last executing test programs:

50.70541901s ago: executing program 1 (id=856):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
close(0x4)
r2 = socket$netlink(0x10, 0x3, 0x14)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000380)="580000001400192340834b80040d8c56", 0x10}], 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r5, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x1)
getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000000200)=""/49, &(0x7f0000000280)=0x31)
bind$can_raw(r4, &(0x7f00000001c0), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x9b3f, 0x4)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x200}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

50.568763003s ago: executing program 0 (id=857):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r9, 0x10e, 0x8, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xc}, @TCA_TBF_PRATE64={0xc, 0x5, 0x32e15927d6c9748}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x8, 0x5, 0x1, 0x7}, {0x8, 0x1, 0xffff, 0xc, 0xf, 0x1}, 0x8, 0xd, 0xb1b}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061187b000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

49.796552118s ago: executing program 2 (id=862):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000004eec00"/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r5, 0x1000)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010000000400000001000000020000840400000000000000040000000900000003000000050000000200000000612e00"/64], &(0x7f0000000f40)=""/4089, 0x40, 0xff9, 0x1}, 0x28)
shutdown(r2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000012c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)

49.795650093s ago: executing program 1 (id=863):
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES64=r2, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59e75486"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="1100"/12, @ANYRES32=r2, @ANYBLOB="df0cbb2c3830e1b4dd5ea2034164ffd212b02e2a", @ANYRES64=0x0], 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1c, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1c, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0400"/20, @ANYRES32, @ANYBLOB="000000000000000000000000000000da5a229b0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2000007}]}}]}, 0x40}}, 0x4000010)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6}, 0x20)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0x3)
connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) (async)
connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x80, r9, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0xc0) (async)
sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x80, r9, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0xc0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0x3e, &(0x7f00000000c0)=0x4, 0x4) (async)
setsockopt$sock_int(r11, 0x1, 0x3e, &(0x7f00000000c0)=0x4, 0x4)
bind$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x4, 0x1, 0x3, @random}, 0x10) (async)
bind$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x4, 0x1, 0x3, @random}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000050000000000000000000000850000007400000095000000000000f7"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x2}, 0x94)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x36}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x36}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', r5, 0x8000, 0x8, 0x1000, 0xffffff3a, {{0x16, 0x4, 0x2, 0x3a, 0x58, 0x68, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x8b, [@broadcast, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x58, 0x1, 0x6, [{@loopback, 0x1}, {@local, 0x7f}, {@broadcast, 0x7}, {@empty, 0x9}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}}})

49.72870844s ago: executing program 1 (id=864):
syz_emit_ethernet(0x32, &(0x7f0000000740)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000005)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

49.719002861s ago: executing program 1 (id=865):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000f1367ac91d0acf502b69838335373d70f37bbc143ce065adb600b801e4e069a2c476177e78324912c6038f3930606d3379a0bd"], 0x14}, 0x1, 0x40030000000000}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0xa, 0x3, 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)

48.947145776s ago: executing program 0 (id=866):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r3 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="aa6f8a405f653cb74fe87bd2880455764a8df5bdc7eb8ecdeceb3d4ff8870d32c48cccbc17194b137b2f7ce6be5d0d228dd67e7a67f9ad4d7f892978d92043adf27592899198453bd6d834ee4d2184214f7ceba40a0cd310d488d50f0a69451d3aaf09541aea9f442800062e91bf95b8218bf6c71b05755cd02ed70a4c3f668111bd01f5aab8a1d36c6f659055836055919ab632395020", 0x97}], 0x1, &(0x7f0000003640)=ANY=[@ANYRES32=r2], 0x220, 0x4008810}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="729a8b1bbe376183a5ea79b36e7ac3f72d2563193d7eb5b077db7e4dfe1fc0f26136a044ed80d9e0be34a76f59", 0x2d}, {&(0x7f0000000500)="5f8715c2770719b6a6564271", 0xc}], 0x2, &(0x7f0000004a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES16=<r4=>r0, @ANYRES8, @ANYRESOCT=r1, @ANYRESOCT=r3], 0x168, 0x40004}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x4844}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x80}], 0x4, 0x4004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES64=r4, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, 0xfffffffffffffffd)
r6 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000006c0)="06e89e407c6eb3b629561b9d20c10b4d08f4d6262427cd30f8acf76c9d9145bd20e51e5a2e57cc2255371ef17bc94ad7cb4abccd07248653f31b3dc13b75607c957b9eef1a5967605c7d941713c286c50fff0970d365805f45c3b0eb0c2345ebbcfbcfb9578a84d22438a43848b04a90d1a1", &(0x7f0000000300)=""/18, 0x2}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe})
write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6)

48.524768773s ago: executing program 2 (id=867):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket(0x10, 0xa, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r2}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x10)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@gettaction={0xcc, 0x32, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x13}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc9}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xcc}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x14, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5}}]}}]}, 0x4c}}, 0x24040084)
socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
shutdown(r6, 0x1)
recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10162)
listen(r6, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0xc)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

48.524379324s ago: executing program 2 (id=868):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @local, 0x2}, 0x1c)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="796e3ca426ea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0xfffffffd, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f00000001c0)={0x2, 0xff7f, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@mask_fadd={0x58, 0x114, 0x8, {{0x5227, 0x20080}, &(0x7f0000000200)=0xd0, 0x0, 0x2, 0x4, 0xfffffffd, 0x66, 0xa5cd07ec1af72f20, 0xfffffffffffffffb}}], 0x58}, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa)
sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c)
shutdown(r0, 0x0)

47.793101386s ago: executing program 2 (id=869):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113780000000000bfa000000000000007000000ee0016055e03010000000000250500000000000069163e0000000000bf07000000000000260507000fff0720670600003f000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000001800000ebc1119f281000000a5d8381e7c4ad7e6a5af810efff4ef2d4d91e63a1e2b3f58796dbc44985eb343d5aec129c0d9340a4ec42fa0df8683b0a39165ec32c37dc37649fbcaa02c2e1f20f5e178"], 0x50)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', <r1=>0x0}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000000010073797a30000000005c000000090a0104000000000000000f0700000008000a40000000000900020073797a3100000000090001001e6a7a3000000000080005400000000d08000640ffffff00080003400000000810001180090001"], 0xe4}}, 0x0) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32000000001400058008000240000000ce07"], 0xa0}}, 0x14b6deac033214c2) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}})
r4 = socket$inet(0x2, 0x3, 0x30)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9) (async)
r10 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x51cf8d4f258ee1a4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x3, 0x1, 0x6, 0x40}, {0x9e, 0x0, 0x2, 0x401, 0x1}, 0xd73, 0xb29, 0x400372}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 32)
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1153e700e18d40710b001a070077e40060000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="01000000040000000300"/28], 0x50)

45.445086321s ago: executing program 0 (id=870):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000000"], 0x50)
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0xd3, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000884800000000000000000000000000000000487b00b5006500000911907800000000640101019404000007077d00000000004e214e2100959078420c0000000000006f1ca0d6d722c8ec45d6bcd0c8629eaa2fb6423a6a71a5fbc4fa8d2ed2d40df2a5d7b6cbdfd73beb55d891de94927ee47e780308cbff4fdcb97fd91cfa623ad5be97083a9fce3e760fa2899a9bccfbdd587761926701993942a59830dbb6b955c7f33ab69c81a0d97c6a4f654b87b6c3d211702575440c69bbdc30e2c5874a24786293c432"], 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x18, 0x5a, 0x1, 0x0, 0x2, {0x2}, [{0x4}]}, 0x18}}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
r5 = getpid()
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)={0x185c, 0x2b, 0x800, 0x1, 0xfffffffc, {0xa, 0x0, 0x6e80}, [@generic="161e57de1527ed82765b65ca1e9c47a991415a2432e3118c22c03a", @nested={0x4, 0x1}, @nested={0x4a6, 0x113, 0x0, 0x1, [@generic="2e1eb5badcb43304f2f08493f45db55e15999585d54c9e0b4b67f0884f2a56c28c8f6e714a344394ea6d00551c3fdaf7538556482636cd8620a44dbc7ec2d8832b55f6b10a9ae5366a37e09784d8e025aba02115ba748df6697a8ae82a2c0423fa5c5e3087a00a5123f95248275808d2d3c1fa84255ac950125d7b16117c7bf5f14a0f4f2434767580cd287631ebfb77cd96b78588868aa221d650981926bde8c665c1af6f46", @nested={0xe4, 0xb1, 0x0, 0x1, [@generic="8924692d7ba2a0f0a90eb88ba07ebcc3c423879f8f994bf4d0f5bf34410f7210d9b4b6fa0a2327abf90d344d26737fe0df31d57b967f9f55709e1d193e890365a0bf6d4da7f5ee9d458c05fdca4ad11882e857caca28a56807b6c5989497c1b585096f6fff3d41617b0ddb18c21c92a855055f328c3436ee5b711afe0937f0a1c61c6953e1a5e16b880deddcc1e8ae8f0005346ca3d9074a704c3a2deda0f17a9a1077397cf8b201c9853ba166163c1a71ba3e0a27cd5bf3ff984eeb97280b0cfa09fffc8b952a39dbb0d9b3fe864683b87372251c46b6d39c2352d18a551cdc"]}, @nested={0x24e, 0xb, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @fd=r1}, @generic="3aca4de38c7f0126a19d15cffddc5d85c1b660fe40430a4879a104555abe657ada0adc6a48fc72630e17bb9b6002a9f0442bf697001a646ddd32f23c90ee4915718bd682950583a0b6362b5e4c61f8e99d29f6994cff17a362e802bc93e838bd9bd0161941a5f740b0ad1f03aac7a1102d321ec0fbd7e0d486b91944cc156fd6d4a0a96c82e254e6237ffbdab316f2ffe26c03f6bbd68239a9a31f95faa2e559fd60d7646364a60fe617d7f6ee7f35a8ab93ce102f54ec2b6c80eaa2855c799856", @generic="b0f7908aa83319c3e387e8784159b49b7a6b54343f1f7f983931cd198df6dacbda009aa8f2a3675b2059a214a90e8071d21ecea8acd025bf08d0d33142c3a9423fdc4bd79dd7453aa10df334c55ec5a941bc06a130f3c10e224504b58d948a22f8c4686411cab461d071cfe2f5d0fc277a9820a6da849888c3d73395ecbcf88c4e86a3ebf87f53c98c28076fd35a523c434475ca1615b63a98168fbaad6b0a7fbdb62d934503d8accb4b74d93c5893db3dc84586d9fca1f0f86afce21f9f43f875b1d1eaf8ae651351016295495480889d585dea65", @nested={0x4, 0x93}, @typed={0xa3, 0xbb, 0x0, 0x0, @binary="b0a3cf79594dbb2e70378c7fdfadb417ca406c49541a9ec4eb68ade266b060753cb5e86d81da0f291dbfdf217435fd86f1af32fb7ab7e4bf35d9218b07a6270d8e013b86dad10f6d3d82f9eed7a85b878fb59b881b8149584aa15fd1ee4443723a477ede1afd7ee773a5f9ca45d3f0f98a5cd16abfb341b891365b2c9dbffcf8023cd41842956bea85abc89d518422425a3712ac69eb885fbb6262acd1d81c"}, @nested={0x4, 0x18}]}, @generic="debb456b16672ce4b417f59b50700d694ac2c7fea7354a58336a31c64fe318c3dbd7af2c539e949702f2a25b400d15364312da1fae1ceaeaf5019b17d421", @generic="8e21f91421902121cd71b9cd5a7f7f1da3cecc871231", @typed={0xc, 0xb0, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0xd, 0x0, 0x0, @uid=r8}, @nested={0x5f, 0x1b, 0x0, 0x1, [@generic="5a886f33fb818d8b4d1090310edf46e81497141913cdc94ca4b7617e9fcf190dc8bdcf7b5ac5476627c36ab2a601bb4269b68ac549ef66d935e09b300413c685e0a189ee8fe5a089007631d002c19b", @nested={0x4, 0x12a}, @typed={0x8, 0x137, 0x0, 0x0, @pid=r5}]}]}, @nested={0x12bc, 0x26, 0x0, 0x1, [@nested={0x153, 0x100, 0x0, 0x1, [@nested={0x4, 0xe1}, @generic="50b295d7ac38a1493239f5c5956a603cf1c2b0dee1c515fc8e7a0aabcd913ecd856d6e3df6bd1c6e84febf3d3e768944505d22cde36a4b619526b35ce91417c016bd3e0876d137b2aced", @generic="b9c06f0e055853de7335786e662ed47f27c9275348284b38ec593ba7f97bdedb8e87c6905e342f25aca8459af5079359ebcc3514cde4ff39325b0841a92808bb6c9a13a1ee75e9970731188a3933cab84704b562df24e762289bf69512c9d68517e5688570d8ba5d696597ff15974659a743b1142bb7b3d47ed0703e7b97b44af8cb4b2d350cc7e256f9c7c818bd890000cfa00d1f7440b48dd8a98b2d6020d64fd5ee5df945a09a5f70d71bc1c42167369a785be89836578657db15a0349d31e57d92f08b9a21a574bba9e7aaef7b60633b2641c67ba27481d0db98d301022a5591de3093d2d0b23a411468bdb4604c7de227378e", @nested={0x4, 0x47}, @typed={0x8, 0xae, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x124, 0x6e, 0x0, 0x1, [@generic="40253236604159a444fd25759bd19fd70d6088bcd459bc27efe89a3a5e828d9306825e58e3caff0dd11142b598afaa886e43a105dd346a9058d6a4be9be03257bbfebc7e4859c7d28a379d267fc8a1a7a43de9f90b9b0b9bc539c63962015f4e6f20b68da2c43e9f78c844058cb0b6278f2ec9640b981579d9c32960f6c9e1d5e17a597b5b94e7734637ab6633d965ce9617ab9c99c455372e263cca64839da1a165aa56c58019e4e80f682789197658eadedd3b44bef7b3bd1a0c0785f356950bb1f5869b5b76f71710ecd0c20d4a4fb5a7f956985c84dd823cc44cff2c84323e62137f4f18502f8b658f6404b4617aead49fd901c847d6", @generic="621da4bef5eb85b7913a0d74aa27d34a43e73d1c", @typed={0x8, 0x108, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x4, 0x11b}, @typed={0x8, 0xf2, 0x0, 0x0, @u32=0xfffffff7}]}, @typed={0x8, 0x7b, 0x0, 0x0, @u32=0x5}, @typed={0xfffffffffffffe7c, 0x6b, 0x0, 0x0, @u64=0xb}, @nested={0x1024, 0xfe, 0x0, 0x1, [@typed={0xc, 0xea, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x4, 0x14d}, @nested={0x4, 0xab}, @generic="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", @typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, @typed={0x8, 0x12c, 0x0, 0x0, @u32=0x80000000}]}, @generic="4fa8ed716edd19f76ebb8187715dcccb5e4d5b09e13d5bf5c51a1df56d58cdfc951dc3026cfc07e8ffada1cb03f520e8b8b7866bd62e3eb1e5b178a1f7eced8389c6d7ba79d8a1e67b79fd77758710b2b88130eb6c12a6a6faf9ab895855357403f1b72820a490fac5193f7732579f717dcc23bb93f59c3060bae6de4c2561b46a1457c24e6a5ead85374edc6e88214f6c31b43110e9e724f041b0b7e327ce14e4f43ce123656202b52651ca3ba0abbef7f05acb83ea6c96e75f583614410ccdf6a3acb8"]}, 0x185c}}, 0x48801)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r9, 0x800448d7, &(0x7f0000000180))
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
socket$kcm(0x29, 0x7, 0x0)
sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000)

45.093753916s ago: executing program 1 (id=871):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe)
poll(&(0x7f0000000080)=[{r0, 0x46a8}], 0x1, 0x400)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
socket(0x2b, 0x1, 0xfffffffc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000a00000005000400020000100900020073797a32000000001400078008001340ffffffff08000640000000000500050002000000050001d334c3be002d000300686173683a6e657400000000"], 0x5c}}, 0x80)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x3000c090)
getsockname$packet(r7, &(0x7f00000005c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400002aa908006800090300000000000000000a181cf1e78f45cfdd803981ce6fe6dd68000000"], 0x24}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r3, @ANYRES32=r8, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r12, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)

41.507975925s ago: executing program 2 (id=872):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000000640)=""/195, 0x36, 0xc3, 0x0, 0x6, 0x10000}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x88}}, 0x0) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000001e0000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xfa, &(0x7f0000000440)=""/250, 0x40f00, 0x48}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a09000000010000000000"], 0x4c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xe, 0x1, 0x7f, 0x80000000, 0x7, 0x9, 0x9}, 0x20) (async, rerun: 64)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19) (async)
r6 = socket$netlink(0x10, 0x3, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) (async)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000"], 0x50) (async, rerun: 32)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000500))
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (async, rerun: 64)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) (async)
r8 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r8, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea90797fb45a74a588fdabe42", 0x47}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}, {&(0x7f0000000780)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872eca5570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f5c28da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b0a2b0f4f193e146a728d8f43f603e3a78208c00586c54ed3a7c425", 0x95}, {&(0x7f0000000640)="a50f6202000000000000005bf0", 0xd}, {&(0x7f0000001080)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3d9fc729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfed9ab6b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7", 0xfffffe49}], 0x5}}], 0x2, 0x488c4) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)

39.340990886s ago: executing program 0 (id=873):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

36.834703764s ago: executing program 1 (id=874):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x1, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x60}, 0x1, 0x7}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3790c98d517a740a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, 0x13, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00', <r6=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r6}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x4040005) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=@mpls_getroute={0x1d0, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x8, 0xfc, 0x0, 0xff, 0x5, 0x2c00}, [@RTA_MULTIPATH={0xc, 0x9, {0x564, 0x0, 0xff, r6}}, @RTA_NEWDST={0x84, 0x13, [{0x81}, {0xef8f}, {0x2ce}, {0x3, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x401}, {}, {0x2}, {0x2, 0x0, 0x1}, {0x8001}, {0x7f, 0x0, 0x1}, {0x37, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x7f}, {0x3ff}, {0x2546}, {0x80000}, {0x1}, {0x401, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xfffb6, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3ff}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x72}, @RTA_NEWDST={0x84, 0x13, [{0xd}, {0x3, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x8}, {0x8bff}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9}, {0x3}, {0x8}, {0x3, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x3}, {0x9, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0xf}, {0x2}, {0x401, 0x0, 0x1}, {0xc}, {0x4, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x6}, {0x7}, {0xf, 0x0, 0x1}, {0x5}, {0xd, 0x0, 0x1}, {0x66, 0x0, 0x1}, {0x3}, {0xffff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xde91, 0x0, 0x1}, {0x9}]}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x30, 0x0, r9}}, @RTA_NEWDST={0x84, 0x13, [{0x4}, {0x0, 0x0, 0x1}, {0xe, 0x0, 0x1}, {0xce7}, {0xe8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x5}, {0x3, 0x0, 0x1}, {0x86f5}, {0x2, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x400}, {0x8}, {0x1}, {0x9}, {0x2, 0x0, 0x1}, {0x6}, {0x1, 0x0, 0x1}, {0x4d70, 0x0, 0x1}, {0xffff}, {0x9, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x4}, {0x7f}, {0x2}, {0xd}, {0x54, 0x0, 0x1}, {0x80}]}, @RTA_OIF={0x8}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)
close(r0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x48000) (async)
r12 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) (async)
r13 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

34.011477081s ago: executing program 2 (id=875):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x20}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000880)
r5 = socket$netlink(0x10, 0x3, 0x7)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
sendto$inet6(r2, 0x0, 0x0, 0x884, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @empty, 0x3}, 0x1c)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYRES8=r6, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRES32=r6, @ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x10)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)
connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

30.518292556s ago: executing program 0 (id=876):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008040}, 0x2c008800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa4}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
recvmsg$can_raw(r5, &(0x7f0000000540)={&(0x7f0000000240)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f00000003c0)=""/71, 0x47}, {&(0x7f0000000440)=""/112, 0x70}], 0x3, &(0x7f0000000500)=""/24, 0x18}, 0x2122)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

20.168856992s ago: executing program 32 (id=874):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x1, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x60}, 0x1, 0x7}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3790c98d517a740a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, 0x13, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00', <r6=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r6}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x4040005) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=@mpls_getroute={0x1d0, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x8, 0xfc, 0x0, 0xff, 0x5, 0x2c00}, [@RTA_MULTIPATH={0xc, 0x9, {0x564, 0x0, 0xff, r6}}, @RTA_NEWDST={0x84, 0x13, [{0x81}, {0xef8f}, {0x2ce}, {0x3, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x401}, {}, {0x2}, {0x2, 0x0, 0x1}, {0x8001}, {0x7f, 0x0, 0x1}, {0x37, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x7f}, {0x3ff}, {0x2546}, {0x80000}, {0x1}, {0x401, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xfffb6, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3ff}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x72}, @RTA_NEWDST={0x84, 0x13, [{0xd}, {0x3, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x8}, {0x8bff}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9}, {0x3}, {0x8}, {0x3, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x3}, {0x9, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0xf}, {0x2}, {0x401, 0x0, 0x1}, {0xc}, {0x4, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x6}, {0x7}, {0xf, 0x0, 0x1}, {0x5}, {0xd, 0x0, 0x1}, {0x66, 0x0, 0x1}, {0x3}, {0xffff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xde91, 0x0, 0x1}, {0x9}]}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x30, 0x0, r9}}, @RTA_NEWDST={0x84, 0x13, [{0x4}, {0x0, 0x0, 0x1}, {0xe, 0x0, 0x1}, {0xce7}, {0xe8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x5}, {0x3, 0x0, 0x1}, {0x86f5}, {0x2, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x400}, {0x8}, {0x1}, {0x9}, {0x2, 0x0, 0x1}, {0x6}, {0x1, 0x0, 0x1}, {0x4d70, 0x0, 0x1}, {0xffff}, {0x9, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x4}, {0x7f}, {0x2}, {0xd}, {0x54, 0x0, 0x1}, {0x80}]}, @RTA_OIF={0x8}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)
close(r0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x48000) (async)
r12 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) (async)
r13 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

17.962020653s ago: executing program 0 (id=878):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c0000005e0001020000009ab6e5a35fa2000000000000000000b4206b19a9cfc48ab55a1849ff4a6f18bcd8cdc0c9df4b3998be4417a1cd812f3b3d207a9a7a9a093d1d18dafb2c3665d26702de5f990b6b0b02adcf25d34a71b4fa94cddd670d0f69b5d07f9c23fa40c83919d98cee22", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x1c}}, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0xfff, 0x4)
ioctl$sock_netrom_SIOCADDRT(r0, 0x541b, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

17.112524596s ago: executing program 33 (id=875):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x20}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000880)
r5 = socket$netlink(0x10, 0x3, 0x7)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
sendto$inet6(r2, 0x0, 0x0, 0x884, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @empty, 0x3}, 0x1c)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYRES8=r6, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRES32=r6, @ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x10)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)
connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

0s ago: executing program 34 (id=878):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c0000005e0001020000009ab6e5a35fa2000000000000000000b4206b19a9cfc48ab55a1849ff4a6f18bcd8cdc0c9df4b3998be4417a1cd812f3b3d207a9a7a9a093d1d18dafb2c3665d26702de5f990b6b0b02adcf25d34a71b4fa94cddd670d0f69b5d07f9c23fa40c83919d98cee22", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x1c}}, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0xfff, 0x4)
ioctl$sock_netrom_SIOCADDRT(r0, 0x541b, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43732' (ED25519) to the list of known hosts.
syzkaller login: [   49.100838][ T5823] cgroup: Unknown subsys name 'net'
[   49.257894][ T5823] cgroup: Unknown subsys name 'cpuset'
[   49.262298][ T5823] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.103328][ T5823] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.851365][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.855718][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.858524][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.861406][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.864302][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.918423][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.933961][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.937977][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.941809][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.944357][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.951382][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.965504][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.986006][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.002168][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.009297][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.076474][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.223196][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.240561][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.243297][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.245968][ T5841] bridge_slave_0: entered allmulticast mode
[   55.248824][ T5841] bridge_slave_0: entered promiscuous mode
[   55.271290][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.273684][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.276525][ T5841] bridge_slave_1: entered allmulticast mode
[   55.279333][ T5841] bridge_slave_1: entered promiscuous mode
[   55.330526][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.343214][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.354149][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.383756][ T5841] team0: Port device team_slave_0 added
[   55.387976][ T5841] team0: Port device team_slave_1 added
[   55.400303][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.402658][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.405102][ T5845] bridge_slave_0: entered allmulticast mode
[   55.407917][ T5845] bridge_slave_0: entered promiscuous mode
[   55.430165][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.432509][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.434999][ T5845] bridge_slave_1: entered allmulticast mode
[   55.437745][ T5845] bridge_slave_1: entered promiscuous mode
[   55.488740][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.490961][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.499648][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.507469][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.516797][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.519365][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.531041][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.537672][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.587718][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.590620][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.593609][ T5846] bridge_slave_0: entered allmulticast mode
[   55.597244][ T5846] bridge_slave_0: entered promiscuous mode
[   55.601011][ T5845] team0: Port device team_slave_0 added
[   55.605433][ T5845] team0: Port device team_slave_1 added
[   55.616975][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.619809][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.622580][ T5846] bridge_slave_1: entered allmulticast mode
[   55.626654][ T5846] bridge_slave_1: entered promiscuous mode
[   55.665431][ T5841] hsr_slave_0: entered promiscuous mode
[   55.667845][ T5841] hsr_slave_1: entered promiscuous mode
[   55.680482][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.693299][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.695654][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.703550][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.708977][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.712625][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.714908][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.722814][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.788281][ T5846] team0: Port device team_slave_0 added
[   55.802878][ T5846] team0: Port device team_slave_1 added
[   55.811128][ T5845] hsr_slave_0: entered promiscuous mode
[   55.814134][ T5845] hsr_slave_1: entered promiscuous mode
[   55.817173][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   55.819527][ T5845] Cannot create hsr debugfs directory
[   55.872952][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.877257][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.886433][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.890954][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.893116][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.901345][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.977853][ T5846] hsr_slave_0: entered promiscuous mode
[   55.980148][ T5846] hsr_slave_1: entered promiscuous mode
[   55.982292][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   55.984003][ T5846] Cannot create hsr debugfs directory
[   56.115711][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.130633][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.147208][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.151715][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.183627][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.189081][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.201049][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.205465][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.275983][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.280927][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.288075][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.293863][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.346035][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.362423][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.386738][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.395884][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.408197][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.410597][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.414117][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.416415][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.421465][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.423711][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.436639][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.438960][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.456175][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.505208][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.522138][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.524397][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.546038][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.548285][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.688040][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.693766][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.744519][ T5845] veth0_vlan: entered promiscuous mode
[   56.751492][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.758818][ T5841] veth0_vlan: entered promiscuous mode
[   56.763202][ T5845] veth1_vlan: entered promiscuous mode
[   56.776802][ T5841] veth1_vlan: entered promiscuous mode
[   56.813677][ T5846] veth0_vlan: entered promiscuous mode
[   56.829094][ T5845] veth0_macvtap: entered promiscuous mode
[   56.833430][ T5841] veth0_macvtap: entered promiscuous mode
[   56.839385][ T5841] veth1_macvtap: entered promiscuous mode
[   56.842141][ T5845] veth1_macvtap: entered promiscuous mode
[   56.848800][ T5846] veth1_vlan: entered promiscuous mode
[   56.865648][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.872200][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.880238][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.893472][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.898175][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.911138][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.916023][ T5235] Bluetooth: hci0: command tx timeout
[   56.921791][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.929695][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.933189][ T5846] veth0_macvtap: entered promiscuous mode
[   56.940624][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.950559][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.954134][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.965812][ T5846] veth1_macvtap: entered promiscuous mode
[   56.992732][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.010680][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.029197][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.042054][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.045209][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.048160][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.052656][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.058046][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.061017][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.076370][ T5850] Bluetooth: hci1: command tx timeout
[   57.078469][ T5235] Bluetooth: hci2: command tx timeout
[   57.097845][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.098755][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.100412][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.102810][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.155373][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.159604][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.166839][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.196232][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.198713][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.228543][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.234474][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.288492][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.316019][ T5909] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   57.340375][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.351635][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.362212][ T5917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.401405][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4'.
[   57.461437][ T5922] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.624351][ T5933] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[   58.127682][ T5936] tap0: tun_chr_ioctl cmd 1074025677
[   58.129562][ T5936] tap0: linktype set to 804
[   58.214036][ T5940] IPv4: Oversized IP packet from 127.202.26.0
[   58.223116][ T5940] netlink: 'syz.0.11': attribute type 1 has an invalid length.
[   58.257833][ T5942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.315083][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   58.359327][ T5943] bridge_slave_1: left allmulticast mode
[   58.361133][ T5943] bridge_slave_1: left promiscuous mode
[   58.363613][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.371452][ T5942] netlink: 165 bytes leftover after parsing attributes in process `syz.0.12'.
[   58.376451][ T5943] bridge_slave_0: left allmulticast mode
[   58.378878][ T5943] bridge_slave_0: left promiscuous mode
[   58.381085][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.512048][ T5946] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   58.563968][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'.
[   58.609871][ T5953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15'.
[   58.645062][ T5956] netlink: 'syz.2.16': attribute type 2 has an invalid length.
[   58.889652][ T5970] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   58.937277][ T5977] syz_tun: entered promiscuous mode
[   58.949965][ T5977] macsec1: entered allmulticast mode
[   58.951789][ T5977] syz_tun: entered allmulticast mode
[   58.963253][ T5977] syz_tun: left allmulticast mode
[   58.968650][ T5977] syz_tun: left promiscuous mode
[   58.988924][ T5981] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   58.993017][ T5981] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   58.996644][ T5981] Zero length message leads to an empty skb
[   58.998995][ T5235] Bluetooth: hci0: command tx timeout
[   59.148230][   T33] audit: type=1800 audit(1755767453.661:2): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="blkio.bfq.time_recursive" dev="tmpfs" ino=38 res=0 errno=0
[   59.156627][ T5235] Bluetooth: hci2: command tx timeout
[   59.156676][ T5235] Bluetooth: hci1: command tx timeout
[   59.187464][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.191260][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.216214][ T5995] tipc: Started in network mode
[   59.217814][ T5995] tipc: Node identity 76e3d3111acd, cluster identity 4711
[   59.228990][ T5995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.423241][ T5989] tipc: Disabling bearer <eth:syzkaller0>
[   59.891903][ T6046] sctp: [Deprecated]: syz.2.36 (pid 6046) Use of int in max_burst socket option deprecated.
[   59.891903][ T6046] Use struct sctp_assoc_value instead
[   60.047603][ T6056] netlink: 'syz.2.40': attribute type 29 has an invalid length.
[   60.266310][ T6071] netlink: 'syz.2.45': attribute type 4 has an invalid length.
[   60.516054][ T6094] netlink: 'syz.1.53': attribute type 23 has an invalid length.
[   60.620978][ T6098] netlink: 'syz.2.54': attribute type 2 has an invalid length.
[   60.643228][ T6098] : entered promiscuous mode
[   60.662136][ T6100] xt_limit: Overflow, try lower: 604147548/4200216962
[   60.677625][ T6102] Bluetooth: MGMT ver 1.23
[   60.758144][ T6107] tun0: tun_chr_ioctl cmd 2147767520
[   61.085923][ T5850] Bluetooth: hci0: command tx timeout
[   61.244925][ T5850] Bluetooth: hci1: command tx timeout
[   61.246746][ T5850] Bluetooth: hci2: command tx timeout
[   61.474143][ T6160] tipc: Started in network mode
[   61.478236][ T6160] tipc: Node identity fa2518a1e59d, cluster identity 4711
[   61.481552][ T6160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.492848][ T6159] tipc: Disabling bearer <eth:syzkaller0>
[   62.529050][ T6238] netlink: 'syz.1.94': attribute type 1 has an invalid length.
[   62.535997][ T6238] __nla_validate_parse: 20 callbacks suppressed
[   62.536009][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'.
[   62.560689][ T6238] Unsupported xt match
[   62.560706][ T6238] unable to load match
[   62.747191][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'.
[   62.837810][ T6250] bridge_slave_1: left allmulticast mode
[   62.840102][ T6250] bridge_slave_1: left promiscuous mode
[   62.843168][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.850631][ T6250] bridge_slave_0: left allmulticast mode
[   62.852917][ T6250] bridge_slave_0: left promiscuous mode
[   62.855649][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.057085][ T6260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.100'.
[   63.060801][ T6260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.100'.
[   63.063978][ T6260] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   63.154988][ T5235] Bluetooth: hci0: command tx timeout
[   63.186766][ T6268] vxcan2: entered promiscuous mode
[   63.312814][ T6274] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   63.316592][ T5235] Bluetooth: hci2: command tx timeout
[   63.316637][ T5850] Bluetooth: hci1: command tx timeout
[   63.318411][ T6274] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   63.678299][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'.
[   63.686474][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.107'.
[   64.130965][ T6297] netlink: 'syz.1.112': attribute type 2 has an invalid length.
[   64.131002][ T6298] netlink: 'syz.1.112': attribute type 2 has an invalid length.
[   64.138692][ T6298] k*]: entered promiscuous mode
[   64.162977][ T6296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.196686][    C0] Illegal XDP return value 16128 on prog  (id 97) dev team0, expect packet loss!
[   64.240226][ T6300] nbd0: detected capacity change from 0 to 127
[   64.249016][   T55] block nbd0: Receive control failed (result -104)
[   64.332128][ T6310] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   64.335546][ T6310] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   64.372960][ T6310] ieee802154 phy0 wpan0: encryption failed: -22
[   64.693136][ T6320] netlink: 'syz.0.118': attribute type 1 has an invalid length.
[   65.170831][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'.
[   65.173766][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'.
[   65.328030][ T6357] vlan2: entered allmulticast mode
[   65.331402][ T6357] dummy0: entered allmulticast mode
[   65.403285][ T6365] netlink: 508 bytes leftover after parsing attributes in process `syz.2.128'.
[   65.674092][ T6382] syzkaller0: entered promiscuous mode
[   65.677620][ T6382] syzkaller0: entered allmulticast mode
[   66.085913][ T6408] warning: `syz.0.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.291419][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'.
[   66.529140][ T6426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.580161][ T6426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.636188][ T6426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.686798][ T6426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.756962][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.770184][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.773635][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.782134][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.788010][ T6425] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.849500][ T6425] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.888322][ T6425] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.928860][ T6425] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.060382][ T6437] netlink: 'syz.0.145': attribute type 4 has an invalid length.
[   67.092052][ T6437] batadv_slave_1: entered promiscuous mode
[   67.157603][ T6439] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.507258][ T6476] netlink: 'syz.0.156': attribute type 1 has an invalid length.
[   67.561880][ T1206] block nbd0: Connection timed out, retrying (0/1 alive)
[   67.564506][ T1206] block nbd0: Connection timed out, retrying (0/1 alive)
[   67.567029][ T1206] block nbd0: Connection timed out, retrying (0/1 alive)
[   67.569528][ T1206] block nbd0: Connection timed out, retrying (0/1 alive)
[   67.572091][ T1206] block nbd0: Dead connection, failed to find a fallback
[   67.574297][ T1206] block nbd0: shutting down sockets
[   67.577522][ T1206] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.580777][ T1206] Buffer I/O error on dev nbd0, logical block 3, async page read
[   67.583216][ T1206] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.586233][ T1206] Buffer I/O error on dev nbd0, logical block 2, async page read
[   67.590080][ T1206] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.593576][ T1206] Buffer I/O error on dev nbd0, logical block 1, async page read
[   67.597393][ T1206] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.600154][ T1206] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.603477][ T5853] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.607065][ T5853] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.609888][ T5853] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.612708][ T5853] Buffer I/O error on dev nbd0, logical block 1, async page read
[   67.615538][ T5853] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.618339][ T5853] Buffer I/O error on dev nbd0, logical block 2, async page read
[   67.621286][ T5853] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.624157][ T5853] Buffer I/O error on dev nbd0, logical block 3, async page read
[   67.627882][ T5853] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.631419][ T5853] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.638780][ T5853] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.642458][ T5853] Buffer I/O error on dev nbd0, logical block 1, async page read
[   67.648002][ T5853] ldm_validate_partition_table(): Disk read failed.
[   67.652480][ T5853] Dev nbd0: unable to read RDB block 0
[   67.656553][ T5853]  nbd0: unable to read partition table
[   67.666774][ T5853] ldm_validate_partition_table(): Disk read failed.
[   67.676875][ T5853] Dev nbd0: unable to read RDB block 0
[   67.694552][ T6492] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20003
[   67.697663][ T5853]  nbd0: unable to read partition table
[   67.833172][ T6512] __nla_validate_parse: 15 callbacks suppressed
[   67.833184][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'.
[   67.861546][ T6512] netlink: 84 bytes leftover after parsing attributes in process `syz.1.166'.
[   67.924037][ T6518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.951390][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'.
[   68.024296][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'.
[   68.040731][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.169'.
[   68.046103][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'.
[   68.205668][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'.
[   68.357580][ T6533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.172'.
[   68.390382][ T6537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.173'.
[   68.412228][ T6537] nbd: socks must be embedded in a SOCK_ITEM attr
[   68.416742][ T6337] block nbd64: NBD_DISCONNECT
[   68.520606][ T6550] gtp0: entered promiscuous mode
[   68.524101][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'.
[   68.792128][ T6561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.843160][ T6566] netlink: 'syz.1.180': attribute type 1 has an invalid length.
[   69.054985][ T6569] netlink: 'syz.1.181': attribute type 1 has an invalid length.
[   69.166566][  T791] IPVS: starting estimator thread 0...
[   69.180547][ T6572] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   69.254949][ T6573] IPVS: using max 41 ests per chain, 98400 per kthread
[   70.384474][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.393230][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.407548][ T5905] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.420593][ T5905] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.918419][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.921433][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.054255][ T6613] netlink: 'syz.1.192': attribute type 12 has an invalid length.
[   71.137196][ T6617] netlink: 'syz.1.193': attribute type 1 has an invalid length.
[   71.151564][ T6617] bond2: entered promiscuous mode
[   71.153608][ T6617] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.166607][ T6617] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.169343][ T6617] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[   71.172765][ T6617] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   71.179600][ T6617] bond2: (slave wireguard0): making interface the new active one
[   71.182180][ T6617] wireguard0: entered promiscuous mode
[   71.185400][ T6617] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[   71.188739][ T6617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   71.191219][ T6617] IPv6: NLM_F_CREATE should be set when creating new route
[   71.193535][ T6617] IPv6: NLM_F_CREATE should be set when creating new route
[   71.197254][ T6617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   74.090293][ T6671] __nla_validate_parse: 5 callbacks suppressed
[   74.090307][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   74.097910][ T6671] netlink: 52 bytes leftover after parsing attributes in process `syz.1.210'.
[   74.140815][ T6675] netlink: 240 bytes leftover after parsing attributes in process `syz.1.211'.
[   74.307595][ T6684] atomic_op ffff8880398bf998 conn xmit_atomic 0000000000000000
[   74.478610][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'.
[   74.481985][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'.
[   74.708179][ T6712] netlink: 'syz.2.226': attribute type 1 has an invalid length.
[   74.750933][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'.
[   74.756085][ T6712] netlink: 'syz.2.226': attribute type 3 has an invalid length.
[   74.759054][ T6712] netlink: 666 bytes leftover after parsing attributes in process `syz.2.226'.
[   74.772354][ T6712] bond1: (slave gretap1): making interface the new active one
[   74.776858][ T6712] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   74.797455][ T6712] syz.2.226 (6712) used greatest stack depth: 19848 bytes left
[   74.951146][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'.
[   74.955640][ T6720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.228'.
[   75.189874][ T6728] bond2: entered promiscuous mode
[   75.192002][ T6728] bond2: entered allmulticast mode
[   75.194344][ T6728] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.248750][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'.
[   75.590250][   T10] IPVS: starting estimator thread 0...
[   75.635148][ T6755] syz_tun: entered allmulticast mode
[   75.641933][ T6755] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   75.687291][ T6752] IPVS: using max 61 ests per chain, 146400 per kthread
[   75.765983][ T6764] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   75.769435][   T12] bond0: (slave bond_slave_0): interface is now down
[   75.771775][   T12] bond0: (slave bond_slave_1): interface is now down
[   75.778442][   T12] bond0: now running without any active interface!
[   76.259995][ T6778] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[   76.263863][ T6778] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   76.700723][ T6805] netlink: 'syz.2.248': attribute type 1 has an invalid length.
[   76.703039][ T6805] netlink: 'syz.2.248': attribute type 2 has an invalid length.
[   76.705916][ T6805] netlink: 'syz.2.248': attribute type 1 has an invalid length.
[   76.735795][ T6808] netlink: 'syz.2.249': attribute type 9 has an invalid length.
[   76.744533][ T6808] hsr0: entered promiscuous mode
[   76.748086][ T6808] macvlan2: entered promiscuous mode
[   76.751019][ T6808] macvlan2: entered allmulticast mode
[   76.752883][ T6808] hsr0: entered allmulticast mode
[   76.754645][ T6808] hsr_slave_0: entered allmulticast mode
[   76.756439][ T6808] hsr_slave_1: entered allmulticast mode
[   76.800819][ T6810] netlink: 'syz.2.250': attribute type 27 has an invalid length.
[   77.139657][ T6836] batadv_slave_1: entered promiscuous mode
[   77.255631][ T6835] batadv_slave_1: left promiscuous mode
[   77.351469][ T6847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.394955][ T6847] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.537652][ T6862] netlink: 'syz.0.265': attribute type 22 has an invalid length.
[   77.546667][ T5905] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.546746][ T6862] netlink: 'syz.0.265': attribute type 22 has an invalid length.
[   77.549700][ T5905] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.557001][ T5905] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.564326][ T5905] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.681495][ T6875] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[   77.751034][ T6878] netlink: 'syz.2.271': attribute type 4 has an invalid length.
[   77.925802][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.044209][ T6878] hsr0: left allmulticast mode
[   78.046527][ T6878] hsr_slave_0: left allmulticast mode
[   78.048280][ T6878] hsr_slave_1: left allmulticast mode
[   78.100324][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.104340][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.108375][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.111118][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.280272][ T6903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.319645][ T6909] kthread_run failed with err -4
[   78.488552][ T6927] veth0: entered promiscuous mode
[   79.211475][ T6916] veth0: left promiscuous mode
[   80.210891][ T6974] __nla_validate_parse: 26 callbacks suppressed
[   80.210903][ T6974] netlink: 248 bytes leftover after parsing attributes in process `syz.0.299'.
[   80.247886][ T6974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.412217][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'.
[   80.415041][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'.
[   80.421094][ T6982] netlink: 52 bytes leftover after parsing attributes in process `syz.0.301'.
[   80.576964][ T6992] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20002
[   80.752567][ T7002] netlink: 44 bytes leftover after parsing attributes in process `syz.0.308'.
[   80.760252][ T7002] netlink: 44 bytes leftover after parsing attributes in process `syz.0.308'.
[   80.810965][ T7007] bond0: (slave bond_slave_0): Releasing backup interface
[   80.819880][ T7007] bond0: (slave bond_slave_1): Releasing backup interface
[   80.830408][ T7007] team0: Port device team_slave_0 removed
[   80.837562][ T7007] team0: Port device team_slave_1 removed
[   80.840857][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.843494][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.848862][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.851475][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.082161][ T7022] netlink: 96 bytes leftover after parsing attributes in process `syz.1.315'.
[   81.105583][ T7019] validate_nla: 1 callbacks suppressed
[   81.105610][ T7019] netlink: 'syz.0.314': attribute type 1 has an invalid length.
[   81.123177][ T7022] netlink: 'syz.1.315': attribute type 1 has an invalid length.
[   81.129446][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'.
[   81.129572][ T7019] bond1 (unregistering): Released all slaves
[   81.145715][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.315'.
[   81.170554][   T60] cfg80211: failed to load regulatory.db
[   81.560428][ T7054] netlink: 44 bytes leftover after parsing attributes in process `syz.2.324'.
[   82.356561][ T5850] Bluetooth: hci2: command tx timeout
[   82.801354][ T7150] batadv_slave_0: entered promiscuous mode
[   83.704397][ T7181] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[   84.007224][ T7237] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   84.024740][ T7237] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   84.646859][ T7292] netlink: 'syz.2.383': attribute type 21 has an invalid length.
[   84.653310][ T7292] netlink: 'syz.2.383': attribute type 5 has an invalid length.
[   84.794176][ T7295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.833517][ T7295] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   84.842273][ T7295] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   84.991116][ T7311] netlink: 'syz.0.389': attribute type 1 has an invalid length.
[   85.456703][ T7331] __nla_validate_parse: 22 callbacks suppressed
[   85.456719][ T7331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'.
[   85.463082][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.398'.
[   85.470051][ T7331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'.
[   85.473877][ T7331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'.
[   85.521400][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'.
[   85.566257][ T7337] erspan0: entered promiscuous mode
[   85.600727][ T7344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.401'.
[   85.697389][ T7356] ieee802154 phy0 wpan0: encryption failed: -22
[   85.708393][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'.
[   85.715419][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'.
[   85.795532][ T7362] tipc: Cannot configure node identity twice
[   85.798223][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'.
[   85.921958][ T7367] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   85.951058][ T7369] netlink: 'syz.2.410': attribute type 1 has an invalid length.
[   86.618777][ T7371] netlink: 'syz.1.411': attribute type 1 has an invalid length.
[   86.622129][ T7371] netlink: 228 bytes leftover after parsing attributes in process `syz.1.411'.
[   87.172171][ T7407] netlink: 'syz.0.421': attribute type 13 has an invalid length.
[   87.174955][ T7407] netlink: 'syz.0.421': attribute type 17 has an invalid length.
[   87.182191][ T7407] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   87.420393][ T7417] tipc: Invalid UDP bearer configuration
[   87.420437][ T7417] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   87.670195][ T7422] syzkaller1: entered promiscuous mode
[   87.674821][ T7422] syzkaller1: entered allmulticast mode
[   87.792505][ T7432] x9: renamed from bridge_slave_0 (while UP)
[   87.803495][ T7432] netlink: 'syz.0.427': attribute type 5 has an invalid length.
[   87.813382][ T7432] netlink: 'syz.0.427': attribute type 12 has an invalid length.
[   87.992675][ T7443] syzkaller1: entered promiscuous mode
[   87.994493][ T7443] syzkaller1: entered allmulticast mode
[   88.074695][ T7449] netlink: 'syz.0.430': attribute type 9 has an invalid length.
[   88.180113][ T7452] netlink: 'syz.2.431': attribute type 1 has an invalid length.
[   88.216745][ T7452] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.706375][ T7503] openvswitch: netlink: IP tunnel dst address not specified
[   88.776089][ T7511] netlink: 'syz.2.446': attribute type 2 has an invalid length.
[   88.779325][ T7511] netlink: 'syz.2.446': attribute type 1 has an invalid length.
[   88.971852][ T7532] bridge_slave_0: left allmulticast mode
[   88.974092][ T7532] bridge_slave_0: left promiscuous mode
[   88.976718][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.982075][ T7532] bridge_slave_1: left allmulticast mode
[   88.984250][ T7532] bridge_slave_1: left promiscuous mode
[   88.986868][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.992178][ T7532] bond0: (slave bond_slave_0): Releasing backup interface
[   88.996780][ T7532] bond0: (slave bond_slave_1): Releasing backup interface
[   89.003255][ T7532] team0: Port device team_slave_0 removed
[   89.009495][ T7532] team0: Port device team_slave_1 removed
[   89.012035][ T7532] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.015483][ T7532] bond1: (slave gretap1): Releasing active interface
[   90.218221][ T7570] batadv1: entered promiscuous mode
[   90.349457][ T7582] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   90.708091][ T7611] ip6gre1: entered promiscuous mode
[   90.802088][ T7621] __nla_validate_parse: 56 callbacks suppressed
[   90.802099][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'.
[   90.970941][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'.
[   90.977605][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'.
[   91.019474][ T7638] syzkaller1: entered promiscuous mode
[   91.021628][ T7638] syzkaller1: entered allmulticast mode
[   91.097982][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'.
[   91.112185][ T7640] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   91.178179][ T7645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.483'.
[   91.182320][ T7645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.483'.
[   91.462486][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'.
[   91.467921][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'.
[   91.503497][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'.
[   91.610896][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.492'.
[   91.657998][ T7686] netlink: 'syz.0.494': attribute type 5 has an invalid length.
[   91.660870][ T7686] netlink: 'syz.0.494': attribute type 6 has an invalid length.
[   91.798049][ T7697] syzkaller1: entered promiscuous mode
[   91.803541][ T7697] syzkaller1: entered allmulticast mode
[   92.037597][ T7726] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2
[   92.041150][ T7726] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0/file1
[   92.096122][ T7735] tun0: tun_chr_ioctl cmd 2147767520
[   92.349301][ T7755] netlink: 'syz.1.513': attribute type 30 has an invalid length.
[   92.599438][ T7766] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   92.602685][ T7766] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   93.117824][ T7791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.935239][ T7854] netlink: 'syz.1.539': attribute type 15 has an invalid length.
[   93.973941][ T7860] netlink: 'syz.1.540': attribute type 1 has an invalid length.
[   93.993033][ T7860] 8021q: adding VLAN 0 to HW filter on device bond4
[   94.010701][ T7860] 8021q: adding VLAN 0 to HW filter on device bond4
[   94.013251][ T7860] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   94.017631][ T7860] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   94.062586][ T7861] veth3: entered promiscuous mode
[   94.068373][ T7861] bond4: (slave veth3): Enslaving as an active interface with a down link
[   94.072923][ T7861] erspan0: entered allmulticast mode
[   94.481666][ T7891] netlink: 'syz.0.547': attribute type 29 has an invalid length.
[   94.485744][ T7891] netlink: 'syz.0.547': attribute type 29 has an invalid length.
[   94.489828][ T7891] unsupported nla_type 58
[   94.564149][ T7916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.566457][ T7916] IPv6: NLM_F_CREATE should be set when creating new route
[   94.568675][ T7916] IPv6: NLM_F_CREATE should be set when creating new route
[   95.031661][ T7934] ip6erspan0: entered allmulticast mode
[   95.567624][ T7976] openvswitch: netlink: Key 17 has unexpected len 0 expected 4
[   95.615018][ T7978] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   95.772728][ T7991] netlink: 'syz.1.572': attribute type 10 has an invalid length.
[   95.788711][ T7991] team0: Port device dummy0 added
[   95.806339][ T7991] netlink: 'syz.1.572': attribute type 10 has an invalid length.
[   95.820368][ T7991] team0: Port device dummy0 removed
[   95.828733][ T7991] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   95.835343][   T13] bond0: (slave dummy0): interface is now down
[   95.838179][   T13] bond0: now running without any active interface!
[   96.938550][ T8030] __nla_validate_parse: 21 callbacks suppressed
[   96.938564][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.582'.
[   97.043719][ T5878] IPVS: starting estimator thread 0...
[   97.144745][ T8037] IPVS: using max 61 ests per chain, 146400 per kthread
[   97.276690][ T8046] netlink: 1 bytes leftover after parsing attributes in process `syz.2.586'.
[   97.398535][ T8048] netlink: 248 bytes leftover after parsing attributes in process `syz.1.587'.
[   97.757729][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'.
[   97.774348][ T8076] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.597'.
[   97.787038][ T8078] netlink: 'syz.0.596': attribute type 1 has an invalid length.
[   97.789981][ T8078] netlink: 244 bytes leftover after parsing attributes in process `syz.0.596'.
[   98.848564][ T8094] syzkaller1: entered allmulticast mode
[   98.974422][ T8099] lo: entered allmulticast mode
[   98.978617][ T8099] lo: left allmulticast mode
[   99.705165][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'.
[   99.709632][ T8109] netlink: 'syz.0.608': attribute type 1 has an invalid length.
[   99.713565][ T8109] netlink: 172 bytes leftover after parsing attributes in process `syz.0.608'.
[   99.826465][ T8117] vxcan2: entered promiscuous mode
[   99.987690][ T8133] netlink: 'syz.0.615': attribute type 3 has an invalid length.
[  100.213325][ T8156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.620'.
[  100.217103][ T8156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.620'.
[  100.455768][ T8174] netlink: 'syz.0.627': attribute type 5 has an invalid length.
[  100.519476][ T8180] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  100.835624][ T8205] macvlan3: entered allmulticast mode
[  100.837368][ T8205] veth1_vlan: entered allmulticast mode
[  100.841373][ T8205] veth1_vlan: left allmulticast mode
[  101.028255][ T8218] netlink: 'syz.1.640': attribute type 1 has an invalid length.
[  101.099963][ T8226] netlink: 'syz.1.643': attribute type 1 has an invalid length.
[  101.281364][ T8234] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.667890][ T8252] netlink: 'syz.0.652': attribute type 23 has an invalid length.
[  102.095133][ T8268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  102.097970][ T8268] IPv6: NLM_F_CREATE should be set when creating new route
[  102.100779][ T8268] IPv6: NLM_F_CREATE should be set when creating new route
[  102.276688][ T8287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.296509][ T8287] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  102.406375][ T8305] __nla_validate_parse: 15 callbacks suppressed
[  102.406392][ T8305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.664'.
[  102.412680][ T8305] netlink: 'syz.0.664': attribute type 1 has an invalid length.
[  102.870336][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'.
[  103.087488][ T8351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.674'.
[  103.095882][ T8351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.674'.
[  103.117765][ T8351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.674'.
[  103.128548][ T8351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.674'.
[  103.374495][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'.
[  103.419601][ T8370] syz.1.675 (8370) used greatest stack depth: 19656 bytes left
[  103.595275][ T8382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.599325][ T8382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.668829][ T8382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.672137][ T8382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.739879][ T8382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.743255][ T8382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.781300][ T8382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.784530][ T8382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.839590][ T5871] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.842758][ T5871] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.854468][ T8387] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  103.855327][ T5871] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.861266][ T5871] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.862716][ T8386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.864466][ T8385] IPVS: stopping backup sync thread 8387 ...
[  103.878647][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.881317][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.890837][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.895862][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.989285][ T8403] netlink: 'syz.2.684': attribute type 1 has an invalid length.
[  104.547335][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'.
[  104.892995][ T8461] syzkaller1: entered promiscuous mode
[  104.896419][ T8461] syzkaller1: entered allmulticast mode
[  105.766484][ T8492] syz.0.710 uses old SIOCAX25GETINFO
[  106.423813][ T8513] netlink: 'syz.2.717': attribute type 2 has an invalid length.
[  106.426504][ T8514] netlink: 32 bytes leftover after parsing attributes in process `syz.2.717'.
[  106.660878][ T8535] batadv1: entered promiscuous mode
[  106.708289][ T8538] netlink: 'syz.0.724': attribute type 62 has an invalid length.
[  106.716541][ T8539] batadv1: entered promiscuous mode
[  106.734552][ T8541] 8021q: adding VLAN 0 to HW filter on device batadv1
[  106.737676][ T8541] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  106.740532][ T8541] team0: Failed to send options change via netlink (err -105)
[  106.742967][ T8541] team0: Port device batadv1 added
[  107.038798][ T8550] syzkaller1: entered promiscuous mode
[  107.040711][ T8550] syzkaller1: entered allmulticast mode
[  107.970482][ T8556] !: renamed from dummy0 (while UP)
[  108.898021][ T8635] netlink: 60 bytes leftover after parsing attributes in process `syz.1.732'.
[  108.903792][ T8635] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  108.971325][ T8642] netlink: 'syz.1.735': attribute type 1 has an invalid length.
[  108.972301][ T8644] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:21
[  108.973762][ T8642] netlink: 92 bytes leftover after parsing attributes in process `syz.1.735'.
[  109.108504][ T8657] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.738'.
[  109.457121][ T8672] netlink: 'syz.1.746': attribute type 3 has an invalid length.
[  109.500419][ T8675] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[  109.544114][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'.
[  109.572156][ T8677] veth5: entered promiscuous mode
[  109.576652][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'.
[  109.597380][ T8677] veth7: entered promiscuous mode
[  109.652635][ T8688] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000
[  109.904193][ T8712] ipvlan2: entered promiscuous mode
[  109.907158][ T8712] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  109.950142][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'.
[  110.253368][ T8734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.765'.
[  110.270734][ T8734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.765'.
[  110.283293][ T8734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.765'.
[  110.291719][ T8734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.765'.
[  110.366275][ T8741] netlink: 'syz.2.767': attribute type 9 has an invalid length.
[  110.652876][ T8761] netlink: 'syz.0.774': attribute type 1 has an invalid length.
[  110.682099][ T8761] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.701639][ T8761] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.704469][ T8761] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  110.711737][ T8761] bond1: (slave vcan0): Error -95 calling set_mac_address
[  110.751746][ T8766] gretap1: entered promiscuous mode
[  110.767300][ T8766] bond1: (slave gretap1): making interface the new active one
[  110.770540][ T8766] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  110.799529][ T8761] macvlan3: entered promiscuous mode
[  110.801513][ T8761] macvlan3: entered allmulticast mode
[  110.804049][ T8761] bond1: entered promiscuous mode
[  110.806898][ T8761] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  110.825202][ T8761] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  110.830992][ T8761] bond1: left promiscuous mode
[  110.849757][ T8768] syzkaller1: entered promiscuous mode
[  110.856598][ T8768] syzkaller1: entered allmulticast mode
[  111.062844][ T8779] netlink: 'syz.1.778': attribute type 1 has an invalid length.
[  111.294760][ T8777] netlink: 'syz.0.780': attribute type 13 has an invalid length.
[  111.297317][ T8777] netlink: 'syz.0.780': attribute type 17 has an invalid length.
[  111.306244][ T8777] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  111.512090][ T8815] netlink: 'syz.2.791': attribute type 1 has an invalid length.
[  111.614099][ T8829] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  111.673264][ T8833] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode
[  111.682274][ T8835] veth1_macvtap: left promiscuous mode
[  111.941870][ T8835] batadv_slave_0: left promiscuous mode
[  111.950634][ T8835] batadv_slave_1: left promiscuous mode
[  112.079585][ T8835] gretap1: left promiscuous mode
[  112.093219][ T5871] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.105839][ T5871] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.108770][ T5871] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.111391][ T5871] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.114043][ T5871] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.117431][ T5871] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.121155][ T5871] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.123742][ T5871] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.139779][ T8841] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  112.283668][ T8844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.305062][ T8844] siw: device registration error -23
[  113.247982][ T8875] atomic_op ffff8881127b7198 conn xmit_atomic 0000000000000000
[  114.284074][ T8903] netlink: 'syz.2.817': attribute type 27 has an invalid length.
[  114.339274][ T8906] lo speed is unknown, defaulting to 1000
[  114.342181][ T8906] lo speed is unknown, defaulting to 1000
[  114.349129][ T8906] lo speed is unknown, defaulting to 1000
[  114.361869][ T8908] __nla_validate_parse: 13 callbacks suppressed
[  114.361881][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'.
[  114.376640][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'.
[  114.397546][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'.
[  114.461679][ T8914] sctp: [Deprecated]: syz.1.821 (pid 8914) Use of struct sctp_assoc_value in delayed_ack socket option.
[  114.461679][ T8914] Use struct sctp_sack_info instead
[  114.469255][ T8906] infiniband syz0: set down
[  114.471536][ T8839] lo speed is unknown, defaulting to 1000
[  114.473438][ T8906] infiniband syz0: added lo
[  114.501179][ T8906] RDS/IB: syz0: added
[  114.504521][ T8906] smc: adding ib device syz0 with port count 1
[  114.509022][ T8906] smc:    ib device syz0 port 1 has pnetid 
[  114.516159][ T8839] lo speed is unknown, defaulting to 1000
[  114.521223][ T8906] lo speed is unknown, defaulting to 1000
[  114.551804][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'.
[  114.655401][ T8906] lo speed is unknown, defaulting to 1000
[  114.663592][ T8931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.826'.
[  114.763359][ T8906] lo speed is unknown, defaulting to 1000
[  115.113350][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'.
[  115.684242][ T8954] unknown channel width for channel at 909000KHz?
[  115.689461][ T8954] unknown channel width for channel at 909000KHz?
[  115.692612][ T8954] unknown channel width for channel at 909000KHz?
[  115.803743][ T8956] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  115.807808][ T8956] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  116.001643][ T8963] netlink: 'syz.2.835': attribute type 13 has an invalid length.
[  116.004502][ T8963] netlink: 'syz.2.835': attribute type 17 has an invalid length.
[  116.047643][ T8963] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.052536][ T8963] 8021q: adding VLAN 0 to HW filter on device team0
[  116.057376][ T8963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.063106][ T8839] lo speed is unknown, defaulting to 1000
[  116.069153][ T8839] syz0: Port: 1 Link ACTIVE
[  116.074953][ T8839] lo speed is unknown, defaulting to 1000
[  116.091289][ T8963] lo speed is unknown, defaulting to 1000
[  116.152268][ T8964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.210650][ T8967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.222470][ T8969] netlink: 'syz.1.837': attribute type 27 has an invalid length.
[  116.233872][ T5905] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.448708][ T8978] netlink: 'syz.1.840': attribute type 9 has an invalid length.
[  116.451888][ T8978] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.840'.
[  116.557562][ T8980] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  117.047991][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'.
[  117.291414][ T9005] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.851'.
[  117.300225][ T9005] netlink: 786 bytes leftover after parsing attributes in process `syz.2.851'.
[  117.408814][ T9014] bond0: (slave 0!): Releasing backup interface
[  117.427028][ T9014] bond0: (slave bond_slave_0): Releasing backup interface
[  117.441583][ T9014] bond0: (slave bond_slave_1): Releasing backup interface
[  117.458638][ T9014] team0: Port device team_slave_0 removed
[  117.469813][ T9014] team0: Port device team_slave_1 removed
[  117.472690][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.476742][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.486012][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.488504][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.504828][ T9014] bond2: (slave wireguard0): Releasing backup interface
[  117.507132][ T9014] wireguard0: left promiscuous mode
[  117.537542][ T9014] bond4: (slave veth3): Releasing active interface
[  117.756227][ T9022] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.760356][ T9022] syzkaller0: entered promiscuous mode
[  117.762175][ T9022] syzkaller0: entered allmulticast mode
[  117.833436][ T9022] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  117.841035][ T9022] tipc: Resetting bearer <eth:syzkaller0>
[  117.850633][ T9021] tipc: Resetting bearer <eth:syzkaller0>
[  117.887773][ T9021] tipc: Disabling bearer <eth:syzkaller0>
[  118.539738][ T9042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.707941][ T9048] netlink: 'syz.1.865': attribute type 12 has an invalid length.
[  119.761624][ T9056] atomic_op ffff88802335c998 conn xmit_atomic 0000000000000000
[  125.287480][ T9060] netlink: 'syz.0.870': attribute type 1 has an invalid length.
[  128.274154][    C0] sched: DL replenish lagged too much
[  132.600926][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  142.177879][ T9081] __nla_validate_parse: 1 callbacks suppressed
[  142.177893][ T9081] netlink: 256 bytes leftover after parsing attributes in process `syz.2.875'.
[  152.529916][ T9093] lo speed is unknown, defaulting to 1000
[  158.562965][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.581932][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.592189][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.651794][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.667093][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  160.889371][ T5850] Bluetooth: hci1: command tx timeout
[  163.786534][ T5850] Bluetooth: hci1: command tx timeout
[  165.993281][ T5850] Bluetooth: hci1: command tx timeout
[  168.039494][ T5850] Bluetooth: hci1: command tx timeout
[  179.562351][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  179.572663][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  179.579952][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  179.582680][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  179.589334][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.137430][ T5850] Bluetooth: hci2: command tx timeout
[  182.696640][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.700376][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.702998][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.887598][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.890244][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.318213][ T5235] Bluetooth: hci2: command tx timeout
[  185.210065][ T5235] Bluetooth: hci3: command tx timeout
[  186.359206][ T5235] Bluetooth: hci2: command tx timeout
[  187.239769][ T5235] Bluetooth: hci3: command tx timeout
[  188.438005][ T5235] Bluetooth: hci2: command tx timeout
[  189.334204][ T5235] Bluetooth: hci3: command tx timeout
[  191.606001][ T5235] Bluetooth: hci3: command tx timeout
[  193.896312][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  202.560555][ T9099] lo speed is unknown, defaulting to 1000
[  232.180143][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  232.226119][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  232.229840][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  232.232453][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  232.242926][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  233.459300][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  233.464096][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  233.616052][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  233.636067][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  233.638745][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  234.710397][ T5235] Bluetooth: hci4: command tx timeout
[  236.137211][ T5235] Bluetooth: hci5: command tx timeout
[  236.805447][ T5235] Bluetooth: hci4: command tx timeout
[  238.382941][ T5235] Bluetooth: hci5: command tx timeout
[  238.875336][ T5235] Bluetooth: hci4: command tx timeout
[  240.444724][ T5235] Bluetooth: hci5: command tx timeout
[  240.920964][ T5235] Bluetooth: hci4: command tx timeout
[  242.551201][ T5235] Bluetooth: hci5: command tx timeout
[  251.884309][ T9102] lo speed is unknown, defaulting to 1000
[  252.346128][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.364415][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.376095][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.379054][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.381837][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  254.603414][ T5850] Bluetooth: hci6: command tx timeout
[  255.448602][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  256.736812][ T5850] Bluetooth: hci6: command tx timeout
[  259.456349][ T5850] Bluetooth: hci6: command tx timeout
[  261.490159][ T5850] Bluetooth: hci6: command tx timeout
[  268.868006][ T9097] lo speed is unknown, defaulting to 1000
[  276.001846][ T9113] lo speed is unknown, defaulting to 1000
[  282.969124][ T5235] Bluetooth: hci1: command 0x0406 tx timeout
[  285.191924][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  285.229778][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  285.233644][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  285.248784][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  285.251569][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  287.643933][ T9111] lo speed is unknown, defaulting to 1000
[  288.280481][ T5235] Bluetooth: hci7: command tx timeout
[  288.946684][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  288.975854][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  289.018915][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  289.084899][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  289.089231][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  290.363037][ T5850] Bluetooth: hci7: command tx timeout
[  291.434967][ T5850] Bluetooth: hci8: command tx timeout
[  292.451872][ T5850] Bluetooth: hci7: command tx timeout
[  293.512032][ T5850] Bluetooth: hci8: command tx timeout
[  294.524250][ T5850] Bluetooth: hci7: command tx timeout
[  295.653866][ T5850] Bluetooth: hci8: command tx timeout
[  297.754359][ T5850] Bluetooth: hci8: command tx timeout
[  303.417362][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  308.823746][ T5235] Bluetooth: hci3: command 0x0406 tx timeout
[  316.926367][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  317.084074][ T5235] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  317.095656][ T5235] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  317.098390][ T5235] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  317.101152][ T5235] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  317.104111][ T5235] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  319.239530][ T5235] Bluetooth: hci9: command tx timeout
[  321.320645][ T5235] Bluetooth: hci9: command tx timeout
[  323.408517][ T5235] Bluetooth: hci9: command tx timeout
[  325.483237][ T5235] Bluetooth: hci9: command tx timeout
[  328.633903][ T9116] lo speed is unknown, defaulting to 1000
[  350.161773][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  350.171387][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  350.174213][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  350.236862][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  350.239487][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  351.007691][ T5235] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  351.040995][ T5235] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  351.053580][ T5235] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  351.161757][ T5235] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  351.512788][ T5235] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  352.787437][ T5850] Bluetooth: hci7: command tx timeout
[  353.845348][ T5850] Bluetooth: hci10: command tx timeout
[  354.999011][ T5850] Bluetooth: hci7: command tx timeout
[  356.055761][ T5850] Bluetooth: hci10: command tx timeout
[  357.105742][ T5850] Bluetooth: hci7: command tx timeout
[  358.275443][ T5843] Bluetooth: hci10: command tx timeout
[  359.162863][ T5843] Bluetooth: hci7: command tx timeout
[  359.760661][ T5843] Bluetooth: hci5: command 0x0406 tx timeout
[  359.762943][ T5843] Bluetooth: hci4: command 0x0406 tx timeout
[  360.369056][ T5235] Bluetooth: hci10: command tx timeout
[  375.172935][ T5843] Bluetooth: hci6: command 0x0406 tx timeout
[  378.326208][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  403.279814][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  403.357434][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  403.412641][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  403.464111][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  403.531184][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  405.805084][ T5235] Bluetooth: hci0: command tx timeout
[  407.638919][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  407.642673][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  407.649860][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  407.652953][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  407.661245][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  407.906243][ T5843] Bluetooth: hci0: command tx timeout
[  410.006946][ T5235] Bluetooth: hci2: command tx timeout
[  410.009176][ T5235] Bluetooth: hci0: command tx timeout
[  410.331707][   T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  410.347477][   T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  410.350617][   T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  410.353253][   T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  410.368537][   T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  412.148429][   T53] Bluetooth: hci0: command tx timeout
[  412.150191][   T53] Bluetooth: hci2: command tx timeout
[  412.685473][ T5843] Bluetooth: hci11: command tx timeout
[  414.236354][ T5843] Bluetooth: hci2: command tx timeout
[  414.764438][ T5843] Bluetooth: hci11: command tx timeout
[  416.139329][ T5843] Bluetooth: hci8: command 0x0406 tx timeout
[  416.300682][   T53] Bluetooth: hci2: command tx timeout
[  416.854408][ T5843] Bluetooth: hci11: command tx timeout
[  418.920660][ T5843] Bluetooth: hci11: command tx timeout
[  422.322046][ T9123] lo speed is unknown, defaulting to 1000
[  439.785261][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  442.749974][   T53] Bluetooth: hci9: command 0x0406 tx timeout

VM DIAGNOSIS:
09:17:30  Registers:
info registers vcpu 0

CPU#0
RAX=dcda5ba3c7ceca00 RBX=0000000000000202 RCX=dcda5ba3c7ceca00 RDX=0000000000000002
RSI=ffffffff8dba60e2 RDI=ffffffff8be33300 RBP=ffff88801c2fc4c0 RSP=ffffc900001268b0
R8 =ffffc90000126eb8 R9 =0000000000000000 R10=ffffc90000126a38 R11=fffff52000024d49
R12=0000000000000002 R13=0000000000000002 R14=ffffffff8e139ea0 R15=ffff88801c2fb980
RIP=ffffffff819d6f45 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efd51db5f40 CR3=0000000028894000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff90c06301 RCX=0000000080000103 RDX=ffffc900001dfd01
RSI=ffffffff8be332e0 RDI=ffffffff8be332a0 RBP=dffffc0000000000 RSP=ffffc900001dfbc0
R8 =ffffc900001e0490 R9 =0000000000000000 R10=ffffc900001dfd38 R11=fffff5200003bfa9
R12=ffffc900001e04a0 R13=ffffc900001d9000 R14=ffffc900001dfce8 R15=ffffffff8172c195
RIP=ffffffff8b79617d RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efd51b9e820 CR3=000000003f540000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f27be187d20
XMM02=0000000500000007 0044100000000001 XMM03=02b402000b860330 02000b8403440400
XMM04=0000000000000000 0000000000000015 XMM05=0000000000000000 000000000003bf12
XMM06=ff041c0800000800 0100000000000007 XMM07=0bc0000800000000 0c10000b80040100
XMM08=00020806060101d2 0002000700000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
