last executing test programs:

1.252747628s ago: executing program 0 (id=620):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000000002010400000000000000000a00000004000180180003801400018008000100ac1e010108000200ac1414aa140002800c0002800500010000000000"], 0x40}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x1d, &(0x7f0000000080), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x8052)

1.250245303s ago: executing program 1 (id=621):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000000c0), &(0x7f0000000080)=@udp, 0x3}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x5}, @in={0x2, 0x4e20, @multicast1}], 0x3c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
pipe(&(0x7f00000001c0))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001300)=@newtaction={0x33bc, 0x30, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{0x3258, 0x1, [@m_nat={0x110, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0xe7, 0x6, "d3322a1db9125987d048be7414ca2e1ef7fff3b21a7416e1ae20a200dfb5a0bde96a0fc6b124142931d845cce66945a92a46415e47ca6f7f0d4bdaaddc8e1b748672a90780ba7a864dc7f064fa534fb48baf7e113c0fc85abcdbc3650bc2f435cb4396c4616ec6c27a8c87bc522fe9d48343b2272f9714617ce9aba0d48bb63b900249e607854d236debb270e0f510fecab10bd88fdf5b9a2e5c47a2b7450f5d8a37aba5192598421cbc21180b00db1750ce564c605a5b9f7d6ece212470499342e9ab99493dc6f688a5e0643149bc0ee46357558d1292296fdac4005d7dbcc0008a82"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0xb9374fb617f4e164}}}}, @m_police={0x1150, 0x20, 0x0, 0x0, {{0xb}, {0x107c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x4, 0x9, 0x0, {0x2, 0x1, 0x48, 0x3, 0x8, 0x7}, {0x2, 0x0, 0x6, 0x200, 0xfbff, 0x3}, 0xc, 0x80000001, 0x40000000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x80000000, 0x4, 0xf46, 0x6, 0xb8, 0x1000, 0x0, 0x2, 0x3de8, 0x740c, 0x1f, 0x5, 0xfffffff9, 0x6, 0x76e, 0xffff, 0x3ff18251, 0x0, 0x8, 0x2, 0xb, 0x10, 0x200, 0x3360, 0x1000, 0x0, 0x912, 0x1, 0x8, 0x4, 0x10, 0x0, 0x4, 0x0, 0x9, 0x3ff, 0x7f, 0x0, 0x0, 0x9, 0x3ff, 0x100, 0x6, 0x71, 0x85dc, 0xe3, 0x7, 0x4, 0xa345, 0x7, 0x8, 0x0, 0x80, 0xffff, 0xb, 0x8, 0x0, 0x8000, 0x4, 0xd892, 0x4, 0x7, 0xff, 0x0, 0x8000, 0x306c, 0xd, 0x1, 0x3, 0xb, 0x7fe0, 0x6, 0x3, 0xfff, 0x4, 0x5, 0xffffff00, 0x4, 0x6, 0x5, 0x90cb, 0x7, 0x6, 0x0, 0x4, 0xa3db, 0x3f0, 0x200000, 0x0, 0x3, 0x5, 0x10, 0x6, 0x1, 0x5, 0x8, 0xa, 0x1, 0x8, 0x4, 0xfffffffb, 0x8, 0xff, 0x5a5600, 0x8, 0x4, 0x9e4, 0x8, 0x0, 0x1ff, 0x101, 0xfff, 0x0, 0x0, 0x8a, 0xffff3044, 0x2, 0x0, 0x0, 0x7, 0xfffffffb, 0x80, 0x4, 0x1, 0x10000000, 0x3, 0x6, 0x3, 0x5, 0xb9, 0x8, 0x9, 0x3, 0x1ff, 0x0, 0x10000, 0x7, 0x3, 0x3, 0x4, 0x3, 0x9, 0x7, 0x5, 0x9, 0x0, 0x8000, 0x8, 0x3, 0x5689, 0x1b6, 0x8, 0x4, 0x0, 0x3, 0x4677, 0x2, 0xffff, 0x5, 0x6, 0x10, 0x6, 0x7fffffff, 0x6, 0x5, 0x2, 0x1, 0x401, 0x0, 0x3, 0xe63, 0x3, 0x4, 0xffffff01, 0x0, 0x29, 0x1, 0x8a, 0x0, 0x9, 0x4, 0xd9, 0x7, 0xec2b, 0x3, 0xfffffe01, 0x4eb, 0x8, 0x800, 0x9, 0x8000, 0x9, 0x9, 0x3, 0x4, 0x8d94, 0x4, 0x8, 0x8, 0x8, 0x8, 0xc, 0x9, 0x7ff, 0x0, 0x33e, 0x8, 0x2, 0x0, 0x7, 0x7, 0x3, 0x5, 0x401, 0xcf4, 0x7, 0x0, 0x7fffffff, 0x3, 0x6, 0xfffff184, 0x80000001, 0x0, 0x5, 0x8365, 0x3, 0x5, 0x5, 0x10000, 0x9, 0x40, 0x35, 0x6, 0x3, 0x0, 0x8000, 0x9, 0xffff, 0x4, 0x8, 0x9, 0x1ff, 0x3, 0x6, 0x2, 0x7, 0x1b0a, 0x2e, 0x1, 0x101, 0x8, 0x80000000, 0x9, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0xb86, 0x2, 0x2, 0x0, 0x10, 0xffffbaa9, 0x1, 0x80000001, 0x0, 0xfffffc01, 0xfffffc01, 0x5, 0x75, 0x3, 0xd, 0x6d4, 0x0, 0x0, 0x2, 0x9b, 0xfffffff2, 0x2, 0x8000, 0x3b6, 0x3, 0x7, 0x138e, 0x2, 0x3, 0x462, 0x0, 0xd6c, 0x3, 0x6fc7037a, 0xf, 0x0, 0x1, 0x80000000, 0x1ff, 0x8, 0xe, 0x4, 0x5, 0x80000000, 0x0, 0xff, 0xce6, 0x0, 0x0, 0x5, 0x6, 0xb166, 0x80, 0x7fff, 0x0, 0x6, 0xad, 0x2, 0x5, 0x4, 0x6, 0x9, 0x1207, 0xf, 0x2, 0x5, 0xf2d, 0x1, 0x1, 0x24d0de5c, 0x1, 0x8, 0x8, 0x31a, 0x3, 0x8, 0xea, 0xc, 0x4, 0x66, 0x1, 0x40, 0x2, 0x4b25a586, 0x7, 0x3, 0xffff, 0xfffffff2, 0xdc7, 0x101, 0x3, 0x80000000, 0x10001, 0x10, 0x2, 0x8, 0x9, 0x7, 0x4, 0x2, 0x0, 0x2, 0x2, 0x29d, 0x2, 0x9, 0x9, 0x5, 0xd2, 0x9, 0x0, 0xff, 0x2, 0x2c, 0x2c3, 0x4, 0x320e, 0x8, 0x40, 0x4, 0xfffffff9, 0x1, 0x62, 0x7f, 0x1, 0x1, 0x1, 0x6, 0x9, 0xc07, 0x3, 0xa1e2, 0x7ff, 0x9b, 0x10001, 0x16, 0x6f1, 0x7, 0x8, 0x1ff, 0x7ff, 0x401, 0x3, 0x9, 0x2, 0x728, 0xf, 0x7fff, 0xfffffae5, 0xc00, 0x6, 0x3, 0x3, 0x4e7f, 0x0, 0xf, 0xb, 0x1, 0xc97, 0x6, 0xea98, 0x3, 0x9, 0x1, 0x0, 0x8, 0xa3c, 0x9, 0x4, 0x4, 0x4, 0x6, 0x101, 0xa, 0x1000, 0x90e, 0xee, 0x2, 0x8, 0x2b, 0x7, 0x3, 0xb, 0x2f08, 0x7, 0x6, 0x9, 0x5, 0x8, 0x80, 0x4c2171e6, 0x4, 0x3, 0x5, 0x101, 0x2, 0x401, 0x3, 0x89aa044a, 0x7, 0x400, 0xff, 0xe13, 0x9, 0x5, 0x1, 0x10000, 0x8001, 0x80000001, 0x0, 0xffffca52, 0x400, 0x7d, 0x5, 0xffffffff, 0x8001, 0x7ff, 0x2, 0x3, 0x1, 0x4, 0x81, 0xfff, 0x3, 0x7, 0x6, 0x3, 0xa08, 0x8, 0x8, 0x101, 0x80000000, 0x8000, 0x4, 0xffffffb5, 0x0, 0x80000000, 0xfff, 0x3, 0x1, 0x5, 0x2, 0x4, 0x1, 0x3, 0x71cf36d1, 0x4, 0x5, 0x2, 0x2, 0xb59, 0x3, 0x101, 0xae6a, 0x6, 0xffffffb8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffc, 0xe9, 0x8, 0xf, 0x8, 0xffffc42d, 0x0, 0x7, 0x6, 0x9, 0x6, 0xd, 0x200, 0x9, 0x9, 0x7fffffff, 0x3ff, 0x5, 0xa, 0xfffffffc, 0x4, 0x7, 0x7f, 0x8, 0x0, 0xb2b, 0x3, 0x7, 0x9, 0x0, 0x9, 0x1, 0x7, 0x8d, 0x8, 0x80, 0x101, 0x1, 0x9, 0x8a, 0x4, 0x4, 0xffffff9c, 0x4, 0x4, 0xfffffeff, 0xb, 0xffffffff, 0x6, 0x7fffffff, 0x3, 0x9, 0x5, 0xf5, 0x3, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x7, 0x29b1d0be, 0x7, 0x9, 0x0, 0x8, 0x8, 0x9, 0x7f, 0x8001, 0x6, 0x7, 0x1, 0x6, 0x8, 0xfffffff7, 0x5, 0x8, 0x5, 0x432, 0xffffffff, 0x9, 0x80, 0xe, 0x9a, 0x7f, 0x6, 0x4, 0x5a277210, 0x9, 0x7f, 0x3, 0xd1, 0xa5, 0x1, 0xfff, 0x7a4014fb, 0xc8f1, 0x7, 0xffff8c32, 0x401, 0x3, 0x2, 0xcc29, 0x1, 0x5, 0x7, 0x2, 0x37e0f88f, 0x0, 0x8, 0x8000, 0x1, 0x8, 0x6, 0x0, 0x3ff, 0x6, 0x9, 0xa1, 0x1, 0xfffffffd, 0x100, 0xf1, 0xfff, 0x3, 0x0, 0x6, 0x3, 0x81, 0xff, 0x1, 0x400, 0x9, 0xd, 0x9, 0xe5, 0x5, 0x0, 0x9, 0x6bb2aaac, 0x8, 0x3eaeaaf4, 0x3ff, 0x6, 0x38, 0x1, 0x0, 0x1, 0x7, 0x1000, 0xac, 0x81, 0x6, 0x5, 0x3, 0x9, 0xfffffffc, 0x6b, 0x3, 0x0, 0x8, 0xffffffd3, 0x77, 0xc9f, 0x3, 0x7, 0x6, 0x6, 0x9, 0xfffffffe, 0x3, 0x4, 0x7, 0x9, 0x25, 0xfffffffc, 0x615, 0x0, 0x4, 0x5, 0x3, 0x9401, 0x7fff, 0x5, 0x6, 0x8, 0x9bbf, 0x4, 0x9, 0x7, 0x5, 0x0, 0xd2bc, 0x80000001, 0x6, 0x7, 0x8, 0x1, 0x2, 0xed1, 0x5, 0xfffffe00, 0xfff, 0x0, 0x6, 0x9, 0x9, 0x8, 0x1, 0x40, 0xfffffff4, 0x0, 0x5, 0x800, 0x800, 0xff, 0x161d, 0x6, 0x1, 0x6, 0xa, 0x0, 0x8, 0x3, 0x4, 0xff00000, 0x15990e31, 0xe, 0x7, 0x0, 0x81, 0xf, 0x4, 0x4d3e, 0xb41, 0x81, 0x400, 0x20000, 0x0, 0xa0a1, 0x8, 0x3ff, 0x2, 0x4, 0x7, 0x5, 0x0, 0x7, 0xfe3, 0x12e, 0xfffff001, 0x4, 0x7, 0x5, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x3, 0xa1c6f46, 0xeb1, 0x9, 0x0, 0x5, 0x8, 0x8c, 0x3, 0x10, 0x0, 0x9, 0x7b2, 0x6, 0x194, 0x5, 0x1, 0xffffffff, 0x6, 0xf, 0x1, 0x2, 0x2, 0x2, 0x4, 0x2, 0x5, 0x4, 0x4, 0x10, 0x801e, 0x7fffffff, 0x28, 0x6, 0x9, 0x4a, 0x101, 0xa, 0x2, 0x0, 0xd, 0xfff, 0x6, 0x101, 0x8, 0x6, 0x400, 0x0, 0x4a, 0x101, 0xd4fa, 0x100, 0xc, 0x2, 0x1400000, 0x7, 0x10000, 0x8001, 0xdc0f, 0x2, 0x4, 0xfffffff7, 0x2c, 0x2, 0xb5, 0x9, 0x5, 0x0, 0x3, 0x2, 0x3, 0x4, 0xb, 0x2, 0x3, 0x80000000, 0x10000, 0x6, 0x1, 0x400, 0x10000, 0x7f, 0x3, 0x100000, 0x5, 0x0, 0xf7dd, 0x0, 0xff, 0x9, 0x0, 0xfffff704, 0x4, 0x8, 0xfa, 0x4a5, 0x7, 0x2, 0x6, 0xf9, 0xfffffff0, 0x9, 0x49, 0x10000, 0x6, 0x5, 0x8000, 0x6, 0x1, 0x77, 0x8, 0x100, 0x80000000, 0x1, 0x1, 0x10001, 0x3, 0x1, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0xaa, 0x8, 0x0, 0x7e2, 0x8, 0x800, 0xc, 0x1, 0x90, 0xfffff001, 0x40, 0x6, 0x6, 0x6, 0x8, 0x0, 0x1, 0x7, 0x3, 0x1, 0x1, 0x0, 0x2, 0x277, 0xfe, 0x4, 0x400, 0x1ff, 0xfffffffa, 0x8, 0x8, 0x7, 0x0, 0xffffff3f, 0x80000000, 0x4, 0x0, 0x8, 0x2, 0xffff, 0x10, 0xfffffffa, 0xfffffff7, 0x2, 0x23d, 0x7, 0x5, 0x55, 0x4, 0x100, 0x2, 0x2, 0x5, 0xe9, 0x0, 0x10000, 0x4, 0xe, 0x0, 0x200, 0x7fff, 0xe, 0x601, 0x50, 0x8, 0x8, 0xffff, 0x7, 0x48b, 0x7, 0xff, 0x9, 0x3, 0x9, 0x4, 0x4, 0x2, 0x8, 0x9, 0xe14, 0x2de4, 0xe7, 0xffff0000, 0x81, 0xc35, 0x5, 0x7f, 0x3, 0x80000001, 0x2, 0x5560, 0x721, 0x4, 0x0, 0x3, 0xfffffc00, 0x6000, 0x6, 0xf1f2, 0x90f2, 0xfffffff9, 0x4e, 0xaa5, 0xaf0, 0x8, 0x4, 0x5, 0x1, 0x4, 0x80000001, 0x9, 0xfffffff1, 0x6, 0x1ff, 0x8, 0x1000, 0x9, 0x5, 0x0, 0x1, 0x4, 0x9, 0x7fffffff, 0xb, 0x80, 0x0, 0x8, 0x81, 0x800]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}]]}, {0xac, 0x6, "74d99b25ad1586def4a3689863f12b9b73cc633e33fd8311fabf0a93160a0d7e86dd2cae510da7b399311ecd96cf4d1c00d844f363295e89ac797f567bba364bd4d943e25b42567e7ee25bc4bbe0b01f584920f5aa743c583458eaa70161a66fb3e657fc7ccfcf6f4f73c5e1a32fd40d828a883c43d9376a669786b3bb6070d4468ffb7cb5b96cca210128b0fee1805621b081734d1fc74a8b13dccaa9adbaac902b9311cca93a1b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xd10814679d2879e4, 0x3}}}}, @m_mpls={0x138, 0x8, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5667c}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a03, 0xf63, 0x6, 0x8, 0x5}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x17c0d}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbdf38}]}, {0xce, 0x6, "8bfc6d09be0f7891104b3d14b37f36ef052928117bf3fff38b6edd14e712f8752f63faca76fc301576b896ae5e5ba87b63d86587aabc64178d4edac21d9bc33c3f74da040bbacf5ad330a5695793e9dc0bb6251c3522d4f9c97cd3537f05e236c64dca80192a724c5a3bf84da3b0a741a34ef5e6ef9ef49cb9e616ec4f687b52769b72709e0e512f3c723630103945d7d175c720d99a71efab4add72c6ebd294b7403921f7299d7430ab9001565bcdf737e98ec0ea0acf96c6a37e87e033f90a611c52800a14f4511887"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x1dcc, 0x1e, 0x0, 0x0, {{0xb}, {0xda0, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x4, 0x4, 0x800, {0x6, 0x1, 0x3, 0x4, 0x15f9, 0x1054f814}, {0x9, 0x1, 0x6, 0x8001, 0x424d, 0x8}, 0x7, 0x9, 0xffffff81}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4a9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xdcb4}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0xffff64a8, 0xfffffffa, 0x1, 0x7, 0x81, 0x7fffffff, 0x400, 0x3, 0x8000, 0x1, 0x6e, 0xfff, 0x4, 0x4, 0x4, 0xd, 0xfffffffe, 0x4, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0xffffff80, 0x80000000, 0x7, 0xfffffffc, 0x0, 0x7, 0xffffffff, 0x10000, 0x8, 0x2956, 0x40, 0x3ff, 0x0, 0x7, 0x8, 0x0, 0xffff, 0x53, 0x6, 0x2, 0x9, 0x7fff, 0x4, 0x2e, 0x2, 0xc, 0x80, 0x4, 0x3ef, 0x2b, 0x9, 0xfffffffe, 0xffffffe7, 0x7e2, 0x0, 0xffffffff, 0x7ff, 0x3, 0x5855, 0x37ba, 0x4, 0x6, 0x61, 0x9, 0x400, 0x1, 0x9, 0x13, 0x7, 0x5, 0x4, 0x9, 0xc, 0x4, 0x100, 0x5, 0x0, 0x6, 0x6, 0x7f23, 0xfffffffe, 0xffffffff, 0x81, 0x7, 0x4, 0x7f, 0x200, 0x5, 0x800, 0xb361, 0x6, 0x8, 0x0, 0x6, 0xbed62ad, 0x1ff, 0x1, 0x536, 0xfffffffe, 0x5, 0x4, 0x9, 0x3, 0x2, 0x3, 0x4, 0x7fff, 0x8, 0x7, 0x8, 0xc6b, 0x9, 0xfffff800, 0x6, 0x2, 0x3ff, 0x135, 0x0, 0x0, 0x100000, 0x7f, 0x1ab, 0x4, 0xa, 0x388, 0x80000001, 0x0, 0xc58c, 0x2b, 0x6, 0x8, 0x3, 0x455, 0x10000000, 0x8, 0x0, 0x5, 0x9, 0x1b65ac36, 0x4, 0x101, 0x2, 0x6, 0x10000, 0x4, 0x8, 0x6, 0x401, 0x0, 0x9, 0xfa, 0x3, 0x273, 0x9, 0x7, 0xfffffffe, 0x2, 0xfff, 0xf2, 0x3, 0x4, 0x7, 0xda9, 0x80000001, 0x10001, 0x6, 0x4, 0x100, 0x0, 0x956, 0x2, 0x183, 0x6, 0x7ff, 0xfffffff9, 0x0, 0x5, 0x24f4, 0x0, 0x40, 0x6, 0xf, 0x1, 0x9, 0x863, 0x0, 0x1, 0x7fff, 0x10001, 0x2, 0x200, 0x4, 0x6, 0x1, 0x9, 0x1, 0x2, 0x8, 0x1, 0x6b88, 0x6, 0xffffffff, 0x7, 0x1604555d, 0x7, 0xe088, 0xf7d, 0x8, 0x5, 0x4, 0x5, 0x6, 0x8000, 0x6, 0x5, 0x174, 0x80000001, 0x1cef, 0x4, 0x7fffffff, 0x1, 0xa5, 0x4, 0xcbd, 0x1, 0x6, 0x75, 0x7fff, 0x9, 0x5, 0x10000, 0xc262, 0xec, 0x5, 0x3, 0x1, 0x5d, 0x3ff, 0x0, 0x4, 0xa, 0x5, 0xfffffff9, 0x9, 0xfffff001, 0x19, 0x80000, 0x4, 0x401, 0x401]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x87}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x0, 0x0, 0x3, {0xa8, 0x2, 0x3, 0x9, 0x8, 0xffffffff}, {0x6, 0x0, 0x7f, 0x8, 0x80}, 0x9, 0x590e, 0xffff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x7fff, 0x29f7, 0x3, {0x7, 0x2, 0x800, 0x9, 0x3, 0x11baf424}, {0x8, 0x2, 0xa, 0x100, 0x5, 0x6}, 0x8, 0x5, 0xfffff52a}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8001}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x85, 0x3, 0x1, 0x1424, 0x9, {0x8, 0x0, 0xe9, 0x7, 0xf1, 0x9}, {0x5c, 0x2, 0x1718, 0x200, 0x9, 0x6}, 0xf2d9, 0x0, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x5, 0x3, 0x7, 0x40, 0x8, 0x8, 0x3, 0xfffffffd, 0x8, 0x100, 0x5, 0xe0000000, 0x1, 0xfff, 0xf0, 0x7, 0x32, 0x7, 0x162, 0x8, 0x5, 0x8001, 0x5, 0x2, 0x7, 0xbae, 0x100, 0x5, 0x401, 0x7fffffff, 0x8000, 0x6, 0xfff, 0x40, 0xdae00000, 0x1ff, 0x4, 0x4, 0x5, 0x80, 0x8001, 0xf0db, 0x20000, 0x8, 0x1c00, 0x7f, 0x6d, 0x81, 0xd50, 0x7, 0xe, 0x4, 0xa8, 0x80, 0x94, 0x9, 0x101, 0x0, 0x2, 0xfffffffa, 0x8, 0x7, 0x2, 0x2c6aeafe, 0x8, 0x4, 0x0, 0x3, 0x6, 0x80000000, 0x9, 0x4, 0x136f, 0x2, 0x7e, 0xf5f, 0xf5, 0x60, 0xa, 0x6, 0x8, 0x8000, 0x4, 0xfffffff2, 0x7, 0x9, 0xceb, 0x80, 0x3, 0x4, 0x10000, 0x80000001, 0x1d, 0x2b18, 0x2, 0x101, 0x6, 0x1, 0x6, 0x0, 0x9, 0x8, 0x1, 0x9, 0xe, 0x800, 0x6, 0x200, 0x101, 0x4, 0x2, 0x3, 0x0, 0x9, 0x9, 0x288ad828, 0x5, 0xfffffa66, 0xd8e4, 0xd, 0xe1d, 0x8, 0xb3, 0x9, 0x1, 0x200, 0x3, 0x5, 0x5, 0x7f, 0x9, 0x67e, 0x28, 0x1, 0x354, 0xffffff76, 0x1a, 0x7fff, 0x216, 0xfffffffe, 0x7ff, 0xbea, 0x77a, 0x6, 0x8, 0xb4f, 0xe4e5, 0x10, 0x6, 0xed4, 0xb, 0x2, 0xfffffbff, 0x4, 0xfff, 0x6, 0x8001, 0x2, 0x400, 0x2, 0x1, 0xfffffff9, 0x10, 0x7, 0x5, 0xfffffffd, 0x2efa, 0x10, 0x68, 0x4, 0x81, 0x0, 0x1, 0x4, 0x1, 0x8, 0x6, 0x3756, 0xfffff315, 0xa, 0x60, 0x1, 0x3, 0x8a1, 0x1, 0x1569, 0xb, 0x175, 0x401, 0x1a7, 0x6, 0x9, 0x3, 0xfffffffa, 0x5ee60fd6, 0x4, 0x58ee6249, 0x7, 0x1ff, 0x9, 0x0, 0x8, 0x2, 0xffff0001, 0x1, 0x7f, 0x9, 0xd44, 0x4, 0x3, 0x4, 0x1f541ccc, 0x2, 0x51, 0x76, 0x7c, 0x81, 0x5, 0xb, 0x22ec, 0x3, 0x6, 0xb6, 0x0, 0x67, 0xc222, 0xf, 0x2, 0x3, 0x800, 0x3, 0x6, 0x9, 0x8, 0xd, 0x1, 0x200, 0x8, 0x1, 0x6, 0x1, 0x3, 0x81, 0xbe, 0x0, 0x3, 0x2fe3, 0x5, 0x5, 0x0, 0x5, 0x4, 0xfffffff9, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffffff9, 0x0, 0x4, 0xfffffff7, 0x2, 0x2717, 0xb97c, 0x10001, 0xfffffffb, 0x5, 0xf4e2, 0x3, 0xc, 0x9, 0x5, 0x0, 0x2, 0x2, 0xb, 0x5, 0x5, 0xd5, 0x2006, 0x5, 0x7ff, 0xffff, 0x2, 0x7, 0x6, 0x4, 0x400, 0x5, 0x5, 0x0, 0x0, 0x4, 0xfffffffd, 0x5, 0xf, 0x1, 0x4, 0x2, 0x7, 0x7, 0x7, 0x4, 0x400, 0x4, 0xf29, 0x7, 0xfffffffc, 0x5a, 0x5, 0xc, 0x3, 0x5, 0x5640, 0x9, 0x4, 0xc, 0x6, 0x7f, 0x6, 0x9, 0x6, 0x81, 0xa9, 0xa, 0x1000, 0x1, 0x6, 0x2, 0x72c, 0x7, 0x2, 0xf4d, 0x1, 0xb0, 0x67d9, 0x2e7, 0x0, 0x2, 0x4, 0xf1, 0x1, 0xa7e, 0x5, 0x9, 0x100, 0xafb5, 0xfffffff9, 0x6, 0x7, 0x0, 0x401, 0x2, 0x7, 0x6, 0xff, 0xff, 0x4, 0x81, 0x7, 0x82d4, 0x400, 0x1, 0x9, 0x8, 0x46, 0x5, 0x12bebcf5, 0x7, 0x7, 0x1ff, 0x9, 0x3ff, 0x2, 0x9, 0x9, 0x0, 0x9, 0x2, 0x8, 0x4a, 0x3, 0x3, 0x7f, 0x9, 0x10, 0x7ff, 0xdba, 0x3, 0x9, 0xd, 0x7, 0x8, 0x7, 0x0, 0xa02, 0x8, 0x6, 0x4, 0x3, 0x0, 0x2, 0x7, 0xffff, 0x0, 0x5, 0x7, 0x3, 0x8, 0x9bc, 0xc, 0x1000, 0x7ac, 0x1, 0x1ee, 0x800, 0x2, 0x401, 0x400, 0x6, 0x8, 0xa, 0x7, 0x1, 0x1fc6, 0x89d0, 0x4, 0x1c000, 0x6584, 0x10, 0x9, 0x1ff, 0x7fff, 0xffff, 0x7, 0x7fffffff, 0x5, 0x2, 0x9, 0x100, 0x200, 0x5, 0x4, 0xe80, 0x4, 0x1, 0x9, 0x4, 0xd, 0x1, 0x352, 0x3, 0x4, 0x9, 0x1, 0x1, 0x1, 0x800, 0x2, 0x4d7, 0xfffffffa, 0x80000000, 0x9, 0x0, 0x84, 0x1, 0x7fffffff, 0x4d9, 0xfffffe00, 0x5, 0x2, 0x0, 0x8, 0x4, 0x8, 0x7f, 0x800, 0x1, 0x98dc, 0x7, 0x4, 0x7, 0x800, 0xe3b, 0xfffffff8, 0x66, 0x4, 0x8, 0x3c, 0x6, 0x5, 0xfff, 0xa911, 0x9, 0x7, 0x8001, 0xffffff6a, 0x1800, 0x7fffffff, 0x0, 0xfffff0f0, 0x7, 0x7, 0x5, 0x120, 0xffff, 0xffff8000, 0x69, 0x1, 0x1, 0x3, 0x1]}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xf0, 0x3, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x58ee}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x8000, 0x3, 0x4, 0xffffff81}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x91b0}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0x72, 0x6, "a196c2dc1ba9f53aef3ed7a79dbca8d3b6027e40a746a1ebfa9d10e970cbbe9cffb01ae50f972af350f1e81cf0f84ee207818f69532ace89a0518b9593930652f9098f9d1394c955a7a89f12bb1042e0e093fd7f1c26a706ce87c0c60e6195b4808d6769f0e9e12b75c3305f41a0"}, {0xc}, {0xc}}}]}, {0x150, 0x1, [@m_skbedit={0x14c, 0x7, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xf}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fffffff, 0x0, 0x4, 0x7ff, 0x56f7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfff8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0xdf, 0x6, "ef05cfa92d77b6e95917b4047c854ac9b854714ac4023b4d16e83da32ade4959f4db2a38ae384d0444cab3ce44a1719d1e70fc37f269ed379378827f0c12dee8bced58ccf6474c64874c8d7dc08a4492e405ed8eb56dc04d2c2db9f749d5b0d401ef760732e70dbb432b1eceee1028ef01d0127076c939ef9a317e830a14f46f398fd219088d696b5d9ed2a57e592d27529261284849e78ec022b663fe565befa9d25d8876a44b63c3158616ebfc32f8119dbf5f5e520283506b22ff0e56302931ff6ed3d26c83e2c62b5c218d331262b6b32d5c6ad365a4f72fa4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x33bc}, 0x1, 0x0, 0x0, 0x80}, 0x2400c045)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x800)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x503, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x22080, 0x11844}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004800}, 0x800)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', <r10=>0x0, 0x700, 0x80, 0x7, 0xee26, {{0x1c, 0x4, 0x1, 0x8, 0x70, 0x65, 0x0, 0x2, 0x4, 0x0, @empty, @private=0xa010102, {[@end, @lsrr={0x83, 0x7, 0x8c, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x7d, 0x3, 0x9, [{@remote, 0xffffffff}, {@rand_addr=0x64010100, 0x7}, {@loopback, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@private=0xa010101, 0x2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xe7, [@broadcast]}, @timestamp={0x44, 0x8, 0x51, 0x0, 0xb, [0x80]}, @timestamp_addr={0x44, 0x14, 0xe3, 0x1, 0x2, [{@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xbc7}]}}}]}, 0x40}}, 0x0)

1.102585387s ago: executing program 0 (id=623):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELCHAIN={0x16c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x88, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7708ad88}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2371446}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64d31541}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8ac544b}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}]}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3c71050e}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ed8eac3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x36c0112b}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x77841b5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1d209767}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0x1f0}}, 0xc000810)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4)

1.040373908s ago: executing program 1 (id=625):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x7, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10, r2}, 0x94) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0xfff, 0xffff, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3e}}}}}) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400010026bd7000f8dbdf250a2000ff", @ANYRES32=r6, @ANYBLOB="080008000306000014000200ff"], 0x34}, 0x1, 0x0, 0x0, 0x4c051}, 0x4) (async)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000003800)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1b, r6}) (async)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r9 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x80, 0x80800)
bind$netlink(r9, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000040)={'dvmrp1\x00', @remote}) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002cbd7000fddbdf2509000000050007000000000008000100010000000500080012000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r13=>0x0}) (async)
r14 = gettid()
syz_open_procfs$namespace(r14, &(0x7f0000000200)='ns/pid\x00') (async)
r15 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES16=r12, @ANYBLOB="04002cbd7000fc2c78c6013cf32e3c90ffc5509f251400000008000300", @ANYRES32=r13, @ANYBLOB="08001c00", @ANYRES32=r14, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c0006000300000003000000080001000000000008001c00", @ANYRES32=r15, @ANYBLOB="080001000200000008001d00", @ANYRESDEC=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x890)

972.208328ms ago: executing program 1 (id=626):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000002800)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000010000400"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', <r5=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@local, @loopback, <r6=>0x0}, &(0x7f00000001c0)=0xc)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@loopback, <r7=>0x0}, &(0x7f0000000240)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000340)={'syztnl0\x00', <r8=>0x0, 0x80, 0x20, 0xd8, 0x8, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x65, 0x0, 0x13, 0x4, 0x0, @remote, @private=0xa010102, {[@ssrr={0x89, 0x1f, 0x86, [@local, @broadcast, @local, @multicast1, @multicast2, @multicast2, @multicast1]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xe2, [@loopback, @remote, @remote, @empty]}, @generic={0x94, 0xa, "68fcf38f78dc4a67"}, @cipso={0x86, 0x16, 0x3, [{0x6, 0x7, "43fe7e450f"}, {0x0, 0x4, "8f0e"}, {0x2, 0x5, "b45c15"}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0xf8, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1c1}, 0x4000010)

971.566325ms ago: executing program 0 (id=627):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0xffff8000, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x816)

914.910915ms ago: executing program 0 (id=629):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16], 0x17c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a32"], 0xa0}}, 0x40880)

914.1013ms ago: executing program 1 (id=630):
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xba2ceb09c15e9291}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x3, 0x8}}]}}]}, 0x64}}, 0x0)
r4 = socket$phonet(0x23, 0x2, 0x1)
sendmmsg(r4, &(0x7f0000000380)=[{{&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x5, @mcast1, 0xb}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="769a042ba8ee960a1e661b4d6bfa44353714b6b485277d82bcba1cbf13b42d8c837ddc0eeaad5a29833542618ca347186e818d0cef5aed9f639ea2ae9c783ce62bc9368faeedd8d57dd11907e63056365602cf830fc4e005dba9945dcf4d501a690492714b3781099c5674d2efbea473d3ba74bbddc4976e9f15823e67ec15d227a76f9f5805a016e0f3e81ffe4b1705a83d81936c831ec534e5d6f582cebcb5336f0b6610e66b438bdbbfa54458d48dad9547", 0xb3}, {&(0x7f0000000240)="431d2eb59eb6e9458cb5b061e540265d5327875bc92a14cd1511843472077a23b3e36d242fbc4996461d6ae58d8eed7c5060c904035cffd4532dbd0b74e8cefdd2f4485124c25133e0d2532743b0f48b1fa8fd6f50e1b0a8f1085358c8194f439c2169a05f37d69466fa9a1354bf623363ff9632b3accf0d6f777fb52fcc960db77ad22133fc1642164743e77865c5441d4d2604b5393208bcceacd13e7c84ff9f21c7820dd8f02ea527ca3023724d567c2de97289eb248e1793057b79be923f5434b01ff0bd07a376644623fb0cf9e21057a5e4fda10e1099d7a467e2b14dbdd1", 0xe1}], 0x2, &(0x7f0000000840)=[{0x60, 0x113, 0x7ff, "05b5fb8235cad04c946e5ded74d502629c17abddb236f71fa97b68f3223ad4f13ef5a7ff61fbd4a26dcd91d3b4e876a14077ed6c4603462e2bf20c0d1f75e3703787d6626e96d5009d73930ba365"}, {0x70, 0x10c, 0x67, "80610e7d4649afef3652be86a11dd89a85eac9997575bd353143e9ce0dcccdd9f6d3d42bf90d8373097c41bf2641fcfa7ee36a52d479b409b47c408bb012578caead1a4298def2e163952b1746d32692287456f657128d0c338f"}, {0x30, 0x84, 0x100, "0abd88e3cf78d23563dc3c80e5a999cad838e705329c9f511a9a"}, {0x108, 0x6, 0x0, "817d604fbce5e5d42fea66e78273f647939a1a4af7c4a1dbf6919e26924fbe73200c5eb666251d731ffcfbe754e15f90e004172067fd73ef5ebf0c846c386d1fafa1f49b927d36dcaf00ff6b5fde0a2a3dc9e7e974947501720cee16b7206bd58b444f5e34d4308da08bf901356b6cad58f06591b6d0e29e71b44c64e520dfb8cebd45f5124af0c881935e8967dea5d509a8cb2ed288fc6a2bf0f7c89d4490fa6efd9b22dd510d69db4e4fadf0f09839398b566d5f66df0c7157cf25d97e0db7d93f60033f15972396e8406ad33b3288577d4a26a579ba6b254b8277bb8a7b8370ceede27f0f8b31cb4d2a073c735de81aa6"}, {0xe0, 0x10f, 0xfffffffa, "6f6b9bb202a90fc99a4f40ae207123683bf99cef97bf7797ffcc5e3af52f8335a978ab80c6a2d718a496df577b913e485ad1cc4b103b04de305641e66c5378153d53e87c04932fb46c78ecadf0ff61b81d585dddb6456affd8a031e8a9e30fc304c308cc4cda81c019fc58b3c0cac00212399103eb741d79d8701cc5a7daffb731eea277283df90013be57737316e87b91fd91efc5dcef717a3d130256849d7e0edd06d0dd4a39fc645cb153a19238408ab0d7feb42cc715ea5e2ddfbebe8634c75306cf0e8bf3e1f271"}, {0x1010, 0x29, 0xb, "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"}, {0xe8, 0x103, 0xa00, "0922cbe9b22147c5b4aad5f5884d55b92b19c9bc35c3e1b164ac9a669f26f50e24e682137aa0ca8b087a68764d81648c102496300c642ef569af10eba5291a754db49dd28a171bcc584c1c8c5e14577be0ccccd8d132d50c6c548fd04957274d969ef02af6e9ec18109b644437ca8461d35de97c7a1c84f948ecab6992b2be561cf5f9476f3027a2fec35ab28ee037b4d071ff38707b9af5ef6e8240dadad10513f5a575c0c1a423d85b9ee84798a1d069993304b23d727c0ad385c37acb825bc8a976501e9eed7bbe162dc7815e2adb9fed02e4"}, {0xe0, 0x22a, 0x8, "aa208f55422192d52aebd5fde8e239c6984bd3db9df657a5bba3d1d6b85ebf251664a3fb2269c0854ce27b0db3118722b535f61fc8d9263164c79715ca4a7860f2dd6bae9a7efefb8e729f26179849a2f7c43faf0ad2ff599f64a44095b5fdd6fa5f8f2e460ec4ed832f213963cd8d07b54e0a51763d9275dd75d0dff36e8fc15a3fa341ed15951070fa5ac1de7c0c290775c534def41aa39fb9a4b54c18c27a7ab87df1ccd0f418b498a5bc88c9b7386571be15d48343341c705e8db47d8f9e94a7d90510f897889116e9cf518d"}, {0x20, 0x105, 0x0, "7f2c2dba12073ff88151983c16ed"}, {0xd0, 0x10a, 0x8, "97ceb6e7c6befa4d02f6a56d4e3a1ef21b31c6c35a64131bb0119c58a02191e5de61708abae36bf1869bff899b76a147629428ba22f336deb3e97af7f396eb3f3780301dc1487e65c41647af00cb8e77ca874706d163f255ad1ec2051d4968a6a3c542b88a6261022ac9162696bef3f0680067d38934c3c21a345e53cc961889e3cd104e18d45aaa9242b18a44929fcbf7bd8fa63205a3d520f36ef4a54367e223b9f6f30dd461a80814a46feb12b642812ac736eab11a7b0d2b29"}], 0x15b0}}], 0x1, 0x20000800)
sendmsg$key(r0, &(0x7f0000000080)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0xffffffffffffffa6}}, 0x4000000) (async)
sendmsg$key(r0, &(0x7f0000000080)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0xffffffffffffffa6}}, 0x4000000)

913.289652ms ago: executing program 0 (id=631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x41100, 0x6, '\x00', r1, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$alg(0x26, 0x5, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x4d, '\x00', 0x0, r3, 0x3, 0x4, 0x5}, 0x50) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f0000000240)}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
r4 = socket$inet(0x2, 0x2, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x300008c4}, 0x4054)

834.585231ms ago: executing program 2 (id=632):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

834.18995ms ago: executing program 1 (id=633):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) (async)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r1 = socket$inet6(0xa, 0x3, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002e67db60001000600000005000400000000000900020073797a3100000000050005000a000000110003006861738005001400b4001400080008400000004800"/83], 0x60}}, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

740.515956ms ago: executing program 2 (id=634):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000840)={@void, @void, @ipv6=@gre_packet={0xd, 0x6, "46d7ef", 0x3b6, 0x2f, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x62, 0x6, 0x0, 0x0, 0x0, [@mcast1, @empty, @mcast2]}, @routing={0x3c, 0x8, 0x0, 0x1, 0x0, [@private0, @local, @private2, @loopback]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x5d, 0x1, [], "0982884193ea816ef158d4fc4638de4c23e4f4777e0e48dfde7212fc63a60a1338c84eb351f82158183932fa290c97e05c2d94dba71249998cf758c6ea32b06940209ab82e3a45f5b7b5f7ecef355ecf694866aee2b489084053766918"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x1], "78e27564b22bcb9fa8adca76886626ecf045c7fc2f1d8d21bdc5905147b985c8b5c373fb4d8555b11edb5bc0cbd9328fc5fadcd448fa70c17b07b3ec6bb65210a8e4121c53d21a3129d0117709be08e83df299a6d8b0c0b4a6a6fd5e15146d75d1d58ab412500fe66dce33134d0e0d2baed2810340cc9c93fa1132d3b5d3f90c1c26263dc29a5cfb8c0b6efd313b90d6070b81604bda118007a748055ea19b469125c50f582551b67519dcb05e9f9340cf78c87b042d3558361edf683d0cd2a72998e15a3d40ea9491aa9dc333cf37c6371bab08e1b12f"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "43db35cf86596087c9ac6d8a37e0770ef976973f53b0d08b52de90beeb442ce04caf2a439ba54b52616a3fb28f5332d4fa71da3aecb565078fd91967e0507f270ee51a2e8dc5e8f177a92e1001aec319a7140fe2aabf92813313ab0ec80f9817f9765aec2cdcac60bae017be45a1ebc00c167e25b6ac23102f822d745d4a6c0c8338326f4c9b49d55a69cfc6e60310683cfe76e43f596e1e66a80c762a5dbc17a5d6e9992dad0d2e1b3fe40caee6346fc42356d32b8829c4d9d46e536a71d0c6b9f26744f35b0be51fedac31e1448d7e9cafd889cf"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0xa, 0x3, 0x1, 0x1, 0x6, 0x1}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x3, 0x2, 0x3, 0x3, 0x0, 0x3, 0x3, 0x3}, 0x2, {0x601, 0xd, 0x2, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "68854cc2d4f3cd07612d2d06c3be81438c1c73f849a53733c38d23f8cdb65fb5c4499b3e1249fc1fc7f4718d67f92e41fec2c09355ce9e0f2d43c23389651a5bd9d2a50b33a1ad2ca2e84a72572dd920dd9c869963603ec323f62802b84fa1edf3684a354732ac16c607fa4321917b5f9965a2096f795bf1c236e6f3959c64097e0b9c1db1faac1f36e075cad44575c6d83135e0875f26a14ec46d4098d721605334b694e1b5df0ca17e42db12d0c2fac8f06d5878142a0dcf024656d8b85bb94f10bb2b6c257ea36559dd06e3241825f6c81279c22982c8238939af7d27e2ca0e861f7194eaa9"}}}}}, 0x3de)
socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006"], 0x0, 0xa}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0)
unshare(0x22020400)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0)
socket(0x23, 0x80805, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0xfce)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x41, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000005000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000004400000b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f00000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000890294d3c4a12982358bc5c1e6fb6a0583703a0de6e5468ca10f72a0843f77f46ceda96a773f68c0e14585e0cdd68ff2a9df0ccd697c82c95a624fc7e53af524c5dce1a1386ebc22e25b7e2945ce9aabda53b3d5970bb84ff540a5f5af6c76cae9225565687b333f280538f3c8b0e7858d8dfeb5e4a281da0d7f1ba13d1143ab572562221d9b343b8abbe686215fe532bb490b7a76db81c2006c3d9760c28bb472f4911c564cdfb9bd686aa25b0b39c56e83f1fae3c7735262f59f2c6297d5fd627c", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000ac2aff0f06000000b488010008000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0xf, 0x9e, &(0x7f0000000140)=""/158, 0x40f00, 0xd, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x1, 0x1, 0x9, 0x5}], 0x10, 0x29d1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r6, 0x0, 0x98, 0x45, &(0x7f0000000d00)="e82804d45d62eefebad8b185906cde63f6e034ad6363718cf9eeb27a3d388aafa81f745708c5ed74a17f68a74b738947d23b4f906df087e617b7721ccba7b7cfb4d23d7b5b8b0884f046ac6961e01354d46e17e2af8a47662a596d15876871bba10b9530508002c3d8305004e3a56165ca227a2969afe826b642967ccdfcb1ba607ee6c7708f7955b97dd9106e7adbc35c762d74ad93c898", &(0x7f0000000500)=""/69, 0xebc, 0x0, 0xfb, 0xa0, &(0x7f0000000dc0)="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", &(0x7f0000000ec0)="6bf93fca55fe604280b19ac35de603efa702751a9860e3a2e82c99eac22857705e97f5ebfa7bc7de5b74a7c29fb56ccbfa4190cca485d5c4406d481e00ae0c146ca4a5ea767d45129220fbbd9bb1e6bdd6c928ff0fa576c3989c8e09927c8571e4419b1a5dc785a7072d14a1e7592f9d153b2ad063a5ffbdc0b25770b519ba77237298c13a38ad16910641f35a7173268c4bf2ee6f7c069bb0788b2abe584633", 0x5, 0x0, 0x10}, 0x50)
bind$x25(r5, &(0x7f00000000c0), 0x12)
close(r5)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1c0, 0x230, 0x242, 0x1c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x2e}, 0x0, 0xd0, 0x100, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@mac={{0x30}, {@local, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x367e1a3a}}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
accept4(r8, 0x0, &(0x7f0000000080), 0x80000)

739.761034ms ago: executing program 0 (id=635):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x40000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8)
sendmmsg$inet6(r3, &(0x7f00000016c0)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)}}], 0x2, 0x4004000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="010000201000"})
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r4, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001})
getpeername$unix(r5, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e)

364.91434ms ago: executing program 1 (id=636):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x23}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0xe, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000090}, 0x2000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01050000ac1414bb004000008000000000fdffffff"], 0x38}}, 0x4040)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r11}, 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x49810, 0x3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r8}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040485}, 0x4000000)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getnexthop={0x30, 0x6a, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000084)
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r3, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x28, r13, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x816)

154.01133ms ago: executing program 2 (id=637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a00), r1)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2404009c)

147.356728ms ago: executing program 2 (id=638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_PHYS_SWITCH_ID={0x20, 0x24, "41a2d854e3076211beec27b5a0adf96631e1d88318308d4829528948"}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xcd2, 0x3}}]}]}]}, 0x60}}, 0x4044020)
r1 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={<r2=>0x0, 0x1}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0xd}, 0x8)

4.391609ms ago: executing program 2 (id=639):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket(0x10, 0x3, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000ed9730b3da9a96d5df0176a400b40837a0f100944e015c54c163be4d436e69121b315e6b5cbb87be79fe16430ed6282f12bf87c749de1b18a80f2f029c00f303d2db0242c7431a57f0efa1cbedad641862f7d0ed134a399c95d5306d25798746b03002f7320e95fc6093e4873af42b6d2c6cf9f8ac77a3716d6ed9c3b5e7f7955c"], 0x0, 0x26, 0x0, 0xfffffffe}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, <r4=>0x0, 0x0}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r5, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='cq_poll\x00', r5, 0x0, 0x5}, 0x18)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0xfffffffc)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c861}, 0x4008000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', r10, 0x1, 0x40, 0xd3, 0x1000, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x66, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@end, @timestamp_addr={0x44, 0x14, 0x69, 0x1, 0x6, [{@multicast1, 0x1}, {@empty, 0xecf1}]}]}}}}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012005f3fbd7000000000000700000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880)

0s ago: executing program 2 (id=640):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000240)=ANY=[@ANYBLOB="780000000208010200000000000000009900000634000480080001400000000908000140000000060800014000000004080001400000ecde080101400000000108000140000080010c00048008000140ffffffff0600024000090000060002406005000006000240888e00000900010073797a31000000002f7dd1dc4792bc50dee372040d76b1599124306e511c05d5ed655d0796559b64b3d0c6e39064ed0dffcbe7d13a3a912f9f52bd91cea0c59f1a5cbab88c4f473d0ee33d8755517eb562e61d4773777b870b10d02516d74cf969af71024ab4b60f17183b26bab8745b1007af6b7f290085762ac0c2ade101bb0adfecffaacc9adcfbc010d664a7816e16d3aab07e2603dbe77587a4c0ccd374193653a822e46d5186069c6eb5dd36026ade"], 0x78}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x80)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmmsg$inet_sctp(r4, &(0x7f0000001b00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="9791c4", 0x3}], 0x1, &(0x7f0000001d80)=[@sndinfo={0x20, 0x84, 0x2, {0xfff, 0x200, 0x1, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}], 0x38, 0x20008014}], 0x1, 0x1000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010000104004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="09000200010000002c0012800e0001006970366772657461700000009aff028014000700fc0100000000000000000000000000000a000100aa"], 0x60}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'vxcan1\x00', 0x600})
socket(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000040) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x80) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
sendmmsg$inet_sctp(r4, &(0x7f0000001b00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="9791c4", 0x3}], 0x1, &(0x7f0000001d80)=[@sndinfo={0x20, 0x84, 0x2, {0xfff, 0x200, 0x1, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}], 0x38, 0x20008014}], 0x1, 0x1000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010000104004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="09000200010000002c0012800e0001006970366772657461700000009aff028014000700fc0100000000000000000000000000000a000100aa"], 0x60}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) (async)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'vxcan1\x00', 0x600}) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17959' (ED25519) to the list of known hosts.
syzkaller login: [   57.327372][ T5814] cgroup: Unknown subsys name 'net'
[   57.456093][ T5814] cgroup: Unknown subsys name 'cpuset'
[   57.462200][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.351172][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.959832][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.964054][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.967579][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.971304][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.977380][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.988288][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.991292][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.994502][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.997300][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.000023][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.030573][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.033573][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.036221][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.039210][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.042669][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.278116][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   64.341982][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   64.499512][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   64.504548][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.507785][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.510087][ T5832] bridge_slave_0: entered allmulticast mode
[   64.513306][ T5832] bridge_slave_0: entered promiscuous mode
[   64.542251][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.544788][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.547131][ T5832] bridge_slave_1: entered allmulticast mode
[   64.549906][ T5832] bridge_slave_1: entered promiscuous mode
[   64.553989][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.556883][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.559744][ T5828] bridge_slave_0: entered allmulticast mode
[   64.564217][ T5828] bridge_slave_0: entered promiscuous mode
[   64.569172][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.572223][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.574987][ T5828] bridge_slave_1: entered allmulticast mode
[   64.578702][ T5828] bridge_slave_1: entered promiscuous mode
[   64.664166][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.670168][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.683069][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.688862][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.763078][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.766026][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.768854][ T5835] bridge_slave_0: entered allmulticast mode
[   64.773651][ T5835] bridge_slave_0: entered promiscuous mode
[   64.778485][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.781727][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.784519][ T5835] bridge_slave_1: entered allmulticast mode
[   64.788147][ T5835] bridge_slave_1: entered promiscuous mode
[   64.803598][ T5832] team0: Port device team_slave_0 added
[   64.807363][ T5828] team0: Port device team_slave_0 added
[   64.824985][ T5832] team0: Port device team_slave_1 added
[   64.842595][ T5828] team0: Port device team_slave_1 added
[   64.856282][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.889289][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.895683][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.898290][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.906838][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.912911][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.915690][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.925058][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.930079][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.933505][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.943813][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.967427][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.970207][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.980389][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.007012][ T5835] team0: Port device team_slave_0 added
[   65.034663][ T5835] team0: Port device team_slave_1 added
[   65.074387][ T5828] hsr_slave_0: entered promiscuous mode
[   65.076728][ T5828] hsr_slave_1: entered promiscuous mode
[   65.093320][ T5832] hsr_slave_0: entered promiscuous mode
[   65.096360][ T5832] hsr_slave_1: entered promiscuous mode
[   65.099312][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.103279][ T5832] Cannot create hsr debugfs directory
[   65.116586][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.118786][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.127143][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.131799][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.134069][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.142500][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.259800][ T5835] hsr_slave_0: entered promiscuous mode
[   65.264009][ T5835] hsr_slave_1: entered promiscuous mode
[   65.266790][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.269670][ T5835] Cannot create hsr debugfs directory
[   65.532112][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.542295][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.565958][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.573050][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.632587][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.638380][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.658746][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.664984][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.725105][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.745382][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.751928][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.764755][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.864423][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.875337][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.900370][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   65.922950][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.925932][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.937680][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   65.954364][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.956671][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.977221][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.979453][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.989093][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.002111][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.004848][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.034831][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   66.050435][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.053170][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.061741][   T54] Bluetooth: hci2: command tx timeout
[   66.064111][   T54] Bluetooth: hci1: command tx timeout
[   66.066408][   T54] Bluetooth: hci0: command tx timeout
[   66.073557][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.076446][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.314548][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.366090][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.383856][ T5828] veth0_vlan: entered promiscuous mode
[   66.393338][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.408180][ T5828] veth1_vlan: entered promiscuous mode
[   66.455273][ T5832] veth0_vlan: entered promiscuous mode
[   66.467211][ T5835] veth0_vlan: entered promiscuous mode
[   66.479652][ T5828] veth0_macvtap: entered promiscuous mode
[   66.483123][ T5832] veth1_vlan: entered promiscuous mode
[   66.486724][ T5835] veth1_vlan: entered promiscuous mode
[   66.490276][ T5828] veth1_macvtap: entered promiscuous mode
[   66.517259][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.546555][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.559486][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.564418][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.567831][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.572850][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.592205][ T5832] veth0_macvtap: entered promiscuous mode
[   66.596369][ T5835] veth0_macvtap: entered promiscuous mode
[   66.624405][ T5832] veth1_macvtap: entered promiscuous mode
[   66.634111][ T5835] veth1_macvtap: entered promiscuous mode
[   66.656763][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.679417][  T544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.681232][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.694531][  T544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.708378][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.718057][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.744068][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.747591][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.752803][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.756320][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.762506][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.765861][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.769238][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.773631][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.786821][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.790211][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.894797][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.936666][ T5893] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   66.940157][ T5893] netlink: 'syz.0.1': attribute type 17 has an invalid length.
[   66.955493][ T5893] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.958449][ T5893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.968410][ T5893] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   66.973346][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.976319][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.976514][ T5893] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.981962][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.981991][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.038034][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.040234][ T5895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4'.
[   67.047530][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.065465][ T5895] bond1: entered promiscuous mode
[   67.067741][ T5895] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.075521][ T5895] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   67.096699][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.099632][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.302384][ T5904] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.310251][ T5904] unsupported nla_type 52263
[   67.313105][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.452307][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'.
[   67.460396][ T5913] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20002
[   67.823481][ T5931] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   68.143345][ T5219] Bluetooth: hci0: command tx timeout
[   68.145692][ T5219] Bluetooth: hci1: command tx timeout
[   68.147781][ T5219] Bluetooth: hci2: command tx timeout
[   68.269717][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'.
[   68.272816][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'.
[   68.281739][ T5945] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.284656][ T5945] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.287356][ T5945] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.290150][ T5945] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.311450][ T5945] dvmrp1: entered allmulticast mode
[   68.315839][ T5945] dvmrp1: left allmulticast mode
[   68.352877][ T5947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'.
[   68.355591][ T5947] tipc: Invalid UDP bearer configuration
[   68.355619][ T5947] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   68.474190][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'.
[   68.482438][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.510003][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'.
[   68.517032][ T5953] tipc: Invalid UDP bearer configuration
[   68.517076][ T5953] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   68.522535][ T5961] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.523112][ T5979] Bluetooth: MGMT ver 1.23
[   69.893105][ T5982] tipc: Started in network mode
[   69.895311][ T5982] tipc: Node identity 3a000000000040120000006e70000001, cluster identity 4711
[   69.899073][ T5982] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   70.221096][   T54] Bluetooth: hci2: command tx timeout
[   70.221656][ T5219] Bluetooth: hci1: command tx timeout
[   70.223295][   T54] Bluetooth: hci0: command tx timeout
[   71.104112][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.107007][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.657719][ T5989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.886015][ T6006] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.892053][ T6006] bond0: (slave bond2): Enslaving as an active interface with an up link
[   71.976534][ T6016] tipc: Started in network mode
[   71.978526][ T6016] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[   71.982507][ T6016] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   71.999351][ T6018] netlink: 'syz.1.35': attribute type 21 has an invalid length.
[   72.003277][ T6018] __nla_validate_parse: 7 callbacks suppressed
[   72.003289][ T6018] netlink: 132 bytes leftover after parsing attributes in process `syz.1.35'.
[   72.179635][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'.
[   72.201450][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'.
[   72.302298][ T5985] Bluetooth: hci0: command tx timeout
[   72.311481][ T5985] Bluetooth: hci1: command tx timeout
[   72.311774][ T5831] Bluetooth: hci2: command tx timeout
[   72.554804][ T6052] Zero length message leads to an empty skb
[   72.584889][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'.
[   72.650529][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'.
[   72.651038][ T6071] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   72.664127][ T6072] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   72.666601][ T6072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.698937][ T6077] xt_nfacct: accounting object `syz1' does not exists
[   72.817939][ T6084] netlink: 'syz.1.55': attribute type 1 has an invalid length.
[   72.826355][ T6084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.55'.
[   72.831141][ T6084] netlink: 56 bytes leftover after parsing attributes in process `syz.1.55'.
[   72.838459][   T33] audit: type=1804 audit(1752656688.302:2): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.55" name="/newroot/15/cgroup.controllers" dev="tmpfs" ino=94 res=1 errno=0
[   72.856653][   T33] audit: type=1800 audit(1752656688.302:3): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.55" name="cgroup.controllers" dev="tmpfs" ino=94 res=0 errno=0
[   72.868922][ T6086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'.
[   73.026888][ T6094] netlink: 'syz.2.57': attribute type 1 has an invalid length.
[   73.030162][ T6094] netlink: 'syz.2.57': attribute type 2 has an invalid length.
[   73.107846][ T6096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.58'.
[   73.111735][ T6096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.58'.
[   73.118186][ T6096] ieee802154 phy0 wpan0: encryption failed: -22
[   73.131118][ T6097] ieee802154 phy0 wpan0: encryption failed: -22
[   73.606423][ T6114] netlink: 'syz.2.64': attribute type 1 has an invalid length.
[   73.609620][ T6114] netlink: 'syz.2.64': attribute type 2 has an invalid length.
[   73.815085][ T6127] gretap1: entered promiscuous mode
[   73.817202][ T6127] gretap1: entered allmulticast mode
[   73.833331][ T6129] netlink: 'syz.1.69': attribute type 12 has an invalid length.
[   73.909882][ T6135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.919560][ T6135] batadv_slave_1: entered promiscuous mode
[   74.328975][ T6163] netlink: 'syz.2.81': attribute type 1 has an invalid length.
[   74.333878][ T6165] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   74.414816][ T6169] x_tables: duplicate underflow at hook 3
[   74.419206][ T6169] x_tables: duplicate underflow at hook 3
[   74.432591][ T6170] syz.2.85 uses obsolete (PF_INET,SOCK_PACKET)
[   74.437068][ T6169] raw_sendmsg: syz.0.86 forgot to set AF_INET. Fix it!
[   74.631207][ T6183] netlink: 'syz.2.85': attribute type 11 has an invalid length.
[   74.916590][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.953929][ T6196] Driver unsupported XDP return value 0 on prog  (id 31) dev N/A, expect packet loss!
[   75.245348][ T6199] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001
[   75.602007][ T6226] netlink: 'syz.1.104': attribute type 39 has an invalid length.
[   75.969861][ T6246] syz.1.110: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   75.975953][ T6246] CPU: 1 UID: 0 PID: 6246 Comm: syz.1.110 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   75.975966][ T6246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.975971][ T6246] Call Trace:
[   75.975975][ T6246]  <TASK>
[   75.975979][ T6246]  dump_stack_lvl+0x189/0x250
[   75.975995][ T6246]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.976004][ T6246]  ? __pfx__printk+0x10/0x10
[   75.976015][ T6246]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   75.976025][ T6246]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   75.976036][ T6246]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   75.976047][ T6246]  warn_alloc+0x214/0x310
[   75.976060][ T6246]  ? __pfx_warn_alloc+0x10/0x10
[   75.976081][ T6246]  ? __get_vm_area_node+0x28f/0x300
[   75.976091][ T6246]  ? xskq_create+0xbf/0x170
[   75.976105][ T6246]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   75.976128][ T6246]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   75.976141][ T6246]  ? __kasan_kmalloc+0x93/0xb0
[   75.976152][ T6246]  vmalloc_user_noprof+0xad/0xf0
[   75.976161][ T6246]  ? xskq_create+0xbf/0x170
[   75.976173][ T6246]  xskq_create+0xbf/0x170
[   75.976185][ T6246]  xsk_init_queue+0xb0/0x110
[   75.976197][ T6246]  xsk_setsockopt+0x4de/0x710
[   75.976208][ T6246]  ? __pfx_xsk_setsockopt+0x10/0x10
[   75.976221][ T6246]  ? aa_sock_opt_perm+0x74/0x110
[   75.976234][ T6246]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   75.976246][ T6246]  ? __pfx_xsk_setsockopt+0x10/0x10
[   75.976288][ T6246]  do_sock_setsockopt+0x25a/0x3e0
[   75.976305][ T6246]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   75.976321][ T6246]  ? __fget_files+0x2a/0x420
[   75.976359][ T6246]  __x64_sys_setsockopt+0x18b/0x220
[   75.976377][ T6246]  do_syscall_64+0xfa/0x3b0
[   75.976386][ T6246]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.976398][ T6246]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.976406][ T6246]  ? exc_page_fault+0x9f/0xf0
[   75.976418][ T6246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.976426][ T6246] RIP: 0033:0x7f3e2e58e929
[   75.976435][ T6246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.976441][ T6246] RSP: 002b:00007f3e2f327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   75.976450][ T6246] RAX: ffffffffffffffda RBX: 00007f3e2e7b5fa0 RCX: 00007f3e2e58e929
[   75.976456][ T6246] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[   75.976461][ T6246] RBP: 00007f3e2e610b39 R08: 0000000000000004 R09: 0000000000000000
[   75.976465][ T6246] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[   75.976470][ T6246] R13: 0000000000000000 R14: 00007f3e2e7b5fa0 R15: 00007ffd04885158
[   75.976482][ T6246]  </TASK>
[   75.976535][ T6246] Mem-Info:
[   76.062976][ T6246] active_anon:6376 inactive_anon:0 isolated_anon:0
[   76.062976][ T6246]  active_file:918 inactive_file:38208 isolated_file:0
[   76.062976][ T6246]  unevictable:1768 dirty:1419 writeback:0
[   76.062976][ T6246]  slab_reclaimable:9276 slab_unreclaimable:52276
[   76.062976][ T6246]  mapped:18085 shmem:2437 pagetables:938
[   76.062976][ T6246]  sec_pagetables:0 bounce:0
[   76.062976][ T6246]  kernel_misc_reclaimable:0
[   76.062976][ T6246]  free:301580 free_pcp:20927 free_cma:0
[   76.076528][ T6246] Node 0 active_anon:14252kB inactive_anon:0kB active_file:1632kB inactive_file:148036kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35580kB dirty:4624kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6840kB pagetables:2072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   76.087457][ T6246] Node 1 active_anon:11320kB inactive_anon:0kB active_file:2040kB inactive_file:4796kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36760kB dirty:1052kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4648kB pagetables:1748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   76.097587][ T6246] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   76.106890][ T6246] lowmem_reserve[]: 0 812 812 812 812
[   76.109081][ T6246] Node 0 DMA32 free:279476kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14252kB inactive_anon:0kB active_file:1632kB inactive_file:148036kB unevictable:3536kB writepending:4624kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:45900kB local_pcp:20876kB free_cma:0kB
[   76.119449][ T6246] lowmem_reserve[]: 0 0 0 0 0
[   76.121389][ T6246] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   76.131144][ T6246] lowmem_reserve[]: 0 0 854 854 854
[   76.132920][ T6246] Node 1 Normal free:452664kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11320kB inactive_anon:0kB active_file:2040kB inactive_file:4796kB unevictable:3536kB writepending:1052kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38632kB local_pcp:17452kB free_cma:0kB
[   76.142817][ T6246] lowmem_reserve[]: 0 0 0 0 0
[   76.144444][ T6246] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   76.148510][ T6246] Node 0 DMA32: 221*4kB (UM) 56*8kB (ME) 35*16kB (UM) 23*32kB (M) 11*64kB (UM) 5*128kB (ME) 6*256kB (M) 5*512kB (UME) 5*1024kB (UM) 2*2048kB (M) 64*4096kB (UM) = 279428kB
[   76.154104][ T6246] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   76.159236][ T6246] Node 1 Normal: 1*4kB (U) 1*8kB (M) 82*16kB (U) 149*32kB (U) 37*64kB (UM) 16*128kB (UME) 7*256kB (UM) 6*512kB (M) 5*1024kB (UM) 5*2048kB (UME) 103*4096kB (M) = 452620kB
[   76.166392][ T6246] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   76.169486][ T6246] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   76.177414][ T6246] 41563 total pagecache pages
[   76.178971][ T6246] 0 pages in swap cache
[   76.182950][ T6246] Free swap  = 124996kB
[   76.184363][ T6246] Total swap = 124996kB
[   76.186504][ T6246] 786301 pages RAM
[   76.187866][ T6246] 0 pages HighMem/MovableOnly
[   76.189480][ T6246] 241085 pages reserved
[   76.191467][ T6246] 0 pages cma reserved
[   76.234737][ T6262] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   76.307737][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.357439][ T6279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.603278][ T6302] syz_tun: entered allmulticast mode
[   76.637902][ T6300] syz_tun: left allmulticast mode
[   77.472096][ T6355] __nla_validate_parse: 11 callbacks suppressed
[   77.472113][ T6355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'.
[   77.626198][ T6363] xt_hashlimit: size too large, truncated to 1048576
[   77.997398][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'.
[   78.001674][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'.
[   78.047235][ T6410] netlink: 'syz.0.158': attribute type 1 has an invalid length.
[   78.050046][ T6410] netlink: 'syz.0.158': attribute type 3 has an invalid length.
[   78.055895][ T6410] netlink: 224 bytes leftover after parsing attributes in process `syz.0.158'.
[   78.103338][ T6414] trusted_key: syz.2.160 sent an empty control message without MSG_MORE.
[   78.285525][ T6419] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   78.317074][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'.
[   78.731766][ T6429] netlink: 240 bytes leftover after parsing attributes in process `syz.1.164'.
[   79.114441][ T6444] netlink: 'syz.2.168': attribute type 27 has an invalid length.
[   79.119192][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'.
[   79.216843][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[   79.224428][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'.
[   79.407683][ T6448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.473889][ T6448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.588541][ T6451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.749718][ T6476] Cannot find set identified by id 0 to match
[   79.844096][ T6482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.847611][ T6482] syzkaller0: entered promiscuous mode
[   79.849626][ T6482] syzkaller0: entered allmulticast mode
[   79.871246][ T6482] tipc: Resetting bearer <eth:syzkaller0>
[   80.734655][ T6479] tipc: Resetting bearer <eth:syzkaller0>
[   80.788954][ T6479] tipc: Disabling bearer <eth:syzkaller0>
[   81.173060][ T6505] netlink: 'syz.1.184': attribute type 1 has an invalid length.
[   81.176397][ T6505] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.184'.
[   81.571225][ T6513] netlink: 'syz.0.186': attribute type 9 has an invalid length.
[   81.575078][ T6515] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[   81.657655][ T6521] netlink: 'syz.2.188': attribute type 153 has an invalid length.
[   81.687517][ T6522] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.694288][ T6522] bond0: (slave rose0): Enslaving as an active interface with an up link
[   81.812605][ T6537] netlink: 'syz.1.189': attribute type 16 has an invalid length.
[   81.814967][ T6537] netlink: 'syz.1.189': attribute type 17 has an invalid length.
[   81.835719][ T6537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.067491][ T6559] netlink: 'syz.2.196': attribute type 13 has an invalid length.
[   82.374018][ T6585] netlink: 'syz.0.204': attribute type 2 has an invalid length.
[   82.440115][ T6587] sctp: [Deprecated]: syz.2.205 (pid 6587) Use of int in max_burst socket option.
[   82.440115][ T6587] Use struct sctp_assoc_value instead
[   82.583952][ T6604] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   82.668168][ T6609] __nla_validate_parse: 8 callbacks suppressed
[   82.668178][ T6609] netlink: 208 bytes leftover after parsing attributes in process `syz.0.209'.
[   82.682106][ T6609] netlink: 'syz.0.209': attribute type 11 has an invalid length.
[   82.689661][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.211'.
[   82.741533][ T6618] netlink: 248 bytes leftover after parsing attributes in process `syz.2.213'.
[   82.779430][ T6621] netlink: 180 bytes leftover after parsing attributes in process `syz.0.215'.
[   83.203746][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'.
[   83.207267][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'.
[   83.244233][ T6674] gtp0: entered promiscuous mode
[   83.246002][ T6674] gtp0: entered allmulticast mode
[   83.273080][ T6662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'.
[   83.340267][ T6682] validate_nla: 3 callbacks suppressed
[   83.340294][ T6682] netlink: 'syz.1.226': attribute type 1 has an invalid length.
[   83.346071][ T6682] netlink: 'syz.1.226': attribute type 1 has an invalid length.
[   83.395475][ T6686] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   83.439343][ T6690] xt_connbytes: Forcing CT accounting to be enabled
[   83.441774][ T6690] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[   83.445825][ T6690] bond0: option arp_all_targets: invalid value (18446744073709551613)
[   83.485807][ T6694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.236'.
[   83.574775][ T6703] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   83.907624][ T6733] xt_bpf: check failed: parse error
[   83.914782][ T6733] SET target dimension over the limit!
[   84.003378][ T6738] x_tables: duplicate underflow at hook 3
[   84.054012][ T6740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'.
[   84.077488][ T6742] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   84.099224][ T6742] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.121436][ T6742] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.123771][ T6742] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   84.131636][ T6742] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   84.191311][ T6746] veth3: entered promiscuous mode
[   84.195903][ T6746] bond3: (slave veth3): Enslaving as an active interface with a down link
[   84.198707][ T6750] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.248'.
[   84.206947][ T6742] erspan0: entered allmulticast mode
[   84.215743][ T6742] bond3: (slave erspan0): making interface the new active one
[   84.218999][ T6742] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   84.325388][ T6759] syzkaller1: entered promiscuous mode
[   84.327667][ T6759] syzkaller1: entered allmulticast mode
[   85.424810][ T6837] netlink: 'syz.2.276': attribute type 1 has an invalid length.
[   85.453229][ T6837] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.468254][ T6837] bond2: (slave bridge3): making interface the new active one
[   85.473858][ T6837] bond2: (slave bridge3): Enslaving as an active interface with an up link
[   85.476659][ T6842] netlink: 'syz.1.277': attribute type 6 has an invalid length.
[   85.479086][ T6842] netlink: 'syz.1.277': attribute type 7 has an invalid length.
[   85.483134][ T6842] netlink: 'syz.1.277': attribute type 8 has an invalid length.
[   85.493369][ T6838] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   86.254127][ T6927] netlink: 'syz.2.302': attribute type 12 has an invalid length.
[   86.462284][   T24] cfg80211: failed to load regulatory.db
[   86.637921][ T6957] netlink: 'syz.1.312': attribute type 4 has an invalid length.
[   86.646009][ T6959] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002
[   87.066868][ T7001] macvlan1: entered promiscuous mode
[   87.069027][ T7001] macvlan1: entered allmulticast mode
[   87.072620][ T7001] veth1_vlan: entered allmulticast mode
[   87.330836][ T7029] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.333625][ T7029] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.336279][ T7029] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.338877][ T7029] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.352043][ T5985] Bluetooth: hci2: command 0x0405 tx timeout
[   87.368501][ T7033] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   87.377943][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.381138][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.424868][ T7036] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.427862][ T7036] batadv_slave_0: entered promiscuous mode
[   87.437855][ T7036] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   87.477932][ T7040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.480726][ T7040] syzkaller0: entered promiscuous mode
[   87.482418][ T7040] syzkaller0: entered allmulticast mode
[   87.493489][ T7039] tipc: Resetting bearer <eth:syzkaller0>
[   87.505225][ T7039] tipc: Disabling bearer <eth:syzkaller0>
[   87.913680][ T7057] netlink: 'syz.0.341': attribute type 1 has an invalid length.
[   87.916139][ T7057] __nla_validate_parse: 19 callbacks suppressed
[   87.916147][ T7057] netlink: 228 bytes leftover after parsing attributes in process `syz.0.341'.
[   87.922243][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'.
[   87.930357][ T7057] Bluetooth: hci1: Opcode 0x080f failed: -4
[   88.078923][ T7068] batadv_slave_0: left promiscuous mode
[   88.081377][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.260858][ T7084] netlink: 76 bytes leftover after parsing attributes in process `syz.1.349'.
[   88.284126][ T7085] xt_policy: too many policy elements
[   88.379309][ T7090] syzkaller1: entered promiscuous mode
[   88.382147][ T7090] syzkaller1: entered allmulticast mode
[   88.593621][ T7101] syzkaller0: entered promiscuous mode
[   88.595820][ T7101] syzkaller0: entered allmulticast mode
[   88.599498][ T7101] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   89.044648][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'.
[   89.047474][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'.
[   89.050239][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'.
[   89.054395][ T7104] SET target dimension over the limit!
[   89.056643][ T7104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.355'.
[   89.060182][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'.
[   89.063983][ T7104] netlink: 31 bytes leftover after parsing attributes in process `syz.0.355'.
[   89.066780][ T7104] netlink: 'syz.0.355': attribute type 3 has an invalid length.
[   89.069376][ T7104] netlink: 'syz.0.355': attribute type 2 has an invalid length.
[   89.072446][ T7104] netlink: 31 bytes leftover after parsing attributes in process `syz.0.355'.
[   89.075784][ T7104] netlink: 'syz.0.355': attribute type 2 has an invalid length.
[   89.116391][ T7106] netlink: 'syz.0.356': attribute type 4 has an invalid length.
[   89.321388][ T7112] ip6gretap1: entered promiscuous mode
[   89.739297][ T7141] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   89.759915][ T7143] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xf
[   89.779159][ T7145] netlink: 'syz.1.372': attribute type 7 has an invalid length.
[   89.785018][ T7145] netlink: 'syz.1.372': attribute type 8 has an invalid length.
[   89.946237][ T7157] bridge0: entered promiscuous mode
[   89.948655][ T7157] macsec2: entered promiscuous mode
[   89.957063][ T7157] bridge0: port 3(macsec2) entered blocking state
[   89.959915][ T7157] bridge0: port 3(macsec2) entered disabled state
[   89.963361][ T7157] macsec2: entered allmulticast mode
[   89.965659][ T7157] bridge0: entered allmulticast mode
[   89.971945][ T7157] macsec2: left allmulticast mode
[   89.973985][ T7157] bridge0: left allmulticast mode
[   89.977604][ T7157] bridge0: left promiscuous mode
[   89.982737][ T5985] Bluetooth: hci1: command 0x080f tx timeout
[   90.147653][ T7176] openvswitch: netlink: IP tunnel dst address not specified
[   90.379048][ T7198] xt_l2tp: v2 doesn't support IP mode
[   90.506576][ T7208] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   90.509675][ T7208] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   90.935521][ T7239] xt_CT: No such helper "pptp"
[   90.950101][ T7239] --map-set only usable from mangle table
[   91.308084][ T7270] netdevsim netdevsim2: Direct firmware load for 2Q failed with error -2
[   91.315294][ T7270] netdevsim netdevsim2: Falling back to sysfs fallback for: 2Q
[   92.009522][ T7284] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   92.052102][ T7286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.141591][ T7292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.272953][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.275449][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.365149][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.375584][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.424722][ T7295] veth1_vlan: left allmulticast mode
[   92.427247][ T7295] macvlan1: left promiscuous mode
[   92.445512][ T7295] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.448401][ T7295] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.451982][ T7295] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.454774][ T7295] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.472043][ T7295] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   92.486249][ T7295] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   92.495076][ T7295] bond1: left promiscuous mode
[   92.498623][ T7295] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   92.502664][ T7295] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   92.506015][ T7295] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   92.508675][ T7295] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   92.518294][ T7295] gtp0: left promiscuous mode
[   92.524904][ T7295] veth3: left promiscuous mode
[   92.528762][ T7295] ip6gretap1: left promiscuous mode
[   92.589948][ T7310] netlink: 'syz.1.423': attribute type 1 has an invalid length.
[   92.595874][ T7310] netlink: 'syz.1.423': attribute type 11 has an invalid length.
[   93.157300][ T7362] __nla_validate_parse: 19 callbacks suppressed
[   93.157314][ T7362] netlink: 56 bytes leftover after parsing attributes in process `syz.1.433'.
[   93.162848][ T7364] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   93.166514][ T7364] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   93.220570][ T7368] netlink: 44 bytes leftover after parsing attributes in process `syz.1.433'.
[   93.275526][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'.
[   93.285242][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'.
[   93.364308][ T7379] netlink: 'syz.2.435': attribute type 11 has an invalid length.
[   93.481673][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'.
[   94.152794][ T7395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.441'.
[   94.332189][ T7413] validate_nla: 2 callbacks suppressed
[   94.332200][ T7413] netlink: 'syz.2.444': attribute type 4 has an invalid length.
[   94.405761][ T7418] netlink: 'syz.2.446': attribute type 2 has an invalid length.
[   94.448482][ T7421] xt_hashlimit: size too large, truncated to 1048576
[   94.559360][ T7425] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   94.578276][ T7423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.626607][ T7427] netlink: 'syz.2.450': attribute type 1 has an invalid length.
[   94.647532][ T7427] 8021q: adding VLAN 0 to HW filter on device bond3
[   94.662157][ T7427] bond3: (slave ip6gretap1): making interface the new active one
[   94.666517][ T7427] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[   94.685551][ T7427] veth5: entered promiscuous mode
[   94.689441][ T7427] bond3: (slave veth5): Enslaving as an active interface with a down link
[   94.694924][ T7427] erspan0: entered allmulticast mode
[   94.705586][ T7427] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   95.144824][ T7433] sctp: [Deprecated]: syz.1.452 (pid 7433) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.144824][ T7433] Use struct sctp_sack_info instead
[   95.233532][ T7442] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   95.239506][ T7442] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   95.309067][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[   95.368404][ T7449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'.
[   95.636835][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'.
[   95.841851][ T7472] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   95.864531][ T7467] netlink: 'syz.2.462': attribute type 7 has an invalid length.
[   95.866920][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'.
[   96.264812][ T7496] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   96.545871][ T7510] x_tables: duplicate underflow at hook 1
[   96.816216][ T7546] vxcan1: tx address claim with dlc 1
[   96.831943][ T7548] ip6gre1: entered allmulticast mode
[   97.005035][ T7579] netlink: 'syz.2.496': attribute type 29 has an invalid length.
[   97.008007][ T7579] netlink: 'syz.2.496': attribute type 29 has an invalid length.
[   97.011941][ T7579] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   97.017013][ T7579] No such timeout policy "syz1"
[   97.050128][ T7585] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.111425][ T7595] netlink: 'syz.2.502': attribute type 39 has an invalid length.
[   97.457126][ T7632] IPv6: NLM_F_REPLACE set, but no existing node found!
[   97.565742][ T7640] : entered promiscuous mode
[   97.616509][ T7646] tipc: Enabling of bearer <et:g> rejected, media not registered
[   97.668301][ T7651] netlink: 'syz.1.522': attribute type 2 has an invalid length.
[   98.092479][ T7666] bridge0: entered promiscuous mode
[   98.096938][ T7666] netlink: 'syz.0.526': attribute type 1 has an invalid length.
[   98.247909][ T7668] bridge4: entered allmulticast mode
[   98.372455][ T7672] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   98.693409][ T7686] sctp: [Deprecated]: syz.2.533 (pid 7686) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.693409][ T7686] Use struct sctp_sack_info instead
[   98.774423][ T7697] __nla_validate_parse: 49 callbacks suppressed
[   98.774444][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'.
[   98.787952][ T7697] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   98.798841][ T7697] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   99.062487][ T7717] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   99.065377][ T7717] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   99.116448][ T7726] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   99.884001][ T7733] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[   99.887003][ T7732] delete_channel: no stack
[   99.916074][ T7735] netlink: 64 bytes leftover after parsing attributes in process `syz.0.549'.
[   99.977788][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'.
[  100.087602][ T7752] netlink: 'syz.2.556': attribute type 10 has an invalid length.
[  100.097618][ T7752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.556'.
[  100.124886][ T7752] team0: Port device geneve0 added
[  100.126056][ T7759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.557'.
[  100.133046][ T7759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.557'.
[  100.196401][ T7769] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  100.359877][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.564'.
[  100.399362][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'.
[  100.554697][ T7795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.568'.
[  101.914709][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'.
[  102.051352][ T7836] xt_CT: No such helper "syz0"
[  102.775856][ T7856] geneve1: entered promiscuous mode
[  102.777698][ T7856] geneve1: entered allmulticast mode
[  103.147091][ T7862] netlink: 'syz.0.591': attribute type 1 has an invalid length.
[  103.175038][ T7862] 8021q: adding VLAN 0 to HW filter on device bond4
[  103.195083][ T7862] bond4: (slave bridge1): making interface the new active one
[  103.199358][ T7862] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  103.213791][ T7862] gretap3: entered promiscuous mode
[  103.218704][ T7862] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  103.236173][ T7862] macvlan2: entered promiscuous mode
[  103.238544][ T7862] macvlan2: entered allmulticast mode
[  103.241748][ T7862] bond4: entered promiscuous mode
[  103.244004][ T7862] bridge1: entered promiscuous mode
[  103.247065][ T7862] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  103.250511][ T7862] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  103.257494][ T7862] bond4: left promiscuous mode
[  103.259366][ T7862] bridge1: left promiscuous mode
[  103.725910][   T24] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  103.744141][ T7889] netlink: 'syz.0.599': attribute type 13 has an invalid length.
[  103.746664][ T7889] netlink: 'syz.0.599': attribute type 17 has an invalid length.
[  103.773712][ T7889] erspan0: left allmulticast mode
[  103.811544][ T7889] bridge0: left promiscuous mode
[  103.816687][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.820187][ T7889] 8021q: adding VLAN 0 to HW filter on device team0
[  103.826028][ T7889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.832889][   T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  103.842266][   T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  103.845378][   T12] bond0: (slave bond2): link status definitely down, disabling slave
[  103.849550][   T12] bond0: now running without any active interface!
[  103.880041][ T7889] __nla_validate_parse: 5 callbacks suppressed
[  103.880053][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.599'.
[  103.898294][ T7889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.971835][ T7889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.026214][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.603'.
[  104.254385][ T7917] netlink: 'syz.1.607': attribute type 12 has an invalid length.
[  104.257381][ T7917] netlink: 'syz.1.607': attribute type 29 has an invalid length.
[  104.260232][ T7917] netlink: 148 bytes leftover after parsing attributes in process `syz.1.607'.
[  104.265390][ T7917] netlink: 51 bytes leftover after parsing attributes in process `syz.1.607'.
[  104.330993][ T7918] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  104.527918][ T7926] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  104.533292][ T7926] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  104.537692][ T7926] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  104.556278][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'.
[  104.567251][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'.
[  104.570906][ T7924] netlink: 'syz.1.610': attribute type 5 has an invalid length.
[  104.574002][ T7924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.610'.
[  104.589943][ T7924] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  104.593428][ T7924] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  104.596842][ T7924] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  104.601866][ T7924] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  104.606005][ T7924] geneve2: entered promiscuous mode
[  104.608157][ T7924] geneve2: entered allmulticast mode
[  104.716143][   T51] IPVS: starting estimator thread 0...
[  104.728012][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.616'.
[  104.819008][ T7943] IPVS: using max 40 ests per chain, 96000 per kthread
[  104.864298][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'.
[  104.867236][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'.
[  105.063300][ T7971] bond3: (slave erspan0): Releasing active interface
[  105.077731][ T7971] bond0: (slave bond2): Error -95 calling ndo_bpf
[  105.087375][ T7971] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  105.100016][ T7970] bond0: (slave bond2): Error -95 calling ndo_bpf
[  105.105919][ T7970] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  105.186187][ T7984] team0: No ports can be present during mode change
[  105.647149][ T8027] xt_l2tp: missing protocol rule (udp|l2tpip)
[  106.215981][ T7890] ==================================================================
[  106.218551][ T7890] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  106.220985][ T7890] Read of size 8 at addr ffff888111a6c0a0 by task khidpd_04585505/7890
[  106.224148][ T7890] 
[  106.225263][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: khidpd_04585505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  106.225274][ T7890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.225279][ T7890] Call Trace:
[  106.225283][ T7890]  <TASK>
[  106.225287][ T7890]  dump_stack_lvl+0x189/0x250
[  106.225300][ T7890]  ? __virt_addr_valid+0x1c8/0x5c0
[  106.225311][ T7890]  ? rcu_is_watching+0x15/0xb0
[  106.225320][ T7890]  ? __kasan_check_byte+0x12/0x40
[  106.225330][ T7890]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.225338][ T7890]  ? rcu_is_watching+0x15/0xb0
[  106.225347][ T7890]  ? lock_release+0x4b/0x3e0
[  106.225355][ T7890]  ? __virt_addr_valid+0x1c8/0x5c0
[  106.225364][ T7890]  ? __virt_addr_valid+0x4a5/0x5c0
[  106.225373][ T7890]  print_report+0xd2/0x2b0
[  106.225381][ T7890]  ? __mutex_lock+0x738/0xe80
[  106.225388][ T7890]  kasan_report+0x118/0x150
[  106.225398][ T7890]  ? __mutex_lock+0x738/0xe80
[  106.225406][ T7890]  __mutex_lock+0x738/0xe80
[  106.225413][ T7890]  ? __mutex_lock+0x51b/0xe80
[  106.225421][ T7890]  ? l2cap_unregister_user+0x6a/0x1b0
[  106.225433][ T7890]  ? __pfx___mutex_lock+0x10/0x10
[  106.225440][ T7890]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.225454][ T7890]  l2cap_unregister_user+0x6a/0x1b0
[  106.225466][ T7890]  hidp_session_thread+0x3c9/0x410
[  106.225475][ T7890]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.225482][ T7890]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.225492][ T7890]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.225500][ T7890]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.225508][ T7890]  ? __kthread_parkme+0x7b/0x200
[  106.225517][ T7890]  ? __kthread_parkme+0x1a1/0x200
[  106.225527][ T7890]  kthread+0x711/0x8a0
[  106.225537][ T7890]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.225545][ T7890]  ? __pfx_kthread+0x10/0x10
[  106.225554][ T7890]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.225564][ T7890]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.225575][ T7890]  ? __pfx_kthread+0x10/0x10
[  106.225619][ T7890]  ret_from_fork+0x3fc/0x770
[  106.225630][ T7890]  ? __pfx_ret_from_fork+0x10/0x10
[  106.225638][ T7890]  ? __switch_to_asm+0x39/0x70
[  106.225647][ T7890]  ? __switch_to_asm+0x33/0x70
[  106.225656][ T7890]  ? __pfx_kthread+0x10/0x10
[  106.225666][ T7890]  ret_from_fork_asm+0x1a/0x30
[  106.225679][ T7890]  </TASK>
[  106.225682][ T7890] 
[  106.298010][ T7890] Allocated by task 5835:
[  106.299405][ T7890]  kasan_save_track+0x3e/0x80
[  106.300842][ T7890]  __kasan_kmalloc+0x93/0xb0
[  106.302244][ T7890]  __kmalloc_noprof+0x27a/0x4f0
[  106.303689][ T7890]  hci_alloc_dev_priv+0x28/0x2040
[  106.305186][ T7890]  vhci_create_device+0x120/0x6e0
[  106.306714][ T7890]  vhci_write+0x3ce/0x4a0
[  106.308022][ T7890]  vfs_write+0x54b/0xa90
[  106.309470][ T7890]  ksys_write+0x145/0x250
[  106.310910][ T7890]  do_syscall_64+0xfa/0x3b0
[  106.312312][ T7890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.314409][ T7890] 
[  106.315343][ T7890] Freed by task 5835:
[  106.316678][ T7890]  kasan_save_track+0x3e/0x80
[  106.318145][ T7890]  kasan_save_free_info+0x46/0x50
[  106.319782][ T7890]  __kasan_slab_free+0x62/0x70
[  106.321213][ T7890]  kfree+0x18e/0x440
[  106.322618][ T7890]  bt_host_release+0x82/0x90
[  106.324275][ T7890]  device_release+0x9c/0x1c0
[  106.325820][ T7890]  kobject_put+0x22b/0x480
[  106.327166][ T7890]  vhci_release+0x88/0xd0
[  106.328492][ T7890]  __fput+0x44c/0xa70
[  106.329710][ T7890]  task_work_run+0x1d4/0x260
[  106.331103][ T7890]  do_exit+0x6b5/0x22e0
[  106.332347][ T7890]  do_group_exit+0x21c/0x2d0
[  106.333824][ T7890]  __x64_sys_exit_group+0x3f/0x40
[  106.335477][ T7890]  x64_sys_call+0x21ba/0x21c0
[  106.337221][ T7890]  do_syscall_64+0xfa/0x3b0
[  106.338864][ T7890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.340999][ T7890] 
[  106.341753][ T7890] Last potentially related work creation:
[  106.343566][ T7890]  kasan_save_stack+0x3e/0x60
[  106.345334][ T7890]  kasan_record_aux_stack+0xbd/0xd0
[  106.347390][ T7890]  insert_work+0x3d/0x330
[  106.349059][ T7890]  __queue_work+0xbd9/0xfe0
[  106.350847][ T7890]  queue_work_on+0x181/0x270
[  106.352617][ T7890]  process_scheduled_works+0xae1/0x17b0
[  106.354351][ T7890]  worker_thread+0x8a0/0xda0
[  106.355741][ T7890]  kthread+0x711/0x8a0
[  106.356970][ T7890]  ret_from_fork+0x3fc/0x770
[  106.358329][ T7890]  ret_from_fork_asm+0x1a/0x30
[  106.359847][ T7890] 
[  106.360596][ T7890] Second to last potentially related work creation:
[  106.362544][ T7890]  kasan_save_stack+0x3e/0x60
[  106.364050][ T7890]  kasan_record_aux_stack+0xbd/0xd0
[  106.365905][ T7890]  insert_work+0x3d/0x330
[  106.367427][ T7890]  __queue_work+0xcfc/0xfe0
[  106.369065][ T7890]  call_timer_fn+0x17e/0x5f0
[  106.370497][ T7890]  __run_timer_base+0x646/0x860
[  106.372066][ T7890]  run_timer_softirq+0xb7/0x180
[  106.373701][ T7890]  handle_softirqs+0x286/0x870
[  106.375606][ T7890]  __irq_exit_rcu+0xca/0x1f0
[  106.377339][ T7890]  irq_exit_rcu+0x9/0x30
[  106.378844][ T7890]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  106.380772][ T7890]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  106.382742][ T7890] 
[  106.383486][ T7890] The buggy address belongs to the object at ffff888111a6c000
[  106.383486][ T7890]  which belongs to the cache kmalloc-8k of size 8192
[  106.387806][ T7890] The buggy address is located 160 bytes inside of
[  106.387806][ T7890]  freed 8192-byte region [ffff888111a6c000, ffff888111a6e000)
[  106.392048][ T7890] 
[  106.392802][ T7890] The buggy address belongs to the physical page:
[  106.394952][ T7890] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111a68
[  106.398192][ T7890] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  106.400725][ T7890] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  106.403081][ T7890] page_type: f5(slab)
[  106.404342][ T7890] raw: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  106.406984][ T7890] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  106.409547][ T7890] head: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  106.412234][ T7890] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  106.415221][ T7890] head: 057ff00000000003 ffffea0004469a01 00000000ffffffff 00000000ffffffff
[  106.418346][ T7890] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  106.420977][ T7890] page dumped because: kasan: bad access detected
[  106.422940][ T7890] page_owner tracks the page as allocated
[  106.424647][ T7890] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5584, tgid 5584 (dhcpcd-run-hook), ts 36585812624, free_ts 36472094492
[  106.430988][ T7890]  post_alloc_hook+0x240/0x2a0
[  106.432511][ T7890]  get_page_from_freelist+0x21e4/0x22c0
[  106.434207][ T7890]  __alloc_frozen_pages_noprof+0x181/0x370
[  106.435951][ T7890]  alloc_pages_mpol+0x232/0x4a0
[  106.437486][ T7890]  allocate_slab+0x8a/0x3b0
[  106.438917][ T7890]  ___slab_alloc+0xbfc/0x1480
[  106.440351][ T7890]  __kmalloc_cache_noprof+0x296/0x3d0
[  106.442043][ T7890]  tomoyo_init_log+0x111f/0x1f70
[  106.443588][ T7890]  tomoyo_supervisor+0x340/0x1480
[  106.445530][ T7890]  tomoyo_env_perm+0x149/0x1e0
[  106.447391][ T7890]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  106.449156][ T7890]  tomoyo_bprm_check_security+0x11c/0x180
[  106.450853][ T7890]  security_bprm_check+0x89/0x270
[  106.452374][ T7890]  bprm_execve+0x8ee/0x1450
[  106.453816][ T7890]  do_execveat_common+0x510/0x6a0
[  106.455345][ T7890]  __x64_sys_execve+0x94/0xb0
[  106.456752][ T7890] page last free pid 5578 tgid 5578 stack trace:
[  106.458694][ T7890]  __free_frozen_pages+0xc71/0xe70
[  106.460199][ T7890]  __put_partials+0x161/0x1c0
[  106.461622][ T7890]  put_cpu_partial+0x17c/0x250
[  106.463068][ T7890]  __slab_free+0x2f7/0x400
[  106.464632][ T7890]  qlist_free_all+0x97/0x140
[  106.466429][ T7890]  kasan_quarantine_reduce+0x148/0x160
[  106.468543][ T7890]  __kasan_slab_alloc+0x22/0x80
[  106.470284][ T7890]  __kmalloc_noprof+0x224/0x4f0
[  106.471745][ T7890]  tomoyo_supervisor+0xbd5/0x1480
[  106.473247][ T7890]  tomoyo_path_permission+0x25a/0x380
[  106.475166][ T7890]  tomoyo_check_open_permission+0x24d/0x3b0
[  106.477300][ T7890]  security_file_open+0xb1/0x270
[  106.478838][ T7890]  do_dentry_open+0x35e/0x1970
[  106.480284][ T7890]  vfs_open+0x3b/0x340
[  106.481553][ T7890]  path_openat+0x2ee5/0x3830
[  106.482948][ T7890]  do_filp_open+0x1fa/0x410
[  106.484481][ T7890] 
[  106.485383][ T7890] Memory state around the buggy address:
[  106.487050][ T7890]  ffff888111a6bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  106.489423][ T7890]  ffff888111a6c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.491886][ T7890] >ffff888111a6c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.494414][ T7890]                                ^
[  106.496347][ T7890]  ffff888111a6c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.499356][ T7890]  ffff888111a6c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.502329][ T7890] ==================================================================
[  106.506269][ T7890] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  106.508676][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: khidpd_04585505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  106.512366][ T7890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.515759][ T7890] Call Trace:
[  106.517087][ T7890]  <TASK>
[  106.518179][ T7890]  dump_stack_lvl+0x99/0x250
[  106.519590][ T7890]  ? __asan_memcpy+0x40/0x70
[  106.520979][ T7890]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.522505][ T7890]  ? __pfx__printk+0x10/0x10
[  106.523929][ T7890]  panic+0x2db/0x790
[  106.525142][ T7890]  ? __pfx_panic+0x10/0x10
[  106.526499][ T7890]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  106.528234][ T7890]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.530013][ T7890]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  106.532043][ T7890]  ? print_memory_metadata+0x314/0x400
[  106.533700][ T7890]  ? __mutex_lock+0x738/0xe80
[  106.535502][ T7890]  check_panic_on_warn+0x89/0xb0
[  106.537382][ T7890]  ? __mutex_lock+0x738/0xe80
[  106.538999][ T7890]  end_report+0x78/0x160
[  106.540278][ T7890]  kasan_report+0x129/0x150
[  106.541642][ T7890]  ? __mutex_lock+0x738/0xe80
[  106.543021][ T7890]  __mutex_lock+0x738/0xe80
[  106.544607][ T7890]  ? __mutex_lock+0x51b/0xe80
[  106.546231][ T7890]  ? l2cap_unregister_user+0x6a/0x1b0
[  106.547818][ T7890]  ? __pfx___mutex_lock+0x10/0x10
[  106.549634][ T7890]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.551538][ T7890]  l2cap_unregister_user+0x6a/0x1b0
[  106.553110][ T7890]  hidp_session_thread+0x3c9/0x410
[  106.554906][ T7890]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.557090][ T7890]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.559069][ T7890]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.561651][ T7890]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.563994][ T7890]  ? __kthread_parkme+0x7b/0x200
[  106.565917][ T7890]  ? __kthread_parkme+0x1a1/0x200
[  106.567967][ T7890]  kthread+0x711/0x8a0
[  106.569532][ T7890]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.571864][ T7890]  ? __pfx_kthread+0x10/0x10
[  106.573759][ T7890]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.575708][ T7890]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.577832][ T7890]  ? __pfx_kthread+0x10/0x10
[  106.579638][ T7890]  ret_from_fork+0x3fc/0x770
[  106.581144][ T7890]  ? __pfx_ret_from_fork+0x10/0x10
[  106.582753][ T7890]  ? __switch_to_asm+0x39/0x70
[  106.584392][ T7890]  ? __switch_to_asm+0x33/0x70
[  106.586299][ T7890]  ? __pfx_kthread+0x10/0x10
[  106.588325][ T7890]  ret_from_fork_asm+0x1a/0x30
[  106.590199][ T7890]  </TASK>
[  106.591960][ T7890] Kernel Offset: disabled
[  106.593646][ T7890] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:05:21  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000450f370
R8 =ffff8880205d8237 R9 =1ffff110040bb046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ca R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fecbd690028 CR3=0000000025808000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00 ffffffffffffffff XMM01=ffffffffffffffff ffff00ff00000000
XMM02=ffffffffffff0000 ffffffffffffff00 XMM03=0000000000000000 ffff000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=000000000000025d 0000000000000000
XMM06=ffffffffffff0000 ffffffffffffffff XMM07=0000000000000000 000000ff00000000
XMM08=ffffffffffff0000 ffffffffffffffff XMM09=00000000000002c1 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff88811baa3980 RCX=ffffffff934d6fc0 RDX=0000000000000002
RSI=ffff88811baa4470 RDI=ffff88811baa3980 RBP=ffffc9000316f598 RSP=ffffc9000316f4c0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=ffff88811baa4470 R13=1ffff9200062decb R14=ffff88811baa4470 R15=0000000000000000
RIP=ffffffff819e27d9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3392fd36c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000199030 CR3=0000000027158000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3395785478 00007f3395785450 XMM03=00007f3395785488 00007f3395785480
XMM04=00007f33962ed100 00007f3395785440 XMM05=00007f3395785458 00007f33957854a0
XMM06=00007f3395785498 00007f3395785490 XMM07=00007f3395785488 00007f3395785480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3395611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
