""/142, 0x8e}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r8, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}]}, 0x28}}, 0x20000005)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x30, r8, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x23, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x3, 0x4, 0x7, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5dc98647}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

4.043493128s ago: executing program 2 (id=232):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc6ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r5, 0x704, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x30}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4008000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0xe79cccea089a010}, 0x20004050)
sendto(r9, &(0x7f0000000740)="120000001200e7ef64783dec0000000000a1", 0x12, 0x0, 0x0, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x38, r14, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='@'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0x240040d7}, 0x0)
recvmmsg(r9, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4090, 0xffa}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000001a40)=""/152, 0x98}, {&(0x7f0000000200)=""/142, 0x8e}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r8, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}]}, 0x28}}, 0x20000005)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x30, r8, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x23, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x3, 0x4, 0x7, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5dc98647}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

503.407642ms ago: executing program 0 (id=319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b0601"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x4c84c000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
listen(r4, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000140)={0x5, @broadcast})

429.950123ms ago: executing program 0 (id=321):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x20000400)
r1 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0xf, 0x80000000, 0xffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250a0000005c0009800800020001000000080001000008000008000100070000000800010000080000080001000600000008000200ffffff7f0800020004000000080001007f0000bf0e978fc9ca88e40008000100911f000008"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6, 0x10}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x900}}, [], {{0x7, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockname$packet(r1, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0], 0x4c}], 0x1}, 0x300)

342.347974ms ago: executing program 0 (id=324):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r0=>0xffffffffffffffff}, 0x4)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x0, 0x26, 0x0, 0x1}, 0x28)
r4 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0xc084}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r5, 0x4)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x693a8c72, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1583b, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000600)=[{0x5, 0x4, 0x6, 0x4}, {0x0, 0x2, 0x6, 0x3}, {0x3, 0x4, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x8}, {0x1, 0x1, 0x3}, {0x1, 0x1, 0xe, 0xb}, {0x4, 0x2, 0x6, 0x5}, {0x3, 0x5, 0xd, 0xbeccf0eac520da89}, {0x5, 0x2, 0x7, 0x1}], 0x10, 0x6}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pB    \x00'}, 0x20)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="002979a1d2c34470955d35382a8043d4ae1ef82f8fe9a8ccdb7b7142cdd9f82da2ef93c0bd5b7656403bc8a2db1da3cda181a06e1e25ae77896ffe486f0e34be010e4e3fdeb1d2be428a0a60fce69b419367e4b85676f4c1adbeca83351a92bc1058e2e6007c04b0819674c4ba2b33ce8c930c36a01ead489545a3e9320c4235195d296176ed61637edbf4af268dad5d1656b355950f4b8339e8c0959c5223bfca52125507d2ed303795ac9afe6f07a276ebb6e4b0393e6218fa7d9e5de007", @ANYRES32=r7, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50)
r9 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x10, &(0x7f0000000180)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0x4, 0x6, 0xb, 0x1, 0xfffffffffffffff0}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], &(0x7f00000000c0)='syzkaller\x00', 0xfffffff9, 0xa9, &(0x7f00000002c0)=""/169, 0x41100, 0x46, '\x00', 0x0, @fallback=0x27, r1, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x4, 0x6}, 0x10, r5, r6, 0x0, &(0x7f00000009c0)=[r7, r8, r9, r10], &(0x7f0000000a00), 0x10, 0xebdd}, 0x94)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r12, 0x0, 0x0)
r13 = socket$tipc(0x1e, 0x5, 0x0)
r14 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000100)={0xa0002000})
socket$netlink(0x10, 0x3, 0x0)
r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'})

261.739233ms ago: executing program 0 (id=325):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00005e901308977aea7599f19c2cc909385aa800", @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="20005080050002000200000009000100377ce8ed950000000800030006ac0f00"], 0x3c}}, 0x0)

261.336546ms ago: executing program 1 (id=326):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)

194.13677ms ago: executing program 1 (id=327):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e)
sendfile(r0, r0, &(0x7f0000000040)=0x6, 0xf35)

193.869645ms ago: executing program 1 (id=328):
accept4(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000100)=0x80, 0x80000)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc02000000000000000000000000000064010102000000000000000000000000000084ff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000e38afa63042bfed20000000000000000aa3c040000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

130.800857ms ago: executing program 1 (id=329):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000500)="586fa1", 0x3, 0x800, &(0x7f000005ffe4)={0xa, 0x0, 0xd910, @private2, 0x9}, 0x1c)
shutdown(r0, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r2=>0x0}, &(0x7f0000000880)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r2}, &(0x7f0000000000)=0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e26, 0xfffffffe, @private2, 0x6}, 0x1c)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x3}, &(0x7f0000000140)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$phonet(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, r6, 0x813, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x84}}, 0x0)

130.543977ms ago: executing program 0 (id=330):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x504c0500}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xfc, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1cc}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x6}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x2, 0x3, 0xf}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.192831ms ago: executing program 1 (id=331):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079104d00000000002530009e9244e8abf5470f0000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

218.204µs ago: executing program 0 (id=332):
socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000480)={'syzkaller0\x00'})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1)
sendmmsg(r2, &(0x7f0000001b80), 0x0, 0x4000)
accept4$vsock_stream(r1, 0x0, 0x0, 0x80000)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164eaf284a1be636173742d6c696e6b00000c0007800800050002000000"], 0x38}}, 0xc000)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x2c, r5, 0x1, 0x80, 0x25dfdbfe, {0xf, 0x0, 0x2d}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0)

0s ago: executing program 1 (id=333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000006c0)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef) (async)
close(0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33317' (ED25519) to the list of known hosts.
syzkaller login: [   49.676864][ T5814] cgroup: Unknown subsys name 'net'
[   49.783853][ T5814] cgroup: Unknown subsys name 'cpuset'
[   49.788852][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.515465][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.872405][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.876425][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.879869][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.884073][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.887614][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.971040][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.974482][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.980737][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.984126][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.986833][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.990720][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.998249][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.002407][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.007006][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.012449][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.198531][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   56.337690][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   56.360777][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   56.386018][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.388610][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.391405][ T5828] bridge_slave_0: entered allmulticast mode
[   56.394105][ T5828] bridge_slave_0: entered promiscuous mode
[   56.436194][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.438836][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.441883][ T5828] bridge_slave_1: entered allmulticast mode
[   56.445093][ T5828] bridge_slave_1: entered promiscuous mode
[   56.509506][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.537091][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.542672][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.545604][ T5833] bridge_slave_0: entered allmulticast mode
[   56.549368][ T5833] bridge_slave_0: entered promiscuous mode
[   56.554295][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.557200][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.561043][ T5833] bridge_slave_1: entered allmulticast mode
[   56.564698][ T5833] bridge_slave_1: entered promiscuous mode
[   56.569244][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.587383][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.590941][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.594119][ T5835] bridge_slave_0: entered allmulticast mode
[   56.597821][ T5835] bridge_slave_0: entered promiscuous mode
[   56.635526][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.638589][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.643572][ T5835] bridge_slave_1: entered allmulticast mode
[   56.647243][ T5835] bridge_slave_1: entered promiscuous mode
[   56.665608][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.672525][ T5828] team0: Port device team_slave_0 added
[   56.690416][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.696110][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.701338][ T5828] team0: Port device team_slave_1 added
[   56.704909][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.769034][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.771916][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.782830][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.797279][ T5833] team0: Port device team_slave_0 added
[   56.801846][ T5835] team0: Port device team_slave_0 added
[   56.804760][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.807484][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.817616][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.822964][ T5833] team0: Port device team_slave_1 added
[   56.830756][ T5835] team0: Port device team_slave_1 added
[   56.856610][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.858832][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.868906][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.882503][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.884764][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.893560][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.898208][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.901523][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.909554][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.915374][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.918217][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.929458][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.969353][ T5828] hsr_slave_0: entered promiscuous mode
[   56.972690][ T5828] hsr_slave_1: entered promiscuous mode
[   57.012016][ T5835] hsr_slave_0: entered promiscuous mode
[   57.014627][ T5835] hsr_slave_1: entered promiscuous mode
[   57.016714][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.019365][ T5835] Cannot create hsr debugfs directory
[   57.043828][ T5833] hsr_slave_0: entered promiscuous mode
[   57.046111][ T5833] hsr_slave_1: entered promiscuous mode
[   57.048188][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.051206][ T5833] Cannot create hsr debugfs directory
[   57.294647][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.302721][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.307773][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.314419][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.360881][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.372862][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.387921][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.404485][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.443982][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.455020][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.466216][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.472924][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.529553][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.555818][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   57.564418][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.566727][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.582066][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.584408][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.616531][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.627184][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.648360][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   57.656945][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   57.671175][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.673543][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.676937][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.679359][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.706820][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.709254][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.719288][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.722056][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.774680][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.834951][ T5828] veth0_vlan: entered promiscuous mode
[   57.847164][ T5828] veth1_vlan: entered promiscuous mode
[   57.878726][ T5828] veth0_macvtap: entered promiscuous mode
[   57.897096][ T5828] veth1_macvtap: entered promiscuous mode
[   57.918694][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.933379][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.953313][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.956933][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.963299][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.967334][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.974955][ T5836] Bluetooth: hci0: command tx timeout
[   57.991356][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.060809][   T55] Bluetooth: hci1: command tx timeout
[   58.063526][ T5836] Bluetooth: hci2: command tx timeout
[   58.067640][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.108420][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.114484][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.124007][ T5835] veth0_vlan: entered promiscuous mode
[   58.154046][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.154464][ T5835] veth1_vlan: entered promiscuous mode
[   58.157820][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.193745][ T5833] veth0_vlan: entered promiscuous mode
[   58.203543][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.222190][ T5833] veth1_vlan: entered promiscuous mode
[   58.225602][ T5835] veth0_macvtap: entered promiscuous mode
[   58.233949][ T5835] veth1_macvtap: entered promiscuous mode
[   58.264965][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.268765][ T5833] veth0_macvtap: entered promiscuous mode
[   58.269655][ T5892] Zero length message leads to an empty skb
[   58.276161][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.283944][ T5833] veth1_macvtap: entered promiscuous mode
[   58.299218][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.304448][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.310259][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.313007][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.339415][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.358929][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.397847][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.402963][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.408047][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.412366][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.419840][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.422277][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.463819][ T5898] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.472993][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.475813][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.547029][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.560429][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.584899][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.587521][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.732875][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.736549][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.752259][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.906617][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.553349][ T5976] sctp: [Deprecated]: syz.2.13 (pid 5976) Use of int in max_burst socket option deprecated.
[   59.553349][ T5976] Use struct sctp_assoc_value instead
[   59.642246][ T5973] warning: `syz.1.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.665596][ T5980] ieee802154 phy0 wpan0: encryption failed: -22
[   59.706842][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16'.
[   59.731511][ T5980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.852052][ T5996] netlink: 'syz.1.21': attribute type 4 has an invalid length.
[   59.958200][ T6004] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET)
[   59.969467][ T6004] x_tables: duplicate underflow at hook 1
[   60.005687][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.035551][ T6006] syz.1.24 (6006) used greatest stack depth: 20536 bytes left
[   60.131617][   T55] Bluetooth: hci1: command tx timeout
[   60.133881][ T5836] Bluetooth: hci2: command tx timeout
[   60.147668][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'.
[   60.453730][ T5980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.799135][ T6045] netlink: 'syz.2.39': attribute type 2 has an invalid length.
[   60.805560][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.39'.
[   60.960829][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'.
[   61.127190][ T6076] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.46'.
[   61.132357][ T6067] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.46'.
[   61.232527][ T5980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.358127][ T5980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.424967][ T5980] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.434518][ T5980] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.448506][ T5980] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.460584][ T5980] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.795023][ T6117] netlink: 'syz.0.56': attribute type 1 has an invalid length.
[   61.837577][ T6117] gretap1: entered promiscuous mode
[   61.881842][ T6117] 8021q: VLANs not supported on wg2
[   61.944133][ T6123] netlink: 'syz.0.57': attribute type 1 has an invalid length.
[   61.948678][ T6123] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR
[   61.993427][ T6129] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.059748][ T6136] veth1_macvtap: left promiscuous mode
[   62.063368][ T6136] macsec0: entered promiscuous mode
[   62.067593][ T6136] veth1_macvtap: entered promiscuous mode
[   62.070307][ T6136] macsec0: left promiscuous mode
[   62.211502][ T5836] Bluetooth: hci2: command tx timeout
[   62.213312][   T55] Bluetooth: hci1: command tx timeout
[   62.258326][ T6163] netlink: 'syz.0.68': attribute type 11 has an invalid length.
[   62.345773][ T6170] netlink: 'syz.2.69': attribute type 2 has an invalid length.
[   62.348240][ T6170] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   62.430004][ T6174] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   63.437307][ T6194] netlink: 'syz.0.78': attribute type 3 has an invalid length.
[   63.521570][ T6199] __nla_validate_parse: 10 callbacks suppressed
[   63.521584][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.80'.
[   63.624603][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'.
[   63.806376][ T6226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'.
[   63.882628][ T6226] tipc: Started in network mode
[   63.884331][ T6226] tipc: Node identity ac14140f, cluster identity 4711
[   63.886727][ T6226] tipc: New replicast peer: 255.255.255.255
[   63.888978][ T6226] tipc: Enabled bearer <udp:syz2>, priority 10
[   63.911356][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'.
[   63.914151][ T6226] tipc: Disabling bearer <udp:syz2>
[   63.917985][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'.
[   64.301781][ T5836] Bluetooth: hci2: command tx timeout
[   64.304174][ T5836] Bluetooth: hci1: command tx timeout
[   66.954434][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'.
[   66.962684][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'.
[   67.051307][ T6250] netlink: 44 bytes leftover after parsing attributes in process `syz.0.100'.
[   67.054820][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'.
[   67.058927][ T6250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.100'.
[   67.122029][ T6249] vxcan2: entered promiscuous mode
[   67.169196][ T6258] netlink: 'syz.0.103': attribute type 2 has an invalid length.
[   67.336221][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.343904][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.353390][    T9] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   67.514431][ T6297] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   67.938238][ T6324] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[   67.947199][ T6324] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   68.035308][ T6327] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96
[   68.574742][ T6353] __nla_validate_parse: 9 callbacks suppressed
[   68.574756][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.126'.
[   68.625010][ T6356] x_tables: duplicate underflow at hook 1
[   68.691872][ T6363] netlink: 88 bytes leftover after parsing attributes in process `syz.2.129'.
[   68.746025][ T6368] netlink: 'syz.2.130': attribute type 4 has an invalid length.
[   68.757142][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'.
[   68.762237][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'.
[   68.934795][ T6375] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[   68.995202][ T6380] netlink: 'syz.0.134': attribute type 9 has an invalid length.
[   68.998383][ T6380] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.134'.
[   69.014923][ T6380] netlink: 'syz.0.134': attribute type 9 has an invalid length.
[   69.018353][ T6380] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.134'.
[   69.099564][ T6385] sctp: [Deprecated]: syz.0.136 (pid 6385) Use of struct sctp_assoc_value in delayed_ack socket option.
[   69.099564][ T6385] Use struct sctp_sack_info instead
[   69.116829][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'.
[   69.138135][ T6387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.156207][ T6395] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   69.203663][ T6387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.208081][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'.
[   69.226347][ T6399] Dead loop on virtual device ip6_vti0, fix it urgently!
[   69.299487][ T6387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.356963][ T6387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.472377][ T6387] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.483150][ T6387] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.487610][ T6418] netlink: 36 bytes leftover after parsing attributes in process `syz.0.146'.
[   69.498559][ T6387] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.515461][ T6387] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.574088][ T6423] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.577492][ T6423] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.581032][ T6423] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.584230][ T6423] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.668577][ T6431] openvswitch: netlink: Key 6 has unexpected len 18 expected 2
[   69.746051][ T6440] netlink: 79 bytes leftover after parsing attributes in process `syz.2.157'.
[   69.752749][ T6441] tipc: Started in network mode
[   69.754424][ T6441] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   69.757777][ T6441] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   69.854409][ T6455] xt_CT: No such helper "snmp"
[   70.659746][ T6509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.699869][ T6512] netlink: 'syz.2.174': attribute type 1 has an invalid length.
[   70.718073][ T6509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.760237][ T6509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.822953][ T6509] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.864417][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.867307][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.875911][   T24] tipc: Node number set to 10136234
[   70.907324][ T6509] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.923051][ T6509] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.939418][ T6509] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.953281][ T6509] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.971198][ T6520] tipc: Started in network mode
[   70.973357][ T6520] tipc: Node identity f2e4be2e935f, cluster identity 4711
[   70.978171][ T6520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.020651][ T6520] syzkaller0: entered promiscuous mode
[   71.023216][ T6520] syzkaller0: entered allmulticast mode
[   71.026386][ T6520] tipc: Resetting bearer <eth:syzkaller0>
[   71.088269][ T6519] tipc: Resetting bearer <eth:syzkaller0>
[   71.166282][ T6523] Cannot find set identified by id 1 to match
[   71.748929][ T6519] tipc: Disabling bearer <eth:syzkaller0>
[   71.902829][ T6539] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   71.905394][ T5864] IPVS: starting estimator thread 0...
[   71.991321][ T6543] IPVS: using max 80 ests per chain, 192000 per kthread
[   72.218798][ T6561] syz_tun: entered allmulticast mode
[   72.387553][ T6567] netlink: 'syz.1.193': attribute type 1 has an invalid length.
[   72.422225][ T6567] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.207428][ T6583] pim6reg1: entered allmulticast mode
[   73.349702][ T6594] syzkaller1: entered promiscuous mode
[   73.352247][ T6594] syzkaller1: entered allmulticast mode
[   73.400794][ T6594] bridge_slave_1: left allmulticast mode
[   73.402861][ T6594] bridge_slave_1: left promiscuous mode
[   73.404740][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.414962][ T6594] bridge_slave_0: left allmulticast mode
[   73.417151][ T6594] bridge_slave_0: left promiscuous mode
[   73.419606][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.613676][ T6602] sch_tbf: burst 257 is lower than device bond0 mtu (1514) !
[   73.669188][ T6609] __nla_validate_parse: 19 callbacks suppressed
[   73.669202][ T6609] netlink: 308 bytes leftover after parsing attributes in process `syz.0.205'.
[   73.676459][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   73.681476][ T6609] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   73.716161][ T6611] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.206'.
[   73.782220][ T6617] Bluetooth: MGMT ver 1.23
[   73.785101][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[   73.985971][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.1.213'.
[   74.158713][ T6662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.220'.
[   74.164186][ T6662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.220'.
[   74.168403][ T6662] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   74.470137][ T6677] netlink: 144 bytes leftover after parsing attributes in process `syz.1.225'.
[   75.107424][ T6679] netlink: 192 bytes leftover after parsing attributes in process `syz.0.226'.
[   75.150418][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.227'.
[   75.550141][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.567196][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.578008][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.581535][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.586221][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.590763][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.595399][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.599248][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.604046][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.609621][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.615712][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.664816][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.754141][ T6705] chnl_net:caif_netlink_parms(): no params data found
[   75.837694][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.841256][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.844361][ T6705] bridge_slave_0: entered allmulticast mode
[   75.848288][ T6705] bridge_slave_0: entered promiscuous mode
[   75.853612][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.856651][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.860495][ T6705] bridge_slave_1: entered allmulticast mode
[   75.864311][ T6705] bridge_slave_1: entered promiscuous mode
[   75.894898][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.901906][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.934911][ T6705] team0: Port device team_slave_0 added
[   75.940972][ T6705] team0: Port device team_slave_1 added
[   75.968034][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.971289][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.983264][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.989350][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.992409][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.003951][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.045578][ T6705] hsr_slave_0: entered promiscuous mode
[   76.048778][ T6705] hsr_slave_1: entered promiscuous mode
[   76.052094][ T6705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.055338][ T6705] Cannot create hsr debugfs directory
[   76.160362][ T6705] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.214152][ T6705] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.262185][ T6705] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.314661][ T6705] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.415114][ T6705] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.420175][ T6705] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.424238][ T6705] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.428409][ T6705] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.498583][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.518108][ T6705] 8021q: adding VLAN 0 to HW filter on device team0
[   76.527489][ T3640] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.529920][ T3640] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.539231][ T3640] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.541671][ T3640] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.650093][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.672514][ T6705] veth0_vlan: entered promiscuous mode
[   76.678385][ T6705] veth1_vlan: entered promiscuous mode
[   76.693912][ T6705] veth0_macvtap: entered promiscuous mode
[   76.697518][ T6705] veth1_macvtap: entered promiscuous mode
[   76.707054][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.714933][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.720487][ T6705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.723525][ T6705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.726406][ T6705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.729322][ T6705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.773720][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.781698][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.797427][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.801187][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.253758][ T6767] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   77.590055][ T6792] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[   77.681560][ T6797] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.743728][ T6807] trusted_key: syz.0.261 sent an empty control message without MSG_MORE.
[   77.843129][ T6812] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 1, id = 0
[   78.562252][ T6859] dvmrp1: entered allmulticast mode
[   78.565330][ T6859] dvmrp1: left allmulticast mode
[   78.730382][ T6868] __nla_validate_parse: 18 callbacks suppressed
[   78.730393][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.277'.
[   78.785245][ T5725] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.138378][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.145320][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.150496][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.156726][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.164145][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.381980][ T6871] chnl_net:caif_netlink_parms(): no params data found
[   79.476057][ T6880] netlink: 84 bytes leftover after parsing attributes in process `syz.0.279'.
[   79.481352][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.481487][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.279'.
[   79.487990][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.492855][ T6871] bridge_slave_0: entered allmulticast mode
[   79.497566][ T6871] bridge_slave_0: entered promiscuous mode
[   79.511370][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.514784][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.518171][ T6871] bridge_slave_1: entered allmulticast mode
[   79.525032][ T6871] bridge_slave_1: entered promiscuous mode
[   79.559357][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.564863][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.603780][ T6871] team0: Port device team_slave_0 added
[   79.607916][ T6871] team0: Port device team_slave_1 added
[   79.653332][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.655628][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.664121][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.680726][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.682979][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.697465][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.703849][ T6882] netlink: 'syz.1.280': attribute type 4 has an invalid length.
[   79.859128][ T6871] hsr_slave_0: entered promiscuous mode
[   79.870706][ T6871] hsr_slave_1: entered promiscuous mode
[   79.873912][ T6871] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.877131][ T6871] Cannot create hsr debugfs directory
[   80.067245][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   80.225439][ T6921] netlink: 104 bytes leftover after parsing attributes in process `syz.0.294'.
[   80.226621][ T6919] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.231905][ T6919] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.235922][ T6919] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.238744][ T6919] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.245740][ T6919] team0: Port device vxlan0 added
[   80.295685][ T6930] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (192)
[   80.494271][ T5725] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.515641][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'.
[   80.554035][ T6953] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.591316][ T5725] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.620455][ T5725] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.744512][ T5725] bridge_slave_1: left allmulticast mode
[   80.751164][ T5725] bridge_slave_1: left promiscuous mode
[   80.753755][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.768904][ T5725] bridge_slave_0: left allmulticast mode
[   80.773864][ T5725] bridge_slave_0: left promiscuous mode
[   80.775828][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.096250][  T789] cfg80211: failed to load regulatory.db
[   81.140739][ T5725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.147491][ T5725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.156331][ T5725] bond0 (unregistering): Released all slaves
[   81.250981][   T55] Bluetooth: hci2: command tx timeout
[   81.483225][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.313'.
[   81.488982][ T5725] hsr_slave_0: left promiscuous mode
[   81.493623][ T5725] hsr_slave_1: left promiscuous mode
[   81.495688][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.498136][ T5725] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.501600][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.504151][ T5725] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.521001][ T5725] veth1_macvtap: left promiscuous mode
[   81.523488][ T5725] veth0_macvtap: left promiscuous mode
[   81.525817][ T5725] veth1_vlan: left promiscuous mode
[   81.528236][ T5725] veth0_vlan: left promiscuous mode
[   81.838317][ T5725] team0 (unregistering): Port device team_slave_1 removed
[   81.858139][ T5725] team0 (unregistering): Port device team_slave_0 removed
[   82.063695][ T6999] team0: Device gtp0 is of different type
[   82.169643][ T6871] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.182247][ T6871] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.187305][ T6871] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.193161][ T6871] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.308226][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.328023][ T6871] 8021q: adding VLAN 0 to HW filter on device team0
[   82.333115][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.336009][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.350831][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.353263][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.368319][ T7029] Dead loop on virtual device ip6_vti0, fix it urgently!
[   82.394797][ T6871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.493461][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.520707][ T7044] netlink: 'syz.1.326': attribute type 10 has an invalid length.
[   82.528092][ T7044] team0: Cannot enslave team device to itself
[   82.540978][ T6871] veth0_vlan: entered promiscuous mode
[   82.553283][ T6871] veth1_vlan: entered promiscuous mode
[   82.602068][ T6871] veth0_macvtap: entered promiscuous mode
[   82.607174][ T6871] veth1_macvtap: entered promiscuous mode
[   82.626657][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.633580][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.644684][ T6871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.647940][ T6871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652544][ T6871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.655596][ T6871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.664484][ T7055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.672658][ T7055] syzkaller0: entered promiscuous mode
[   82.674491][ T7055] syzkaller0: entered allmulticast mode
[   82.694320][ T7055] tipc: Resetting bearer <eth:syzkaller0>
[   82.697845][ T7052] tipc: Resetting bearer <eth:syzkaller0>
[   82.709997][ T7052] tipc: Disabling bearer <eth:syzkaller0>
[   82.778901][ T6959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.785161][ T6959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.786420][ T6962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.793162][ T6962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.816626][ T7062] tipc: Cannot configure node identity twice
[   82.843310][ T6871] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[   82.847860][ T6871] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[   82.851611][ T6871] CPU: 1 UID: 0 PID: 6871 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   82.856294][ T6871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.860250][ T6871] RIP: 0010:klist_remove+0x14a/0x340
[   82.862283][ T6871] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 c9 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a c9 be f6 49 8b 44 24 58 48 89 44 24 08
[   82.870350][ T6871] RSP: 0018:ffffc90006407840 EFLAGS: 00010202
[   82.872780][ T6871] RAX: 000000000000000b RBX: ffff888106951cc0 RCX: 0000000000000000
[   82.875920][ T6871] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[   82.878533][ T6871] RBP: ffffc90006407928 R08: ffffffff8f8860c3 R09: 1ffffffff1f10c18
[   82.881117][ T6871] R10: dffffc0000000000 R11: fffffbfff1f10c19 R12: 0000000000000000
[   82.883805][ T6871] R13: 1ffff1100690da0c R14: ffff88803486d060 R15: dffffc0000000000
[   82.886672][ T6871] FS:  000055556e456500(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[   82.889887][ T6871] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   82.892379][ T6871] CR2: 00007ffe08c5b0a0 CR3: 0000000120096000 CR4: 00000000000006f0
[   82.895433][ T6871] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   82.898790][ T6871] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   82.901372][ T6871] Call Trace:
[   82.902504][ T6871]  <TASK>
[   82.903492][ T6871]  ? __pfx_klist_remove+0x10/0x10
[   82.905395][ T6871]  ? __pfx_kobject_move+0x10/0x10
[   82.907037][ T6871]  ? get_device_parent+0x366/0x3a0
[   82.908893][ T6871]  device_move+0x193/0x700
[   82.910649][ T6871]  hci_conn_del_sysfs+0xb8/0x170
[   82.912320][ T6871]  hci_conn_del+0x8ff/0xcb0
[   82.913867][ T6871]  hci_conn_hash_flush+0x191/0x230
[   82.915575][ T6871]  hci_dev_close_sync+0xaef/0x1330
[   82.917286][ T6871]  ? __pfx_hci_dev_close_sync+0x10/0x10
[   82.919114][ T6871]  ? up_write+0x1c4/0x420
[   82.920548][ T6871]  hci_unregister_dev+0x21a/0x510
[   82.922197][ T6871]  vhci_release+0x80/0xd0
[   82.923599][ T6871]  ? __pfx_vhci_release+0x10/0x10
[   82.925285][ T6871]  __fput+0x44c/0xa70
[   82.926643][ T6871]  task_work_run+0x1d4/0x260
[   82.928196][ T6871]  ? __pfx_task_work_run+0x10/0x10
[   82.929861][ T6871]  ? kmem_cache_free+0x18f/0x400
[   82.931441][ T6871]  do_exit+0x6b5/0x22e0
[   82.932859][ T6871]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   82.935035][ T6871]  ? __pfx_do_exit+0x10/0x10
[   82.936991][ T6871]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.939036][ T6871]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.940722][ T6871]  do_group_exit+0x21c/0x2d0
[   82.942394][ T6871]  __x64_sys_exit_group+0x3f/0x40
[   82.944306][ T6871]  x64_sys_call+0x21ba/0x21c0
[   82.946325][ T6871]  do_syscall_64+0xfa/0x3b0
[   82.948129][ T6871]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.949870][ T6871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.952008][ T6871]  ? exc_page_fault+0x9f/0xf0
[   82.953629][ T6871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.955581][ T6871] RIP: 0033:0x7f643538e929
[   82.957202][ T6871] Code: Unable to access opcode bytes at 0x7f643538e8ff.
[   82.959550][ T6871] RSP: 002b:00007ffe08c5d1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   82.962383][ T6871] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f643538e929
[   82.965427][ T6871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[   82.968080][ T6871] RBP: 00007f64353ee8f0 R08: 00007ffe08c5af57 R09: 0000000000000003
[   82.970775][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.973436][ T6871] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe08c5d370
[   82.976186][ T6871]  </TASK>
[   82.977258][ T6871] Modules linked in:
[   82.979395][ T6871] ---[ end trace 0000000000000000 ]---
[   82.984578][ T6871] RIP: 0010:klist_remove+0x14a/0x340
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   82.986706][ T6871] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 c9 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a c9 be f6 49 8b 44 24 58 48 89 44 24 08
[   83.025315][ T6871] RSP: 0018:ffffc90006407840 EFLAGS: 00010202
[   83.027895][ T6871] RAX: 000000000000000b RBX: ffff888106951cc0 RCX: 0000000000000000
[   83.033040][ T6871] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[   83.036018][ T6871] RBP: ffffc90006407928 R08: ffffffff8f8860c3 R09: 1ffffffff1f10c18
[   83.039170][ T6871] R10: dffffc0000000000 R11: fffffbfff1f10c19 R12: 0000000000000000
[   83.051502][ T6871] R13: 1ffff1100690da0c R14: ffff88803486d060 R15: dffffc0000000000
[   83.054800][ T6871] FS:  000055556e456500(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[   83.058420][ T6871] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.070101][ T6871] CR2: 00005650f0029e68 CR3: 00000000285b2000 CR4: 00000000000006f0
[   83.073522][ T6871] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   83.076723][ T6871] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   83.079420][ T6871] Kernel panic - not syncing: Fatal exception
[   83.081991][ T6871] Kernel Offset: disabled
[   83.083356][ T6871] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:28:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=dffffc0000000001 RCX=ffffffff8b6fc735 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8fa1e0f0 RBP=ffffc9000455f290 RSP=ffffc9000455f048
R8 =ffffffff8fa1e0f7 R9 =1ffffffff1f43c1e R10=dffffc0000000000 R11=fffffbfff1f43c1e
R12=fffffbfff1f43c1f R13=dffffc0000000000 R14=fffffbfff1f43c1f R15=1ffffffff1f43c1e
RIP=ffffffff8223ca20 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555902f500 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4ce64e56c0 CR3=0000000027642000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff4d3a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006407070
R8 =ffff888021a20237 R9 =1ffff11004344046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af790d R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556e456500 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe08c5b0a0 CR3=0000000120096000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=00000000000000e0 000000003900302d
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00ff0000 XMM09=00000000000000e1 000000003900302d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
