last executing test programs:

1m38.381511713s ago: executing program 2 (id=3545):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0xfffffffffffffd9d}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000034)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000829bd7000fcdbdf25000000000c000f006c0a00000000000014001f000000000000000000000000000000000008000a0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1040}, 0x806)
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_HASH={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x2, {0x4, 0x8, 0x1, 0xfef, 0x4}})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x2, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x2, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x2321, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x8, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x96, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x8, 0x9, 0x2, 0x7ff, 0xa38, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x80240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x120, 0x40, 0x2, 0x3, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x0, 0xdd6, 0x80000001, 0xffff, 0x0, 0x4, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0xff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x7, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x400, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x6, 0x7, 0x7, 0xfffdffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x10, 0x8, 0x5, 0x9, 0x1, 0x0, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x637, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x9, 0x7, 0xf, 0x10001, 0x0, 0x101, 0x79a1, 0x3ef, 0x5, 0x4, 0x2, 0xffffff01, 0x3, 0xf, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x2, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x133, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x15, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x7, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014)
socket$nl_route(0x10, 0x3, 0x0)

1m38.38097544s ago: executing program 2 (id=3546):
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}]}, 0x48}}, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000700)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b9cb080b4e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd65a1333a", 0x84}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000800)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09", 0x22}], 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="b80000000000000029000000040000002e13000000000000070800000003003b060007618093d6953e3cf69f8741e27308de243698099e6f9e3703cf9552657db2edc4002bff008bdf72be72e6b97dab5d4a0b91368071aca885def2fc50e3d8ed58b9b40f4a336aeefa8ba4d60e016c9f52021b41c43590eee6591dbc9305a06921cf0bea040108050201ff0f0321c8d50718000000000490ff0300000000000000000900000000000000000100040181c20400007fff00590000000000000029000000370000002e0000000000000005020009000000001400000000000000290000003e0000000400000000000000a063c1b07adb8a5bc3afb4de8f0888575b4e3e6e9676c274e328db"], 0xf0}}], 0x3, 0x24000045)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1000, 0x8000}, 0x4)
accept(r0, &(0x7f0000000080)=@can, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e2e2564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d000000000200002e2e2000000000000000"], 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0x2a0f5, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x30000000, @loopback}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000240), 0x0}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10)
close(r9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1004, &(0x7f0000002fc0)=""/4100, 0x41100, 0xd}, 0x94)
r10 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000980)=""/70, 0x46}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000780)=""/195, 0xc3}], 0x7}, 0x40002102)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
syz_emit_ethernet(0x7ff, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)

1m37.509805659s ago: executing program 2 (id=3553):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="21000000040000fffffe00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0d0000be7ea324000465e5ab8c5d590010000108", @ANYRES32=r0, @ANYBLOB="b41500"/20, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000740), &(0x7f0000000880)=r0}, 0x20)
close(r0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000fd00000000000000030006000000000002000000ac141400000000000000000002000100334eb9c4b700000000000000000000002003000500000000000200"/101], 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000800)='cubic', 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x110}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000017c0)=@gcm_256={{}, "41107f2d8c227eab", "2aade1aa965e611899c2a40889d4b110389398808b9d31cae1bc954b53e429e5", "33f3df93", "7e68d31c6375e358"}, 0x38)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="57ec03c11154196f5d2424000000520000002cbd70fd539930f04d053a2600ce4ea5c1485100fbdbdf250a0800060008000000080006007c0f00feff000034"], 0x24}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = socket(0x10, 0x803, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})

1m36.920938854s ago: executing program 0 (id=3557):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010000ffefcffff2fd9fcdc67adf5ad00", @ANYRES32=0x0, @ANYBLOB="00000000804003002000128008000100736974001400028005000a0001000000060008003a000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8005, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040)

1m36.841652922s ago: executing program 0 (id=3558):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0)
write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x9000}, @val={0x0, 0x3, 0x8, 0x80, 0x80, 0x43}, @mpls={[{0x262}, {0x7889}, {0xe1d, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0xffffd}, {0x3}], @llc={@llc={0x8e, 0xd4, 'A', "651e4ccf8620"}}}}, 0x2f)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x110}}, 0x1)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500ffffffff08000500", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) (async)
write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x9000}, @val={0x0, 0x3, 0x8, 0x80, 0x80, 0x43}, @mpls={[{0x262}, {0x7889}, {0xe1d, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0xffffd}, {0x3}], @llc={@llc={0x8e, 0xd4, 'A', "651e4ccf8620"}}}}, 0x2f) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x110}}, 0x1) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500ffffffff08000500", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async)

1m36.752000372s ago: executing program 0 (id=3559):
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r1=>0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}})
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0xfffffffffffffd54, 0x64, 0x0, 0xf9, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f00000006c0)="6a3072d134989ea1372b7d9f940094e3a7f7c7eee88c22ab47b7aaa5706561cc5b695e413e8305a216ba3518752f0da583101e763fca35c4566fd4a947448b108df1d37b7cc0b3f508aea41e202ea9388e18a8405313367a6888f2661a5cb6b12acb3ca88df6adae6ab710660dd54dc798", &(0x7f0000000ac0)=""/96, &(0x7f0000000dc0)="b706e4699d77fefa97d03b148c20f93a45eb2a85badcac6de1649413b1583fc1bbd25c8e1f005921a4fd4a5994ffe945618147c1f76d70435a4dff95e28a25f22f8c13580465d42288bd0f125c4ecdf77a9508fe709fc330301dc3109ce0f85b5ef1ddc52c83b871643bea6935c2fb40ac5df65e492ff6f8dca9f30a4a4db5ab6c7c0fc615996f16a298d739286e46a03d5d277e4c1f4de39f71ea3707a5c880acd25273c2259024a08644d9914309338d", &(0x7f0000000e80)="644889b138140663c40cbf2a24830dac1cc5b0030018b2370f974f9175bc640f1ec82b42f0443e9d7ae094192015cea26c285170a75966d36ca4cc849667534a9f5f52dc5b23c70e4cd94ad05c62aa2ec202de043abf7fb0b0f36dfd9dbda268d08bf85538bfa4976c79cc870f5ae4056f7d4a47c2fdb0e4511f44ec2278817e16e07179cd585d4c1c20cb520a913b7aeeefe07ecf0b8ce286914b1fe503a779515c75e3f885b4dd73d6b8ced83cd70ae9ecc2d5cdac196588a4d62f31", 0x5ed, r2}, 0x38)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_VFINFO_LIST={0x0, 0x16, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0x0, 0x9, {0x4c5, 0xffffff43}}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0x0, 0x4, {0x4, 0x4}}, @IFLA_VF_VLAN_LIST={0x0, 0xc, 0x0, 0x1, [{0x0, 0x1, {0x6, 0x993, 0x3, 0x88a8}}]}, @IFLA_VF_VLAN={0x0, 0x2, {0x0, 0xaee, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0x7, 0xf}}, @IFLA_VF_MAC={0x0, 0x1, {0x2427}}, @IFLA_VF_VLAN_LIST={0x0, 0xc, 0x0, 0x1, [{0x0, 0x1, {0x8, 0x987, 0x4, 0x8100}}, {0x0, 0x1, {0xffffff80, 0xb06, 0x8, 0x88a8}}, {0x0, 0x1, {0x3, 0x3b6, 0x401, 0x88a8}}, {0x0, 0x1, {0x9af6, 0x1dd, 0x1, 0x8100}}, {0x0, 0x1, {0x3, 0xbe2, 0x1, 0x8100}}, {0x0, 0x1, {0x9, 0xc67, 0x9, 0x8100}}, {0x0, 0x1, {0x1, 0xe0d, 0x101, 0x8100}}, {0x0, 0x1, {0x3cc6fe9a, 0xb3, 0x8, 0x88a8}}]}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC, @IFLA_VF_RATE={0x0, 0x6, {0x9, 0x9, 0xffffffff}}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0x0, 0x5, {0x3, 0x7}}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0x83, 0xfffffffffffffff8}}, @IFLA_VF_LINK_STATE={0x0, 0x5, {0xd2a, 0x7}}, @IFLA_VF_TX_RATE={0x0, 0x3, {0x5, 0x8}}, @IFLA_VF_RATE={0x0, 0x6, {0x1, 0x4, 0x1}}, @IFLA_VF_VLAN={0x0, 0x2, {0x75ec, 0x7c4, 0x7}}, @IFLA_VF_IB_NODE_GUID, @IFLA_VF_MAC={0x0, 0x1, {0x95, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, @IFLA_VF_RSS_QUERY_EN={0x0, 0x7, {0x101, 0x8}}]}]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r9, &(0x7f0000000040)={0x80000000})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c0000340002800800feff", @ANYRES32, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000)
r14 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r14, 0x84, 0x24, &(0x7f0000000040)=ANY=[], 0x1000f)
openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)

1m36.600751839s ago: executing program 0 (id=3560):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x3c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, 0x0, &(0x7f0000000940)}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={0xffffffffffffffff, r7}, 0xc)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20010080}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, 0x0, 0x0)
splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
write(r4, &(0x7f0000000240)="94", 0x1)
tee(r3, 0xffffffffffffffff, 0x8f5, 0x100000000000000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r13=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r13, @ANYRES16=r11, @ANYBLOB="010000fedbdf020d000000000300", @ANYRES32=r13, @ANYBLOB='$\x00/'], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x6000811)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r11, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x81)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff050006"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800)
write(r5, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0)

1m36.599609382s ago: executing program 2 (id=3561):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@none, 0x5})
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x2}, 0xe)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, <r3=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', <r4=>0x0, 0x7800, 0x7, 0x8, 0x2, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x40, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@generic={0x89, 0x8, "e1f00542e118"}]}}}}})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={<r5=>0xffffffffffffffff, 0x1, 0x5d7, 0x2fb7})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x3, <r6=>0x0}, 0x8)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4018, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x26, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfc9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, &(0x7f0000000240), 0x41100, 0x9, '\x00', r4, @fallback=0x33, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r2, 0x1, &(0x7f0000000400)=[r2, r1, r7], &(0x7f0000000440)=[{0x3, 0x3, 0xe, 0x3}], 0x10, 0x1}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pK    \x00'}, 0x20)
shutdown(r2, 0x0)
ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000000600)=0x7)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000640)=r2, 0x4)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000680)={0x0, 0x1, 0x75, r4, 0x3}, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000700)={'gre0\x00', <r9=>r4, 0x1, 0x3, 0x4, 0xffff, {{0x3e, 0x4, 0x1, 0x2b, 0xf8, 0x66, 0x0, 0x3, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x24, 0xea, 0x1, 0x0, [{@local, 0x80000000}, {@loopback, 0x6}, {@private=0xa010101, 0xff}, {@broadcast, 0xffff}]}, @timestamp_addr={0x44, 0x3c, 0xd3, 0x1, 0x9, [{@local, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcf8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf929}, {@loopback, 0x6}, {@rand_addr=0x64010100, 0x2}, {@multicast2, 0x4749}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc8b}]}, @cipso={0x86, 0x3b, 0x0, [{0x6, 0xf, "2c9737d5be2a1eab0130595730"}, {0x7, 0x11, "ef1dd65a0d5120c1e598128e97a0d8"}, {0x1, 0x4, "85ac"}, {0x0, 0x11, "acd333b228c511bd50df4efc755c90"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xda, [@local]}, @end, @cipso={0x86, 0x14, 0x1, [{0x1, 0xe, "0129f0173f8592dc04ccabd9"}]}, @rr={0x7, 0x27, 0x9a, [@private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @local, @empty, @broadcast, @rand_addr=0x64010102]}]}}}}})
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000880)={@private0, <r10=>0x0}, &(0x7f00000008c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000900)={'wg1\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000e40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000940)={0x498, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe8}}}]}}, {{0x8, 0x1, r9}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcfd}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdc50}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb090}}}]}}, {{0x8, 0x1, r4}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf53}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x4008005}, 0x24000080)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r2)
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x198, r13, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x43f}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x207}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x77}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf361}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x45}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x208}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfdb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x719}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x1}, 0x24048085)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000001140)={0x0, r5})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001180)={'batadv0\x00'})
ioctl$VHOST_VDPA_SET_GROUP_ASID(r5, 0x4008af7c, &(0x7f00000011c0)={0x3, 0xb2ab})
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r14, 0x8983, &(0x7f0000001200)={0x0, 'veth0_virt_wifi\x00', {0x2}, 0x1ff})
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001240)=<r15=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r15, r1, 0x0, 0x5, &(0x7f0000001280)='.),,\x00'}, 0x30)

1m36.469777283s ago: executing program 0 (id=3563):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r3, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000088a5001000020000000c00018005000200010000"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1e, 0x2, 0x4, 0xdcd, 0x40000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xb, &(0x7f00000001c0)=@raw=[@alu={0xfa5010682102369b, 0x1, 0xc, 0x9, 0x8, 0xfffffffffffffffe, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x8e}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x80000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r9}], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)

1m36.408430461s ago: executing program 2 (id=3564):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5000005, 0x11, r4, 0x1662f000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4441240a}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x4008080)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000340))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400)={<r9=>0x0}, &(0x7f0000000440)=0xc)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)=<r10=>0x0)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000004c0)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804)
r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VRING_NUM(r12, 0x8002af76, &(0x7f0000000640))
r13 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000680)={0x8000000a})
write$nci(r6, &(0x7f00000006c0)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x23, "51308a8d5ce3feaf6f233d49d667b8664d559d54e0cde8001e28e6d25b239c0fed70eea052acd10965080a93112746e9e97e34d23e896cce8dad7f3495408a89345f7372b48e82b2b09525318225b8113f76cf4fac23aa0f7236fcbed50bc5316abff17c34ac6df77a06ef54dc50bf38c6cc090027e95f48cefc1278eba1b42e7d41a5dbb82b"}, 0x89)
write$nci(r6, &(0x7f0000000780)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0xc}, 0x4)
r14 = accept$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000800)=0x1c)
bind$inet6(r14, &(0x7f0000000840)={0xa, 0x4e22, 0x7, @remote, 0xc6}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x141080, 0x0)
r15 = socket(0x3, 0x1, 0x10000)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r15, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r16, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaa2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1310}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xeaf}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc47}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6c3}]}, 0x5c}}, 0x4000000)
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r13, &(0x7f0000000a40)={0x80002002})

1m36.407775354s ago: executing program 0 (id=3565):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001403000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000007c000000b700000001000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a7c31de7910d1ed4065a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3503680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dacfeb47479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3de8726c2a61ec45c19f97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9bdce38c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4af05c28308241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5490f6589880ed6eea7b9c670012be05e7de0940313c5870786554df2623d58f5ace92d028f2c71a6ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77962a2cd8a104e16b77d5f7f13b1640d43e11801140caf1a8b1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b905fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf34117a82a96b2ced73abb8e4bb718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000001762e5f5a3a0bc33fdbe28a5ffc83f2f08544eb2794e7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f85d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d801002653c4d9818708e27c89b552d3fcd11ebce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff2a8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4000000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782ae57773e0d8b0ab900edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0bd91e328b6a6f732a91f0e2e9120be61e58c79d497247d278888901d44bf77ff246605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c2d0836395fe39f0e11c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc71300000000000021000000b12f0ec0412268860027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b50f3ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861ddb54684cb73e7aeefae47fa09fd88e6043bd52ae84c1bb0c8a6b769f952283a1f4e3842edb3d42c68a2102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e81163bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4c4b51b1f922a44ec675203bf8d1548e49262727c3de6daab3b4ed15aa99802e45d0620617e839b5237ddfcf103c91e61d174e3be6c9fd47398797e3b814e751ff31ecb42de6dd9d6b88121aaa680c236a303914e00150e1ec3f144ebc28287d5b51cfb8cabb844d12b140767d0fc24425590024b2e431722392489e3d43b3e31438a0138988083c47c61384d54e9a40fba01cac6e59ec82edc764840fe551c1d57442970cd8e59b9f41094e158c0a1ee855d8515599685486c2a21fa1c107531a0db8306441e8408b34aa90e9736e672d74cb8e78f8bdb93a23d024fc200796836ab396911a56231e953efad6cd83db32ffc595d970108e9547ea0000002730d5d1b70fe8b458ac1651135037b6cb9c8053299f77ab84c5b9fd2f764c3caa9c69377c397d310ddc7bc4bfa165def7b49e28ef196ae263b6829a8419d8860f56c86c288964ac4bc19839d96ff24b981c3a4fd6f93a000000ea9d6b06dafae4c91177", @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8001}, 0x10}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x55, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0xb, 0x4}}}}]}, 0x40}}, 0x0)

1m36.200041518s ago: executing program 32 (id=3565):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8001}, 0x10}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x55, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0xb, 0x4}}}}]}, 0x40}}, 0x0)

1m36.150789114s ago: executing program 2 (id=3567):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x44844}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000)
r0 = socket$inet(0x2, 0x1, 0x8)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000540)={{0x2, 0x4e23, @loopback}, {0x0, @random="e20b2e3cc763"}, 0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 'veth1_to_bond\x00'})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', <r4=>0x0, 0x46, 0x0, 0x7ff, 0x3, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x64, 0x0, 0xfd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop]}}}}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)={0xa8, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xd4}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
unshare(0x2c020400)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000001ac2692500000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000008c0)={{0x2, 0x4e21, @broadcast}, {0x1, @multicast}, 0x0, {0x2, 0x4e21, @loopback}, 'pim6reg0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffe0, 0xffff}, {0x5, 0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m36.148153288s ago: executing program 33 (id=3567):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x44844}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000)
r0 = socket$inet(0x2, 0x1, 0x8)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000540)={{0x2, 0x4e23, @loopback}, {0x0, @random="e20b2e3cc763"}, 0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 'veth1_to_bond\x00'})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', <r4=>0x0, 0x46, 0x0, 0x7ff, 0x3, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x64, 0x0, 0xfd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop]}}}}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)={0xa8, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xd4}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
unshare(0x2c020400)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000001ac2692500000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000008c0)={{0x2, 0x4e21, @broadcast}, {0x1, @multicast}, 0x0, {0x2, 0x4e21, @loopback}, 'pim6reg0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffe0, 0xffff}, {0x5, 0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.860497028s ago: executing program 4 (id=4824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r2=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f00000004c0)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0xfc, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r5, 0x89f0, &(0x7f0000000000))
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
close(r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
recvfrom$rose(r6, &(0x7f0000001dc0)=""/4096, 0x1000, 0x40000100, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.696729715s ago: executing program 4 (id=4828):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x19, &(0x7f0000000300)}, 0xd)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) (async)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)

2.690331447s ago: executing program 4 (id=4829):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000002b000b00000000000000000009000000ce8880e26996f045e606dd90b94bf4c42ef1b895da80c998d24f0b5d187d3a2cbacd56086000fd438216210dcc56134dfb9f94ef718a7609991db8f8c68e959ae9d142ad8836e6380530fc511c0f95075f94b1a008d475810dbe3035ea46ac"], 0x14}, 0x1, 0x0, 0x0, 0x50800}, 0x0)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6}, 0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x4c, 0x11, 0x1, 0x70bd27, 0x25dedbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xa}, {0xfff3, 0xc}, {0xfff2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x87ac}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x5, 0x9fd, 0x88, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x40000000, 0x2}, 0x50)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="ac0000002d0001000000001000000000010000000c00110020000000000000001400010000000150bb2d6f67d29d6fab1cb4f78fadb107d0def49c88ea04a2de1d5e8d3fb22a1b50467768bf84b36ec72dd71265fc2e0100000000e2ffff04bc15f15a37572ee73cd7da2d04761c0239c777a5f8d3c204dab56550d3e741ca48c26c0aa6237dd5b37f5ae655b1086cbe31d750351dc076eb43d9621dc0a0029d1608a48743ca1bf46b89f7cb8100"/190], 0xac}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f00000000c0)="1c72", 0x2)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x20)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000000000de000002000000fa00000400000000000000000000000000000040b18f5889383960b5720568dc9d0d7dd22522ab7838b585af4904641275078851ca1fb7281c37e26e7de788d151ef072c911d8e032a526bbbb3dfa761323c144078facfcb062a0e2cf53545e56fbe7f0424cc8c34846562e882e5290c95e044bd7d031c38ffa4500c4fd46154caa7f713b47a81c32730f746ad8d00000000000000", @ANYRES32, @ANYBLOB="05001b003a000000"], 0x2c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="0995558eb8a0", 0x6}, {&(0x7f0000000380)="863942f9238a397e8b63a67df6abcc49052a97fa3f7173a2f314b7bc6715af575bb74dd7abafcd488c0f99c2aff2cc2bd452dbca07691b52f123882bfb76d47678618bc8d4594fafe8cf0be6f214dd88eeff96fe13f0675992cebaf53e07349d1189d89f7c17ac32cd2208770115e6f882fc9719c0601c5100948327e51c672dd87e75a486916d38aa609e85ea1af8193c2260c009d2f729f9dc40f93029cbd4f50940a3fd9e004695ca3050bca1b24841d944618458fc", 0xb7}, {&(0x7f0000000440)="eaa6b6829c52ec3d57f1de18df3d737ed9ad45f558a3828706124322441e157501a5b05a968de2b639d86996a80cb823d7012e49e70ae6d65f50e3890842e7d20f744c294bdb208b8ee238d20e595a0b3fdbdb748cfc36fcf99079fe2d480e5c48b3f473c223ecdd70d5e3db4931dac07fa89dc458c180b8b34f37730ca9c4d0d2d8354cfe8bf521441e200577c4bc908e9d256c9bbad016dcb6592be643f64234a6c9d27595829f50207a6bdddfd1c707b56d3633a849db683c910ef5ab978de21c4c91463dae7ed7090e0d3739861a62f3a8e5ad", 0xd5}, {&(0x7f0000000540)="3b6629d23f26728c5cf71ebe0830d64574bc974974bbc5ad13f07c5d1254af7de34acf664bf756dfad5c60f3098cd3349139e250af5e70853c65460d7fdaf42d48ed40c25fd8e1c4f36623ef6fb185510f87f4adb93463fb7bdf366aa58b5210a8f26e431672a48b72e25e47c72136a1a4b559448a068669e9318118805f281c2a22d2a95c8462f328f7d3a20322961fcd3c3d01341480138c45041183582b4b722275ecb0bfb3e87fafdd", 0xab}, {&(0x7f0000000840)="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", 0x1000}], 0x5, &(0x7f0000001840)=[{0x30, 0x10a, 0x8, "8a4611674fcbd6424f95afec6880ebead8071d595295315470bbc098f2cd25de"}, {0xe0, 0x29, 0x885, "6c80c74926e3d1b924c7e1166d942be08e39ffcaf85bed5be96250c6837dcb8f7a85c12f36ca6005f33d8d6e11c4cafdc6175cf707ae73bc3501c9217583cb1161bdf63d13295de174e2f642831eba793cf30f22b8932dcc1c5905a282670dfbf474e2d6749bd3540c286d24c918651477bf6b72cad67192122079687b4b87105fc7d7dbeb7d37f0fbead821e2d69c3e6e163648406cec30414e842979cc0382073c6bed0a92cd3f01a936b6391e77d0a2c476b518a0e7b4f11608c278cc8c53670579fbfb9bf2f0e59739afe6e561b5"}, {0x80, 0x0, 0x7, "d14b6976ca4af583bb45713036887fe3fb24579f0e90b7a5948688bcf38fd470e9cea6bea691c8d0dc5b9f2f093fa295525a8c009cc76711d439a23a5dd2bd083b6b74f98232e074a27858955bf9c5abc80d674b1b403524d8dcf2503d690f4963339a665e878ab0eaf07f41ef"}], 0x190}, 0x10)

1.890207689s ago: executing program 4 (id=4837):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2d, 0x5, 0x6, 0x8, 0x19, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8, 0x80, 0x82b5, 0x1}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', <r2=>0x0, 0x2d, 0x5, 0x6, 0x8, 0x19, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8, 0x80, 0x82b5, 0x1}})
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @remote}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
syz_emit_ethernet(0x0, 0x0, 0x0)

1.625068636s ago: executing program 1 (id=4838):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x9075, @local, 0x9}]}, &(0x7f0000000040)=0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x1, 0xd, 0x40}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, 0x0, &(0x7f0000001580)=""/92}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg$can_j1939(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000001640)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/187, 0xbb}, {&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000001400)=""/140, 0x8c}, {&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001700)=""/215, 0xd7}, {&(0x7f0000001800)=""/135, 0x87}], 0x7, &(0x7f0000000180)=""/57, 0x39}, 0x2001)
bind$netlink(r4, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) (async)
bind$netlink(r4, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[], 0xd4}}, 0x0)
shutdown(r0, 0x2) (async)
shutdown(r0, 0x2)

1.609836389s ago: executing program 4 (id=4840):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[], 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0xfffffffffffffffe)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
unshare(0x6020480)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000084)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r11 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r10, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r12, @ANYBLOB="030300000000000000002a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20)
openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000400000000020000095000000000000000d0f36228f30bb14d96a1bfbcd5be9ee9e93d21a63d3e87821dc640f48fd340fd9817be9defae943d990621d0700"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r5}, 0x94)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001fe0ffe0000000000000c00010094040000000000000d00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2], 0x80}}, 0x8000)

1.527222407s ago: executing program 1 (id=4841):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400})
r1 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}, 0x1, 0x0, 0x0, 0x448c4}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="00042abd7000fddbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000240000000a00f500367b26da873c00001400550060cf68b44dc20efa71f470fcf270c0110a00f500505050505050000021003400396ee1dba710390a3869f40e93a16e70536cf5d7c841d2ffdd7ad783ce000000140055004a468fc2372164da784b700a00f500b01023da121900000a00f500ffffffffffff00000a00f500114d781827dc000000000000001c4960c7ccc2e0e5d6391b035f33aed556d8ed76c555676eb85702"], 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r6=>0x0})
socket$kcm(0x2c, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd0525816d6b67bf927e4a75ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0)

1.380226102s ago: executing program 1 (id=4843):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000002c0), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="e838293a71606e1cf46c4b23669bb556060e493d51c182e3d998c40ce121c55669b5f0ed36e5a262dea2f1b4fe1758fafddd11ada735544e8a8d59b2fc929a1a2951b4ad99d6e558009f951c78d81e0e0442ca", @ANYRES64=0x0, @ANYRES64], 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r1 = socket(0x10, 0x2, 0x335)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d00000000686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006000000"], 0x50}, 0x1, 0x0, 0x0, 0xc014}, 0x4c080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a3100000000e9ff000900000000180007800c00018008000140fffffffe0500030008000000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108000000000000fbff090000040500014007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r5 = socket(0x28, 0x80805, 0x80000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={<r8=>r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10)
r9 = socket$unix(0x1, 0x2, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r10}, 0x20)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@deltclass={0x38, 0x29, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x1}, {0x0, 0x10}, {0xffe0, 0xffe0}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xfe, 0x5}}]}, 0x38}}, 0x0)

1.150458708s ago: executing program 4 (id=4845):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="e9789b5717bd6185e08d6e15fa3e7eb04f71879422373562f9703804ce8bc360605883df397d51891ab11f111fb1a475cc4909a2070ae6c23529d5974d22af0a36aa598d588067f63739ef73fec0ab129b7a50ea438f6cc2948d05c681c72f1044b5cf5f4094fe45e6c4389b9c85cf2e246cb8b9b70a648bdbdf2a313cab82e6c8d15a6c55cf5ad030f2"], 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80080, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x64, 0x0, 0xb, 0x2f, 0x0, @private=0xa0100fe, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x51}]}}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b75a9ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c9eaacb5793498be490de32baba49172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19411e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb97800763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f60"}}, 0xfce)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'dvmrp1\x00', 0x7101})
r5 = socket(0x23, 0x3, 0x3)
socket$unix(0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, r7, 0x607, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}}, 0x8010)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f00000000c0)={@none, 0x401})
r8 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x1d, &(0x7f0000000fc0), 0x4)
shutdown(0xffffffffffffffff, 0x1)
ioctl$FIOCLEX(r8, 0x5451)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0xa000, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x5}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x2b0}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.088019357s ago: executing program 3 (id=4848):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x94}}, 0x0)

999.976278ms ago: executing program 3 (id=4849):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@initdev, @empty}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x3, 0x0, 0x0, 0x1000000}, {0x6, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x34}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

930.155505ms ago: executing program 3 (id=4850):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x20, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x20}}, 0x0)

929.338384ms ago: executing program 3 (id=4851):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x8080)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r1, &(0x7f0000002ec0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xb, @private2, 0x9}, 0x1c, 0x0}}], 0x1, 0x40000)

885.254556ms ago: executing program 3 (id=4852):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x1, 0x100)
setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4)
listen(r1, 0x7)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="d8000000000203000000000000000000020000053c0002802c00018014000300fc00000000000000000000000000000114000400000000000000000000000000000000010c00028005000100210000000400038004000180"], 0xd8}}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}})
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000a0101020000000000000000000000000a010100000000df00000000000000000a000609"], 0x38}}, 0x20040810)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10)
ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f0000000580)={0x1, @bcast, @netrom={'nr', 0x0}, 0x5, 'syz0\x00', @bcast, 0xffffffff, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
write(r7, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24)
setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000240), 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x44, r9, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x13}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x1804)
r10 = socket$inet(0xa, 0x801, 0x84)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000fc0)={0x0, @in6={{0xa, 0x4e20, 0x200, @local, 0xb4}}, [0x2, 0x38, 0x3, 0xffffffffffff0000, 0x7e, 0xfffffffffffffffb, 0xc54e, 0x40, 0x6, 0x40, 0x2e66, 0xf, 0x0, 0x7, 0x10000]}, &(0x7f00000001c0)=0x100)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r12 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r13=>0x0})
sendmsg$can_raw(r12, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r13}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r11, 0x9c3fa077fa966179, 0x70bd29, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)

520.15569ms ago: executing program 1 (id=4853):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0x41004, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2588c0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=<r5=>r4, @ANYRESDEC=r1], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2002000000200500280012800b00010065727370616e00001800028004001200050016"], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2002000000200500280012800b00010065727370616e00001800028004001200050016"], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
r8 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
socket$unix(0x1, 0x1, 0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newchain={0xfffffe63, 0x64, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x2, 0x7}, {0x4, 0x1}, {0x5, 0x3}}, [@TCA_RATE={0x0, 0x5, {0xf9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

430.740958ms ago: executing program 1 (id=4854):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r3, &(0x7f0000000940), 0x10)
listen(r3, 0x0) (async)
listen(r3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000040))
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$kcm(0x10, 0x0, 0x0) (async)
r6 = socket$kcm(0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d57"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) (async)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/304], &(0x7f00000004c0)='GPL\x00', 0xbd, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async)
setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)

280.041232ms ago: executing program 1 (id=4855):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d})
r3 = socket$kcm(0xa, 0x1, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1e087900f4ffffff000000000700eb47eac9ee71", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4})
r5 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={<r6=>r5})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4})
epoll_create1(0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
readv(r10, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1)
recvmmsg(r3, &(0x7f0000001980), 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
getsockopt$bt_hci(r8, 0x84, 0x1, &(0x7f0000000000)=""/4087, &(0x7f0000001000)=0xff7)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=ANY=[@ANYBLOB="3400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280d3305a4371070fad61bd644632bbe4d1dfe891ed9c7e85aa77ded8bb841cb798e7fac3175e9f67124165f8b53604f99d8151ae2259db88fa99e5ef9051b4985516838e3eeeb5a53551e3acd0b25a27976133710da412d046d39f38b94b1a2b1562c27195899978927d14107f9b61341a8a7ea70f6a191edb343ebe6daf23e6729db1ed6b9278abb867bdc6e1ff29c0b90dc2a8a451683ef530ead195b94e7f2a1ec37b8e84d77e2d481c60e63b95ffeaf9582ebf549355ff07000000000000b33048753ae40074fe58714754a37389249539e9207e4afac2eeaf956d258aa4e721cb92a9"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x8, 0x7, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r12, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

0s ago: executing program 3 (id=4856):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x40045)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4f03, 0x41d, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x17}, 0x2004c0c1)
bind$bt_hci(r2, &(0x7f0000002840)={0x27, 0x4, 0x2}, 0x6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x6)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
getsockopt$ax25_int(r4, 0x101, 0x2, 0x0, &(0x7f0000000040))
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x58, 0x1, 0x8}, {0x0, 0x0, 0x2, 0x8}, {0x4, 0x4, 0x40, 0x7}]})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000003c0)=@req={0x1, 0x2, 0xc0f, 0x5}, 0x10)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r9, 0x20, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x804)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

kernel console output (not intermixed with test programs):

ory.db failed with error -2
[  277.105819][T18153] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  277.128965][T18154] netlink: 'syz.0.3399': attribute type 4 has an invalid length.
[  277.130444][T18151] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  277.342749][T18154] tipc: Resetting bearer <eth:syzkaller0>
[  277.394827][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.397589][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.403625][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.407465][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.439006][T18165] batadv_slave_0: entered promiscuous mode
[  277.574832][T18176] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  277.577727][T18176] openvswitch: netlink: Message has 6332 unknown bytes.
[  277.634184][T18180] netlink: 'syz.0.3407': attribute type 1 has an invalid length.
[  277.657391][T18180] bond25: entered promiscuous mode
[  277.659294][T18180] bond25: entered allmulticast mode
[  277.662147][T18180] 8021q: adding VLAN 0 to HW filter on device bond25
[  277.681120][T18180] 8021q: adding VLAN 0 to HW filter on device bond26
[  277.685224][T18180] bond26: entered promiscuous mode
[  277.687289][T18180] bond26: entered allmulticast mode
[  277.689382][T18180] bond25: (slave bond26): Enslaving as a backup interface with a down link
[  277.943284][T18196] bridge12: entered promiscuous mode
[  277.945054][T18196] bridge12: entered allmulticast mode
[  278.317814][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.331330][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.396837][T18241] netlink: 'syz.0.3421': attribute type 3 has an invalid length.
[  278.404422][T18241] netlink: 'syz.0.3421': attribute type 3 has an invalid length.
[  278.425604][T18243] tipc: Resetting bearer <eth:gre0>
[  278.428019][T18243] tipc: Resetting bearer <eth:gre0>
[  278.438987][T18243] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.443731][T18243] 8021q: adding VLAN 0 to HW filter on device team0
[  278.451723][T18243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.473994][T18240] veth0: entered promiscuous mode
[  278.611740][T18240] veth0: left promiscuous mode
[  279.049008][T18273] wg2: Caught tx_queue_len zero misconfig
[  279.263856][T18298] __nla_validate_parse: 25 callbacks suppressed
[  279.263867][T18298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3439'.
[  279.276946][T18297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3438'.
[  279.303851][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3439'.
[  279.338601][T18300] tipc: Resetting bearer <eth:gre0>
[  279.361796][T18300] ..1: left allmulticast mode
[  279.363431][T18300] hsr_slave_0: left allmulticast mode
[  279.365335][T18300] hsr_slave_1: left allmulticast mode
[  279.376344][T18300] geneve3: left allmulticast mode
[  279.383562][T18300] vlan5: left allmulticast mode
[  279.385151][T18300] bond26: left allmulticast mode
[  279.387195][T18300] vlan6: left allmulticast mode
[  279.388800][T18300] geneve1: left allmulticast mode
[  279.393416][T18300] bridge0: left allmulticast mode
[  279.406362][T18298] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3439'.
[  279.411536][T18298] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3439'.
[  279.414959][T18298] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3439'.
[  279.419226][T18298] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3439'.
[  279.423657][T18298] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3439'.
[  279.427451][T18298] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3439'.
[  279.432235][T18298] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3439'.
[  279.437931][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.451524][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.459142][T18306] IPv6: NLM_F_REPLACE set, but no existing node found!
[  279.470928][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.474341][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.797989][T18349] sctp: [Deprecated]: syz.0.3454 (pid 18349) Use of int in max_burst socket option.
[  279.797989][T18349] Use struct sctp_assoc_value instead
[  279.879206][T18354] validate_nla: 5 callbacks suppressed
[  279.879225][T18354] netlink: 'syz.0.3455': attribute type 2 has an invalid length.
[  280.038829][T18357] netlink: 'syz.0.3456': attribute type 1 has an invalid length.
[  280.075551][T18357] gretap5: entered allmulticast mode
[  280.083119][T18357] bond28: (slave gretap5): making interface the new active one
[  280.086910][T18357] bond28: (slave gretap5): Enslaving as an active interface with an up link
[  280.183522][T18369] netlink: 'syz.0.3457': attribute type 1 has an invalid length.
[  280.422660][T18378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  280.449703][T18373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.535681][T18387] tipc: Resetting bearer <eth:gre0>
[  280.551660][T18387] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.556129][T18387] 8021q: adding VLAN 0 to HW filter on device team0
[  280.562203][T18387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.606289][T18389] tc_dump_action: action bad kind
[  280.805015][T18404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.872126][T18411] openvswitch: netlink: Flow key attr not present in new flow.
[  280.979904][T18423] netlink: 'syz.1.3474': attribute type 6 has an invalid length.
[  280.983610][T18424] netlink: 'syz.1.3474': attribute type 6 has an invalid length.
[  281.012240][T18423] netlink: 'syz.1.3474': attribute type 7 has an invalid length.
[  281.069080][T18431] netlink: 'syz.0.3477': attribute type 1 has an invalid length.
[  281.096147][T18431] 8021q: adding VLAN 0 to HW filter on device bond29
[  281.114757][T18431] bond29: (slave geneve3): making interface the new active one
[  281.118845][T18431] bond29: (slave geneve3): Enslaving as an active interface with an up link
[  281.122873][ T5877] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.126731][ T5877] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.131149][ T5877] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.136136][T18431] bond29: entered promiscuous mode
[  281.137925][T18431] geneve3: entered promiscuous mode
[  281.143764][ T5877] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.621320][T18463] syzkaller1: tun_chr_ioctl cmd 2148553947
[  282.158228][T18498] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  282.167135][T18499] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  282.292898][T18520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.333088][T18523] netlink: 'syz.2.3503': attribute type 1 has an invalid length.
[  282.373182][T18523] 8021q: adding VLAN 0 to HW filter on device bond28
[  282.408892][T18523] 8021q: adding VLAN 0 to HW filter on device bond28
[  282.412022][T18523] bond28: (slave vxcan1): The slave device specified does not support setting the MAC address
[  282.416069][T18523] bond28: (slave vxcan1): Error -95 calling set_mac_address
[  282.447345][T14572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.453134][T14572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.550902][T18539] : renamed from team_slave_1
[  282.642373][T18545] tipc: Resetting bearer <eth:gre0>
[  282.732672][T18545] tipc: Resetting bearer <eth:syzkaller0>
[  282.739361][T18545] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  282.747178][T18545] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  282.797304][T18558] netlink: 'syz.0.3508': attribute type 4 has an invalid length.
[  282.804152][T18558] netlink: 'syz.0.3508': attribute type 4 has an invalid length.
[  283.058417][T18570] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  283.062149][T18570] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  283.193675][T14572] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  284.174896][T18647] 8021q: adding VLAN 0 to HW filter on device bond29
[  284.447893][T18666] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  284.466226][T18664] __nla_validate_parse: 38 callbacks suppressed
[  284.466243][T18664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3539'.
[  284.487980][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.493380][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.516161][T18664] tipc: Resetting bearer <eth:gre0>
[  284.668325][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3543'.
[  284.678860][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  284.683160][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3543'.
[  284.686621][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.691027][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.695578][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  284.702171][T18682] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3544'.
[  284.719801][ T5877] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.724252][ T5877] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.727862][ T5877] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.732040][ T5877] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.764280][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'.
[  285.338194][T18695] validate_nla: 6 callbacks suppressed
[  285.338210][T18695] netlink: 'syz.0.3548': attribute type 10 has an invalid length.
[  285.344687][T18695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3548'.
[  285.381347][ T5877] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.385022][ T5877] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.388678][ T5877] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.392473][ T5877] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.187772][T18714] netlink: 'syz.0.3555': attribute type 1 has an invalid length.
[  286.221377][T18716] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3556'.
[  286.225781][T18716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3556'.
[  286.232627][T18716] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  286.384139][T18725] netlink: 'syz.0.3559': attribute type 1 has an invalid length.
[  286.406825][T18725] 8021q: adding VLAN 0 to HW filter on device bond30
[  286.413158][T18725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3559'.
[  286.425205][T18725] macvlan2: entered promiscuous mode
[  286.427544][T18725] macvlan2: entered allmulticast mode
[  286.431111][T18725] bond30: entered promiscuous mode
[  286.433776][T18725] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  286.439350][T18725] bond30: left promiscuous mode
[  286.609466][T18733] netlink: 'syz.0.3560': attribute type 6 has an invalid length.
[  286.623161][T14573] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  288.761520][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  288.764914][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  288.767775][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  288.774023][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  288.776886][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  288.872284][T18775] chnl_net:caif_netlink_parms(): no params data found
[  288.936048][T18775] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.938527][T18775] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.941248][T18775] bridge_slave_0: entered allmulticast mode
[  288.943951][T18775] bridge_slave_0: entered promiscuous mode
[  288.948449][T18775] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.950933][T18775] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.953304][T18775] bridge_slave_1: entered allmulticast mode
[  288.956228][T18775] bridge_slave_1: entered promiscuous mode
[  288.976724][T18775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.981772][T18775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.000267][T18775] team0: Port device team_slave_0 added
[  289.004041][T18775] team0: Port device team_slave_1 added
[  289.024617][T18775] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.027028][T18775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.036658][T18775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.041427][T18775] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.044012][T18775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.052980][T18775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.080788][T18775] hsr_slave_0: entered promiscuous mode
[  289.083099][T18775] hsr_slave_1: entered promiscuous mode
[  289.085297][T18775] debugfs: 'hsr0' already exists in 'hsr'
[  289.087114][T18775] Cannot create hsr debugfs directory
[  289.191881][T18775] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  289.196793][T18775] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  289.202152][T18775] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  289.207097][T18775] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  289.227330][T18775] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.230393][T18775] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.233490][T18775] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.237270][T18775] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.274851][T18775] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.283783][T14572] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.287180][T14572] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.298516][T18775] 8021q: adding VLAN 0 to HW filter on device team0
[  289.306398][T14572] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.309055][T14572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.318036][T14572] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.321163][T14572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.430806][T18775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.567549][T18775] veth0_vlan: entered promiscuous mode
[  289.575805][T18775] veth1_vlan: entered promiscuous mode
[  289.602125][T18775] veth0_macvtap: entered promiscuous mode
[  289.607832][T18775] veth1_macvtap: entered promiscuous mode
[  289.624931][T18775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.636057][T18775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.646048][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.650618][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.656330][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.667984][ T5877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.719525][T14573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.725533][T14573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.755300][T14572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.758587][T14572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.281548][T18805] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3569'.
[  290.308307][T18805] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3569'.
[  290.325388][T18805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'.
[  290.564700][T18823] openvswitch: netlink: IP tunnel TTL not specified.
[  290.580291][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.586103][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.589867][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.598231][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.603468][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  290.628433][T18829] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3574'.
[  290.659690][T18829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3574'.
[  290.663418][T18829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3574'.
[  290.671227][T18829] netlink: 'syz.1.3574': attribute type 1 has an invalid length.
[  290.752961][T18821] chnl_net:caif_netlink_parms(): no params data found
[  290.824006][T18834] bond30: entered promiscuous mode
[  290.826231][T18834] bond30: entered allmulticast mode
[  290.828631][T18834] 8021q: adding VLAN 0 to HW filter on device bond30
[  290.856630][ T5847] Bluetooth: hci0: command tx timeout
[  290.963549][T18834] bond30 (unregistering): Released all slaves
[  290.997242][T18821] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.999723][T18821] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.012314][T18821] bridge_slave_0: entered allmulticast mode
[  291.039080][T18821] bridge_slave_0: entered promiscuous mode
[  291.043243][T18821] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.046059][T18821] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.049062][T18821] bridge_slave_1: entered allmulticast mode
[  291.064008][T18821] bridge_slave_1: entered promiscuous mode
[  291.107774][T18821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.124531][T18821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.166052][T18821] team0: Port device team_slave_0 added
[  291.169139][T18851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3578'.
[  291.200591][T18821] team0: Port device team_slave_1 added
[  291.223013][T18857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3579'.
[  291.266657][T18821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.269004][T18821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.278485][T18821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.289002][T18821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.292227][T18821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.302265][T18821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.334712][T18821] hsr_slave_0: entered promiscuous mode
[  291.337287][T18821] hsr_slave_1: entered promiscuous mode
[  291.340890][T18821] debugfs: 'hsr0' already exists in 'hsr'
[  291.342923][T18821] Cannot create hsr debugfs directory
[  291.451561][T18821] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  291.456507][T18821] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  291.461436][T18821] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  291.467716][T18821] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  291.502173][T18821] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.505212][T18821] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.508409][T18821] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.511626][T18821] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.569217][T18821] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.586690][T14572] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.592194][T14572] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.609369][T18821] 8021q: adding VLAN 0 to HW filter on device team0
[  291.623395][T14572] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.626536][T14572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.635938][T14572] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.638974][T14572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.775534][T18821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.805001][T18821] veth0_vlan: entered promiscuous mode
[  291.814544][T18821] veth1_vlan: entered promiscuous mode
[  291.834369][T18821] veth0_macvtap: entered promiscuous mode
[  291.839195][T18821] veth1_macvtap: entered promiscuous mode
[  291.850848][T18821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.863399][T18821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.875401][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.879259][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.891728][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.895449][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.003392][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.006850][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.058491][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.066107][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.233383][T18880] bond30: entered promiscuous mode
[  292.236048][T18880] 8021q: adding VLAN 0 to HW filter on device bond30
[  292.251612][T18885] netlink: 'syz.4.3584': attribute type 10 has an invalid length.
[  292.271745][T18886] netlink: 'syz.3.3585': attribute type 10 has an invalid length.
[  292.278918][T18885] 8021q: adding VLAN 0 to HW filter on device team0
[  292.285933][T18885] bond0: (slave team0): Enslaving as an active interface with an up link
[  292.289712][T18886] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.292839][T18886] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.306662][T18886] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.309130][T18886] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.311759][T18886] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.314332][T18886] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.319950][T18886] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  292.325336][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'.
[  292.328974][T18889] bridge_slave_1: left allmulticast mode
[  292.333540][T18889] bridge_slave_1: left promiscuous mode
[  292.335890][T18889] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.339954][T18889] bridge_slave_0: left allmulticast mode
[  292.341977][T18889] bridge_slave_0: left promiscuous mode
[  292.344008][T18889] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.357237][T18889] bond0: (slave bridge0): Releasing backup interface
[  292.553478][T18886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.559019][T18886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.639115][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.644648][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.647675][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.659610][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.692521][ T5847] Bluetooth: hci2: command tx timeout
[  292.744833][T18904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3592'.
[  292.808292][T18910] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  292.817139][T18913] netlink: 'syz.4.3596': attribute type 1 has an invalid length.
[  292.930913][ T5847] Bluetooth: hci0: command tx timeout
[  292.958090][T18922] netlink: 'syz.4.3599': attribute type 9 has an invalid length.
[  293.001089][T18917] block nbd1: server does not support multiple connections per device.
[  293.005467][T18917] block nbd1: shutting down sockets
[  293.018186][T18922] netlink: 'syz.4.3599': attribute type 10 has an invalid length.
[  293.026565][T18922] team0: Port device dummy0 added
[  293.058539][T18926] vlan7: entered allmulticast mode
[  293.227136][T18940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.573880][T18958] netlink: 'syz.4.3608': attribute type 1 has an invalid length.
[  293.832309][T18960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.354136][T18991] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  294.356615][T18991] team0: Device ipvlan0 is already an upper device of the team interface
[  294.534265][T19005] netlink: 'syz.1.3621': attribute type 1 has an invalid length.
[  294.537047][T19005] netlink: 'syz.1.3621': attribute type 4 has an invalid length.
[  294.583319][T19008] tipc: Started in network mode
[  294.585940][T19008] tipc: Node identity 9a5a38a6a4f7, cluster identity 4711
[  294.589548][T19008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.628722][T19008] syzkaller0: entered promiscuous mode
[  294.631839][T19008] syzkaller0: entered allmulticast mode
[  294.658045][T19007] tipc: Resetting bearer <eth:syzkaller0>
[  294.683380][T19007] tipc: Disabling bearer <eth:syzkaller0>
[  294.770845][ T5847] Bluetooth: hci2: command tx timeout
[  294.862465][T19027] netlink: 'syz.4.3629': attribute type 21 has an invalid length.
[  295.011133][ T5847] Bluetooth: hci0: command tx timeout
[  295.025399][T19041] hsr_slave_0: left promiscuous mode
[  295.028958][T19041] hsr_slave_1: left promiscuous mode
[  295.119420][T19047] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  295.126188][T19047] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  295.518188][T19058] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  295.830505][T19081] __nla_validate_parse: 11 callbacks suppressed
[  295.830519][T19081] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3644'.
[  295.837315][T19080] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3644'.
[  296.679009][T19108] syz.1.3652: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  296.686660][T19108] CPU: 1 UID: 0 PID: 19108 Comm: syz.1.3652 Not tainted syzkaller #0 PREEMPT(full) 
[  296.686680][T19108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.686695][T19108] Call Trace:
[  296.686700][T19108]  <TASK>
[  296.686705][T19108]  dump_stack_lvl+0x189/0x250
[  296.686726][T19108]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.686739][T19108]  ? __pfx__printk+0x10/0x10
[  296.686754][T19108]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  296.686767][T19108]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  296.686781][T19108]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  296.686794][T19108]  warn_alloc+0x214/0x310
[  296.686814][T19108]  ? __pfx_warn_alloc+0x10/0x10
[  296.686836][T19108]  ? __get_vm_area_node+0x28f/0x300
[  296.686851][T19108]  ? xskq_create+0xbf/0x170
[  296.686867][T19108]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  296.686905][T19108]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  296.686924][T19108]  ? __kasan_kmalloc+0x93/0xb0
[  296.686941][T19108]  vmalloc_user_noprof+0xad/0xf0
[  296.686957][T19108]  ? xskq_create+0xbf/0x170
[  296.686969][T19108]  xskq_create+0xbf/0x170
[  296.686982][T19108]  xsk_init_queue+0xb0/0x110
[  296.686995][T19108]  xsk_setsockopt+0x57b/0x8d0
[  296.687013][T19108]  ? __pfx_xsk_setsockopt+0x10/0x10
[  296.687028][T19108]  ? __pfx_aa_sk_perm+0x10/0x10
[  296.687048][T19108]  ? __fget_files+0x2a/0x420
[  296.687056][T19108]  ? aa_sock_opt_perm+0xff/0x1b0
[  296.687070][T19108]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  296.687082][T19108]  ? __pfx_xsk_setsockopt+0x10/0x10
[  296.687099][T19108]  do_sock_setsockopt+0x17c/0x1b0
[  296.687116][T19108]  __x64_sys_setsockopt+0x13f/0x1b0
[  296.687134][T19108]  do_syscall_64+0xfa/0x3b0
[  296.687144][T19108]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.687155][T19108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.687166][T19108]  ? exc_page_fault+0x9f/0xf0
[  296.687179][T19108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.687189][T19108] RIP: 0033:0x7f2c23b8ec29
[  296.687201][T19108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.687211][T19108] RSP: 002b:00007f2c21dee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  296.687224][T19108] RAX: ffffffffffffffda RBX: 00007f2c23dd5fa0 RCX: 00007f2c23b8ec29
[  296.687232][T19108] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  296.687239][T19108] RBP: 00007f2c23c11e41 R08: 0000000000000004 R09: 0000000000000000
[  296.687303][T19108] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  296.687311][T19108] R13: 00007f2c23dd6038 R14: 00007f2c23dd5fa0 R15: 00007ffc0bcb1958
[  296.687332][T19108]  </TASK>
[  296.687337][T19108] Mem-Info:
[  296.794427][T19108] active_anon:5952 inactive_anon:0 isolated_anon:0
[  296.794427][T19108]  active_file:1402 inactive_file:38342 isolated_file:0
[  296.794427][T19108]  unevictable:1768 dirty:90 writeback:0
[  296.794427][T19108]  slab_reclaimable:12510 slab_unreclaimable:124578
[  296.794427][T19108]  mapped:18323 shmem:2644 pagetables:1010
[  296.794427][T19108]  sec_pagetables:0 bounce:0
[  296.794427][T19108]  kernel_misc_reclaimable:0
[  296.794427][T19108]  free:220555 free_pcp:15430 free_cma:0
[  296.812286][T19108] Node 0 active_anon:12360kB inactive_anon:0kB active_file:3220kB inactive_file:131480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:13356kB dirty:156kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7620kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  296.825583][T19108] Node 1 active_anon:11448kB inactive_anon:0kB active_file:2388kB inactive_file:21888kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:59936kB dirty:204kB writeback:0kB shmem:5480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7844kB pagetables:1876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  296.837203][T19108] Node 0 DMA free:14480kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:700kB local_pcp:328kB free_cma:0kB
[  296.847187][T19108] lowmem_reserve[]: 0 811 811 811 811
[  296.849541][T19108] Node 0 DMA32 free:171264kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12360kB inactive_anon:0kB active_file:3220kB inactive_file:131480kB unevictable:3536kB writepending:156kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:30940kB local_pcp:13252kB free_cma:0kB
[  296.851377][ T5847] Bluetooth: hci2: command tx timeout
[  296.904486][T19113] tipc: New replicast peer: 255.255.255.255
[  296.906852][T19113] tipc: Enabled bearer <udp:syz2>, priority 10
[  296.915514][T19108] lowmem_reserve[]: 0 0 0 0 0
[  296.917312][T19108] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  296.968525][T19108] lowmem_reserve[]: 0 0 854 854 854
[  296.980186][T19108] Node 1 Normal free:237724kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11448kB inactive_anon:0kB active_file:2388kB inactive_file:21888kB unevictable:3536kB writepending:204kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30776kB local_pcp:14336kB free_cma:0kB
[  297.000199][T19108] lowmem_reserve[]: 0 0 0 0 0
[  297.002308][T19108] Node 0 DMA: 8*4kB (UM) 6*8kB (UM) 4*16kB (UM) 8*32kB (UM) 8*64kB (UM) 8*128kB (UM) 9*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 0*4096kB = 14480kB
[  297.009051][T19108] Node 0 DMA32: 3174*4kB (UM) 1537*8kB (UME) 716*16kB (UME) 173*32kB (UM) 285*64kB (UME) 122*128kB (U) 82*256kB (UM) 25*512kB (UME) 40*1024kB (UME) 6*2048kB (UME) 2*4096kB (U) = 171072kB
[  297.037095][T19108] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  297.053180][T19108] Node 1 Normal: 3*4kB (UME) 3*8kB (UE) 70*16kB (UM) 142*32kB (ME) 75*64kB (UM) 37*128kB (UM) 17*256kB (UME) 3*512kB (UME) 3*1024kB (UE) 2*2048kB (ME) 51*4096kB (UM) = 237188kB
[  297.090476][T19108] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  297.094271][T19108] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  297.098190][T19108] 42388 total pagecache pages
[  297.100268][ T5847] Bluetooth: hci0: command tx timeout
[  297.102533][T19108] 0 pages in swap cache
[  297.104260][T19108] Free swap  = 124996kB
[  297.105944][T19108] Total swap = 124996kB
[  297.107649][T19108] 786301 pages RAM
[  297.109269][T19108] 0 pages HighMem/MovableOnly
[  297.111923][T19108] 241356 pages reserved
[  297.113635][T19108] 0 pages cma reserved
[  297.229312][T19122] bridge0: port 1(erspan0) entered blocking state
[  297.232840][T19122] bridge0: port 1(erspan0) entered disabled state
[  297.243402][T19122] erspan0: entered allmulticast mode
[  297.247625][T19122] erspan0: entered promiscuous mode
[  297.254452][T19124] erspan0: left allmulticast mode
[  297.256681][T19124] erspan0: left promiscuous mode
[  297.260898][T19124] bridge0: port 1(erspan0) entered disabled state
[  298.030268][ T5899] tipc: Node number set to 1051539622
[  298.304095][T19131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.307699][T19131] syzkaller0: entered promiscuous mode
[  298.310580][T19131] syzkaller0: entered allmulticast mode
[  298.315486][T19131] sch_tbf: burst 127 is lower than device virt_wifi0 mtu (1514) !
[  298.319056][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3659'.
[  298.349552][T19131] tipc: Resetting bearer <eth:syzkaller0>
[  298.363641][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3659'.
[  298.368186][T19131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3659'.
[  298.377662][T19131] geneve2: entered promiscuous mode
[  298.383968][T19131] geneve2: entered allmulticast mode
[  298.467968][T19130] tipc: Resetting bearer <eth:syzkaller0>
[  298.480532][T19130] tipc: Disabling bearer <eth:syzkaller0>
[  298.581770][T19138] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  298.585259][ T5885] IPVS: starting estimator thread 0...
[  298.710186][T19139] IPVS: using max 78 ests per chain, 187200 per kthread
[  298.770927][T19159] netlink: 'syz.1.3668': attribute type 1 has an invalid length.
[  298.785762][T19159] 8021q: adding VLAN 0 to HW filter on device bond31
[  298.817549][T19159] bond31: (slave veth33): Enslaving as an active interface with a down link
[  298.825827][T19094] Set syz1 is full, maxelem 65536 reached
[  298.830521][T19159] gretap4: entered promiscuous mode
[  298.855451][T19159] bond31: (slave gretap4): making interface the new active one
[  298.859624][T19159] bond31: (slave gretap4): Enslaving as an active interface with an up link
[  298.868147][   T60] block nbd2: Possible stuck request ffff888021d40000: control (read@0,1024B). Runtime 150 seconds
[  298.874474][   T60] block nbd2: Possible stuck request ffff888021d40200: control (read@1024,1024B). Runtime 150 seconds
[  298.878913][   T60] block nbd2: Possible stuck request ffff888021d40400: control (read@2048,1024B). Runtime 150 seconds
[  298.883636][   T60] block nbd2: Possible stuck request ffff888021d40600: control (read@3072,1024B). Runtime 150 seconds
[  298.918349][T19169] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3670'.
[  298.923795][T19159] macvlan6: entered promiscuous mode
[  298.928802][T19159] macvlan6: entered allmulticast mode
[  298.932137][ T5847] Bluetooth: hci2: command tx timeout
[  298.935619][T19159] bond31: entered promiscuous mode
[  298.938597][T19159] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  298.942732][T19159] bond31: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  298.951253][T19159] bond31: left promiscuous mode
[  299.497687][T19212] bond6: option mode: unable to set because the bond device has slaves
[  299.552621][T19215] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3683'.
[  299.569420][T19215] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3683'.
[  299.578068][T19215] netlink: 'syz.1.3683': attribute type 5 has an invalid length.
[  299.585355][T19215] netlink: 'syz.1.3683': attribute type 10 has an invalid length.
[  299.589362][T19215] 8021q: adding VLAN 0 to HW filter on device team0
[  299.593028][T19215] bond0: (slave team0): Enslaving as an active interface with a down link
[  299.737023][T19231] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3687'.
[  299.759902][T19231] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  299.761882][T19233] pim6reg1: entered promiscuous mode
[  299.765470][T19233] pim6reg1: entered allmulticast mode
[  299.768479][T19231] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  299.809945][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'.
[  299.888058][T19246] only policy match revision 0 supported
[  299.888069][T19246] unable to load match
[  300.853597][T19271] ieee802154 phy0 wpan0: encryption failed: -22
[  301.042626][T19287] __nla_validate_parse: 3 callbacks suppressed
[  301.042640][T19287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3704'.
[  301.050324][T19291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3705'.
[  301.054598][T19291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3705'.
[  301.138247][T19298] netlink: 'syz.4.3707': attribute type 25 has an invalid length.
[  301.175558][T19303] netlink: 'syz.1.3708': attribute type 2 has an invalid length.
[  301.179121][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3708'.
[  301.187887][T19305] netlink: 'syz.1.3708': attribute type 2 has an invalid length.
[  301.190891][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3708'.
[  301.261575][T19314] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3711'.
[  301.265467][T19314] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3711'.
[  301.372543][T19314] netlink: 'syz.1.3711': attribute type 4 has an invalid length.
[  301.830763][T19347] netlink: 'syz.1.3718': attribute type 10 has an invalid length.
[  301.966810][T19357] netlink: 'syz.1.3721': attribute type 7 has an invalid length.
[  301.969367][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3721'.
[  301.991871][T19357] 8021q: adding VLAN 0 to HW filter on device bond32
[  301.994558][T19357] bridge17: port 1(bond32) entered blocking state
[  301.997299][T19357] bridge17: port 1(bond32) entered disabled state
[  301.999737][T19357] bond32: entered allmulticast mode
[  302.005564][T19357] bridge17: port 1(bond32) entered blocking state
[  302.007922][T19357] bridge17: port 1(bond32) entered forwarding state
[  302.038570][T19360] netlink: 'syz.1.3722': attribute type 4 has an invalid length.
[  302.109393][T19362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3723'.
[  302.218152][T19375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3727'.
[  302.239801][T19370] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.242565][T19370] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.295830][T19370] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.303196][T19370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.377831][ T1089] bridge17: port 1(bond32) entered disabled state
[  302.381287][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.389687][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.399579][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.403690][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.531693][T19389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.535072][T19389] syzkaller0: entered promiscuous mode
[  302.537456][T19389] syzkaller0: entered allmulticast mode
[  302.639888][T19401] dvmrp0: entered allmulticast mode
[  302.678776][T19404] tipc: Resetting bearer <eth:syzkaller0>
[  303.103271][T19426] tipc: Started in network mode
[  303.105336][T19426] tipc: Node identity 4e194a3ed98, cluster identity 4711
[  303.107859][T19426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.112914][T19426] syzkaller0: entered promiscuous mode
[  303.115022][T19426] syzkaller0: entered allmulticast mode
[  303.130815][T19426] tipc: Resetting bearer <eth:syzkaller0>
[  303.134056][T19425] tipc: Resetting bearer <eth:syzkaller0>
[  303.142652][T19425] tipc: Disabling bearer <eth:syzkaller0>
[  303.354577][T19388] tipc: Resetting bearer <eth:syzkaller0>
[  303.368487][T19388] tipc: Disabling bearer <eth:syzkaller0>
[  303.589774][T19453] bond0: entered promiscuous mode
[  303.592013][T19453] bond_slave_0: entered promiscuous mode
[  303.596056][T19453] bond_slave_1: entered promiscuous mode
[  303.603619][T19453] bond0: left promiscuous mode
[  303.605703][T19453] bond_slave_0: left promiscuous mode
[  303.608323][T19453] bond_slave_1: left promiscuous mode
[  303.616234][T19451] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  303.780549][T19467] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  303.824575][T19469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.855584][T19472] validate_nla: 2 callbacks suppressed
[  303.855595][T19472] netlink: 'syz.1.3761': attribute type 39 has an invalid length.
[  303.862949][T19472] netlink: 'syz.1.3761': attribute type 5 has an invalid length.
[  303.871663][T19472] vlan7: entered allmulticast mode
[  304.121803][T19484] netlink: 'syz.1.3765': attribute type 5 has an invalid length.
[  304.125601][T19484] netlink: 'syz.1.3765': attribute type 10 has an invalid length.
[  304.365479][T19495] netlink: 'syz.4.3768': attribute type 1 has an invalid length.
[  304.610403][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  304.649217][T19508] macsec1: entered promiscuous mode
[  304.652111][T19508] macsec0: entered promiscuous mode
[  304.654510][T19508] macsec1: entered allmulticast mode
[  304.656735][T19508] macsec0: entered allmulticast mode
[  304.708441][T19512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.715196][T19511] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  304.729071][T19512] syzkaller0: entered promiscuous mode
[  304.733499][T19512] syzkaller0: entered allmulticast mode
[  305.700321][ T5912] tipc: Node number set to 2543405630
[  305.815019][T19513] tipc: Resetting bearer <eth:syzkaller0>
[  305.830567][T19513] tipc: Disabling bearer <eth:syzkaller0>
[  305.905070][T19520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.052469][T19538] __nla_validate_parse: 13 callbacks suppressed
[  306.052487][T19538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3782'.
[  306.068850][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3782'.
[  306.068866][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3782'.
[  306.094858][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'.
[  306.098849][T19528] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  306.103031][T19528] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  306.111034][T19542] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3783'.
[  306.115285][T19542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3783'.
[  306.788719][T19546] geneve2: left promiscuous mode
[  306.791975][T19546] macsec1: left promiscuous mode
[  306.796595][T19546] macsec0: left promiscuous mode
[  306.804178][T19546] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  306.839876][T19546] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3784'.
[  306.892581][T19550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.896397][T19550] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.924080][T19549] tipc: Disabling bearer <eth:syzkaller0>
[  306.983523][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'.
[  306.998932][T19558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3788'.
[  307.012468][T19560] sch_fq: defrate 0 ignored.
[  307.096519][T19569] wg1: entered promiscuous mode
[  307.098778][T19569] wg1: entered allmulticast mode
[  307.299815][T19581] netlink: 'syz.1.3795': attribute type 1 has an invalid length.
[  307.322420][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'.
[  307.623260][T19592] veth1_to_bond: entered allmulticast mode
[  307.657953][T19592] veth1_to_bond (unregistering): left allmulticast mode
[  307.782130][T19595] netlink: 'syz.1.3798': attribute type 1 has an invalid length.
[  307.794194][T19595] netlink: 'syz.1.3798': attribute type 2 has an invalid length.
[  307.806216][T19595] @: entered promiscuous mode
[  307.863480][T19601] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  307.914760][T19599] macsec0: left allmulticast mode
[  308.405843][T19641] netlink: 'syz.4.3809': attribute type 6 has an invalid length.
[  308.570317][T19652] Bluetooth: MGMT ver 1.23
[  308.671719][T19658] netlink: 'syz.3.3816': attribute type 7 has an invalid length.
[  308.694967][T19658] 8021q: VLANs not supported on nlmon0
[  308.721242][T19662] netlink: 'syz.3.3817': attribute type 11 has an invalid length.
[  308.777843][T19667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.784393][T19667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.789271][T19667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.852782][T19675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.855913][T19673] 8021q: adding VLAN 0 to HW filter on device bond1
[  308.858253][T19675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.867564][T19673] bond1: entered promiscuous mode
[  308.868026][T19675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.883301][T19675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  309.191791][T19689] validate_nla: 1 callbacks suppressed
[  309.191813][T19689] netlink: 'syz.1.3824': attribute type 10 has an invalid length.
[  309.466580][T19703] geneve6: entered promiscuous mode
[  309.477667][T19704] geneve6: entered promiscuous mode
[  309.645183][T19716] netlink: 'syz.1.3831': attribute type 6 has an invalid length.
[  309.648433][T19716] netlink: 'syz.1.3831': attribute type 6 has an invalid length.
[  309.687814][T19719] netlink: 'syz.1.3832': attribute type 1 has an invalid length.
[  309.691284][T19719] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  309.698782][T19719] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  309.703030][T19719] gretap5: entered promiscuous mode
[  309.704975][T19719] gretap5: entered allmulticast mode
[  309.781430][T19721] sctp: [Deprecated]: syz.1.3833 (pid 19721) Use of int in maxseg socket option.
[  309.781430][T19721] Use struct sctp_assoc_value instead
[  309.828364][T19730] netlink: 'syz.1.3836': attribute type 1 has an invalid length.
[  309.833999][T19727] tun0: tun_chr_ioctl cmd 1074025672
[  309.836492][T19727] tun0: ignored: set checksum disabled
[  309.838757][T19728] tun0: tun_chr_ioctl cmd 1074025672
[  309.843028][T19728] tun0: ignored: set checksum disabled
[  310.057008][T19745] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  310.065898][T19745] bond6: (slave macvlan0): Enslaving as a backup interface with a down link
[  310.389342][T19781] netlink: 'syz.1.3851': attribute type 1 has an invalid length.
[  310.443196][T19789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.456841][T19789] tipc: Disabling bearer <eth:syzkaller0>
[  310.777820][T19812] netlink: 'syz.1.3858': attribute type 1 has an invalid length.
[  310.891212][T19816] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  311.099953][T19817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  311.104333][T19817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  311.152575][T19837] macvlan0: entered promiscuous mode
[  311.154883][T19837] bond0: entered promiscuous mode
[  311.156715][T19837] team0: entered promiscuous mode
[  311.158793][T19837] macvlan0: left promiscuous mode
[  311.160854][T19837] bond0: left promiscuous mode
[  311.162918][T19837] team0: left promiscuous mode
[  311.331353][T19844] netlink: 'syz.1.3866': attribute type 1 has an invalid length.
[  311.334861][T19844] __nla_validate_parse: 95 callbacks suppressed
[  311.334875][T19844] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3866'.
[  311.387827][T19848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.390796][T19849] syzkaller0: entered promiscuous mode
[  311.393041][T19849] syzkaller0: entered allmulticast mode
[  311.396675][T19848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.401844][T19848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.405944][T19848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.409654][T19848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.413977][T19848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.417598][T19848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.421900][T19848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.425655][T19848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.429465][T19848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.433808][T19848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.453187][T19848] tipc: Resetting bearer <eth:syzkaller0>
[  311.468914][T19848] tipc: Disabling bearer <eth:syzkaller0>
[  311.507843][T19853] lo: entered promiscuous mode
[  311.512607][T19853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  311.639811][T19858] netlink: 'syz.3.3868': attribute type 5 has an invalid length.
[  311.805323][T19879] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3873'.
[  311.814170][T19879] ..0: renamed from ..1
[  311.817457][T19879] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  311.822232][T19879] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  311.825706][T19879] ..0: entered allmulticast mode
[  311.828223][T19879] hsr_slave_0: entered allmulticast mode
[  311.830738][T19879] hsr_slave_1: entered allmulticast mode
[  311.834139][T19879] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  311.909407][T19890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.915134][T19887] syzkaller0: entered promiscuous mode
[  311.917096][T19887] syzkaller0: entered allmulticast mode
[  311.931560][T19888] tipc: Resetting bearer <eth:syzkaller0>
[  311.938196][T19885] tipc: Resetting bearer <eth:syzkaller0>
[  311.957359][T19885] tipc: Disabling bearer <eth:syzkaller0>
[  312.002373][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'.
[  312.019441][T19899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3879'.
[  312.043412][T19895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3878'.
[  312.047252][T19895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3878'.
[  312.050614][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'.
[  312.107667][T19905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3881'.
[  312.113526][T19903] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  312.123187][T19903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.125737][T19903] syzkaller0: entered promiscuous mode
[  312.127528][T19903] syzkaller0: entered allmulticast mode
[  312.132023][T19902] tipc: Resetting bearer <eth:syzkaller0>
[  312.143749][T19902] tipc: Disabling bearer <eth:syzkaller0>
[  312.232575][T19915] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3884'.
[  312.279334][T19920] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3886'.
[  312.285742][T19920] netlink: 'syz.4.3886': attribute type 1 has an invalid length.
[  312.527231][T19932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  312.983531][T19975] IPv6: sit4: Disabled Multicast RS
[  313.206763][T19982] syzkaller1: entered promiscuous mode
[  313.207608][T19984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.209064][T19982] syzkaller1: entered allmulticast mode
[  313.470912][T20008] pimreg3: entered allmulticast mode
[  313.473010][T20001] dvmrp1: tun_chr_ioctl cmd 1074025677
[  313.475336][T20001] dvmrp1: linktype set to 804
[  313.549293][T20015] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  313.589007][T20017] bond2: entered promiscuous mode
[  313.592211][T20017] bond2: entered allmulticast mode
[  313.605592][T20017] bridge1: entered promiscuous mode
[  313.608541][T20017] bridge1: entered allmulticast mode
[  313.614339][T20017] bond2: (slave bridge1): making interface the new active one
[  313.617303][T20017] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  313.779400][T20033] Bluetooth: MGMT ver 1.23
[  313.786138][T20033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.787238][T20034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.812281][T20030] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  313.826575][T20030] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  314.018222][T20051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.021132][T20051] syzkaller0: entered promiscuous mode
[  314.023130][T20051] syzkaller0: entered allmulticast mode
[  314.045323][T20051] tipc: Resetting bearer <eth:syzkaller0>
[  314.059733][T20051] tipc: Resetting bearer <eth:syzkaller0>
[  314.076816][T20051] tipc: Disabling bearer <eth:syzkaller0>
[  314.192865][T20058] syzkaller1: entered allmulticast mode
[  314.196041][T20058] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  314.219658][T20067] validate_nla: 4 callbacks suppressed
[  314.219676][T20067] netlink: 'syz.3.3930': attribute type 13 has an invalid length.
[  314.848196][T20081] netlink: 'syz.1.3934': attribute type 12 has an invalid length.
[  315.286229][T20095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.339741][T20097] netlink: 'syz.3.3939': attribute type 1 has an invalid length.
[  315.360771][T20097] 8021q: adding VLAN 0 to HW filter on device bond1
[  315.594225][   T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  315.598297][   T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  315.601659][   T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  315.606240][   T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  315.722463][T20115] netlink: 'syz.1.3945': attribute type 7 has an invalid length.
[  315.725032][T20115] netlink: 'syz.1.3945': attribute type 8 has an invalid length.
[  315.907555][T20133] netlink: 'syz.1.3950': attribute type 6 has an invalid length.
[  315.919607][T20133] netlink: 'syz.1.3950': attribute type 12 has an invalid length.
[  316.541704][T20159] netlink: 'syz.4.3956': attribute type 5 has an invalid length.
[  316.546483][T20159] netlink: 'syz.4.3956': attribute type 10 has an invalid length.
[  316.590821][T20161] __nla_validate_parse: 49 callbacks suppressed
[  316.590832][T20161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3957'.
[  316.597467][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3957'.
[  316.701911][T20164] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3958'.
[  316.705171][T20164] 8021q: VLANs not supported on ipvlan1
[  316.716227][T20164] macsec2: entered promiscuous mode
[  316.718741][T20164] macsec2: entered allmulticast mode
[  316.773511][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.876348][T20168] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  316.879632][T20168] netlink: 'syz.3.3960': attribute type 1 has an invalid length.
[  316.905843][T20168] 8021q: adding VLAN 0 to HW filter on device bond2
[  316.913399][T20168] bond2: (slave wlan0): Enslaving as an active interface with a down link
[  316.996767][T20181] lo: entered allmulticast mode
[  316.998835][T20181] lo: left allmulticast mode
[  317.037099][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3965'.
[  317.081320][T20183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3965'.
[  317.108584][T20184] wg1: left promiscuous mode
[  317.110925][T20184] wg1: left allmulticast mode
[  317.115786][T20184] geneve2: left allmulticast mode
[  317.117630][T20184] macsec1: left allmulticast mode
[  317.119839][T20184] bond1: left promiscuous mode
[  317.123472][T20184] bond2: left promiscuous mode
[  317.125165][T20184] bond2: left allmulticast mode
[  317.128051][T20184] bridge1: left promiscuous mode
[  317.131191][T20184] bridge1: left allmulticast mode
[  317.146923][T20184] macsec2: left promiscuous mode
[  317.149532][T20184] macsec2: left allmulticast mode
[  317.154442][   T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  317.157122][   T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  317.187680][   T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  317.194364][   T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  317.201198][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3963'.
[  317.228948][T20194] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3966'.
[  317.295561][T20199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3968'.
[  317.330692][T20200] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.334256][T20200] 8021q: adding VLAN 0 to HW filter on device team0
[  317.339821][T20200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  317.371359][T20202] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3968'.
[  317.475590][T20201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.561573][T20200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.583838][T20212] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3970'.
[  318.269051][T20225] IPv6: sit1: Disabled Multicast RS
[  318.273092][T20225] sit1: entered allmulticast mode
[  318.446596][T20233] batadv1: entered promiscuous mode
[  318.450530][T20233] batadv1: entered allmulticast mode
[  318.666373][T20256] vxcan3: entered allmulticast mode
[  319.175386][T20271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  319.178431][T20271] syzkaller0: entered promiscuous mode
[  319.181108][T20271] syzkaller0: entered allmulticast mode
[  319.205106][T20271] tipc: Resetting bearer <eth:syzkaller0>
[  319.210678][T20270] tipc: Resetting bearer <eth:syzkaller0>
[  319.220887][T20270] tipc: Disabling bearer <eth:syzkaller0>
[  319.544186][T20286] syz.1.3987 (20286) used obsolete PPPIOCDETACH ioctl
[  319.803523][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  319.806270][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  319.812615][T20305] validate_nla: 5 callbacks suppressed
[  319.812625][T20305] netlink: 'syz.3.3994': attribute type 1 has an invalid length.
[  319.830648][ T5851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  319.855638][T20305] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  319.862275][T20305] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  319.865640][T20305] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  319.959161][T20310] netlink: 'syz.4.3995': attribute type 10 has an invalid length.
[  320.001553][ T5851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  320.305191][T20335] 8021q: adding VLAN 0 to HW filter on device bond4
[  320.454241][T20352] netlink: 'syz.4.4004': attribute type 19 has an invalid length.
[  320.472384][T20348] netlink: 'syz.1.4006': attribute type 10 has an invalid length.
[  320.485157][T20348] tipc: Resetting bearer <eth:gre0>
[  320.524564][T20348] tipc: Resetting bearer <ib:ip6gre0>
[  320.667734][T20354] netlink: 'syz.3.4008': attribute type 13 has an invalid length.
[  320.690953][ T5898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  320.794955][T20366] ..0: left allmulticast mode
[  320.797209][T20366] hsr_slave_0: left allmulticast mode
[  320.799498][T20366] hsr_slave_1: left allmulticast mode
[  320.817638][T20366] bond30: left promiscuous mode
[  320.821322][T20366] gretap4: left promiscuous mode
[  320.824063][T20366] gretap5: left promiscuous mode
[  320.826225][T20366] gretap5: left allmulticast mode
[  321.091159][T20379] netlink: 'syz.1.4014': attribute type 3 has an invalid length.
[  321.304567][T20394] syzkaller0: entered promiscuous mode
[  321.306443][T20394] syzkaller0: entered allmulticast mode
[  321.344515][T20396] netlink: 'syz.3.4019': attribute type 1 has an invalid length.
[  322.582756][T20405] __nla_validate_parse: 82 callbacks suppressed
[  322.582773][T20405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4021'.
[  322.667738][T20411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4021'.
[  322.672877][T20411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4021'.
[  322.680465][T20411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4021'.
[  322.684075][T20411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4021'.
[  322.799382][T20418] netlink: 'syz.1.4024': attribute type 3 has an invalid length.
[  322.832634][T20414] xfrm1: entered allmulticast mode
[  322.851367][T20423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4025'.
[  322.855215][T20423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4025'.
[  322.894468][T20426] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  322.937934][T20428] netlink: 844 bytes leftover after parsing attributes in process `syz.4.4027'.
[  323.015704][T20432] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4029'.
[  323.029103][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.034249][T20434] netlink: 'syz.4.4030': attribute type 10 has an invalid length.
[  323.036275][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.041558][T20432] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  323.042016][T20434] team0: Device ipvlan1 failed to register rx_handler
[  323.045587][T20432] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  323.111768][T20438] tipc: MTU too low for tipc bearer
[  323.151269][T20441] netlink: 'syz.1.4032': attribute type 13 has an invalid length.
[  323.231443][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4032'.
[  323.439748][T20453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.445408][T20453] syzkaller0: entered promiscuous mode
[  323.447481][T20453] syzkaller0: entered allmulticast mode
[  323.468739][T20453] tipc: Resetting bearer <eth:syzkaller0>
[  323.487488][T20451] tipc: Resetting bearer <eth:syzkaller0>
[  323.502487][T20451] tipc: Disabling bearer <eth:syzkaller0>
[  323.810248][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  323.970652][T20479] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  324.057376][T20487] syzkaller0: entered promiscuous mode
[  324.060319][T20487] syzkaller0: entered allmulticast mode
[  324.194775][T20500] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  324.296293][T20504] bridge0: port 1(macvlan2) entered blocking state
[  324.299284][T20504] bridge0: port 1(macvlan2) entered disabled state
[  324.302229][T20504] macvlan2: entered allmulticast mode
[  324.304303][T20504] bridge0: entered allmulticast mode
[  324.308062][T20504] macvlan2: left allmulticast mode
[  324.309859][T20504] bridge0: left allmulticast mode
[  326.018198][T20619] pim6reg1: entered promiscuous mode
[  326.021426][T20619] pim6reg1: entered allmulticast mode
[  326.193823][T20629] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  326.323332][T20640] validate_nla: 2 callbacks suppressed
[  326.323344][T20640] netlink: 'syz.3.4082': attribute type 1 has an invalid length.
[  326.334305][T20640] lo: left promiscuous mode
[  326.364927][T20640] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.365482][ T5877] bond0: (slave bond_slave_0): interface is now down
[  326.368334][T20640] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  326.369739][ T5877] bond0: (slave bond_slave_1): interface is now down
[  326.383244][   T12] bond0: (slave bond_slave_0): interface is now down
[  326.389086][   T12] bond0: (slave bond_slave_1): interface is now down
[  326.394063][   T12] bond0: now running without any active interface!
[  326.544299][T20648] lo: Caught tx_queue_len zero misconfig
[  326.609942][T20654] netlink: 'syz.1.4087': attribute type 1 has an invalid length.
[  326.635412][T20654] 8021q: adding VLAN 0 to HW filter on device bond34
[  326.650992][T20655] bond34: (slave veth37): Enslaving as an active interface with a down link
[  326.661069][T20656] 8021q: adding VLAN 0 to HW filter on device batadv4
[  326.663977][T20656] bond34: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  326.778599][T20671] netlink: 'syz.3.4091': attribute type 1 has an invalid length.
[  326.781590][T20671] netlink: 'syz.3.4091': attribute type 1 has an invalid length.
[  326.784399][T20671] netlink: 'syz.3.4091': attribute type 1 has an invalid length.
[  326.787927][T20674] netlink: 'syz.3.4091': attribute type 1 has an invalid length.
[  326.799705][T20674] netlink: 'syz.3.4091': attribute type 1 has an invalid length.
[  326.803712][T20674] netlink: 'syz.3.4091': attribute type 1 has an invalid length.
[  326.833882][T20676] ip6tnl0: Caught tx_queue_len zero misconfig
[  326.836761][T20676] netlink: 'syz.1.4092': attribute type 3 has an invalid length.
[  326.880894][T20678] IPVS: Error joining to the multicast group
[  326.884515][T20674] IPVS: Error joining to the multicast group
[  326.923539][T20680] openvswitch: netlink: Flow actions attr not present in new flow.
[  327.308557][T20716] netlink: 'syz.4.4100': attribute type 13 has an invalid length.
[  327.372862][T20716] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.377626][T20716] 8021q: adding VLAN 0 to HW filter on device team0
[  327.388610][T20716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  327.405223][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.419895][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.478074][T20716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.481734][ T9891] bond2: (slave wlan0): failed to get link speed/duplex
[  327.508040][T20723] IPv6: sit5: Disabled Multicast RS
[  327.547173][T20720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.596534][T20732] bond5: entered promiscuous mode
[  327.598770][T20732] bond5: entered allmulticast mode
[  327.610403][ T9891] bond2: (slave wlan0): failed to get link speed/duplex
[  327.720719][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  327.830426][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  327.941049][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  328.699598][T20761] __nla_validate_parse: 57 callbacks suppressed
[  328.699612][T20761] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4111'.
[  328.858193][T20774] bond0: Caught tx_queue_len zero misconfig
[  328.904656][T20775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4116'.
[  329.082868][   T60] block nbd2: Possible stuck request ffff888021d40000: control (read@0,1024B). Runtime 180 seconds
[  329.086717][   T60] block nbd2: Possible stuck request ffff888021d40200: control (read@1024,1024B). Runtime 180 seconds
[  329.095530][   T60] block nbd2: Possible stuck request ffff888021d40400: control (read@2048,1024B). Runtime 180 seconds
[  329.106412][   T60] block nbd2: Possible stuck request ffff888021d40600: control (read@3072,1024B). Runtime 180 seconds
[  329.548540][T20781] net_ratelimit: 1 callbacks suppressed
[  329.548545][T20781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  329.796828][T20791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4120'.
[  329.804869][T20787] syzkaller0: entered promiscuous mode
[  329.807240][T20787] syzkaller0: entered allmulticast mode
[  329.811207][T14852] page_pool_release_retry() stalled pool shutdown: id 47, 1 inflight 60 sec
[  329.832581][T20787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4119'.
[  329.870564][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4123'.
[  331.205417][T20809] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  331.205933][T20811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4125'.
[  331.219467][T20809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4126'.
[  331.241964][T20809] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4126'.
[  331.376199][T20818] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  332.125621][T20824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4131'.
[  332.132575][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  332.448422][T20841] validate_nla: 6 callbacks suppressed
[  332.448435][T20841] netlink: 'syz.4.4136': attribute type 21 has an invalid length.
[  332.458384][T20841] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4136'.
[  332.469245][T20841] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:c486:75ff:fe58:1847 error=-28
[  332.519240][T20842] netlink: 'syz.4.4136': attribute type 2 has an invalid length.
[  332.522944][T20842] netlink: 'syz.4.4136': attribute type 1 has an invalid length.
[  332.566719][T20841] infiniband syz!: set down
[  332.569876][T20841] infiniband syz!: added team_slave_0
[  332.587608][T20841] RDS/IB: syz!: added
[  332.589098][T20841] smc: adding ib device syz! with port count 1
[  332.592261][T20841] smc:    ib device syz! port 1 has no pnetid
[  333.802556][T20868] __nla_validate_parse: 2 callbacks suppressed
[  333.802574][T20868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4144'.
[  333.814921][T20868] bond0: entered promiscuous mode
[  333.816783][T20868] bond_slave_0: entered promiscuous mode
[  333.819045][T20868] bond_slave_1: entered promiscuous mode
[  333.823841][T20868] bond0: left promiscuous mode
[  333.833703][T20868] bond_slave_0: left promiscuous mode
[  333.835590][T20868] bond_slave_1: left promiscuous mode
[  333.980999][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4145'.
[  334.087287][T20879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4146'.
[  334.113157][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4146'.
[  334.197858][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4150'.
[  334.277387][T20891] 8021q: adding VLAN 0 to HW filter on device bond6
[  334.294556][T20898] 8021q: adding VLAN 0 to HW filter on device bond6
[  334.297519][T20898] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  334.304811][T20898] bond6: (slave wireguard0): Error -95 calling set_mac_address
[  334.405175][T20902] lo speed is unknown, defaulting to 1000
[  334.407632][T20902] lo speed is unknown, defaulting to 1000
[  334.437792][T20902] lo speed is unknown, defaulting to 1000
[  334.470823][T20902] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  334.494600][T20906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4154'.
[  334.498892][T20902] lo speed is unknown, defaulting to 1000
[  334.508330][T20903] netlink: 'syz.4.4153': attribute type 4 has an invalid length.
[  334.519191][T20902] lo speed is unknown, defaulting to 1000
[  334.537379][T20902] lo speed is unknown, defaulting to 1000
[  334.558715][T20902] lo speed is unknown, defaulting to 1000
[  334.566313][T20902] lo speed is unknown, defaulting to 1000
[  334.587172][T20910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4155'.
[  334.628707][T20910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4155'.
[  334.719626][T20918] geneve6: entered promiscuous mode
[  334.729483][ T5878] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.729962][T20923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4160'.
[  334.736981][ T5878] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.747011][ T5878] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.751445][ T5878] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.765550][T20921] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.769820][T20921] syzkaller0: entered promiscuous mode
[  334.776468][T20921] syzkaller0: entered allmulticast mode
[  334.791335][T20923] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4160'.
[  334.819477][T20926] veth0: entered promiscuous mode
[  334.825062][T20921] tipc: Resetting bearer <eth:syzkaller0>
[  334.828254][T20919] tipc: Resetting bearer <eth:syzkaller0>
[  334.848463][T20919] tipc: Disabling bearer <eth:syzkaller0>
[  334.879603][T20924] veth0: left promiscuous mode
[  334.966169][T20938] netlink: 'syz.4.4165': attribute type 8 has an invalid length.
[  334.980944][T20938] bond0: entered promiscuous mode
[  334.983356][T20938] bond_slave_0: entered promiscuous mode
[  334.985858][T20938] bond_slave_1: entered promiscuous mode
[  334.988453][T20938] team0: entered promiscuous mode
[  334.991232][T20938] team_slave_0: entered promiscuous mode
[  334.995210][T20938] team_slave_1: entered promiscuous mode
[  334.997798][T20938] dummy0: entered promiscuous mode
[  335.002630][T20938] bond0: left promiscuous mode
[  335.004796][T20938] bond_slave_0: left promiscuous mode
[  335.007235][T20938] bond_slave_1: left promiscuous mode
[  335.009605][T20938] team0: left promiscuous mode
[  335.012714][T20938] team_slave_0: left promiscuous mode
[  335.015290][T20938] team_slave_1: left promiscuous mode
[  335.017682][T20938] dummy0: left promiscuous mode
[  335.033147][T20934] tipc: New replicast peer: 172.20.20.187
[  335.036152][T20934] tipc: Enabled bearer <udp:syz1>, priority 10
[  335.234842][T20958] IPVS: stopping backup sync thread 20963 ...
[  335.235282][T20963] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  335.243927][T20958] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  335.634754][T20988] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  335.779841][T21009] netlink: 'syz.1.4184': attribute type 2 has an invalid length.
[  336.043279][T21012] lo speed is unknown, defaulting to 1000
[  336.313063][T21040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.330388][T21040] syzkaller0: entered promiscuous mode
[  336.332801][T21040] syzkaller0: entered allmulticast mode
[  336.396891][T21040] tipc: Resetting bearer <eth:syzkaller0>
[  336.410625][T21038] tipc: Resetting bearer <eth:syzkaller0>
[  336.423907][T21038] tipc: Disabling bearer <eth:syzkaller0>
[  336.434349][T21057] netem: change failed
[  336.474033][T21062] syz.3.4197: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  336.478981][T21062] CPU: 0 UID: 0 PID: 21062 Comm: syz.3.4197 Not tainted syzkaller #0 PREEMPT(full) 
[  336.478995][T21062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.479001][T21062] Call Trace:
[  336.479005][T21062]  <TASK>
[  336.479010][T21062]  dump_stack_lvl+0x189/0x250
[  336.479027][T21062]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.479037][T21062]  ? __pfx__printk+0x10/0x10
[  336.479049][T21062]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  336.479060][T21062]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  336.479071][T21062]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  336.479081][T21062]  warn_alloc+0x214/0x310
[  336.479093][T21062]  ? stack_depot_save_flags+0x40/0x860
[  336.479105][T21062]  ? __pfx_warn_alloc+0x10/0x10
[  336.479116][T21062]  ? kasan_save_track+0x4f/0x80
[  336.479125][T21062]  ? xskq_create+0x56/0x170
[  336.479133][T21062]  ? xsk_init_queue+0xb0/0x110
[  336.479140][T21062]  ? xsk_setsockopt+0x4dc/0x8d0
[  336.479149][T21062]  ? do_sock_setsockopt+0x17c/0x1b0
[  336.479157][T21062]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  336.479164][T21062]  ? do_syscall_64+0xfa/0x3b0
[  336.479172][T21062]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.479183][T21062]  __vmalloc_node_range_noprof+0x125/0x12f0
[  336.479207][T21062]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  336.479220][T21062]  ? __kasan_kmalloc+0x93/0xb0
[  336.479231][T21062]  vmalloc_user_noprof+0xad/0xf0
[  336.479242][T21062]  ? xskq_create+0xbf/0x170
[  336.479249][T21062]  xskq_create+0xbf/0x170
[  336.479257][T21062]  xsk_init_queue+0xb0/0x110
[  336.479264][T21062]  xsk_setsockopt+0x4dc/0x8d0
[  336.479275][T21062]  ? __pfx_xsk_setsockopt+0x10/0x10
[  336.479285][T21062]  ? __pfx_aa_sk_perm+0x10/0x10
[  336.479297][T21062]  ? aa_sock_opt_perm+0xff/0x1b0
[  336.479305][T21062]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  336.479313][T21062]  ? __pfx_xsk_setsockopt+0x10/0x10
[  336.479323][T21062]  do_sock_setsockopt+0x17c/0x1b0
[  336.479334][T21062]  __x64_sys_setsockopt+0x13f/0x1b0
[  336.479345][T21062]  do_syscall_64+0xfa/0x3b0
[  336.479352][T21062]  ? lockdep_hardirqs_on+0x9c/0x150
[  336.479359][T21062]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.479365][T21062]  ? exc_page_fault+0x9f/0xf0
[  336.479373][T21062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.479379][T21062] RIP: 0033:0x7f939958ec29
[  336.479388][T21062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.479394][T21062] RSP: 002b:00007f939a343038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  336.479403][T21062] RAX: ffffffffffffffda RBX: 00007f93997d5fa0 RCX: 00007f939958ec29
[  336.479408][T21062] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  336.479412][T21062] RBP: 00007f9399611e41 R08: 0000000000000004 R09: 0000000000000000
[  336.479416][T21062] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.479420][T21062] R13: 00007f93997d6038 R14: 00007f93997d5fa0 R15: 00007ffca23a9948
[  336.479432][T21062]  </TASK>
[  336.479435][T21062] Mem-Info:
[  336.552862][T21063] netlink: 'syz.3.4197': attribute type 4 has an invalid length.
[  336.553454][T21062] active_anon:7752 inactive_anon:0 isolated_anon:0
[  336.553454][T21062]  active_file:1435 inactive_file:38361 isolated_file:0
[  336.553454][T21062]  unevictable:1768 dirty:136 writeback:0
[  336.553454][T21062]  slab_reclaimable:13086 slab_unreclaimable:132699
[  336.553454][T21062]  mapped:20033 shmem:4273 pagetables:1077
[  336.553454][T21062]  sec_pagetables:0 bounce:0
[  336.553454][T21062]  kernel_misc_reclaimable:0
[  336.553454][T21062]  free:208549 free_pcp:16956 free_cma:0
[  336.631808][T21062] Node 0 active_anon:13012kB inactive_anon:0kB active_file:3360kB inactive_file:131480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:14080kB dirty:284kB writeback:0kB shmem:5548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7768kB pagetables:2508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  336.650677][T21062] Node 1 active_anon:22824kB inactive_anon:0kB active_file:2380kB inactive_file:21964kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:70744kB dirty:260kB writeback:0kB shmem:16304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8016kB pagetables:1732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  336.666418][T21062] Node 0 DMA free:14480kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:700kB local_pcp:372kB free_cma:0kB
[  336.678967][T21062] lowmem_reserve[]: 0 811 811 811 811
[  336.682651][T21062] Node 0 DMA32 free:147936kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12876kB inactive_anon:0kB active_file:3360kB inactive_file:131480kB unevictable:3536kB writepending:284kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:35956kB local_pcp:17852kB free_cma:0kB
[  336.697765][T21062] lowmem_reserve[]: 0 0 0 0 0
[  336.701522][T21062] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  336.715353][T21062] lowmem_reserve[]: 0 0 854 854 854
[  336.717970][T21062] Node 1 Normal free:212784kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23096kB inactive_anon:0kB active_file:2380kB inactive_file:21964kB unevictable:3536kB writepending:260kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:26316kB local_pcp:15280kB free_cma:0kB
[  336.731698][T21062] lowmem_reserve[]: 0 0 0 0 0
[  336.734062][T21062] Node 0 DMA: 8*4kB (UM) 6*8kB (UM) 4*16kB (UM) 8*32kB (UM) 8*64kB (UM) 8*128kB (UM) 9*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 0*4096kB = 14480kB
[  336.741277][T21062] Node 0 DMA32: 898*4kB (UM) 1079*8kB (UME) 706*16kB (UME) 98*32kB (UM) 229*64kB (UM) 129*128kB (UM) 86*256kB (UM) 29*512kB (UME) 36*1024kB (UM) 8*2048kB (UME) 0*4096kB = 147936kB
[  336.748938][T21062] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  336.761213][T21062] Node 1 Normal: 159*4kB (UME) 204*8kB (UME) 384*16kB (UME) 469*32kB (UM) 182*64kB (UME) 82*128kB (UM) 32*256kB (UM) 11*512kB (UE) 7*1024kB (UM) 7*2048kB (UME) 32*4096kB (UM) = 211964kB
[  336.769803][T21062] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  336.775490][T21062] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  336.779601][T21062] 45259 total pagecache pages
[  336.782356][T21062] 0 pages in swap cache
[  336.784433][T21062] Free swap  = 124996kB
[  336.786482][T21062] Total swap = 124996kB
[  336.788507][T21062] 786301 pages RAM
[  336.791051][T21062] 0 pages HighMem/MovableOnly
[  336.793292][T21062] 241356 pages reserved
[  336.795530][T21062] 0 pages cma reserved
[  336.849555][T21076] netlink: 'syz.3.4201': attribute type 11 has an invalid length.
[  336.896529][T21078] syzkaller1: entered promiscuous mode
[  336.898390][T21078] syzkaller1: entered allmulticast mode
[  337.004999][T21090] netlink: 'syz.1.4206': attribute type 6 has an invalid length.
[  337.011903][T21090] netlink: 'syz.1.4206': attribute type 12 has an invalid length.
[  337.137188][T21101] netlink: 'syz.1.4208': attribute type 25 has an invalid length.
[  337.361173][T21109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.415149][T21108] lo speed is unknown, defaulting to 1000
[  338.074499][T21120] bond0: (slave bond_slave_0): Releasing backup interface
[  338.077989][T21120] bond0: (slave bond_slave_1): Releasing backup interface
[  338.082650][T21120] team0: Port device team_slave_0 removed
[  338.088214][T21120] team0: Port device team_slave_1 removed
[  338.090614][T21120] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.100788][T21120] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.110224][T21120] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  338.131491][T21120] team0: Mode changed to "activebackup"
[  338.241448][T21132] validate_nla: 1 callbacks suppressed
[  338.241465][T21132] netlink: 'syz.1.4216': attribute type 1 has an invalid length.
[  338.275926][T21127] bond35: entered promiscuous mode
[  338.277836][T21127] bond35: entered allmulticast mode
[  338.279900][T21127] 8021q: adding VLAN 0 to HW filter on device bond35
[  338.933548][T21157] netlink: 'syz.3.4223': attribute type 7 has an invalid length.
[  338.934462][T21154] netlink: 'syz.4.4222': attribute type 1 has an invalid length.
[  338.936611][T21157] netlink: 'syz.3.4223': attribute type 8 has an invalid length.
[  339.604290][T21177] netlink: 'syz.1.4229': attribute type 21 has an invalid length.
[  339.606924][T21177] __nla_validate_parse: 18 callbacks suppressed
[  339.606934][T21177] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4229'.
[  339.613718][T21177] netlink: 'syz.1.4229': attribute type 21 has an invalid length.
[  339.616334][T21177] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4229'.
[  339.624963][T21179] netlink: 'syz.3.4230': attribute type 30 has an invalid length.
[  339.687438][T21184] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.692092][T21184] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  339.714575][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4230'.
[  339.751049][T21188] x_tables: ip_tables: udp match: only valid for protocol 17
[  339.817260][T21199] netlink: 'syz.4.4234': attribute type 1 has an invalid length.
[  339.819941][T21199] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4234'.
[  339.879854][T21202] netlink: 'syz.4.4235': attribute type 4 has an invalid length.
[  339.899047][T14852] lo speed is unknown, defaulting to 1000
[  339.902220][T14852] syz2: Port: 1 Link DOWN
[  339.928450][T21207] macvtap0: entered promiscuous mode
[  339.941547][T21207] mac80211_hwsim hwsim71 wlan1: entered promiscuous mode
[  340.113059][T21220] netlink: 'syz.1.4242': attribute type 5 has an invalid length.
[  340.176207][   T33] audit: type=1107 audit(1758667833.123:5): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j&8	y4 9p~N{k	)!䋀m״-ɉq\~K|D[NFCEnj_m0B'*nQO92wHIӦž$./T7WX%ʆUOnQ>ψ%c9"nTN>Ǆk^٢^TX>DU>GyKt&Qqkɵֽs#)^gCXj]¾5'
[  340.232867][T21237] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  340.235082][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4245'.
[  340.239330][T21238] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4245'.
[  340.242874][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4245'.
[  340.246594][T21238] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4245'.
[  340.263220][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'.
[  340.822274][T21256] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4249'.
[  341.024602][T21260] lo speed is unknown, defaulting to 1000
[  341.905959][T21306] openvswitch: netlink: Key type 10512 is out of range max 32
[  342.350973][T21342] macvlan3: entered promiscuous mode
[  342.354287][T21342] vlan0: entered promiscuous mode
[  342.490278][T21352] lo speed is unknown, defaulting to 1000
[  343.423723][T21419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.426860][T21420] syzkaller0: entered promiscuous mode
[  343.429205][T21420] syzkaller0: entered allmulticast mode
[  343.443378][T21420] tipc: Resetting bearer <eth:syzkaller0>
[  343.462404][T21420] tipc: Disabling bearer <eth:syzkaller0>
[  343.529689][T21426] bridge0: failed insert local address into bridge forwarding table
[  343.579943][T21430] validate_nla: 2 callbacks suppressed
[  343.579959][T21430] netlink: 'syz.4.4292': attribute type 6 has an invalid length.
[  343.639528][T21433] netlink: 'syz.4.4293': attribute type 13 has an invalid length.
[  343.748072][T21438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.908939][T21433] lo speed is unknown, defaulting to 1000
[  343.977137][T21447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.052416][T21446] tipc: Disabling bearer <eth:syzkaller0>
[  344.266543][T21466] netlink: 'syz.3.4303': attribute type 7 has an invalid length.
[  344.297394][T21466] 8021q: adding VLAN 0 to HW filter on device bond7
[  344.308233][T21466] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  344.315271][T21466] bond7: (slave macvlan2): Enslaving as a backup interface with a down link
[  344.319335][T21467] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  344.429535][T21481] netlink: 'syz.3.4305': attribute type 13 has an invalid length.
[  344.433800][T21481] netlink: 'syz.3.4305': attribute type 17 has an invalid length.
[  344.447980][T21481] gretap0: entered promiscuous mode
[  344.488813][T21481] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.494306][T21481] 8021q: adding VLAN 0 to HW filter on device team0
[  344.502104][T21481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  344.640769][T21481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.708759][T21481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.722589][T21494] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  344.725732][T21494] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  344.792947][T21482] lo speed is unknown, defaulting to 1000
[  345.111876][T21512] __nla_validate_parse: 6 callbacks suppressed
[  345.111890][T21512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4315'.
[  345.205193][T21515] tipc: Resetting bearer <eth:gre0>
[  345.259614][T21515] tipc: Resetting bearer <ib:ip6gre0>
[  345.291674][T21515] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  345.344004][T21515] geneve6: left promiscuous mode
[  345.368732][T21515] bond35: left promiscuous mode
[  345.371733][T21515] bond35: left allmulticast mode
[  345.378367][T21515] mac80211_hwsim hwsim71 wlan1: left promiscuous mode
[  345.382175][T21515] macvtap0: left promiscuous mode
[  345.390824][T21507] lo speed is unknown, defaulting to 1000
[  345.399278][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.408529][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.413837][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.417616][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.478238][T21518] netlink: 'syz.1.4317': attribute type 21 has an invalid length.
[  345.490679][T21518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4317'.
[  345.650510][T21529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  345.744942][T21533] netlink: 'syz.1.4322': attribute type 13 has an invalid length.
[  345.752033][T21535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'.
[  345.852777][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4324'.
[  345.922164][T21538] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  345.927681][T21538] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  345.956168][T21541] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4324'.
[  346.038959][T21545] veth0: entered promiscuous mode
[  346.162813][T21556] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4329'.
[  346.167730][T21544] lo speed is unknown, defaulting to 1000
[  346.277070][T21561] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  346.289465][T21545] veth0: left promiscuous mode
[  346.301691][T21562] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4331'.
[  346.308968][T21565] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4330'.
[  346.404515][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4333'.
[  347.111654][T21578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4336'.
[  347.196703][T21586] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  347.202431][T21586] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  347.458012][T21609] bond0: entered promiscuous mode
[  347.459890][T21609] team0: entered promiscuous mode
[  347.462793][T21609] bond0: left promiscuous mode
[  347.464664][T21609] team0: left promiscuous mode
[  347.490150][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  347.596348][T21612] bond6: (slave macvlan4): Releasing backup interface
[  347.623253][T21612] bond6: (slave macvlan0): Releasing backup interface
[  347.641225][T21612] bond0 (unregistering): (slave team0): Releasing backup interface
[  347.646151][T21612] bond0 (unregistering): Released all slaves
[  348.007881][T21640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.062322][T21644] sctp: [Deprecated]: syz.1.4355 (pid 21644) Use of int in max_burst socket option deprecated.
[  348.062322][T21644] Use struct sctp_assoc_value instead
[  348.157742][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  348.161758][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  348.165451][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  348.170764][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  348.433896][T21667] IPVS: set_ctl: invalid protocol: 1 100.1.1.1:20001
[  348.471112][T21665] lo speed is unknown, defaulting to 1000
[  349.074095][T21697] netlink: 'syz.4.4370': attribute type 11 has an invalid length.
[  349.447131][T21734] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  349.453214][T21734] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  349.577422][T21743] netlink: 'syz.1.4384': attribute type 21 has an invalid length.
[  349.581912][T21745] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  349.955751][T21774] netlink: 'syz.1.4393': attribute type 5 has an invalid length.
[  349.963313][T21774] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (2016411651)
[  349.967565][T21774] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  349.986939][T21775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.355762][T21795] __nla_validate_parse: 23 callbacks suppressed
[  350.355782][T21795] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4400'.
[  350.386453][T21787] lo speed is unknown, defaulting to 1000
[  350.421784][T21795] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4400'.
[  350.425689][T21795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'.
[  350.429466][T21795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4400'.
[  350.742623][T21813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.769141][T21812] tipc: Disabling bearer <eth:syzkaller0>
[  350.798258][T21822] sctp: [Deprecated]: syz.1.4402 (pid 21822) Use of int in maxseg socket option.
[  350.798258][T21822] Use struct sctp_assoc_value instead
[  350.860790][T21827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4406'.
[  350.884112][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4402'.
[  350.958108][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4408'.
[  351.024828][T21842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4410'.
[  351.128088][T21842] bond0: (slave team0): Releasing backup interface
[  351.140958][T21842] team0 (unregistering): Port device team_slave_0 removed
[  351.150929][T21842] team0 (unregistering): Port device team_slave_1 removed
[  351.162795][T21842] team0 (unregistering): Port device dummy0 removed
[  351.311729][T21853] netlink: 'syz.4.4412': attribute type 1 has an invalid length.
[  351.403929][T21864] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4414'.
[  351.452479][T21869] geneve3: entered promiscuous mode
[  351.643039][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4419'.
[  351.696402][T21896] netlink: 'syz.1.4422': attribute type 1 has an invalid length.
[  351.702102][T21896] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  351.742144][T21902] netlink: 'syz.4.4423': attribute type 1 has an invalid length.
[  351.767871][T21902] 8021q: adding VLAN 0 to HW filter on device bond4
[  351.797606][T21902] gretap1: entered promiscuous mode
[  351.816104][T21902] bond4: (slave gretap1): making interface the new active one
[  351.821054][T21902] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  351.834420][T21902] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  351.855062][T21902] macvlan4: entered promiscuous mode
[  351.857354][T21902] macvlan4: entered allmulticast mode
[  351.861453][T21902] bond4: entered promiscuous mode
[  351.864787][T21902] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  351.868209][T21902] bond4: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  351.875667][T21902] bond4: left promiscuous mode
[  352.855550][T21932] ieee802154 phy0 wpan0: encryption failed: -90
[  352.861232][T21932] ieee802154 phy0 wpan0: encryption failed: -90
[  353.075516][T21950] netlink: 'syz.1.4439': attribute type 1 has an invalid length.
[  353.079106][T21950] netlink: 'syz.1.4439': attribute type 1 has an invalid length.
[  353.085433][T21950] netlink: 'syz.1.4439': attribute type 1 has an invalid length.
[  353.088777][T21950] netlink: 'syz.1.4439': attribute type 1 has an invalid length.
[  353.105347][T21953] syzkaller1: entered promiscuous mode
[  353.110922][T21953] syzkaller1: entered allmulticast mode
[  353.204919][T21963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.250335][ T5912] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  353.282012][T21965] xfrm1: left allmulticast mode
[  353.291106][T21965] vlan0: left promiscuous mode
[  353.293649][T21965] macvlan3: left promiscuous mode
[  353.303849][T21965] gretap1: left promiscuous mode
[  354.018746][T21982] veth0: entered promiscuous mode
[  354.024283][T21982] veth0 (unregistering): left promiscuous mode
[  355.069965][T22046] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20002
[  355.472376][T22067] __nla_validate_parse: 40 callbacks suppressed
[  355.472394][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4466'.
[  355.502968][T22064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.559435][T22063] tipc: Disabling bearer <eth:syzkaller0>
[  355.629529][T22069] validate_nla: 8 callbacks suppressed
[  355.629546][T22069] netlink: 'syz.4.4467': attribute type 1 has an invalid length.
[  355.709683][T22078] netlink: 'syz.4.4471': attribute type 8 has an invalid length.
[  355.719411][T22080] netlink: 'syz.1.4472': attribute type 1 has an invalid length.
[  355.725093][T22080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4472'.
[  355.728201][T22080] netlink: 'syz.1.4472': attribute type 2 has an invalid length.
[  355.733101][T22080] netlink: 'syz.1.4472': attribute type 1 has an invalid length.
[  355.736110][T22080] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4472'.
[  355.773782][T22087] bridge0: entered allmulticast mode
[  355.778921][T22087] pim6reg: entered allmulticast mode
[  355.781500][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4473'.
[  355.784543][T22087] bridge_slave_1: left allmulticast mode
[  355.786730][T22087] bridge_slave_1: left promiscuous mode
[  355.788654][T22087] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.795284][T22087] bridge_slave_0: left allmulticast mode
[  355.798123][T22087] bridge_slave_0: left promiscuous mode
[  355.800327][T22087] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.843255][T22087] bridge0 (unregistering): left allmulticast mode
[  355.885101][T22097] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4475'.
[  355.968806][T22101] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  355.987435][T22103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4478'.
[  356.055908][T22111] !: renamed from dummy0
[  356.426880][T22117] lo speed is unknown, defaulting to 1000
[  357.134024][T22184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4483'.
[  357.222013][T22190] Unsupported ieee802154 address type: 0
[  357.407601][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4488'.
[  357.414416][T22203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4488'.
[  357.417502][T22203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4488'.
[  357.437152][T22190] lo speed is unknown, defaulting to 1000
[  357.645114][T22222] netlink: 'syz.1.4493': attribute type 4 has an invalid length.
[  357.776928][T22227] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  357.779600][T22228] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  357.782447][T22227] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  357.806473][T22231] sctp: [Deprecated]: syz.1.4496 (pid 22231) Use of struct sctp_assoc_value in delayed_ack socket option.
[  357.806473][T22231] Use struct sctp_sack_info instead
[  358.099689][T22250] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  358.105891][T22251] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  359.668126][   T60] block nbd2: Possible stuck request ffff888021d40000: control (read@0,1024B). Runtime 210 seconds
[  359.672758][   T60] block nbd2: Possible stuck request ffff888021d40200: control (read@1024,1024B). Runtime 210 seconds
[  359.676966][   T60] block nbd2: Possible stuck request ffff888021d40400: control (read@2048,1024B). Runtime 210 seconds
[  359.680899][   T60] block nbd2: Possible stuck request ffff888021d40600: control (read@3072,1024B). Runtime 210 seconds
[  359.733736][T22339] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  359.823027][T22346] netlink: 'syz.4.4526': attribute type 2 has an invalid length.
[  359.828940][T22346] k*: entered promiscuous mode
[  359.859886][T22346] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.867561][T22346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  359.875708][ T5898] lo speed is unknown, defaulting to 1000
[  359.877738][ T5898] syz2: Port: 1 Link ACTIVE
[  360.602478][T22413] __nla_validate_parse: 115 callbacks suppressed
[  360.602495][T22413] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4545'.
[  360.609244][T22413] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4545'.
[  360.638424][T22406] lo speed is unknown, defaulting to 1000
[  360.709856][T22419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4547'.
[  360.880738][T22426] 8021q: adding VLAN 0 to HW filter on device bond6
[  360.903718][T22426] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  360.908814][T22426] bond6: (slave macvlan4): Enslaving as a backup interface with an up link
[  360.922641][T22426] bond0: (slave bond_slave_0): Releasing backup interface
[  360.927681][T22426] bond0: (slave bond_slave_1): Releasing backup interface
[  360.935621][T22426] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.939212][T22426] bond2: (slave bridge1): Releasing backup interface
[  360.946254][T22426] bond4: (slave gretap1): Releasing active interface
[  360.951633][T22426] bond6: (slave macvlan4): Releasing backup interface
[  361.021777][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4551'.
[  361.025438][T22429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4551'.
[  361.031606][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4551'.
[  361.035625][T22429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4551'.
[  361.058666][T22432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4552'.
[  361.071623][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880349bfc00: Timeout. Failed to send simple message.
[  361.122025][T22441] netlink: 'syz.1.4554': attribute type 30 has an invalid length.
[  361.192848][T22446] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  361.254805][T22455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4556'.
[  361.382073][T22461] netlink: 'syz.3.4558': attribute type 10 has an invalid length.
[  361.386785][T22461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4558'.
[  361.397408][T22451] lo speed is unknown, defaulting to 1000
[  361.790775][T22490] netlink: 'syz.1.4568': attribute type 1 has an invalid length.
[  361.860643][T22491] bond36: entered promiscuous mode
[  361.863060][T22491] bond36: entered allmulticast mode
[  361.865782][T22491] 8021q: adding VLAN 0 to HW filter on device bond36
[  361.969884][T22488] lo speed is unknown, defaulting to 1000
[  362.256062][T22517] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  362.264025][T22517] tipc: Bearer <udp:s>: trying with adjusted priority
[  362.266977][T22517] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  362.309833][T22523] netlink: 'syz.3.4576': attribute type 11 has an invalid length.
[  362.439097][T22534] netlink: 'syz.3.4580': attribute type 1 has an invalid length.
[  362.565150][T22544] netlink: 'syz.3.4582': attribute type 5 has an invalid length.
[  362.616586][T22531] lo speed is unknown, defaulting to 1000
[  362.633661][T22547] netlink: 'syz.3.4583': attribute type 13 has an invalid length.
[  362.731878][T22560] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  362.891836][T22569] veth0: entered promiscuous mode
[  362.901018][T22568] veth0: left promiscuous mode
[  362.954270][T22578] vti0: entered promiscuous mode
[  363.041652][T22564] lo speed is unknown, defaulting to 1000
[  363.344944][T22602] netlink: 'syz.4.4597': attribute type 1 has an invalid length.
[  363.348835][T22603] netlink: 'syz.4.4597': attribute type 1 has an invalid length.
[  363.353932][T22602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.358952][T22603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.626910][T22609] lo speed is unknown, defaulting to 1000
[  363.868821][T22625] netlink: 'syz.1.4603': attribute type 10 has an invalid length.
[  363.882189][T22625] !: entered promiscuous mode
[  363.888287][T22625] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  363.951657][T22628] delete_channel: no stack
[  364.216024][T22643] vti0: left promiscuous mode
[  364.242355][T14852] lo speed is unknown, defaulting to 1000
[  364.244769][T14852] syz2: Port: 1 Link DOWN
[  364.935616][T22684] bridge7: port 1(veth9) entered blocking state
[  364.938051][T22684] bridge7: port 1(veth9) entered disabled state
[  364.946835][T22684] veth9: entered allmulticast mode
[  364.951738][T22684] veth9: entered promiscuous mode
[  364.977718][T22684] bridge7: port 2(veth0_to_bond) entered blocking state
[  364.982067][T22684] bridge7: port 2(veth0_to_bond) entered disabled state
[  364.985096][T22684] veth0_to_bond: entered allmulticast mode
[  364.989017][T22684] veth0_to_bond: entered promiscuous mode
[  365.057599][T22695] 8021q: adding VLAN 0 to HW filter on device bond7
[  365.081719][T22695] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  365.085990][T22695] bond6: (slave macvlan5): Enslaving as a backup interface with a down link
[  365.090557][T22695] veth0_to_bond: left allmulticast mode
[  365.092861][T22695] veth0_to_bond: left promiscuous mode
[  365.095465][T22695] bridge7: port 2(veth0_to_bond) entered disabled state
[  365.103449][T22695] veth9: left allmulticast mode
[  365.105371][T22695] veth9: left promiscuous mode
[  365.107407][T22695] bridge7: port 1(veth9) entered disabled state
[  365.114575][T22695] bond6: (slave macvlan5): Releasing backup interface
[  365.292980][T22717] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  365.417723][T22737] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  365.704986][T22754] lo speed is unknown, defaulting to 1000
[  365.752448][   T33] audit: type=1800 audit(1758667858.703:6): pid=22759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4646" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1381 res=0 errno=0
[  365.845232][T22771] 8021q: adding VLAN 0 to HW filter on device bond38
[  365.869539][T22771] bond23: (slave wlan0): Releasing active interface
[  365.878804][T22771] bond38: (slave wlan0): Opening slave failed
[  366.342773][T22808] validate_nla: 7 callbacks suppressed
[  366.342783][T22808] netlink: 'syz.1.4660': attribute type 10 has an invalid length.
[  366.348251][T22808] __nla_validate_parse: 38 callbacks suppressed
[  366.348263][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4660'.
[  366.409449][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.418274][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.430160][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.434337][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.481248][T22813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4661'.
[  366.526439][T22816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4663'.
[  366.864743][T22848] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  366.983603][T22868] netlink: 'syz.1.4675': attribute type 10 has an invalid length.
[  366.991458][T22868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4675'.
[  366.997774][T22868] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  367.053977][T22875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4676'.
[  367.062854][T22875] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4676'.
[  367.109796][T22879] pimreg: tun_chr_ioctl cmd 2147767506
[  367.140600][T22877] IPv6: sit2: Disabled Multicast RS
[  367.148229][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4677'.
[  367.235086][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'.
[  367.235461][T22869] lo speed is unknown, defaulting to 1000
[  367.238058][T22883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4679'.
[  367.238070][T22883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4679'.
[  368.615031][T22900] netlink: 'syz.1.4684': attribute type 10 has an invalid length.
[  368.618554][T22900] !: left promiscuous mode
[  368.625976][T22902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.628173][T22900] team0: Port device 0! added
[  368.874677][T22926] netlink: 'syz.3.4692': attribute type 5 has an invalid length.
[  368.915840][T22932] netlink: 'syz.3.4694': attribute type 1 has an invalid length.
[  368.983611][T22942] netlink: 'syz.4.4697': attribute type 83 has an invalid length.
[  368.986713][T22935] netlink: 'syz.1.4695': attribute type 9 has an invalid length.
[  369.121061][T22964] bond5: left promiscuous mode
[  369.122935][T22964] bond5: left allmulticast mode
[  369.145212][T22958] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  369.298161][T22982] netlink: 'syz.4.4707': attribute type 3 has an invalid length.
[  369.814735][T23039] netlink: 'syz.1.4718': attribute type 6 has an invalid length.
[  369.909659][T23041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.151665][T23059] syzkaller0: entered promiscuous mode
[  370.154182][T23059] syzkaller0: entered allmulticast mode
[  371.639123][T23073] netlink: 'syz.1.4731': attribute type 1 has an invalid length.
[  371.656741][T23073] 8021q: adding VLAN 0 to HW filter on device bond39
[  371.723754][T23076] __nla_validate_parse: 15 callbacks suppressed
[  371.723771][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4732'.
[  371.768328][T23080] netlink: 'syz.1.4734': attribute type 2 has an invalid length.
[  371.793942][T23080] k*: entered promiscuous mode
[  371.822335][T23080] 8021q: adding VLAN 0 to HW filter on device team0
[  371.829827][T23080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.849494][T23082] syzkaller1: entered promiscuous mode
[  371.852414][T23082] syzkaller1: entered allmulticast mode
[  371.856627][T23082] netlink: 'syz.4.4735': attribute type 3 has an invalid length.
[  371.859970][T23082] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4735'.
[  371.892431][T23087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4736'.
[  371.917265][T23087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4736'.
[  371.942622][T23090] netlink: 'syz.1.4737': attribute type 1 has an invalid length.
[  371.953509][T23090] workqueue: Failed to create a rescuer kthread for wq "bond40": -EINTR
[  371.998384][T23097] netlink: 212936 bytes leftover after parsing attributes in process `syz.1.4739'.
[  372.121279][T23107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4742'.
[  372.182304][ T5296] udevd[5296]: worker [9460] /devices/virtual/block/nbd2 timeout; kill it
[  372.186130][ T5296] udevd[5296]: seq 16621 '/devices/virtual/block/nbd2' killed
[  372.338061][T23109] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4742'.
[  373.175982][T23124] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.178895][T23125] syzkaller0: entered promiscuous mode
[  373.181930][T23125] syzkaller0: entered allmulticast mode
[  373.214504][T23125] tipc: Resetting bearer <eth:syzkaller0>
[  373.234368][T23125] tipc: Disabling bearer <eth:syzkaller0>
[  373.303403][T23129] xt_l2tp: v2 tid > 0xffff: 37482740
[  373.336651][T23131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4750'.
[  373.360711][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4751'.
[  373.364408][T23136] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4751'.
[  373.402068][T23138] netlink: 'syz.4.4752': attribute type 1 has an invalid length.
[  373.407730][T23138] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  373.822730][T23157] netlink: 'syz.4.4757': attribute type 83 has an invalid length.
[  373.933704][T23162] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode
[  373.936154][T23162] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  374.246798][T23169] tipc: Resetting bearer <eth:gre0>
[  374.265161][T23169] tipc: Resetting bearer <ib:ip6gre0>
[  374.303241][T23169] bond36: left promiscuous mode
[  374.305272][T23169] bond36: left allmulticast mode
[  374.362650][T23175] netlink: 'syz.1.4762': attribute type 1 has an invalid length.
[  374.379702][T23175] 8021q: adding VLAN 0 to HW filter on device bond40
[  374.388904][T23175] bond40: entered promiscuous mode
[  374.495533][T23181] sctp: [Deprecated]: syz.1.4764 (pid 23181) Use of int in maxseg socket option.
[  374.495533][T23181] Use struct sctp_assoc_value instead
[  374.840807][T23183] netlink: 'syz.4.4765': attribute type 6 has an invalid length.
[  374.844905][T23183] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  374.847899][T23183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.852967][T23183] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  374.855520][T23183] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  374.857918][T23183] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  377.125896][   T56] block nbd1: Receive control failed (result -11)
[  377.479695][T23223] veth13: entered promiscuous mode
[  377.857030][T23233] openvswitch: netlink: Flow actions attr not present in new flow.
[  377.862966][T23233] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  377.868488][T23233] __nla_validate_parse: 9 callbacks suppressed
[  377.868502][T23233] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4781'.
[  377.875947][T23233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4781'.
[  377.885696][T23237] netlink: 'syz.1.4783': attribute type 10 has an invalid length.
[  377.896801][T23237] netlink: 'syz.1.4783': attribute type 10 has an invalid length.
[  377.904324][T23237] team0: Port device 0! removed
[  377.983056][T23245] sch_tbf: burst 5 is lower than device lo mtu (81) !
[  378.067690][T23252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.076525][T23252] syzkaller0: entered promiscuous mode
[  378.078820][T23252] syzkaller0: entered allmulticast mode
[  378.105543][T23252] tipc: Resetting bearer <eth:syzkaller0>
[  378.106708][T23254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4789'.
[  378.111235][T23249] tipc: Resetting bearer <eth:syzkaller0>
[  378.127219][T23249] tipc: Disabling bearer <eth:syzkaller0>
[  378.213511][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.284942][T23269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.287688][T23269] syzkaller0: entered promiscuous mode
[  378.289476][T23269] syzkaller0: entered allmulticast mode
[  378.295953][T23269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4795'.
[  378.301529][T23269] IPv6: sit3: Disabled Multicast RS
[  378.303863][T23269] sit3: entered allmulticast mode
[  378.319769][T23269] tipc: Resetting bearer <eth:syzkaller0>
[  378.333708][T23271] netlink: 'syz.1.4794': attribute type 8 has an invalid length.
[  378.337544][T23268] tipc: Resetting bearer <eth:syzkaller0>
[  378.372930][T23268] tipc: Disabling bearer <eth:syzkaller0>
[  378.439606][T23286] openvswitch: netlink: Flow actions attr not present in new flow.
[  378.447052][T23287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4799'.
[  378.458374][T23286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4797'.
[  378.508281][T23286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4797'.
[  378.512966][T23288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4797'.
[  378.537696][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4801'.
[  378.589653][T23301] netlink: 'syz.3.4802': attribute type 21 has an invalid length.
[  378.596548][T23301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4802'.
[  378.600560][T23301] netlink: 'syz.3.4802': attribute type 1 has an invalid length.
[  378.633606][T23304] netlink: 'syz.4.4803': attribute type 13 has an invalid length.
[  378.636167][T23304] netlink: 'syz.4.4803': attribute type 5 has an invalid length.
[  378.641373][T23305] netlink: 'syz.1.4804': attribute type 1 has an invalid length.
[  378.672465][T23305] 8021q: adding VLAN 0 to HW filter on device bond41
[  378.675516][T23307] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  378.692106][T23305] ipvlan0: entered allmulticast mode
[  378.693860][T23305] bond41: entered allmulticast mode
[  378.725000][T23309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.734896][T23311] netlink: 'syz.3.4806': attribute type 9 has an invalid length.
[  378.804557][T23319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.811229][T23318] ip6gre1: entered allmulticast mode
[  378.823767][T23317] ip6gre1: entered allmulticast mode
[  378.859672][T23304] lo speed is unknown, defaulting to 1000
[  378.939825][T23326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.819577][T23340] : renamed from team_slave_1
[  380.011289][T23366] vlan1: entered allmulticast mode
[  380.013639][T23366] veth0_vlan: entered allmulticast mode
[  380.050966][T23369] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  380.062225][T23372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.064932][T23372] syzkaller0: entered promiscuous mode
[  380.066942][T23372] syzkaller0: entered allmulticast mode
[  380.241405][T23368] tipc: Resetting bearer <eth:syzkaller0>
[  380.282366][T23368] tipc: Disabling bearer <eth:syzkaller0>
[  380.463204][T23399] netlink: 'syz.1.4827': attribute type 5 has an invalid length.
[  380.534867][   T40] smc: removing ib device syz!
[  380.803350][T23422] tc_dump_action: action bad kind
[  381.639140][T23455] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  382.008170][T23470] lo speed is unknown, defaulting to 1000
[  382.104215][T23470] syzkaller1: entered promiscuous mode
[  382.106885][T23470] syzkaller1: entered allmulticast mode
[  382.301474][T23490] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  382.307887][T23490] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  382.757131][T23495] dvmrp8: entered allmulticast mode
[  382.759976][T23494] dvmrp8: left allmulticast mode
[  383.244572][T23505] 
[  383.245657][T23505] ======================================================
[  383.248540][T23505] WARNING: possible circular locking dependency detected
[  383.251507][T23505] syzkaller #0 Not tainted
[  383.253572][T23505] ------------------------------------------------------
[  383.257173][T23505] syz.3.4857/23505 is trying to acquire lock:
[  383.259656][T23505] ffffffff8f68f998 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  383.263348][T23505] 
[  383.263348][T23505] but task is already holding lock:
[  383.266287][T23505] ffff888032bdc470 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  383.269903][T23505] 
[  383.269903][T23505] which lock already depends on the new lock.
[  383.269903][T23505] 
[  383.273984][T23505] 
[  383.273984][T23505] the existing dependency chain (in reverse order) is:
[  383.277629][T23505] 
[  383.277629][T23505] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  383.280731][T23505]        lock_acquire+0x120/0x360
[  383.282706][T23505]        _raw_spin_lock_bh+0x36/0x50
[  383.284817][T23505]        nr_rt_device_down+0x12a/0x720
[  383.286990][T23505]        nr_device_event+0x137/0x150
[  383.289010][T23505]        notifier_call_chain+0x1b6/0x3e0
[  383.291172][T23505]        __dev_notify_flags+0x18d/0x2e0
[  383.293396][T23505]        netif_change_flags+0xe8/0x1a0
[  383.295535][T23505]        dev_change_flags+0x130/0x260
[  383.297378][T23505]        dev_ioctl+0x7b4/0x1150
[  383.299097][T23505]        sock_do_ioctl+0x22c/0x300
[  383.301325][T23505]        sock_ioctl+0x576/0x790
[  383.303401][T23505]        __se_sys_ioctl+0xfc/0x170
[  383.305604][T23505]        do_syscall_64+0xfa/0x3b0
[  383.307815][T23505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.310593][T23505] 
[  383.310593][T23505] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  383.313904][T23505]        lock_acquire+0x120/0x360
[  383.316070][T23505]        _raw_spin_lock_bh+0x36/0x50
[  383.318354][T23505]        nr_rt_device_down+0xa9/0x720
[  383.320638][T23505]        nr_device_event+0x137/0x150
[  383.322771][T23505]        notifier_call_chain+0x1b6/0x3e0
[  383.325159][T23505]        __dev_notify_flags+0x18d/0x2e0
[  383.327549][T23505]        netif_change_flags+0xe8/0x1a0
[  383.329816][T23505]        dev_change_flags+0x130/0x260
[  383.332053][T23505]        dev_ioctl+0x7b4/0x1150
[  383.334171][T23505]        sock_do_ioctl+0x22c/0x300
[  383.336356][T23505]        sock_ioctl+0x576/0x790
[  383.338364][T23505]        __se_sys_ioctl+0xfc/0x170
[  383.340545][T23505]        do_syscall_64+0xfa/0x3b0
[  383.342742][T23505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.345503][T23505] 
[  383.345503][T23505] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  383.348852][T23505]        validate_chain+0xb9b/0x2140
[  383.351110][T23505]        __lock_acquire+0xab9/0xd20
[  383.353263][T23505]        lock_acquire+0x120/0x360
[  383.355395][T23505]        _raw_spin_lock_bh+0x36/0x50
[  383.357536][T23505]        nr_rt_ioctl+0x390/0xd50
[  383.359516][T23505]        sock_do_ioctl+0xdc/0x300
[  383.361589][T23505]        sock_ioctl+0x576/0x790
[  383.363571][T23505]        __se_sys_ioctl+0xfc/0x170
[  383.365303][T23505]        do_syscall_64+0xfa/0x3b0
[  383.366889][T23505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.368931][T23505] 
[  383.368931][T23505] other info that might help us debug this:
[  383.368931][T23505] 
[  383.372806][T23505] Chain exists of:
[  383.372806][T23505]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  383.372806][T23505] 
[  383.378153][T23505]  Possible unsafe locking scenario:
[  383.378153][T23505] 
[  383.380981][T23505]        CPU0                    CPU1
[  383.383105][T23505]        ----                    ----
[  383.385217][T23505]   lock(&nr_node->node_lock);
[  383.387055][T23505]                                lock(nr_node_list_lock);
[  383.389732][T23505]                                lock(&nr_node->node_lock);
[  383.392508][T23505]   lock(nr_neigh_list_lock);
[  383.394348][T23505] 
[  383.394348][T23505]  *** DEADLOCK ***
[  383.394348][T23505] 
[  383.397460][T23505] 2 locks held by syz.3.4857/23505:
[  383.399336][T23505]  #0: ffffffff8f68f9f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  383.402847][T23505]  #1: ffff888032bdc470 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  383.406648][T23505] 
[  383.406648][T23505] stack backtrace:
[  383.408798][T23505] CPU: 1 UID: 0 PID: 23505 Comm: syz.3.4857 Not tainted syzkaller #0 PREEMPT(full) 
[  383.408809][T23505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  383.408815][T23505] Call Trace:
[  383.408821][T23505]  <TASK>
[  383.408828][T23505]  dump_stack_lvl+0x189/0x250
[  383.408841][T23505]  ? __pfx_dump_stack_lvl+0x10/0x10
[  383.408849][T23505]  ? __pfx__printk+0x10/0x10
[  383.408857][T23505]  ? stack_trace_save+0x9c/0xe0
[  383.408869][T23505]  print_circular_bug+0x2ee/0x310
[  383.408877][T23505]  check_noncircular+0x134/0x160
[  383.408885][T23505]  validate_chain+0xb9b/0x2140
[  383.408893][T23505]  ? stack_trace_save+0x9c/0xe0
[  383.408900][T23505]  ? __pfx_stack_trace_save+0x10/0x10
[  383.408907][T23505]  ? stack_depot_save_flags+0x40/0x860
[  383.408920][T23505]  __lock_acquire+0xab9/0xd20
[  383.408930][T23505]  ? nr_rt_ioctl+0x390/0xd50
[  383.408938][T23505]  lock_acquire+0x120/0x360
[  383.408947][T23505]  ? nr_rt_ioctl+0x390/0xd50
[  383.408954][T23505]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  383.408962][T23505]  ? nr_rt_ioctl+0x390/0xd50
[  383.408968][T23505]  _raw_spin_lock_bh+0x36/0x50
[  383.408980][T23505]  ? nr_rt_ioctl+0x390/0xd50
[  383.408987][T23505]  nr_rt_ioctl+0x390/0xd50
[  383.408995][T23505]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  383.409004][T23505]  ? apparmor_capable+0x137/0x1b0
[  383.409014][T23505]  ? capable+0x89/0xe0
[  383.409021][T23505]  ? nr_ioctl+0x1b1/0x3b0
[  383.409031][T23505]  sock_do_ioctl+0xdc/0x300
[  383.409039][T23505]  ? __pfx_sock_do_ioctl+0x10/0x10
[  383.409045][T23505]  ? __lock_acquire+0xab9/0xd20
[  383.409056][T23505]  sock_ioctl+0x576/0x790
[  383.409066][T23505]  ? __pfx_sock_ioctl+0x10/0x10
[  383.409108][T23505]  ? __fget_files+0x2a/0x420
[  383.409115][T23505]  ? __fget_files+0x3a0/0x420
[  383.409120][T23505]  ? __fget_files+0x2a/0x420
[  383.409126][T23505]  ? bpf_lsm_file_ioctl+0x9/0x20
[  383.409135][T23505]  ? __pfx_sock_ioctl+0x10/0x10
[  383.409144][T23505]  __se_sys_ioctl+0xfc/0x170
[  383.409155][T23505]  do_syscall_64+0xfa/0x3b0
[  383.409164][T23505]  ? lockdep_hardirqs_on+0x9c/0x150
[  383.409171][T23505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.409178][T23505]  ? exc_page_fault+0x9f/0xf0
[  383.409185][T23505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.409191][T23505] RIP: 0033:0x7f939958ec29
[  383.409201][T23505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  383.409207][T23505] RSP: 002b:00007f93977f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  383.409216][T23505] RAX: ffffffffffffffda RBX: 00007f93997d6090 RCX: 00007f939958ec29
[  383.409221][T23505] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000048
[  383.409226][T23505] RBP: 00007f9399611e41 R08: 0000000000000000 R09: 0000000000000000
[  383.409230][T23505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.409234][T23505] R13: 00007f93997d6128 R14: 00007f93997d6090 R15: 00007ffca23a9948
[  383.409242][T23505]  </TASK>
[  389.730916][   T60] block nbd2: Possible stuck request ffff888021d40000: control (read@0,1024B). Runtime 240 seconds
[  389.735481][   T60] block nbd2: Possible stuck request ffff888021d40200: control (read@1024,1024B). Runtime 240 seconds
[  389.740399][   T60] block nbd2: Possible stuck request ffff888021d40400: control (read@2048,1024B). Runtime 240 seconds
[  389.745140][   T60] block nbd2: Possible stuck request ffff888021d40600: control (read@3072,1024B). Runtime 240 seconds

VM DIAGNOSIS:
22:51:16  Registers:
info registers vcpu 0

CPU#0
RAX=ffffc900086c8000 RBX=ffffffff90327e01 RCX=ffffc900086c6428 RDX=ffffc900086c6301
RSI=dffffc0000000000 RDI=ffffc900086c6390 RBP=dffffc0000000000 RSP=ffffc900086c6258
R8 =ffffc900086c6410 R9 =0000000000000000 R10=ffffc900086c63d8 R11=fffff520010d8c7d
R12=ffffc900086c6420 R13=ffffc900086c0000 R14=ffffc900086c6388 R15=ffffffff8172c195
RIP=ffffffff8172da47 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f939a3436c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f93977d4fc8 CR3=00000000273f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=00007f93997a7478 00007f93997a74c0
XMM06=00007f93997a74b8 00007f93997a74b0 XMM07=00007f93997a74a8 00007f93997a74a0
XMM08=0000000000000000 00007f9399612f0f XMM09=0000000000000000 00007f9399612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900084e7150
R8 =ffff888020ce8237 R9 =1ffff1100419d046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b028db R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f93977f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f939a307d60 CR3=00000000273f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f93997a7498 00007f93997a7470 XMM03=00007f93997a74a8 00007f93997a74a0
XMM04=00007f939a30d100 00007f93997a7460 XMM05=00007f93997a7478 00007f93997a74c0
XMM06=00007f93997a74b8 00007f93997a74b0 XMM07=00007f93997a74a8 00007f93997a74a0
XMM08=0000000000000000 00007f9399612f0f XMM09=0000000000000000 00007f9399612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
