Warning: Permanently added '[localhost]:29583' (ECDSA) to the list of known hosts.
2025/01/28 05:55:16 fuzzer started
2025/01/28 05:55:16 dialing manager at localhost:40883
syzkaller login: [   61.545615] cgroup: Unknown subsys name 'net'
[   61.646015] cgroup: Unknown subsys name 'cpuset'
[   61.679904] cgroup: Unknown subsys name 'rlimit'
[   68.052342] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/28 05:55:34 syscalls: 200
2025/01/28 05:55:34 code coverage: enabled
2025/01/28 05:55:34 comparison tracing: enabled
2025/01/28 05:55:34 extra coverage: enabled
2025/01/28 05:55:34 setuid sandbox: enabled
2025/01/28 05:55:34 namespace sandbox: enabled
2025/01/28 05:55:34 Android sandbox: enabled
2025/01/28 05:55:34 fault injection: enabled
2025/01/28 05:55:34 leak checking: enabled
2025/01/28 05:55:34 net packet injection: enabled
2025/01/28 05:55:34 net device setup: enabled
2025/01/28 05:55:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/28 05:55:34 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/28 05:55:34 USB emulation: enabled
2025/01/28 05:55:34 hci packet injection: enabled
2025/01/28 05:55:34 wifi device emulation: enabled
2025/01/28 05:55:34 802.15.4 emulation: enabled
2025/01/28 05:55:34 fetching corpus: 0, signal 0/0 (executing program)
2025/01/28 05:55:37 starting 8 fuzzer processes
05:55:37 executing program 0:
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x4, 0x4)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x9, 0x4)
r2 = syz_io_uring_complete(0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x83, 0x7, 0x9, 0x1, 0x9})
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140))
io_uring_setup(0x2aab, &(0x7f0000000180)={0x0, 0x9dde, 0x10, 0x0, 0x387, 0x0, r0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x4)
syz_io_uring_setup(0x4f19, &(0x7f0000000240)={0x0, 0xa09a, 0x4, 0x2, 0x2fa}, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000a57000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', <r5=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', r5, 0x20, 0x1, 0x6, 0x10, {{0x25, 0x4, 0x1, 0x13, 0x94, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0x44, 0x52, 0x3, 0x1, [{@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x10000}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x80}, {@empty, 0x28000}, {@loopback, 0x1}, {@local, 0x8000}, {@empty, 0x15}]}, @timestamp_addr={0x44, 0x3c, 0x3f, 0x1, 0x8, [{@loopback, 0x8}, {@private=0xb14}, {@local, 0xe000000}, {@multicast2, 0x6}, {@broadcast, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x1}]}]}}}}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000480)={0xffffffff, 0x6, 0x709edbee}, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x168, r7, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x26}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x29}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3f}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfff}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x24, 0x60, 0x4, 0x12, 0x5, 0x1b, 0x6c, 0x9]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x2}, {0x4, 0x4}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x7, 0x6, 0x0, 0x8000, 0xfc15, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0x9, 0x401, 0xf001, 0xa6, 0x1000, 0x101]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1b, 0x24, 0x60, 0x12, 0x16, 0x16, 0x4, 0x1, 0x36, 0x1, 0x1, 0x6, 0xb, 0x24, 0xb, 0x1b, 0x2, 0x9, 0x12]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x24, 0x6, 0x36, 0x48, 0xb, 0x6, 0x2, 0x1b, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x24, 0x48, 0x3, 0x4, 0x3, 0x24, 0xc, 0x3f, 0x18, 0x4, 0x4]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6}, {0x2, 0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x1}, {0x1}, {0x5, 0x8}, {}, {0x0, 0x2}, {0x5, 0x4}, {0x2, 0x8}, {}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x6}, {0x2, 0x8}, {0x5, 0x8}, {0x0, 0x9}, {}, {0x7, 0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x4, 0x1}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x7}, {0x4, 0x4}, {}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0x6}, {0x7, 0x7}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x7}, {0x1, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0x4}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xbc4, 0x401, 0x4, 0x0, 0x9, 0x1000, 0x6]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x9}, {0x7, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x3, 0xa}, {}, {0x1, 0x9}, {0x0, 0x5}]}]}]}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8809}, @NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x168}, 0x1, 0x0, 0x0, 0xc08a4}, 0x41)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd4, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x395a}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xad}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000004)
mq_getsetattr(r1, &(0x7f0000000900)={0x80000000, 0x80, 0x3, 0xb}, &(0x7f0000000940))
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

05:55:37 executing program 1:
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0xffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7bfb}, {0xc, 0x90, 0x7}}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000}, 0x840)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x20, 0x17, {0x19, 0x7, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}}}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000081}, 0x1)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x12000, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x1f4, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x188, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd033}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffa67}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x230, 0x18, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x27}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14}}, 0x4a8}, 0x1, 0x0, 0x0, 0x24000044}, 0x40040)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40408c4)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x154, r1, 0x2, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0xfeda}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdaedbd05}, {0x6, 0x11, 0x10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x35a}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40004}, 0x1)
pipe2(&(0x7f0000000c00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x24140140}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x104, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CT={0xdc, 0xb, 0x0, 0x1, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x8, 0x23c, 0x3, 0x6, 0x0]}, @CTA_NAT_DST={0xa4, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xef}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000094)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x3c, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xd4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040894}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001100))
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, 0x0, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x58e3}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004800)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}}, 0x4000001)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xf8, 0x0, 0x9, 0x801, 0x0, 0x0, {0x3}, [@NFCTH_TUPLE={0xc4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x400}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8800}, 0x40000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000001500), r5)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001880)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001840)={&(0x7f0000001580)={0x2b4, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3202e4ed}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x134}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3228}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffd4a4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf55}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x10080}, 0x1)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x130, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd0, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)

05:55:37 executing program 2:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00')
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x48010)
r1 = syz_io_uring_complete(0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40400}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1}, 0xf0000000)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004010}, 0x8084)
r4 = syz_io_uring_setup(0x5e47, &(0x7f0000000500)={0x0, 0x307b, 0x10, 0x0, 0xa1, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
io_uring_setup(0x34ae, &(0x7f0000000600)={0x0, 0x6bf5, 0x0, 0x3, 0xab, 0x0, r4})
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680))
syz_io_uring_setup(0x32f, &(0x7f00000006c0)={0x0, 0x6495, 0x4, 0x0, 0x181, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000740)=<r5=>0x0, &(0x7f0000000780))
syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f00000007c0), 0x0, 0x4)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x20, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c881}, 0x4000)
syz_open_dev$tty1(0xc, 0x4, 0x2)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200028}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x128, 0x0, 0xf2888232c8a24af1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40094}, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800a8002}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x88, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x826}, 0x20000090)

05:55:37 executing program 3:
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xe1, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040000)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x79}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x144, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9f5e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x14}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x144}, 0x1, 0x0, 0x0, 0x805}, 0x24000014)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x188, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xb1ac}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7e575cbe}, {0x6, 0x11, 0x9638}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xfc4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9dae}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffff999}, {0x6, 0x11, 0x9}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000040}, 0x8001)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0xb}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x148, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5f}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x42}, {0x6, 0x11, 0xd8}, {0x8, 0x15, 0xf9f9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffe}, {0x6}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x2}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa0, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x88, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1246e2e8c2da66a}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4094}, 0x800)
syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r1)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44048095}, 0x2000c004)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x128, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xde, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast}}, @peer_mgmt={0x75, 0x16, {0x0, 0x0, @void, @val=0x1e, @val="c2fec635d6f8749c268a950ea54833e5"}}, @channel_switch={0x25, 0x3, {0xff, 0x84, 0x9}}, @tim={0x5, 0x9a, {0x3, 0x17, 0x7f, "5b5260961c940e3c7450bb3ca6fd2d840380634f180881c49b832dc1eb3529bda7ff1e51a61ab1f42217c4fb8a7b34aebe6e81422803c49ee064afc9285f2132b66e8ddc3487659faa8b99e15cd1d7d744a7b7932733937c03de682fb90c41da5762894acdd5086b44b73b581b9e039f67fe82e4bc880c1f9a249e6e2c79cb20fb8ae1326766757b2ab52f791da515d7f94976a0d1d5d3"}}, @random_vendor={0xdd, 0xb, "4af78fd331d1b3fd2e89f1"}]}, @NL80211_ATTR_MAC={0xa}]}, 0x128}, 0x1, 0x0, 0x0, 0xc8800}, 0x6000c8c1)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000f40)=0xffffffff, 0x4)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000f80)={'\x00', 0xfff, 0x3, 0x9, 0x7, 0xfffffffffffffffb, 0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048404}, 0x20000000)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x6c, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5e418503}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x1c, 0x17, [0x2, 0x6, 0x7, 0x9, 0x7, 0xd8]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000010)
pipe2(&(0x7f0000001280)={<r4=>0xffffffffffffffff}, 0x80800)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x128, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x37}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_IE={0xd5, 0x2a, [@measure_req={0x26, 0x88, {0x3f, 0x2, 0x7f, "5dd6056ae83398f8f1f6f9337940de75a541c5cf5af83b6d50e85aedfab5a02ac1cb17da536c938b47584abe10f16c6fbac2bedbb1283e475db2441902453657d5a728414e28a5dfed269ba0697a7aa203495e7217cfbfdf5b6efae490225f2187a326b37499e3786fc5821c758b397e0d62d77311d9ef3dfba11ad610afbe963b8a971e5d"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x38, 0x9}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0xbb, 0xc0, @device_b, 0x7ff, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xe93, "3d480e176fc2", @long="44697f6ad159934a3e1dda92ffd0e0d0"}}]}, @NL80211_ATTR_MAC={0xa}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x20008000)

05:55:37 executing program 4:
pselect6(0x40, &(0x7f0000000000)={0x0, 0x33d, 0x10001, 0x4, 0x100, 0x59b8, 0x1, 0xe791}, &(0x7f0000000040)={0x28d8, 0x8, 0x5, 0x0, 0x0, 0xc, 0x0, 0xe0}, &(0x7f0000000080)={0x80, 0x0, 0x6, 0x2, 0xf998, 0x5, 0x1, 0xff}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x824]}, 0x8})
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/104, 0x68, 0x10001, &(0x7f0000000200)={0x0, 0x989680})
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x3, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2f7eeb71a6ef3f7c)
pselect6(0x40, &(0x7f0000000340)={0x21c6cb31, 0x101, 0x2, 0x200000000000, 0x1, 0x20, 0x80000000, 0x1}, &(0x7f0000000380)={0x3, 0xb97, 0xffffffffffffffe1, 0x71e, 0x3, 0x81, 0x0, 0xffffffffffffff00}, &(0x7f00000003c0)={0x4, 0x401, 0x1f, 0x10001, 0x7, 0x5, 0x2}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440)={[0x6]}, 0x8})
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x400000, 0x0)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000500))
pselect6(0x40, &(0x7f0000000540)={0xff21, 0x3, 0x5, 0x20, 0x9, 0x382, 0x0, 0x9af}, &(0x7f0000000580)={0x10001, 0xc862, 0x10000, 0x400, 0x1, 0x1, 0x1, 0x1bcd}, &(0x7f00000005c0)={0x9, 0x0, 0x7, 0x8, 0x1, 0x5, 0x80, 0x9}, &(0x7f0000000600), &(0x7f0000000680)={&(0x7f0000000640)={[0x4]}, 0x8})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000800))
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x21}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2a}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1e}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc529d20c169c33c2}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x28}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x10)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x6, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x80000)
getpeername$netlink(r0, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x2002, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r0)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfef7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r2, 0x0, &(0x7f0000000d00)="6a1e9e69d4560b07d43af733eb69a678fe87081a6e415ab50519704638fbfea9952d400b7224f61f18eaf2582f3532e60e1e3e7118b10051f56e91e4794a701d027dcefa50cda07c3177d39d3677a09b4d6c132ec77a3fdaaf24c8a40d95c8c25f57261d69ec2ff36e478a505b3528958aed58b723b5a286cc8f5f37cc1f440bb422e91e4a766111f05dc3ce9bf79bb9eca6b0c877f1c3ae641ff05ffe6b732c59c314999346d902a18c9cb204d7dd60cd9ca32fff668f74be49c978bf5386b7c16700d63c3d07ec817cb7", 0xcb, 0x40012100, 0x1}, 0x4)
r4 = socket(0x28, 0x3, 0x7fff)
sendmsg$NFT_BATCH(r4, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e80)={{0x14}, [@NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xe0, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}]}, @NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0x1e8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)

[   81.772341] audit: type=1400 audit(1738043737.108:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:55:37 executing program 5:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40050)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xfc, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040051}, 0x880)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x40080)
pipe2(&(0x7f0000000680)={<r4=>0xffffffffffffffff}, 0x4000)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004040}, 0x20000800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r6 = socket(0x23, 0x2, 0xaa7)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x84)
r7 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x8, 0x5, 0x0, 0xccc}}}, ["", ""]}, 0x30}}, 0x0)
pipe2(&(0x7f0000000a80)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000b40)={'erspan0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x7, 0x2, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x68, 0x0, 0x20, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x14, 0xa5, 0x3, 0x7, [{@empty, 0x1}, {@remote, 0x5}]}]}}}}})
syz_open_dev$tty20(0xc, 0x4, 0x1)

05:55:37 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34c000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0xe0}, 0x50804)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0xc001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100008d0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000080)
r5 = socket(0xf, 0x4, 0x7)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
pipe2(&(0x7f0000000780)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84800)
r9 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', <r10=>0x0, 0x8, 0x7, 0x413, 0x2, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x11)
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c854}, 0x4041)
r11 = socket$netlink(0x10, 0x3, 0x6)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r11, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

05:55:37 executing program 7:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x65}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x40480)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "66a4d9f96a636f72970b32d052e1ee6b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x41}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="52bd452de4cd"}, @NL80211_ATTR_PMKID={0x14, 0x55, "dca2e564f28f7cfd98eae1fab20c05ba"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "e45c8cc20c54b9207fd970674dc2c9ca"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4001}, 0x40004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
pipe2(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1f}}]}, 0x1c}}, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = mq_open(&(0x7f0000000480)='(}[)-]\x00', 0x24e4bfbdf37796e2, 0x0, &(0x7f00000004c0)={0x3, 0x8001, 0x101, 0x1})
clock_gettime(0x0, &(0x7f0000000580)={<r5=>0x0, <r6=>0x0})
mq_timedreceive(r4, &(0x7f0000000500)=""/120, 0x78, 0x9, &(0x7f00000005c0)={r5, r6+60000000})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x101}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_MARK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
write$nbd(r3, &(0x7f0000000740)={0x67446698, 0x1, 0x4, 0x0, 0x3, "63f82c27f4e06eefc7d74cc4fa05b609e1a6b0cfb6bbd816bf0f6d76cf98edeb9618862ae855a8bf392da17b3f235adca20c619de107e7a40088c7ffd6c51a7aba6be7a51ebf4f441527d76380c5d623ccc59667d1dcaf7c7df1c8034200f67dfd76f6b1df888f842d363aa699d29088"}, 0x80)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r2)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea8d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x855}, 0x90)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x144, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xcc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa44}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x10010}, 0x11)
r8 = socket(0xa, 0x800, 0x58)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44804}, 0x4000c58)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)

[   82.979674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.985915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.988684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.995248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.002129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   83.005647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.098858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.104126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.106689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.114891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.117687] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   83.121680] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.165454] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.172865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.177581] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.197137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.204853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   83.206712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.239370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.248909] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.252914] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.261121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.263158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.265757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.268909] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.272766] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   83.275766] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.280172] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.295931] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   83.311892] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   83.315272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.322414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   83.332905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   83.352089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   83.365985] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   83.368327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   83.369021] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   83.379850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   83.385952] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   83.394596] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   83.400291] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   83.411681] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   83.423637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   83.441875] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   83.447805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   83.459150] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   83.465814] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   83.494851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   85.064836] Bluetooth: hci0: command tx timeout
[   85.192696] Bluetooth: hci1: command tx timeout
[   85.256610] Bluetooth: hci2: command tx timeout
[   85.320692] Bluetooth: hci3: command tx timeout
[   85.385604] Bluetooth: hci4: command tx timeout
[   85.448676] Bluetooth: hci5: command tx timeout
[   85.576582] Bluetooth: hci7: command tx timeout
[   85.577376] Bluetooth: hci6: command tx timeout
[   87.114515] Bluetooth: hci0: command tx timeout
[   87.240629] Bluetooth: hci1: command tx timeout
[   87.304592] Bluetooth: hci2: command tx timeout
[   87.370507] Bluetooth: hci3: command tx timeout
[   87.432568] Bluetooth: hci4: command tx timeout
[   87.496561] Bluetooth: hci5: command tx timeout
[   87.625524] Bluetooth: hci7: command tx timeout
[   87.625977] Bluetooth: hci6: command tx timeout
[   89.160557] Bluetooth: hci0: command tx timeout
[   89.288938] Bluetooth: hci1: command tx timeout
[   89.352617] Bluetooth: hci2: command tx timeout
[   89.417517] Bluetooth: hci3: command tx timeout
[   89.480560] Bluetooth: hci4: command tx timeout
[   89.544906] Bluetooth: hci5: command tx timeout
[   89.672731] Bluetooth: hci7: command tx timeout
[   89.673217] Bluetooth: hci6: command tx timeout
[   91.210519] Bluetooth: hci0: command tx timeout
[   91.336651] Bluetooth: hci1: command tx timeout
[   91.400585] Bluetooth: hci2: command tx timeout
[   91.464604] Bluetooth: hci3: command tx timeout
[   91.528534] Bluetooth: hci4: command tx timeout
[   91.592596] Bluetooth: hci5: command tx timeout
[   91.720588] Bluetooth: hci6: command tx timeout
[   91.721077] Bluetooth: hci7: command tx timeout
[  139.698224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.699052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.904585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.905260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.418054] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3733 comm=syz-executor.6
[  141.597609] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3733 comm=syz-executor.6
05:56:37 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34c000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0xe0}, 0x50804)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0xc001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100008d0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000080)
r5 = socket(0xf, 0x4, 0x7)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
pipe2(&(0x7f0000000780)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84800)
r9 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', <r10=>0x0, 0x8, 0x7, 0x413, 0x2, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x11)
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c854}, 0x4041)
r11 = socket$netlink(0x10, 0x3, 0x6)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r11, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

[  141.917202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.918602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.035093] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3769 comm=syz-executor.6
05:56:37 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34c000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0xe0}, 0x50804)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0xc001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100008d0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000080)
r5 = socket(0xf, 0x4, 0x7)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
pipe2(&(0x7f0000000780)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84800)
r9 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', <r10=>0x0, 0x8, 0x7, 0x413, 0x2, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x11)
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c854}, 0x4041)
r11 = socket$netlink(0x10, 0x3, 0x6)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r11, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

[  142.633425] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3786 comm=syz-executor.6
05:56:38 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34c000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0xe0}, 0x50804)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0xc001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100008d0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000080)
r5 = socket(0xf, 0x4, 0x7)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
pipe2(&(0x7f0000000780)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84800)
r9 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', <r10=>0x0, 0x8, 0x7, 0x413, 0x2, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x11)
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c854}, 0x4041)
r11 = socket$netlink(0x10, 0x3, 0x6)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r11, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

[  142.851556] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3790 comm=syz-executor.6
05:56:38 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34c000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0xe0}, 0x50804)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0xc001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100008d0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000080)
r5 = socket(0xf, 0x4, 0x7)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
pipe2(&(0x7f0000000780)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84800)
r9 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', <r10=>0x0, 0x8, 0x7, 0x413, 0x2, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x11)
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c854}, 0x4041)
r11 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r11, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

[  142.941117] syz-executor.1 (280) used greatest stack depth: 24128 bytes left
[  143.047630] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3796 comm=syz-executor.6
05:56:38 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34c000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0xe0}, 0x50804)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0xc001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100008d0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000080)
r5 = socket(0xf, 0x4, 0x7)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
pipe2(&(0x7f0000000780)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84800)
r9 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', <r10=>0x0, 0x8, 0x7, 0x413, 0x2, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x11)
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c854}, 0x4041)
r11 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r11, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

[  143.203110] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3804 comm=syz-executor.6
05:56:38 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34c000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0xe0}, 0x50804)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0xc001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100008d0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000080)
r5 = socket(0xf, 0x4, 0x7)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
pipe2(&(0x7f0000000780)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84800)
r9 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', <r10=>0x0, 0x8, 0x7, 0x413, 0x2, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x11)
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c854}, 0x4041)
r11 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r11, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

[  143.295782] 
[  143.295990] ======================================================
[  143.296520] WARNING: possible circular locking dependency detected
[  143.297052] 6.13.0-next-20250124 #1 Not tainted
[  143.297446] ------------------------------------------------------
[  143.298617] kworker/u8:1/66 is trying to acquire lock:
[  143.299782] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  143.301753] 
[  143.301753] but task is already holding lock:
[  143.303307] ffff888035190768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  143.305161] 
[  143.305161] which lock already depends on the new lock.
[  143.305161] 
[  143.306244] 
[  143.306244] the existing dependency chain (in reverse order) is:
[  143.306869] 
[  143.306869] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  143.307463]        __mutex_lock+0x13d/0xb50
[  143.307874]        wiphy_register+0x1b2e/0x25d0
[  143.308312]        ieee80211_register_hw+0x23a4/0x3d60
[  143.308788]        mac80211_hwsim_new_radio+0x2759/0x4d60
[  143.309289]        init_mac80211_hwsim+0x389/0x870
[  143.309754]        do_one_initcall+0xf9/0x640
[  143.310182]        kernel_init_freeable+0x53d/0x7a0
[  143.310648]        kernel_init+0x1e/0x2d0
[  143.311028]        ret_from_fork+0x48/0x80
[  143.311408]        ret_from_fork_asm+0x1a/0x30
[  143.311848] 
[  143.311848] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  143.312385]        __lock_acquire+0x29fd/0x4580
[  143.312818]        lock_acquire+0x19b/0x520
[  143.313214]        __mutex_lock+0x13d/0xb50
[  143.313621]        unregister_netdevice_many_notify+0x1612/0x1c80
[  143.314162]        unregister_netdevice_queue+0x224/0x2e0
[  143.314651]        _cfg80211_unregister_wdev+0x57b/0x700
[  143.315143]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  143.315637]        ieee80211_unregister_hw+0x55/0x3a0
[  143.316102]        hwsim_exit_net+0x3a0/0x730
[  143.316517]        ops_exit_list+0xb3/0x180
[  143.316912]        cleanup_net+0x546/0xad0
[  143.317302]        process_one_work+0x8ee/0x1a10
[  143.317750]        worker_thread+0x674/0xe70
[  143.318168]        kthread+0x3ab/0x720
[  143.318546]        ret_from_fork+0x48/0x80
[  143.318929]        ret_from_fork_asm+0x1a/0x30
[  143.319363] 
[  143.319363] other info that might help us debug this:
[  143.319363] 
[  143.320026]  Possible unsafe locking scenario:
[  143.320026] 
[  143.320520]        CPU0                    CPU1
[  143.320905]        ----                    ----
[  143.321287]   lock(&rdev->wiphy.mtx);
[  143.321629]                                lock(rtnl_mutex);
[  143.322120]                                lock(&rdev->wiphy.mtx);
[  143.322654]   lock(rtnl_mutex);
[  143.322957] 
[  143.322957]  *** DEADLOCK ***
[  143.322957] 
[  143.323453] 4 locks held by kworker/u8:1/66:
[  143.323835]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  143.324701]  #1: ffff88800bcafd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  143.325534]  #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  143.326310]  #3: ffff888035190768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  143.327180] 
[  143.327180] stack backtrace:
[  143.327565] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1
[  143.327602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.327624] Workqueue: netns cleanup_net
[  143.327665] Call Trace:
[  143.327675]  <TASK>
[  143.327686]  dump_stack_lvl+0xca/0x120
[  143.327745]  print_circular_bug+0x47b/0x750
[  143.327792]  check_noncircular+0x2e9/0x3c0
[  143.327833]  ? srso_return_thunk+0x5/0x5f
[  143.327890]  ? __pfx_check_noncircular+0x10/0x10
[  143.327931]  ? hlock_class+0x4e/0x130
[  143.327962]  ? mark_lock+0xac/0xed0
[  143.328001]  ? srso_return_thunk+0x5/0x5f
[  143.328056]  ? sched_clock+0x37/0x60
[  143.328113]  ? lockdep_lock+0xba/0x1b0
[  143.328171]  ? __pfx_lockdep_lock+0x10/0x10
[  143.328233]  __lock_acquire+0x29fd/0x4580
[  143.328287]  ? __pfx___lock_acquire+0x10/0x10
[  143.328330]  ? lock_release+0x20f/0x6f0
[  143.328375]  ? __pfx_lock_release+0x10/0x10
[  143.328422]  lock_acquire+0x19b/0x520
[  143.328466]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  143.328515]  ? __pfx_lock_acquire+0x10/0x10
[  143.328560]  ? srso_return_thunk+0x5/0x5f
[  143.328615]  ? lock_release+0x20f/0x6f0
[  143.328658]  ? srso_return_thunk+0x5/0x5f
[  143.328713]  ? lock_is_held_type+0x9e/0x120
[  143.328769]  ? srso_return_thunk+0x5/0x5f
[  143.328828]  __mutex_lock+0x13d/0xb50
[  143.328880]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  143.328925]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  143.328971]  ? srso_return_thunk+0x5/0x5f
[  143.329026]  ? synchronize_rcu_expedited+0x38a/0x420
[  143.329070]  ? __pfx___mutex_lock+0x10/0x10
[  143.329124]  ? __pfx_autoremove_wake_function+0x10/0x10
[  143.329179]  ? srso_return_thunk+0x5/0x5f
[  143.329234]  ? kasan_quarantine_put+0x84/0x1e0
[  143.329295]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  143.329331]  ? srso_return_thunk+0x5/0x5f
[  143.329390]  unregister_netdevice_many_notify+0x1612/0x1c80
[  143.329436]  ? __virt_addr_valid+0x2e8/0x5d0
[  143.329489]  ? __pfx_lock_release+0x10/0x10
[  143.329534]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  143.329580]  ? find_held_lock+0x2c/0x110
[  143.329638]  ? srso_return_thunk+0x5/0x5f
[  143.329695]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  143.329756]  ? srso_return_thunk+0x5/0x5f
[  143.329811]  ? lock_release+0x20f/0x6f0
[  143.329855]  ? __pfx_lock_release+0x10/0x10
[  143.329898]  ? srso_return_thunk+0x5/0x5f
[  143.329953]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  143.330001]  ? srso_return_thunk+0x5/0x5f
[  143.330061]  unregister_netdevice_queue+0x224/0x2e0
[  143.330104]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  143.330148]  ? up_write+0x195/0x520
[  143.330203]  _cfg80211_unregister_wdev+0x57b/0x700
[  143.330255]  ? srso_return_thunk+0x5/0x5f
[  143.330314]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  143.330352]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  143.330391]  ? srso_return_thunk+0x5/0x5f
[  143.330446]  ? srso_return_thunk+0x5/0x5f
[  143.330501]  ? synchronize_rcu+0x1ff/0x260
[  143.330544]  ieee80211_unregister_hw+0x55/0x3a0
[  143.330589]  hwsim_exit_net+0x3a0/0x730
[  143.330631]  ? __pfx_hwsim_exit_net+0x10/0x10
[  143.330671]  ? srso_return_thunk+0x5/0x5f
[  143.330726]  ? netdev_run_todo+0x788/0x1040
[  143.330776]  ? __pfx_hwsim_exit_net+0x10/0x10
[  143.330818]  ops_exit_list+0xb3/0x180
[  143.330861]  cleanup_net+0x546/0xad0
[  143.330905]  ? __pfx_cleanup_net+0x10/0x10
[  143.330959]  process_one_work+0x8ee/0x1a10
[  143.331024]  ? __pfx_lock_acquire+0x10/0x10
[  143.331069]  ? __pfx_process_one_work+0x10/0x10
[  143.331127]  ? srso_return_thunk+0x5/0x5f
[  143.331182]  ? move_linked_works+0x172/0x270
[  143.331227]  ? srso_return_thunk+0x5/0x5f
[  143.331282]  ? assign_work+0x196/0x240
[  143.331340]  worker_thread+0x674/0xe70
[  143.331398]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  143.331450]  ? srso_return_thunk+0x5/0x5f
[  143.331511]  ? __pfx_worker_thread+0x10/0x10
[  143.331571]  kthread+0x3ab/0x720
[  143.331622]  ? __pfx_kthread+0x10/0x10
[  143.331674]  ? srso_return_thunk+0x5/0x5f
[  143.331729]  ? finish_task_switch.isra.0+0x206/0x840
[  143.331781]  ? __pfx_kthread+0x10/0x10
[  143.331835]  ret_from_fork+0x48/0x80
[  143.331866]  ? __pfx_kthread+0x10/0x10
[  143.331919]  ret_from_fork_asm+0x1a/0x30
[  143.331985]  </TASK>
[  143.404711] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3806 comm=syz-executor.6
05:56:38 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34c000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0xe0}, 0x50804)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0xc001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100008d0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000080)
r5 = socket(0xf, 0x4, 0x7)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
pipe2(&(0x7f0000000780)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84800)
r9 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', <r10=>0x0, 0x8, 0x7, 0x413, 0x2, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x11)
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c854}, 0x4041)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

05:56:38 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34c000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0xe0}, 0x50804)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0xc001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100008d0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000080)
r5 = socket(0xf, 0x4, 0x7)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
pipe2(&(0x7f0000000780)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84800)
r9 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', <r10=>0x0, 0x8, 0x7, 0x413, 0x2, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x11)
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c854}, 0x4041)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

[  145.039559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  145.040383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  145.041206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  145.042906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  145.043985] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  145.044796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  145.164715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  145.165662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  145.166495] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.167867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.168965] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  145.169778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.192296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  145.199584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  145.201295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  145.207895] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  145.211747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  145.212966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  145.214184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  145.218059] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  145.219862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  145.232448] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  145.239688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  145.245128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  145.248553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  145.249239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  145.257758] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  145.270138] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  145.271758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  145.273514] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  145.278633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  145.279808] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  145.280629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  145.284862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  145.319027] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  145.323195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  145.921652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  145.928542] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  145.935750] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.002915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.016638] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  146.017441] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  147.080559] Bluetooth: hci0: command tx timeout
[  147.208598] Bluetooth: hci1: command tx timeout
[  147.336519] Bluetooth: hci3: command tx timeout
[  147.336953] Bluetooth: hci4: command tx timeout
[  147.400570] Bluetooth: hci2: command tx timeout
[  147.528721] Bluetooth: hci5: command tx timeout
[  148.040593] Bluetooth: hci6: command tx timeout
[  149.128525] Bluetooth: hci0: command tx timeout
[  149.257041] Bluetooth: hci1: command tx timeout
[  149.384570] Bluetooth: hci4: command tx timeout
[  149.385001] Bluetooth: hci3: command tx timeout
[  149.448523] Bluetooth: hci2: command tx timeout
[  149.576546] Bluetooth: hci5: command tx timeout
[  150.088615] Bluetooth: hci6: command tx timeout
[  151.176802] Bluetooth: hci0: command tx timeout
[  151.304529] Bluetooth: hci1: command tx timeout
[  151.432569] Bluetooth: hci4: command tx timeout
[  151.432997] Bluetooth: hci3: command tx timeout
[  151.496513] Bluetooth: hci2: command tx timeout
[  151.624565] Bluetooth: hci5: command tx timeout
[  152.136581] Bluetooth: hci6: command tx timeout
[  153.226577] Bluetooth: hci0: command tx timeout

VM DIAGNOSIS:
05:56:38  Registers:
info registers vcpu 0
RAX=ffff88800f32d340 RBX=ffff88807d08bc08 RCX=ffffffff81429a4a RDX=1ffff1100179fd00
RSI=0000000000000008 RDI=ffff88800bcfe800 RBP=0000000000000000 RSP=ffff88800c217dc8
R8 =0000000000000000 R9 =ffffed100179fd00 R10=ffff88800bcfe807 R11=1ffff1100d9c7850
R12=ffff88807d08bff9 R13=ffffffff88652cb0 R14=ffff88800f32d340 R15=0000000000000086
RIP=ffffffff81ab94fc RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555875fc708 CR3=000000002440e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800bcaed00
R8 =0000000000000001 R9 =ffffed1001795d96 R10=0000000000000000 R11=6f6c206863696877
R12=0000000000000000 R13=ffffffff886970b0 R14=ffffffff88697060 R15=ffffffff88697320
RIP=ffffffff8283f1bd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020000002 CR3=000000003467a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000