last executing test programs:

2m39.331196942s ago: executing program 2 (id=4351):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe5ffffff}, 0x94)

2m39.330362316s ago: executing program 2 (id=4352):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000000))

2m39.250354894s ago: executing program 2 (id=4353):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d0e, &(0x7f0000000080)={0x1, 0x9})

2m39.248840654s ago: executing program 2 (id=4354):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0)
ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000040)={{0xa396, 0x81}, {0x6, 0x9}, 0x6})
close(r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(0x3)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
pipe(&(0x7f00000001c0))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0xd80}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0xc014}, 0x8090)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2m38.3220213s ago: executing program 2 (id=4363):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x4000}, 0xc)
connect$qrtr(r1, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc)
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000140))

2m38.092348581s ago: executing program 2 (id=4364):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$cgroup_int(r1, &(0x7f0000001480)=0x80000000003, 0x12)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = socket$kcm(0x25, 0x1, 0x0)
getpid()
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES16=r10], 0x70}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020151ff", @ANYRES32=r9, @ANYBLOB="080002007f00000108000400e000000600"], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
recvmsg(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010040)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r2)

2m23.098286953s ago: executing program 32 (id=4364):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$cgroup_int(r1, &(0x7f0000001480)=0x80000000003, 0x12)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = socket$kcm(0x25, 0x1, 0x0)
getpid()
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES16=r10], 0x70}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020151ff", @ANYRES32=r9, @ANYBLOB="080002007f00000108000400e000000600"], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
recvmsg(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010040)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r2)

1m47.835328025s ago: executing program 1 (id=5228):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000010000000000c3080000193d000000000000009515aeb8067e21bcbb1870cea2cb8eae1fa0e28e78753d03282a08f9968100abc8e68530e5af30eaebc368a0cd436407b326e2b50f8ad63b63a9d8ad663727a32e9727be9732a90a46d94ad3337ff98f43664b49fd10b8b071f6412b272bcdc48e100205c3ac92133850998dab5de39a7ecc04709521a646ddfd5f6f1c42a46b3166564ddd55e7c9a84583fcc28817d98ad0a0a6fbfe4f8ef5f7c37659942229934d93fb8d660574a26ebc9621fd703b723bf6489625c3cec19ccf3c7627ba7a8a0f7fa51dc8ed693c137dcd383e42167c25bdc8c54c47b8a1c556961fbc54fd5fa04d6e62775e3f17b18674d202ec8e"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd}, 0x94)

1m47.767577776s ago: executing program 1 (id=5230):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$kcm(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x6c000, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}]}, 0x3c}}, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x22000810)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)

1m46.500509303s ago: executing program 1 (id=5239):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf00}, 0x94)

1m46.44037944s ago: executing program 1 (id=5242):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xe, 0x40, 0x9, 0x1806c, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xd, @value=r1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0xffffffffffffff38)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
pipe(&(0x7f00000001c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
close(r1) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xe, 0x40, 0x9, 0x1806c, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xd, @value=r1}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0xffffffffffffff38) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) (async)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) (async)
pipe(&(0x7f00000001c0)) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)

1m46.380725172s ago: executing program 1 (id=5247):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x400000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x8}, {0x6, 0x2, 0xd, 0x6, 0x26, 0xfb8e001}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x0, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x5, 0x2, 0x2, 0x3, 0x2, 0x5, 0x0, 0x81}}}}]}, 0x58}}, 0x4008000) (async)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) (async)
r9 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000001900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f0000000a80)={0x5, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0xdc, 0xa, 0x100000002ddd, 0x3, 0x1000000000f, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)

1m46.27111844s ago: executing program 1 (id=5250):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x20000000000001e8, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x2a, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket(0x1, 0x803, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8000}}, 0x24)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
unshare(0x20000400)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x1)
socket$kcm(0x29, 0xd, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)

1m30.919198096s ago: executing program 33 (id=5250):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x20000000000001e8, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x2a, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket(0x1, 0x803, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8000}}, 0x24)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
unshare(0x20000400)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x1)
socket$kcm(0x29, 0xd, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)

1m20.661829102s ago: executing program 4 (id=5713):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x7c}}, 0x4000010)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="fd0b000017e4517fc00005000000df25001b9b0c08eb4c0e1a410b1bfff77c2308da54abb3d4c72609dbba0b3f4ed082f3fc22d98ee6d6c116ed035e2e35a66a381b1f09854205c876287e520357e5dfeead8feeefef8fce4940b94fd983afc7528295319735c81097a6", @ANYRES32=0x0, @ANYBLOB="4100000003090000140003006970766c616e3100000000000000000008001d0000000000"], 0x3c}}, 0x4020040)
r4 = epoll_create(0x7)
r5 = epoll_create1(0x0)
r6 = epoll_create(0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$sock_inet_SIOCADDRT(r9, 0xff09, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x60000000})
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r10, &(0x7f0000000000)={0x2})
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
bind$rose(r11, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c)
accept4$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x80000)
r14 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$xdp(r14, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x9, r13, 0x3e}, 0x10, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x80}, 0x44)

1m20.570504312s ago: executing program 4 (id=5716):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400009bbdae9fd84bdf2512000000714fee763456c87f0c9814aca9ed269b1e284099c5fb444b124d1afb36701201ba32c4fb446bdce8397d8462df650dda134cf9d00a6778859c816fd77dfed3d3a380b0c34a5c78c5a03c7c695c9d23dcaab1f3a67122967b98d1e7ed3922669c7d487c39ad6a0d23099a820519dd298ebcad0d3a3eb774ba20a13ca6e9339a20f9f3a1b85285cfa1415ce6a642e12cb2bafd72e0cb20188d7a9ac2da66ecf930715d25ca1bc4eb8d3d74ef47d3ea50451037f77136a2ec2229a132e7"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
close(0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000013000300060a0004090300f006e8ffff00000000080007003a3a09f8130002"], 0x44}, 0x1, 0x1000000}, 0x4000044)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e)
r8 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
connect$netlink(r8, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="0000000000000000b708000041fe000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)

1m20.367302918s ago: executing program 4 (id=5719):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00e5f96baedfe426adeec829e42800000000000000240012800b000100697036746e6c000014000280060012004e22000006000f0011000000"], 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x6}, 0x50) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbedit={0x60, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x78}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f00000008c0)=[{&(0x7f0000009a40)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000a04fcff", 0x58}], 0x1) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c2ad579310afb4e7c2d28385c510741b05496dfa8fa96ba6cff3293881585c3077d961f5825d6723067a28de1b4f5683643ff72e745ab68d81c969807c6f4f52ce994847907f8e2f332d727fc0bb634ef309d369f31d7e621aaefc7a2f61ff7f5c82befa5179d413ff6b15770bd01ab0fb68033b033c87bc673d055e6aada12d9b5788e10058b176b2874f277b12fc5a17c609ef09c8909021454c711c27e169bfea903fbeee936a9a9f338c06b0f44c8c65b53a41e2c100"/222], 0x50) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001200)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="200000001300190129bd700000000004017c00000c00ff0108000a008f34922802988ed30c85c02aec9d1e20b01f3ba5a00ee6113c34fba26f5e96e1ee4e075fa47c1382e7b4562a70b4f5a4b96b4ba3bc92808f2339f83340d53dd1737ef9a0d022af2362a0fdfb802185bea78edd7075703055f9396379a2bf0063066d767370a3d0f6773b87f0a6abfa2b6df58d0e8e5110cb421ba5ed7c6c34"], 0x20}, 0x1, 0x0, 0x0, 0x48814}, 0xc000)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={<r8=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', <r9=>0x0, 0x7, 0x700, 0xe5c, 0x994e, {{0x24, 0x4, 0x0, 0x7, 0x90, 0x65, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp={0x44, 0x20, 0xaf, 0x0, 0x0, [0xe066, 0x8, 0x2, 0x6, 0x6, 0x1, 0x240]}, @timestamp_prespec={0x44, 0x3c, 0xb8, 0x3, 0xe, [{@remote, 0xffff784c}, {@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x2}, {@loopback, 0x4}, {@local}]}, @rr={0x7, 0x1f, 0x85, [@broadcast, @multicast2, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}, @empty, @remote]}, @noop]}}}}}) (async, rerun: 64)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@multicast2, @in=@private}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000280)=0x87) (rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000780)={{{@in=@private=0xa010100, @in=@loopback, 0x4e21, 0xf3, 0x4e22, 0x6, 0x2, 0x20, 0x0, 0x2, r9}, {0xfffffffffffff789, 0x3, 0xffffffff, 0x4, 0x2, 0xde, 0xbb7, 0x9fc6}, {0x8001, 0xc691, 0x1, 0x10000}, 0xe4, 0x6e6bb2, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x2, 0x0, 0x6, 0x2, 0xfffffff9, 0xa86}}, 0xe8) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000380)={r8, @in={{0x2, 0x4e24, @private=0xa010101}}, 0xc, 0x3, 0x0, 0x7, 0x52, 0x7f, 0x7}, 0x9c) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000010000000850000001b000000b700000000000000850000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r11, 0x0, 0x400}, 0x18) (async, rerun: 32)
r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1m20.284472507s ago: executing program 4 (id=5724):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x9c0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x1, 0x61, 0x11, 0x6e}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x1b, r0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x5}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0xfffffffd, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=ANY=[], 0xe0}, {&(0x7f0000000500)={0x10, 0x1c, 0x800, 0x70bd2c, 0x25dfdbfb}, 0x10}], 0x2}, 0x927775f7390fdc2e)
r5 = socket(0xa, 0x3, 0x3a)
recvmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000015c0)=""/104, 0x68}], 0x1}, 0x8}], 0x1, 0x10120, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
r8 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000480)={0xfffc}, 0x8)
sendto$inet6(r9, &(0x7f0000001040)="8149", 0x2, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)

1m19.306243147s ago: executing program 4 (id=5744):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r2)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34008014}, 0x40004)
sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000c00)={0xa, 0x4e20, 0x8189, @loopback, 0x9}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000340)="5915975777272a42e1265b99694f6a347ba0d1cdc8f91c2a5658e6cff4bdefce01d613295ce4607480f97709644e3ba80fc0f2e008eead0fd7c8", 0x3a}, {&(0x7f0000000c40)="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", 0x1000}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000000000000290000003b"], 0x28}, 0x44a0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC], 0x10)
recvmsg(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x40001f40) (async)
r7 = socket(0xa, 0x3, 0x3a)
bind$alg(r7, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(lrw-twofish-3way,sha384-generic)\x00'}, 0x58) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800200000e1ffff1300ffff021080ec97551694c3060f00fe00c80700000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x20000005) (async)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)="a2", 0x1}], 0x1}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000007174b3c9ba6b9b9432094200020025b4acbd"], 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4081) (async)
write$cgroup_devices(r5, 0x0, 0x9) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r9 = socket(0x0, 0x803, 0x492)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r9) (async)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000002c0)={0x20000000})

1m19.241528841s ago: executing program 4 (id=5746):
r0 = epoll_create1(0x0)
epoll_pwait(r0, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async, rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async, rerun: 64)
unshare(0x40000080) (rerun: 64)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
epoll_create1(0x0) (async)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
socket$igmp6(0xa, 0x3, 0x2) (async)
write(r4, &(0x7f0000000000)="05000000010001", 0x7)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r3, @ANYRES16=r6, @ANYRES64=r5], 0xc0}}, 0x0) (async)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000340)="07000000010000", 0x7) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x64af66bceeffae50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r10, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r8}, 0x8) (async)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffc}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', <r12=>0x0})
r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r12, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r12, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r13, r1, 0x4, r11}, 0x10)
syz_init_net_socket$nl_generic(0xb, 0x3, 0x10)

1m4.266483883s ago: executing program 34 (id=5746):
r0 = epoll_create1(0x0)
epoll_pwait(r0, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async, rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async, rerun: 64)
unshare(0x40000080) (rerun: 64)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
epoll_create1(0x0) (async)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
socket$igmp6(0xa, 0x3, 0x2) (async)
write(r4, &(0x7f0000000000)="05000000010001", 0x7)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r3, @ANYRES16=r6, @ANYRES64=r5], 0xc0}}, 0x0) (async)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000340)="07000000010000", 0x7) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x64af66bceeffae50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r10, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r8}, 0x8) (async)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffc}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', <r12=>0x0})
r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r12, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r12, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r13, r1, 0x4, r11}, 0x10)
syz_init_net_socket$nl_generic(0xb, 0x3, 0x10)

58.721678087s ago: executing program 0 (id=6060):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x559ac1, 0x0)
close(0x3)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x559ac1, 0x0) (async)
close(0x3) (async)

58.721398781s ago: executing program 0 (id=6061):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000400080006"], 0x24}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000040)={0x4, 0xf8f9a409b1d2587c})

58.660903992s ago: executing program 0 (id=6062):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35c60100ef000000500012800e0001006970366772657461700000003c00028014000600fe880000000000000000000000000101140007"], 0x70}, 0x1, 0x0, 0x0, 0x240488c0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000a004b00000000000000006612ecad9142c8", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000000))
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40043d0d, &(0x7f00000020c0)={0x28, 0x2})

58.659244278s ago: executing program 0 (id=6063):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={<r2=>r1})
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) (async)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='macvlan1\x00'})
sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) (async)
sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6211, 0x12000000, 0x0, 0x0) (async)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f00000020c0)={0x25, 0x4}) (async)
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@empty, @broadcast, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x5, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @loopback, @multicast, @broadcast}}}}, 0x0)

58.570908662s ago: executing program 0 (id=6064):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
close(0x3)
socket(0x2, 0x5, 0xfffffffc) (async, rerun: 64)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
shutdown(r0, 0x0) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0xf) (async, rerun: 64)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0xfb20, 0x12)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000040)="77e6a61f1da8197cad4a106f7154c64a29503998d37fe9e2b598d1217b5aacf5b1ef03fcf50840a6e194108faef4ddb83c313c394e6480", &(0x7f0000000100)=""/254}, 0x20) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0xf) (rerun: 64)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) (async)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (rerun: 64)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async)
sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, r5, 0x7ac87000)
connect$bt_sco(r2, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4067, 0xfe3, 0x0, 0x0}, &(0x7f0000000400)=0x40) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000380)=0x40)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500140012800b00010056aa5a627269646765000004"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64)
listen(r7, 0x0) (rerun: 64)

58.434854423s ago: executing program 0 (id=6067):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc40, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xca0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async)
unshare(0x62040200)
r3 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r3, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000bb5c95cf6e00", @ANYRES16=r5, @ANYBLOB="000400000000040000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x44094) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002300010324bd7002fadbdf25016c7300"], 0x14}}, 0xc004) (async)
listen(r7, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)

54.210753339s ago: executing program 5 (id=6130):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x7, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000030000000000000002000013020000f4000000000000000000000000010000000000000000000000006100"], 0x0, 0x3f, 0x0, 0x9}, 0x28)
close(0x3)

54.209202147s ago: executing program 5 (id=6132):
r0 = socket(0x23, 0x5, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x113, 0x4, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
socket(0x10, 0xa, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x40800)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x4, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4)
setsockopt$inet6_opts(r10, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f00000020c0)={0x25, 0x4})

54.000732255s ago: executing program 5 (id=6134):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010100}}}, 0x108)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x8, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x2)
unshare(0x2c020400)
getsockopt$netlink(r4, 0x10e, 0x5, 0x0, &(0x7f0000000000))
setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

53.940588996s ago: executing program 5 (id=6137):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500000082010000090000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{0x7fff, 0x800}, {0x8, 0x3fc001}, 0x7, 0x3})
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r10 = socket(0x10, 0x1, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)={0x28, 0x203a, 0xa01, 0x70bd2d, 0x0, {0x40}, [@generic="ce642a8e32e88d096d156f58f85197d1efbc64"]}, 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)
recvmsg$can_raw(r10, &(0x7f0000000780)={&(0x7f0000000480)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/2, 0x2}, {0x0}, {&(0x7f00000005c0)=""/71, 0x47}], 0x3, &(0x7f0000000680)=""/208, 0xd0}, 0x40002122)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r9}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r9, 0x0, 0x5}, 0x18)
r11 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000001200)={&(0x7f0000001140), 0xc, &(0x7f00000011c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000700000000000000000700000989bcea8749645c38ff720998292dd5010900020073797a3100000000083c094000005afe"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4001)
openat$cgroup_devices(r9, &(0x7f0000001100)='devices.deny\x00', 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp(0x2, 0x2, 0x73)

53.81003513s ago: executing program 5 (id=6138):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x43403d0e, &(0x7f00000020c0)={0x25, 0x4})

53.809419188s ago: executing program 5 (id=6139):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}}, 0x20000000)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x98, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x6}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
bind$rose(r2, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async)
bind$rose(r2, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) (async)
write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x1000, 0x800}, {0x9, 0x3fc000}, 0x7, 0x1})

42.647598034s ago: executing program 35 (id=6067):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc40, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xca0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async)
unshare(0x62040200)
r3 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r3, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000bb5c95cf6e00", @ANYRES16=r5, @ANYBLOB="000400000000040000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x44094) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002300010324bd7002fadbdf25016c7300"], 0x14}}, 0xc004) (async)
listen(r7, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)

38.641048971s ago: executing program 36 (id=6139):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}}, 0x20000000)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x98, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x6}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
bind$rose(r2, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async)
bind$rose(r2, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) (async)
write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x1000, 0x800}, {0x9, 0x3fc000}, 0x7, 0x1})

1.0510665s ago: executing program 7 (id=6534):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x3c, r1, 0x2, 0xfffffffd, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x3c}}, 0x0)
socket$rds(0x15, 0x5, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6gretap0\x00', 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4084)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
close(0x4)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r8, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4)
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = accept$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10)
ioctl(r10, 0x80000001, &(0x7f0000000240)="7ba2cb8f87c0cfb93c93bc6f96e5dab366cf2263d740d8345758fcd93eddb174033aed33e6d0a8b31a4e6f3e96bc32b70230cbda559024e219440f38b35100884c9d8b007403")
read$ptp(r9, &(0x7f0000000000)=""/43, 0x2b)

961.739379ms ago: executing program 7 (id=6535):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r2=>0x0}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r4, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) (async)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) (async)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000010c0)) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010027bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e4f00000014001680100001800c0005000600000001100000"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x60000090) (async)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r8, 0x0, 0x0, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x0, 0xff, 0x5, 0x0, 0xa001}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r9, 0x8b32, &(0x7f0000000040)) (async)
ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000000)={'\x00', 0xcf, 0x1, 0xed})

628.067127ms ago: executing program 7 (id=6539):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000002040))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, &(0x7f0000000040))
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f00000020c0)={0x25, 0x4})

580.451114ms ago: executing program 7 (id=6540):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xe365e39d0c265083}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', <r5=>0x0})
setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r5}, 0x14)
r6 = accept4(r2, 0x0, 0x0, 0x800) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async)
openat$cgroup_int(r8, &(0x7f0000000000)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) (async)
pselect6(0x40, &(0x7f0000000a80)={0xffffffffffffffff, 0x8, 0x0, 0xfffffffe, 0x6, 0x1, 0x3, 0x80000001}, &(0x7f00000003c0)={0x40dc, 0xa, 0x100000002ddd, 0x2, 0x10000000013, 0x80000000007fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)

574.160063ms ago: executing program 7 (id=6541):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r4)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0xa25cd5d97e5ae12b, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xdfcf5044da016759}, 0x40880)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f00000000c0)={0x1, 0x100000000, 0xdc, &(0x7f0000000840)=""/220})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfffffffffffffffa}]}}]}, 0x48}}, 0x4000010)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r9, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1)

468.860784ms ago: executing program 7 (id=6542):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x804)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x35}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, 0x4, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x452a9ee}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5ec7cbd0}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}]}]}, 0x8c}}, 0x4000080)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x17, 0x4, 0x3, 0x10, 0xd39, 0x20, 0xe, 0xa, 0x0, 0x3, 0x8000, 0x4, 0x1, 0x7, 0x10, 0x842]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r5, &(0x7f0000000640)="86b6bd625d4475c744d360d7a9439593706e9331244b070f1bb99ea0", &(0x7f0000000680)=""/119}, 0x20)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
poll(&(0x7f0000000740)=[{0xffffffffffffffff, 0x4000}, {r2, 0x3100}, {r6, 0x4020}, {r5, 0x40}, {r5, 0x8000}], 0x5, 0x400)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000dc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f00000007c0)={0x570, r3, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1f6, 0x2a, [@random_vendor={0xdd, 0x80, "5c502ed214c79fade002f534518af720d043f1d9198207a14575921f4142a6cf1db00717a620cdc4180995f80cc8a419c46861f3067573bd8fe0528965d83fc1f554e1a128a69fbc05e7c22d700a8a91d92896648518dda82c880cbbb4f72ee48e7b02956059a1e1c4c38de872b5acc659dceae09d3a208cfa2b91cc1c434636"}, @measure_req={0x26, 0xe3, {0xc, 0x9, 0x1, "95da0df6464ac85e77a12c8b59cdc492f79fa2827ed34f2a535d9a12557b386f0b73336059356fe97d372c3b9f82efbb9baeaf1a4082791f6dbcea72e87ad23e9487b57054db7125ce66d63b9c6174be6d0914bda70fd2fc17ad9644bd4d6016d6777fc38b11ec14c2b404dc7ef842ec3b09be785efdee7446a30ff96ef1bb13751b886197d2681f15fb840f7558baa4490f4a0663e2c4caf23acb236714f7900dabe4005e0ab095b2efae471055ae8e79d61e8bd9e03eefe3241c04da00d3e6d83f5d25081d467328b050b79474191adeb22da36411a860c5eea7e930d80e57"}}, @perr={0x84, 0x89, {0x7, 0x9, [{{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x7}, {{}, @device_a, 0x1, @void, 0x34}, {{}, @broadcast, 0x3, @void, 0xf}, {{}, @device_a, 0x3, @void, 0x23}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x4}, {{}, @broadcast, 0x4, @void, 0x8}, {{}, @device_b, 0x72a5, @void, 0x38}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x2e}, {{}, @device_a, 0x1ff, @void, 0x1e}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x162, 0x2a, [@mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x3, 0x0, {0x4, 0x3, 0x0, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x80}}, @tim={0x5, 0xce, {0x5, 0x60, 0x3, "311d27797d5b95e3c815df7cef3ee6c6d20155f4d6445f17174899a47ae30543eb77ad37cf6666040759cd9c47ed565e9d2c1608883a8b002cf40f31609ae3a2fcdf18208eb263c98376a31d241f68240985fd30e9f471232dac97bd35cb42614a0998d096713112cb8b129e90e7617f83513085f69b9aa3b5de9f257d4885932cf37c7d39d4024b858b57d4c2e20114a720fdd2551c2a01fd183cdcd42384b5bc8fcc00d1b15b8601510516b3a68e799d35ac120dea8b00140d9573a874fd699678f593482fd6a2bf74fe"}}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x4, 0x0, {0xaa1, 0x5, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x2, 0x7}}, @preq={0x82, 0x4c, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0xff, 0x3, 0xfffffffe, @broadcast, 0xa8000000, @value=@broadcast, 0x1, 0x1, 0x4, [{{0x0, 0x0, 0x1}, @device_b, 0x203}, {{0x1, 0x0, 0x1}, @broadcast, 0x101}, {{}, @device_b, 0xfffff801}, {{0x1, 0x0, 0x1}, @broadcast, 0x7fffffff}]}}]}, @NL80211_ATTR_IE={0x1e8, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x4, 0x0, {0x5, 0x1e0b, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x7, 0x400, 0x10}}, @cf={0x4, 0x6, {0xa8, 0x8a, 0x8e3, 0x460c}}, @random={0x2, 0xb6, "817ca998dbc50e6f66710c06bf39ed6594b6c571bd5edf602bb33b43ff42fc1e6501d5c40a083c1583eea7919ffd76872da8933c145419916a521343c3df6c34ae0795dc5c33591d795dc2dce74057fe242ac3c7b55c36c6e46290b788bcbef65c33a3a69d8fbe2a17b5ab0ae51b788b1dfca27edb7010d922733fc4b5e89ea1ceeb351c903b3f8b93331159eb2ce1eb248b4c1db6e36938e7f97abab92a57d2ee7cf9bb24d05c3feb41f5992aaba8dc52fbdd2b5d00"}, @random={0xf7, 0xe9, "ea8fdfc36ca427c9ef719b752edf2d4b658e41c14b3b442798d62f8ab74de6d2de732fd1efa21220dfa9d3ffc09c826a9ec9d9ca0dfcedc98dc5a26a42b94c9d551abee2fcddfe01c2b6df0aad5a18feb53115c4d96e7d85826d2461f0fc6e33fb9819f226be7169f3766f7a4602b394433566cb0e973f517d9fa7fd7ad03c09617e5b7da68102c191c4d3aca1af1a9e9cc71ed7de331b3cf01c01edc5462b3ce626fc39f411f8860f32736cfacc8c0e69d8f1175c0f19abb174843ffd2d48846b2011a79a95922baca7092a65633aeba0df8c558345c4259d57b1bc567fcc2992318fabc58b67e84f"}, @mic={0x8c, 0x10, {0xc47, "b97162064d6c", @short="273d1b6daf6a704a"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xf889}]}, 0x570}, 0x1, 0x0, 0x0, 0x80}, 0x1)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8048)
sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, 0x3fa, 0x800, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x2000c004)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xc0, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0x8c, 0xc, "d6e6576d8ddadd421230ca18d01832ba03fef38902a313d210d4fabd1aee9858c0475a34156a6486331ed425ca5eae7b45069e0320a061c4809e7e8b1d1746c574188e8a7a95f8d90cfdac8a7407a38835dd4a253029c4f8c6c319041b322f2aea90122d68bce5cf213db5b920d10de0da37bd4e61b7cacfd69d96e61b04054d0d925acfbeb03fe9"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040024}, 0x400e890)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
socketpair(0x21, 0x800, 0x7fffffff, &(0x7f00000012c0)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001340), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f0000001440)=[{}, {}], 0x10, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000001500)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'wg1\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000016c0)={'wg0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001700)={'wg2\x00', <r12=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001f00)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x288000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001740)={0x758, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x6f8, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "72e16994216095fe0ba86e11d7c5ba3bdfba0eee05e2dd32e7990664ea5e0385"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "df0761a35bddb9ed3b5ab15a93cff68ba1ae5cae382b360304519fdc72c1ff40"}]}, {0x5f8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5ec, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x4}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x49, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6395ebb46369f4f0fe607738b4832a1c85d6d5f346e710e04eeadef8404b1193"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}]}, 0x758}}, 0xc000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001f40), 0x4)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, 0xf, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
r13 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r0, &(0x7f0000002080)={0x40000000})
socket$kcm(0x29, 0x5, 0x0)

307.638127ms ago: executing program 6 (id=6547):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910435000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000370403000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="4b07000000000000000021007f0000002fd6a46c6902ca0d7060efcd33ee5951838f7ceadfeb164361a99a74eb031199aac6ede737ee18931f72dcc9b813d6d30321ce330ec16b95c17beff1558b773ec428070f84017b8a2603f91479c77a8592241bb2c40667a9cd9cf640911aee5fc09bdea10ef23c3fba0917a47a5ded2c33d984ba09c464625174c76dab6ebf3ff890238637d98775ada0952c2751af5f85afebcc965987031ceefe045853ad2d3a2f570067015b841910270eab2b7743"], 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x4)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="d4000000200000006910830000000000bfffffff000000009500000000000000", @ANYRESHEX, @ANYRESHEX=r2, @ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="2c000000010101036008001a4000000003080003400000040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000404)
sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="8001000010000100000000000000000064010101000000000000000000000000fe8000000000000000000000000000bbffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000006c000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000800000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000003000000fcffffff0000000000400000020000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480004006563622861726334"], 0x180}}, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x140, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x8, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x7, 0x0, 0x2, 0x0, 0x8], 0x4, 0x5}, {0x1, [0xb, 0x4, 0x4, 0x4, 0x1, 0x2], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000070000000000000700000ac0000000060a0b0400000000000000000200000094000480900001800a0001006d6174636800000080000280080002400000000029000300390bbd13cb2c3a41db8c7bf13d8b8e21860bdc7ece6be97aed331b671aad978130587134a6000000460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a3200000000140000001100200000000000000000000a00000a"], 0xe8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="0000ee1c165c00002800128009000100766c616e000000001800028006000100fe0f00000c0002000e004b3acde7ce61"], 0x58}}, 0x8000)
sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff0, 0xa}, {0xffe9, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x38}}, 0x4000010)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0xffffd000)

230.67119ms ago: executing program 3 (id=6549):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0x2})
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, 0x1, 0x2, 0x2cc9905b1736f33e, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x60, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_CLASS={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r4 = socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x20})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={<r7=>0x0, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x1}}, 0x10000, 0x80, 0x4, 0xffff, 0x3, 0x5, 0x4}, &(0x7f0000000440)=0x9c)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000480)={0x3, 0x2, 0xffffffff, 0x9, <r8=>r7}, &(0x7f00000004c0)=0x10)
recvmsg(r6, &(0x7f00000016c0)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/90, 0x5a}, {&(0x7f0000001600)=""/63, 0x3f}], 0x3, &(0x7f0000001680)=""/6, 0x6}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f00000019c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001740)={0x204, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_CT={0x12c, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}]}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8001}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x35145a82}, @CTA_SYNPROXY_ITS={0x8}]}]}, @NFQA_EXP={0xc4, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb8}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x24048011}, 0x90)
r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001a00)={0x0, r1}, 0x8)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001a40)={0x84, @loopback, 0x4e23, 0x4, 'dh\x00', 0x2, 0x0, 0x1e}, 0x2c)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r11)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001b00)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x40, r12, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c40)={0x138, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x370686c87bdc8253}, 0x40080)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001e00)={0x2, 0x8000, 0x3, 0x80000001, r8}, 0x10)
bind$inet(r5, &(0x7f0000001e40)={0x2, 0x4e21, @loopback}, 0x10)
ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000001e80)={0x1, 0x6})
r14 = accept4$inet(r9, &(0x7f0000001ec0)={0x2, 0x0, @initdev}, &(0x7f0000001f00)=0x10, 0xc00)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000002000)={'gretap0\x00', &(0x7f0000001f40)={'syztnl1\x00', <r15=>r2, 0x8, 0x40, 0xad, 0xff, {{0x1f, 0x4, 0x0, 0x1, 0x7c, 0x67, 0x0, 0xab, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xb, 0xde, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x24, 0x2, [{0x5, 0xe, "083e55f4cee4ad30d0d9d50c"}, {0x6, 0x7, "8423ba9450"}, {0x6, 0x9, "2c43c721ef73ef"}]}, @cipso={0x86, 0x24, 0x3, [{0x7, 0x10, "166b285fba5a29ec2c097c37df09"}, {0x0, 0xe, "7b470e4730df6496ed37ac31"}]}, @rr={0x7, 0x13, 0x65, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x37}]}]}}}}})
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002040)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000002140)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000002180)={{{@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x4e23, 0x499f, 0x4e24, 0x1, 0x2, 0xa0, 0x0, 0x2f, r15, r16}, {0x4, 0x7, 0xb68, 0x0, 0x1, 0x7fffffff, 0x8000000000000001, 0x2884206c}, {0x6, 0x202b, 0x9b8, 0x9}, 0xfff, 0x6e6bbf, 0x2, 0x0, 0x2}, {{@in6=@mcast1, 0x4d4, 0x93}, 0x2, @in=@multicast2, 0x0, 0x0, 0x2, 0x9, 0xe7c7, 0x3, 0x6}}, 0xe8)
getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000002280)=@assoc_value, &(0x7f00000022c0)=0x8)
close(r10)

171.389121ms ago: executing program 6 (id=6550):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000000)={'pimreg1\x00', 0xb4f1, 0x6d0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x33}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x28, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}}, 0x0)
close(0x3)

170.310195ms ago: executing program 3 (id=6551):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x5c}}, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={<r3=>r1})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async)
ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x15, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'gretap0\x00', <r6=>0x0, 0x7, 0x700, 0xb, 0x1, {{0x7, 0x4, 0x1, 0x32, 0x1c, 0x67, 0x0, 0xfa, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}) (async)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add42764b16a323b472545b4560a117eff0b0082001b59000d00ff005d125aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ce000000000000", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000"], 0x1e8}}, 0x0) (async, rerun: 64)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r6}, 0x14) (async, rerun: 64)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'veth0_virt_wifi\x00', 0x4}, 0x18)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async)
pselect6(0x40, &(0x7f0000000a80)={0x5, 0x5, 0x0, 0x100000000, 0x2, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0xd8, 0xa, 0x100000002ddd, 0x3, 0x1000002000f, 0x7fff, 0x3b, 0x5}, 0x0, 0x0, 0x0)

166.776095ms ago: executing program 6 (id=6552):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x500, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0xc000)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x40400, 0x6c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8010)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r1)
sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x10}}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8014)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x300}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20018011)
r7 = openat$cgroup_ro(r1, &(0x7f00000006c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
write$tun(r7, &(0x7f0000000700)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @dev={0xac, 0x14, 0x14, 0x39}, @multicast, @multicast1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000740)={0x0, 0x4f3}, &(0x7f0000000780)=0x8)
sendmsg$kcm(r7, &(0x7f0000002340)={&(0x7f00000007c0)=@xdp={0x2c, 0x6, 0x0, 0x14}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000840)="fa4f0a28d864581cdc7e048ba8a618cec6615f31adfbd4179207ff41df1b9a6acdb4ada3db5305137301b5c664183bec32b0125a0d0e25f64119350f8835fae62a8cde89c3e6ceafe0db6fbb0059d519a4d2195e9732df8b798e1ea42ba61563114385", 0x63}, {&(0x7f00000008c0)="58c3ab8fc63baad5da359dd9844fc2c1b31a2a372a1df7c6d66e733fbf1eecd6bc7fa21d1432b252b8f1985b7736ed6a268929ae88e33ca63947a21c8a34466d3e9f405dc0108b74593e062f742183a066a8598323cbaf181664cc52e7fb8a5e1989d81bdc50d82099f1b4f22a3215b738fa03a084abbd03b97083d048483d3c0e9748de2659ba", 0x87}, {&(0x7f0000000980)="6015be48a55cfe8cf4af1bc5f29927e7d51a38539006d4dab80d1f9d2e628c33d36b514edc3fe64fba7d213b75b1943dd7649b80f0ec4aa872bfa5d52fbd8346bd91456d50a5c25b98057e607fac07d2160d5feb10e4cf92be9ff92a04e44e818b8e5a5f918215fb84576623e96755f5a99eaa2edf3736c939c180244dfb3ef7ce7d2f9239f087b8ff0557032d1d1b107812b05d25739bbaf1dc6f6e99a8cfcb15d59f25485750409845bcc5993ba99116e275100fc12d1e8266c2a433efd7b29dea73d7eb3dad665b2f68d28f1da01e0546afef6dfb8fc9528a14949fcc62c0798c23307ee497d19f5a7c6819d2603a77073d", 0xf3}, {&(0x7f0000000a80)="579b989d9974ac5cd2a4f0248c8418d5", 0x10}, {&(0x7f0000000ac0)="5ffc483e0dbc0bacf5a7476c232eff32f7da98b4187715867d2d051d156ae30c719708e1ee5a668b2a1b372d3c4ddd98e218f4bcbab08208ed4188c660b1b10549332fb4c1ebc433d75cc91ca6a42293738c7af3352af7b588b9dd9043122f5dad78b0e2574848d195b732c3ea9ef17a88e30fc902351b5708d05729b34fc9d138035f40e8660cab7c210ae53f03fbb9b5cbbb1b680a4ec08a6dbd6b4b6adcd427ecf8a4938ffa58f35e630c1707311b0800bc1f6e544e632f410c43ee4da7ada00bee4b4853e8f52333eb5f430159f5216a13a76a523df789", 0xd9}, {&(0x7f0000000bc0)="2116ba017da70b5b753bd6ff39ab0f063b633aeeb48c2ebbd1c4f996ef3e2b98279980492081d51ae6a474c07a58d3f1567486e1997088bd974bc23a21172be7d2cc878355c389b1cb7c44676d78b764379f42fee9c170297ae00f58b65c30ef6536507d1c8ed6f7752b335350357fc4d4f7f98f2ca2ed3b8eb54cdaf12001261b3398d1ae387f141b1cff12eedc4ae3641dca3c7d4aa6126f8a1bb322e49472aa39586e9cc459c05e3f0d7ff388c04473", 0xb1}, {&(0x7f0000000c80)="760e331dc32f249df0e971b0a89a9b0138164b67233a215b1f767da23bdd287ccd51f0ddf2151a89b253efe521138b89822be9237464feed0d5e20447ab786682dc558ea893f226624b56ddce6fc015f4d249730c37acb50a8e6bbe64ddc079771eb40b42b4150ac9f5ef467577bfc7fab7925696562dadc0cff4dedc5451ce70cc4b4c4f198415f33", 0x89}, {&(0x7f0000000d40)="9fbccfb54a6cffa55db65008ea108526779c1e1297ea6255138cf5d18a9df79cfc083e9c7a51da4389b5571696e45d414600ceee16903b33ca191c58dfd54d540a58d1598b75e0fbf799624182388c24541a6590ac47ed978b30a27c40f3f9604e482a3cd3852b956cd51645cf5a11d0bf87d13b8790801371e147fac17b4e21f525620abca6c2f4088862fbf9ba061855ca2e0f8db20981921bf0a914fd06c1b46a3bd5f47e3447253be6af41e516d983128d146c91f5ec598fbb06bd6587d4934388bf6c8d05415095ea9f872f9bace0e2b6b72b0840003b123b56bd665206502ab02e836990d4432599430a026a0b6f88960580689894beb3c60a1d18433b3b6df2bdf2fa10fd18da8d65921fb18812f9b2f11f5d146af79baeda9e5dc2a63d329d9bb9a345d790ea8b2f7c9aa4320036f7f229a80dac07834b4655c17c84dbc749ef70ebab21d73fda96b1b2c7a3c9903a6ac914327846bad48359ad205ef0dc9dbb5335f8b913d0980ff5f75831ff904614fd43aea6767c2ecda2004976061004eec95e87f53fa5349830403f2319efb58eadaae150aa5562541bfae1224bed9cdc470cc6249d912dde855ee16adf7fa6b8209b90a4d241ef0894d557c113dc8129d8c651532b670fae8f7ea9fb3055ccffcda0aac9717532db89f9df43477be3eecd7770643a5c6d5bcc3b088de379a67e7f744683ea5eaf4b97fae88c1efb1218306a8c0df8bca1d3683d5dbdf3c1d620824be4993c3a40b21afffc98841458ff16b78dd8e4c2ec57c159430f8244ca0f87fa577019e0962b8d7002fcaefdb5a26c4f12720ee25f5846a2ae42c9f8ae55b324b09db9189e0ee9f5c36760994584d7c9b9902e97c2bf94ded498fb0fee35a6b68b0c4509a123aded9454393d2dc165d786385bcd92c4b1ff428f77d5fe1b7f0491510f5bfd146d7d94497cea4841048ea5d9ea0c97e58ca81f363db07e482435a452553f0e6dd27fbf2fb30abb793e4c30fd79e986be62a5a51748e41709b959d9c3347361d029dea09f20926089a58f94b351d4702b969011340e758b70a1d7f8027f2b068258d2fdbdf81f4f9bfcb4bb6cbed00df031aed46c9fab0f7ea92656e59cb4c35f38f011f1007c8142ae888d352f27d9c8e2b6acdc7a3acb830757b7c9ea2019a9bd135f943933734e7817cf9b96b224a12ef87b71844502350a04e3d126d4ed7c7089dee9afbcb5a150c422c878477d312e9b7dd660128a65e1eb33b02cdd71611c568511cb99aaa8d8eb8d1bf7d1381ebd5220948b312f566a72838ebca714e7852e831e57c0c46e062b266890e9f2afc735215ddab65412553706eb93be8ff092ad071012db6cd17e1deeb723ed4f04652bb0bec0f91eb8bdedf2a679a7b629bfab1cac274dd3e167404e1968680b92106902b98ed5210d3387e03f09b4288c2677b25c22aa52d27d67fc9594ad0a8ce13a3ddc3c9ed86f368c588eadaed9a2c6886fe74820d4e744fb79814dac6353dee2eb4246cd7b4fe25951feaa610362c1c1f9f3585d2999fa77bbf225587be5e5c6a1430ddfb1f3c2bf9ab9f945febb9c17849a6c965e33a09611dc8ec7a856bace46d1ab85dd38ed355d5f03b8fa98302a3302eab911a11c6fc31873183432ba5f65085695a832a32f5ca7fc8efcc68fc04ece9241d39ca67de592701bff5b8a33704d1606167893b7c8e0812ff7dba58b9c81f6203a2cdb0ec83583567e23cf6646021f01101287092a33c1c510fdf1fa80eafbedbb849043264d740c6b6828013b9381266852e6f8925d74667d790fa5b37ea3d716259bd860ca4ba099b53446adef0da0f3760821ba51d5a21add0ba069f0e7f81816bb678ad178346d3c476b9fb7cc602a8d411ebfaef4af7d8d317e810cd5a75621de770ca2d21b8d99f3d2f60869e3ceca70f37a3b1d2cdad4b8e28399635c7aada77e2c598907362f69718323457c150859f67cae905226e046ccbf474d2cc88bc07a6a8c86dd80dc4edd06ae3db63c19f9d338ae388dc2f1461af39e3bc9e3214972cbf359212f2bbe0b32d3149477dea0894e0b675d9870e4681d1f0acba7663cb6804028ff6025762361fc9381851b170ebff412f4b79a7a5477119bcaaae8fe15252104f9e4ce4f118e0b1b2b4425f714d1e2f489f4f196ac1f925445946f7e0c612347671544ae31038d34f8e96b5da2c4f389db902b623c56c0ca79727194f6d8de3f25a68008bb5e2aea05b1d503ad0e04792f5e2ce86318c605a04291ce8f38271700418ef633370fe2f6b589a9bfb61656faa7b410a52e19b3bbb64b326d880ee828b8bc0ef5bfc0383bcbb03aff0dda0763a9fcb8d959cc441a645a04d377c95bf3a504c3320e0614c97baae4117814ee8a40429e48d15f0c664f3791b4c55e06b472a7b8e75e017eecbca5e0e42bc43958ddcc4243a59e6a72c81774b266ddd30fb4523e2b3ac8a5e703949b991584f922979150aa254cb5a523a18bdb26330d462772fadf5ccda643fc4d185bbc21af01bf738e9ee0214ceec7eaa3dca742fdf4e47e2506fa36986abe282646ece2523e42bbcf4bb2f9ad6e24c47a25d7474a07fe5f91a83e76c2da8bfa7bbe299aa35022987a88a65a17a68942192afb8210e597862e23f799ed6df3288a61edad8e947a5133a9b1dae7f91c5061098a02b6efafdcfabe943cb9a632be6decbf5db00205c35c78e6a6b951518718c4d1850f749ff0685891262c6ea8a579c3816c79d880d682443fe3ad6beb5a22f1b34b2f7b23331495503a42da30c02a0bf0e38ae1882a8a3c81c15df89963240d3db5cb6f88473dc667eb1b807a220df161f62ffaf0fa1efe7387f56d72c30f06269b617affe66e56586202f2be1c75c3895fc0cf386d8cee7e97968a6445bfe34e1643df2d7e7ec071f4b6c3cd6874f2e80ea09664c9e74226040140d1fadea68714e1b264b9de3048467b328a3cd33919ea3c01a278b409bada406cc38a0fa0df2e93871e72a90994c1865ccc8056eb0cef0c05d72d334eb64bdf82dc7134eb843514a4d829823637e6d3d06579f325fd13dd471b1218507e5fb52c18c6b446cbfe8257830d7fbba2d1ab6a26553426c94bb46da18754801f96c66e007735b2ea996cba66770aba5421da62f4941ad9070a46d73034d943ae03f6f826622db319d80b429d972049fcbafc29a9d46331e74518746c40209792ac057fdb7ef685bbbcead4feb32d2c048851711857d4871b1525a2bc9e2f3fb664c9512a4fd13a2290133277f055ebf0fc845330452aeba8876f20ac70c2245fdb667edb421bdacfbb1d54e8a3f5210accec05d46d94f32a80377943b463037dfeeb9ed41617fa6c263063749d5810d6611d3cb9dbe5ccc28f2f53fbad108a2ae1b04e476f5dfe2d0ae4f184fc342d844eb69daa03b721ced673565fa8743530e455f795df9fca6d471bdca7acbb57c6413a41269384dee06e4ea5effd962516ba7735ac3f7f2fa9d9304bf4cfab4c1a0c03b9978ad8225f782de70b9a21bc953b1af6b3569ea4dbbdf9f5b42af36d7f68aa28b7934fec11cadb1006fa1006efb50b4eb0c19834b6f6bab865d599b1bdbe1bae24544177f134946bab81f76c10b1f33ccb3a4888d34a9049d5d0337f7af83ff911555ac11dac719c5d012dd7ad4df51db7545268a173f7f768e936290f7a5ce1a1e8337cd1feb50e4f07a169a900395ec9e373ba8f8cfb365fb20bbb667ff1aaba49d9a1592df669d1018cd6a86deb828279bf33e2056f5dd2796d827ee0a47db6bb61450ccda048bb6b3e5b32868e879789a93f35af88d80f3dd9bc7cab17e0336818b8b4a949be545bb5753106adfdcb3534640c74f66d1799072be79c1743b5032a8c1fb5df0879271d6197fa8ee02acb765c58731c06108ed058a2680c7f70a67c9bb8b8051408cd7a71cd3594c3ee6cda1beb94225e1e85b5b3d79b2031a4e4e8627f6a635b40ba55b848832d1b2559072c115eeefbe2b53c4c8dea14e7d1e6134f921922c07dae14e18370f1655c3f09749929ef0e347d4b2991aa769ef21a853aadb9e864388980c8d615f9375f976dee39bbd3b4c17c33a5f1fb7152b69e6b8ecfb52eb7d48ef2c1202fd11bf98b84fc316d606d5926ec7cd22cc01bc8ac6567bb51261bcd949ecd5ee55f80bfd19630002a2289ecb08d49271e8b63f52c7dd4bf6c29cc8d734156bb674aebf64b6385dfe50dbd5cad6c8cd64f4367d9b102f6f33cc7f11a2723310c97ea5eb21201589703a66304ad55a1b04e9738e3e2ec4432ccc97cae84c3013cf75fa15e1071e9e3d394acc1c32441b30777ba57734aba893939115cb5abcb6e4fd0cc712414913bb0b6572aeb0770c44b3cc5a6fd7c66a53e45fa950371d187a8e1c73d6f8aef0d8c0fd6eb701c93492d99a8f9ac2b1a3f7439f50845833adf9cf827608b4e3c3067724e39d13b3e87f1c31e8ca00f5f23ce267f36b9e84457e5383d8cfe263fd960fe0488070e6cba5f29e271544ca2a9a20abd6f86fd99cac74a786f1b1406dbb3498f0503bead48bac60068f34e672fb63871908d1a3749617d554769e60c61baa3887e992ea7d5ac120535d0ecbcb3d64edebee88314fac2d1c5e199e5e5fc629a996b88a9a212b014a11913580e26374c61cf430987273fd52fc28d2122f4bba4d9b987413fad53d7930a77c926932c92e90877395548600543f08bd7572e80a750ab63e09268859286d09cb033471bb82f7e474d9f6a522c67901c5ad4d9c2455688665c13399327526db90b42a713a118a366e2eac9ddf18815d3c716ae61d3587bbef85bd600ce9c0b48edcea694c2b2098f8983c1b50ce87893cd20be12c909347305762e6bcc0923a04eb959fc217cb39ce991ddacc485217ac9e6cb98b13f3abab08f4440663c92f555c2c0c417811886cc94c341f12597d6e28722036bfaeec4320b33bab333f3b3f8b6c28f727717705a4fd7a6c80c90b9cc1d2a1343a805ab655640badd99724601a036227d672e095508877131d473af44593848c038125d8c30a5b3a3cb5b3f62e18e1d87324cfbdefca7f73fcdde6dfda80ba0eaee96740310a48bc8dff4f281cb94f571c178cf94ec2a52e34599d1f54737ee7ebdddd4e9feed028b0f4a7d618ca0a33ef3db4b67980b99358662dea3ee163bbf62dbc8a795f2419848fb5f8d5150e7732f0d278a67aaa7cd40c11fda297f5debed9e10ff4dcefe7ab2e6f4f9725e040c5f0da6448c1f10320a79ad8f5c4568d30cedd03033bf7655be324d94085b058eb984bef5902b3c67c7c7e131862a3213505353c4538586607ec6a73605554982a1b3d70889f06bf840311af2d117c094fa7f26dd15ae00893961dd5c75c035d0b32f03452f1e8a324db4874ddd5480b1836becb79dc24e7299c7c117740f71ba51c52c95d6922208ea34424cc39c31a606cb7ba2b3a8b9fc759dca2ab07f5a7fa8d71a88fed27651a979d9d77e2e2e8fdd492271a79d3ff3fd59f1df1b7f84504d00e65b113dc3324e9d6ca05548457df77b1c8b15ece32c3ffe2b05361ba925c8da151df0f6f78488d3d3b7bbd1f7381e93eebaf2ec3d2d9ddc71532144388d6a35ecaf6aa0fb650bcf40c9d334a35a94c569ba7e2046629fc484f0376fe7807773d0baf910b0fe6a91fa6443692e5d09787d1acb91f9d97310b4afd81aede51ddfdcd68509916fd81194c7f4171f53b714b94d37f4bd741be07fd34bce383d479668b8bac17386abb42ac4270e71750b6de092897084c6c5420a4a0da26b01c90937807adfb4", 0x1000}], 0x8, &(0x7f0000001dc0)=[{0xc0, 0x8c, 0x140000, "be7626ca7a5a71c68d2f6ae854c4c20384543c71c9b9af10c4f07a7a0ea0ac96bee69f2af919ce1366ad9d4b186440bd62ab8c1700c4e18e8d8dff4d2e73d077caf25919320c2cb00aacfcd410d60597bc3dde25c27cbed7797b559e4bb143b9b1ed28dbe445d082c76ed2b98b0fc2f56b3e1eea9c6c2b0aaf8930cd6a76729735e02d02c51755cdc57e687307722f495c3f1a65ac3aa9f9fac91f4bb42adc5e6b3102e5c4735e399a"}, {0xf0, 0x116, 0x9, "2aa583834455cd0b0626f9237e605d59466c4826c8eec970db19b4a1452a17c69b78311631b8f848321f2c9c2bfac96271bdc5d84c8ea673907440b5bc541dcd8b06013f323ab1a6af9e83fa1c207f1d8229338985871690fe10d0e60928e4533b797ae4aa276b8bdfa88a94763287996b8f54ecfdc44c3d57ce8e522f01ab9e3ced488b68db28c4115a8a1f91838f4063aa23cdccc2d0dac2ea601ad64245950dc2ec09a14ed5d6ad536b56ae6fd6c6dcf738cd68505352d3cd7a412003d35fcf782339cddbb94eed39105f10f5519a2f28609e79a71b298615aff36a1352"}, {0xb0, 0x10c, 0x2, "8fb198f724715d0a5ca4bf31cccd80db1dac63fbf15aebf4d102a0fb160ce70c2167c3710f6fdd49caa0e98f149596de3bca54b844ca18d766b3aac68d73baa74a003518b8fad1c0ac292f80c3b35c8c9c4e8aa6a377e42e02b79f4b5c42564cab6125d39c31f3529498701844cf789bc7bed7b131d9cd5576e7a8a46606e9dccc490d2e9f919d0efdec008f5e512fb3ee1a009fe3121a22db141ab13fcf"}, {0xb8, 0x114, 0x200, "bc95d88571fe89d5f7c7a77bc708f4ef78c96aefc9ea15f90ad84d68100f6733b297d1b8be2b71166eda02ab488f95a7489259cbcd617479100007a2fe59e84737a07a7904675279cdc2bb82699af409ee2c07a76958fae627bd5d6d6c9e4f1c5a4e40c8c595759549543402961f861b7c38ad226ccc8d606614e91a35cf3aa284686ae8c6731be45c2eb02d5a7ab6f6aa981845620154ae618a9872cddeeebc81"}, {0x90, 0x10e, 0xb4a, "fb5622294ae2fe11b679acf5d7a65da9a260f13adf46208581b13ba9017b5b98d618ddc5e64fd59e95eb3c380f8b1f3a9d9db0966dd6e203906e8f3845662d153f131db988a7844fdf8a46fa694684d7e8b360a957b35f0a8baff7e53905c5321a5bd3f7467f34108283f21747c4fef13b7d75ffdffbedd9bafc0233bda1"}, {0x18, 0x103, 0xffffffff, "8ca1629c16d7"}, {0xb8, 0x109, 0xf032, "deeba174af12c83f8a5ff2710b5051fce513bec1d5b1fce26954b914bc6903f37a2f8b59bea82416751800cb43b82bfade8e585484cc8b00f53947cf8169e849e9adf2736f5f21b9d600837bf551804a5d82da547052b442cc78b0481875dc04b4bd8732504d60c9947572b2716e03b5debd22ba88eef7cbbd1cbe1a749e50c39a2eab435b0847c75342ec45224b19dec52638bfa8f15b7d2d1168e9a38102286286ee4864"}, {0x48, 0x108, 0x5, "1627da3e6f94e06ce533219d6a31e9724d75868f88ffbcecaeff0b6cb08293162c585aca8b7417c6bf1bfbce593524f1151a74"}, {0xb8, 0x84, 0xd, "c45aafa1758bdb3c2b330f8681b5a670b47cbef2ebfe32e4dd74e11cd780e2e04bd7bffa8d5e0988973a3d1435e939b2cc1904d903368a40a0c6cc7f4dc3ed0ad21402e2623df18f61e242e72f6ea64663738a7435a1e7dd97596169b257cf880ce7a2d2f42914ead82520297a503eb0d4e9e5518cc98077fa1e9ac65ed70676e249a204d9e1819116255e0a0bbb07a6709ad565d89ef3351063984a7c252f5db885"}], 0x578}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x68, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x4000800)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x28, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x1b}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002640)={'ip6gre0\x00', &(0x7f00000025c0)={'ip6tnl0\x00', <r9=>0x0, 0x52, 0x29, 0x0, 0x100, 0x0, @loopback, @remote, 0x700, 0x700, 0xc56, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002700)={'syztnl2\x00', &(0x7f0000002680)={'syztnl2\x00', r9, 0x4, 0x8, 0xfe, 0x5, 0x54, @remote, @empty, 0x7800, 0x8, 0x6a9c47ed, 0x7fffffff}})
ioctl$sock_netdev_private(r8, 0x89f4, &(0x7f0000002740)="b9fcd3386eaab19300da9ea21b4327e3bf18c825141e6c3fdb6b4f27eb89ea736dce7c95d7a62ac35ed0a13903d9966f4f36e9869bfe497527af5d2b68f2a0f0880e28cc6fdd022882fd5104302b9ec99407d14e219ae2ad676f0624d43fd2d2711751bf2df56a5f2956d1ed60f443cb04da336da1355e00")
r10 = socket(0x2f, 0x6, 0x0)
ioctl$IMSETDEVNAME(r10, 0x80184947, &(0x7f00000027c0)={0x3, 'syz1\x00'})
sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x1c, 0xe, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44)
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000002900)={r1}, 0x8)
sendmsg$802154_dgram(r11, &(0x7f0000002a80)={&(0x7f0000002940)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000002a40)={&(0x7f0000002980)="5e0f0e72d18abcf96d1b834413e5d3e26129de847951f198b9388067adbecfe89faaa164b486d18ebbcbeb3a54cc77b38b0dafb87928daa63ce577cf5f949df2a4af48dbb77e120f0bfff9adcd607d31a8c08b84607d1e991986c25023669122e502694b144468e4490f61d28841269daf91042dd042ddf021411853dfd2a084e245d15e0629f302e86d6cd294c3dafd12d9dbe1250f18d330b55e88d4b7a4f5067b526a186ceff69ee7edfb2b61", 0xae}, 0x1, 0x0, 0x0, 0x800}, 0x24000004)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003d00)={{}, 0x0, 0x10, @inherit={0x80, &(0x7f0000002c80)={0x1, 0x7, 0x940, 0x1, {0x6, 0x81, 0x8000000000000001, 0x4, 0x2}, [0x0, 0x1, 0x4, 0xbb, 0x0, 0xa, 0x8000000000000000]}}, @devid})

121.484902ms ago: executing program 3 (id=6553):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{0xf, 0x800}, {0xfffffffffffff005, 0x9}, 0x5, 0x3})
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c, 0x40800)
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000140)=0x28)

121.142917ms ago: executing program 3 (id=6554):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x1000}], 0x2c)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000140)={0x7, 'ip_vti0\x00', {0x8001}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000070000700000010000070000000c0a18400bac0f0006ac0200"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002a00)=ANY=[], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r7}, &(0x7f0000000940), &(0x7f0000000980)=r5}, 0x20)
r8 = socket(0x10, 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x6, 0x9, 0x4}, 0x10)
write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a60000000000000008001d001d000000", 0x24)

51.270627ms ago: executing program 6 (id=6555):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x14000000}, 0x94)

49.606515ms ago: executing program 3 (id=6556):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x19, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_netfilter(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x100, 0x12, 0x7, 0x101, 0x70bd2a, 0x25dfdbfd, {0x5, 0x0, 0x5}, [@nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @uid=r3}]}, @typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@remote}, @generic="1096eef0dbbbfa7fa0bde7b28b1b2da9798784aa0c80026a668b27f1e4df588347a6b640754e2e72020abedf7843c00e294c074bbc9923e1a436f541939861eb7984a54d372462139c813bf389864bb332294433d1e22d98150f8680e42783fd76c26dfe7cd505b634fc28f0235950d93d666ef05f04e68466d7ecef139525683826126b9d6ec120d3ab72bc2347ef76648e40f6666a7ad4c4d96624e113786a1ca445bfcb040d13c373b817b1b4bc6505ad94e26f41957af215ab5fd6291a17b5e51f6dbbdf1ba84e3653"]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x4040)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$ptp(r4, &(0x7f0000000000)=""/43, 0x2b) (async)
read$ptp(r4, &(0x7f0000000000)=""/43, 0x2b)

49.088932ms ago: executing program 6 (id=6557):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r0=>0x0}) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r1=>0x0, @multicast1, @private}, &(0x7f00000000c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'erspan0\x00', <r3=>0x0, 0x7, 0x40, 0x3, 0x800, {{0x12, 0x4, 0x2, 0x9, 0x48, 0x65, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @multicast1, {[@timestamp_addr={0x44, 0x34, 0x69, 0x1, 0x6, [{@multicast1, 0x1}, {@local, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote}, {@private=0xa010101, 0x2}, {@private=0xa010100, 0x2}]}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', <r5=>0x0, 0x40, 0x7, 0xfff, 0x80000000, {{0x10, 0x4, 0x1, 0x4, 0x40, 0x68, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x24, 0x11, 0x3, 0x2, [{@empty}, {@loopback, 0x4}, {@remote, 0x3}, {@multicast1, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x170, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x98, r8, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8645}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r0}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=@newtclass={0x1bc, 0x28, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0x8}, {0xd, 0xfff2}, {0xfff1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xc}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x0, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0xbacd, 0xffffffff, 0x63}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1000, 0x5, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xffffebf5, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0xb, 0x4, 0x60c}}, @TCA_HFSC_USC={0x10, 0x3, {0xd, 0x9, 0x6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x55, 0x5, 0x7}}]}}, @TCA_RATE={0x6, 0x5, {0xc5, 0x56}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x6, 0x2}}, @TCA_HFSC_USC={0x10, 0x3, {0xf9, 0x4, 0x1}}, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x40, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x1, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0xffff8001, 0x1, 0x2}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x6, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x80000000, 0x3}}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x1, 0x1452, 0xaf6, 0x5, 0x864}, {0x0, 0x0, 0x8, 0x401, 0x6, 0xffffffff}, 0x6, 0x2, 0xf3, 0x1, 0x8}}, @TCA_HTB_PARMS={0x30, 0x1, {{0xfc, 0x1, 0x8000, 0x2, 0x9d5d, 0x6}, {0xfe, 0x1, 0x2, 0x29, 0xfff, 0xb}, 0x9, 0x3, 0x3, 0x1, 0x7}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x891)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r7)
sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0xb8f6f44fc9c63836}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe8, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x25c}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x9e901fda4af1a3e4}, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000c00)={'vlan0\x00', {0x2, 0x4e20, @local}}) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r11, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x130, 0xb, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x435e13d0}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xffffffffffffff00}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, 'caif0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffff801}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r7)
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xc4, r12, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x83a9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfc4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040810}, 0x4040044) (async)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r13)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r14, 0x890b, &(0x7f0000001080)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, @llc={0x1a, 0x306, 0x80, 0x4, 0x81, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @ethernet={0x307, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0xd94, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001040)='veth0_to_hsr\x00', 0x5c4b, 0x4, 0x2343})
r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', r5, r11, 0x2, 0x4, 0x5}, 0x50) (async)
r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280), 0x4)
r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001380)=@o_path={&(0x7f0000001340)='./file0\x00', 0x0, 0x8, r11}, 0x18)
r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001400)=@o_path={&(0x7f00000013c0)='./file0\x00', 0x0, 0x8, r14}, 0x18) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{0x1, <r19=>0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)='%pI4   \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x8, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x94}, @map_val={0x18, 0x5, 0x2, 0x0, r15, 0x0, 0x0, 0x0, 0x81}, @ldst={0x0, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc}]}, &(0x7f00000011c0)='GPL\x00', 0x1, 0x7c, &(0x7f0000001200)=""/124, 0x41000, 0x1, '\x00', r3, 0x0, r16, 0x8, &(0x7f00000012c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001300)={0x3, 0xc, 0x81}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[r17, r18, r7, r19, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001600)=[{0x3, 0x1, 0x6, 0x9}], 0x10, 0x1}, 0x94)

826.229µs ago: executing program 3 (id=6558):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca61c15}, 0x4000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
socket(0x80000000000000a, 0x2, 0x0) (async)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f0000000000), 0x12)
bind$x25(r3, &(0x7f0000000040), 0x12)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045)
shutdown(r4, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5ffff232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eeff8619d73415cda2130f50714600fb6241c6e955031795b282f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000041dcc4cabfc4a21604f0b80da4ec5500000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae6e5c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace201020875c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2f95b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b56b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f475ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f65918192fb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435477faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b8085b0de08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e07f9581b40470a7c2fa89cc3ef72a19760b89ded2e546f4966b51c2985101f2248f60ad8119e4db4ade09ebd23fdb750ffccba20bc0e0f52c3316767bb9f67f7e714df5e462bcfc35f3a79147f62f9227441cb3ffb35f4e4c69b04b1399efbeb4b682d6facea9fe1c456a1fb9173833107a38991abac8b0e616f11a2c3e265c484fbc6522e9894dc3b5989b7d585c56778c77c6595b7482dfa90bb818ebd3b0b352d3f48ab947a1240842d592fd9c2f13df205e8974919162421548357a8823bd322e6562fa3e7fb7c56ee00e246a98710b9a710103b3df69655b38dcc196156a16fcc14d8ddb4acf3506adc95c742919b83fd57c8b52956e93104cdcd1226ca85a29542b9ea606c72d5339a7d30f23ffcd665b85e4c90d526b33ed854543c2a1d189cd6f319644146c5fe91639d50f2083d46fd82e41bc7d528f18be618904d683726e3eee93388cc78d0df624361bb80afc96b823971fcbbb859d4c2de31f03f884ea774e4abe011389557b2429c85cf795e0a82c94ffc11616d7c8b6939eed3f0e8df5dcc75984430b2a497d78824e539e8f7944b459ae45e7ce803495686984aa91745b8cfb1f80c07c194c4a4327e02cea5fd2ef6041cf053ee5f9829410d150"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f086dd4c", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r5)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001400)={&(0x7f0000000300), 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x84) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001400)={&(0x7f0000000300), 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x84)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000140), 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5c0000001800030727bd142004fd433a000000000000004e67419cf6fd7ab63b0f8f5990f6216a97791e289379fe25aeca614a22e93b8ceb1c9330c42cedcb8d23d187b0d773057e88afae998c95123eb7777fedaa349635ad47b2828852850d2f961f5032c324ab8ebb0e2e5a30531971baaeb996dc", @ANYRESDEC=0x0, @ANYRESHEX=r6, @ANYRESHEX=r9, @ANYRES8=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5c0000001800030727bd142004fd433a000000000000004e67419cf6fd7ab63b0f8f5990f6216a97791e289379fe25aeca614a22e93b8ceb1c9330c42cedcb8d23d187b0d773057e88afae998c95123eb7777fedaa349635ad47b2828852850d2f961f5032c324ab8ebb0e2e5a30531971baaeb996dc", @ANYRESDEC=0x0, @ANYRESHEX=r6, @ANYRESHEX=r9, @ANYRES8=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000001240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000001240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r2, 0x1}, 0x20)

0s ago: executing program 6 (id=6559):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x7, 0x201, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd}, 0x94)

kernel console output (not intermixed with test programs):

 8 127.0.0.1:20002
[  283.399358][T17626] __nla_validate_parse: 12 callbacks suppressed
[  283.399367][T17626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3629'.
[  283.502735][T17638] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  283.588035][T17648] netlink: 'syz.0.3636': attribute type 1 has an invalid length.
[  283.754722][T17663] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3642'.
[  283.757767][T17663] netlink: 'syz.0.3642': attribute type 9 has an invalid length.
[  283.799735][T17670] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  283.932580][T17678] netlink: 'syz.2.3648': attribute type 1 has an invalid length.
[  283.936529][T17678] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3648'.
[  284.781898][T17672] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3646'.
[  284.784822][T17672] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3646'.
[  284.836033][T17682] syzkaller0: entered promiscuous mode
[  284.843723][T17682] syzkaller0: entered allmulticast mode
[  284.955044][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3655'.
[  284.971171][T17699] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  285.079031][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3661'.
[  285.410784][T17747] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3673'.
[  285.531931][T17756] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3676'.
[  285.537545][T17756] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3676'.
[  286.206329][T17787] netlink: 'syz.1.3687': attribute type 11 has an invalid length.
[  286.371836][T17804] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  286.659591][T17825] netlink: 'syz.1.3700': attribute type 7 has an invalid length.
[  286.662520][T17825] netlink: 'syz.1.3700': attribute type 8 has an invalid length.
[  286.862076][T17852] openvswitch: netlink: Multiple metadata blocks provided
[  286.985505][T17862] syzkaller0: entered promiscuous mode
[  286.990126][T17862] syzkaller0: entered allmulticast mode
[  287.348436][T17888] netlink: 'syz.2.3723': attribute type 12 has an invalid length.
[  287.533525][T17902] netlink: 'syz.2.3726': attribute type 83 has an invalid length.
[  287.889997][T17939] syzkaller0: entered promiscuous mode
[  287.891807][T17939] syzkaller0: entered allmulticast mode
[  288.457541][T17972] syzkaller0: entered promiscuous mode
[  288.459342][T17972] syzkaller0: entered allmulticast mode
[  288.471762][T17972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.478021][T17971] tipc: Resetting bearer <eth:syzkaller0>
[  288.490049][T17971] tipc: Disabling bearer <eth:syzkaller0>
[  288.687370][T17982] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  289.237199][T18006] __nla_validate_parse: 12 callbacks suppressed
[  289.237216][T18006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3763'.
[  289.595066][T18020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3768'.
[  289.687138][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3771'.
[  289.689942][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3771'.
[  289.692644][T18030] netlink: 'syz.0.3771': attribute type 19 has an invalid length.
[  289.696199][T18030] netlink: 'syz.0.3771': attribute type 20 has an invalid length.
[  289.753896][T18032] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  290.688755][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3779'.
[  290.743498][T18065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3781'.
[  290.847688][T18082] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  290.857422][T18082] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  290.928836][T18095] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  290.929526][T18096] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  290.945264][T12399] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  290.989009][T18101] netlink: 'syz.2.3792': attribute type 1 has an invalid length.
[  290.991331][T18101] netlink: 'syz.2.3792': attribute type 11 has an invalid length.
[  290.994958][T18101] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3792'.
[  291.026948][T18105] openvswitch: netlink: IP tunnel TTL not specified.
[  291.069587][T18103] netlink: 206296 bytes leftover after parsing attributes in process `syz.1.3793'.
[  291.907885][T18128] netlink: 'syz.2.3801': attribute type 1 has an invalid length.
[  291.922694][T18128] bond6: entered promiscuous mode
[  291.924889][T18128] 8021q: adding VLAN 0 to HW filter on device bond6
[  291.933427][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3801'.
[  291.976790][T18135] x_tables: duplicate underflow at hook 2
[  292.044058][T18143] syzkaller0: entered promiscuous mode
[  292.046029][T18143] syzkaller0: entered allmulticast mode
[  292.074074][T18150] xt_ipcomp: unknown flags 1D
[  292.155730][T18155] syzkaller0: entered promiscuous mode
[  292.157576][T18155] syzkaller0: entered allmulticast mode
[  292.240875][T18169] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  292.253962][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3817'.
[  293.068598][T18172] netlink: 'syz.1.3816': attribute type 4 has an invalid length.
[  293.175708][T18192] netlink: 'syz.1.3823': attribute type 1 has an invalid length.
[  293.198867][T18192] : entered promiscuous mode
[  293.222622][T18194] netlink: 'syz.2.3824': attribute type 21 has an invalid length.
[  293.231390][T18198] batadv_slave_0: entered promiscuous mode
[  293.254561][T18206] netlink: 'syz.1.3826': attribute type 1 has an invalid length.
[  293.279124][T18206] 8021q: adding VLAN 0 to HW filter on device bond10
[  293.287098][T18204] bond10: (slave geneve5): making interface the new active one
[  293.290244][T18204] bond10: (slave geneve5): Enslaving as an active interface with an up link
[  293.299850][T12399] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  293.302619][T12399] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  293.306457][T12399] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  293.309575][T12399] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  293.408008][T18216] netlink: 'syz.1.3831': attribute type 1 has an invalid length.
[  293.415878][T18225] sctp: [Deprecated]: syz.2.3833 (pid 18225) Use of int in maxseg socket option.
[  293.415878][T18225] Use struct sctp_assoc_value instead
[  294.061332][T18198] batadv_slave_0: left promiscuous mode
[  294.098438][T18229] bond0: (slave rose0): Releasing backup interface
[  294.641641][T18283] __nla_validate_parse: 9 callbacks suppressed
[  294.641656][T18283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3855'.
[  294.795912][T18298] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3860'.
[  294.811446][T18302] sctp_getsockopt_maxburst: 56 callbacks suppressed
[  294.811456][T18302] sctp: [Deprecated]: syz.1.3859 (pid 18302) Use of int in max_burst socket option.
[  294.811456][T18302] Use struct sctp_assoc_value instead
[  294.848767][T18304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.851396][T18304] syzkaller0: entered promiscuous mode
[  294.858939][T18304] syzkaller0: entered allmulticast mode
[  294.871563][T18304] tipc: Resetting bearer <eth:syzkaller0>
[  294.902006][T18303] tipc: Resetting bearer <eth:syzkaller0>
[  294.912500][T18303] tipc: Disabling bearer <eth:syzkaller0>
[  295.203946][T18316] validate_nla: 6 callbacks suppressed
[  295.203957][T18316] netlink: 'syz.0.3865': attribute type 11 has an invalid length.
[  295.209055][T18316] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3865'.
[  295.264645][T18321] sctp: [Deprecated]: syz.0.3868 (pid 18321) Use of int in max_burst socket option.
[  295.264645][T18321] Use struct sctp_assoc_value instead
[  295.269217][T18322] sctp: [Deprecated]: syz.0.3868 (pid 18322) Use of int in max_burst socket option.
[  295.269217][T18322] Use struct sctp_assoc_value instead
[  295.338947][T18328] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3869'.
[  295.551452][T18349] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  295.554909][T18349] netlink: 'syz.0.3872': attribute type 11 has an invalid length.
[  295.557440][T18349] netlink: 'syz.0.3872': attribute type 11 has an invalid length.
[  295.559948][T18349] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3872'.
[  296.269217][T18391] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3889'.
[  296.278972][T18339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.289106][T18391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.292434][T18391] syzkaller0: entered promiscuous mode
[  296.294816][T18391] syzkaller0: entered allmulticast mode
[  296.300907][T18391] tipc: Resetting bearer <eth:syzkaller0>
[  296.322371][T18391] tipc: Disabling bearer <eth:syzkaller0>
[  296.390718][T18396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.395008][T18396] syzkaller0: entered promiscuous mode
[  296.396813][T18396] syzkaller0: entered allmulticast mode
[  296.405448][T18396] tipc: Resetting bearer <eth:syzkaller0>
[  296.446603][T18395] tipc: Resetting bearer <eth:syzkaller0>
[  296.457635][T18395] tipc: Disabling bearer <eth:syzkaller0>
[  296.654545][T18408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3895'.
[  297.355741][T18426] xt_CT: No such helper "snmp_trap"
[  297.370928][T18426] xt_CT: No such helper "snmp_trap"
[  297.454927][T18438] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  297.668281][T18450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3908'.
[  297.718266][T18455] netlink: 'syz.1.3909': attribute type 10 has an invalid length.
[  297.721445][T18455] dummy0: left promiscuous mode
[  297.728409][T18455] team0: Port device dummy0 added
[  297.920907][T18469] netlink: 'syz.2.3915': attribute type 1 has an invalid length.
[  297.924553][T18469] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3915'.
[  298.053958][T18486] openvswitch: netlink: nsh attr 60 is out of range max 3
[  298.056633][T18486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.191405][T18510] netlink: 'syz.0.3928': attribute type 12 has an invalid length.
[  298.250032][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3929'.
[  298.297889][T18522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.300927][T18520] syzkaller0: entered promiscuous mode
[  298.302880][T18520] syzkaller0: entered allmulticast mode
[  298.327772][T18520] tipc: Resetting bearer <eth:syzkaller0>
[  298.927661][T18539] ip6gretap2: entered allmulticast mode
[  299.056951][T18554] bond7: option mode: unable to set because the bond device is up
[  299.135178][T18518] tipc: Resetting bearer <eth:syzkaller0>
[  299.152003][T18518] tipc: Disabling bearer <eth:syzkaller0>
[  299.303386][   T26] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  299.560094][T18606] x_tables: duplicate underflow at hook 1
[  299.580542][T18602] delete_channel: no stack
[  299.616199][T18613] netlink: 'syz.2.3959': attribute type 4 has an invalid length.
[  299.891808][T18630] SET target dimension over the limit!
[  299.999616][T18645] __nla_validate_parse: 2 callbacks suppressed
[  299.999627][T18645] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3970'.
[  300.087476][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3974'.
[  300.093453][T18655] ip6gretap3: entered promiscuous mode
[  300.095221][T18655] ip6gretap3: entered allmulticast mode
[  300.215372][T18669] bond0: (slave 32): Releasing backup interface
[  300.222729][T18669] : left promiscuous mode
[  300.233127][T18669] bond0: (slave bond_slave_1): Releasing backup interface
[  300.240910][T18669] bond_slave_1: left promiscuous mode
[  300.245487][T18669] team0: Port device team_slave_1 removed
[  300.247931][T18669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.252387][T18669] bond0: (slave wlan1): Releasing backup interface
[  300.255705][T18669] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  300.260607][T18673] netlink: 'syz.0.3979': attribute type 10 has an invalid length.
[  300.266256][T18673] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  300.269272][T18673] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  300.406745][T18693] pimreg: entered allmulticast mode
[  300.410268][T18693] pimreg: left allmulticast mode
[  300.412795][T18695] netlink: 'syz.1.3988': attribute type 15 has an invalid length.
[  300.522972][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3987'.
[  300.736310][T18715] IPVS: length: 132 != 8
[  301.487730][T18726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3997'.
[  301.626040][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'.
[  302.185375][T18764] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4008'.
[  302.188592][T18764] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4008'.
[  302.935573][T18787] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.937987][T18787] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  303.190939][T18791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4017'.
[  303.316891][T18795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.320498][T18795] syzkaller0: entered promiscuous mode
[  303.322857][T18795] syzkaller0: entered allmulticast mode
[  303.350866][T18795] tipc: Resetting bearer <eth:syzkaller0>
[  303.359938][T18794] tipc: Resetting bearer <eth:syzkaller0>
[  303.385697][T18794] tipc: Disabling bearer <eth:syzkaller0>
[  303.655003][T18787] syz.0.4015 (18787) used greatest stack depth: 19360 bytes left
[  304.106165][T18881] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  304.166361][T18886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4047'.
[  304.843599][T18912] netlink: 'syz.0.4056': attribute type 2 has an invalid length.
[  304.846382][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4056'.
[  305.532033][T18962] __nla_validate_parse: 2 callbacks suppressed
[  305.532044][T18962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4070'.
[  305.623941][T18973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4073'.
[  306.064681][T19021] netlink: 'syz.0.4090': attribute type 1 has an invalid length.
[  306.085190][T19021] 8021q: adding VLAN 0 to HW filter on device bond6
[  306.091947][T19024] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4091'.
[  306.096649][T19024] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4091'.
[  306.104042][T19024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4091'.
[  306.268279][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4095'.
[  306.277601][T19044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4095'.
[  306.298979][T19044] netlink: 'syz.1.4095': attribute type 22 has an invalid length.
[  306.762749][T19109] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4113'.
[  306.766433][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'.
[  306.839518][T19115] xt_connbytes: Forcing CT accounting to be enabled
[  306.870942][T19121] sock: sock_timestamping_bind_phc: sock not bind to device
[  306.979695][T19128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4121'.
[  307.611879][T19150] 8021q: adding VLAN 0 to HW filter on device team0
[  307.617496][T19150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  307.959262][T19165] netlink: 'syz.1.4132': attribute type 6 has an invalid length.
[  307.962710][T19165] netlink: 'syz.1.4132': attribute type 4 has an invalid length.
[  310.311694][T19308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.317809][T19308] syzkaller0: entered promiscuous mode
[  310.319863][T19308] syzkaller0: entered allmulticast mode
[  310.331886][T19313] tipc: Resetting bearer <eth:syzkaller0>
[  310.342722][T19313] tipc: Resetting bearer <eth:syzkaller0>
[  310.363669][T19313] tipc: Disabling bearer <eth:syzkaller0>
[  310.445160][T19322] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  310.828202][T19360] __nla_validate_parse: 80 callbacks suppressed
[  310.828212][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4192'.
[  311.040548][T19372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4197'.
[  311.043590][T19372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4197'.
[  311.778707][T19399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4207'.
[  311.826864][T19402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.848765][T19406] IPVS: Error connecting to the multicast addr
[  311.971320][T19427] netlink: 'syz.1.4218': attribute type 2 has an invalid length.
[  311.975174][T19427] netlink: 'syz.1.4218': attribute type 1 has an invalid length.
[  312.064480][T19434] veth20: entered allmulticast mode
[  312.117553][T19439] netlink: set zone limit has 8 unknown bytes
[  312.163290][T19442] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4223'.
[  312.598588][T19473] bond7: entered promiscuous mode
[  312.613434][T19473] bond7: entered allmulticast mode
[  312.616581][T19473] 8021q: adding VLAN 0 to HW filter on device bond7
[  312.666773][T19473] block nbd0: not configured, cannot reconfigure
[  312.699491][T19481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4233'.
[  312.758912][T19484] xt_NFQUEUE: number of total queues is 0
[  312.955036][T19496] netlink: 'syz.2.4239': attribute type 23 has an invalid length.
[  313.050077][T19513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4244'.
[  313.054676][T19513] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4244'.
[  313.130152][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4246'.
[  313.160314][T19526] netlink: 'syz.2.4249': attribute type 11 has an invalid length.
[  313.232802][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4252'.
[  313.238703][T19537] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  313.547872][T19553] ip6tnl5: entered promiscuous mode
[  313.550103][T19553] ip6tnl5: entered allmulticast mode
[  313.782920][T19561] xt_TPROXY: Can be used only with -p tcp or -p udp
[  314.061085][T19584] xt_l2tp: wrong L2TP version: 1
[  314.319944][T19597] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  314.587848][T19621] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  314.818707][T19653] xt_TCPMSS: Only works on TCP SYN packets
[  315.332317][T19701] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  315.336385][T19701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.541425][T19716] tipc: New replicast peer: 255.255.255.255
[  315.546052][T19716] tipc: Enabled bearer <udp:syz2>, priority 10
[  315.695082][T19720] syzkaller0: entered promiscuous mode
[  315.696830][T19720] syzkaller0: entered allmulticast mode
[  315.749074][T19723] x_tables: duplicate underflow at hook 1
[  316.160278][T19758] __nla_validate_parse: 7 callbacks suppressed
[  316.160292][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4324'.
[  316.593495][ T5857] tipc: Node number set to 3244035108
[  316.706414][T19779] bond11: Unable to set down delay as MII monitoring is disabled
[  316.716879][T19779] bond11 (unregistering): Released all slaves
[  316.891620][T19788] netlink: 'syz.1.4332': attribute type 1 has an invalid length.
[  316.894053][T19788] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4332'.
[  316.919410][T19790] openvswitch: netlink: Flow key attr not present in new flow.
[  316.959069][T19793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4334'.
[  316.962017][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4334'.
[  317.137284][T19804] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4337'.
[  317.226515][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.330408][T19829] syz.0.4339 (19829) used obsolete PPPIOCDETACH ioctl
[  317.925766][T19860] IPVS: Unknown mcast interface: vcan0
[  319.204154][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4364'.
[  319.312181][T19898] smc: removing ib device syz0
[  319.758709][T19904] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4366'.
[  320.909455][T19954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4383'.
[  320.916199][T19954] vlan3: entered promiscuous mode
[  320.917978][T19954] bond0: entered promiscuous mode
[  320.919609][T19954] bond_slave_0: entered promiscuous mode
[  321.891370][T19978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4390'.
[  321.949185][T19986] syzkaller1: entered promiscuous mode
[  321.952095][T19986] syzkaller1: entered allmulticast mode
[  322.587339][T20042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  322.589910][T20042] IPv6: NLM_F_CREATE should be set when creating new route
[  322.592507][T20042] IPv6: NLM_F_CREATE should be set when creating new route
[  322.618367][T20045] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4410'.
[  322.622702][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4410'.
[  323.098970][T20079] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.4421'.
[  323.185392][T20088] Cannot find del_set index 49151 as target
[  323.262040][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4425'.
[  323.299516][T20093] netlink: 'syz.0.4426': attribute type 32 has an invalid length.
[  323.451119][T20105] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  323.455753][T20106] netlink: 'syz.0.4430': attribute type 1 has an invalid length.
[  323.459512][T20106] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  323.484765][T20111] netlink: 'syz.0.4431': attribute type 1 has an invalid length.
[  323.489802][T20111] netlink: 'syz.0.4431': attribute type 3 has an invalid length.
[  323.492335][T20111] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4431'.
[  323.521021][T20116] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  323.892331][T20121] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  325.283564][T20148] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4442'.
[  326.207744][T20161] Timeout policy `syz0' can only be used by L3 protocol number 34984
[  326.277856][T20164] team0 (unregistering): Port device team_slave_0 removed
[  326.284833][T20164] team0 (unregistering): Port device team_slave_1 removed
[  326.289144][T20164] team0 (unregistering): Port device bond0 removed
[  326.294984][T20164] team0 (unregistering): Port device geneve0 removed
[  326.300170][T20164] team0 (unregistering): Port device dummy0 removed
[  326.694903][T20196] Cannot find del_set index 4 as target
[  326.723537][T20198] xt_ecn: cannot match TCP bits for non-tcp packets
[  326.828188][T20205] netlink: 'syz.1.4463': attribute type 21 has an invalid length.
[  326.830635][T20205] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4463'.
[  326.834406][T20205] netlink: 'syz.1.4463': attribute type 4 has an invalid length.
[  326.837002][T20205] netlink: 'syz.1.4463': attribute type 3 has an invalid length.
[  326.839471][T20205] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4463'.
[  326.930804][T20209] syzkaller0: entered promiscuous mode
[  326.932468][T20209] syzkaller0: entered allmulticast mode
[  327.017088][T20211] netlink: 'syz.1.4465': attribute type 1 has an invalid length.
[  327.036745][T20211] 8021q: adding VLAN 0 to HW filter on device bond11
[  327.292042][T20223] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  327.565440][T20252] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4477'.
[  327.802501][T20280] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4482'.
[  327.874509][T20287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.877720][T20286] syzkaller0: entered promiscuous mode
[  327.879587][T20286] syzkaller0: entered allmulticast mode
[  327.892368][T20286] tipc: Resetting bearer <eth:syzkaller0>
[  327.901439][T20286] tipc: Disabling bearer <eth:syzkaller0>
[  328.455149][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4486'.
[  329.756322][T20316] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  329.761163][T20316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'.
[  330.392937][T20344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4502'.
[  330.632483][T20362] xfrm1: entered allmulticast mode
[  330.756491][T20371] Cannot find del_set index 2 as target
[  330.758413][T20371] Cannot find del_set index 2 as target
[  330.760303][T20371] Cannot find del_set index 2 as target
[  330.762282][T20371] Cannot find del_set index 2 as target
[  330.765978][T20371] Cannot find del_set index 2 as target
[  330.767826][T20371] Cannot find del_set index 2 as target
[  330.769601][T20371] Cannot find del_set index 2 as target
[  330.771398][T20371] Cannot find del_set index 2 as target
[  330.773162][T20371] Cannot find del_set index 2 as target
[  331.313353][   T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  332.100699][T20430] netlink: 'syz.0.4525': attribute type 1 has an invalid length.
[  332.425565][T20439] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4527'.
[  332.425951][T20440] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4527'.
[  332.524256][T20444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4529'.
[  332.527123][T20444] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4529'.
[  332.530327][T20444] netlink: 'syz.0.4529': attribute type 5 has an invalid length.
[  332.532859][T20444] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4529'.
[  332.837590][T20469] bridge10: entered promiscuous mode
[  332.839606][T20469] bridge10: entered allmulticast mode
[  333.246442][T20486] xt_hashlimit: size too large, truncated to 1048576
[  333.249267][T20486] xt_hashlimit: max too large, truncated to 1048576
[  334.338441][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  334.342163][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  334.346254][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  334.349833][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  334.353002][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  334.562676][T20548] chnl_net:caif_netlink_parms(): no params data found
[  334.661740][T20548] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.668335][T20548] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.670722][T20548] bridge_slave_0: entered allmulticast mode
[  334.674824][T20548] bridge_slave_0: entered promiscuous mode
[  334.678117][T20569] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4567'.
[  334.679044][T20548] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.685105][T20548] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.687714][T20548] bridge_slave_1: entered allmulticast mode
[  334.690503][T20548] bridge_slave_1: entered promiscuous mode
[  334.710063][T20548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.715285][T20548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.735415][T20548] team0: Port device team_slave_0 added
[  334.739675][T20548] team0: Port device team_slave_1 added
[  334.774610][T20548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.776766][T20548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.785220][T20548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.789617][T20548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.791847][T20548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.800599][T20548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.844474][T20548] hsr_slave_0: entered promiscuous mode
[  334.846732][T20548] hsr_slave_1: entered promiscuous mode
[  335.025898][T20548] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  335.035373][T20548] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  335.039948][T20548] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  335.046046][T20548] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  335.129371][T20548] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.150138][T20548] 8021q: adding VLAN 0 to HW filter on device team0
[  335.164659][ T4157] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.167522][ T4157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.179739][ T4157] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.182032][ T4157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.358143][T20548] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.390994][T20548] veth0_vlan: entered promiscuous mode
[  335.396498][T20548] veth1_vlan: entered promiscuous mode
[  335.420397][T20548] veth0_macvtap: entered promiscuous mode
[  335.424934][T20548] veth1_macvtap: entered promiscuous mode
[  335.442704][T20548] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.451282][T20548] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.458853][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.461530][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.468729][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.471473][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.515281][T19276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.521531][T19276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.533725][T19276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.536582][T19276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.583331][T20638] netlink: 408 bytes leftover after parsing attributes in process `syz.0.4586'.
[  335.624927][T20642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4587'.
[  335.879822][T20677] veth0: entered promiscuous mode
[  335.882524][T20677] vlan3: entered promiscuous mode
[  336.043734][T20692] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  336.423279][ T5837] Bluetooth: hci3: command tx timeout
[  336.860625][T20747] netlink: 'syz.0.4613': attribute type 1 has an invalid length.
[  336.867837][T20747] netlink: 'syz.0.4613': attribute type 2 has an invalid length.
[  338.221896][T20777] xt_l2tp: missing protocol rule (udp|l2tpip)
[  338.234993][T20776] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  338.328717][T20790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4625'.
[  338.366749][T20795] sctp: [Deprecated]: syz.1.4626 (pid 20795) Use of int in max_burst socket option deprecated.
[  338.366749][T20795] Use struct sctp_assoc_value instead
[  338.407766][T20797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4627'.
[  338.503188][ T5837] Bluetooth: hci3: command tx timeout
[  339.122182][T20855] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.124703][T20855] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.182534][T20855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.190499][T20855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  339.260060][T20856] netlink: 'syz.3.4644': attribute type 3 has an invalid length.
[  339.263424][T18716] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  339.266279][T18716] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  339.269871][T18716] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  339.273833][T18716] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  339.322046][T20861] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4646'.
[  339.325513][T20861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4646'.
[  339.469721][T20867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4649'.
[  339.530452][T20869] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4650'.
[  339.749521][T20882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4655'.
[  339.962145][T20893] netlink: 'syz.1.4660': attribute type 1 has an invalid length.
[  339.968762][T20893] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4660'.
[  339.977889][T20893] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4660'.
[  340.153307][T20906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4665'.
[  340.603342][ T5837] Bluetooth: hci3: command tx timeout
[  341.125998][T20948] xt_CT: You must specify a L4 protocol and not use inversions on it
[  341.143619][T20950] xt_CT: You must specify a L4 protocol and not use inversions on it
[  341.223206][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'.
[  341.225944][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'.
[  341.228756][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'.
[  341.236058][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'.
[  341.239211][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'.
[  341.242175][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'.
[  341.592091][T21015] x_tables: unsorted entry at hook 3
[  342.332330][T21034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.613333][T21055] netlink: 'syz.1.4708': attribute type 8 has an invalid length.
[  342.663176][ T5837] Bluetooth: hci3: command tx timeout
[  342.823237][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  342.938559][T21080] xt_hashlimit: max too large, truncated to 1048576
[  342.941184][T21081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.968866][T21084] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  343.360907][T21110] netlink: 'syz.3.4726': attribute type 29 has an invalid length.
[  343.373655][T21110] netlink: 'syz.3.4726': attribute type 29 has an invalid length.
[  343.509595][T21125] bridge0: entered promiscuous mode
[  343.511262][T21125] bridge0: entered allmulticast mode
[  344.561387][T21182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  344.608782][T21195] syz.0.4748: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  344.616378][T21195] CPU: 0 UID: 0 PID: 21195 Comm: syz.0.4748 Not tainted syzkaller #0 PREEMPT(full) 
[  344.616395][T21195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  344.616401][T21195] Call Trace:
[  344.616406][T21195]  <TASK>
[  344.616411][T21195]  dump_stack_lvl+0x189/0x250
[  344.616430][T21195]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.616441][T21195]  ? __pfx__printk+0x10/0x10
[  344.616454][T21195]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  344.616469][T21195]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  344.616484][T21195]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  344.616500][T21195]  warn_alloc+0x214/0x310
[  344.616516][T21195]  ? __pfx_warn_alloc+0x10/0x10
[  344.616533][T21195]  ? __get_vm_area_node+0x28f/0x300
[  344.616546][T21195]  ? hash_ipmac_create+0x358/0xfe0
[  344.616562][T21195]  __vmalloc_node_range_noprof+0x690/0x12d0
[  344.616575][T21195]  ? __alloc_frozen_pages_noprof+0x9f/0x370
[  344.616601][T21195]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  344.616635][T21195]  ? hash_ipmac_create+0x358/0xfe0
[  344.616650][T21195]  ? rcu_is_watching+0x15/0xb0
[  344.616661][T21195]  ? hash_ipmac_create+0x358/0xfe0
[  344.616674][T21195]  __kvmalloc_node_noprof+0x670/0x910
[  344.616686][T21195]  ? hash_ipmac_create+0x358/0xfe0
[  344.616698][T21195]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  344.616709][T21195]  ? hash_ipmac_create+0x2fe/0xfe0
[  344.616724][T21195]  hash_ipmac_create+0x358/0xfe0
[  344.616741][T21195]  ? __nla_parse+0x40/0x60
[  344.616754][T21195]  ? __pfx_hash_ipmac_create+0x10/0x10
[  344.616767][T21195]  ip_set_create+0xa97/0x1940
[  344.616781][T21195]  ? ip_set_create+0x4a2/0x1940
[  344.616801][T21195]  ? __pfx_ip_set_create+0x10/0x10
[  344.616835][T21195]  nfnetlink_rcv_msg+0xb4d/0x1130
[  344.616848][T21195]  ? unwind_get_return_address+0x4d/0x90
[  344.616858][T21195]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  344.616870][T21195]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  344.616894][T21195]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  344.616936][T21195]  netlink_rcv_skb+0x208/0x470
[  344.616947][T21195]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  344.616961][T21195]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  344.616977][T21195]  ? bpf_lsm_capable+0x9/0x20
[  344.616986][T21195]  ? security_capable+0x7e/0x2e0
[  344.617005][T21195]  nfnetlink_rcv+0x282/0x2590
[  344.617017][T21195]  ? __local_bh_enable_ip+0x12d/0x1c0
[  344.617026][T21195]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  344.617046][T21195]  ? __dev_queue_xmit+0x289/0x3140
[  344.617055][T21195]  ? __dev_queue_xmit+0x289/0x3140
[  344.617066][T21195]  ? __dev_queue_xmit+0x1955/0x3140
[  344.617074][T21195]  ? do_syscall_64+0xfa/0xf80
[  344.617090][T21195]  ? __dev_queue_xmit+0x289/0x3140
[  344.617102][T21195]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  344.617119][T21195]  ? __pfx___dev_queue_xmit+0x10/0x10
[  344.617158][T21195]  ? ref_tracker_free+0x63a/0x7d0
[  344.617170][T21195]  ? __asan_memcpy+0x40/0x70
[  344.617181][T21195]  ? __pfx_ref_tracker_free+0x10/0x10
[  344.617201][T21195]  ? skb_clone+0x246/0x3a0
[  344.617213][T21195]  ? __netlink_deliver_tap+0x807/0x850
[  344.617221][T21195]  ? netlink_deliver_tap+0x2e/0x1b0
[  344.617234][T21195]  ? netlink_deliver_tap+0x2e/0x1b0
[  344.617248][T21195]  netlink_unicast+0x82f/0x9e0
[  344.617267][T21195]  ? __pfx_netlink_unicast+0x10/0x10
[  344.617281][T21195]  ? netlink_sendmsg+0x642/0xb30
[  344.617289][T21195]  ? skb_put+0x11b/0x210
[  344.617304][T21195]  netlink_sendmsg+0x805/0xb30
[  344.617318][T21195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  344.617330][T21195]  ? aa_sock_msg_perm+0xf1/0x1b0
[  344.617340][T21195]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  344.617352][T21195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  344.617362][T21195]  __sock_sendmsg+0x21c/0x270
[  344.617376][T21195]  ____sys_sendmsg+0x505/0x820
[  344.617412][T21195]  ? __pfx_____sys_sendmsg+0x10/0x10
[  344.617433][T21195]  ? import_iovec+0x74/0xa0
[  344.617448][T21195]  ___sys_sendmsg+0x21f/0x2a0
[  344.617463][T21195]  ? __pfx____sys_sendmsg+0x10/0x10
[  344.617481][T21195]  ? futex_wait+0x285/0x360
[  344.617507][T21195]  ? __fget_files+0x2a/0x420
[  344.617515][T21195]  ? __fget_files+0x3a0/0x420
[  344.617530][T21195]  __x64_sys_sendmsg+0x19b/0x260
[  344.617545][T21195]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  344.617569][T21195]  ? do_syscall_64+0xbe/0xf80
[  344.617583][T21195]  do_syscall_64+0xfa/0xf80
[  344.617595][T21195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.617604][T21195]  ? exc_page_fault+0xab/0x100
[  344.617617][T21195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.617626][T21195] RIP: 0033:0x7f171f58f7c9
[  344.617636][T21195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.617645][T21195] RSP: 002b:00007f1720498038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  344.617656][T21195] RAX: ffffffffffffffda RBX: 00007f171f7e6180 RCX: 00007f171f58f7c9
[  344.617663][T21195] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  344.617668][T21195] RBP: 00007f171f5f297f R08: 0000000000000000 R09: 0000000000000000
[  344.617674][T21195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  344.617679][T21195] R13: 00007f171f7e6218 R14: 00007f171f7e6180 R15: 00007fff010ffca8
[  344.617697][T21195]  </TASK>
[  344.617869][T21195] Mem-Info:
[  344.791398][T21195] active_anon:4814 inactive_anon:0 isolated_anon:0
[  344.791398][T21195]  active_file:1378 inactive_file:38366 isolated_file:0
[  344.791398][T21195]  unevictable:1768 dirty:49 writeback:0
[  344.791398][T21195]  slab_reclaimable:11865 slab_unreclaimable:119767
[  344.791398][T21195]  mapped:23164 shmem:2443 pagetables:1040
[  344.791398][T21195]  sec_pagetables:0 bounce:0
[  344.791398][T21195]  kernel_misc_reclaimable:0
[  344.791398][T21195]  free:1089019 free_pcp:23829 free_cma:0
[  344.806008][T21195] Node 0 active_anon:8216kB inactive_anon:0kB active_file:1192kB inactive_file:141912kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37236kB dirty:36kB writeback:0kB shmem:4636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6112kB pagetables:1936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  344.816309][T21195] Node 1 active_anon:11040kB inactive_anon:0kB active_file:4320kB inactive_file:11552kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:55420kB dirty:160kB writeback:0kB shmem:5136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8328kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  344.826720][T21195] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  344.844005][T21195] lowmem_reserve[]: 0 1596 2128 2128 2128
[  344.846298][T21195] Node 0 DMA32 free:1471380kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:388kB inactive_file:0kB unevictable:0kB writepending:56kB zspages:0kB present:2080636kB managed:1635164kB mlocked:0kB bounce:0kB free_pcp:27304kB local_pcp:15768kB free_cma:0kB
[  344.856533][T21195] lowmem_reserve[]: 0 0 531 531 531
[  344.858577][T21195] Node 0 Normal free:15340kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8192kB inactive_anon:0kB active_file:804kB inactive_file:141912kB unevictable:3536kB writepending:64kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:1336kB local_pcp:1208kB free_cma:0kB
[  344.870389][T21195] lowmem_reserve[]: 0 0 0 0 0
[  344.872499][T21195] Node 1 Normal free:2853696kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11040kB inactive_anon:0kB active_file:4320kB inactive_file:11552kB unevictable:3536kB writepending:160kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:66956kB local_pcp:29416kB free_cma:0kB
[  344.883500][T21195] lowmem_reserve[]: 0 0 0 0 0
[  344.884995][T21195] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  344.889069][T21195] Node 0 DMA32: 229*4kB (UME) 122*8kB (UME) 263*16kB (UME) 5*32kB (ME) 167*64kB (UM) 125*128kB (UME) 71*256kB (UME) 48*512kB (UM) 35*1024kB (UM) 20*2048kB (UME) 322*4096kB (UM) = 1471412kB
[  344.895293][T21195] Node 0 Normal: 215*4kB (UM) 351*8kB (UME) 131*16kB (UME) 22*32kB (UM) 8*64kB (M) 7*128kB (M) 9*256kB (M) 6*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 15300kB
[  344.900931][T21195] Node 1 Normal: 183*4kB (UME) 379*8kB (UME) 72*16kB (UM) 290*32kB (UM) 73*64kB (UME) 43*128kB (UME) 14*256kB (UM) 7*512kB (UE) 12*1024kB (UM) 6*2048kB (UME) 683*4096kB (UM) = 2853684kB
[  344.908161][T21195] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  344.911260][T21195] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  344.914827][T21195] 42189 total pagecache pages
[  344.916567][T21195] 0 pages in swap cache
[  344.918120][T21195] Free swap  = 124996kB
[  344.919725][T21195] Total swap = 124996kB
[  344.921309][T21195] 1834877 pages RAM
[  344.922757][T21195] 0 pages HighMem/MovableOnly
[  344.925688][T21195] 387412 pages reserved
[  344.927314][T21195] 0 pages cma reserved
[  344.930179][T21216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.934835][T21216] __nla_validate_parse: 138 callbacks suppressed
[  344.934844][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4755'.
[  345.042221][T21229] xt_TPROXY: Can be used only with -p tcp or -p udp
[  345.128252][T21235] syzkaller1: entered promiscuous mode
[  345.130104][T21235] syzkaller1: entered allmulticast mode
[  345.216223][T21239] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  345.327223][T12399] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22
[  345.570356][T21262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4769'.
[  345.774104][T20688] nci: nci_rsp_packet: unknown rsp opcode 0x3b
[  346.530774][T21289] netlink: 'syz.1.4775': attribute type 1 has an invalid length.
[  346.534938][T21289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4775'.
[  346.687867][T21307] netlink: 'syz.3.4783': attribute type 4 has an invalid length.
[  346.754245][T21314] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  346.776263][T21314] bond0: (slave bond_slave_0): Releasing backup interface
[  346.779019][T21314] bond_slave_0: left promiscuous mode
[  346.782374][T21314] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.785708][T21314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.788059][T21314] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.791264][T21314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  346.939800][T21327] netlink: 'syz.3.4789': attribute type 1 has an invalid length.
[  346.943257][T21327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.969235][T21333] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4791'.
[  347.113641][T21356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4797'.
[  347.360004][T21376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4805'.
[  347.366438][T21376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  347.369344][T21376] IPv6: NLM_F_CREATE should be set when creating new route
[  347.419030][T21376] netlink: 'syz.3.4805': attribute type 2 has an invalid length.
[  347.530480][T21384] netlink: 'syz.3.4807': attribute type 2 has an invalid length.
[  347.576658][T21391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  347.745691][T21399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4813'.
[  347.994586][T21402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4814'.
[  348.016983][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4814'.
[  348.024912][T21402] bond0: (slave rose0): Enslaving as an active interface with an up link
[  349.036467][T21441] netlink: 'syz.3.4829': attribute type 5 has an invalid length.
[  349.040162][T21444] netlink: 576 bytes leftover after parsing attributes in process `syz.1.4830'.
[  349.197285][T21462] x_tables: duplicate underflow at hook 3
[  349.199902][T12399] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  349.618790][T21481] openvswitch: netlink: Multiple metadata blocks provided
[  349.810523][T21500] netlink: 'syz.0.4845': attribute type 5 has an invalid length.
[  349.942988][T21509] syzkaller0: entered promiscuous mode
[  349.945207][T21509] syzkaller0: entered allmulticast mode
[  350.256133][T21527] tipc: Invalid UDP bearer configuration
[  350.256164][T21527] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  350.500633][T21553] netlink: 'syz.1.4859': attribute type 3 has an invalid length.
[  350.590082][T21560] __nla_validate_parse: 3 callbacks suppressed
[  350.590092][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4861'.
[  350.700275][T21566] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4862'.
[  351.244798][T21573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4864'.
[  351.552345][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4868'.
[  352.178127][T21613] netlink: 'syz.0.4875': attribute type 10 has an invalid length.
[  352.180567][T21613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4875'.
[  352.186141][T21613] team0: Port device geneve0 added
[  352.187988][T20668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.192213][T20668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.195641][T20668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.198902][T20668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  352.202358][T21613] debugfs: 'netdev:nicvf0' already exists in 'phy5'
[  352.232271][T21615] netlink: 'syz.0.4876': attribute type 83 has an invalid length.
[  352.871931][T21652] syzkaller0: entered promiscuous mode
[  352.874240][T21652] syzkaller0: entered allmulticast mode
[  353.180249][T21687] netlink: 'syz.0.4897': attribute type 3 has an invalid length.
[  353.195150][T21687] netlink: 'syz.0.4897': attribute type 3 has an invalid length.
[  353.262421][T21698] nbd: socks must be embedded in a SOCK_ITEM attr
[  353.270026][T21700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4903'.
[  353.294750][T21698] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4901'.
[  353.350366][T21711] netlink: 'syz.3.4907': attribute type 5 has an invalid length.
[  353.368660][T21717] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.4909'.
[  353.561757][T21740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.565775][T21740] syzkaller0: entered promiscuous mode
[  353.569633][T21740] syzkaller0: entered allmulticast mode
[  353.587231][T21740] tipc: Resetting bearer <eth:syzkaller0>
[  353.598781][T21740] tipc: Disabling bearer <eth:syzkaller0>
[  353.860981][T21761] netlink: 'syz.1.4920': attribute type 6 has an invalid length.
[  353.866063][T21761] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4920'.
[  354.455229][T21800] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4932'.
[  354.631243][T21814] netlink: 'syz.3.4937': attribute type 4 has an invalid length.
[  354.633761][T21814] netlink: 'syz.3.4937': attribute type 1 has an invalid length.
[  354.660148][T21817] Bluetooth: hci1: too big key_count value 29096
[  354.745225][T21828] syzkaller0: entered promiscuous mode
[  354.746902][T21828] syzkaller0: entered allmulticast mode
[  355.070754][T21843] bridge0: left promiscuous mode
[  355.072728][T21843] bridge0: left allmulticast mode
[  355.324729][T21851] x_tables: duplicate underflow at hook 3
[  355.936838][T21859] __nla_validate_parse: 6 callbacks suppressed
[  355.936852][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4951'.
[  356.034799][T21868] syzkaller0: entered promiscuous mode
[  356.036643][T21868] syzkaller0: entered allmulticast mode
[  356.219357][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'.
[  356.512793][T21895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4962'.
[  356.547531][T21895] hsr_slave_1 (unregistering): left promiscuous mode
[  356.629809][T21909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4966'.
[  356.632983][T21908] SET target dimension over the limit!
[  356.640680][T21909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4966'.
[  356.644750][T21909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4966'.
[  356.648431][T21909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4966'.
[  356.651266][T21909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4966'.
[  356.654262][T21909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4966'.
[  356.657175][T21909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4966'.
[  356.744784][T21917] syzkaller0: entered promiscuous mode
[  356.747388][T21917] syzkaller0: entered allmulticast mode
[  356.832300][T21927] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  356.957381][T21941] netlink: 'syz.0.4975': attribute type 2 has an invalid length.
[  356.960502][T21941] netlink: 'syz.0.4975': attribute type 1 has an invalid length.
[  360.235835][T22117] veth0: entered promiscuous mode
[  360.260188][T22116] veth0: left promiscuous mode
[  360.326790][T22124] 8021q: adding VLAN 0 to HW filter on device bond12
[  360.417393][T22124] bond12 (unregistering): Released all slaves
[  360.735595][T22155] can: request_module (can-proto-3) failed.
[  360.944253][T22168] sctp: [Deprecated]: syz.0.5049 (pid 22168) Use of int in max_burst socket option.
[  360.944253][T22168] Use struct sctp_assoc_value instead
[  361.088450][T22178] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  361.218125][T22195] __nla_validate_parse: 38 callbacks suppressed
[  361.218135][T22195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5059'.
[  361.484041][T22223] netlink: 'syz.3.5068': attribute type 10 has an invalid length.
[  361.486603][T22223] netlink: 63 bytes leftover after parsing attributes in process `syz.3.5068'.
[  361.648185][T22246] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  361.749506][T22264] IPv6: Can't replace route, no match found
[  361.781494][T22266] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5082'.
[  361.794148][T22268] netlink: 'syz.0.5083': attribute type 29 has an invalid length.
[  361.936285][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5089'.
[  361.940754][T22286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5089'.
[  361.949079][T22289] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5090'.
[  362.049532][T22302] macvtap1: entered promiscuous mode
[  362.051838][T22302] macvtap1: entered allmulticast mode
[  362.056528][T22302] bond0: entered allmulticast mode
[  362.058736][T22302] bond_slave_0: entered allmulticast mode
[  362.061040][T22302] bond_slave_1: entered allmulticast mode
[  362.064079][T22302] bond0: entered promiscuous mode
[  362.066010][T22302] bond_slave_0: entered promiscuous mode
[  362.068325][T22302] bond_slave_1: entered promiscuous mode
[  362.072397][T22302] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  362.078005][T22302] team0: Device macvtap1 failed to register rx_handler
[  362.081316][T22302] bond0: left allmulticast mode
[  362.083424][T22302] bond_slave_0: left allmulticast mode
[  362.085636][T22302] bond_slave_1: left allmulticast mode
[  362.087810][T22302] bond0: left promiscuous mode
[  362.089783][T22302] bond_slave_0: left promiscuous mode
[  362.092444][T22302] bond_slave_1: left promiscuous mode
[  362.242414][T22316] openvswitch: netlink: Missing valid actions attribute.
[  362.245076][T22316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.596389][T22332] x_tables: duplicate underflow at hook 1
[  362.758426][T22344] netlink: 'syz.1.5110': attribute type 21 has an invalid length.
[  362.761277][T22344] netlink: 'syz.1.5110': attribute type 22 has an invalid length.
[  362.763939][T22344] netlink: 'syz.1.5110': attribute type 23 has an invalid length.
[  362.766365][T22344] netlink: 'syz.1.5110': attribute type 25 has an invalid length.
[  362.768719][T22344] netlink: 'syz.1.5110': attribute type 26 has an invalid length.
[  362.771232][T22344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5110'.
[  362.794171][T22283] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  362.796691][T22283] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  362.826101][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5113'.
[  362.829391][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5113'.
[  363.249255][T22392] netlink: 'syz.0.5130': attribute type 83 has an invalid length.
[  363.304977][   T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  363.504862][T22414] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  363.678355][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5136'.
[  364.358442][T22414] vlan3: entered promiscuous mode
[  364.360158][T22414] vlan3: entered allmulticast mode
[  364.361758][T22414] hsr_slave_1: entered allmulticast mode
[  364.673175][T22441] nbd3: detected capacity change from 0 to 63
[  364.675391][T22444] block nbd3: NBD_DISCONNECT
[  364.685115][T22444] block nbd3: Disconnected due to user request.
[  364.688558][T22444] block nbd3: shutting down sockets
[  365.135739][T22488] netlink: 'syz.1.5159': attribute type 21 has an invalid length.
[  365.138984][T22488] netlink: 'syz.1.5159': attribute type 4 has an invalid length.
[  365.359319][T22506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.364414][T22506] syzkaller0: entered promiscuous mode
[  365.366148][T22506] syzkaller0: entered allmulticast mode
[  365.381543][T22506] tipc: Resetting bearer <eth:syzkaller0>
[  365.386062][T22503] tipc: Resetting bearer <eth:syzkaller0>
[  365.425742][T22503] tipc: Disabling bearer <eth:syzkaller0>
[  365.990322][T22542] tc_dump_action: action bad kind
[  366.824341][ T5214] Bluetooth: hci3: command tx timeout
[  366.979598][T22579] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  367.502535][T22621] __nla_validate_parse: 3 callbacks suppressed
[  367.502550][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5199'.
[  367.522384][T22621] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  367.528325][T22621] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  367.579802][T22625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5201'.
[  367.610013][T22625] syzkaller0: entered promiscuous mode
[  367.612055][T22625] syzkaller0: entered allmulticast mode
[  368.401463][T22643] x_tables: duplicate underflow at hook 2
[  368.840051][T22648] x_tables: unsorted underflow at hook 1
[  368.874044][T22651] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  368.899809][T22653] validate_nla: 4 callbacks suppressed
[  368.899822][T22653] netlink: 'syz.1.5209': attribute type 1 has an invalid length.
[  368.908530][ T5214] Bluetooth: hci3: command 0x0405 tx timeout
[  368.912193][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5210'.
[  368.912772][T22653] netlink: 'syz.1.5209': attribute type 11 has an invalid length.
[  368.916667][T22654] netlink: 'syz.1.5209': attribute type 1 has an invalid length.
[  368.917563][T22653] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5209'.
[  368.921542][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5210'.
[  369.213246][T22688] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.5220'.
[  369.236898][T22687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  369.239124][T22687] IPv6: NLM_F_CREATE should be set when creating new route
[  369.241333][T22687] IPv6: NLM_F_CREATE should be set when creating new route
[  369.247057][T22687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5221'.
[  369.329184][T22704] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000
[  369.445128][T22717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5230'.
[  370.225413][T22734] netlink: 'syz.3.5236': attribute type 1 has an invalid length.
[  370.228425][T22734] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5236'.
[  370.733278][T22757] netlink: 'syz.0.5243': attribute type 2 has an invalid length.
[  370.820954][T22768] syzkaller1: entered promiscuous mode
[  370.824977][T22768] syzkaller1: entered allmulticast mode
[  370.931201][T22783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.933908][T22784] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.966499][T22782] syzkaller0: entered promiscuous mode
[  370.968256][T22782] syzkaller0: entered allmulticast mode
[  370.970508][T22782] tipc: Resetting bearer <eth:syzkaller0>
[  370.982844][T22781] tipc: Resetting bearer <eth:syzkaller0>
[  371.005721][T22789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5251'.
[  371.943901][T22781] tipc: Disabling bearer <eth:syzkaller0>
[  372.061805][T22804] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  372.506907][T22861] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  372.510708][T22861] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  372.541943][T22864] xt_TCPMSS: Only works on TCP SYN packets
[  372.726159][T22879] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  372.728381][T22879] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  373.260708][T22887] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  373.329134][T22889] __nla_validate_parse: 1 callbacks suppressed
[  373.329143][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5283'.
[  373.491866][T22904] vxcan3: entered allmulticast mode
[  373.991223][T22914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'.
[  373.994726][T22913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'.
[  373.998444][T22914] x_tables: duplicate underflow at hook 1
[  374.065158][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'.
[  374.153897][T22924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5295'.
[  374.988154][T22931] bond8: entered promiscuous mode
[  374.990589][T22931] 8021q: adding VLAN 0 to HW filter on device bond8
[  375.969300][T22953] tipc: Started in network mode
[  375.970806][T22953] tipc: Node identity aa7522a90cd1, cluster identity 4711
[  375.975162][T22953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.978019][T22955] syzkaller0: entered promiscuous mode
[  375.980432][T22955] syzkaller0: entered allmulticast mode
[  375.995404][T22953] tipc: Resetting bearer <eth:syzkaller0>
[  375.999909][T22951] tipc: Resetting bearer <eth:syzkaller0>
[  376.018767][T22951] tipc: Disabling bearer <eth:syzkaller0>
[  376.030855][T22958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5305'.
[  376.267039][T22980] syzkaller0: entered promiscuous mode
[  376.268983][T22980] syzkaller0: entered allmulticast mode
[  376.432557][T23000] netlink: 'syz.0.5320': attribute type 9 has an invalid length.
[  376.735617][T23015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5325'.
[  376.747099][T23015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5325'.
[  377.029264][T23045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5334'.
[  377.033634][T23045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.368191][T23064] IPv6: sit1: Disabled Multicast RS
[  377.412403][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5343'.
[  377.441594][T23072] syzkaller1: entered promiscuous mode
[  377.443564][T23072] syzkaller1: entered allmulticast mode
[  377.505684][T23076] netlink: 'syz.0.5346': attribute type 1 has an invalid length.
[  378.656219][T23113] __nla_validate_parse: 1 callbacks suppressed
[  378.656229][T23113] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5358'.
[  379.826791][T23151] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5367'.
[  381.237393][T23270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.240046][T23270] syzkaller0: entered promiscuous mode
[  381.241896][T23270] syzkaller0: entered allmulticast mode
[  381.252729][T23270] tipc: Resetting bearer <eth:syzkaller0>
[  381.256943][T23269] tipc: Resetting bearer <eth:syzkaller0>
[  381.268648][T23269] tipc: Disabling bearer <eth:syzkaller0>
[  381.436135][T23280] netlink: 'syz.3.5408': attribute type 21 has an invalid length.
[  381.438657][T23280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5408'.
[  381.441556][T23280] netlink: 'syz.3.5408': attribute type 4 has an invalid length.
[  381.445847][T23280] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5408'.
[  381.783468][ T5837] Bluetooth: hci3: command 0x0405 tx timeout
[  381.788119][T23302] x_tables: duplicate underflow at hook 1
[  381.800090][T23302] syzkaller0: entered promiscuous mode
[  381.802395][T23302] syzkaller0: entered allmulticast mode
[  381.814253][T23302] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  381.910233][T23307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5418'.
[  381.985183][T23310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.043743][T23310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.104548][T23310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.167503][T23310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.248002][T20668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.261409][T20668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.269494][T20668] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.282288][T20668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.371773][T23320] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  382.575335][T23333] netlink: 'syz.0.5426': attribute type 83 has an invalid length.
[  382.660067][T23344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5429'.
[  382.665502][T23344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5429'.
[  383.187307][T23361] sctp: [Deprecated]: syz.3.5434 (pid 23361) Use of struct sctp_assoc_value in delayed_ack socket option.
[  383.187307][T23361] Use struct sctp_sack_info instead
[  383.652553][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5440'.
[  383.827009][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'.
[  384.155302][T23401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5446'.
[  384.221195][T23406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5448'.
[  384.227078][T23407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5448'.
[  384.347890][T23425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5452'.
[  384.354907][T20668] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  384.363229][T20668] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  384.379052][T23425] pimreg: entered allmulticast mode
[  384.382261][T23422] pimreg: left allmulticast mode
[  384.384566][T15047] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  384.461780][T23433] netlink: 'syz.3.5456': attribute type 12 has an invalid length.
[  384.472528][T23433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5456'.
[  384.511854][T23439] netlink: 'syz.0.5458': attribute type 7 has an invalid length.
[  384.556367][T23444] netlink: 'syz.3.5460': attribute type 4 has an invalid length.
[  384.561087][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5460'.
[  384.663335][T15047] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  384.723212][T15047] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  384.952498][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5468'.
[  384.956232][T23468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5468'.
[  385.611439][T23506] netlink: 'syz.0.5479': attribute type 21 has an invalid length.
[  385.617491][T23506] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5479'.
[  385.621902][T23506] netlink: 'syz.0.5479': attribute type 4 has an invalid length.
[  385.625854][T23506] netlink: 'syz.0.5479': attribute type 5 has an invalid length.
[  385.707232][T15047] hid-generic 0005:0002:5508.0001: item fetching failed at offset 3/4
[  385.710447][T15047] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22
[  386.468546][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  386.474719][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  386.478981][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  386.482610][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  386.486301][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  386.577753][T23521] chnl_net:caif_netlink_parms(): no params data found
[  386.625268][T23521] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.627610][T23521] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.630120][T23521] bridge_slave_0: entered allmulticast mode
[  386.633388][T23521] bridge_slave_0: entered promiscuous mode
[  386.636978][T23521] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.639630][T23521] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.642442][T23521] bridge_slave_1: entered allmulticast mode
[  386.645709][T23521] bridge_slave_1: entered promiscuous mode
[  386.666445][T23521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.673538][T23521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.690835][T23521] team0: Port device team_slave_0 added
[  386.694722][T23521] team0: Port device team_slave_1 added
[  386.710528][T23521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.712673][T23521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.720468][T23521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.725526][T23521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.727707][T23521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.735884][T23521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.764875][T23521] hsr_slave_0: entered promiscuous mode
[  386.767219][T23521] hsr_slave_1: entered promiscuous mode
[  386.769341][T23521] debugfs: 'hsr0' already exists in 'hsr'
[  386.771231][T23521] Cannot create hsr debugfs directory
[  386.896060][T23521] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  386.901859][T23521] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  386.908241][T23521] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  386.912487][T23521] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  386.936239][T23521] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.938848][T23521] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.941386][T23521] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.943663][T23521] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.976378][T23521] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.985929][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.992439][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.001030][T23521] 8021q: adding VLAN 0 to HW filter on device team0
[  387.008117][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.010459][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.019666][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.022108][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.134289][T23521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.204924][T23575] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  387.279313][T23521] veth0_vlan: entered promiscuous mode
[  387.287343][T23521] veth1_vlan: entered promiscuous mode
[  387.289918][T23583] netlink: 'syz.3.5500': attribute type 1 has an invalid length.
[  387.325095][T23583] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  387.328151][T23583] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  387.337742][T23583] bond1: (slave vxcan3): making interface the new active one
[  387.340403][T23583] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[  387.362290][T23583] bond1 (unregistering): (slave vxcan3): Releasing backup interface
[  387.367070][T23583] bond1 (unregistering): Released all slaves
[  387.381049][T23521] veth0_macvtap: entered promiscuous mode
[  387.385661][T23521] veth1_macvtap: entered promiscuous mode
[  387.399551][T23521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.428006][T23521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.438911][T20668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.445391][T20668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.452282][T20668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.465813][T20668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.510843][T23606] openvswitch: netlink: Missing key (keys=40, expected=80)
[  387.530879][T19276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.533978][T19276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.558379][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.560994][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.952322][T23638] netlink: 'syz.0.5515': attribute type 83 has an invalid length.
[  388.103454][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  388.503198][ T5214] Bluetooth: hci4: command tx timeout
[  388.630167][T23687] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20002
[  388.929835][T23723] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[  389.118659][T23728] Cannot find set identified by id 0 to match
[  389.399302][T23759] __nla_validate_parse: 15 callbacks suppressed
[  389.399313][T23759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5559'.
[  389.410956][T23759] gretap2: entered promiscuous mode
[  389.546736][T23776] openvswitch: netlink: Tunnel attr 193 out of range max 16
[  389.712699][T15047] IPVS: starting estimator thread 0...
[  389.803389][T23781] IPVS: using max 85 ests per chain, 204000 per kthread
[  389.814898][T23791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5569'.
[  389.883337][T23798] netlink: 'syz.4.5571': attribute type 1 has an invalid length.
[  390.137753][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5577'.
[  390.281101][T23828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5581'.
[  390.496316][T23855] wg1 speed is unknown, defaulting to 1000
[  390.498317][T23855] wg1 speed is unknown, defaulting to 1000
[  390.500825][T23855] wg1 speed is unknown, defaulting to 1000
[  390.520146][T23855] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  390.545514][T23855] wg1 speed is unknown, defaulting to 1000
[  390.548764][T23855] wg1 speed is unknown, defaulting to 1000
[  390.552600][T23855] wg1 speed is unknown, defaulting to 1000
[  390.555733][T23855] wg1 speed is unknown, defaulting to 1000
[  390.558602][T23855] wg1 speed is unknown, defaulting to 1000
[  390.561327][T23855] wg1 speed is unknown, defaulting to 1000
[  390.564195][T23855] wg1 speed is unknown, defaulting to 1000
[  390.566796][T23855] wg1 speed is unknown, defaulting to 1000
[  390.569344][T23855] wg1 speed is unknown, defaulting to 1000
[  390.572289][T23855] wg1 speed is unknown, defaulting to 1000
[  390.574735][T23861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5595'.
[  390.580654][T23855] wg1 speed is unknown, defaulting to 1000
[  390.584387][T23855] wg1 speed is unknown, defaulting to 1000
[  390.587465][T23855] wg1 speed is unknown, defaulting to 1000
[  390.590352][T23855] wg1 speed is unknown, defaulting to 1000
[  390.595464][T23855] wg1 speed is unknown, defaulting to 1000
[  390.597854][ T5214] Bluetooth: hci4: command tx timeout
[  390.745219][ T7474] IPVS: starting estimator thread 0...
[  390.750652][T23880] nbd: must specify at least one socket
[  390.753972][T23880] netlink: 'syz.4.5603': attribute type 10 has an invalid length.
[  390.831446][T23889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5606'.
[  390.834756][T23881] IPVS: using max 83 ests per chain, 199200 per kthread
[  390.846531][T23873] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  391.771133][T23920] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  391.773504][T23920] team0: Device ipvlan2 failed to register rx_handler
[  391.796004][T23924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5616'.
[  391.799513][T23924] netlink: 'syz.4.5616': attribute type 6 has an invalid length.
[  391.855902][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5616'.
[  391.866242][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5616'.
[  391.873441][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5616'.
[  392.663804][ T5214] Bluetooth: hci4: command tx timeout
[  393.053304][T23989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  393.053642][T23987] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  393.111667][T23998] vlan2: entered promiscuous mode
[  393.116948][T23998] hsr_slave_1: entered promiscuous mode
[  393.119823][T23998] vlan2: entered allmulticast mode
[  393.121685][T23998] hsr_slave_1: entered allmulticast mode
[  393.139241][T23998] wg1 speed is unknown, defaulting to 1000
[  393.299973][T24017] netlink: 'syz.0.5644': attribute type 1 has an invalid length.
[  393.319175][T24017] bond9: entered promiscuous mode
[  393.321670][T24017] 8021q: adding VLAN 0 to HW filter on device bond9
[  393.359174][T24017] 8021q: adding VLAN 0 to HW filter on device bond10
[  393.363584][T24017] bond9: (slave bond10): making interface the new active one
[  393.365820][T24017] bond10: entered promiscuous mode
[  393.367785][T24017] bond9: (slave bond10): Enslaving as an active interface with an up link
[  393.715727][T24055] netlink: 'syz.4.5658': attribute type 3 has an invalid length.
[  393.843260][T24070] netlink: 'syz.0.5665': attribute type 11 has an invalid length.
[  394.058023][T24088] netlink: 'syz.3.5669': attribute type 2 has an invalid length.
[  394.208136][T24108] tipc: Enabled bearer <eth:vlan0>, priority 18
[  394.379366][T24123] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004
[  394.469480][T24131] __nla_validate_parse: 12 callbacks suppressed
[  394.469491][T24131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5688'.
[  394.484935][T24131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5688'.
[  394.743309][ T5214] Bluetooth: hci4: command tx timeout
[  395.313337][   T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  395.524642][T24160] wg1 speed is unknown, defaulting to 1000
[  395.700261][T24174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5703'.
[  395.775710][T24178] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5705'.
[  395.778840][T24178] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5705'.
[  395.953149][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  396.406443][T24198] netlink: 'syz.0.5711': attribute type 10 has an invalid length.
[  396.613725][T24217] bridge_slave_0: left allmulticast mode
[  396.615650][T24217] bridge_slave_0: left promiscuous mode
[  396.619479][T24217] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.625142][T24217] bridge_slave_1: left allmulticast mode
[  396.628011][T24217] bridge_slave_1: left promiscuous mode
[  396.630038][T24217] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.637627][T24217] bond0: (slave bond_slave_0): Releasing backup interface
[  396.641976][T24217] bond0: (slave bond_slave_1): Releasing backup interface
[  396.650839][T24217] team0: Port device team_slave_0 removed
[  396.657610][T24217] team0: Port device team_slave_1 removed
[  396.659792][T24217] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.662124][T24217] batman_adv: batadv0: Removing interface: batadv_slave_0
[  396.671490][T24217] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.675103][T24217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.684850][T24217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  396.700282][ T5879] wg1 speed is unknown, defaulting to 1000
[  396.701188][T24219] syzkaller0: entered promiscuous mode
[  396.704205][T24219] syzkaller0: entered allmulticast mode
[  396.784970][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5719'.
[  396.801197][T24226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5719'.
[  396.917476][T24239] netlink: 'syz.0.5723': attribute type 8 has an invalid length.
[  396.920414][T24239] sch_fq: defrate 0 ignored.
[  397.056064][T24249] bridge0: port 3(macvtap1) entered blocking state
[  397.059046][T24249] bridge0: port 3(macvtap1) entered disabled state
[  397.061240][T24249] macvtap1: entered allmulticast mode
[  397.065591][T24249] bridge0: entered allmulticast mode
[  397.070034][T24249] macvtap1: left allmulticast mode
[  397.071991][T24249] bridge0: left allmulticast mode
[  397.267722][T24266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.368790][T24275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5734'.
[  397.612413][T24287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5739'.
[  397.859486][T24303] netlink: 'syz.3.5743': attribute type 39 has an invalid length.
[  397.997385][T24319] wg1 speed is unknown, defaulting to 1000
[  398.068550][T24324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5750'.
[  399.100646][T24349] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  399.286802][T24377] ip6t_REJECT: ECHOREPLY is not supported
[  399.377103][T24386] netlink: 'syz.0.5766': attribute type 5 has an invalid length.
[  399.428631][T24386] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  399.431252][T24386] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  399.436708][T24386] bond2: left promiscuous mode
[  399.439178][T24386] bond3: left promiscuous mode
[  399.441306][T24386] bridge2: left promiscuous mode
[  399.444233][T24386] bridge2: left allmulticast mode
[  399.446589][T24386] vlan1: left promiscuous mode
[  399.448479][T24386] bond0: left promiscuous mode
[  399.450388][T24386] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  399.454373][T24386] ip6gretap1: left allmulticast mode
[  399.461222][T24386] ip6gretap2: left allmulticast mode
[  399.490226][T24386] xfrm1: left allmulticast mode
[  399.493698][T24386] bridge10: left promiscuous mode
[  399.497186][T24386] bridge10: left allmulticast mode
[  399.504764][T24386] bond8: left promiscuous mode
[  399.519981][T24386] syzkaller0: left promiscuous mode
[  399.521993][T24386] syzkaller0: left allmulticast mode
[  399.535080][T24386] gretap2: left promiscuous mode
[  399.538399][T24386] vlan2: left promiscuous mode
[  399.539981][T24386] hsr_slave_1: left promiscuous mode
[  399.541868][T24386] vlan2: left allmulticast mode
[  399.544251][T24386] hsr_slave_1: left allmulticast mode
[  399.548824][T24386] bond9: left promiscuous mode
[  399.550525][T24386] bond10: left promiscuous mode
[  399.558383][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  399.562946][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  399.573861][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  399.576800][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  399.587195][T24400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5770'.
[  399.609951][T24400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5770'.
[  399.673755][T24404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5772'.
[  399.760707][T24414] pimreg: entered allmulticast mode
[  399.934836][T24431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5782'.
[  399.986187][T24432] netlink: 'syz.0.5782': attribute type 11 has an invalid length.
[  400.143651][T24438] netlink: 'syz.3.5785': attribute type 1 has an invalid length.
[  400.147025][T24438] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5785'.
[  400.437790][T24458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5791'.
[  400.445799][T24458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5791'.
[  400.445948][ T5858] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  400.451986][ T5858] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  400.458210][ T5858] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  400.461796][ T5858] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  400.852507][T24507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5808'.
[  400.987542][T24516] wg1 speed is unknown, defaulting to 1000
[  401.714566][T24536] 8021q: VLANs not supported on wpan0
[  401.869988][T24547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5819'.
[  401.924362][T24549] netlink: 'syz.0.5820': attribute type 1 has an invalid length.
[  401.928647][T24549] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5820'.
[  402.471758][T24583] xt_TCPMSS: Only works on TCP SYN packets
[  402.837686][T24609] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  403.048328][T24633] wg1 speed is unknown, defaulting to 1000
[  403.302301][T24655] netlink: 'syz.3.5852': attribute type 10 has an invalid length.
[  404.665819][T24694] bridge0: port 3(macvtap0) entered blocking state
[  404.669055][T24694] bridge0: port 3(macvtap0) entered disabled state
[  404.671850][T24694] macvtap0: entered allmulticast mode
[  404.674714][T24694] bridge0: entered allmulticast mode
[  404.679956][T24694] macvtap0: left allmulticast mode
[  404.682250][T24694] bridge0: left allmulticast mode
[  404.710746][T24695] vlan2: entered promiscuous mode
[  404.712420][T24695] bridge0: entered promiscuous mode
[  405.170506][T24720] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.036902][T24812] netlink: 'syz.3.5904': attribute type 7 has an invalid length.
[  407.111093][T24818] netlink: 'syz.3.5906': attribute type 1 has an invalid length.
[  407.201457][T24829] __nla_validate_parse: 4 callbacks suppressed
[  407.201467][T24829] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5909'.
[  408.119606][T24866] netlink: 'syz.3.5922': attribute type 8 has an invalid length.
[  408.638871][T24876] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  408.642586][T24876] 8021q: VLANs not supported on wpan0
[  408.718879][T24875] infiniband syz1: set down
[  408.721146][T24875] infiniband syz1: added bond0
[  408.755803][T24875] RDS/IB: syz1: added
[  408.757235][T24875] smc: adding ib device syz1 with port count 1
[  408.759364][T24875] smc:    ib device syz1 port 1 has no pnetid
[  409.241523][T24896] netlink: 324 bytes leftover after parsing attributes in process `syz.3.5932'.
[  409.575115][T24906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5935'.
[  409.607160][T24906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5935'.
[  410.528971][T24918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5938'.
[  410.772515][T24929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5940'.
[  411.610847][T24944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5944'.
[  411.780041][T24959] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  413.134759][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  413.138262][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  413.141138][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  413.146295][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  413.149654][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  413.244004][T25016] wg1 speed is unknown, defaulting to 1000
[  413.310507][T25030] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5974'.
[  413.336749][T25029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5975'.
[  413.446492][T25044] Bluetooth: MGMT ver 1.23
[  413.522682][T25016] chnl_net:caif_netlink_parms(): no params data found
[  413.620860][T25016] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.623862][T25016] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.626730][T25016] bridge_slave_0: entered allmulticast mode
[  413.630129][T25016] bridge_slave_0: entered promiscuous mode
[  413.634527][T25016] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.637142][T25016] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.639591][T25016] bridge_slave_1: entered allmulticast mode
[  413.642598][T25016] bridge_slave_1: entered promiscuous mode
[  413.662891][T25016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.667737][T25016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.688435][T25016] team0: Port device team_slave_0 added
[  413.692250][T25016] team0: Port device team_slave_1 added
[  413.710600][T25016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.712668][T25016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.721551][T25016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.727462][T25016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.730122][T25016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.739935][T25016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.771023][T25016] hsr_slave_0: entered promiscuous mode
[  413.774421][T25016] hsr_slave_1: entered promiscuous mode
[  413.777146][T25016] debugfs: 'hsr0' already exists in 'hsr'
[  413.778935][T25016] Cannot create hsr debugfs directory
[  413.876846][T25016] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  413.881378][T25016] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  413.886177][T25016] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  413.892615][T25016] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  413.915481][T25016] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.917862][T25016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.920184][T25016] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.922468][T25016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.979366][T25016] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.992219][T19275] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.996639][T19275] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.012417][T25016] 8021q: adding VLAN 0 to HW filter on device team0
[  414.021223][T19275] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.023633][T19275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.031160][T19275] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.033982][T19275] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.177562][T25016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.395091][T25016] veth0_vlan: entered promiscuous mode
[  414.407381][T25016] veth1_vlan: entered promiscuous mode
[  414.456069][T25016] veth0_macvtap: entered promiscuous mode
[  414.461302][T25016] veth1_macvtap: entered promiscuous mode
[  414.477524][T25016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.491571][T25016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.512458][ T5719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.517127][ T5719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.523190][ T5719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.532678][ T5719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.612543][T19275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.622359][T19275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.641639][T19276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.645778][T19276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.714508][T25100] syzkaller1: entered promiscuous mode
[  414.716339][T25100] syzkaller1: entered allmulticast mode
[  415.223604][ T5214] Bluetooth: hci5: command tx timeout
[  415.637036][T25126] openvswitch: netlink: Message has -2 unknown bytes.
[  416.066481][T25148] netlink: 'syz.0.6008': attribute type 58 has an invalid length.
[  416.073257][T25148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6008'.
[  416.231545][T25166] netlink: 'syz.5.6015': attribute type 1 has an invalid length.
[  416.377074][T25189] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6023'.
[  416.412293][T25195] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6025'.
[  416.429763][T25199] ipt_REJECT: TCP_RESET invalid for non-tcp
[  416.431762][T25198] ipt_REJECT: TCP_RESET invalid for non-tcp
[  416.571125][T25213] xt_hashlimit: max too large, truncated to 1048576
[  416.629258][T25223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6034'.
[  416.719700][T25235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6037'.
[  416.890616][T25238] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6038'.
[  417.303213][ T5214] Bluetooth: hci5: command tx timeout
[  417.490147][T25247] xt_CT: You must specify a L4 protocol and not use inversions on it
[  417.507012][T25249] syzkaller0: entered promiscuous mode
[  417.509316][T25249] syzkaller0: entered allmulticast mode
[  417.691349][T25262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.906683][T25284] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6055'.
[  417.977380][T20668] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.980513][T20668] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.984470][T20668] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.991089][T20668] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  418.037628][T25291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6057'.
[  418.061324][T25291] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  418.501281][T25306] netlink: 'syz.0.6062': attribute type 29 has an invalid length.
[  418.506915][T25306] netlink: 'syz.0.6062': attribute type 29 has an invalid length.
[  418.510115][T25306] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6062'.
[  418.651952][T25312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6064'.
[  418.805973][T25328] wg1 speed is unknown, defaulting to 1000
[  418.922911][T25342] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6072'.
[  418.929093][T25342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6072'.
[  418.973848][T25342] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6072'.
[  419.227758][T25361] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6076'.
[  419.257453][T25366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6077'.
[  419.384851][ T5214] Bluetooth: hci5: command tx timeout
[  419.616787][   T57] block nbd3: Receive control failed (result -32)
[  419.941074][T25453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6102'.
[  419.987928][T25455] syzkaller0: entered promiscuous mode
[  419.990024][T25455] syzkaller0: entered allmulticast mode
[  420.227135][T25472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6109'.
[  420.285015][T25474] wg1 speed is unknown, defaulting to 1000
[  421.104221][T25486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6111'.
[  421.235628][T25495] netlink: 'syz.3.6113': attribute type 13 has an invalid length.
[  421.238150][T25495] netlink: 'syz.3.6113': attribute type 17 has an invalid length.
[  421.298539][T25495] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.302972][T25495] 8021q: adding VLAN 0 to HW filter on device team0
[  421.308414][T25495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  421.463486][ T5214] Bluetooth: hci5: command tx timeout
[  422.792730][T25519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  423.003894][T25543] tipc: Started in network mode
[  423.005953][T25543] tipc: Node identity c61ef6854ae3, cluster identity 4711
[  423.008925][T25543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.012749][T25543] syzkaller0: entered promiscuous mode
[  423.015075][T25543] syzkaller0: entered allmulticast mode
[  423.039494][T25543] tipc: Resetting bearer <eth:syzkaller0>
[  423.041995][T25543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.097753][T25542] tipc: Resetting bearer <eth:syzkaller0>
[  423.109709][T25542] tipc: Disabling bearer <eth:syzkaller0>
[  423.222224][T25554] xt_ecn: cannot match TCP bits for non-tcp packets
[  423.312744][T18716] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60
[  423.392874][T25570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  423.395520][T25570] IPv6: NLM_F_CREATE should be set when creating new route
[  423.397768][T25570] IPv6: NLM_F_CREATE should be set when creating new route
[  423.435568][T25571] wg1 speed is unknown, defaulting to 1000
[  423.438618][T25570] wg1 speed is unknown, defaulting to 1000
[  424.325489][T25593] wg1 speed is unknown, defaulting to 1000
[  424.363000][T25594] netem: change failed
[  424.395500][T25594] xt_CT: No such helper "netbios-ns"
[  424.798174][T25609] __nla_validate_parse: 7 callbacks suppressed
[  424.798184][T25609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6149'.
[  426.077015][T25633] block nbd3: NBD_DISCONNECT
[  426.078584][T25633] block nbd3: Send disconnect failed -32
[  426.080597][T25633] block nbd3: shutting down sockets
[  427.016193][T25641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6162'.
[  427.019938][T25641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6162'.
[  427.071040][T25645] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6164'.
[  427.305485][   T65] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  428.011111][T25652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6167'.
[  428.023155][T25652] IPVS: length: 132 != 8
[  429.387701][T25676] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6177'.
[  429.529129][T25687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6182'.
[  429.556837][T25687] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  429.561120][T25687] bond1 (unregistering): Released all slaves
[  429.690701][T25693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.690740][T25694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.128175][T25719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6195'.
[  430.210995][T25721] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  430.582979][T25739] netlink: 'syz.3.6200': attribute type 1 has an invalid length.
[  430.697191][T25743] wg1 speed is unknown, defaulting to 1000
[  430.915454][T25748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6203'.
[  431.089694][T25756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6206'.
[  431.108361][T25756] wg1 speed is unknown, defaulting to 1000
[  431.262139][T25760] netlink: 'syz.3.6207': attribute type 11 has an invalid length.
[  431.341474][T25762] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6208'.
[  431.602592][T25777] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6213'.
[  431.680330][T25781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6215'.
[  432.534988][T25784] xt_CT: You must specify a L4 protocol and not use inversions on it
[  432.760844][T25797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6221'.
[  432.767174][T25797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6221'.
[  434.609840][T25810] openvswitch: netlink: Invalid VLAN frame
[  434.719193][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  434.724672][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  434.727535][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  434.731408][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  434.734994][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  434.758757][T25820] wg1 speed is unknown, defaulting to 1000
[  434.937188][T25820] chnl_net:caif_netlink_parms(): no params data found
[  435.020238][T25820] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.022636][T25820] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.026005][T25820] bridge_slave_0: entered allmulticast mode
[  435.028862][T25820] bridge_slave_0: entered promiscuous mode
[  435.036497][T25820] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.040873][T25820] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.044623][T25820] bridge_slave_1: entered allmulticast mode
[  435.048467][T25820] bridge_slave_1: entered promiscuous mode
[  435.058167][T25844] syzkaller0: entered promiscuous mode
[  435.059909][T25844] syzkaller0: entered allmulticast mode
[  435.074249][T25820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.082307][T25820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.111113][T25820] team0: Port device team_slave_0 added
[  435.114837][T25820] team0: Port device team_slave_1 added
[  435.129305][T25820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.131472][T25820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  435.141921][T25820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  435.149790][T25820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  435.152031][T25820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  435.160003][T25820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.170250][T25846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.183578][T25846] syzkaller0: entered promiscuous mode
[  435.185281][T25846] syzkaller0: entered allmulticast mode
[  435.205572][T25820] hsr_slave_0: entered promiscuous mode
[  435.208801][T25820] hsr_slave_1: entered promiscuous mode
[  435.211755][T25820] debugfs: 'hsr0' already exists in 'hsr'
[  435.214372][T25820] Cannot create hsr debugfs directory
[  435.239705][T25846] tipc: Resetting bearer <eth:syzkaller0>
[  435.337500][T25820] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  435.342380][T25820] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  435.346996][T25820] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  435.351662][T25820] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  435.372184][T25820] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.374663][T25820] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.377111][T25820] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.379271][T25820] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.419466][T25820] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.429928][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.433533][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.442002][T25820] 8021q: adding VLAN 0 to HW filter on device team0
[  435.449748][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.451907][ T7546] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.459084][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.461928][ T7546] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.577316][T25820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.739104][T25820] veth0_vlan: entered promiscuous mode
[  435.745831][T25820] veth1_vlan: entered promiscuous mode
[  435.766626][T25820] veth0_macvtap: entered promiscuous mode
[  435.771043][T25820] veth1_macvtap: entered promiscuous mode
[  435.781543][T25820] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.791169][T25820] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.799246][T18716] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.802239][T18716] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.807161][T18716] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.810021][T18716] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.865270][ T7546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.867861][ T7546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.884120][T19275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.886578][T19275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.972767][T25845] tipc: Resetting bearer <eth:syzkaller0>
[  435.991528][T25845] tipc: Disabling bearer <eth:syzkaller0>
[  436.018678][T25870] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  436.021234][T25870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.186453][T25888] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.189601][T25888] syzkaller0: entered promiscuous mode
[  436.191869][T25888] syzkaller0: entered allmulticast mode
[  436.209794][T25888] tipc: Resetting bearer <eth:syzkaller0>
[  436.220586][T25887] tipc: Resetting bearer <eth:syzkaller0>
[  436.244844][T25887] tipc: Disabling bearer <eth:syzkaller0>
[  436.335744][T25894] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6244'.
[  436.823675][ T5837] Bluetooth: hci6: command tx timeout
[  437.490144][T25947] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6262'.
[  437.501071][T25947] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6262'.
[  437.508227][T25947] IPv6: Can't replace route, no match found
[  437.527337][T25950] netlink: 'syz.6.6263': attribute type 1 has an invalid length.
[  437.548981][T25950] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96
[  437.597391][T25950] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6263'.
[  438.660843][ T5214] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  438.666491][ T5214] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  438.670375][ T5214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  438.675000][ T5214] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  438.679318][ T5214] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  438.706474][T25986] wg1 speed is unknown, defaulting to 1000
[  438.903554][ T5837] Bluetooth: hci6: command tx timeout
[  439.051578][T25986] chnl_net:caif_netlink_parms(): no params data found
[  439.137083][T25986] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.139402][T25986] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.141682][T25986] bridge_slave_0: entered allmulticast mode
[  439.145004][T25986] bridge_slave_0: entered promiscuous mode
[  439.148257][T25986] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.150576][T25986] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.152842][T25986] bridge_slave_1: entered allmulticast mode
[  439.157448][T25986] bridge_slave_1: entered promiscuous mode
[  439.176871][T25986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.181408][T25986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.197646][T25986] team0: Port device team_slave_0 added
[  439.201097][T25986] team0: Port device team_slave_1 added
[  439.220132][T25986] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.222259][T25986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.230853][T25986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.236255][T25986] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.238373][T25986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.246322][T25986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.273959][T25986] hsr_slave_0: entered promiscuous mode
[  439.276414][T25986] hsr_slave_1: entered promiscuous mode
[  439.278566][T25986] debugfs: 'hsr0' already exists in 'hsr'
[  439.280308][T25986] Cannot create hsr debugfs directory
[  439.438760][T25986] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  439.446354][T25986] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  439.463611][T25986] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  439.528638][T26041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6282'.
[  439.560906][T25986] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  439.578317][T26041] macsec1: entered promiscuous mode
[  439.580048][T26041] macsec1: entered allmulticast mode
[  439.610980][T25986] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.613270][T25986] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.615525][T25986] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.617764][T25986] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.696783][T25986] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.719152][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.725913][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.740282][T25986] 8021q: adding VLAN 0 to HW filter on device team0
[  439.759292][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.761509][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.776744][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.778961][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.838022][T26070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  439.840239][T26070] IPv6: NLM_F_CREATE should be set when creating new route
[  439.842651][T26070] IPv6: NLM_F_CREATE should be set when creating new route
[  439.844960][T26070] IPv6: NLM_F_CREATE should be set when creating new route
[  439.864297][T26069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  439.867204][T26069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  439.905968][T26075] veth0: entered promiscuous mode
[  439.911203][T26075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6289'.
[  439.947947][T26075] veth0 (unregistering): left promiscuous mode
[  439.980477][T25986] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.174276][T25986] veth0_vlan: entered promiscuous mode
[  440.182774][T25986] veth1_vlan: entered promiscuous mode
[  440.194483][T26109] netlink: 'syz.6.6296': attribute type 63 has an invalid length.
[  440.223994][T25986] veth0_macvtap: entered promiscuous mode
[  440.235060][T25986] veth1_macvtap: entered promiscuous mode
[  440.249530][T25986] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.259084][T25986] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.270219][ T5719] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.277191][ T5719] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.279838][ T5719] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.292586][ T5719] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.349724][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.352139][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.374141][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.376539][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.495190][T26144] xt_hashlimit: invalid rate
[  440.497178][T26144] xt_hashlimit: invalid rate
[  440.501978][T26144] xt_hashlimit: invalid rate
[  440.505595][T26144] xt_hashlimit: invalid rate
[  440.511621][T26144] xt_hashlimit: invalid rate
[  440.514664][T26144] xt_hashlimit: invalid rate
[  440.525191][T26144] xt_hashlimit: invalid rate
[  440.526878][T26144] xt_hashlimit: invalid rate
[  440.528606][T26144] xt_hashlimit: invalid rate
[  440.530928][T26144] xt_hashlimit: invalid rate
[  440.708481][ T7468] IPVS: starting estimator thread 0...
[  440.745577][ T5837] Bluetooth: hci7: command tx timeout
[  440.815985][T26170] IPVS: using max 83 ests per chain, 199200 per kthread
[  440.979219][T26184] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.981895][T26184] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.984051][ T5837] Bluetooth: hci6: command tx timeout
[  441.282104][T26184] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.308225][T26184] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.609307][T26198] netlink: 'syz.6.6319': attribute type 3 has an invalid length.
[  441.664097][T26204] syzkaller0: entered promiscuous mode
[  441.666589][T26204] syzkaller0: entered allmulticast mode
[  441.670593][T21324] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.811082][T26224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6327'.
[  441.854044][T26226] rdma_rxe: rxe_newlink: failed to add lo
[  442.824463][ T5837] Bluetooth: hci7: command tx timeout
[  442.899336][T21324] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.908294][T26226] bond0: option resend_igmp: invalid value (4096)
[  442.910319][T26226] bond0: option resend_igmp: allowed values 0 - 255
[  442.919207][T21324] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.930504][T21324] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.044619][T26237] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  443.060890][T26234] syzkaller0: entered promiscuous mode
[  443.065779][T26234] syzkaller0: entered allmulticast mode
[  443.067249][ T5837] Bluetooth: hci6: command tx timeout
[  443.988853][T26302] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6351'.
[  444.090635][T26308] netlink: 'syz.7.6353': attribute type 6 has an invalid length.
[  444.312463][T26342] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6364'.
[  444.327977][T26342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6364'.
[  444.543000][T26365] netlink: 'syz.3.6373': attribute type 13 has an invalid length.
[  444.546526][T26365] netlink: 'syz.3.6373': attribute type 17 has an invalid length.
[  444.573726][T26365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  444.904029][ T5837] Bluetooth: hci7: command tx timeout
[  445.004722][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6385'.
[  445.036708][T26401] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.039420][T26401] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.045854][T26413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6388'.
[  445.294741][T26425] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6391'.
[  445.317749][T26430] batadv_slave_1: entered promiscuous mode
[  445.320110][T26431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6392'.
[  445.357371][T26431] batadv_slave_1 (unregistering): left promiscuous mode
[  445.360347][T26431] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.388020][T26433] xt_TCPMSS: Only works on TCP SYN packets
[  445.440627][T26433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6393'.
[  445.795179][T26468] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6407'.
[  445.857175][T26472] bond0: option resend_igmp: invalid value (4096)
[  445.859429][T26472] bond0: option resend_igmp: allowed values 0 - 255
[  446.983389][ T5837] Bluetooth: hci7: command tx timeout
[  447.141344][T26537] __nla_validate_parse: 3 callbacks suppressed
[  447.141353][T26537] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6430'.
[  447.277409][T26555] macsec1: left promiscuous mode
[  447.279192][T26555] macsec1: left allmulticast mode
[  447.509929][T26557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.648009][T26569] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6437'.
[  447.719338][T26573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.722136][T26573] syzkaller0: entered promiscuous mode
[  447.724183][T26573] syzkaller0: entered allmulticast mode
[  447.743838][T26573] tipc: Resetting bearer <eth:syzkaller0>
[  447.788017][T26572] tipc: Resetting bearer <eth:syzkaller0>
[  447.801573][T26572] tipc: Disabling bearer <eth:syzkaller0>
[  448.002516][T26594] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  448.014161][T26594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.017094][T26594] syzkaller0: entered promiscuous mode
[  448.019007][T26594] syzkaller0: entered allmulticast mode
[  448.039880][T26594] tipc: Resetting bearer <eth:syzkaller0>
[  448.044917][T26593] tipc: Resetting bearer <eth:syzkaller0>
[  448.076550][T26593] tipc: Disabling bearer <eth:syzkaller0>
[  448.262225][T26622] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  448.403576][T26643] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6458'.
[  448.406867][T26642] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6458'.
[  448.414304][T26643] wg1: entered promiscuous mode
[  448.415857][T26643] wg1: entered allmulticast mode
[  448.509143][T26649] netlink: 'syz.7.6461': attribute type 1 has an invalid length.
[  448.512188][T26649] netlink: 228 bytes leftover after parsing attributes in process `syz.7.6461'.
[  448.532525][T26649] netlink: 'syz.7.6461': attribute type 7 has an invalid length.
[  449.460317][T26669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6467'.
[  450.821032][T26725] netlink: 'syz.6.6482': attribute type 1 has an invalid length.
[  450.856117][T26725] 8021q: adding VLAN 0 to HW filter on device bond2
[  450.867427][T26726] veth3: entered promiscuous mode
[  450.877114][T26726] bond2: (slave veth3): Enslaving as an active interface with an up link
[  450.882072][T26730] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6483'.
[  450.888958][T26730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  450.927983][T26735] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  450.938361][T26740] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  453.656030][T26790] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6502'.
[  453.689851][T26793] nbd: device at index 6 is going down
[  453.750824][T26799] netlink: 'syz.6.6505': attribute type 21 has an invalid length.
[  453.754397][T26799] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6505'.
[  453.881380][T26815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.896724][T26819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6510'.
[  453.907083][T26816] tipc: Resetting bearer <eth:syzkaller0>
[  453.915755][T26814] tipc: Disabling bearer <eth:syzkaller0>
[  474.991928][T26824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6515'.
[  474.996220][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6515'.
[  475.000634][T26824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6515'.
[  475.012118][T26830] netlink: 228 bytes leftover after parsing attributes in process `syz.7.6514'.
[  475.015761][T26829] netlink: 228 bytes leftover after parsing attributes in process `syz.7.6514'.
[  475.020757][T26829] netlink: 228 bytes leftover after parsing attributes in process `syz.7.6514'.
[  475.023926][T26830] netlink: 228 bytes leftover after parsing attributes in process `syz.7.6514'.
[  475.132455][T26847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.132717][T26846] syzkaller0: entered promiscuous mode
[  475.137624][T26846] syzkaller0: entered allmulticast mode
[  475.145303][T26846] tipc: Started in network mode
[  475.146849][T26846] tipc: Node identity e249fe56b467, cluster identity 4711
[  475.149281][T26846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  475.151960][T26846] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6520'.
[  475.176375][T26851] tipc: Resetting bearer <eth:syzkaller0>
[  475.187732][T26851] tipc: Disabling bearer <eth:syzkaller0>
[  475.337300][T26862] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6526'.
[  475.344628][T26862] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6526'.
[  476.630255][T26901] x_tables: unsorted entry at hook 1
[  477.114444][T26943] netlink: 'syz.3.6556': attribute type 30 has an invalid length.
[  477.118620][T26943] netlink: 'syz.3.6556': attribute type 1 has an invalid length.
[  477.121609][T26943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  477.226325][   T34] INFO: task kworker/u8:8:19060 blocked for more than 143 seconds.
[  477.228838][   T34]       Not tainted syzkaller #0
[  477.230889][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  477.245633][   T34] task:kworker/u8:8    state:D stack:23512 pid:19060 tgid:19060 ppid:2      task_flags:0x4208060 flags:0x00080000
[  477.250234][   T34] Workqueue: netns cleanup_net
[  477.253968][   T34] Call Trace:
[  477.255805][   T34]  <TASK>
[  477.257014][   T34]  __schedule+0x14bc/0x5000
[  477.258838][   T34]  ? __pfx___schedule+0x10/0x10
[  477.260809][   T34]  ? schedule+0x91/0x360
[  477.262248][   T34]  schedule+0x165/0x360
[  477.264749][   T34]  schedule_preempt_disabled+0x13/0x30
[  477.266876][   T34]  __mutex_lock+0x7e6/0x1350
[  477.268735][   T34]  ? __mutex_lock+0x5bb/0x1350
[  477.270597][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  477.272746][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  477.275086][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  477.277588][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  477.279972][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  477.281999][   T34]  ? _raw_spin_unlock+0x28/0x50
[  477.320309][   T34]  rdma_dev_change_netns+0x39/0x300
[  477.322038][   T34]  rdma_dev_exit_net+0x203/0x340
[  477.328082][   T34]  ? __pfx___might_resched+0x10/0x10
[  477.329736][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  477.331482][   T34]  ? net_generic+0x1e/0x240
[  477.332922][   T34]  ? mutex_is_locked+0x17/0x50
[  477.353273][   T34]  ? rtnl_is_locked+0x15/0x20
[  477.354761][   T34]  ops_undo_list+0x49a/0x990
[  477.356174][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  477.357696][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  477.359253][   T34]  cleanup_net+0x4d8/0x7a0
[  477.360690][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  477.362189][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  477.365818][   T34]  ? process_scheduled_works+0x9ef/0x1770
[  477.367628][   T34]  ? process_scheduled_works+0x9ef/0x1770
[  477.369413][   T34]  process_scheduled_works+0xad1/0x1770
[  477.371183][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  477.373771][   T34]  worker_thread+0x8a0/0xda0
[  477.375214][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  477.377139][   T34]  ? __kthread_parkme+0x7b/0x200
[  477.378683][   T34]  kthread+0x711/0x8a0
[  477.379943][   T34]  ? __pfx_worker_thread+0x10/0x10
[  477.381517][   T34]  ? __pfx_kthread+0x10/0x10
[  477.382951][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  477.387250][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[  477.388870][   T34]  ? __pfx_kthread+0x10/0x10
[  477.390295][   T34]  ret_from_fork+0x599/0xb30
[  477.391722][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  477.394369][   T34]  ? __switch_to_asm+0x39/0x70
[  477.395856][   T34]  ? __switch_to_asm+0x33/0x70
[  477.397378][   T34]  ? __pfx_kthread+0x10/0x10
[  477.398807][   T34]  ret_from_fork_asm+0x1a/0x30
[  477.400364][   T34]  </TASK>
[  477.401714][   T34] INFO: task syz.2.4364:19898 blocked for more than 143 seconds.
[  477.410621][   T34]       Not tainted syzkaller #0
[  477.412564][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  477.417752][   T34] task:syz.2.4364      state:D stack:23552 pid:19898 tgid:19893 ppid:5831   task_flags:0x400140 flags:0x00080002
[  477.421446][   T34] Call Trace:
[  477.422497][   T34]  <TASK>
[  477.423882][   T34]  __schedule+0x14bc/0x5000
[  477.425314][   T34]  ? lockdep_unlock+0x89/0x120
[  477.426815][   T34]  ? __ib_unregister_device+0x2cb/0x3f0
[  477.428501][   T34]  ? ib_unregister_device_and_put+0xb8/0xf0
[  477.430392][   T34]  ? __pfx___schedule+0x10/0x10
[  477.431916][   T34]  ? schedule+0x91/0x360
[  477.433784][   T34]  schedule+0x165/0x360
[  477.435090][   T34]  schedule_timeout+0x9a/0x270
[  477.436578][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  477.438222][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  477.439835][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[  477.441671][   T34]  ? wait_for_completion+0x267/0x5d0
[  477.443782][   T34]  wait_for_completion+0x2bf/0x5d0
[  477.445398][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  477.447170][   T34]  ? remove_client_context+0x19c/0x1e0
[  477.448848][   T34]  disable_device+0x1c6/0x320
[  477.450364][   T34]  ? __pfx_disable_device+0x10/0x10
[  477.452201][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  477.454448][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  477.456448][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  477.458525][   T34]  nldev_dellink+0x2d1/0x320
[  477.460247][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  477.462558][   T34]  ? apparmor_capable+0x137/0x1a0
[  477.468323][   T34]  ? bpf_lsm_capable+0x9/0x20
[  477.470269][   T34]  ? security_capable+0x7e/0x2e0
[  477.472304][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  477.474838][   T34]  rdma_nl_rcv+0x6ae/0x980
[  477.476589][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  477.478146][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  477.480184][   T34]  netlink_unicast+0x82f/0x9e0
[  477.482148][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  477.485223][   T34]  ? netlink_sendmsg+0x642/0xb30
[  477.487217][   T34]  ? skb_put+0x11b/0x210
[  477.488790][   T34]  netlink_sendmsg+0x805/0xb30
[  477.490286][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.491968][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  477.494406][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  477.496561][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.498711][   T34]  __sock_sendmsg+0x21c/0x270
[  477.500616][   T34]  ____sys_sendmsg+0x505/0x820
[  477.502569][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.506898][   T34]  ? import_iovec+0x74/0xa0
[  477.508791][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  477.510320][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.512242][   T34]  ? __fget_files+0x2a/0x420
[  477.515641][   T34]  ? __fget_files+0x3a0/0x420
[  477.517579][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  477.519562][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  477.521741][   T34]  ? rcu_is_watching+0x15/0xb0
[  477.524113][   T34]  do_syscall_64+0xfa/0xf80
[  477.525977][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.528408][   T34]  ? exc_page_fault+0xab/0x100
[  477.530326][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.532675][   T34] RIP: 0033:0x7f412318f7c9
[  477.534719][   T34] RSP: 002b:00007f4124065038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.537456][   T34] RAX: ffffffffffffffda RBX: 00007f41233e6180 RCX: 00007f412318f7c9
[  477.539932][   T34] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000010
[  477.542434][   T34] RBP: 00007f41231f297f R08: 0000000000000000 R09: 0000000000000000
[  477.546485][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.548960][   T34] R13: 00007f41233e6218 R14: 00007f41233e6180 R15: 00007ffe45f0b3a8
[  477.551377][   T34]  </TASK>
[  477.552468][   T34] 
[  477.552468][   T34] Showing all locks held in the system:
[  477.585421][   T34] 1 lock held by rcu_exp_gp_kthr/18:
[  477.587121][   T34] 1 lock held by khungtaskd/34:
[  477.588618][   T34]  #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  477.591630][   T34] 2 locks held by getty/5652:
[  477.614377][   T34]  #0: ffff88811397c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  477.617380][   T34]  #1: ffffc9000356e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  477.620468][   T34] 4 locks held by kworker/u8:8/19060:
[  477.622146][   T34]  #0: ffff888100ef7948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  477.633621][   T34]  #1: ffffc90007677b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  477.636854][   T34]  #2: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0
[  477.640448][   T34]  #3: ffff8881b5960700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  477.663645][   T34] 2 locks held by syz.2.4364/19898:
[  477.665807][   T34]  #0: ffffffff99befc98 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  477.669612][   T34]  #1: ffff8881b5960700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  477.683685][   T34] 2 locks held by syz.1.5250/22786:
[  477.685397][   T34]  #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[  477.688369][   T34]  #1: ffff8881b5960700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  477.692075][   T34] 2 locks held by syz.4.5746/24319:
[  477.703997][   T34]  #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[  477.707099][   T34]  #1: ffff8881b5960700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  477.710705][   T34] 2 locks held by syz.0.6067/25328:
[  477.712395][   T34]  #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[  477.724520][   T34]  #1: ffff8881b5960700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  477.728300][   T34] 2 locks held by syz.5.6139/25570:
[  477.730239][   T34]  #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[  477.753298][   T34]  #1: ffff8881b5960700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  477.757211][   T34] 2 locks held by syz.5.6139/25571:
[  477.759362][   T34]  #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[  477.773139][   T34]  #1: ffff8881b5960700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  477.776875][   T34] 2 locks held by syz-executor/25820:
[  477.778593][   T34]  #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  477.781664][   T34]  #1: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  477.793619][   T34] 4 locks held by syz.3.6561/26958:
[  477.795818][   T34]  #0: ffff8881752d0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  477.799795][   T34]  #1: ffff8881752d00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0
[  477.804651][   T34]  #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  477.808586][   T34]  #3: ffff888176541b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  477.812573][   T34] 
[  477.814176][   T34] =============================================
[  477.814176][   T34] 
[  477.817406][   T34] NMI backtrace for cpu 1
[  477.817417][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  477.817430][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  477.817437][   T34] Call Trace:
[  477.817443][   T34]  <TASK>
[  477.817450][   T34]  dump_stack_lvl+0x189/0x250
[  477.817467][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  477.817480][   T34]  ? __pfx__printk+0x10/0x10
[  477.817502][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  477.817516][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  477.817555][   T34]  ? __pfx__printk+0x10/0x10
[  477.817574][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  477.817591][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  477.817604][   T34]  watchdog+0xf3c/0xf80
[  477.817621][   T34]  ? watchdog+0x1e2/0xf80
[  477.817639][   T34]  kthread+0x711/0x8a0
[  477.817655][   T34]  ? __pfx_watchdog+0x10/0x10
[  477.817667][   T34]  ? __pfx_kthread+0x10/0x10
[  477.817681][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  477.817694][   T34]  ? lockdep_hardirqs_on+0x98/0x140
[  477.817706][   T34]  ? __pfx_kthread+0x10/0x10
[  477.817719][   T34]  ret_from_fork+0x599/0xb30
[  477.817737][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  477.817765][   T34]  ? __switch_to_asm+0x39/0x70
[  477.817777][   T34]  ? __switch_to_asm+0x33/0x70
[  477.817788][   T34]  ? __pfx_kthread+0x10/0x10
[  477.817802][   T34]  ret_from_fork_asm+0x1a/0x30
[  477.817826][   T34]  </TASK>
[  477.817830][   T34] Sending NMI from CPU 1 to CPUs 0:
[  477.875515][    C0] NMI backtrace for cpu 0
[  477.875526][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  477.875560][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  477.875565][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  477.875577][    C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  477.875583][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 00000286
[  477.875590][    C0] RAX: 2cf58ac40c3c2b00 RBX: ffffffff8197438a RCX: 2cf58ac40c3c2b00
[  477.875595][    C0] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660
[  477.875599][    C0] RBP: ffffffff8dc07ea8 R08: ffff88812123359b R09: 1ffff110242466b3
[  477.875604][    C0] R10: dffffc0000000000 R11: ffffed10242466b4 R12: ffffffff8f805a70
[  477.875608][    C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000
[  477.875612][    C0] FS:  0000000000000000(0000) GS:ffff88818eab1000(0000) knlGS:0000000000000000
[  477.875617][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  477.875621][    C0] CR2: 000056276e7bb600 CR3: 000000000dd3a000 CR4: 00000000000006f0
[  477.875649][    C0] Call Trace:
[  477.875654][    C0]  <TASK>
[  477.875657][    C0]  default_idle+0x13/0x20
[  477.875666][    C0]  default_idle_call+0x73/0xb0
[  477.875677][    C0]  do_idle+0x1ea/0x520
[  477.875686][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  477.875695][    C0]  ? __pfx_do_idle+0x10/0x10
[  477.875703][    C0]  ? do_idle+0x4f3/0x520
[  477.875710][    C0]  cpu_startup_entry+0x44/0x60
[  477.875716][    C0]  rest_init+0x2de/0x300
[  477.875722][    C0]  start_kernel+0x3ae/0x410
[  477.875734][    C0]  x86_64_start_reservations+0x24/0x30
[  477.875747][    C0]  x86_64_start_kernel+0x143/0x1c0
[  477.875759][    C0]  common_startup_64+0x13e/0x147
[  477.875775][    C0]  </TASK>
