last executing test programs:

736.975801ms ago: executing program 0 (id=1215):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newsa={0x150, 0x10, 0x413, 0x0, 0xffffffff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1, 0x10}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "b512b390ac60fe3e6b54c6b909007c9f70d0cf"}}]}, 0x150}}, 0x844)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x2d0, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82c9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xebb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb7e}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}]}, @TIPC_NLA_MEDIA={0x144, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6642bea1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb25d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x207}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe863}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ef1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

667.857866ms ago: executing program 0 (id=1216):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1402000010001304a9bd70000000000000000000000000000000000000000000fc010000000000000000000000ab1527a2713e866cf76b40a0000000000000004e280000000020423b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000000000000000000032000000e0000001000000000000000000000000ff03000000000000feffffffffffffff000000000000000000000000000000000300000000000000000008000000000003000000000000000000000000000000030000000000000005000000000000000200000000000000010000000100000000000000f9ffffff2000080000000000000000000a0001816800000000000000060103006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00500005dc5f54a9f03e4f19f55fd5c7cd1dabdfdd3abc3315797547fa44acfdf0eef29df17a732b178bc1cc049a88fe22d1525b3c17e9e78064cadceb06ec3f3bd7b59751d059520652d76694b24e1302eac2deb813ae166739be71474d7ffa2e43860b3efecd8a2363682683feac9452f13544c510b2e97299126f836c1690b1c8ff4de88476efaec017db25163b58ea302566526c5ae090b4d2b3007de5a100b88b070069fb44350748565cbdb1a7f4d03bcee7cafd2988c96ec73aafa19f0d500001c00040003004e244e210000ff020000000000000000000000000001"], 0x214}, 0x1, 0x0, 0x0, 0x612fc0b6c77d297b}, 0x0)

608.123995ms ago: executing program 0 (id=1218):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
r2 = accept(r0, &(0x7f0000000040)=@ieee802154, &(0x7f00000000c0)=0x80)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x2, 0x1e0, 0x4}, {0x1, 0xf0}, 0xff, 0xfd}, {0x3114, 0x3, {0x0, 0x0, 0x4}, {0x1, 0xff}, 0xfe, 0x2}, {0x0, 0x0, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x4}, 0xff, 0xff}, {0x1, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0xfc, 0xfd}, {0x3, 0x1, {0x2, 0x0, 0x4}, {0x2, 0x0, 0x3}, 0xff, 0xfd}], 0xa0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x40, 0x26, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfffc}, {0xfff2, 0x1f}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x42}, 0x4000020)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000340), 0x4)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000380)=0x5, &(0x7f00000003c0)=0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000400)={0x3, 'gre0\x00', {0xcba}, 0x9a})
getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x8)
sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x1d, r1}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x7, 0x200, 0x4, {0x0, 0xea60}, {0x77359400}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "f64725be91968a7b04f9c38d1048dd20ab46eda6f30d9578e03d0ab18b19377dd6883c1d661e938e4a2bfab836ba27d5d600934c1b014db8f3f639ca6f66ac78"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
bind$bt_hci(r2, &(0x7f0000000600)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000640)=0x2, 0x4)
ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000b00)={{0x7fffffffffffffff, 0x7, 0x0, 0x1000, 0x117}, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}]})
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000b80)={r2})
ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000bc0)=0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000001380)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001340)={&(0x7f0000000d00)={0x598, r4, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x138, 0x2a, [@cf={0x4, 0x6, {0xac, 0x9, 0x0, 0x7}}, @random={0x8, 0xcf, "42415a085376c38d64c1b751cfd2380912b971ee3d21da904138d52f8a168f967fd6ac2cdd5c7b98ea92430b6dca2547ebc1b47fe69eb0c93f228a5778b918fd3cb077e484559c8b56047059b602ef9221764d409c17cf586009a1a167a87cd722a048df04ea1b4099482e1261b4227c7685688f106cf39552189954b3f8cc7ae3599def3f148a36ef8e9fb7058f955ccaa7f335737397d8b788afca824c76244ac0a5c4bd84bec337afe1a68b6cc14dfdf73b82bcfb8446e9b9cd452cbcedf36dd508d0af71d2c68105b225bc5373"}, @preq={0x82, 0x51, {{0x0, 0x1, 0x1}, 0x9, 0x5, 0x4, @device_a, 0x1, @void, 0x401, 0x1b, 0x5, [{{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0xfffff97f}, {{0x0, 0x0, 0x1}, @device_a, 0xcbdd}]}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x5, 0x36, 0xdda8}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3e}, @NL80211_ATTR_IE={0x13b, 0x2a, [@random={0xf7, 0x1d, "c3dc480672f6cef2710f5cafb93fecc428adbf90ac74064f7c4f108a8c"}, @random={0x1, 0x38, "862f7ed85b19730fa074d918719e20468a3039bf43c5ce2a8de156308110e3cb137b59ddbe6f576bbcdc5da9c5bcc6f0a8e25ebe7154c976"}, @perr={0x84, 0xdc, {0x4, 0xe, [{{0x0, 0x1}, @broadcast, 0x5, @value, 0x6}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x31}, {{0x0, 0x1}, @device_b, 0x7fff, @value=@device_b, 0x25}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x30}, {{}, @broadcast, 0x9, @void, 0x2}, {{}, @device_b, 0x9, @void, 0x1b}, {{}, @device_a, 0x2, @void, 0x1}, {{}, @broadcast, 0x8, @void, 0x4}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x36}, {{}, @broadcast, 0x7, @void, 0x1}, {{0x0, 0x1}, @broadcast, 0x7dd, @value=@broadcast, 0x31}, {{}, @broadcast, 0x6, @void, 0x9}, {{}, @device_a, 0x0, @void, 0x3d}, {{}, @device_a, 0x5, @void, 0xd}]}}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@prep={0x83, 0x1f, {{}, 0x3, 0x4, @device_b, 0x6, @void, 0x4, 0x100, @device_a, 0x400}}, @mesh_chsw={0x76, 0x6, {0x7, 0x1, 0x3d, 0x9}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x35}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x276, 0x2a, [@mesh_chsw={0x76, 0x6, {0xa, 0x80, 0x3d, 0x1ff}}, @random_vendor={0xdd, 0x14, "a5ec99ccdc81b558086981cb7f4a41ea48db9dd6"}, @tim={0x5, 0xb9, {0x0, 0xc4, 0x6, "aefc78cff90ff9f8137b6a75b5436726e64b15c0a085149c2858f72e15e279afbc59ec358fdd5142c02de6e72c03d105f3e9d5dc8090a078c7370aeaaa697829d525372e76c3642bc629818d530deffb77a0b220e275faf1bd99c070c49f9bd5ee50fe8a062131bedb775e821aaa4711e29eaaf563bc2ee3feb8804217cbe80476f1aafd9d3b7875761872e0b9fb84797581a57d0f1cc1bc8522f7c2474ea4025bf836caa89c08c71dc9e9267fa862bd650456eab506"}}, @random_vendor={0xdd, 0x5e, "832e54296f9794a55911b0393255dae3c81202aeeefda9fa8030edf63b11c8ff328e30669e67e4b1be60f7a7a5d8ed05208bf78cdf959b876ee0d603c596f9afdc39174ab1abc523f85b974a41fbb5d2d8162ff8d1665b667990b1b07971"}, @perr={0x84, 0x122, {0x2, 0x12, [{{}, @device_a, 0x80, @void, 0x3e}, {{}, @device_b, 0x1, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0xffff, @value=@broadcast, 0x29}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x35}, {{}, @device_b, 0x1, @void, 0x1c}, {{}, @broadcast, 0x10001, @void, 0x30}, {{}, @device_a, 0x7f, @void, 0x37}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x2c}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x26}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x2a}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x7}, {{}, @device_a, 0xfff, @void, 0x29}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x2b}, {{}, @broadcast, 0xf69, @void, 0x2c}, {{}, @broadcast, 0x0, @void, 0x21}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x26}, {{}, @broadcast, 0x0, @void, 0x36}, {{0x0, 0x1}, @device_a, 0x1ff, @value=@broadcast, 0x20}]}}, @random_vendor={0xdd, 0x13, "708d824b1ee8e3e2859a710959fa8f52196e3f"}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1c}, @NL80211_ATTR_IE={0x31, 0x2a, [@supported_rates={0x1, 0x1, [{0xb, 0x1}]}, @perr={0x84, 0x28, {0x80, 0x2, [{{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x18}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x35}]}}]}]}, 0x598}, 0x1, 0x0, 0x0, 0x4000020}, 0x890)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000013c0)={<r6=>0x0, 0x9ab9}, &(0x7f0000001400)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001440)={r6, 0x5}, 0x8)
r7 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001480)={{{@in=@initdev, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000001580)=0xe8)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x40000, 0x0)
write$tun(r8, &(0x7f0000001600)={@val={0x0, 0x88f5}, @val={0x2, 0xf, 0xae, 0x1ff, 0xd, 0x5000}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @loopback, @multicast, @loopback}}, 0x2a)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000001640)=0x63113c5c, 0x4)

607.542125ms ago: executing program 2 (id=1219):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], 0x80}, 0x1, 0x7}, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], 0x80}, 0x1, 0x7}, 0x0) (async)

528.427836ms ago: executing program 2 (id=1220):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x448}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)
ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x2, 0x2, 0x7fffffffffffffff, 0x6, 0x51dc, 0x51d6})
connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x7ffffffe, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x3, @remote}}}, 0x32)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x80}, 0x1, 0x7}, 0x0)

527.849018ms ago: executing program 0 (id=1221):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

439.65351ms ago: executing program 2 (id=1222):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r6, r5, 0x25, 0x8, @void}, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff}}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000100040001000000", 0x24)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000000c0))
r10 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r10, &(0x7f00000000c0), &(0x7f0000000100)=0x14)
setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000340)=@req3={0x20000003, 0x5, 0xa8, 0x3ff, 0x10000, 0x0, 0x2}, 0x1c)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r11)
sendmsg$NFC_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01052dbd7000fedbdf251d00000008001d000400000008001e00300b0000080001004cba1347ee4645e6fb0000000000000000000000005bf7fe51f5140a70a01cf6efd7de361cde25f6dce049179218af0973bd4a30", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000088520300400012800b000100697036746e6c00003000028014000300fe8000000000000000000000000000aa08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="050009"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0100001000130702000000fcdbdf25fe8000000000000000000000000000bbe00000010000000000000000000000004e2000014e210602020020006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"/303], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

373.971721ms ago: executing program 1 (id=1224):
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001cf42408b2d28a024f6fe2b1d6f7ac3f0f2bc30c62dff8442f8390365fa6609d3226641b1c15bb5d0c1c6ff0f1b0c5267eba347ca502897a91b4f79f745a3dc55279e13d41e6f1b5a8af007a76ebf557aeb3afe6cc154df6bc0ca8e1f737ee706e46a3199"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000928000480240001800b000100657874686472000014000280080007400000001708000640000000010900010073797a30000000000900020073797a320000000008000740c98fd05c140000001100010000000000000000000000000a680e9397dd535b633103bb869c2443f9de58cf9c3a9ade9f5a5d7e591357d0fd3e38e74a89cf57de1b5e330ac4771624a78a61010a0268e065cf8af33cd7a4c38c6c7067be"], 0x84}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="8c010000100001000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000ecdf000000c65c9a4a003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x0)

371.509174ms ago: executing program 2 (id=1225):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', <r1=>0x0, 0x2f, 0x81, 0x7f, 0x81, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x80, 0x700, 0x6}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', <r9=>0x0, 0x29, 0x0, 0x34, 0x1, 0x31, @private1, @mcast2, 0x7, 0x1, 0x3, 0x8000}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x148, 0x0, 0x4, 0x3, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x88d0}, 0x20000000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10)
socket$inet6_sctp(0xa, 0x1, 0x84)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r11, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4)
bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xfffa, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r14 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r14, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r13, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r15 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r15, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0xb}]}, 0x70}, 0x1, 0x7}, 0x0)

337.755582ms ago: executing program 0 (id=1226):
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x406, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10004}, 0x80, 0x0}, 0x4404c004)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="710509030306002e031f7d0004060300c105"], 0x29)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
socket(0x2c, 0x1, 0x7)
sendmsg$inet6(r5, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00', @ANYRESOCT=r5], 0x28}, 0x400c000)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100001a00130720000000fddbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fc020000000000000000000000000001000000000000000000000040000000000000000000000000080000000000000001000000ffffffff00000000000000000000008000000000430500000000004fde4944b110d19425a3addf000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cf2b5c83cd0bd7000003500000a000100500000000000000000001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000040000000210466"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2000)

335.839963ms ago: executing program 1 (id=1227):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r3, 0x800, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0xf}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x2404c810)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x1df, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_key={0x1ce, 0x8, 0x7328, 0x0, "c387bbe622e4220559515a632d3a36a563b76e314ea0ecfd905d0c5d21c51731475bcbcd40df04f699b66ac3ffe42c73877a9946d2dff45f5f84a55914059048dba979393a1d1e88f9c43fc5ee6a357b21560d43cc53a715563758a65bccfda23dc1848fd04c4a1674d104ace166c53c5c033e3c63e9b76a4e71b4774f77e8c0a67290b8a8d39d8e38872b709cba42e8d38f8e36031806a1616d423f64080cb378cb1d496f6aed194b96b585f7ef7a21021af397cf05b9097415a648b4649e02cb703a1460a4f971f1fd2cd9d75175182c7fa78f33af9c3e918a5284ea0d0e21b85233bbd635e0bc486d9687f0f8e83d1cb833bc6375a8e1b82df1c47ab26a0f1aa24131e75302a0ce7d9bef1f9138d7e29699c65246d73d93d948cb80648cd9dae383c44b71fc405d23ab51a3018a743f543ba94e013e7470f923934a083a250f2d12d42dd8d51fb5ab1caafa3ba9277711156eb1c567ea60691769a4386821e5bf64a818c9cc2dab123c8846879d08b01288e75e785f08dd7680d3afebfeaeb2be4a31c96a02bce45de70253a82eb6676616651f2a23883ecbd4b1d995a914ea1696553d7d97903eafc9a5ec1919ee9b0cf8431f9481a7e28644321a5b7b25cdcda01d56c78fa94f98dfe36faa236adb87f7b8663e0417a17108255e54c0d5901c0ba0e5aa2e9b8ca3b795a66130bece60c079270514de28c9a33c89f177361f5c8d147b882b457048f2aea6f2d785b7e1cd39d9c20f2bb4567c2900cd0b5677b01ebe8398c356f0ab0c655b9b54de5a8f7baa8afcc37da43e87ecfc151858176a1e507f08b0430f454c0b6e086815359e72077bf927a5520bd533d6b6fd6dae32f73753d3cac03bbbcd44a4dbddcbd854f1b24805c65d8bb76f5e4e5db8e5647ce0c8c7636ff8bf47397fb8dc5f85284c051d11bdc961418ab6fc08e4f10a5fe0a050833eb31c4c7e90c31c0e10cb6bf85963a8e493eec797552571eabb56b0209cc98f69abf678e7332698e097d7290b0904060e31de1b030f2f5a576acadd6c40a08b04cd3c9ecce2a4dfa13d94641f530eb8eb4b9008cfe21b9db214a98aebaa2fe4141e6075de4f9a2c0313795112f45c193492a05a1690a61245f5a2f6f1f52eded3330129e02f547a76e638d51e3f526e1fd754e0422ff7726abc0c318e4b51e06ab90ceb3ac678e5e45334104a2681c527ea69710009c6bed91783b877cf5a5a7e99f522edfaf5c50f8edf0348f94a7e2a115d9984864da930b5b8ae5b183c24454623803609135fd8d2f73a9f252eca05d8dff1e3db8488f3026eb33b2032f5e6dc7f0d5d34b037b10b681b744f5115ea29138663e735fb842ff68acfa0722c74123e0003209bac0ff26c693808fb41ee72886cf9bbe311968e4a96743dd26e09ca163b030563d8890dd131f3d15fcaaf8c0c07737dbb3989b527aafb74908c507b8a3fd274cf35b6a1b0b6822fcac465bb01e7b91169f5a729e046f22f4a24a9dee1393af9ff5136b0d02aeea95b6de2ead47231058ea83b4b7754e1bf24fd9dbb64f798d8d659a3288b6df1077357f449e2d58e764f695d1b72919e5ea10af16c5ab163aeb0b9955fce6486b0a91c6aa94e4c9f17fac2d065059022077ce342810109a6e9e1e8fd0e0f482906a239e8c2ea62082305297830e96258f0a5367a48e7253dee498cf109380c26429c2c1d8b2e8ae3910b67341eba9b13aca225e0ab65ce53a88b10d94f074a7b82e977f3d19df670616ef965f557e94a01cf5eb0e731d0a67874bf701cb6969c914e90386b0ba0f2ff0d47c9936db2d244559e7dccd88a983699ca4a542120045e1d751f3f422295f8e5b9f10d51d1524cbe33705c34e91ae0a9498d7f52ec4ff636595687f9e448695457bb018d3c6a8e355f3a1e89a154d6e52fe5cfaf96a7ef7810482ec433dab376896e4cb2761721eb877554bec12428a3537dd66c8485fb78d59c91c770410ac1f6ae3855c059b48f7c506bd22e7bf39170a9083b24d074769cba966244389e5b4ba50a409d947be60df2f4ad24288009ea7cad413388dab6cc20e4bae82f04ad23a374c1afdc809d1ac513ae1c85d8561bf6142202945e2acd373e45e954a151bcc592fe6363b8a72ebe1752d4ff83c147cb5d2ff70f79cbd43690d815ab2b0167c2dfd0f2b7cf87356cb87869d5a336bf5332afe201235940c790523c71cd321efa41def0c0768b91875e3f464231a5f5ac5e778ad94d8dada6f8c82da4fdf140d7d715c62a22653f236dc3fce9ac41de658c32800dca59e5eb4626fd1e10106ee50d79ab0b387cc88bd36d96a8a9e82d2a1e0235a5e1e65143773b78d28e1e4a7c5d1d5eb4d01f21b47dca016a415bf8a67e62446ab521716725dd0434099ccdbc205d1ce3f57113571f8efa1c0ef7fe74307732a507d3db56d5ca3c9b78ea6605ee3edf922ae4a7387b951e96e0bd428272d84760859d07c4145f4d33809a2780fca5450a11416c4e3847ecd236894fcbd5da276a06f18ff1a8795af805ac3977b5bf88e7b4af461d1eb51603f4b7f270faecf73454fba5c19b435bfbe10b6bde0dcec28ea4493aec2c5fa6e4fdde0c6d028b5a73a9ee7e632554afa7b12a0aea0347c18ba9ac3e94d8c96fa618bd625d8e6eb15879b29eaa2f0eb6fcf7f30b72d23e04c46368d6b1c4d0be34b8da5ac2062d7e0928ad9c07cef5038f8e62d93a7cf05581641556ad786056587cd7acc9cf4a6d55ea2976a9ad61136abf9817f933baccd2a0145c90f1c632da1a39829c6bb7050c5c05ba411b5269ad9398654b27a68e53918f492f1496ef643ecc673d7173c4da0aff813900ecd72958d66c7ad73232fcef02ee729743db41c5f14430bc2075ba80adfc03b07d808a2e822f590b736fa35014e4849fcca2db01ef29e6b9e948629d80d02ad706e51bb1175b6731a9c877d26ec1b86fb8c83452fc018001106320b97180783115b34736baa49e6b65ef121ad8ac95b6f9533369f8f5681afa563a567ee3ce6ded749aa77f80412d802680e0ae1f562399e35933b7463e21b540281ea32f670300428b66d6d49ba1f7eef495ba34fb4714383434830f37b206caa20f12bb4f76a5055449bcaf83df96748fba2a4de36daa4bbfac9efda32cb4c8972b8500a2b6eee542ea881e8f1617c23d8925918eafb2fb1396c0c2844d5d4c703ae3d3c06b8d687d838949c55ad02895fa2cb4fe0401561885507deadc1c9de71d616913509b77e5dd92ad648dd9046a2c94051b92ab9a8e812df75fd13d1976762b6ab94edb681bc567f41725987b724745b94cc0f69dc5d8f39ace40790a4e15da32d517bdec49ce797dfd25461a746226c0b9bf1ee7ead18685797993d0f504aac9550f11f159e0a270ab27a2e10aea9d9c018484f169529af07a2d24b57a7c856fbb997e94c5649e96540ce443e472588f5bc6aae5406a7344d627fc6a98e3131d594ff7bce95e3e6e127e7491734f4da79418e54b1d11ab193ef291efed4258d57df123a643b3b711d0e230792cff0236c47274239e1d454b24bd9420eaeb262d5f84b24289766ffb3f74a2deb08590914b20c1e5e4552f531810c72513bf70d56160186c16b09c4ab1a5a9ee3dfb79f25ada8276911e5f2e191b93e56070e6d6206efb582d27e7781e066091aa06bf5b7f4f3e3fa6e72da4668bea738572c87eb938971ff69c456d72017275fa50034dc918f3feb13a13a9391e9b019b215e2a71363fa8166d01df90ede8372009e82e6822b2ecf2480989299470057f8abbc77408699fa281ae022224f59c88e83d3ddf7362b2e6c1661f98646f05fd56f2d1c1717af21bfa0e11b03c170e857090a9d453a32b26e254a7880dd5aee8f2321b14818c80f39d91ec47bf1912cf9c61aff816d57ddafbfaf53285225998cf2f6a3ac5b5008974f1e0ed1bab89b6a41f217474bce6760c85a7ad453f45edc341df07f126152fa105b332af8457e03d0d54430cacd818b5ae3f76666d401ac2fc1ca849c0c5601a3def4530ded16f85017586d3690eefedea6bc57b53d0cb8dd980c60cb8bbc32f30f3ff37b37f6eb226c783bb8fafa4471a2f4a8e9e59925bb9179e6590d8dc44e877371222062d30277abc1cd0ce2a436460b1ce065fae4c74a27d438acdb25a3d21aec20fe24dc44407876aa52f78951b7c429b2e43b2631b12559c5fac81603e6345de7fe3672317ac91df5865c4a180878b440c0d132f3ae5b8e544fc0bc853ffce2befdf99868e34a09873f6d28e8e0c1a6c75938e540c1d4976ab9ae278914e0117c907cbf15f8a31e4aaf56afcb9c808e986436cc9c279706c31a645b57b982621d7b2943b6ad5f8ed3d4327daba44a5c49e729939128a4667b3ef8bd0c67f21a7e09a401df8c18f1d6c5ee2a56561acd951c8bc95b260f93815f2845fe829df685a03565c1f25a187f29c11f2824903c65dc63fde8888289b27a5604091cbd4f47ddb550c4d14f220db22f63b730193cbf88376140648e8b875fdf511bb8367115fb0656da7f4f1bb8331b5e0ffa4ad983695551643fd3f1f899cccbd038d7eb4102993b5b0e42b489b11e694097881e0df1b05c54d88e3d0886ed2c5811174737b2d16fb5ea2086bd1374515527c933f316e6a554d023c0a3815778190b0300f09fd7ccb92eb90ac29915c489829b3711cc75ebec221fbacd7c6f0780e6a041ff80bb4fd7397cd13975789995c04a5fbd0c0a4c7577f57856e30e1b8c70203bfd66d0efbe80aa11be48deb86c5f9054400786a6f883286441df6d3d486527d5762076ddcb727d5b61f8cff0a06956f1ead48c7973c2716c79d213d16a6b5f8881d3d044c33cb94d473405b0f7f08324235989d5128f65eb2e63b3c332ab831729c680977898c1b52c764ebe07c81febae22b3e3fed6d01a9774761e5d3fedb6118a4477bddc6b9cece2de3e6ec4e1c1c0ea3854dcd4e49bb217755ce0c418ba4e70d4b2c3f0aa4b49fb2b2362633df7bd329798b9ddce6923883928237003fa3227e33ae5cd56ce239b0ab92fdd24b5f53bb6098dee788f058abf19aabdd08325583ea756b530154119b68700099ae112c0b3beee32c7c1110a320dc992b3094db6a4633fbf718ca7b40be6fc5e16f785264c11a1831814cb6c6067cd4c710cf4bcc6acafab917313a88f38c9c8e3b049bcfd130552793075d65417ba22cb746d14283316d34"}]}, 0xef8}, 0x1, 0x7}, 0x0)

219.406747ms ago: executing program 1 (id=1228):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000062)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r4=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES64=r1, @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x24000890}, 0x2014)

148.140658ms ago: executing program 1 (id=1229):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) (async)
sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6d}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x184}}, 0x800)

146.935605ms ago: executing program 2 (id=1230):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000000)="02660575ada22e30a0b286d3f6890532c1ae880108807ff2b9c67c851d719a531bcba36265677519369d25f62131ea64d77aecfdbac137d7e13ebf9ea48b59dc0a52f76a49f94d51b2d6ca3bb8c1b27b88227f3271f020f74ffdf5061231c71dfd0d9d6cdb936a228c795f1f2a49b827ca00e12037bcb2891e6ebf351406345d27ec48ba8830a355bc0cb08325fd6ae0fe4233d5077fefd61934d109d5f1fca5f6")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x19c, 0x10, 0x1, 0x70bd25, 0x8000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xff7ffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0xa, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "6e000b000000002000000000000000000000000100001818"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x19c}}, 0x44050)

77.820038ms ago: executing program 1 (id=1231):
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000000000000050000000900020073797a3200000000080004400000000009000100"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@remote, 0x4e22, 0x1, 0x0, 0x1, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010100, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x8, 0xb, 0x6}, {0x0, 0x0, 0x43be, 0xfffffffffffffff8}, {0x100, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x8880)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2)
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48894)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000017c0)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000280)={0x34, r4, 0x23, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x56}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)
r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80000)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
pipe(&(0x7f0000000a00)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r10], 0x0, 0x104, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%+9llu \x00'}, 0x20)
r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x19, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x28b, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@map_fd={0x18, 0x10, 0x1, 0x0, r14}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, <r15=>0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20)
r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r6, 0x0, 0x3, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x16, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x746f}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x0, 0x3, 0x0, 0x7, 0x7, 0x0, 0x1}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='GPL\x00', 0xa09, 0xba, &(0x7f0000000940)=""/186, 0x41000, 0x1, '\x00', r8, 0x0, r10, 0x8, &(0x7f0000000a40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0xc, 0x800, 0x6b}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[r14, r13, 0xffffffffffffffff, r15, r16], &(0x7f0000000d00)=[{0x2, 0x5, 0x0, 0xc}], 0x10, 0x7}, 0x94)
r17 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r17, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
r18 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r18, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="3728da6c6594a0915e58755874c3aa1aca48a6671f211541edb140cf7497246fa77007e0beeab84b7fa67c795b638c39b2256cd76277f8fee6c1ffc0ccade146d1c4788a2a8aac1c110d07bfc2de1259309588bbd2f58505fc5008bd92e479a842e7767f82c9d33375b7ac0019dae4ea5f3a2f240b07c7508f741c720dc3efa800f41f29f9f9053195f7833dc3b11b79380b27778411d49fd0d1fa07f12135960f991beaac3e313120400bfcfdb3ca9d17d94dd907a44d4fab7252414c3c8ce4bd4b7cf43a81187ac04c5e2d849c53afa9a7d6b7c4c90dd90bebbfaeab7e7af0e457", 0xe2}], 0x1, &(0x7f00000004c0)="469db2c1af4690481040124210d3cbfbc98a9f86a05e89d7e70146557607c4690d63488692da3c1a0bc27999551bbc7f166db9912569e02ea9a6df28a20765e8bae40a409f39717ba99edfbfc067c5ff22d58e345013c4400ba905779accd66f6fec6a5c0335e98a15f68346360d88561fddf4192207d8c38b1599c69255846303e866212628d1bcda7900b0b2cecc7ae6736e8ed83ba6cc25e730d1dccfc73187b1398b6d48030206b285690e9062eff3b93526995361d9e3f5e4c2a3d88f979724b2787ef416", 0xc7, 0x810}, 0x4000000)

828.603µs ago: executing program 0 (id=1232):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f0000000040)={0x1d, r5}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084)
clock_gettime(0x0, &(0x7f0000000340)={<r6=>0x0, <r7=>0x0})
recvmmsg(r2, &(0x7f00000002c0), 0x0, 0x10000, &(0x7f0000000440)={r6, r7+60000000})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
shutdown(r1, 0x1)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$phonet(0x23, 0x2, 0x1) (async)
r10 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r10, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xfffffffffffffc82, 0x0, &(0x7f00000001c0)={0x23, 0x95, 0x81, 0x2}, 0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11)

477.358µs ago: executing program 2 (id=1233):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/131, 0x83, 0x1, &(0x7f0000000340)=""/92, 0x5c}, &(0x7f0000000140)=0x40)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x144}}, 0x0)

0s ago: executing program 1 (id=1234):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, 0x0, 0x0, 0x5}, 0x94) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
close(0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@cgroup=r2, 0xffffffffffffffff, 0x1b, 0x1, r0, @void, @value=r0}, 0x20)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x400, 0x4}, 0x14}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000100)=[0x0, 0x0], 0x0, 0xe5, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x99, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd7000ffdbdf250500000005000200050000000500070003000000050002000800000005000200070000002400018008000100", @ANYRES32=r5, @ANYBLOB="080001", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="0800050007000000"], 0x60}}, 0xfdaed27fc9f445e8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r7, &(0x7f00000000c0)="510003000000", 0x6) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00'}) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x64}, {@in6=@private2, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x40}}]}, 0x1a0}}, 0x800)
sendmsg$nl_route(r9, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) (async)
r11 = socket(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040800) (async)
r13 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r14=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000040)={r14, 0xe}, &(0x7f0000000400)=0x8) (async)
sendmsg$nl_route_sched(r8, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32531' (ED25519) to the list of known hosts.
syzkaller login: [   57.847683][ T5592] cgroup: Unknown subsys name 'net'
[   57.946568][ T5592] cgroup: Unknown subsys name 'cpuset'
[   57.954620][ T5592] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.711975][ T5592] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.544500][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.548490][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.551470][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.554635][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.558047][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.601092][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.617285][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.621907][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.626420][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.629146][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.635969][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.639129][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.642371][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.650173][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.652886][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.100742][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.104598][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.107541][ T5610] bridge_slave_0: entered allmulticast mode
[   65.114017][ T5610] bridge_slave_0: entered promiscuous mode
[   65.134015][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.140453][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.150651][ T5610] bridge_slave_1: entered allmulticast mode
[   65.154748][ T5610] bridge_slave_1: entered promiscuous mode
[   65.220396][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.226883][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.287560][ T5610] team0: Port device team_slave_0 added
[   65.302961][ T5610] team0: Port device team_slave_1 added
[   65.373307][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.375949][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.385764][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.392384][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.395335][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.398173][ T5616] bridge_slave_0: entered allmulticast mode
[   65.402147][ T5616] bridge_slave_0: entered promiscuous mode
[   65.415364][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.418137][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.428171][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.433102][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.435993][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.438854][ T5616] bridge_slave_1: entered allmulticast mode
[   65.443151][ T5616] bridge_slave_1: entered promiscuous mode
[   65.506959][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.517020][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.579140][ T5616] team0: Port device team_slave_0 added
[   65.595165][ T5610] hsr_slave_0: entered promiscuous mode
[   65.598388][ T5610] hsr_slave_1: entered promiscuous mode
[   65.607602][ T5616] team0: Port device team_slave_1 added
[   65.684725][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.687262][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.697375][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.714930][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.717391][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.726675][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.786641][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.789703][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.792891][ T5617] bridge_slave_0: entered allmulticast mode
[   65.797190][ T5617] bridge_slave_0: entered promiscuous mode
[   65.836060][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.839245][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.843977][ T5617] bridge_slave_1: entered allmulticast mode
[   65.847850][ T5617] bridge_slave_1: entered promiscuous mode
[   65.857128][ T5616] hsr_slave_0: entered promiscuous mode
[   65.860912][ T5616] hsr_slave_1: entered promiscuous mode
[   65.864376][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   65.866717][ T5616] Cannot create hsr debugfs directory
[   65.924017][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.958997][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.037211][ T5617] team0: Port device team_slave_0 added
[   66.049386][ T5617] team0: Port device team_slave_1 added
[   66.098094][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.100658][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.108101][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.117737][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.120843][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.130731][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.241881][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.258517][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.267962][ T5617] hsr_slave_0: entered promiscuous mode
[   66.272364][ T5617] hsr_slave_1: entered promiscuous mode
[   66.275048][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   66.277032][ T5617] Cannot create hsr debugfs directory
[   66.281173][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.287633][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.304018][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.310079][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.336079][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.342388][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.414394][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.420756][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.423376][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.429004][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.444623][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.452904][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.456507][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.462584][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.593395][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.599375][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.603249][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.609891][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.613455][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.620077][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.624458][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.632015][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.641938][ T5623] Bluetooth: hci0: command tx timeout
[   66.713396][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.720827][ T5623] Bluetooth: hci2: command tx timeout
[   66.722504][ T5612] Bluetooth: hci1: command tx timeout
[   66.752136][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   66.765521][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.768457][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.782481][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.791595][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.794439][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.821435][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   66.836390][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.838580][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.858735][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.861196][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.903650][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.971601][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   66.987838][  T535] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.990064][  T535] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.999647][  T535] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.001884][  T535] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.332321][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.337161][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.389220][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.406656][ T5616] veth0_vlan: entered promiscuous mode
[   67.409279][ T5610] veth0_vlan: entered promiscuous mode
[   67.422353][ T5610] veth1_vlan: entered promiscuous mode
[   67.429002][ T5616] veth1_vlan: entered promiscuous mode
[   67.476211][ T5617] veth0_vlan: entered promiscuous mode
[   67.479036][ T5610] veth0_macvtap: entered promiscuous mode
[   67.489985][ T5610] veth1_macvtap: entered promiscuous mode
[   67.495301][ T5616] veth0_macvtap: entered promiscuous mode
[   67.505243][ T5617] veth1_vlan: entered promiscuous mode
[   67.513410][ T5616] veth1_macvtap: entered promiscuous mode
[   67.528289][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.547858][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.564476][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.571129][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.574926][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.583846][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.599284][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.623732][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.634622][ T5617] veth0_macvtap: entered promiscuous mode
[   67.648136][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.673413][ T5617] veth1_macvtap: entered promiscuous mode
[   67.676759][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.680891][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.684049][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.733715][  T535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.738262][  T535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.744478][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.788632][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.803894][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.807278][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.811465][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.817037][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.825878][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.834317][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.869401][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.881680][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.886479][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.960980][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.964542][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.023195][  T535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.030956][  T535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.102367][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.108709][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.556225][ T5742] netlink: 'syz.1.5': attribute type 1 has an invalid length.
[   68.700797][ T5722] macsec1: entered promiscuous mode
[   68.705758][ T5738] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5'.
[   68.713365][ T5738] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5'.
[   68.721463][ T5623] Bluetooth: hci0: command tx timeout
[   68.801069][ T5623] Bluetooth: hci2: command tx timeout
[   68.810479][ T5623] Bluetooth: hci1: command tx timeout
[   68.832212][ T5761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.832739][ T5760] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7'.
[   68.855892][ T5760] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   68.871974][ T5760] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   68.887032][ T5760] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   68.902789][ T5760] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   68.914842][ T5760] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   69.053505][ T5782] netlink: 2136 bytes leftover after parsing attributes in process `syz.0.11'.
[   69.148819][ T5796] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET)
[   69.407378][ T5819] netlink: 124 bytes leftover after parsing attributes in process `syz.2.16'.
[   69.551591][ T5828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19'.
[   69.660795][ T5837] netlink: 2136 bytes leftover after parsing attributes in process `syz.2.23'.
[   69.997991][ T5873] netlink: 2136 bytes leftover after parsing attributes in process `syz.2.31'.
[   70.239728][ T5897] Zero length message leads to an empty skb
[   70.645606][ T5918] syzkaller0: entered promiscuous mode
[   70.647935][ T5918] syzkaller0: entered allmulticast mode
[   70.660966][ T5918] netlink: 44 bytes leftover after parsing attributes in process `syz.1.38'.
[   70.800400][ T5623] Bluetooth: hci0: command tx timeout
[   70.882035][ T5623] Bluetooth: hci1: command tx timeout
[   70.882274][ T5612] Bluetooth: hci2: command tx timeout
[   71.367078][ T5956] openvswitch: netlink: Message has 592 unknown bytes.
[   71.369376][ T5956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.720066][ T5968] Bluetooth: MGMT ver 1.23
[   72.739617][ T6016] netlink: 'syz.0.61': attribute type 16 has an invalid length.
[   72.890390][ T5612] Bluetooth: hci0: command tx timeout
[   72.961409][ T5612] Bluetooth: hci2: command tx timeout
[   72.971168][ T5612] Bluetooth: hci1: command tx timeout
[   73.426559][ T6087] sctp: [Deprecated]: syz.0.79 (pid 6087) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.426559][ T6087] Use struct sctp_sack_info instead
[   73.450366][ T6086] sctp: [Deprecated]: syz.0.79 (pid 6086) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.450366][ T6086] Use struct sctp_sack_info instead
[   73.739620][ T6109] __nla_validate_parse: 36 callbacks suppressed
[   73.739637][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'.
[   73.855339][ T6119] netlink: 'syz.0.92': attribute type 1 has an invalid length.
[   74.206034][ T6147] netlink: 'syz.1.95': attribute type 1 has an invalid length.
[   74.338515][ T6162] netlink: 240 bytes leftover after parsing attributes in process `syz.0.97'.
[   74.464126][ T6173] netlink: 96 bytes leftover after parsing attributes in process `syz.1.99'.
[   74.660940][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'.
[   74.679979][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'.
[   74.766780][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'.
[   74.771304][ T6192] netlink: 96 bytes leftover after parsing attributes in process `syz.0.104'.
[   75.693441][ T6239] 8021q: VLANs not supported on ipvlan1
[   75.704601][ T6239] netlink: 156 bytes leftover after parsing attributes in process `syz.0.117'.
[   76.049736][ T6261] netlink: 2136 bytes leftover after parsing attributes in process `syz.0.123'.
[   76.221905][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.125'.
[   76.489553][ T6279] syzkaller0: entered allmulticast mode
[   76.722905][ T6287] xt_ipcomp: unknown flags 1D
[   76.731412][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[   76.734869][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[   77.310244][ T6326] netlink: 'syz.2.148': attribute type 14 has an invalid length.
[   77.339008][ T6332] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   77.345012][ T6332] bond1 (unregistering): Released all slaves
[   77.369985][ T6331] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   77.379917][ T6331] bond1 (unregistering): Released all slaves
[   77.461558][ T6341] Bluetooth: MGMT ver 1.23
[   80.577804][ T6350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.671783][ T6390] __nla_validate_parse: 9 callbacks suppressed
[   80.671798][ T6390] netlink: 96 bytes leftover after parsing attributes in process `syz.2.165'.
[   80.885009][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'.
[   80.888113][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'.
[   80.891906][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'.
[   80.894921][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'.
[   81.334539][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'.
[   81.385936][ T6430] bond1: entered promiscuous mode
[   81.392143][ T6430] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.402778][ T6431] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   81.618909][ T6448] tap0: tun_chr_ioctl cmd 1074025677
[   81.633090][ T6448] tap0: linktype set to 776
[   81.644289][ T6448] tap0: tun_chr_ioctl cmd 1074025673
[   81.654038][ T6451] tap0: tun_chr_ioctl cmd 1074025677
[   81.660426][ T6451] tap0: linktype set to 776
[   81.906725][ T6460] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[   81.916083][ T6460] netlink: 224 bytes leftover after parsing attributes in process `syz.0.185'.
[   81.930758][ T6460] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[   82.654709][ T6477] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   82.669897][ T6477] netlink: 76 bytes leftover after parsing attributes in process `syz.1.191'.
[   82.886030][ T6489] netlink: 'syz.0.196': attribute type 1 has an invalid length.
[   82.889129][ T6489] netlink: 248 bytes leftover after parsing attributes in process `syz.0.196'.
[   83.015851][ T6498] netlink: 124 bytes leftover after parsing attributes in process `syz.1.197'.
[   83.555767][ T6523] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   83.594329][ T6517] syzkaller0: entered promiscuous mode
[   83.601562][ T6517] syzkaller0: entered allmulticast mode
[   84.465179][ T6543] openvswitch: netlink: Flow actions attr not present in new flow.
[   84.531496][ T6547] openvswitch: netlink: Actions may not be safe on all matching packets
[   84.534471][ T6548] openvswitch: netlink: Actions may not be safe on all matching packets
[   85.284874][ T6560] openvswitch: netlink: Flow key attribute not present in set flow.
[   86.122881][ T6588] netlink: ct family unspecified
[   86.124838][ T6589] netlink: ct family unspecified
[   86.124878][ T6589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.132278][ T6588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.133166][ T6589] __nla_validate_parse: 7 callbacks suppressed
[   86.133180][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[   86.145913][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[   86.328603][ T6597] netlink: 76 bytes leftover after parsing attributes in process `syz.1.228'.
[   86.336463][ T6597] bond0: option arp_validate: invalid value (55553)
[   86.336659][   T13] bond0: (slave bond_slave_0): interface is now down
[   86.346023][   T13] bond0: (slave bond_slave_1): interface is now down
[   86.371213][   T13] bond0: (slave bond_slave_0): interface is now down
[   86.373413][   T13] bond0: (slave bond_slave_1): interface is now down
[   86.379062][   T13] bond0: now running without any active interface!
[   86.547866][ T6605] netlink: 124 bytes leftover after parsing attributes in process `syz.1.230'.
[   86.976241][   T10] cfg80211: failed to load regulatory.db
[   88.382405][ T6573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.634844][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.237'.
[   88.702781][ T6624] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   88.712337][ T6624] bond2 (unregistering): Released all slaves
[   88.801414][ T6632] sctp: [Deprecated]: syz.0.239 (pid 6632) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.801414][ T6632] Use struct sctp_sack_info instead
[   88.816993][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'.
[   88.820873][ T6632] netlink: 108 bytes leftover after parsing attributes in process `syz.0.239'.
[   88.823752][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'.
[   88.897668][ T6636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.241'.
[   89.285342][ T6642] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.244'.
[   89.288898][ T6642] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[   89.553873][ T6655] erspan1: entered promiscuous mode
[   89.559870][ T6655] erspan1: entered allmulticast mode
[   89.884140][ T6668] IPVS: set_ctl: invalid protocol: 136 172.30.0.2:20005
[   90.817496][ T6684] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[   91.359613][ T6707] __nla_validate_parse: 4 callbacks suppressed
[   91.359628][ T6707] netlink: 176 bytes leftover after parsing attributes in process `syz.1.269'.
[   91.838335][ T6729] netlink: 124 bytes leftover after parsing attributes in process `syz.0.275'.
[   91.954111][ T6733] xt_l2tp: v2 doesn't support IP mode
[   91.957044][ T6733] netlink: 'syz.0.277': attribute type 61 has an invalid length.
[   91.959957][ T6733] netlink: 'syz.0.277': attribute type 62 has an invalid length.
[   92.004409][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'.
[   92.019188][ T6735] syzkaller0: entered promiscuous mode
[   92.021084][ T6735] syzkaller0: entered allmulticast mode
[   92.334378][ T6742] netlink: 'syz.2.280': attribute type 1 has an invalid length.
[   92.610950][ T6764] syzkaller1: tun_chr_ioctl cmd 1074025677
[   92.616577][ T6764] syzkaller1: linktype set to 825
[   92.711014][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'.
[   92.725462][ T6773] veth3: entered promiscuous mode
[   92.738295][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.288'.
[   92.989484][ T6794] syzkaller0: entered promiscuous mode
[   92.991946][ T6794] syzkaller0: entered allmulticast mode
[   93.054055][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'.
[   93.064392][ T6794] netlink: 124 bytes leftover after parsing attributes in process `syz.2.294'.
[   93.108886][ T6801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.296'.
[   93.268428][ T6808] netlink: 41 bytes leftover after parsing attributes in process `syz.0.300'.
[   93.274373][ T6808] netlink: 140 bytes leftover after parsing attributes in process `syz.0.300'.
[   93.542290][ T6830] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000
[   93.558340][ T6830] syz.0.306 (6830) used obsolete PPPIOCDETACH ioctl
[   93.558921][ T6828] netlink: 'syz.1.305': attribute type 4 has an invalid length.
[   93.570846][ T6833] IPVS: length: 528 != 632
[   93.741595][ T6852] xt_l2tp: wrong L2TP version: 0
[   93.768903][ T6853] netlink: 'syz.1.313': attribute type 3 has an invalid length.
[   93.774903][ T6853] netlink: 'syz.1.313': attribute type 3 has an invalid length.
[   93.865997][ T6852] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   93.871860][ T6852] bond1 (unregistering): Released all slaves
[   93.925410][ T6861] warning: `syz.2.314' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.034400][ T6868] xt_TCPMSS: Only works on TCP SYN packets
[   94.294226][ T6886] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   94.985734][ T6921] netlink: 'syz.0.327': attribute type 21 has an invalid length.
[   94.988312][ T6921] netlink: 'syz.0.327': attribute type 5 has an invalid length.
[   95.094484][ T6923] batadv_slave_0: entered promiscuous mode
[   95.098687][ T6922] batadv_slave_0: left promiscuous mode
[   95.360361][ T5612] Bluetooth: hci0: command tx timeout
[   95.622432][ T6934] netlink: 'syz.1.331': attribute type 11 has an invalid length.
[   95.728493][ T6917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.834548][ T6938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.858551][ T6938] syzkaller1: entered promiscuous mode
[   95.860932][ T6938] syzkaller1: entered allmulticast mode
[   96.109603][ T6952] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[   96.397029][ T6974] __nla_validate_parse: 10 callbacks suppressed
[   96.397045][ T6974] netlink: 64 bytes leftover after parsing attributes in process `syz.2.346'.
[   96.475542][ T6979] netlink: 'syz.0.348': attribute type 1 has an invalid length.
[   96.488874][ T6979] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.348'.
[   96.679888][ T6992] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000
[   96.680829][   T10] IPVS: starting estimator thread 0...
[   96.691193][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[   96.694074][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.354'.
[   96.697488][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.354'.
[   96.707365][ T6995] netlink: 76 bytes leftover after parsing attributes in process `syz.2.354'.
[   96.740626][ T6997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.355'.
[   96.770701][ T6993] IPVS: using max 64 ests per chain, 153600 per kthread
[   96.787996][ T6990] netlink: 96 bytes leftover after parsing attributes in process `syz.1.352'.
[   97.079268][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'.
[   99.575879][ T6990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   99.861204][ T7042] netlink: 'syz.0.371': attribute type 1 has an invalid length.
[   99.864192][ T7042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.371'.
[  100.054509][ T7057] netlink: 'syz.0.374': attribute type 29 has an invalid length.
[  100.058097][ T7057] netlink: 'syz.0.374': attribute type 29 has an invalid length.
[  100.062666][ T7057] unsupported nla_type 58
[  100.250085][ T7072] netlink: 'syz.2.377': attribute type 4 has an invalid length.
[  100.363794][ T7080] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  100.374608][ T7080] bond1 (unregistering): Released all slaves
[  101.589546][ T7110] __nla_validate_parse: 7 callbacks suppressed
[  101.589557][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'.
[  103.553634][ T7099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.655555][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.388'.
[  103.661792][ T7115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'.
[  103.677873][ T7120] netlink: 92 bytes leftover after parsing attributes in process `syz.2.389'.
[  103.728271][ T7115] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  103.737412][ T7115] bond1 (unregistering): Released all slaves
[  103.739046][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'.
[  103.828490][ T7133] Set syz1 is full, maxelem 0 reached
[  103.948732][ T7140] netlink: 'syz.2.395': attribute type 2 has an invalid length.
[  103.959248][ T7140] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  103.964203][ T7140] netlink: 830 bytes leftover after parsing attributes in process `syz.2.395'.
[  104.114261][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'.
[  104.117705][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'.
[  104.121450][ T7146] netlink: 'syz.1.398': attribute type 14 has an invalid length.
[  104.124760][ T7146] netlink: 'syz.1.398': attribute type 13 has an invalid length.
[  104.193030][ T7148] netlink: 96 bytes leftover after parsing attributes in process `syz.2.397'.
[  104.198303][ T7146] ip6t_srh: unknown srh invflags 4000
[  104.202553][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'.
[  105.201833][ T7214] netlink: 'syz.1.410': attribute type 1 has an invalid length.
[  105.207435][ T7214] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  105.449690][ T7227] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  105.463227][ T7227] bond1 (unregistering): Released all slaves
[  105.497264][ T7231] geneve2: entered allmulticast mode
[  132.485361][ T7270] __nla_validate_parse: 5 callbacks suppressed
[  132.485377][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'.
[  132.535147][ T7270] : entered promiscuous mode
[  132.543612][ T7270] netlink: 176 bytes leftover after parsing attributes in process `syz.0.429'.
[  132.597600][ T7291] sch_tbf: peakrate 67108864 is lower than or equals to rate 4294966145 !
[  132.622825][ T7291] Cannot find set identified by id 0 to match
[  132.635272][ T7291] netlink: 156 bytes leftover after parsing attributes in process `syz.1.436'.
[  132.718795][ T7286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  132.725407][ T7299] netlink: 216 bytes leftover after parsing attributes in process `syz.0.437'.
[  132.729608][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'.
[  132.735784][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.437'.
[  132.742990][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.438'.
[  132.832403][ T7308] netlink: 124 bytes leftover after parsing attributes in process `syz.0.440'.
[  133.285437][ T7342] netlink: 120 bytes leftover after parsing attributes in process `syz.0.447'.
[  133.288355][ T7342] netlink: 120 bytes leftover after parsing attributes in process `syz.0.447'.
[  133.707064][ T7364] netlink: 'syz.2.452': attribute type 2 has an invalid length.
[  134.032142][ T7388] netlink: 'syz.1.460': attribute type 29 has an invalid length.
[  134.442958][ T7417] netlink: 'syz.1.468': attribute type 16 has an invalid length.
[  134.600763][ T7426] syzkaller0: entered promiscuous mode
[  134.606883][ T7426] syzkaller0: entered allmulticast mode
[  136.463882][ T7541] debugfs: 'netdev:syzkaller0' already exists in 'phy8'
[  136.544243][ T7543] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  136.555356][ T7543] sch_tbf: burst 128 is lower than device lo mtu (65550) !
[  136.738847][ T7551] netlink: 'syz.2.518': attribute type 1 has an invalid length.
[  136.782619][ T7551] 8021q: adding VLAN 0 to HW filter on device bond3
[  136.836616][ T7551] bond3: (slave gretap2): making interface the new active one
[  136.858382][ T7551] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  136.906921][ T7565] netlink: 'syz.0.520': attribute type 4 has an invalid length.
[  136.927669][ T7565] .`: renamed from bond0 (while UP)
[  137.369571][ T7600] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  137.374722][ T7600] openvswitch: netlink: Flow actions attr not present in new flow.
[  137.494294][ T7608] syzkaller0: entered promiscuous mode
[  137.496656][ T7608] syzkaller0: entered allmulticast mode
[  137.624993][ T7618] __nla_validate_parse: 18 callbacks suppressed
[  137.625003][ T7618] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.540'.
[  137.638192][ T7618] syzkaller0: entered promiscuous mode
[  137.641928][ T7618] syzkaller0: entered allmulticast mode
[  137.649125][ T7618] tc action pedit offset must be on 32 bit boundaries
[  137.652450][ T7618] tc action pedit offset must be on 32 bit boundaries
[  137.655080][ T7618] tc action pedit offset must be on 32 bit boundaries
[  137.657435][ T7618] tc action pedit offset must be on 32 bit boundaries
[  137.659501][ T7618] tc action pedit offset must be on 32 bit boundaries
[  137.662036][ T7618] tc action pedit offset must be on 32 bit boundaries
[  137.664066][ T7618] tc action pedit offset must be on 32 bit boundaries
[  137.665913][ T7618] tc action pedit offset must be on 32 bit boundaries
[  137.668356][ T7618] tc action pedit offset must be on 32 bit boundaries
[  137.671034][ T7618] tc action pedit offset must be on 32 bit boundaries
[  137.673754][ T7618] TC_ACT_REPEAT abuse ?
[  137.723225][ T7625] netlink: 'syz.1.541': attribute type 8 has an invalid length.
[  137.727809][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'.
[  137.735182][ T7625] veth1_to_team: entered promiscuous mode
[  137.738152][ T7625] gretap0: entered promiscuous mode
[  137.744562][ T7625] hsr1: entered promiscuous mode
[  137.913015][ T7646] ieee802154 phy0 wpan0: encryption failed: -22
[  137.919248][ T7646] netlink: 52 bytes leftover after parsing attributes in process `syz.2.544'.
[  138.079679][ T7654] gre1: entered allmulticast mode
[  138.162554][ T5623] Bluetooth: hci2: command 0x0405 tx timeout
[  138.163887][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  138.901947][ T7690] netlink: 'syz.2.564': attribute type 3 has an invalid length.
[  138.917163][ T7690] netlink: 'syz.2.564': attribute type 2 has an invalid length.
[  138.936225][ T7690] netlink: 'syz.2.564': attribute type 2 has an invalid length.
[  138.944307][ T7690] netlink: 'syz.2.564': attribute type 10 has an invalid length.
[  139.224847][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.232676][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.265797][ T7713] netlink: 'syz.0.566': attribute type 16 has an invalid length.
[  139.268409][ T7713] netlink: 'syz.0.566': attribute type 17 has an invalid length.
[  139.282459][ T7713] 8021q: adding VLAN 0 to HW filter on device .`
[  139.293674][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.295846][ T7713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.300056][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.302832][ T7713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.344307][ T7713] veth3: left promiscuous mode
[  139.566342][ T7740] tipc: Started in network mode
[  139.569008][ T7740] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  139.576398][ T7740] tipc: Enabled bearer <eth:geneve1>, priority 10
[  139.813466][ T7757] netlink: 172 bytes leftover after parsing attributes in process `syz.2.582'.
[  139.821044][ T7759] netlink: 2136 bytes leftover after parsing attributes in process `syz.1.583'.
[  139.980056][ T7778] netlink: 176 bytes leftover after parsing attributes in process `syz.0.589'.
[  140.026012][ T7783] sctp: [Deprecated]: syz.2.590 (pid 7783) Use of int in max_burst socket option.
[  140.026012][ T7783] Use struct sctp_assoc_value instead
[  140.102000][ T7787] netlink: 2136 bytes leftover after parsing attributes in process `syz.1.593'.
[  140.157274][ T7789] netlink: 108 bytes leftover after parsing attributes in process `syz.1.594'.
[  140.240551][ T5612] Bluetooth: hci2: command 0x0405 tx timeout
[  140.379784][ T7797] netlink: 68 bytes leftover after parsing attributes in process `syz.1.597'.
[  140.383509][ T7798] netlink: 68 bytes leftover after parsing attributes in process `syz.1.597'.
[  140.593247][ T7804] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  140.707232][ T5620] tipc: Node number set to 15444650
[  140.914613][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.917349][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.011825][ T7816] "syz.0.604" (7816) uses obsolete ecb(arc4) skcipher
[  141.268018][ T7851] netlink: 'syz.2.612': attribute type 1 has an invalid length.
[  141.290810][ T7851] bond4: entered promiscuous mode
[  141.293984][ T7851] 8021q: adding VLAN 0 to HW filter on device bond4
[  141.313249][ T7851] bond4: (slave bridge1): making interface the new active one
[  141.316164][ T7851] bridge1: entered promiscuous mode
[  141.319364][ T7851] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  144.122682][ T7842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.643518][ T7904] __nla_validate_parse: 4 callbacks suppressed
[  144.643570][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'.
[  144.654160][ T7904] netlink: 'syz.2.621': attribute type 1 has an invalid length.
[  145.335884][ T7890] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  145.343345][ T7960] netlink: 96 bytes leftover after parsing attributes in process `syz.1.633'.
[  145.348365][ T7890] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  145.436188][ T7890] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  145.450911][ T7890] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  145.466055][ T7890] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  145.470945][ T7890] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  145.819405][ T7984] netlink: 96 bytes leftover after parsing attributes in process `syz.0.638'.
[  146.005026][ T7986] netlink: 124 bytes leftover after parsing attributes in process `syz.2.639'.
[  146.808558][ T8033] netlink: 56 bytes leftover after parsing attributes in process `syz.0.647'.
[  147.237696][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.245475][ T8042] team0: Port device bond0 added
[  147.463931][ T8049] netlink: 72 bytes leftover after parsing attributes in process `syz.0.653'.
[  147.472152][ T8049] netlink: 680 bytes leftover after parsing attributes in process `syz.0.653'.
[  147.481268][ T8049] netlink: 72 bytes leftover after parsing attributes in process `syz.0.653'.
[  147.718312][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.659'.
[  147.866259][ T8073] netlink: 2136 bytes leftover after parsing attributes in process `syz.2.662'.
[  147.897447][ T8075] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  148.089024][ T8081] netlink: 'syz.2.666': attribute type 1 has an invalid length.
[  148.143138][ T8083] sctp: [Deprecated]: syz.2.667 (pid 8083) Use of struct sctp_assoc_value in delayed_ack socket option.
[  148.143138][ T8083] Use struct sctp_sack_info instead
[  149.410637][ T8124] netlink: 'syz.0.681': attribute type 1 has an invalid length.
[  149.440855][ T8113] infiniband syz2: set down
[  149.443642][ T8113] infiniband syz2: added ipvlan1
[  149.482482][ T8113] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  149.487148][ T8113] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  149.496884][ T8113] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  149.518076][ T8113] RDS/IB: syz2: added
[  149.521187][ T8113] smc: adding ib device syz2 with port count 1
[  149.523870][ T8113] smc:    ib device syz2 port 1 has no pnetid
[  150.321257][ T8162] __nla_validate_parse: 7 callbacks suppressed
[  150.321272][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'.
[  150.328677][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'.
[  150.366681][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'.
[  150.378303][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'.
[  150.417883][ T8170] tipc: Started in network mode
[  150.423994][ T8170] tipc: Node identity ac14140f, cluster identity 4711
[  150.431289][ T8170] tipc: New replicast peer: 255.255.255.255
[  150.436692][ T8170] tipc: Enabled bearer <udp:syz2>, priority 10
[  150.444710][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'.
[  150.453141][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'.
[  150.486946][ T8170] vti0: entered promiscuous mode
[  150.505377][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'.
[  150.518075][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'.
[  150.767588][ T8183] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  151.337840][ T8200] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.697'.
[  151.550328][ T5668] tipc: Node number set to 2886997007
[  151.599645][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.701'.
[  151.600414][ T8211] netlink: 'syz.0.701': attribute type 7 has an invalid length.
[  151.603008][ T8210] netlink: 'syz.0.701': attribute type 7 has an invalid length.
[  151.608040][ T8210] netlink: 'syz.0.701': attribute type 8 has an invalid length.
[  151.626226][ T8211] netlink: 'syz.0.701': attribute type 8 has an invalid length.
[  151.662270][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.680767][ T8211] bridge_slave_0 (unregistering): left allmulticast mode
[  151.688995][ T8211] bridge_slave_0 (unregistering): left promiscuous mode
[  151.692451][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.701316][ T8214] netlink: 'syz.0.701': attribute type 27 has an invalid length.
[  152.155180][ T8250] xt_hashlimit: overflow, rate too high: 0
[  152.214868][ T8254] netlink: 'syz.2.715': attribute type 1 has an invalid length.
[  152.242394][ T8254] openvswitch: netlink: IP tunnel dst address not specified
[  152.565378][ T8260] xt_hashlimit: max too large, truncated to 1048576
[  152.567831][ T8260] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  152.834510][ T8298] team0 (unregistering): Port device team_slave_0 removed
[  152.848726][ T8298] team0 (unregistering): Port device team_slave_1 removed
[  153.400683][ T8341] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  153.404224][ T8341] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  153.994605][ T8389] bond0: entered promiscuous mode
[  153.996378][ T8389] bond0: left promiscuous mode
[  154.169595][ T8406] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  154.175605][ T8406] bond1 (unregistering): Released all slaves
[  154.255877][ T8409] sctp: [Deprecated]: syz.0.761 (pid 8409) Use of struct sctp_assoc_value in delayed_ack socket option.
[  154.255877][ T8409] Use struct sctp_sack_info instead
[  154.267684][ T8409] sctp: [Deprecated]: syz.0.761 (pid 8409) Use of struct sctp_assoc_value in delayed_ack socket option.
[  154.267684][ T8409] Use struct sctp_sack_info instead
[  154.444658][ T8432] netlink: 'syz.2.769': attribute type 1 has an invalid length.
[  154.479438][ T8432] 8021q: adding VLAN 0 to HW filter on device bond5
[  154.515050][ T8432] bond5: (slave ip6erspan0): making interface the new active one
[  154.520648][ T8432] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[  154.564604][ T8435] tipc: Resetting bearer <eth:geneve1>
[  154.567996][ T8435] tipc: Resetting bearer <eth:geneve1>
[  154.572802][ T8435] erspan1: left promiscuous mode
[  154.575784][ T8435] hsr1: left promiscuous mode
[  155.303352][ T8469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.606054][ T8491] __nla_validate_parse: 24 callbacks suppressed
[  155.606066][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.782'.
[  155.664581][ T8489] syzkaller0: entered promiscuous mode
[  155.666418][ T8489] syzkaller0: entered allmulticast mode
[  155.673303][ T8491] netlink: 104 bytes leftover after parsing attributes in process `syz.2.782'.
[  155.735662][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.785'.
[  155.784392][ T8494] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  155.799647][ T8494] bond6 (unregistering): Released all slaves
[  156.206082][ T8522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.794'.
[  156.227647][ T8522] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  156.235944][ T8525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.795'.
[  156.236941][ T8522] bond1 (unregistering): Released all slaves
[  156.272667][ T8525] syzkaller0: entered promiscuous mode
[  156.276917][ T8525] syzkaller0: entered allmulticast mode
[  156.731994][ T8544] netlink: 148 bytes leftover after parsing attributes in process `syz.0.800'.
[  156.877323][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.801'.
[  157.167878][ T8562] netlink: 'syz.2.806': attribute type 3 has an invalid length.
[  157.172683][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'.
[  157.177357][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'.
[  157.192604][ T8564] netlink: 96 bytes leftover after parsing attributes in process `syz.0.807'.
[  157.433332][ T8577] netlink: 'syz.2.811': attribute type 1 has an invalid length.
[  157.438764][ T8577] netlink: 'syz.2.811': attribute type 11 has an invalid length.
[  158.027128][ T8629] dummy0: entered promiscuous mode
[  158.033570][ T8629] dummy0: entered allmulticast mode
[  158.329372][ T8644] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  158.336942][ T8644] bond6 (unregistering): Released all slaves
[  158.705171][ T8665] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  158.709755][ T8665] bond6 (unregistering): Released all slaves
[  159.365747][ T8707] netlink: 'syz.0.848': attribute type 2 has an invalid length.
[  159.372373][ T8707] netlink: 'syz.0.848': attribute type 2 has an invalid length.
[  159.577763][ T8722] syzkaller0: entered promiscuous mode
[  159.579534][ T8722] syzkaller0: entered allmulticast mode
[  159.638299][ T8724] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.642669][ T8724] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.730032][ T8725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.687855][ T8748] __nla_validate_parse: 16 callbacks suppressed
[  160.687871][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.861'.
[  161.044257][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'.
[  161.174864][ T8779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.673662][ T8808] netlink: 216 bytes leftover after parsing attributes in process `syz.1.877'.
[  161.676925][ T8808] netlink: 'syz.1.877': attribute type 2 has an invalid length.
[  161.679782][ T8808] netlink: 'syz.1.877': attribute type 1 has an invalid length.
[  161.726886][ T8808] netlink: 156 bytes leftover after parsing attributes in process `syz.1.877'.
[  162.078096][ T8839] netlink: 176 bytes leftover after parsing attributes in process `syz.1.884'.
[  162.131231][ T8843] netlink: 132 bytes leftover after parsing attributes in process `syz.1.886'.
[  162.135407][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.887'.
[  162.259580][ T8859] xt_TPROXY: Can be used only with -p tcp or -p udp
[  163.626783][ T8906] netlink: 'syz.0.903': attribute type 32 has an invalid length.
[  163.629135][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.903'.
[  163.636534][ T8906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.903'.
[  163.652689][ T8906] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  163.656730][ T8906] bond1 (unregistering): Released all slaves
[  164.005782][ T8924] xt_hashlimit: size too large, truncated to 1048576
[  164.410183][ T8939] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:21
[  164.507173][ T8954] netlink: 'syz.1.919': attribute type 8 has an invalid length.
[  164.519211][ T8954] netlink: 'syz.1.919': attribute type 9 has an invalid length.
[  164.699493][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'.
[  164.775912][ T8980] netlink: 'syz.2.931': attribute type 2 has an invalid length.
[  165.164623][ T9014] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  165.169108][ T9014] bond1 (unregistering): Released all slaves
[  165.794845][ T9094] __nla_validate_parse: 4 callbacks suppressed
[  165.794856][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'.
[  165.803150][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'.
[  165.813156][ T9094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.957'.
[  165.826804][ T9094] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  165.831557][ T9094] bond6 (unregistering): Released all slaves
[  166.062611][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'.
[  166.071061][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'.
[  166.161335][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.721395][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.837799][ T9175] netlink: 96 bytes leftover after parsing attributes in process `syz.1.971'.
[  167.179595][ T9195] netlink: 144 bytes leftover after parsing attributes in process `syz.0.982'.
[  167.237145][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'.
[  167.445603][ T9215] netlink: 124 bytes leftover after parsing attributes in process `syz.2.987'.
[  167.762255][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.219035][ T9225] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  168.222735][ T9225] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  168.238789][ T9225] netlink: 88 bytes leftover after parsing attributes in process `syz.0.991'.
[  168.585624][ T9246] bond1: option tlb_dynamic_lb: invalid value (5)
[  168.592582][ T9246] bond1 (unregistering): Released all slaves
[  168.998550][ T7357] block nbd0: NBD_DISCONNECT
[  168.999552][   T57] block nbd0: Receive control failed (result -32)
[  169.001027][ T7357] block nbd0: Send disconnect failed -32
[  169.005245][ T7357] block nbd0: Disconnected due to user request.
[  169.008445][ T7357] block nbd0: shutting down sockets
[  170.424999][ T9361] Bluetooth: MGMT ver 1.23
[  170.439455][ T9361] syzkaller0: entered promiscuous mode
[  170.441958][ T9361] syzkaller0: entered allmulticast mode
[  171.964011][ T9390] __nla_validate_parse: 9 callbacks suppressed
[  171.964021][ T9390] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1032'.
[  172.025884][ T9396] netlink: 'syz.2.1034': attribute type 2 has an invalid length.
[  172.028943][ T9396] netlink: 'syz.2.1034': attribute type 9 has an invalid length.
[  172.039444][ T9396] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1034'.
[  172.168657][ T9406] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1040'.
[  172.177883][ T9408] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1040'.
[  172.193703][ T9410] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  172.285683][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1044'.
[  172.316064][ T9420] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  172.320395][ T9420] bond6 (unregistering): Released all slaves
[  172.418997][ T9438] netlink: 'syz.2.1049': attribute type 1 has an invalid length.
[  172.539847][ T9448] netlink: 'syz.2.1051': attribute type 6 has an invalid length.
[  172.737753][ T9467] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1056'.
[  172.758624][ T9467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1056'.
[  172.855888][ T9463] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.858872][ T9463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  173.074826][ T9491] netlink: 'syz.2.1062': attribute type 6 has an invalid length.
[  173.085550][ T9491] netlink: 3936 bytes leftover after parsing attributes in process `syz.2.1062'.
[  173.088919][ T9493] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1064'.
[  173.093519][ T9491] netlink: 'syz.2.1062': attribute type 1 has an invalid length.
[  173.098096][ T9491] block nbd1: Unsupported socket: should be TCP or UNIX.
[  173.239648][ T9508] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1067'.
[  174.310979][ T9562] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  175.980941][ T9606] netlink: 'syz.0.1091': attribute type 25 has an invalid length.
[  176.217268][ T9621] syzkaller1: tun_chr_ioctl cmd 3223869504
[  176.223026][ T9621] syzkaller1: tun_chr_ioctl cmd 2147767506
[  176.342381][ T9629] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.412738][ T9629] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.477281][ T9629] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.535886][ T9629] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.619608][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.645267][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.672500][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.683499][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.836086][ T9668] netlink: 'syz.2.1113': attribute type 1 has an invalid length.
[  177.034386][ T9688] __nla_validate_parse: 8 callbacks suppressed
[  177.034401][ T9688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1119'.
[  177.045973][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1119'.
[  177.335375][ T9720] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  177.356155][ T9720] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  177.477580][ T9729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1134'.
[  177.858650][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'.
[  177.865439][ T9757] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1143'.
[  177.991078][ T9765] netlink: 'syz.1.1146': attribute type 142 has an invalid length.
[  177.997873][ T9765] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1146'.
[  178.178845][ T9777] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1148'.
[  178.218831][ T9778] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1149'.
[  178.643728][ T9788] macsec2: entered promiscuous mode
[  178.649477][ T9788] macsec2: entered allmulticast mode
[  178.869734][ T9812] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1157'.
[  179.316139][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'.
[  179.384761][ T9836] team0 (unregistering): Port device team_slave_0 removed
[  179.395149][ T9836] team0 (unregistering): Port device team_slave_1 removed
[  179.405146][ T9836] team0 (unregistering): Port device bond0 removed
[  180.050769][ T9892] IPv6: NLM_F_CREATE should be specified when creating new route
[  180.054128][ T9892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  180.058213][ T9892] IPv6: NLM_F_CREATE should be set when creating new route
[  180.061071][ T9892] IPv6: NLM_F_CREATE should be set when creating new route
[  180.063852][ T9892] IPv6: NLM_F_CREATE should be set when creating new route
[  180.072265][ T9892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  180.546058][ T9921] netlink: 'syz.1.1188': attribute type 7 has an invalid length.
[  180.560898][ T9921] netlink: 'syz.1.1188': attribute type 8 has an invalid length.
[  181.289447][ T9978] unsupported nlmsg_type 40
[  182.116400][T10056] __nla_validate_parse: 8 callbacks suppressed
[  182.116411][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1216'.
[  182.127694][T10058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1217'.
[  182.157244][T10058] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  182.165996][T10058] bond1 (unregistering): Released all slaves
[  182.379423][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'.
[  182.384918][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'.
[  182.514128][T10088] syzkaller0: entered promiscuous mode
[  182.519114][T10088] syzkaller0: entered allmulticast mode
[  182.584707][T10096] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1228'.
[  182.628735][T10090] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1226'.
[  182.720918][T10107] netlink: 'syz.1.1231': attribute type 3 has an invalid length.
[  182.725186][T10107] netlink: 'syz.1.1231': attribute type 1 has an invalid length.
[  182.731496][T10107] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1231'.
[  182.796636][T10110] VFS_BUG_ON_INODE(inode_state_read_once(inode) & (I_FREEING | I_CLEAR)): inode:ffff8881bea42b00 fs:sockfs mode:140777 opflags:0x8 flags:0x0 state:0x300 count:0
[  182.811665][T10111] smc: removing ib device syz2
[  182.844615][T10110] ------------[ cut here ]------------
[  182.846941][T10110] kernel BUG at fs/inode.c:1980!
[  182.856467][T10110] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  182.858361][T10110] CPU: 1 UID: 0 PID: 10110 Comm: syz.0.1232 Not tainted syzkaller #0 PREEMPT(full) 
[  182.861059][T10110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.863924][T10110] RIP: 0010:iput+0xe24/0xe80
[  182.865508][T10110] Code: ff 48 8b 7c 24 20 48 c7 c6 20 64 de 8b e8 24 3b 00 00 90 0f 0b e8 cc 01 7b ff 48 89 df 48 c7 c6 a0 63 de 8b e8 0d 3b 00 00 90 <0f> 0b 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c3 fb ff ff 48 89 ef e8
[  182.871979][T10110] RSP: 0018:ffffc90003817078 EFLAGS: 00010246
[  182.873761][T10110] RAX: 4ea75b1a35749000 RBX: ffff8881bea42b00 RCX: 4ea75b1a35749000
[  182.876091][T10110] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  182.878460][T10110] RBP: ffff8881bea42cf8 R08: ffffc90003816c67 R09: 1ffff92000702d8c
[  182.880767][T10110] R10: dffffc0000000000 R11: fffff52000702d8d R12: 1ffff11037d4859f
[  182.883721][T10110] R13: ffff8881bea42b80 R14: 0000000000000300 R15: 1ffffffff2061918
[  182.886670][T10110] FS:  00007f4e10b116c0(0000) GS:ffff8882a9293000(0000) knlGS:0000000000000000
[  182.889996][T10110] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  182.892353][T10110] CR2: 000055558a3004e8 CR3: 000000016afca000 CR4: 00000000000006f0
[  182.895225][T10110] Call Trace:
[  182.896251][T10110]  <TASK>
[  182.897153][T10110]  rxe_net_del+0x121/0x2e0
[  182.898459][T10110]  rxe_dellink+0x15/0x20
[  182.899678][T10110]  nldev_dellink+0x304/0x3d0
[  182.901080][T10110]  ? __pfx_nldev_dellink+0x10/0x10
[  182.902611][T10110]  ? apparmor_capable+0x126/0x170
[  182.904099][T10110]  ? bpf_lsm_capable+0x9/0x20
[  182.905497][T10110]  ? security_capable+0x7e/0x2c0
[  182.906945][T10110]  ? __pfx_nldev_dellink+0x10/0x10
[  182.908516][T10110]  rdma_nl_rcv+0x6d1/0xa10
[  182.909815][T10110]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  182.911283][T10110]  ? netlink_deliver_tap+0x2e/0x1b0
[  182.913013][T10110]  ? netlink_deliver_tap+0x2e/0x1b0
[  182.914674][T10110]  netlink_unicast+0x75c/0x8e0
[  182.916046][T10110]  netlink_sendmsg+0x813/0xb40
[  182.917442][T10110]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.918948][T10110]  ? aa_sock_msg_perm+0xf1/0x1b0
[  182.920396][T10110]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  182.921921][T10110]  ____sys_sendmsg+0x972/0x9f0
[  182.923319][T10110]  ? __might_fault+0xaf/0x130
[  182.924674][T10110]  ? __pfx_____sys_sendmsg+0x10/0x10
[  182.926201][T10110]  ? import_iovec+0x73/0xa0
[  182.927514][T10110]  ___sys_sendmsg+0x2a5/0x360
[  182.928877][T10110]  ? __lock_acquire+0x6b5/0x2cf0
[  182.930318][T10110]  ? __pfx____sys_sendmsg+0x10/0x10
[  182.931808][T10110]  ? futex_wait+0x2a2/0x390
[  182.933165][T10110]  ? __fget_files+0x2a/0x420
[  182.934507][T10110]  ? __fget_files+0x3a0/0x420
[  182.935892][T10110]  __x64_sys_sendmsg+0x1bd/0x2a0
[  182.937438][T10110]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  182.939039][T10110]  ? rcu_is_watching+0x15/0xb0
[  182.940555][T10110]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.942309][T10110]  do_syscall_64+0x15f/0xf80
[  182.943664][T10110]  ? trace_irq_disable+0x3b/0x140
[  182.945241][T10110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.947046][T10110] RIP: 0033:0x7f4e0fb9cdd9
[  182.948377][T10110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.953854][T10110] RSP: 002b:00007f4e10b11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  182.956243][T10110] RAX: ffffffffffffffda RBX: 00007f4e0fe15fa0 RCX: 00007f4e0fb9cdd9
[  182.958481][T10110] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 0000000000000006
[  182.960708][T10110] RBP: 00007f4e0fc32d69 R08: 0000000000000000 R09: 0000000000000000
[  182.963051][T10110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.965469][T10110] R13: 00007f4e0fe16038 R14: 00007f4e0fe15fa0 R15: 00007ffe5d46af48
[  182.967740][T10110]  </TASK>
[  182.968640][T10110] Modules linked in:
[  182.970542][T10110] ---[ end trace 0000000000000000 ]---
[  182.984024][T10110] RIP: 0010:iput+0xe24/0xe80
[  182.987754][T10110] Code: ff 48 8b 7c 24 20 48 c7 c6 20 64 de 8b e8 24 3b 00 00 90 0f 0b e8 cc 01 7b ff 48 89 df 48 c7 c6 a0 63 de 8b e8 0d 3b 00 00 90 <0f> 0b 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c3 fb ff ff 48 89 ef e8
[  182.996807][T10110] RSP: 0018:ffffc90003817078 EFLAGS: 00010246
[  182.998678][T10110] RAX: 4ea75b1a35749000 RBX: ffff8881bea42b00 RCX: 4ea75b1a35749000
[  183.000799][T10111] smbdirect: ib_dev[syz2] removed
[  183.001310][T10110] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  183.005234][T10110] RBP: ffff8881bea42cf8 R08: ffffc90003816c67 R09: 1ffff92000702d8c
[  183.007874][T10110] R10: dffffc0000000000 R11: fffff52000702d8d R12: 1ffff11037d4859f
[  183.010917][T10110] R13: ffff8881bea42b80 R14: 0000000000000300 R15: 1ffffffff2061918
[  183.013481][T10110] FS:  00007f4e10b116c0(0000) GS:ffff8882a9293000(0000) knlGS:0000000000000000
[  183.016211][T10110] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.018277][T10110] CR2: 00007fa57abea2f8 CR3: 000000016afca000 CR4: 00000000000006f0
[  183.021017][T10110] Kernel panic - not syncing: Fatal exception
[  183.023579][T10110] Kernel Offset: disabled
[  183.024844][T10110] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:32:48  Registers:
info registers vcpu 0

CPU#0
RAX=ffffc90008060000 RBX=1ffff1102d8aca74 RCX=ffff88816d593b00 RDX=0000000000010000
RSI=ffff88816c564000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc90000007e68
R8 =ffffffff903095f7 R9 =1ffffffff20612be R10=dffffc0000000000 R11=ffffffff86a38b30
R12=dffffc0000000000 R13=ffff88816c5653a0 R14=ffff88816c564000 R15=ffff888113e98b00
RIP=ffffffff86a38b78 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558a300500 ffffffff 00c00000
GS =0000 ffff88818dc93000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa57b7456b8 CR3=000000016f260000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff96cdc318 RBX=00000000000003dd RCX=0000000000000052 RDX=ffffffff96c992c8
RSI=ffff88816c9d2a28 RDI=00000000000003dd RBP=bf657a49a54a879b RSP=ffffc90003806680
R8 =ffffc90003806648 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff81a20c90
R12=ffffffff96c9f998 R13=ffffffff93e4c530 R14=ffff88816c9d1d80 R15=0000000000000051
RIP=ffffffff81a1bb9b RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4e10af06c0 ffffffff 00c00000
GS =0000 ffff8882a9293000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558a3004e8 CR3=000000016afca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=2df0030804002dec 033804002de80300
XMM02=002df80302b8c804 84002df403010400 XMM03=0ff0808082048800 2e800302b8c40484
XMM04=10c00302100010b0 0305a01000029003 XMM05=0100100010800401 000002080606016b
XMM06=a800080010e00300 100010d003001000 XMM07=10c00302100010b0 0305a01000029003
XMM08=0ff0808082048800 2e800302b8c40484 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
