last executing test programs:

37.378041725s ago: executing program 0 (id=251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001640)=""/4126, 0x101e}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000002cc0)=""/4112, 0x1010}], 0x3}, 0xffffffff}], 0x3, 0x2100, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c000080080003400100"], 0xc0}}, 0x40000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x8080}, 0x0)

37.376219756s ago: executing program 0 (id=253):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)=<r3=>0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e24, 0x401, @remote, 0xc}, 0x1c)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
close(r4)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000580)={{r1}, r3, 0x4, @inherit={0x0, 0x0}, @subvolid=0x2})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000100000000000000000000020000000087000000180100002020702500000000002020207b1af8ff00001000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000b0ef41405968d7b09c5015bc2ad4e00f4ce54f140e2a2056dfa05baa02d9c08e087bd2100622661c79d45629260657f62453faac840af82829c46b415ab2f357a25a43c219900e3baa15538bd4d3"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x12, 0x0, 0x0, &(0x7f00000004c0), 0x31}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@flushsa={0x38, 0x1c, 0x400, 0x70bd2a, 0x25dfdbfd, {0xff}, [@lifetime_val={0x24, 0x9, {0x6, 0x7, 0x234b2314, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000080))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000050500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r0)
bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a000000150000000000000045000000000000009500000000010000"], &(0x7f0000000240)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd}, 0x94)
socket$igmp6(0xa, 0x3, 0x2)
pselect6(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffffffffffff004f, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0)

36.596485522s ago: executing program 1 (id=261):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002140)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffc, 0x0, {0x60, 0x0, 0x0, r2, {0xc}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)

36.536233371s ago: executing program 1 (id=262):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000314010028bd7000fcdbdf250900020073797a300000000008004100727865001400330076657468305f746f5f7465616d00000009000f0000007a3000000000080041007278650014003300697036777265746170300000000000000900020073797a3000000000080041007278650014003300767863616e3100"/136], 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x44014)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000314010028bd7000fcdbdf250900020073797a300000000008004100727865001400330076657468305f746f5f7465616d00000009000f0000007a3000000000080041007278650014003300697036777265746170300000000000000900020073797a3000000000080041007278650014003300767863616e3100"/136], 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x44014) (async)

36.51838893s ago: executing program 1 (id=263):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa77}, 0x1c) (async, rerun: 32)
r1 = socket(0x10, 0x3, 0x0) (rerun: 32)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0}) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x40}, 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x50}}, 0x0)

36.238716557s ago: executing program 1 (id=264):
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000002c0)=0xff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x38, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x38}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendmmsg$inet6(r4, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20081}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x104}, 0x40)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r5=>r2})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x1703}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4890)
pselect6(0x40, &(0x7f0000000340)={0xf72, 0x5, 0xfffffffffffffffa, 0x1, 0x80000001, 0x2, 0xffffffffffffffff, 0x6}, &(0x7f0000000380)={0x5, 0x3, 0x8000000000000001, 0x1ff, 0xfffffffffffff5b1, 0x3ff, 0xcb13, 0x37}, &(0x7f00000003c0)={0x2, 0x6, 0x3, 0x101, 0x10000, 0xa, 0x9, 0x3}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x2]}, 0x8})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x3c, r7, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xe55b815fa6d93632}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24008880)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r11, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x20008000)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r11, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa8fb, 0x60}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffffffdf}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0xb7bc0b72f046ae1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r12, 0x40, 0xa6, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@mcast1, 0x1a, r8})

36.168418153s ago: executing program 1 (id=265):
syz_emit_ethernet(0x95, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@val={0x88a8, 0x3}, {0x8100, 0x1, 0x1, 0x2}}, {@x25={0x805, {0x3, 0x0, 0x27, "619cfc0f02bbaab3a6f0fd80514533a81163b9a403edc5f8e39417ed633a11b2045a8d866cbe1eae44015b4c2be0c87e0862ccfd382d310c0a9d4c49bea090940d1726ef5fd3ad375ca8343195a12c14e0324e5e67d03783a2799f6ebc68968a493a8661ce2cb78f3dd70c728b52630a2427eabde0c684ed4b962552"}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x105}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x20050800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000de80)={0x0, 0x0, &(0x7f000000de40)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x810, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "b665b88e1104a9e19e"}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "7175914e1c"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x79, 0x6, 0x1, 0x0, "66af62fa1c4f575f857224fa269e95a10501f869f657fddd23b10753e3f9c1a0877cc787c15de933898e72f9cc5fe11c13eaf54ba378407f36de59c788f50e0d65fd1a072e4b4d7fa10f8603b2ec9a3035097adb677b2ce4a660bde9349e00"/117}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6cc, 0x3, 0x0, 0x1, [{0x3a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x148, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfd, 0x1, "39775cf67c8c80328dfdf1d67def09b724ec946e98fad0c115f69481d621cce13327b0e208a6b61f2a6e18563b6ab9952cf30ac062314f7a983e49f0ecacbe6d5ff967d5aa8ca88849d3013be9a44162772b43856d8d772ac512a0cde410721447699d888cdc48269a86eb2de7cd2a00dcd1bfb13b1b9c19ad1f253eaa7609fa3dac925828287b6bbf0ec4dce2a48192204a5f492030917e71764dea358a0992d6f050b17c6a0088952de7d789302be6545bca5d26698f02cd61b2c18db568ae6bb29711999bb9736fd62fdc63853fe64e1c52a4dca9a098ae64cc3478daae0db2fffc4da93ac752bb222ddbfb4447c7e789d681014a1f4e58"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "4898f71c7976dea970d13190680da7f3918c3ad7a028412139"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5e9c}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd9, 0x1, "38aa6f4a0efa598399ae7c421bc02142d4d17f92a5e2de10d985f5b36ae58f41e7644125de1faceb2835837217a4e208f3dd5efd08708eba5df70464fff313c64eacf4a06e0fdbfe98a21d1ad93809a71b6e045e89d69148140bfb766d4c51d620fda11fd02262b3082b9650221ad26f3212abbb3efbf8dcf172b898ea840bb9b799ddbf8361a6c8eca99459abc2960080d7b2695f0cc987ad71d67148ea9214d1f44e40989e7d9776e17d080a8467cc8c304a69dfe4b24917f3807a754df8fc7f7f3f810afd5121e309e50b220ed94853f506a683"}, @NFTA_DATA_VALUE={0x36, 0x1, "537243e9a53f42ee6d402b06bf7a54fdc850661036bb30d4e626e899f7c7225dc47d39d197526626555310a2547d28aadb93"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x200, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "8ce9a856277239e8461b5a4a81b2fca93582f5557aa00e64f3740f57a312f0ba465819a2d910729ac8cf2b9e848f7d1e34179d56d4d52b49325344dcc3d3d96dd1669f209865ec74d2284113409b9bcdbafcc0f2a93cbf8b9d25adb2e105b307c413c32c1e09f472c110014e40adb4f1e1e33030f9d6f5d8963e0e36a134963affe28c1c8b8d2eb7b5c389560ebc111fb8101a22181c63c9fe44f8b3f8576dfd6659e11e9ac6684c9082e6b00342a9f4faf3b860908f4552825c0291a1eb486bced2c23bc7284a1fe5a78204382e9e02fbb4c9b623f724"}, @NFTA_DATA_VALUE={0x20, 0x1, "0b16a32afc2624e950a78bd8b8c388f94a6f2eae22b258a53b475c0d"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xef, 0x1, "74b2186ef7eb257e2f38bb63393a1077734fe0378a6501c567bafcec4e7e3d9b249d9d70ab13934c1c6c76c25c3a33c5632f3c01a69fc63076223b3e882074cd27128bad3dba80f531646a0f3d536b91e2651b2d56a64eca5cc17b8eb4baaa15e706631940f65479b64f1708d0f73f983d5d150473eb32c1f34b5a65353e23080d72b730240489b090e3041414c204a5c348948f189a5e096a7c2dd0772f3c050fabb0b5a7a79ed3e57b92c401adc52d8d23d78bf56c382174e3d3abc01826bdfdd6a517d2b21d70301eac989b065fa384ed8835a82f79bb5ee82ebb855a3c64b6c9f7abed6e5d5817dac5"}]}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x51, 0x1, "2a6f6ebd8f423f0753379a6fab15749c9cb84696c94eef9fa8392c6cab1500c9bb10741af95e1eafe93b2e90c25e387f8640a5d94b95e56403c39b016786b3db7be87eecaa84e2e810eddaad2f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "a36a5a21797ba426374e7134d8bac19ff9c57823536cae5ca6e5f43516d9687c895e9f0f182bb00dde2c0eb58ccd8c3c1b2afb8a3b1bf8c5ef325930212d533596061a2af5b88c51ce"}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x8, 0x1, "c60bcbbe"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x890}, 0x1, 0x0, 0x0, 0x8040}, 0x894)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000100)=0xc)
ioctl$TUNSETGROUP(r2, 0x400454ce, r3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="01000000010000006c001a8008000280040001800800028004000180580002"], 0x8c}}, 0x0)

35.767603634s ago: executing program 2 (id=269):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640201b2000080013400000000205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0xd, 0x6, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0xc0)
listen(r0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r6, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4)
listen(r5, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x80000006, 0x6, 0x0, 0x4}]}, 0x10)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

35.673785169s ago: executing program 2 (id=270):
r0 = socket(0x840000000002, 0x3, 0x100)
setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000200)=0x2, 0x4)
unshare(0x28020480)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xffffff2a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="dba67cb174b22e0b5034ef1c60b88a0ae33057113b6280392ed8645a6f872b0cb5e8852ab4c3fc77c6dbfd8aa0e1f0b76040f2b68c851725284b9bf9bcda7778a541c8614547088f1be1ac659b9598f902db1248fec6255e86cc27cd5863849e4dfbfce32ac163bd73e3492663a8084cd76a07ba3eb020d8a9e69429878e392736469a49c82873cedf26c99f8fe2ca4fcbfe4f16f9cf831de269f464f04c00", 0x9f}, {&(0x7f0000000300)="75ec7a5b6265e24e0601c80745015e427d2a76a8ec352af8ac20c4125cb48d64250f3a798e465dc2f93c0c4410b968c254b2cc488633390ae04d2198e36b807230e22831044f3fe71f30dbffc622991391f6a45567ed43554a081f1e8d803cbb46c447d48dd07bb0e1f588df1b634d9bbf1c7ae3404e0eb5461af3fe2786ac13aa08", 0x82}], 0x2, 0x0, 0x0, 0x8000}, 0x4080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa556cc2fabc7b233, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

35.671344217s ago: executing program 2 (id=271):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010009000000fcdcdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x0, &(0x7f0000000240)}, 0x10) (async, rerun: 32)
r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000c00)="202730dc98d862c06b75a95ab5a4ed9dac0cdac506aed338bcb495244655159e180081a27d45d71b5c0f6716863e008314b101bc7896ce800d6676db8c81c907402f10681623807c52e5f540f4a25d6603b9c99fd4968655c6c0d9f40d43298dd449bd89bc1c02e2021dbec1d5e7ed41c9e6e19cb4bbefca1255ce0aa7e2227f9977fb455d4c6fb294b422fa1d501cd4e7deae502f179d514d72268af5ceb3488ddb412a6984e05b7b3337fc22bd58482674f012b597fbfd654b12c462d2923b98680908cda28ca99d64adafdeb7ebe26e083f463037eb4ec3e69ad9df5840cbe5abec2feb3f93a4ac51782ad0a64549e42e74e26174faed7a5b5b6d", 0xfc}, {&(0x7f0000000600)="d9a50bbf175ade701e1b82cd0c592936d2f527131da9392b907d8438c3e04510a3b846f4ca58c159518198d73d8558deacf41693b3897d3f1145504ec32cb6025a4aa77fffb53b8582b519fff72e7ac843c09631621d9bfa8cef45aad2d2922264adfb86162d3ab1eddb46a8a3735a01b94df5e0490d88240732dc3028cdc6cb2761caf1", 0x84}, {&(0x7f00000006c0)="0c2d71c822160609fab0f308728967951e7d6a549fcf9e26ddbc0a1afd2c3594c127c18045dee3e3ff22616163b3016e3852c4cd8536", 0x36}, {&(0x7f0000000500)="d5d04cc4b83b27b4019717e99def1ad5f48701c708376f7b049605a6f3b621975577df16151ed7fcad06aacb4b7179a0ccd32d32c2de8526845fee88f6426e250ffad4893661497afb6121d20e4c4ec85a85c6a2caf2563605877138bfb37a6ac68aa75ba363262b8cdf10562d65d4a9b283d831e8ac4a93648118c65a4ccb61a9dd8694d0d64472c831380757c69a4ad873914b5de36bb379a6a8c677e86af172ca3a805b6502999f6077c030ce7187c18dc501736da1716beef989f919b9ce985e8ee4a4801699f3b667cd49dfd8628769bb2dba1994e8a3af98f87284d125b7cf113ae0037188ace71170", 0xec}, {&(0x7f0000000700)="9472fc8ce176d4b9d1c2bce988e79a7553210c70d46c1eeb1fd004503b70838e5a1d57d1a5239782898b3b8f8636f5bfa97a39693666161b51d371799cec927622e7227bdb95d0e7848f7c676290fd86a3d45e14d94cbbcb36580d8d3e11bd23a71d46d01db65f38c491cf869cac5b3f5d34b40ea6b558d12828524b675604e5e33f5c1b2dbcbab0f6c192a96649c1056b375021", 0x94}, {&(0x7f00000008c0)="d89ec26cd695fdc3be34275d103f7a3f440a5180814a319fe0a0fabce0fdd15a623351016a786638bfd3cfdf986c107e0e3406aa0bd9e93a5d80a68863e81565521a4e1e52f50679aff146d735ed2f4c8221dbcef6ead1655c1f6c6a27948757623ca540af6f3293e0d2296013d1d111668e23a67401b60d336727946039dcfcebe70c73a9c4cf8f3ee9ad22c6bec94d67f8a7f40c8217a0ab5b20e97e326f14bce1c39869004f590bc5b274ea5c3fd99f82e6f1efe4f08b611548c4de86f593", 0xc0}], 0x6, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2ab}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5e49}}], 0x30}, 0x8041) (async)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240100003e000701fcfffffffddbdfa5047c0000040036800c00b114c5fcbc7613b00000", @ANYRESHEX=r4, @ANYRES64=r2, @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x200088c0}, 0xc000) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x0, 0x8000}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}]]}, 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b00)={0x78, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x0, 0x3, r7}, @void}}}, 0x78}, 0x1, 0x0, 0x0, 0x24008054}, 0x4000005) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000ac0)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000380)={r10, @in={{0x2, 0x4e24, @empty}}, 0x4, 0x4, 0xec9, 0xc, 0x9}, &(0x7f0000000200)=0x98) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x32, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000100)={r10, 0x4}, 0x8) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000bc0)) (async, rerun: 64)
r12 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r12, 0x0, 0x0, 0x410) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'})
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@getspdinfo={0x14, 0x25, 0x8, 0x70bd2b, 0x25dfdbfe, 0x8, ["", "", "", "", ""]}, 0x14}}, 0x0) (async)
close(0x4) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)

35.574968203s ago: executing program 0 (id=272):
unshare(0x22020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1, 0x4da, 0x9, {0x77359400}, {0x0, 0xea60}, {0x0, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3}, 0x20, 0x2, 0x0, 0x0, "8e0f2394e580830f2b6600eb8134d49a8f79aa1109ecc97ac3beee5db34788104e84d02aaf1e2307f2cdd0fb0c45ebd1ce85626dcc6045bcfd206d0f4ff5a301"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004841)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
accept4(r3, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r4, @ANYRES16=r1, @ANYRES64=r4, @ANYRES32=r4, @ANYRESOCT=r4], 0x40}}, 0x0)

35.235320624s ago: executing program 0 (id=273):
socket$kcm(0x11, 0x8, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='svc_process\x00', r0}, 0x18) (async)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2)
r3 = socket(0x10, 0x3, 0x0)
unshare(0x80)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x2)
sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r9, @ANYBLOB="0006754fdd00b0020000607202"], 0x34}}, 0x20044002) (async)
r10 = socket(0x15, 0x6, 0x0) (async)
r11 = socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYRES16=r12, @ANYRES8=r12, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0xfffffffffffffc81, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r8], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4000805) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) (async)
r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$PPPIOCATTACH(r13, 0x4004743d, &(0x7f0000000040)=0x3)

35.234909875s ago: executing program 2 (id=274):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x896)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r4=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0)

34.28073862s ago: executing program 2 (id=275):
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "8b6074f501258cfeb4b4dac46617946e69a517c5"}]}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88}, 0x1)
ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4)

34.259693153s ago: executing program 0 (id=276):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
unshare(0x26020480) (async, rerun: 32)
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) (async)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', <r4=>0x0}) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b801000000000088f414fe7a1426c9d4df8e81f99c7bb435835f38656147e1272500"/44, @ANYRES16=<r7=>0x0, @ANYBLOB="00022dbd7000fbdbdf250400000044000480050003000600000005000300070000000500030007000000050003000000000005000300020000000500030007000000050003000200000005000300070000008c0008800c00078008000500ff1dfc4c14000780080005001bee2e01080006004f00000024000780080005000844fd0d08000500d0f6ec1808000600ba000000080005007647735a4400078008000600ee0000000800060018000000080005000008000008000500001f326b080006001c00000008000500379274270800060098000000080006000b000000c4000c801c000b8008000900030e2a7308000a00e5b1000008000900eee9aa6e34000b80080009006c81456f08000a001044000008000900cfacc05a08000a0048340000080009002303df7d0800090088ba4e0054000b8008000a00dc3f00000800090095fa920508000a00e5a2000008000900cad9a95308000900b0be3c6708000a00c78a0000080009000547ea0f080009000c59350508000a003816000008000a00e13600001c000b800800090097d2346708000a00b01a000008000a00aa71000008000200020000000800010003000000"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80040c0)
syz_emit_ethernet(0x7e, &(0x7f0000000980)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd6455d759004800fffc010000000000000000000000000000200100000000000000000000000000025c03000000000000c910ff0100000000000000000000000000010708000000030008000000000000010000000000000021020401ab105200fe8000000000000000000000000000aa43063d12945e45db3ed0bb755472c976c0c0b08097ea24b9d7dce4f8e1557bab45b35901972e7d62797046c0d88f02537d38f5c9fb4374cc868d4d68e5508c1ddecb1e3de3adc5a99da4d708b8850d61d4f5c6e38da34a02ab3af210fc21ee277abc9e1e7994d6a950642bf68d46aafeca4351ff405fc98b5543f2b2250a4b9ac6ed1e866121fe47519b"], 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=0x1, @ANYRES64=r6, @ANYRES32=0x0, @ANYRES16=r7, @ANYBLOB="00001000000080c8df3000000000000040dcc86a5ccbef6e000000"], 0x50) (async)
socket$inet(0x2, 0x1, 0x8f) (async)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b00000000314010000000000000000000900020073797a31000000000800410072786500140033000000000000000900020073797a31000000000802000000786500140033006d6163766c616e31000000ffff00000009000200737900330076657468305f746f5f7465616d0000000900020073797a30000000000800411b130a0072786500140033006c6f00"/179], 0xb0}}, 0x20000000) (async)
r9 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) (async)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a00000000000000000a0017"], 0x14}}, 0x0)

34.259219482s ago: executing program 2 (id=277):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3d", 0xe7}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52", 0x50}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d5", 0xbb}], 0x4}}], 0x1, 0xc0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@private2, @in6=@local}, {{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4, 0x6e6bb8}, 0xfffffffe}, [@tmpl={0x44, 0x8, [{{@in6=@private1}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f000200008008001d0061"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004)
socket(0x8, 0x0, 0x8000)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, r0, 0xfffff000)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/4083, 0xff3, 0x0, 0x0}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40)

34.255577736s ago: executing program 0 (id=278):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}}, 0x20}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8)
setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r1, 0x4)
write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x60, &(0x7f0000000040), 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef)

32.745794981s ago: executing program 1 (id=279):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14000000000092f94413582b00", '\x00', "4e67cb72f328ac2f"}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17.708292518s ago: executing program 32 (id=278):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}}, 0x20}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8)
setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r1, 0x4)
write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x60, &(0x7f0000000040), 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef)

16.44561196s ago: executing program 33 (id=277):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3d", 0xe7}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52", 0x50}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d5", 0xbb}], 0x4}}], 0x1, 0xc0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@private2, @in6=@local}, {{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4, 0x6e6bb8}, 0xfffffffe}, [@tmpl={0x44, 0x8, [{{@in6=@private1}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f000200008008001d0061"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004)
socket(0x8, 0x0, 0x8000)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, r0, 0xfffff000)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/4083, 0xff3, 0x0, 0x0}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40)

0s ago: executing program 34 (id=279):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14000000000092f94413582b00", '\x00', "4e67cb72f328ac2f"}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13675' (ED25519) to the list of known hosts.
syzkaller login: [   56.737156][ T5812] cgroup: Unknown subsys name 'net'
[   56.821005][ T5812] cgroup: Unknown subsys name 'cpuset'
[   56.829908][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.145728][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.066016][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.070252][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.073610][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.077625][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.080924][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.195119][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.198935][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.202690][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.206725][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.209515][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.277694][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.281654][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.286458][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.297320][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.300216][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.447446][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   65.507943][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   65.632934][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.636302][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.638822][ T5828] bridge_slave_0: entered allmulticast mode
[   65.641892][ T5828] bridge_slave_0: entered promiscuous mode
[   65.676221][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.679083][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.681961][ T5828] bridge_slave_1: entered allmulticast mode
[   65.686489][ T5828] bridge_slave_1: entered promiscuous mode
[   65.738043][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.740973][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.743323][ T5834] bridge_slave_0: entered allmulticast mode
[   65.747233][ T5834] bridge_slave_0: entered promiscuous mode
[   65.777183][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.780867][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.783603][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.790318][ T5834] bridge_slave_1: entered allmulticast mode
[   65.794127][ T5834] bridge_slave_1: entered promiscuous mode
[   65.800529][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.866852][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.870457][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   65.882282][ T5828] team0: Port device team_slave_0 added
[   65.888154][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.904796][ T5828] team0: Port device team_slave_1 added
[   65.973034][ T5834] team0: Port device team_slave_0 added
[   65.980604][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.982751][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.990636][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.998536][ T5834] team0: Port device team_slave_1 added
[   66.018126][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.020234][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.029508][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.043048][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.046406][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.049277][ T5838] bridge_slave_0: entered allmulticast mode
[   66.052972][ T5838] bridge_slave_0: entered promiscuous mode
[   66.060040][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.062556][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.066319][ T5838] bridge_slave_1: entered allmulticast mode
[   66.070053][ T5838] bridge_slave_1: entered promiscuous mode
[   66.118339][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.121122][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.132883][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.139153][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.141827][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.151919][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.159316][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.193994][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.219876][ T5828] hsr_slave_0: entered promiscuous mode
[   66.222481][ T5828] hsr_slave_1: entered promiscuous mode
[   66.238838][ T5838] team0: Port device team_slave_0 added
[   66.277373][ T5838] team0: Port device team_slave_1 added
[   66.283240][ T5834] hsr_slave_0: entered promiscuous mode
[   66.286829][ T5834] hsr_slave_1: entered promiscuous mode
[   66.288958][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.291424][ T5834] Cannot create hsr debugfs directory
[   66.339516][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.341936][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.351561][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.370106][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.372607][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.381914][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.519963][ T5838] hsr_slave_0: entered promiscuous mode
[   66.523161][ T5838] hsr_slave_1: entered promiscuous mode
[   66.527010][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.529949][ T5838] Cannot create hsr debugfs directory
[   66.731826][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.741895][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.754562][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.776369][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.824859][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.831785][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.841973][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.846933][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.949385][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.971323][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.979794][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.994726][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.082399][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.104147][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.136819][ T5831] Bluetooth: hci0: command tx timeout
[   67.139311][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   67.151129][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.154214][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.169128][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   67.186410][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.189434][ T5187] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.196589][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.199552][ T5187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.216068][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.218964][ T5187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.291079][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.299915][ T5831] Bluetooth: hci1: command tx timeout
[   67.342573][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   67.362642][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.365423][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.379489][ T5831] Bluetooth: hci2: command tx timeout
[   67.401130][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.403931][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.505515][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.541082][ T5834] veth0_vlan: entered promiscuous mode
[   67.549320][ T5834] veth1_vlan: entered promiscuous mode
[   67.588389][ T5834] veth0_macvtap: entered promiscuous mode
[   67.611421][ T5834] veth1_macvtap: entered promiscuous mode
[   67.635436][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.652370][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.671525][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.684941][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.689364][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.692563][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.697166][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.723704][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.787795][ T5828] veth0_vlan: entered promiscuous mode
[   67.811588][ T5828] veth1_vlan: entered promiscuous mode
[   67.837816][ T5187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.840656][ T5187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.853906][ T5838] veth0_vlan: entered promiscuous mode
[   67.878986][ T5838] veth1_vlan: entered promiscuous mode
[   67.882786][ T5828] veth0_macvtap: entered promiscuous mode
[   67.887883][ T5187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.892188][ T5828] veth1_macvtap: entered promiscuous mode
[   67.896705][ T5187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.918714][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.937784][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.943860][ T5838] veth0_macvtap: entered promiscuous mode
[   67.957028][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.959938][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.969822][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.976537][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.979993][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.987268][ T5838] veth1_macvtap: entered promiscuous mode
[   68.028696][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.044477][ T5894] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[   68.073261][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.089536][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.093263][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.098850][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.101692][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.163570][ T5899] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   68.171272][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.174043][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.196177][ T5899] syzkaller1: entered promiscuous mode
[   68.198079][ T5899] syzkaller1: entered allmulticast mode
[   68.262852][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5'.
[   68.310987][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.315440][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.327486][ T5901] Zero length message leads to an empty skb
[   68.338052][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.347347][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.465457][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.472576][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.532852][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.701819][ T5915] ip6t_srh: unknown srh match flags  4000
[   68.949201][ T5925] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET)
[   68.960980][ T5926] vlan2: entered promiscuous mode
[   68.963294][ T5926] vlan2: entered allmulticast mode
[   68.965361][ T5926] hsr_slave_1: entered allmulticast mode
[   69.029448][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'.
[   69.187927][ T5934] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.13'.
[   69.216672][ T5831] Bluetooth: hci0: command tx timeout
[   69.252453][ T5936] netlink: 100 bytes leftover after parsing attributes in process `syz.0.14'.
[   69.381701][ T5831] Bluetooth: hci1: command tx timeout
[   69.457101][ T5831] Bluetooth: hci2: command tx timeout
[   69.661174][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'.
[   69.664826][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'.
[   69.800528][ T5969] netlink: 'syz.1.18': attribute type 24 has an invalid length.
[   69.904068][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.907309][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.991506][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.004678][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.103341][ T5969] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.112019][ T5969] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.115998][ T5969] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.120939][ T5969] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.443176][ T5969] syz.1.18 (5969) used greatest stack depth: 20632 bytes left
[   70.533380][ T6033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.567580][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[   70.943543][ T6072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.33'.
[   70.949593][ T6076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.952892][ T6072] netlink: 'syz.2.33': attribute type 10 has an invalid length.
[   70.997166][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.075454][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'.
[   71.189599][ T6091] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   71.208603][ T6089] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   71.254359][ T6095] netlink: 'syz.2.42': attribute type 1 has an invalid length.
[   71.299127][ T5831] Bluetooth: hci0: command tx timeout
[   71.455824][ T5831] Bluetooth: hci1: command tx timeout
[   71.535847][ T5831] Bluetooth: hci2: command tx timeout
[   71.667743][ T6124] bond_slave_0: entered promiscuous mode
[   71.670170][ T6124] bond_slave_1: entered promiscuous mode
[   71.678663][ T6127] netlink: 'syz.0.53': attribute type 1 has an invalid length.
[   71.682874][ T6124] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   71.690687][ T6124] bond_slave_0: left promiscuous mode
[   71.692832][ T6124] bond_slave_1: left promiscuous mode
[   71.724519][ T6128] netlink: 'syz.1.50': attribute type 16 has an invalid length.
[   71.741559][ T6128] netlink: 'syz.1.50': attribute type 17 has an invalid length.
[   71.781866][ T6128] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.785473][ T6128] 8021q: adding VLAN 0 to HW filter on device team0
[   71.794640][ T6128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.810922][ T6130] xt_CONNSECMARK: invalid mode: 254
[   72.038024][ T6137] xt_TCPMSS: Only works on TCP SYN packets
[   72.121480][ T6140] netlink: 'syz.2.57': attribute type 1 has an invalid length.
[   72.580168][ T6141] gretap1: entered promiscuous mode
[   72.626263][ T6142] macvlan2: entered promiscuous mode
[   72.631960][ T6142] macvlan2: entered allmulticast mode
[   73.360283][ T6166] __nla_validate_parse: 6 callbacks suppressed
[   73.360296][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'.
[   73.376882][ T5831] Bluetooth: hci0: command tx timeout
[   73.415191][ T6169] x_tables: duplicate underflow at hook 2
[   73.501100][ T6171] batadv_slave_0: entered promiscuous mode
[   73.508119][ T6171] netlink: 2 bytes leftover after parsing attributes in process `syz.1.63'.
[   73.538167][ T5831] Bluetooth: hci1: command tx timeout
[   73.616691][ T5831] Bluetooth: hci2: command tx timeout
[   73.691018][ T6177] pim6reg0: tun_chr_ioctl cmd 1074025694
[   74.455272][ T6179] erspan0: entered allmulticast mode
[   74.758824][ T6190] syzkaller0: entered allmulticast mode
[   74.958750][ T6195] sit1: entered promiscuous mode
[   75.431033][ T6212] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   76.121467][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'.
[   76.127348][ T6216] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   76.129751][ T6216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.273874][ T6219] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   77.074505][ T6228] netlink: 'syz.2.80': attribute type 2 has an invalid length.
[   77.080574][ T6228] warning: `syz.2.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.138107][ T6230] netlink: 'syz.2.82': attribute type 39 has an invalid length.
[   77.199386][ T6232] netlink: 'syz.1.81': attribute type 1 has an invalid length.
[   77.205450][ T6232] netlink: 224 bytes leftover after parsing attributes in process `syz.1.81'.
[   77.231988][ T6232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'.
[   79.282790][ T6242] Bluetooth: MGMT ver 1.23
[   79.510537][ T6247] netlink: 248 bytes leftover after parsing attributes in process `syz.1.87'.
[   79.514108][ T6247] netlink: 'syz.1.87': attribute type 10 has an invalid length.
[   79.520076][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.523881][ T6247] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   79.534747][ T6247] netlink: 'syz.1.87': attribute type 10 has an invalid length.
[   79.539561][ T6247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.87'.
[   79.542465][ T6247] batadv0: entered promiscuous mode
[   79.544207][ T6247] batadv0: entered allmulticast mode
[   79.552017][ T6247] bond0: (slave batadv0): Releasing backup interface
[   79.565107][ T6247] bridge0: port 3(batadv0) entered blocking state
[   79.568216][ T6247] bridge0: port 3(batadv0) entered disabled state
[   79.860860][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   79.864540][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   80.471769][ T6287] netlink: 'syz.1.99': attribute type 30 has an invalid length.
[   80.503912][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'.
[   81.615290][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'.
[   81.654274][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.102'.
[   81.798388][ T6300] netlink: 176 bytes leftover after parsing attributes in process `syz.2.104'.
[   81.955384][ T6304] sctp: [Deprecated]: syz.2.106 (pid 6304) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.955384][ T6304] Use struct sctp_sack_info instead
[   82.263627][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[   82.274725][ T6316] bridge0: port 3(batadv0) entered disabled state
[   82.552767][ T6316] bridge_slave_0: left allmulticast mode
[   82.558536][ T6316] bridge_slave_0: left promiscuous mode
[   82.560543][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.572915][ T6316] bridge_slave_1: left allmulticast mode
[   82.575200][ T6316] bridge_slave_1: left promiscuous mode
[   82.579129][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.603056][ T6316] bond0: (slave bond_slave_0): Releasing backup interface
[   82.624258][ T6316] bond0: (slave bond_slave_1): Releasing backup interface
[   82.636938][ T6316] team0: Failed to send options change via netlink (err -105)
[   82.640641][ T6316] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   82.652231][ T6316] team0: Port device team_slave_0 removed
[   82.662185][ T6316] team0: Failed to send options change via netlink (err -105)
[   82.664764][ T6316] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   82.670951][ T6316] team0: Port device team_slave_1 removed
[   82.673235][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.701331][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.705906][ T6321] netlink: 'syz.2.111': attribute type 4 has an invalid length.
[   82.736182][ T6319] netlink: 'syz.2.111': attribute type 4 has an invalid length.
[   82.877620][ T6332] netlink: 'syz.1.114': attribute type 3 has an invalid length.
[   82.925688][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'.
[   83.200881][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'.
[   83.447719][ T6396] netlink: 224 bytes leftover after parsing attributes in process `syz.2.130'.
[   83.461168][ T6396] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   83.486428][ T6396] bridge_slave_0: left allmulticast mode
[   83.488712][ T6396] bridge_slave_0: left promiscuous mode
[   83.491233][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.501777][ T6396] bridge_slave_1: left allmulticast mode
[   83.504201][ T6396] bridge_slave_1: left promiscuous mode
[   83.508987][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.520681][ T6396] bond0: (slave bond_slave_0): Releasing backup interface
[   83.530227][ T6396] bond0: (slave bond_slave_1): Releasing backup interface
[   83.551100][ T6396] team0: Port device team_slave_0 removed
[   83.561215][ T6396] team0: Port device team_slave_1 removed
[   83.563624][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.568813][ T6396] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.572493][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.574958][ T6396] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.583771][ T6398] netlink: 'syz.2.130': attribute type 10 has an invalid length.
[   83.612098][ T6398] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   83.620621][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.626844][ T6398] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   83.880855][ T5892] IPVS: starting estimator thread 0...
[   83.975733][ T6402] IPVS: using max 62 ests per chain, 148800 per kthread
[   84.089730][ T6404] ip6t_REJECT: ECHOREPLY is not supported
[   84.290844][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.294993][ T6410] batadv_slave_1: entered promiscuous mode
[   84.511515][ T6425] nbd: socks must be embedded in a SOCK_ITEM attr
[   84.513926][ T6425] block nbd0: shutting down sockets
[   84.654423][ T6438] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20003
[   84.722175][ T6447] IPVS: set_ctl: invalid protocol: 98 172.20.20.56:20003
[   84.817558][ T6456] ip6erspan0: entered allmulticast mode
[   84.911624][ T6470] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.156'.
[   84.997507][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.158'.
[   85.035245][ T6479] netlink: 60 bytes leftover after parsing attributes in process `syz.1.160'.
[   85.081184][ T6486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.161'.
[   85.307410][ T6492] infiniband syz2: set down
[   85.310710][ T6492] infiniband syz2: added bond_slave_1
[   85.315100][ T6492] syz2: rxe_create_cq: returned err = -12
[   85.318280][ T6492] infiniband syz2: Couldn't create ib_mad CQ
[   85.320889][ T6492] infiniband syz2: Couldn't open port 1
[   85.348021][ T6492] RDS/IB: syz2: added
[   85.350490][ T6492] smc: adding ib device syz2 with port count 1
[   85.352667][ T6492] smc:    ib device syz2 port 1 has pnetid 
[   85.382676][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'.
[   85.397802][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'.
[   85.829190][ T6524] netlink: 666 bytes leftover after parsing attributes in process `syz.1.172'.
[   85.859971][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'.
[   85.924946][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.173'.
[   86.043618][ T6542] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   86.047176][ T6542] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   86.341507][   T10] cfg80211: failed to load regulatory.db
[   86.355899][ T6558] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.515814][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'.
[   86.858924][ T6586] pimreg: entered allmulticast mode
[   86.861458][ T6586] pimreg: left allmulticast mode
[   86.925778][ T6587] netlink: 'syz.0.186': attribute type 15 has an invalid length.
[   87.700695][ T6636] macsec1: entered promiscuous mode
[   87.702591][ T6636] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   87.705334][ T6636] macsec1: entered allmulticast mode
[   87.710554][ T6636] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   87.720567][ T6641] netlink: 'syz.0.202': attribute type 3 has an invalid length.
[   87.723228][ T6641] netlink: 'syz.0.202': attribute type 2 has an invalid length.
[   87.727916][ T6641] netlink: 'syz.0.202': attribute type 2 has an invalid length.
[   88.259178][ T6660] netlink: 'syz.1.206': attribute type 2 has an invalid length.
[   88.338462][ T6668] IPv6: NLM_F_CREATE should be specified when creating new route
[   89.379471][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[   89.442394][ T6706] xt_TPROXY: Can be used only with -p tcp or -p udp
[   89.581745][ T6722] xt_hashlimit: size too large, truncated to 1048576
[   89.584407][ T6722] xt_hashlimit: overflow, try lower: 3/0
[   89.675431][ T6725] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   89.726261][ T6729] netlink: 'syz.2.228': attribute type 1 has an invalid length.
[   89.855494][ T6737] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   89.868646][ T6737] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   90.168346][ T6749] bridge1: entered promiscuous mode
[   90.528667][ T6756] __nla_validate_parse: 15 callbacks suppressed
[   90.528679][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'.
[   90.854139][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.237'.
[   90.857785][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.237'.
[   90.938157][ T6776] netlink: 'syz.1.240': attribute type 1 has an invalid length.
[   90.941113][ T6776] netlink: 144 bytes leftover after parsing attributes in process `syz.1.240'.
[   90.944859][ T6776] netlink: 'syz.1.240': attribute type 1 has an invalid length.
[   90.950488][ T6776] netlink: 76 bytes leftover after parsing attributes in process `syz.1.240'.
[   91.057141][ T6784] netlink: 'syz.2.245': attribute type 21 has an invalid length.
[   91.060130][ T6784] IPv6: NLM_F_CREATE should be specified when creating new route
[   91.063327][ T6784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   91.066484][ T6784] IPv6: NLM_F_CREATE should be set when creating new route
[   91.069241][ T6784] IPv6: NLM_F_CREATE should be set when creating new route
[   91.072043][ T6784] IPv6: NLM_F_CREATE should be set when creating new route
[   91.108694][ T6788] openvswitch: netlink: Duplicate or invalid key (type 0).
[   91.111578][ T6788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.180006][ T6794] x_tables: duplicate underflow at hook 2
[   91.268926][ T6804] netlink: 88 bytes leftover after parsing attributes in process `syz.2.254'.
[   91.313071][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'.
[   91.324974][ T6802] delete_channel: no stack
[   91.549519][ T6813] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.257'.
[   91.584770][ T6818] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.258'.
[   91.594582][ T6818] netlink: 'syz.2.258': attribute type 1 has an invalid length.
[   91.732554][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.259'.
[   92.181540][ T6829] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   92.186491][ T6829] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   92.190447][ T6829] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   92.194946][ T6829] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   92.201333][ T6829] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   92.205238][ T6829] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   92.215493][ T6829] RDS: rds_bind could not find a transport for 4000:0:4000::ffff:ffff, load rds_tcp or rds_rdma?
[   92.226626][ T6829] RDS: rds_bind could not find a transport for 4000:0:4000::ffff:ffff, load rds_tcp or rds_rdma?
[   92.236272][ T6829] RDS: rds_bind could not find a transport for 4000:0:4000::ffff:ffff, load rds_tcp or rds_rdma?
[   92.248918][ T6829] RDS: rds_bind could not find a transport for 4000:0:4000::ffff:ffff, load rds_tcp or rds_rdma?
[   92.382036][ T6833] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   92.460261][ T6835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.465339][ T6835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.470199][ T6835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.473589][ T6835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.623449][ T6837] netlink: 'syz.2.266': attribute type 3 has an invalid length.
[   92.628866][ T6837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.101984][    C1] sched: DL replenish lagged too much
[  132.896738][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  191.317826][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  194.360653][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  227.586807][ T6899] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  227.593708][ T6899] CPU: 1 UID: 0 PID: 6899 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  227.593745][ T6899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.593762][ T6899] Call Trace:
[  227.593769][ T6899]  <TASK>
[  227.593777][ T6899]  dump_stack_lvl+0x189/0x250
[  227.593805][ T6899]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.593821][ T6899]  ? __pfx__printk+0x10/0x10
[  227.593841][ T6899]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  227.593863][ T6899]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  227.593882][ T6899]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  227.593903][ T6899]  warn_alloc+0x214/0x310
[  227.593928][ T6899]  ? __pfx_warn_alloc+0x10/0x10
[  227.593954][ T6899]  ? __get_vm_area_node+0x28f/0x300
[  227.593972][ T6899]  ? kcov_ioctl+0x55/0x640
[  227.593996][ T6899]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  227.594033][ T6899]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  227.594055][ T6899]  ? __pfx_kcov_ioctl+0x10/0x10
[  227.594075][ T6899]  vmalloc_user_noprof+0xad/0xf0
[  227.594093][ T6899]  ? kcov_ioctl+0x55/0x640
[  227.594113][ T6899]  kcov_ioctl+0x55/0x640
[  227.594132][ T6899]  ? bpf_lsm_file_ioctl+0x9/0x20
[  227.594147][ T6899]  ? __pfx_kcov_ioctl+0x10/0x10
[  227.594167][ T6899]  __se_sys_ioctl+0xfc/0x170
[  227.594185][ T6899]  do_syscall_64+0xfa/0x3b0
[  227.594200][ T6899]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.594222][ T6899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.594235][ T6899]  ? exc_page_fault+0x9f/0xf0
[  227.594256][ T6899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.594270][ T6899] RIP: 0033:0x7f653658e52b
[  227.594285][ T6899] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  227.594296][ T6899] RSP: 002b:00007ffdee281190 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  227.594311][ T6899] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f653658e52b
[  227.594321][ T6899] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db
[  227.594331][ T6899] RBP: 00007f65367b62d8 R08: 00000000000000da R09: 0000000000000000
[  227.594340][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.594348][ T6899] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  227.594369][ T6899]  </TASK>
[  227.594374][ T6899] Mem-Info:
[  230.364318][ T6899] active_anon:4820 inactive_anon:0 isolated_anon:0
[  230.364318][ T6899]  active_file:1024 inactive_file:38239 isolated_file:0
[  230.364318][ T6899]  unevictable:1768 dirty:1 writeback:0
[  230.364318][ T6899]  slab_reclaimable:9097 slab_unreclaimable:172117
[  230.364318][ T6899]  mapped:8737 shmem:2441 pagetables:683
[  230.364318][ T6899]  sec_pagetables:0 bounce:0
[  230.364318][ T6899]  kernel_misc_reclaimable:0
[  230.364318][ T6899]  free:206401 free_pcp:21978 free_cma:0
[  231.801240][ T6899] Node 0 active_anon:12336kB inactive_anon:0kB active_file:3376kB inactive_file:135128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:19536kB dirty:4kB writeback:0kB shmem:5076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4672kB pagetables:1652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  234.253565][ T6899] Node 1 active_anon:6944kB inactive_anon:0kB active_file:720kB inactive_file:17828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:15412kB dirty:0kB writeback:0kB shmem:4688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7296kB pagetables:1092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  234.484816][ T6899] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  234.597373][ T6899] lowmem_reserve[]: 0 812 812 812 812
[  234.599150][ T6899] Node 0 DMA32 free:122136kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12336kB inactive_anon:0kB active_file:3376kB inactive_file:135128kB unevictable:3536kB writepending:4kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:39176kB local_pcp:17160kB free_cma:0kB
[  235.032129][ T6899] lowmem_reserve[]: 0 0 0 0 0
[  235.034020][ T6899] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  236.339610][ T6899] lowmem_reserve[]: 0 0 854 854 854
[  236.341399][ T6899] Node 1 Normal free:219524kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6944kB inactive_anon:0kB active_file:720kB inactive_file:17828kB unevictable:3536kB writepending:0kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:54024kB local_pcp:18180kB free_cma:0kB
[  237.305516][ T6899] lowmem_reserve[]: 0 0 0 0 0
[  237.319817][ T6899] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  237.323780][ T6899] Node 0 DMA32: 1770*4kB (UM) 532*8kB (UME) 600*16kB (UME) 477*32kB (UME) 49*64kB (UME) 40*128kB (UME) 59*256kB (UM) 12*512kB (UM) 5*1024kB (UM) 4*2048kB (M) 15*4096kB (M) = 140456kB
[  240.011770][ T6899] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  240.031262][ T6899] Node 1 Normal: 192*4kB (ME) 714*8kB (UME) 336*16kB (UME) 119*32kB (UME) 123*64kB (UME) 50*128kB (UME) 14*256kB (UME) 7*512kB (ME) 7*1024kB (UME) 5*2048kB (M) 42*4096kB (M) = 226544kB
[  242.406211][ T6899] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  242.409805][ T6899] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  242.413298][ T6899] 41706 total pagecache pages
[  242.415109][ T6899] 0 pages in swap cache
[  243.842262][ T6899] Free swap  = 124996kB
[  243.843582][ T6899] Total swap = 124996kB
[  243.845076][ T6899] 786301 pages RAM
[  244.431207][ T6899] 0 pages HighMem/MovableOnly
[  244.433136][ T6899] 241085 pages reserved
[  244.434816][ T6899] 0 pages cma reserved
[  255.567364][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  316.880180][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  363.473770][   T34] INFO: task syz.0.278:6879 blocked for more than 143 seconds.
[  363.488514][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  363.503431][   T34]       Blocked by coredump.
[  363.505274][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  363.558326][   T34] task:syz.0.278       state:D stack:25400 pid:6879  tgid:6874  ppid:5828   task_flags:0x40054c flags:0x00004006
[  363.562164][   T34] Call Trace:
[  363.563299][   T34]  <TASK>
[  363.564447][   T34]  __schedule+0x16f5/0x4d00
[  363.577303][   T34]  ? __lock_acquire+0xab9/0xd20
[  363.579094][   T34]  ? schedule+0x165/0x360
[  363.580721][   T34]  ? __pfx___schedule+0x10/0x10
[  363.582212][   T34]  ? schedule+0x91/0x360
[  363.583677][   T34]  schedule+0x165/0x360
[  363.584909][   T34]  schedule_preempt_disabled+0x13/0x30
[  364.024586][   T34]  __mutex_lock+0x724/0xe80
[  364.040094][   T34]  ? __mutex_lock+0x51b/0xe80
[  364.041966][   T34]  ? tun_chr_close+0x3e/0x1c0
[  364.043877][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  365.160315][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  365.162405][   T34]  tun_chr_close+0x3e/0x1c0
[  365.164171][   T34]  __fput+0x44c/0xa70
[  365.177775][   T34]  task_work_run+0x1d4/0x260
[  365.179698][   T34]  ? __pfx_task_work_run+0x10/0x10
[  365.181718][   T34]  ? kmem_cache_free+0x18f/0x400
[  365.183664][   T34]  do_exit+0x6b5/0x22e0
[  365.185339][   T34]  ? do_raw_spin_lock+0x121/0x290
[  367.577858][   T34]  ? __pfx_do_exit+0x10/0x10
[  367.579399][   T34]  do_group_exit+0x21c/0x2d0
[  367.580881][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.582501][   T34]  get_signal+0x1286/0x1340
[  367.583854][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  368.537799][   T34]  ? __pfx_task_work_add+0x10/0x10
[  368.539908][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  368.541802][   T34]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  368.543313][   T34]  ? __fget_files+0x2a/0x420
[  368.544725][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  370.685533][   T34]  exit_to_user_mode_loop+0x75/0x110
[  370.702945][   T34]  do_syscall_64+0x2bd/0x3b0
[  370.704465][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.718895][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.721334][   T34]  ? exc_page_fault+0x9f/0xf0
[  372.722904][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.725230][   T34] RIP: 0033:0x7f26fb58e929
[  373.453605][   T34] RSP: 002b:00007f26fc475038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  373.471107][   T34] RAX: 0000000000000000 RBX: 00007f26fb7b5fa0 RCX: 00007f26fb58e929
[  373.473643][   T34] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000003

VM DIAGNOSIS:
22:46:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=0000000000000006 RCX=ffffffff93490868 RDX=0000000000000008
RSI=ffff888025bc4560 RDI=ffff888025bc3980 RBP=0000000000000000 RSP=ffffc90000006728
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc90000006978 R11=ffffffff81ad03a0
R12=0000000000000003 R13=0000000000000001 R14=ffff888025bc4560 R15=0000000000000000
RIP=ffffffff819e48d9 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc19b3b2060 CR3=0000000037a42000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff89e160d3 RBX=0000000000000001 RCX=0000000000000100 RDX=ffff888100af5640
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900001e00c0 RSP=ffffc900001dff78
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=000000000000000e
RIP=ffffffff81a72fb0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc19b3b6038 CR3=00000000270fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
