last executing test programs:

2m41.234608486s ago: executing program 0 (id=644):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

2m41.165558304s ago: executing program 0 (id=646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000040000000400000012"], 0x50)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_opts(r5, 0x0, 0x12, &(0x7f0000002e00)=""/1, &(0x7f0000000100)=0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdfff, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {0xfff3}}}, 0x24}}, 0x20040010)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000002b00)={'syztnl0\x00', 0x0, 0x29, 0xfc, 0x0, 0x7, 0x20, @mcast2, @mcast2, 0x8, 0x0, 0x38dc5865}})
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10)
sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
syz_emit_ethernet(0x104, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xce, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb"}}}}}, 0x0)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0)

2m41.047860156s ago: executing program 0 (id=648):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdc00, {0x3}}, 0x14}}, 0x8004)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x44}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdc00, {0x3}}, 0x14}}, 0x8004) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) (async)

2m41.047348637s ago: executing program 0 (id=649):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
syz_emit_ethernet(0x364, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x32e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0x12)
getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
mmap(&(0x7f00003b9000/0x3000)=nil, 0x3000, 0x2000003, 0x104918, r4, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'geneve0\x00', 0x400})
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x5, &(0x7f0000000000)=0x9, 0x4)
r6 = socket(0xa, 0x3, 0x3a)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e22, @multicast2}})
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x0, 0x8000, 0x0, 0x0, 0x0, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0xbab, 0x89f, 0x8, 0x1]}}, 0x5c)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1}, {@in6=@loopback, 0x0, 0x32}, @in6=@private2}}, [@XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0x10c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)

2m41.046531537s ago: executing program 0 (id=651):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000ffffff9071118400000000008510000002000000850000008c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

2m40.966635117s ago: executing program 0 (id=653):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x525}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40080) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', <r7=>0x0, 0x7800, 0x7, 0xd, 0x7477, {{0x24, 0x4, 0x0, 0xb, 0x90, 0x67, 0x0, 0xe, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x8d, 0x3, 0x0, [{@private=0xa010100, 0x5}, {@multicast1, 0x3ff80000}]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x5, 0x7, "86239ecf20"}, {0x1, 0x8, "d24a9478ffc4"}]}, @timestamp_addr={0x44, 0x4c, 0xf4, 0x1, 0x3, [{@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@remote, 0x3}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@remote, 0x1}, {@rand_addr=0x64010100, 0x2}, {@loopback, 0x6}, {@rand_addr=0x64010100, 0x582}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@empty, 0x46, r7})
recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2042}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/139, 0x8b}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/58, 0x3a}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (async)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4048004)

2m36.287452057s ago: executing program 1 (id=718):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000868b90780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

2m36.217630217s ago: executing program 1 (id=719):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x3c}, 0x1, 0x4000000000000000, 0x0, 0x1}, 0x0)

2m36.217449563s ago: executing program 1 (id=720):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000001020071118400000000008510000002000000850000008c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

2m36.167410816s ago: executing program 1 (id=721):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r4, 0xfffffff1)
listen(r4, 0x7fff)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0030777b800c0001006d6149f6564ea9685ffb63766c616e971eeda44b52eefc00080000000000", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xfc}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000007"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)="1f", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)=ANY=[], 0x1000f)
socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

2m36.047457335s ago: executing program 1 (id=722):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x30, 0x5f, 0x63]}}, 0x0, 0x36, 0x0, 0x10008, 0x100}, 0x28)

2m36.047153125s ago: executing program 1 (id=723):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbefb44d85f990"], 0x24}}, 0x40000c0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockname$inet(r3, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000000c0)='rpc_call_rpcerror\x00', r7, 0x0, 0xf69}, 0x18)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe)
listen(r9, 0xa1)
accept4$bt_l2cap(r9, 0x0, 0x0, 0x0)
setsockopt$sock_int(r9, 0x1, 0x7, 0x0, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r4, 0x0, 0x0, 0x800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)

2m25.510228878s ago: executing program 32 (id=653):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x525}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40080) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', <r7=>0x0, 0x7800, 0x7, 0xd, 0x7477, {{0x24, 0x4, 0x0, 0xb, 0x90, 0x67, 0x0, 0xe, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x8d, 0x3, 0x0, [{@private=0xa010100, 0x5}, {@multicast1, 0x3ff80000}]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x5, 0x7, "86239ecf20"}, {0x1, 0x8, "d24a9478ffc4"}]}, @timestamp_addr={0x44, 0x4c, 0xf4, 0x1, 0x3, [{@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@remote, 0x3}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@remote, 0x1}, {@rand_addr=0x64010100, 0x2}, {@loopback, 0x6}, {@rand_addr=0x64010100, 0x582}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@empty, 0x46, r7})
recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2042}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/139, 0x8b}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/58, 0x3a}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (async)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4048004)

2m23.554382719s ago: executing program 3 (id=875):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r1=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r2=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r3=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x3bc5985b97cc9a57}, 0x20000040)
pipe(&(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r8, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffff3e1, 0x7}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008015}, 0x20000000)
r9 = socket$kcm(0x29, 0x5, 0x0)
ioctl$FIGETBSZ(r7, 0x2, &(0x7f00000003c0))
sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0xa, 0x40, 0x0, 0x14, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@rand_addr=' \x01\x00', 0x22, 0x0, 0x10}, @sadb_lifetime={0x4, 0x3, 0x8000, 0x1054a0000, 0x27fc, 0xfffffffffffffffc}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0xd2, 0x0}, @in=@loopback, 0x9, 0x10, 0x10}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}]}, 0xa0}}, 0x80)
getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000540)={@local, @loopback, <r10=>0x0}, &(0x7f0000000580)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000005c0)={'gretap0\x00', <r11=>r10, 0x1, 0x1, 0x7ff, 0xe7, {{0x1e, 0x4, 0x0, 0x6, 0x78, 0x65, 0x0, 0x5, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@generic={0x7, 0xa, "327d474bea2c6aa7"}, @timestamp_prespec={0x44, 0x14, 0xe3, 0x3, 0x4, [{@empty, 0x69743a4a}, {@multicast1, 0x7fff}]}, @cipso={0x86, 0x26, 0x1, [{0x5, 0x10, "6d7417d24d0fc916ab9e2e7407d2"}, {0x2, 0x8, "d4742d5ae6a6"}, {0x7, 0x8, "3c1b150bc55b"}]}, @ssrr={0x89, 0x1f, 0x94, [@empty, @broadcast, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010100, @loopback]}]}}}}})
bind$alg(r6, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_COUNTERS(r13, 0x0, 0x81, &(0x7f00000007c0)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0x0, 0x0, 0x726], 0x5, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000900)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r8, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmsg$kcm(r9, &(0x7f0000000cc0)={&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @multicast2}, 0x0, 0x2}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)="2237d47051f5958b385f1576e6f9a58a2e2d926bc7b367a5fa98d77eeba46cfc5ad1aec96908698a67cc792759acccdd6f8fe43aee99785c1ebb2c9a5e99bc8e8810dd426fd2f397e692c40024b098d0ea90c359a9138e7a94e8e90e186b8b07b2bb511e0dd1aae07a80c78fd4ed11eb8348252fcf0660f05cb5821a9e21b1759efcb168a6f5781fae1f4ed122d015b771604354da18fa51a60a245730353e835776e6a378129818449b5f57768313f861e035863a7afbe89cdfc312802b25399b437866f39eae4d015d262f34065f88dc2e", 0xd2}], 0x1, &(0x7f0000000bc0)=[{0xf8, 0x7535567519d47817, 0xa6, "1b93aa8cd3b2563dd43ba25e6817dcec4839fc8a183e5d46534c20940436e33026bffca979c0e612837d075387211790c34eaae0d661c35969e2e329a5486719a2017ba135de5e06d46f9faa928c4495a8f8b0833e96624f3182958ebacfda0c198ba5ef004919be4e76ceabea2d8fa9cacf1afb7018139f1412db154ed9fe0a2ff328571840511b989c77104947b4b840b0aa1dc3e21d89821d9760c0671a7c3f1b3ab7d137c860e6e6e54d2dbad39693e9e7630e0086f8d8fe8840ecc5315f5002fc0311ae3678951e7e3c3addceccd02ab652fc79a31b987b634cd09a71ae3cb97fa6da"}], 0xf8}, 0x4080)
recvmsg(r13, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000d00)=""/199, 0xc7}, {&(0x7f0000000e00)=""/5, 0x5}, {&(0x7f0000000e40)=""/197, 0xc5}, {&(0x7f0000000f40)=""/42, 0x2a}, {&(0x7f0000000f80)=""/121, 0x79}, {&(0x7f0000001000)=""/221, 0xdd}, {&(0x7f0000001100)=""/249, 0xf9}, {&(0x7f0000001200)=""/216, 0xd8}, {&(0x7f0000001300)=""/97, 0x61}, {&(0x7f0000001380)=""/171, 0xab}], 0xa, &(0x7f0000001500)=""/78, 0x4e}, 0x40000000)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10010, r15, 0xe7fbb000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001640)={'syztnl2\x00', &(0x7f00000015c0)={'tunl0\x00', r11, 0x40, 0x7, 0x1, 0x0, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0xa, 0x29, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x12, 0x3, 0x0, [{@rand_addr=0x64010102, 0x100}, {@remote, 0xfc}]}, @noop, @lsrr={0x83, 0xb, 0x90, [@multicast2, @local]}]}}}}})
syz_genetlink_get_family_id$nl802154(&(0x7f0000001680), r0)
r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), r6)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, r16, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffff0000}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000020}, 0x4015)
socket$nl_xfrm(0x10, 0x3, 0x6)

2m22.644650206s ago: executing program 3 (id=884):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c274214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160000000000403622a590ef62f6b0f8eca0faed00000000", 0x78, 0x4000000, 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x1802, 0xc040, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtaction={0x0, 0x30, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{0x0, 0x1, [@m_connmark={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x5, 0x2, 0x3}, 0x7}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x9, 0x4, 0x3, 0xeddf, 0x1}, 0x6}}]}, {0x0, 0x6, "b3346bf4a0d6c27818e6778ecf4bba"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3}}}}, @m_csum={0x0, 0x1c, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x7, 0x4, 0x5, 0x1c6}, 0x1}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x4, 0xc, 0x0, 0xab, 0x859}, 0x7a}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x7, 0xbd, 0x4, 0x10001, 0x1}, 0x20}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x80, 0x2736, 0x8, 0x101, 0xffff}, 0x3e}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xffffb0ae, 0x0, 0x20000000, 0x4, 0x7ff}, 0x18}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x8, 0x6b9, 0x8, 0x7f, 0x772}, 0x21}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x2, 0x8, 0x6, 0xfffffffc, 0x8}, 0x66}}]}, {}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x2}}}}, @m_connmark={0x0, 0x11, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0xfffffffd, 0x81, 0x1, 0x3540c124, 0x6}, 0x343}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x6da, 0x1, 0x10000000, 0x6, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x98, 0x8, 0x3, 0x9, 0x3}, 0xfffa}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x1ff, 0x9, 0x0, 0x9, 0x80000000}, 0x2ff2}}]}, {0x0, 0x6, "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"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x46}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x6}]}, {0x0, 0x6, "9d132a0ad824028028b28615a5b99bb7f58a823b1e04611989dcf7615fad1a4875f2d50947f9ea6e2a59d8e44bf89a9fc3c99d47e1c20e21a1b90f94c3eb5eaca29c5115e287ba5a303dcea46e80327ada321a8c8b6940de81d7304ce5472cad8cba035ee6331b5649213fe4257043f9baeb7afb487932e49a9b691034e7d087ee0e6543e51cad156863ba0e7374c66cc8a8541abc4ee8caf0c976b44fc9705d796f9982fb782ee21e3d0ebc46e0"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0xa}, {0x8, 0x2}, {0x8, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xd92f}]}, 0x2c}}, 0x20040000)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000111401a78cbd68edbe2f500008"], 0x20}}, 0x0)

2m22.584702313s ago: executing program 3 (id=885):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="090b000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@private=0xa010102, 0x2, 0x6, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040810)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r8, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x20008000)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @empty, 0x10001}, 0x1c) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0)
r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) (async)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c0000000400001f6f8d3cd869000400000019000000338fb74c1a5b76a7a46f3b56", @ANYRES32=r10, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x8c}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async, rerun: 32)
bind$inet6(r9, 0x0, 0x0) (async, rerun: 32)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x7fbd6, 0x4)

2m22.51561465s ago: executing program 3 (id=886):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
sendfile(r2, r2, 0x0, 0x4)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf25060000000800c8f5d1daf1f7cdb97f84f80100", @ANYRES32=0x0, @ANYBLOB="08000e0020000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40804)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x1}, 0x94)

2m22.515386343s ago: executing program 3 (id=887):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005200010005bd7000040000000200000008000100", @ANYRES32], 0x1c}}, 0x800) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r3=>0x0, 0x6d2292e13e877d7d, 0xb, 0x6, 0x9, 0x2e, @mcast1, @mcast1, 0x20, 0x80, 0xfffffff6, 0xdca}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x87}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xae}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000)

2m22.41579044s ago: executing program 3 (id=888):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2}, 0x18)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000001070104000000000500000500000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="3f0a0200fcffffff85100000f9ffffff18010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703784f01040000850000000600000018490000ffffffff0000000000000000af3408000400000018600000000000000000000004000000"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x7d, &(0x7f0000000540)=""/125, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xd, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x2, 0x6, 0x4}, {0x1, 0x5, 0x10, 0xa}, {0x0, 0x2, 0x9, 0x6}, {0x3, 0x3, 0xd, 0x1}, {0x1, 0x1, 0xc}, {0x4, 0x1, 0x0, 0x6}], 0x10, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x48)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
close(r8)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000180)={'wg1\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0001063331876af4bbc2c9c59b4d00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12f5b3926ed61253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x6cec00, 0x0)
close(r10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r11=>0xffffffffffffffff})
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
syz_emit_ethernet(0x52, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES8=0x0, @ANYRESDEC=r11], 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="8fedcb5d070811960000000186dd6372ce22667f2c"], 0x280)

2m21.053734207s ago: executing program 33 (id=723):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbefb44d85f990"], 0x24}}, 0x40000c0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockname$inet(r3, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000000c0)='rpc_call_rpcerror\x00', r7, 0x0, 0xf69}, 0x18)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe)
listen(r9, 0xa1)
accept4$bt_l2cap(r9, 0x0, 0x0, 0x0)
setsockopt$sock_int(r9, 0x1, 0x7, 0x0, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r4, 0x0, 0x0, 0x800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)

2m7.45126611s ago: executing program 34 (id=888):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2}, 0x18)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000001070104000000000500000500000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="3f0a0200fcffffff85100000f9ffffff18010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703784f01040000850000000600000018490000ffffffff0000000000000000af3408000400000018600000000000000000000004000000"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x7d, &(0x7f0000000540)=""/125, 0x40f00, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xd, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x2, 0x6, 0x4}, {0x1, 0x5, 0x10, 0xa}, {0x0, 0x2, 0x9, 0x6}, {0x3, 0x3, 0xd, 0x1}, {0x1, 0x1, 0xc}, {0x4, 0x1, 0x0, 0x6}], 0x10, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x48)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
close(r8)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000180)={'wg1\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0001063331876af4bbc2c9c59b4d00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12f5b3926ed61253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x6cec00, 0x0)
close(r10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r11=>0xffffffffffffffff})
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
syz_emit_ethernet(0x52, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES8=0x0, @ANYRESDEC=r11], 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="8fedcb5d070811960000000186dd6372ce22667f2c"], 0x280)

1m11.738567544s ago: executing program 2 (id=2143):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003500000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003500000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

1m11.63853164s ago: executing program 2 (id=2144):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
unshare(0x2c020400)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r4, 0x0, 0x2400)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x404000)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r7)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r8, 0x325}, 0x14}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000b03000000000000000000000902"], 0x0, 0x56, 0x0, 0x3}, 0x20)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0xf0, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xb2, 0xa9, @random="5bb64e0b6ea306795d16b5bfa26af4ec134c19c358b1bc3a3f5ea58a967d3695f6dae6eb308d86291fb5530373fe16e1709d00f36a9987a13a538158428329b8f4106eb9d976f058c385b0defa40a5d65bfe4e649e5cf7c32a86d15e6b51da0c28761be3334dea8b8820f9f78c8daf0ac53fb87f51fe1446ab84909800b001940c512479751751eabe88d04105814844548049249ff1e85587cbc83873444baa4817b0bf2ea8664d042823879273"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
socketpair(0x27, 0x1, 0xd, &(0x7f0000000140))
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0)
listen(r0, 0x9)

1m11.528876713s ago: executing program 2 (id=2148):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000340)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85ad", 0x2}], 0x1}, 0x24004860)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000080090000001c000480ac6dffc008000600001000000900010073797a3000000000"], 0x30}}, 0x0)

1m11.466081099s ago: executing program 2 (id=2150):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1700000069000100"], 0x18}, 0x1, 0x0, 0x0, 0x4482}, 0x100000000000000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xce)
ioctl(r2, 0x7, &(0x7f0000000100)="d10c233a56d20497fb5483e630f05ceab6d199f75ddb77ff2e8da9") (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)

1m11.464974414s ago: executing program 2 (id=2152):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000040000000000000000000000000ab4000000000a05000000000000000000050000010900010073797a30000000000800024000000001040006000c00044000000000000000040900010073797a310000000070000600beffcca19576908c82c4ca4536ffd19231a6b5fc3ba1e1697d56d407fafb9acc3b90966202a3637daedd3441ac70426f43d404f043d610c15189464597687f1eee0abd115df5a2c90365402a358e17470b900d67a6afe36ccaca6bc67d4a647e032f6af3dd808bc3f6803ff6d827e50198eb71da2639168ec4363c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002366c56d71827f7cb21eb8f8e598b35f6800c00024000000000000000000c0001400000000000000003140000001000010000000000000000000084000a5c4050f615771d24fa0456d3c87354b94c48500e8c9a1981e4ee079c5614d4ba9b4e55f8"], 0x1a4}}, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0xc010)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000003400048005000300010000002000030001000000050003e3000000000500030002000000050003000500000005000300070000000800020002"], 0x58}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_procs(r10, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r11, &(0x7f0000000c40), 0x12)
r12 = openat$cgroup_procs(r9, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r12, &(0x7f0000000100), 0x12)
r13 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
pread64(r13, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xd0, r6, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a529db16aede882f"}]}, @NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a2ee14c448b04095"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c1102c64f36ec641aae00be21004d8a039866c4a558929c0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="82497a36c72e2b91f70702ac0d71b19d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ccf41c4edc78757703655fe06d9029fc"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="46ce41985aa4fc7efa31b4ee0e513c28"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b2a74f4704c93dee23fcf38bdd33ff3dd0b4937ddb813b52712bdb6278ae3b3a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x60000040}, 0x4000001)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r14)

1m11.338156376s ago: executing program 2 (id=2155):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000140)={'wlan0\x00', @ifru_settings={0x52, 0x22f9, @fr_pvc=&(0x7f0000000100)={0x8}}})
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe)
sendto$inet6(r1, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000240)=0x5, 0x4)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x46b7}], 0x2, 0x20, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = accept4$rose(r0, &(0x7f0000000440)=@full={0xb, @dev, @default, 0x0, [@default, @remote, @rose, @default, @rose]}, &(0x7f0000000480)=0x40, 0x80400)
setsockopt$rose(r4, 0x104, 0x4, &(0x7f00000004c0)=0x80000001, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xb, 0x95a8, 0x5, 0x101, 0x2}, 0x0, 0x1}, [{0x7, 0x6, 0x18, 0x8, 0x80000001, 0x4}, {0x35, 0xbd6, 0x7, 0x7, 0xc294, 0x9}, {0x800, 0x6, 0x8001, 0x1, 0x0, 0x4}, {0x5, 0x1, 0xe00, 0xd32, 0xfff}, {0x2, 0x200, 0x7, 0xd64, 0x5, 0xc}, {0x3, 0x7ff, 0xfff, 0xb, 0xfff, 0x5}, {0x2, 0x4, 0x0, 0x3, 0x3, 0x10001}, {0xfff, 0x5, 0x7f, 0x2, 0x0, 0x8}, {0x111fdbe2, 0x3, 0x8, 0x5, 0x2000000, 0x4}, {0x9, 0x7, 0x5, 0x466, 0xfffffc01, 0x2}, {0x1000, 0x5, 0xed87, 0xd2a, 0x0, 0x1}, {0x8, 0x5, 0x8000, 0x10, 0x6, 0x7c2}, {0x2, 0x7, 0x6, 0x7, 0xc, 0x8}, {0x2, 0x240, 0x7, 0xc, 0xfffffffd, 0x7}, {0x9, 0x6, 0x4, 0x101, 0xffff8001, 0x200}, {0x1d2cbf69, 0xfffffbff, 0x2, 0x2, 0xf, 0x3}, {0x2ce, 0x7, 0x1, 0x3e18, 0x8, 0x4}, {0xfc5, 0xae7, 0x80000000, 0x1ff, 0x8b, 0xfffffffd}, {0x3, 0x8, 0x2, 0xfffffff8, 0x3, 0xf2e}, {0x5, 0x5, 0xffffffff, 0x7, 0x1, 0x3}, {0x3, 0x7d6, 0xe4, 0x5, 0x2, 0x10001}, {0x9fa3, 0x1fc, 0x0, 0x9, 0x0, 0xc29}, {0x7, 0x5, 0x6, 0x80000001, 0x0, 0x1}, {0x8, 0x0, 0xfe000000, 0xa, 0x3, 0x161}, {0x9, 0x8, 0x4, 0x3, 0x10001, 0x25075c96}, {0x101, 0x8000, 0xe7, 0x200, 0xf, 0x3}, {0x15000000, 0x2d41, 0x6, 0x8, 0x6, 0x2e}, {0x6, 0x401, 0x1, 0x28a, 0xf5c, 0xe2a}, {0x0, 0x3ff, 0x0, 0x5ce, 0x42, 0x3}, {0x0, 0x4, 0x6cce, 0x2}, {0x3, 0x1, 0x3, 0x0, 0xa1, 0x2}, {0x7, 0x9, 0x8, 0x3045, 0x2, 0x1}, {0x7, 0x4, 0x6, 0x510cc509, 0x6, 0x6}, {0x89f9, 0xe5ff, 0x1, 0x9, 0x2f37}, {0x9c, 0x10000, 0x8, 0x9717, 0x9, 0x8001}, {0xfffffffe, 0xfff, 0x5, 0x8001, 0x5, 0x3}, {0x80, 0x3, 0x80000001, 0x80000001, 0x8, 0x81}, {0x6, 0x9, 0x4, 0x7, 0x0, 0x1}, {0x58d47774, 0x5dba, 0x1, 0x2, 0x3, 0x9}, {0x1, 0x3ff, 0xd, 0x7, 0x80000000, 0x3d}, {0x9, 0x0, 0x200, 0xaeb, 0x1, 0x28ec}, {0x7fff, 0x4, 0x6, 0x80, 0x8, 0x5}, {0x100, 0x3, 0x9, 0x0, 0x6, 0xc639}, {0xc, 0x9, 0x6, 0x100, 0x400, 0x1ff}, {0x3, 0x9, 0x1, 0x3, 0x9, 0x6}, {0x17, 0x200, 0x5, 0x1, 0x4, 0x9}, {0x5, 0x8, 0x7, 0xca, 0x3, 0xfff}, {0x0, 0xfffffff8, 0x9, 0x9, 0x6, 0x80}, {0x10100000, 0x0, 0x7, 0x80000000, 0x5, 0x51}, {0x6, 0x5, 0x8, 0x3ea7, 0x4, 0x9e4}, {0x7fffffff, 0xc, 0x3, 0x7, 0x7f, 0x7}, {0x5, 0x5b07f77b, 0x7, 0xd4, 0xd96, 0x4b3}, {0x1, 0x0, 0xda9b, 0x9, 0x4, 0x2e1}, {0x4, 0x1, 0x9, 0x7, 0xd, 0x9}, {0x8, 0x8, 0x4, 0x6726953b, 0x34, 0x8}, {0xc45, 0x3, 0x401, 0x7fff, 0x2}, {0x40000, 0x0, 0x80, 0xd7b, 0x7, 0x100000}, {0x6, 0x6, 0x4, 0xf, 0xfffffffa, 0x3}, {0xc, 0x8, 0x7ff, 0x1, 0x5, 0xfffffff8}, {0x5, 0x68f, 0x2, 0x5, 0x400, 0x100}, {0x1, 0xa, 0xc, 0x5, 0x0, 0x7fff}, {0xfffffff5, 0x1, 0x5, 0x0, 0x4000, 0x602b}, {0x8, 0x1, 0x1000, 0xf4, 0xffffff01, 0x2}, {0x8, 0x1ff, 0x81, 0x4, 0x6, 0x8000}, {0x6, 0x80000001, 0x3, 0x240, 0x6, 0x8}, {0x7, 0x3, 0x9, 0x4, 0x4, 0xcf88}, {0x6c7, 0x4, 0x9c, 0x18, 0x0, 0xc}, {0x2, 0x9, 0x200, 0x7, 0x4, 0x7}, {0x800, 0xaf7b, 0x5, 0x80, 0x3, 0x2}, {0x5, 0xfffffbff, 0x9, 0x4, 0x5, 0x80000001}, {0x7, 0x9, 0x81, 0x2fd, 0x40, 0x2}, {0x30, 0x8, 0x81, 0x80000001, 0xa, 0xcc8}, {0x8, 0xa, 0x4, 0x2, 0x9d5, 0x7}, {0x539, 0x2, 0xb673, 0x4, 0x80000000, 0x1000}, {0x2, 0x3, 0x8000, 0x6, 0x7, 0x7}, {0x2, 0x9, 0x6, 0x7, 0x187, 0x800}, {0x200, 0xad1, 0x0, 0x8a, 0x5, 0xffff}, {0x4, 0xf, 0x8, 0x9, 0x5, 0x6}, {0x8, 0x10, 0x9, 0x1, 0x3, 0x4}, {0xfffff800, 0xffffff7e, 0x1, 0x10001, 0x8, 0x7}, {0x7ff, 0x9, 0x0, 0xd, 0x7, 0xfffff54c}, {0x6087, 0x2, 0x1, 0x0, 0x2, 0x1}, {0x9, 0x8, 0x7d, 0x6970bd98, 0x63c1, 0x1}, {0x9, 0x13e39b74, 0x8, 0x7, 0x400}, {0x40, 0x6, 0x81, 0x93, 0x6, 0x3}, {0x9, 0x7, 0xffff622e, 0x87, 0x1000, 0xfffffffb}, {0x8, 0x8e8, 0x7, 0xffff0001, 0x101, 0x3}, {0x7f, 0x2, 0x5, 0x3, 0x5, 0x6}, {0xfffffffd, 0x3, 0x3, 0xff, 0x3, 0xffff}, {0xffff, 0x1, 0x1, 0x7, 0x5, 0x5}, {0x4, 0x4, 0x0, 0x2, 0x0, 0xa}, {0x9, 0x2, 0x1, 0x81, 0x2, 0x3}, {0x654c5d3b, 0xffffffff, 0xef, 0x4, 0xdaf6, 0xc}, {0x8, 0x5, 0x2, 0x7ff, 0xffffff51, 0x3}, {0x7, 0x200, 0xa34, 0x1, 0x6, 0xffffff03}, {0x1, 0x0, 0x9, 0x5, 0x5, 0xb08}, {0x6, 0x890, 0x588d, 0x7, 0x1, 0x8}, {0xf, 0x9, 0x8, 0x2, 0x2, 0xf}, {0x4, 0x7, 0x7, 0x5, 0x4, 0x1}, {0x8, 0x44a, 0x7, 0x80, 0x6, 0x10001}, {0x800, 0xd2, 0x8, 0x0, 0x4, 0x5}, {0x6, 0x9, 0x23f, 0x9, 0x94, 0xffff}, {0xfffffffb, 0x1dd, 0x0, 0x6, 0xb5e, 0x800}, {0xb, 0xd851, 0xfff, 0xc9, 0xec, 0x5}, {0x7a4316df, 0x3ff, 0x3, 0x20c4, 0x0, 0x1000}, {0x8, 0x464, 0x7fff, 0x8, 0x1, 0x9}, {0x10, 0xa, 0x9, 0x6, 0x57ca, 0xfffff000}, {0x8, 0xee, 0x7, 0xffffff0d, 0x4, 0x3}, {0x4c0, 0x7, 0x2, 0x0, 0x8, 0x100}, {0x1, 0x6, 0x0, 0x6, 0x80000000, 0x4}, {0x0, 0x8e80, 0x65, 0x6, 0xffffffff, 0x6}, {0x3, 0x1, 0x1, 0x0, 0x8, 0xa}, {0x8001, 0x100, 0x1, 0x1, 0x6, 0x3b}, {0xfffff7e5, 0xff, 0x10, 0x0, 0xa, 0x6}, {0x9, 0x75, 0x9, 0xef, 0xff, 0x89}, {0x4, 0x8, 0x7, 0x5, 0x8, 0x3f}, {0xf083, 0x74406f13, 0x80000001, 0x1ff, 0x9, 0x9}, {0xfffffffb, 0x10001, 0x1, 0xfffffffe, 0x1000}, {0x8001, 0x4c6a, 0x8, 0x25e9, 0x90b, 0x5}, {0x7, 0xa, 0x4, 0x1000, 0xfff, 0x7}, {0x7fb, 0xd, 0x8, 0x78, 0x7, 0x9}, {0x1, 0xfffffffe, 0x800, 0x1, 0x1, 0x4}, {0x80000000, 0x3, 0xa31f6f1f, 0x1, 0x5, 0x8000}, {0x7, 0x7, 0x4, 0x8, 0x10001}, {0xfffffff7, 0x0, 0x40, 0x6, 0x5, 0x5}, {0x5, 0xfff, 0xe7da, 0x2, 0x9, 0x7}, {0x6, 0x0, 0x80000001, 0x5, 0x4, 0x4}, {0xfffffffb, 0x1c000000, 0x0, 0x8001, 0x8, 0x9}], [{0x5}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5aba00c555baa7ef, 0x1}, {0x1, 0x2}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0xd}, {0x5, 0x1}, {0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x181885f84a3b5ba1}, {0x3, 0x1}, {0x1}, {0x1}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x5}, {0x1b187e6351498f25}, {0x0, 0x1}, {0x4, 0x1}, {0x970f042e95146b82, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3}, {0x2}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x7}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000f4a1000000000000080000000000000018000000000000002900000050a0d1830000000000000000"], 0x30}, 0x11)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x1}]}, @fwd={0xb}, @fwd={0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x5}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000240)=""/43, 0x62, 0x2b, 0x0, 0x7, 0x10000}, 0x28)

56.181606037s ago: executing program 35 (id=2155):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000140)={'wlan0\x00', @ifru_settings={0x52, 0x22f9, @fr_pvc=&(0x7f0000000100)={0x8}}})
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe)
sendto$inet6(r1, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000240)=0x5, 0x4)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x46b7}], 0x2, 0x20, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = accept4$rose(r0, &(0x7f0000000440)=@full={0xb, @dev, @default, 0x0, [@default, @remote, @rose, @default, @rose]}, &(0x7f0000000480)=0x40, 0x80400)
setsockopt$rose(r4, 0x104, 0x4, &(0x7f00000004c0)=0x80000001, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xb, 0x95a8, 0x5, 0x101, 0x2}, 0x0, 0x1}, [{0x7, 0x6, 0x18, 0x8, 0x80000001, 0x4}, {0x35, 0xbd6, 0x7, 0x7, 0xc294, 0x9}, {0x800, 0x6, 0x8001, 0x1, 0x0, 0x4}, {0x5, 0x1, 0xe00, 0xd32, 0xfff}, {0x2, 0x200, 0x7, 0xd64, 0x5, 0xc}, {0x3, 0x7ff, 0xfff, 0xb, 0xfff, 0x5}, {0x2, 0x4, 0x0, 0x3, 0x3, 0x10001}, {0xfff, 0x5, 0x7f, 0x2, 0x0, 0x8}, {0x111fdbe2, 0x3, 0x8, 0x5, 0x2000000, 0x4}, {0x9, 0x7, 0x5, 0x466, 0xfffffc01, 0x2}, {0x1000, 0x5, 0xed87, 0xd2a, 0x0, 0x1}, {0x8, 0x5, 0x8000, 0x10, 0x6, 0x7c2}, {0x2, 0x7, 0x6, 0x7, 0xc, 0x8}, {0x2, 0x240, 0x7, 0xc, 0xfffffffd, 0x7}, {0x9, 0x6, 0x4, 0x101, 0xffff8001, 0x200}, {0x1d2cbf69, 0xfffffbff, 0x2, 0x2, 0xf, 0x3}, {0x2ce, 0x7, 0x1, 0x3e18, 0x8, 0x4}, {0xfc5, 0xae7, 0x80000000, 0x1ff, 0x8b, 0xfffffffd}, {0x3, 0x8, 0x2, 0xfffffff8, 0x3, 0xf2e}, {0x5, 0x5, 0xffffffff, 0x7, 0x1, 0x3}, {0x3, 0x7d6, 0xe4, 0x5, 0x2, 0x10001}, {0x9fa3, 0x1fc, 0x0, 0x9, 0x0, 0xc29}, {0x7, 0x5, 0x6, 0x80000001, 0x0, 0x1}, {0x8, 0x0, 0xfe000000, 0xa, 0x3, 0x161}, {0x9, 0x8, 0x4, 0x3, 0x10001, 0x25075c96}, {0x101, 0x8000, 0xe7, 0x200, 0xf, 0x3}, {0x15000000, 0x2d41, 0x6, 0x8, 0x6, 0x2e}, {0x6, 0x401, 0x1, 0x28a, 0xf5c, 0xe2a}, {0x0, 0x3ff, 0x0, 0x5ce, 0x42, 0x3}, {0x0, 0x4, 0x6cce, 0x2}, {0x3, 0x1, 0x3, 0x0, 0xa1, 0x2}, {0x7, 0x9, 0x8, 0x3045, 0x2, 0x1}, {0x7, 0x4, 0x6, 0x510cc509, 0x6, 0x6}, {0x89f9, 0xe5ff, 0x1, 0x9, 0x2f37}, {0x9c, 0x10000, 0x8, 0x9717, 0x9, 0x8001}, {0xfffffffe, 0xfff, 0x5, 0x8001, 0x5, 0x3}, {0x80, 0x3, 0x80000001, 0x80000001, 0x8, 0x81}, {0x6, 0x9, 0x4, 0x7, 0x0, 0x1}, {0x58d47774, 0x5dba, 0x1, 0x2, 0x3, 0x9}, {0x1, 0x3ff, 0xd, 0x7, 0x80000000, 0x3d}, {0x9, 0x0, 0x200, 0xaeb, 0x1, 0x28ec}, {0x7fff, 0x4, 0x6, 0x80, 0x8, 0x5}, {0x100, 0x3, 0x9, 0x0, 0x6, 0xc639}, {0xc, 0x9, 0x6, 0x100, 0x400, 0x1ff}, {0x3, 0x9, 0x1, 0x3, 0x9, 0x6}, {0x17, 0x200, 0x5, 0x1, 0x4, 0x9}, {0x5, 0x8, 0x7, 0xca, 0x3, 0xfff}, {0x0, 0xfffffff8, 0x9, 0x9, 0x6, 0x80}, {0x10100000, 0x0, 0x7, 0x80000000, 0x5, 0x51}, {0x6, 0x5, 0x8, 0x3ea7, 0x4, 0x9e4}, {0x7fffffff, 0xc, 0x3, 0x7, 0x7f, 0x7}, {0x5, 0x5b07f77b, 0x7, 0xd4, 0xd96, 0x4b3}, {0x1, 0x0, 0xda9b, 0x9, 0x4, 0x2e1}, {0x4, 0x1, 0x9, 0x7, 0xd, 0x9}, {0x8, 0x8, 0x4, 0x6726953b, 0x34, 0x8}, {0xc45, 0x3, 0x401, 0x7fff, 0x2}, {0x40000, 0x0, 0x80, 0xd7b, 0x7, 0x100000}, {0x6, 0x6, 0x4, 0xf, 0xfffffffa, 0x3}, {0xc, 0x8, 0x7ff, 0x1, 0x5, 0xfffffff8}, {0x5, 0x68f, 0x2, 0x5, 0x400, 0x100}, {0x1, 0xa, 0xc, 0x5, 0x0, 0x7fff}, {0xfffffff5, 0x1, 0x5, 0x0, 0x4000, 0x602b}, {0x8, 0x1, 0x1000, 0xf4, 0xffffff01, 0x2}, {0x8, 0x1ff, 0x81, 0x4, 0x6, 0x8000}, {0x6, 0x80000001, 0x3, 0x240, 0x6, 0x8}, {0x7, 0x3, 0x9, 0x4, 0x4, 0xcf88}, {0x6c7, 0x4, 0x9c, 0x18, 0x0, 0xc}, {0x2, 0x9, 0x200, 0x7, 0x4, 0x7}, {0x800, 0xaf7b, 0x5, 0x80, 0x3, 0x2}, {0x5, 0xfffffbff, 0x9, 0x4, 0x5, 0x80000001}, {0x7, 0x9, 0x81, 0x2fd, 0x40, 0x2}, {0x30, 0x8, 0x81, 0x80000001, 0xa, 0xcc8}, {0x8, 0xa, 0x4, 0x2, 0x9d5, 0x7}, {0x539, 0x2, 0xb673, 0x4, 0x80000000, 0x1000}, {0x2, 0x3, 0x8000, 0x6, 0x7, 0x7}, {0x2, 0x9, 0x6, 0x7, 0x187, 0x800}, {0x200, 0xad1, 0x0, 0x8a, 0x5, 0xffff}, {0x4, 0xf, 0x8, 0x9, 0x5, 0x6}, {0x8, 0x10, 0x9, 0x1, 0x3, 0x4}, {0xfffff800, 0xffffff7e, 0x1, 0x10001, 0x8, 0x7}, {0x7ff, 0x9, 0x0, 0xd, 0x7, 0xfffff54c}, {0x6087, 0x2, 0x1, 0x0, 0x2, 0x1}, {0x9, 0x8, 0x7d, 0x6970bd98, 0x63c1, 0x1}, {0x9, 0x13e39b74, 0x8, 0x7, 0x400}, {0x40, 0x6, 0x81, 0x93, 0x6, 0x3}, {0x9, 0x7, 0xffff622e, 0x87, 0x1000, 0xfffffffb}, {0x8, 0x8e8, 0x7, 0xffff0001, 0x101, 0x3}, {0x7f, 0x2, 0x5, 0x3, 0x5, 0x6}, {0xfffffffd, 0x3, 0x3, 0xff, 0x3, 0xffff}, {0xffff, 0x1, 0x1, 0x7, 0x5, 0x5}, {0x4, 0x4, 0x0, 0x2, 0x0, 0xa}, {0x9, 0x2, 0x1, 0x81, 0x2, 0x3}, {0x654c5d3b, 0xffffffff, 0xef, 0x4, 0xdaf6, 0xc}, {0x8, 0x5, 0x2, 0x7ff, 0xffffff51, 0x3}, {0x7, 0x200, 0xa34, 0x1, 0x6, 0xffffff03}, {0x1, 0x0, 0x9, 0x5, 0x5, 0xb08}, {0x6, 0x890, 0x588d, 0x7, 0x1, 0x8}, {0xf, 0x9, 0x8, 0x2, 0x2, 0xf}, {0x4, 0x7, 0x7, 0x5, 0x4, 0x1}, {0x8, 0x44a, 0x7, 0x80, 0x6, 0x10001}, {0x800, 0xd2, 0x8, 0x0, 0x4, 0x5}, {0x6, 0x9, 0x23f, 0x9, 0x94, 0xffff}, {0xfffffffb, 0x1dd, 0x0, 0x6, 0xb5e, 0x800}, {0xb, 0xd851, 0xfff, 0xc9, 0xec, 0x5}, {0x7a4316df, 0x3ff, 0x3, 0x20c4, 0x0, 0x1000}, {0x8, 0x464, 0x7fff, 0x8, 0x1, 0x9}, {0x10, 0xa, 0x9, 0x6, 0x57ca, 0xfffff000}, {0x8, 0xee, 0x7, 0xffffff0d, 0x4, 0x3}, {0x4c0, 0x7, 0x2, 0x0, 0x8, 0x100}, {0x1, 0x6, 0x0, 0x6, 0x80000000, 0x4}, {0x0, 0x8e80, 0x65, 0x6, 0xffffffff, 0x6}, {0x3, 0x1, 0x1, 0x0, 0x8, 0xa}, {0x8001, 0x100, 0x1, 0x1, 0x6, 0x3b}, {0xfffff7e5, 0xff, 0x10, 0x0, 0xa, 0x6}, {0x9, 0x75, 0x9, 0xef, 0xff, 0x89}, {0x4, 0x8, 0x7, 0x5, 0x8, 0x3f}, {0xf083, 0x74406f13, 0x80000001, 0x1ff, 0x9, 0x9}, {0xfffffffb, 0x10001, 0x1, 0xfffffffe, 0x1000}, {0x8001, 0x4c6a, 0x8, 0x25e9, 0x90b, 0x5}, {0x7, 0xa, 0x4, 0x1000, 0xfff, 0x7}, {0x7fb, 0xd, 0x8, 0x78, 0x7, 0x9}, {0x1, 0xfffffffe, 0x800, 0x1, 0x1, 0x4}, {0x80000000, 0x3, 0xa31f6f1f, 0x1, 0x5, 0x8000}, {0x7, 0x7, 0x4, 0x8, 0x10001}, {0xfffffff7, 0x0, 0x40, 0x6, 0x5, 0x5}, {0x5, 0xfff, 0xe7da, 0x2, 0x9, 0x7}, {0x6, 0x0, 0x80000001, 0x5, 0x4, 0x4}, {0xfffffffb, 0x1c000000, 0x0, 0x8001, 0x8, 0x9}], [{0x5}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5aba00c555baa7ef, 0x1}, {0x1, 0x2}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0xd}, {0x5, 0x1}, {0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x181885f84a3b5ba1}, {0x3, 0x1}, {0x1}, {0x1}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x5}, {0x1b187e6351498f25}, {0x0, 0x1}, {0x4, 0x1}, {0x970f042e95146b82, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3}, {0x2}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x7}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000f4a1000000000000080000000000000018000000000000002900000050a0d1830000000000000000"], 0x30}, 0x11)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x1}]}, @fwd={0xb}, @fwd={0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x5}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000240)=""/43, 0x62, 0x2b, 0x0, 0x7, 0x10000}, 0x28)

37.352524406s ago: executing program 5 (id=2595):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000000000000000000000000086009078000087ff00000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

37.292491267s ago: executing program 5 (id=2598):
r0 = socket$packet(0x11, 0x2, 0x300)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000100)=0xd, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

37.233596386s ago: executing program 5 (id=2600):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'veth1_to_hsr\x00', 'macvlan1\x00', {}, {}, 0x6, 0x0, 0x61}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0x2}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'team0\x00', 'gretap0\x00', {}, {}, 0x6}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@helper={{0x48}, {0x0, 'irc-20000\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x6, 0x1, 0x0, 0x1], 0x3, 0x1}, {0x1, [0x6, 0x3, 0x6697e4e8f2a2b31b, 0x5, 0x5, 0x1], 0x4, 0xa}}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xe}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)
r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100003053bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c000100100000001000058010ff0400aaaaaaaaaabb0000080030490300000008000500"/64, @ANYRES32=r3, @ANYBLOB], 0x5c}}, 0x800)
sendto$packet(r1, &(0x7f0000000040)="ccd9c2ee0584aecf4940584a46fc20691c61dd3681d99448229852cbd89cd8dccb0b0fa2", 0x24, 0x810, &(0x7f00000000c0)={0x11, 0xf6, r3, 0x1, 0x7e, 0x6, @local}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @fallback=0x24}, 0x94)

37.149632293s ago: executing program 5 (id=2601):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x160}, 0x106)

37.148832394s ago: executing program 5 (id=2602):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = socket$alg(0x26, 0x5, 0x0) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @empty}, 0x2}}, 0x2e) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) (async, rerun: 32)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000002c0)={0x2b}, 0x8) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002c00701004000000050000000600010005000000080009000200000008000b000000000008000c"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async)
bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async)
r6 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245f5e1a370a08afabfdccfdb3bed45070d59", 0x80}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040010}], 0x1, 0x4048020)
recvmmsg$unix(r6, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/118, 0x76}], 0x2}}], 0x1, 0x10100, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xfffffffd, @mcast1}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) (async, rerun: 32)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e24, @empty}}, 0xfffc}, 0x90) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x820c, 0x2, 0x1, r9}, &(0x7f0000000080)=0x10) (async)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e7, 0x0)

37.045950622s ago: executing program 5 (id=2603):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x40, 0x1410, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000040}, 0x84)
recvfrom$rxrpc(r1, &(0x7f0000000240)=""/227, 0xe3, 0x2, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="e2", 0x1}], 0x1}}], 0x1, 0x20000080)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000800)=@assoc_value, &(0x7f00000009c0)=0x8)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x57)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r4, 0x0, 0xb9b}, 0x18)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

21.594789127s ago: executing program 36 (id=2603):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x40, 0x1410, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000040}, 0x84)
recvfrom$rxrpc(r1, &(0x7f0000000240)=""/227, 0xe3, 0x2, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="e2", 0x1}], 0x1}}], 0x1, 0x20000080)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000800)=@assoc_value, &(0x7f00000009c0)=0x8)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x57)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r4, 0x0, 0xb9b}, 0x18)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1.683130722s ago: executing program 6 (id=3244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000000340))
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607fd4804012"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xd058}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f00000001c0)=0x4, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x5, 0x0, &(0x7f0000000180))
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000240)={0x10, 0x0, 0x1, 0x9}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.512549612s ago: executing program 6 (id=3248):
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x0, 0x0, 0x400400c0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x8, 0x0, 0x0}}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=0x0], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={<r4=>0x0, @multicast2, @dev}, &(0x7f00000006c0)=0xc)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c0) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000040)="6aa923aef50e18ab1bd1619f1556836feef0d17254d4536139c024c5ef9c0de9df5f0bf3a0b9e9b5021267ce762f001e895b6353fb6d73691cb31515abb2d9614b72bb000e6a4ebfc13f3957d8c24befa4e54c92c036212c1ca2d15095604a115d6620ebeadaa03d6bafe9f2a6a4daa3ac1d2894a166feb53d5d9aa085d2", &(0x7f00000000c0)=""/225, &(0x7f0000000200)="34dfe598280895d76fa28e9988ad55a0efc1e6a7fe923b135eb4d671acf6bfe72c2f3baa70ef68429629b8684de90ced38ddaa1fe1b575a68229f37a626d61f0ffae02aadc4028d55fd778ac1d2a9726c89c1ff023394ec76f3eee3ad27d8f4e78b62c7ae0b4e1783882fb6287d12ecbb65374352e0bbd66f96a53526c8500982bcd89df5188012db9dcb2d9e76848501d863d53695401e22e18f33ee03795461896d406531bc3a9ffb84d08424295255a66280c20d4b0bf", &(0x7f0000000580)="c506e251b1c24c4f2200f759eaf90ae3945a3af7cbc46924c1d85fcfed69c00a2a7a3ab2665b93993109dbb7022f8c95a0d9a75b260b1e339eaf4391e9044bcd9659f7cc673827e0a9ec43507207c4f3f7077ff05e2fc0a848eec8534a32a8135657e65e57fa9f8906b2b4934c1888fcd8b10a7c9abfea6fddf069d6ab877e0a308ba58e290711851a87dc7e77ddebc31340b260c8027814185a304d4c9dc8192b9e170a22353f70fa3223159e348531a5e6ff559c824e5cb2f5a37d7d7ec2701a35265ea1445126dc595d9a70fd47df6cfe9bf2925145bd062420bf3f", 0xd, r1}, 0x38)

1.449245764s ago: executing program 6 (id=3250):
unshare(0x66000080) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0xff12, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800f400cc17000000000000007100001100462d000065e3a95b3d261a8222149b0b62de82ded20e91d6bd25f6d69bdee520b22dcfb4eb518cff827f08e5ed83bf44955f992abe43d85d644ce68aefcca3be58c00243c76c2bc3273aa84a6143467d3bd2c9be092b28d4ac0adf65ab", @ANYRES32, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r4=>0x0}) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611059000000000004000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000380), 0x20000000}, 0x20) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f00000001c0)=0x10000, &(0x7f0000000200)=0x4) (async)
socket(0x6, 0x6, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x0, 0x0, 'sh\x00', 0x3b, 0x0, 0x73}, 0x2c)
sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff251202a6475400f6a13bb100c117080008004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

1.000551376s ago: executing program 6 (id=3257):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe66, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}}, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="898b968f9adae50e1196d2b3b92fa885aa5725da95", 0x15}, 0x1, 0x0, 0x0, 0x24004084}, 0x20004884)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x4904}, 0x4040005)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', <r3=>0x0, 0x2f, 0xe, 0x7f, 0x3, 0x7a, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0x4, 0x5f3}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00', <r5=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=<r6=>0x0, &(0x7f0000000640)=0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00372a4a2240a975eddf2500000000", @ANYRES32=r10, @ANYBLOB="03000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'ip6tnl0\x00', <r11=>r3, 0x2f, 0xd6, 0x1, 0xfffffff7, 0x20, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x8, 0x10, 0x8, 0x3}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000a40)={@multicast1, @initdev, <r12=>0x0}, &(0x7f0000000a80)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'ip_vti0\x00', &(0x7f0000000ac0)={'gre0\x00', <r13=>0x0, 0x6bb6625ec176e529, 0x700, 0x4, 0xffffffff, {{0x8, 0x4, 0x0, 0x7, 0x20, 0x65, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @broadcast, {[@generic={0x83, 0xa, "a46929bf945a5d9d"}]}}}}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000b40)={@private, @local, <r14=>0x0}, &(0x7f0000000b80)=0xc)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000bc0)=<r15=>0x0, &(0x7f0000000c00)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6_vti0\x00', <r16=>0x0, 0x4, 0xfe, 0x2, 0x7, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x700, 0x7fff}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000013c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000d00)=ANY=[@ANYBLOB="50060000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="080007000000000008000100", @ANYRES32=r2, @ANYBLOB="7c0002803c00010024000100656e47626c6564000c00000000000000000000000000000000000000e2ffffff04000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="340102804000010069ff010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="2801028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004004000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400120000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004008100000008000100", @ANYRES32=0x0, @ANYBLOB="c401028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004003d0e000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r15, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=r16, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040088d9054504000000060005fcd70700000008020202000000"], 0x650}, 0x1, 0x0, 0x0, 0x10000}, 0x40085)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0)
r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'})
r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r19 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r18, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r20=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r18, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r19, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r20, @ANYBLOB='$\x00/'], 0x40}}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="29082cbd7000fddbdf251e0000000a0004007770616e33000000080001000300000008000300", @ANYRES32=r20, @ANYBLOB="29f63802e25dd2a395be8a1cbc3a8f2d20e63b5121ee1a4cec5ea7c502513d7d31b8414c5d5e0a2a87905daa571587307c624f4f69bfaa6d80e18f5daf70d279b9aa4fc586a976848ef2f673bf070011eb5a7ad9faada5b45dcb5d0283a01eb3267a0a2cf34983048d13e49116166a8dc19452a53d725190dc08cf11d1d475c322bc89d85650fb648787"], 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x40240c4)

752.476288ms ago: executing program 6 (id=3262):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e00000000009500009400000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r3=>0x0, 0x29, 0x8, 0x7f, 0x800, 0x14, @private1, @remote, 0x8, 0x8, 0xd1, 0x5}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x9b, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000500), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000580)}}, 0xfffffffffffffd70)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0000000300000005000000f6ffffff10820000", @ANYRES32=0x1, @ANYBLOB="01000000000000b200000000000000001676b2e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000020000000b00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8931, &(0x7f00000000c0)={'team0\x00', @random})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xce1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x28f, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x7, 0xe}, 0x10, r4, r0, 0x0, &(0x7f0000000800)=[r5, r6, 0xffffffffffffffff], &(0x7f0000000840), 0x10, 0x42}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)

692.681687ms ago: executing program 6 (id=3264):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
getsockname$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10)
setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040)=r0, 0x43)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000600000208000300eac2a22a4e7627f39789329324d29aac73521738c3a22b3186b9bcad396888a9d43b9084d24350a378c1e446ec393f2ef12b9f7ba8f41f5c3566751d349ff92b327366ffaf43fcb5799c9a4f44dcb4985c48cb946387b97a7a890a3f55ba8d044bfa787b6c59cb97ac8198623bdfe3ddafc818b689b6", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x4d, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000400)=@req={0x1, 0x7, 0x6, 0x80000000}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x565c}}, 0x0)

561.216464ms ago: executing program 7 (id=3271):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = getpid()
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) (async)
sendmmsg$inet(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000940)="90d12f2ac4dbb2fd2e50dbb561941ad8862572316bb93704cb501db6db96bf413cc3dd3383f80871c56dd1a19ab57348c7623b86984db565b0dc09f7daa4b51056b0d89a065ba9029e8c7f17f936142d4736ae6d64f145ab1b75e5821d6f29c212fd67c08d5398fdec40b6a650691d4739da3022888a68b711101ee577af416b", 0x80}], 0x1}}], 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'erspan0\x00', {}, 0xb}) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

502.151126ms ago: executing program 7 (id=3273):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000440)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff010000000000000000000000000001a4a8c40405000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="900000000001010400000000000000000a00000a380001802c00018014000300fe8000000000000000007061552950703159c96385670000000000aa14000400ff01000000000000000000000000000106000340000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c00028005000100"], 0x90}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000480)='rxrpc_rtt_tx\x00', r2, 0x0, 0xfffffffffffffffb}, 0x18)
r12 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2719, 0x0, &(0x7f0000000180))
ioctl$sock_bt_bnep_BNEPCONNDEL(r12, 0x400442c9, &(0x7f0000000380)={0x5})

372.530979ms ago: executing program 7 (id=3276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x40}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x156eccba77a09d1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa8}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x60}, {0x6, 0x0, 0x0, 0x33}]}, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x8880)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x29b}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000001940)=""/4134, 0x1026}], 0x2}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40010162, 0x0)

321.238548ms ago: executing program 7 (id=3278):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619badd4fe626289574f86d0809dc46543a7397ceafd65272d07668", 0x2a}, {&(0x7f00000048c0)="4aa6ebbaadac821a088be79aff597e399b67d0e0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e73d9d618702e712ecd6a199286326ff22d59544afc715f8eccf9b851691d3b14dac31434bfec34c03dce1c596738e7f8a4ac186af40bad817595723a21c333b257df41c2a304d5f8d5315fd712508ae16bdaf38e6393b3937971c39c171b44fc2e9ec39572aed0bd04469e4ae3a79961", 0xb7}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815)
recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=""/87, 0x57}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x9}, &(0x7f0000000380)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x1000000, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7, 0xd, 0x81, 0xa1, 0x3, 0x7, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0xfffffffffffffd50})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000340)=""/219, 0xdb}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async)
accept$alg(r0, 0x0, 0x0) (async)
sendmmsg$alg(r1, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619badd4fe626289574f86d0809dc46543a7397ceafd65272d07668", 0x2a}, {&(0x7f00000048c0)="4aa6ebbaadac821a088be79aff597e399b67d0e0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e73d9d618702e712ecd6a199286326ff22d59544afc715f8eccf9b851691d3b14dac31434bfec34c03dce1c596738e7f8a4ac186af40bad817595723a21c333b257df41c2a304d5f8d5315fd712508ae16bdaf38e6393b3937971c39c171b44fc2e9ec39572aed0bd04469e4ae3a79961", 0xb7}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) (async)
recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=""/87, 0x57}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) (async)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x9}, &(0x7f0000000380)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x1000000, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7, 0xd, 0x81, 0xa1, 0x3, 0x7, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0xfffffffffffffd50}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) (async)
recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000340)=""/219, 0xdb}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0) (async)

268.495914ms ago: executing program 7 (id=3279):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, 0x0) (async)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4)

262.052723ms ago: executing program 4 (id=3280):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a201e0000000a01020000000004000000070000000900010073797a30000000003c000000090a01000000000000008272bee56d0842513b7670d4025b80fa00000700000008000a4000000000090002005f797a11000000000900010073797a300000000008000540000000305c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080090001006d657461000000000c000280080002400000000d140000001000010000000000000000000a8400"], 0xe0}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local, 0x78, r6})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
socketpair(0x1a, 0xa, 0x3, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmsg$nl_route_sched(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@delqdisc={0xd4, 0x25, 0x8, 0x70bd27, 0x3, {0x0, 0x0, 0x0, r9, {0xffff, 0x10}, {0xffe0, 0x10}, {0x8, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffffff}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x834d}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x8000, 0x7a, 0x5, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x2, 0x5, 0x6, 0x7fff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0xc, 0xffff, 0x8, 0x1}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x70, 0x1, 0x7, 0x4}}]}}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0xd}, @TCA_PIE_BETA={0x8, 0x5, 0x1d}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

261.716373ms ago: executing program 7 (id=3281):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0800", 0x4) (async)
getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000280)) (async)
r2 = socket$inet6(0xa, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0))
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r7 = accept4(r2, &(0x7f0000000100)=@rc={0x1f, @none}, &(0x7f0000000040)=0x80, 0x800)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'geneve0\x00', <r8=>0x0}) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f0000000440)=@raw=[@tail_call], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xd1, &(0x7f0000000540)=""/209, 0x41000, 0x18, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xb, 0x0, 0x80000001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r0, 0xffffffffffffffff], &(0x7f0000000700)=[{0x3, 0x2, 0x5, 0x2}, {0x4, 0x3, 0x7, 0x4}, {0x0, 0x3, 0x1, 0x1}], 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='ext4_mballoc_prealloc\x00', r9, 0x0, 0x4f}, 0x18) (async)
writev(r3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="89e7ee0c7cdad9b4b47380c9892f", 0xe}], 0x100000000000005c) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x82000000}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x0, 0xff, 0x0, 0x0, 0x4}}, 0xe8) (async)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100fcffffff0000000001000000000000000b"], 0x30}}, 0x0) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x3ff}, 0x1c)

187.832986ms ago: executing program 4 (id=3282):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10) (async)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x67bb, 0x0, 0x0, 0xf}) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

121.336295ms ago: executing program 4 (id=3283):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x1}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000c0000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)

120.08536ms ago: executing program 4 (id=3284):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
r3 = socket(0x40000000015, 0x5, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0xffff, 0x8, {{0x5, 0x4, 0x2, 0xf, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="fd8bfaffffff000034001280110001006272696467655fb315530e3bc3af32b3d5736c617665000000001c00e543555d76bcce8c000006001f0010000000080022e20089bb01aed6f81cdad6c385df8d650165f33911da5ebf77549fa7e78c270c1a467b0155d86e8d31ed82f9185c059681c0a8aa363d4d523399fecefa5430d8174802fedfb1f83fb08e7df86d614b76b0599ab87e9931901e798b221a3a674324ad034aa92f70"], 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r6, 0x3) (async)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) (async)
syz_emit_ethernet(0x6f, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000810c0ec27752b98faf95e3626c402e345000000ff78e00000020000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780007ebfc512829ca53159d7c4681d1fcdc429a1ebc5e473abb4e37c73520da896eb2a98fccaeda11b616de2f37d596675086feda2ee3e7c61b2828"], 0x0) (async)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) (async)
socket$tipc(0x1e, 0x2, 0x0)
close(r3) (async)
getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000002c0)=0x4)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000a3bb69c46f5cb1bc253c00a3da0ad9fc", @ANYRES32=r2, @ANYBLOB="1808000001a201001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000140000032dbd7000fedbdf25fe800000000000000000000000000023000000000000000000000000000000004e2300084e2100000800202033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="173b43ced568414a55eeb1c043760115f7755746bf2da356c204c4"], 0x50}, 0x1, 0x0, 0x0, 0x480}, 0x4)

229.22µs ago: executing program 4 (id=3285):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x713040, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0, <r5=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r2, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x40044}}], 0x1, 0x4)
ioctl$TUNSETOWNER(r0, 0x400454cc, r4)
r6 = socket(0x2a, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10)
write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807a60000a600000000000000080008001d000000", 0x24)

0s ago: executing program 4 (id=3286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40810, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=@framed={{0x18, 0xa}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000280080001"], 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

 (len 256, max 255).
[  124.552581][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'.
[  124.555373][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'.
[  124.558210][ T9488] netlink: 'syz.2.1039': attribute type 6 has an invalid length.
[  125.229734][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[  125.257677][ T9524] tipc: Started in network mode
[  125.259291][ T9524] tipc: Node identity c2a9f67c10f5, cluster identity 4711
[  125.264432][ T9524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.267996][ T9524] syzkaller0: entered promiscuous mode
[  125.269724][ T9524] syzkaller0: entered allmulticast mode
[  125.273009][ T9511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1047'.
[  125.278855][ T9524] tipc: Resetting bearer <eth:syzkaller0>
[  125.287885][ T9522] tipc: Resetting bearer <eth:syzkaller0>
[  125.310770][ T9522] tipc: Disabling bearer <eth:syzkaller0>
[  125.482046][ T9541] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.487126][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'.
[  125.493306][ T9542] openvswitch: netlink: Flow actions attr not present in new flow.
[  125.623190][ T9554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.625457][ T9554] IPv6: NLM_F_CREATE should be set when creating new route
[  125.631176][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1061'.
[  125.633179][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'.
[  125.633933][ T9554] netlink: 'syz.4.1061': attribute type 7 has an invalid length.
[  125.639400][ T9554] netlink: 'syz.4.1061': attribute type 8 has an invalid length.
[  125.645994][ T9554] ip6gretap0: entered promiscuous mode
[  125.650330][ T9554] ip6gretap0: left promiscuous mode
[  125.681940][ T9558] ip6gre2: entered allmulticast mode
[  125.772292][ T9562] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  125.859670][ T9562] bridge0: port 1(1x9) entered disabled state
[  125.872667][ T9562] team_slave_1: left promiscuous mode
[  125.939812][ T9562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.952713][ T9562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.030625][ T9562] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.033218][ T9562] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.035779][ T9562] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.038321][ T9562] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.692444][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  126.697362][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  126.700777][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  126.704513][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  126.707224][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  126.973413][ T9590] chnl_net:caif_netlink_parms(): no params data found
[  127.032815][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.035132][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.037430][ T9590] bridge_slave_0: entered allmulticast mode
[  127.041000][ T9590] bridge_slave_0: entered promiscuous mode
[  127.044462][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.047396][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.049789][ T9590] bridge_slave_1: entered allmulticast mode
[  127.053776][ T9590] bridge_slave_1: entered promiscuous mode
[  127.088896][ T9590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.094669][ T9590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.129308][ T9590] team0: Port device team_slave_0 added
[  127.136593][ T9590] team0: Port device team_slave_1 added
[  127.144831][ T9616] netlink: 'syz.2.1077': attribute type 9 has an invalid length.
[  127.214786][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.216937][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.225174][ T9590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.236480][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.238690][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.247382][ T9590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.283983][ T9590] hsr_slave_0: entered promiscuous mode
[  127.285502][ T9616] xt_CT: No such helper "syz0"
[  127.286491][ T9590] hsr_slave_1: entered promiscuous mode
[  127.290535][ T9590] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.292970][ T9590] Cannot create hsr debugfs directory
[  127.435662][ T9590] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  127.441021][ T9590] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  127.445593][ T9590] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  127.451581][ T9590] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  127.510139][ T9590] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.523379][ T9590] 8021q: adding VLAN 0 to HW filter on device team0
[  127.529772][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.532160][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.541000][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.543278][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.677043][ T9590] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.703685][ T9631] set match dimension is over the limit!
[  127.706535][ T9631] x_tables: ip6_tables: esp match: only valid for protocol 50
[  127.856901][ T9590] veth0_vlan: entered promiscuous mode
[  127.866664][ T9590] veth1_vlan: entered promiscuous mode
[  127.889687][ T9590] veth0_macvtap: entered promiscuous mode
[  127.896896][ T9590] veth1_macvtap: entered promiscuous mode
[  127.907606][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.914422][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.919786][ T9590] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.923768][ T9590] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.926476][ T9590] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.929137][ T9590] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.997688][ T7203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.001094][ T7203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.025333][ T7203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.028470][ T7203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.102420][ T9651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.486351][ T9668] netlink: 'syz.2.1088': attribute type 21 has an invalid length.
[  128.607128][ T9672] only policy match revision 0 supported
[  128.607145][ T9672] unable to load match
[  128.790358][ T5835] Bluetooth: hci5: command tx timeout
[  128.872897][ T9684] erspan0: entered allmulticast mode
[  128.934937][ T9689] netlink: 'syz.4.1095': attribute type 16 has an invalid length.
[  128.973595][ T9694] delete_channel: no stack
[  129.277009][ T9715] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  129.319314][ T9719] netlink: 'syz.4.1105': attribute type 39 has an invalid length.
[  129.516729][ T9722] __nla_validate_parse: 10 callbacks suppressed
[  129.516745][ T9722] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1106'.
[  129.560156][ T9721] delete_channel: no stack
[  129.616453][ T9724] netlink: 'syz.4.1107': attribute type 6 has an invalid length.
[  129.795758][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'.
[  129.835725][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'.
[  129.839204][ T9742] syz_tun: entered allmulticast mode
[  129.977290][ T9750] SET target dimension over the limit!
[  130.058261][ T9754] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1119'.
[  130.084763][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1121'.
[  130.124488][ T9758] netlink: 'syz.4.1122': attribute type 11 has an invalid length.
[  130.349488][ T9772] x_tables: duplicate underflow at hook 1
[  130.488958][ T9771] pim6reg1: entered promiscuous mode
[  130.490878][ T9771] pim6reg1: entered allmulticast mode
[  130.569802][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'.
[  130.576924][ T9786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1130'.
[  130.862848][ T5835] Bluetooth: hci5: command tx timeout
[  130.968353][ T9806] netlink: 'syz.5.1137': attribute type 1 has an invalid length.
[  130.977138][ T9806] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1137'.
[  130.991575][ T9806] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1137'.
[  131.015885][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1137'.
[  131.795063][ T9835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.798754][ T9835] syzkaller0: entered promiscuous mode
[  131.800951][ T9835] syzkaller0: entered allmulticast mode
[  131.815822][ T9835] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20003 - 0
[  131.818512][ T9835] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20003 - 0
[  131.823693][ T9835] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20003 - 0
[  131.826258][ T9835] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20003 - 0
[  131.829062][ T9835] geneve2: entered promiscuous mode
[  131.847027][ T9835] tipc: Resetting bearer <eth:syzkaller0>
[  131.853449][ T9834] tipc: Resetting bearer <eth:syzkaller0>
[  131.871853][ T9834] tipc: Disabling bearer <eth:syzkaller0>
[  131.966735][ T9845] netlink: 'syz.4.1151': attribute type 1 has an invalid length.
[  132.152990][ T9868] netlink: 'syz.4.1159': attribute type 1 has an invalid length.
[  132.155490][ T9867] netlink: 'syz.4.1159': attribute type 1 has an invalid length.
[  132.305456][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.362251][ T9878] ip_vti0: entered promiscuous mode
[  132.421520][ T9888] bridge_slave_1: left allmulticast mode
[  132.423429][ T9888] bridge_slave_1: left promiscuous mode
[  132.425322][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.431528][ T9888] bridge_slave_0: left allmulticast mode
[  132.433332][ T9888] bridge_slave_0: left promiscuous mode
[  132.435195][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.940342][ T5835] Bluetooth: hci5: command tx timeout
[  132.956718][ T9921] x_tables: duplicate underflow at hook 3
[  132.962108][ T9918] netlink: 'syz.4.1174': attribute type 19 has an invalid length.
[  133.458618][ T9953] tipc: Started in network mode
[  133.461123][ T9953] tipc: Node identity c2114cd82bc4, cluster identity 4711
[  133.465121][ T9953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.467714][ T9953] syzkaller0: entered promiscuous mode
[  133.469433][ T9953] syzkaller0: entered allmulticast mode
[  133.481556][ T9952] tipc: Resetting bearer <eth:syzkaller0>
[  133.496293][ T9952] tipc: Disabling bearer <eth:syzkaller0>
[  133.853277][ T9978] syzkaller1: entered promiscuous mode
[  133.855016][ T9978] syzkaller1: entered allmulticast mode
[  134.071626][ T9993] vlan3: entered allmulticast mode
[  134.073258][ T9993] team0: entered allmulticast mode
[  134.074855][ T9993] team_slave_1: entered allmulticast mode
[  134.076903][ T9993] team0: Device vlan3 is already an upper device of the team interface
[  134.674123][T10029] tipc: New replicast peer: 255.255.255.255
[  134.685823][T10029] tipc: Enabled bearer <udp:syz2>, priority 10
[  134.693495][T10029] __nla_validate_parse: 13 callbacks suppressed
[  134.693512][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'.
[  135.020270][ T5835] Bluetooth: hci5: command tx timeout
[  135.492286][T10031] netlink: 'syz.4.1208': attribute type 2 has an invalid length.
[  135.566946][T10039] x9: left allmulticast mode
[  135.568555][T10039] x9: left promiscuous mode
[  135.583502][T10039] bridge0: port 1(1x9) entered disabled state
[  135.594306][T10039] team_slave_1: left allmulticast mode
[  135.614893][T10039] team0: Port device team_slave_1 removed
[  135.617153][T10039] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.633517][T10039] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.645304][T10039] bond3: (slave bridge1): Releasing active interface
[  135.648118][T10039] bridge1: left promiscuous mode
[  135.649791][T10039] bridge1: left allmulticast mode
[  135.655810][T10039] bond0: (slave gretap1): Releasing active interface
[  135.665224][T10049] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1215'.
[  135.718699][T10052] xt_hashlimit: invalid interval
[  135.728199][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'.
[  135.731720][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'.
[  135.734855][T10054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1216'.
[  135.825559][T10058] tls_set_device_offload: netdev not found
[  135.828438][T10058] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1218'.
[  135.832228][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1218'.
[  136.116697][T10071] tipc: Failed to remove unknown binding: 66,1,1/10136234:2278772906/2278772908
[  136.128475][T10071] tipc: Failed to remove unknown binding: 66,1,1/10136234:2278772906/2278772908
[  136.139211][T10071] tipc: Failed to remove unknown binding: 66,1,1/10136234:2278772906/2278772908
[  136.346930][T10077] netlink: 'syz.2.1224': attribute type 1 has an invalid length.
[  136.726281][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'.
[  137.329339][T10077] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  137.399015][T10089] sctp: [Deprecated]: syz.2.1226 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.399015][T10089] Use struct sctp_sack_info instead
[  137.417889][T10089] sctp: [Deprecated]: syz.2.1226 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.417889][T10089] Use struct sctp_sack_info instead
[  137.427710][T10088] netlink: 'syz.4.1225': attribute type 10 has an invalid length.
[  137.428099][T10089] sctp: [Deprecated]: syz.2.1226 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.428099][T10089] Use struct sctp_sack_info instead
[  137.431413][T10088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1225'.
[  137.435640][T10089] sctp: [Deprecated]: syz.2.1226 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.435640][T10089] Use struct sctp_sack_info instead
[  137.447125][T10089] sctp: [Deprecated]: syz.2.1226 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.447125][T10089] Use struct sctp_sack_info instead
[  137.450967][T10088] batman_adv: batadv0: Adding interface: virt_wifi0
[  137.452316][T10089] sctp: [Deprecated]: syz.2.1226 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.452316][T10089] Use struct sctp_sack_info instead
[  137.457281][T10088] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.459152][T10089] sctp: [Deprecated]: syz.2.1226 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.459152][T10089] Use struct sctp_sack_info instead
[  137.471168][T10088] batman_adv: batadv0: Interface activated: virt_wifi0
[  137.482967][T10089] sctp: [Deprecated]: syz.2.1226 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.482967][T10089] Use struct sctp_sack_info instead
[  137.495629][T10089] sctp: [Deprecated]: syz.2.1226 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.495629][T10089] Use struct sctp_sack_info instead
[  137.504455][T10089] sctp: [Deprecated]: syz.2.1226 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.504455][T10089] Use struct sctp_sack_info instead
[  137.538034][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'.
[  137.554566][T10102] netlink: 'syz.5.1228': attribute type 10 has an invalid length.
[  137.565573][T10102] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  137.816810][T10128] pim6reg1: entered promiscuous mode
[  137.818474][T10128] pim6reg1: entered allmulticast mode
[  137.929124][T10135] delete_channel: no stack
[  138.016686][T10144] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  138.025659][T10144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.387488][T10187] netlink: 'syz.5.1260': attribute type 2 has an invalid length.
[  138.393340][T10187] netlink: 'syz.5.1260': attribute type 8 has an invalid length.
[  138.485269][T10199] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  138.807861][T10229] macsec0: entered promiscuous mode
[  138.813084][T10229] macsec0: entered allmulticast mode
[  138.931028][T10241] syzkaller1: entered promiscuous mode
[  138.932928][T10241] syzkaller1: entered allmulticast mode
[  139.082442][T10250] 8021q: VLANs not supported on vcan0
[  139.136671][T10252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.208211][T10252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.281558][T10252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.341524][T10252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.458650][T10252] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.488135][T10252] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.505124][T10252] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.517530][T10252] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.584226][T10279] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.636634][T10279] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.660216][ T5835] Bluetooth: hci5: command tx timeout
[  139.685268][T10279] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.726379][T10279] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.763082][T10297] netlink: 'syz.2.1293': attribute type 1 has an invalid length.
[  139.794484][T10299] __nla_validate_parse: 9 callbacks suppressed
[  139.794499][T10299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'.
[  139.898092][T10308] netlink: 'syz.2.1297': attribute type 1 has an invalid length.
[  139.945060][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1297'.
[  140.178615][T10326] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  140.184980][T10326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.334876][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'.
[  140.406318][T10338] IPVS: Scheduler module ip_vs_sip not found
[  140.513021][T10345] netlink: 'syz.2.1310': attribute type 1 has an invalid length.
[  140.515399][T10345] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1310'.
[  140.621775][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  140.760024][T10366] vlan2: entered allmulticast mode
[  140.791890][T10368] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  140.827775][T10370] delete_channel: no stack
[  140.835893][T10370] bond0: entered promiscuous mode
[  140.838358][T10370] macvlan1: entered promiscuous mode
[  140.840995][T10370] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  140.844098][T10370] hsr2: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network
[  140.847290][T10370] hsr2: entered promiscuous mode
[  140.891061][T10372] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1321'.
[  140.964299][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1324'.
[  140.970993][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1324'.
[  141.026985][T10383] IPVS: length: 209 != 24
[  141.096120][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'.
[  141.098967][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'.
[  141.106374][T10389] tipc: Enabling of bearer <et:g> rejected, media not registered
[  141.131941][T10391] netlink: 'syz.5.1327': attribute type 3 has an invalid length.
[  141.135598][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'.
[  141.539178][T10419] ieee802154 phy0 wpan0: encryption failed: -22
[  141.636206][T10425] netlink: 'syz.2.1341': attribute type 1 has an invalid length.
[  141.653992][T10425] 8021q: adding VLAN 0 to HW filter on device bond5
[  141.670750][T10425] vlan4: entered allmulticast mode
[  141.672484][T10425] geneve1: entered allmulticast mode
[  141.674898][T10425] bond5: (slave vlan4): Opening slave failed
[  141.913779][T10436] netlink: 'syz.2.1345': attribute type 9 has an invalid length.
[  141.916440][T10436] netlink: 'syz.2.1345': attribute type 6 has an invalid length.
[  141.944972][   T33] audit: type=1107 audit(1752849882.865:9): pid=10438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  141.953692][   T33] audit: type=1107 audit(1752849882.875:10): pid=10438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  141.995210][T10445] warn_alloc: 1 callbacks suppressed
[  141.995244][T10445] syz.5.1347: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  142.005913][T10445] CPU: 0 UID: 0 PID: 10445 Comm: syz.5.1347 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  142.005930][T10445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.005936][T10445] Call Trace:
[  142.005941][T10445]  <TASK>
[  142.005947][T10445]  dump_stack_lvl+0x189/0x250
[  142.005967][T10445]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.005977][T10445]  ? __pfx__printk+0x10/0x10
[  142.005990][T10445]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  142.006002][T10445]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  142.006013][T10445]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  142.006025][T10445]  warn_alloc+0x214/0x310
[  142.006034][T10445]  ? stack_depot_save_flags+0x40/0x900
[  142.006045][T10445]  ? __pfx_warn_alloc+0x10/0x10
[  142.006054][T10445]  ? kasan_save_track+0x4f/0x80
[  142.006066][T10445]  ? xskq_create+0x56/0x170
[  142.006074][T10445]  ? xsk_init_queue+0xb0/0x110
[  142.006081][T10445]  ? xsk_setsockopt+0x43f/0x710
[  142.006092][T10445]  ? do_sock_setsockopt+0x17c/0x1b0
[  142.006104][T10445]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  142.006115][T10445]  ? do_syscall_64+0xfa/0x3b0
[  142.006124][T10445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.006137][T10445]  __vmalloc_node_range_noprof+0x125/0x12f0
[  142.006164][T10445]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  142.006177][T10445]  ? xskq_create+0x56/0x170
[  142.006186][T10445]  ? __kasan_kmalloc+0x93/0xb0
[  142.006199][T10445]  vmalloc_user_noprof+0xad/0xf0
[  142.006211][T10445]  ? xskq_create+0xbf/0x170
[  142.006244][T10445]  xskq_create+0xbf/0x170
[  142.006254][T10445]  xsk_init_queue+0xb0/0x110
[  142.006263][T10445]  xsk_setsockopt+0x43f/0x710
[  142.006276][T10445]  ? __pfx_xsk_setsockopt+0x10/0x10
[  142.006291][T10445]  ? __fget_files+0x2a/0x420
[  142.006299][T10445]  ? aa_sock_opt_perm+0x74/0x110
[  142.006311][T10445]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  142.006320][T10445]  ? __pfx_xsk_setsockopt+0x10/0x10
[  142.006333][T10445]  do_sock_setsockopt+0x17c/0x1b0
[  142.006347][T10445]  __x64_sys_setsockopt+0x13f/0x1b0
[  142.006361][T10445]  do_syscall_64+0xfa/0x3b0
[  142.006369][T10445]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.006378][T10445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.006386][T10445]  ? exc_page_fault+0x9f/0xf0
[  142.006394][T10445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.006402][T10445] RIP: 0033:0x7fa168d8e9a9
[  142.006412][T10445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.006419][T10445] RSP: 002b:00007fa169ce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  142.006429][T10445] RAX: ffffffffffffffda RBX: 00007fa168fb5fa0 RCX: 00007fa168d8e9a9
[  142.006435][T10445] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  142.006440][T10445] RBP: 00007fa168e10d69 R08: 0000000000000004 R09: 0000000000000000
[  142.006445][T10445] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.006449][T10445] R13: 0000000000000000 R14: 00007fa168fb5fa0 R15: 00007ffc013c24e8
[  142.006462][T10445]  </TASK>
[  142.006466][T10445] Mem-Info:
[  142.105146][T10445] active_anon:6269 inactive_anon:0 isolated_anon:0
[  142.105146][T10445]  active_file:1080 inactive_file:38246 isolated_file:0
[  142.105146][T10445]  unevictable:1768 dirty:104 writeback:0
[  142.105146][T10445]  slab_reclaimable:10265 slab_unreclaimable:74063
[  142.105146][T10445]  mapped:33669 shmem:2423 pagetables:1112
[  142.105146][T10445]  sec_pagetables:0 bounce:0
[  142.105146][T10445]  kernel_misc_reclaimable:0
[  142.105146][T10445]  free:242319 free_pcp:17937 free_cma:0
[  142.118626][T10445] Node 0 active_anon:13300kB inactive_anon:0kB active_file:3536kB inactive_file:145616kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:58212kB dirty:388kB writeback:0kB shmem:4648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5676kB pagetables:2332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  142.128909][T10445] Node 1 active_anon:11776kB inactive_anon:0kB active_file:784kB inactive_file:7368kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:76464kB dirty:28kB writeback:0kB shmem:5044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8064kB pagetables:2116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  142.138793][T10445] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  142.147691][T10445] lowmem_reserve[]: 0 812 812 812 812
[  142.149319][T10445] Node 0 DMA32 free:217740kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13300kB inactive_anon:0kB active_file:3536kB inactive_file:145616kB unevictable:3536kB writepending:388kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:31580kB local_pcp:12656kB free_cma:0kB
[  142.158732][T10445] lowmem_reserve[]: 0 0 0 0 0
[  142.160408][T10445] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  142.169060][T10445] lowmem_reserve[]: 0 0 854 854 854
[  142.170949][T10445] Node 1 Normal free:277560kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11776kB inactive_anon:0kB active_file:784kB inactive_file:7368kB unevictable:3536kB writepending:28kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:40156kB local_pcp:17948kB free_cma:0kB
[  142.180472][T10445] lowmem_reserve[]: 0 0 0 0 0
[  142.182058][T10445] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  142.185859][T10445] Node 0 DMA32: 2*4kB (UE) 730*8kB (UME) 243*16kB (UM) 308*32kB (UM) 98*64kB (U) 49*128kB (UM) 43*256kB (UME) 61*512kB (UM) 36*1024kB (UME) 8*2048kB (UME) 22*4096kB (UM) = 217736kB
[  142.191401][T10445] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  142.196235][T10445] Node 1 Normal: 908*4kB (UME) 469*8kB (UME) 200*16kB (UME) 153*32kB (UME) 74*64kB (UM) 6*128kB (M) 4*256kB (UM) 5*512kB (UM) 3*1024kB (ME) 2*2048kB (ME) 60*4096kB (M) = 277496kB
[  142.203258][T10445] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  142.206071][T10445] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  142.208898][T10445] 41749 total pagecache pages
[  142.210671][T10445] 0 pages in swap cache
[  142.211942][T10445] Free swap  = 124996kB
[  142.213216][T10445] Total swap = 124996kB
[  142.214450][T10445] 786301 pages RAM
[  142.215590][T10445] 0 pages HighMem/MovableOnly
[  142.217026][T10445] 241056 pages reserved
[  142.218358][T10445] 0 pages cma reserved
[  142.997297][T10279] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.005365][T10279] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.014908][T10279] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.028705][T10279] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.377119][T10477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.379346][T10477] IPv6: NLM_F_CREATE should be set when creating new route
[  143.399819][T10477] batadv0: entered promiscuous mode
[  143.404823][T10477] macvtap0: entered promiscuous mode
[  143.408013][T10477] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  143.412913][T10477] batadv0: left promiscuous mode
[  143.701543][T10496] IPv4: Oversized IP packet from 127.202.26.0
[  144.088816][T10539] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  144.287791][T10560] veth1_to_team: entered allmulticast mode
[  144.289724][T10560] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  144.826480][T10578] __nla_validate_parse: 13 callbacks suppressed
[  144.826493][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1385'.
[  145.328772][T10601] syzkaller0: entered promiscuous mode
[  145.330957][T10601] syzkaller0: entered allmulticast mode
[  145.697711][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1396'.
[  147.005921][T10629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1398'.
[  147.150939][T10646] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1402'.
[  147.362915][T10664] netlink: 'syz.2.1408': attribute type 1 has an invalid length.
[  147.366775][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'.
[  147.370170][T10666] netlink: 'syz.4.1409': attribute type 1 has an invalid length.
[  147.676154][T10690] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1417'.
[  148.138621][T10700] tipc: Failed to remove unknown binding: 66,1,1/0:2923257419/2923257421
[  148.209046][T10707] netlink: 'syz.5.1422': attribute type 17 has an invalid length.
[  148.212289][T10707] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1422'.
[  148.215373][T10707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.478471][T10719] tipc: New replicast peer: 255.255.255.255
[  148.483639][T10719] tipc: Enabled bearer <udp:syz2>, priority 10
[  148.500583][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'.
[  148.503307][T10719] tipc: Disabling bearer <udp:syz2>
[  148.515198][T10717] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1427'.
[  148.523851][T10719] batadv0: entered promiscuous mode
[  148.525841][T10719] macvtap1: entered promiscuous mode
[  148.540863][T10719] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  148.552409][T10719] batadv0: left promiscuous mode
[  148.628309][T10722] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1427'.
[  148.671073][T10717] Bluetooth: MGMT ver 1.23
[  149.363450][T10737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.559494][T10752] openvswitch: netlink: Tunnel attr 256 out of range max 16
[  149.753834][T10768] sctp: [Deprecated]: syz.5.1445 (pid 10768) Use of int in max_burst socket option.
[  149.753834][T10768] Use struct sctp_assoc_value instead
[  149.842909][T10772] __nla_validate_parse: 3 callbacks suppressed
[  149.842922][T10772] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1446'.
[  149.924584][T10778] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  150.006242][T10784] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1451'.
[  150.012826][T10784] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  150.057709][T10786] netlink: 'syz.2.1452': attribute type 29 has an invalid length.
[  150.098332][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'.
[  150.101677][T10788] team0: Device is already in use.
[  150.192798][T10792] netlink: 'syz.2.1454': attribute type 1 has an invalid length.
[  150.196051][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'.
[  150.244796][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1455'.
[  150.247802][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1455'.
[  150.559637][T10816] 8021q: adding VLAN 0 to HW filter on device bond6
[  150.710656][T10826] netlink: 'syz.2.1466': attribute type 13 has an invalid length.
[  150.714034][T10826] netlink: 'syz.2.1466': attribute type 17 has an invalid length.
[  150.814284][T10826] 8021q: adding VLAN 0 to HW filter on device team0
[  150.819057][T10826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.830272][T10832] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  150.886756][T10826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.961538][T10826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.469424][T10857] netlink: 'syz.5.1475': attribute type 10 has an invalid length.
[  151.475199][T10857] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  151.838885][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'.
[  151.845442][T10878] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[  152.053874][T10885] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1485'.
[  152.136395][ T5724] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  152.907959][T10906] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1489'.
[  152.968462][T10911] netlink: 'syz.2.1490': attribute type 21 has an invalid length.
[  152.973962][T10911] netlink: 'syz.2.1490': attribute type 22 has an invalid length.
[  152.976715][T10911] netlink: 'syz.2.1490': attribute type 23 has an invalid length.
[  152.979252][T10911] netlink: 'syz.2.1490': attribute type 25 has an invalid length.
[  152.985357][T10911] netlink: 'syz.2.1490': attribute type 26 has an invalid length.
[  153.014712][T10911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'.
[  153.247413][T10942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.261757][T10942] syzkaller0: entered promiscuous mode
[  153.263492][T10942] syzkaller0: entered allmulticast mode
[  153.288651][T10942] tipc: Resetting bearer <eth:syzkaller0>
[  153.308481][T10940] tipc: Resetting bearer <eth:syzkaller0>
[  153.328524][T10940] tipc: Disabling bearer <eth:syzkaller0>
[  153.533656][T10962] netlink: 'syz.2.1507': attribute type 4 has an invalid length.
[  153.625355][T10972] netlink: 'syz.4.1511': attribute type 10 has an invalid length.
[  153.637720][T10972] team0: Port device geneve0 added
[  154.191812][T11019] netlink: 'syz.5.1528': attribute type 1 has an invalid length.
[  154.195383][T11019] netlink: 'syz.5.1528': attribute type 1 has an invalid length.
[  154.224796][ T5858] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  154.225357][T11020] ip_vti0: entered promiscuous mode
[  154.397503][T11030] netlink: 'syz.5.1531': attribute type 3 has an invalid length.
[  155.141801][T11050] __nla_validate_parse: 11 callbacks suppressed
[  155.141816][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'.
[  155.146778][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'.
[  155.236261][T11061] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.1542'.
[  155.454101][T11083] geneve2: entered promiscuous mode
[  155.508924][T11096] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[  155.596257][T11107] syzkaller1: entered promiscuous mode
[  155.598153][T11107] syzkaller1: entered allmulticast mode
[  155.604422][T11107] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1556'.
[  155.698230][T11110] IPVS: set_ctl: invalid protocol: 16 10.1.1.1:20003
[  155.867951][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1565'.
[  155.942671][T11148] xt_CT: No such helper "snmp"
[  156.014628][T11160] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1570'.
[  156.138638][T11171] bond0: Unable to set up delay as MII monitoring is disabled
[  156.156466][T11173] Cannot find add_set index 0 as target
[  156.228438][T11179] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1578'.
[  156.345609][   T10] IPVS: starting estimator thread 0...
[  156.354209][T11187] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  156.452347][T11189] IPVS: using max 61 ests per chain, 146400 per kthread
[  156.631018][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  156.653583][T11199] bond0: entered promiscuous mode
[  156.655263][T11199] bond_slave_0: entered promiscuous mode
[  156.657319][T11199] bond_slave_1: entered promiscuous mode
[  157.106776][T11226] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1594'.
[  157.346347][T11250] bridge0: port 3(erspan0) entered blocking state
[  157.348593][T11250] bridge0: port 3(erspan0) entered disabled state
[  157.352147][T11250] erspan0: entered allmulticast mode
[  157.355204][T11250] erspan0: entered promiscuous mode
[  157.359062][T11250] bridge0: port 3(erspan0) entered blocking state
[  157.361331][T11250] bridge0: port 3(erspan0) entered forwarding state
[  157.368188][T11250] erspan0: left allmulticast mode
[  157.371419][T11250] erspan0: left promiscuous mode
[  157.374277][T11250] bridge0: port 3(erspan0) entered disabled state
[  157.464971][T11255] erspan0: entered promiscuous mode
[  157.468871][T11255] batman_adv: batadv0: Adding interface: macvlan2
[  157.471068][T11255] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.478780][T11255] batman_adv: batadv0: Interface activated: macvlan2
[  157.955860][T11294] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  158.028416][T11302] IPVS: length: 8 != 446622349272
[  158.109279][T11308] xt_time: invalid argument - start or stop time greater than 23:59:59
[  158.187221][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1627'.
[  158.190962][T11310] bridge_slave_1: left allmulticast mode
[  158.192798][T11310] bridge_slave_1: left promiscuous mode
[  158.194763][T11310] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.200582][T11310] bridge_slave_0: left promiscuous mode
[  158.202590][T11310] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.314216][T11318] validate_nla: 7 callbacks suppressed
[  158.314229][T11318] netlink: 'syz.2.1630': attribute type 83 has an invalid length.
[  158.372586][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'.
[  158.498585][T11336] netlink: 'syz.5.1636': attribute type 10 has an invalid length.
[  158.501376][T11336] team0: entered promiscuous mode
[  158.503028][T11336] team_slave_0: entered promiscuous mode
[  158.505215][T11336] team_slave_1: entered promiscuous mode
[  158.515259][T11336] team0: entered allmulticast mode
[  158.516926][T11336] team_slave_0: entered allmulticast mode
[  158.518731][T11336] team_slave_1: entered allmulticast mode
[  158.522189][T11336] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  158.816700][T11378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.888584][T11380] bond0: (slave bond_slave_0): Releasing backup interface
[  159.183695][T11409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.193503][T11409] syzkaller0: entered promiscuous mode
[  159.195279][T11409] syzkaller0: entered allmulticast mode
[  159.217171][T11409] tipc: Resetting bearer <eth:syzkaller0>
[  159.277529][T11408] tipc: Resetting bearer <eth:syzkaller0>
[  159.303332][T11408] tipc: Disabling bearer <eth:syzkaller0>
[  159.954826][T11467] netem: change failed
[  160.072255][T11481] pim6reg9: entered allmulticast mode
[  160.116224][T11488] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001
[  160.406265][T11501] tipc: Resetting bearer <eth:ipvlan1>
[  160.523106][T11506] __nla_validate_parse: 18 callbacks suppressed
[  160.523118][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'.
[  160.538995][T11506] tipc: Resetting bearer <eth:ipvlan1>
[  160.541884][T11506] tipc: Resetting bearer <eth:ipvlan1>
[  160.587286][T11510] bridge0: entered promiscuous mode
[  160.589654][T11510] bridge0: port 1(macvlan0) entered blocking state
[  160.594032][T11510] bridge0: port 1(macvlan0) entered disabled state
[  160.596150][T11510] macvlan0: entered allmulticast mode
[  160.597894][T11510] bridge0: entered allmulticast mode
[  160.616835][T11510] macvlan0: left allmulticast mode
[  160.621918][T11510] bridge0: left allmulticast mode
[  160.626909][T11510] bridge0: left promiscuous mode
[  160.684670][T11515] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1684'.
[  160.808874][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1684'.
[  160.889186][T11527] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1687'.
[  161.009275][T11531] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  161.037908][T11533] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1690'.
[  161.324013][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'.
[  161.353265][T11553] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  161.494826][T11560] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.498077][T11560] syzkaller0: entered promiscuous mode
[  161.499774][T11560] syzkaller0: entered allmulticast mode
[  161.871977][T11564] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1702'.
[  162.057108][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'.
[  162.063315][T11602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1709'.
[  162.776522][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1714'.
[  163.164139][T11661] Bluetooth: hci1: Opcode 0x080f failed: -4
[  163.185347][T11652] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20001
[  163.510263][T11704] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  163.514663][T11704] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  163.556628][T11710] 8021q: VLANs not supported on ipvlan1
[  163.841810][T11728] tipc: Resetting bearer <eth:ipvlan1>
[  163.847627][T11728] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20003 - 0
[  163.850738][T11728] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20003 - 0
[  163.853300][T11728] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20003 - 0
[  163.858251][T11728] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20003 - 0
[  164.517591][T11762] netlink: 'syz.4.1759': attribute type 15 has an invalid length.
[  164.715018][T11779] netlink: 'syz.4.1765': attribute type 9 has an invalid length.
[  164.733155][T11781] netlink: 'syz.2.1766': attribute type 5 has an invalid length.
[  164.827150][T11791] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  164.840340][T11791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.849100][T11793] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  164.851907][T11793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.878100][T11797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.896898][T11797] tipc: Invalid UDP bearer configuration
[  164.896926][T11797] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  165.180132][ T5835] Bluetooth: hci1: command 0x080f tx timeout
[  165.359004][T11829] syzkaller0: entered promiscuous mode
[  165.360976][T11829] syzkaller0: entered allmulticast mode
[  165.452194][T11833] bond0: Unable to set down delay as MII monitoring is disabled
[  165.705221][T11852] siw: device registration error -23
[  165.717438][T11853] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  165.721819][T11855] __nla_validate_parse: 18 callbacks suppressed
[  165.721829][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'.
[  165.726431][T11853] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  165.745540][T11855] netlink: 'syz.4.1791': attribute type 1 has an invalid length.
[  165.747832][T11855] netlink: 'syz.4.1791': attribute type 2 has an invalid length.
[  165.755581][T11851] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1790'.
[  165.779653][T11857] bond0: left promiscuous mode
[  165.781869][T11857] bond_slave_0: left promiscuous mode
[  165.783656][T11857] bond_slave_1: left promiscuous mode
[  165.786628][T11857] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.809356][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'.
[  165.839091][T11860] netlink: 'syz.2.1793': attribute type 7 has an invalid length.
[  166.148769][T11891] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  166.287655][T11909] gretap1: entered promiscuous mode
[  166.289648][T11909] gretap1: entered allmulticast mode
[  166.358511][T11918] syzkaller1: entered promiscuous mode
[  166.361817][T11918] syzkaller1: entered allmulticast mode
[  166.666147][T11945] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.669100][T11945] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.672146][T11945] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.675861][T11945] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.693290][T11945] vxlan0: entered promiscuous mode
[  166.694943][T11945] vxlan0: entered allmulticast mode
[  166.697552][T11947] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  166.701740][T11947] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  166.704806][T11945] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1821'.
[  166.735538][T11951] netlink: 'syz.5.1823': attribute type 1 has an invalid length.
[  166.750309][T11951] netlink: 'syz.5.1823': attribute type 1 has an invalid length.
[  166.783100][T11955] netlink: 'syz.5.1825': attribute type 2 has an invalid length.
[  166.786951][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'.
[  166.790396][T11955] k*]: entered promiscuous mode
[  166.796998][T11957] veth0: entered allmulticast mode
[  166.806051][T11957] veth1: entered promiscuous mode
[  167.011547][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1832'.
[  167.033341][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1832'.
[  167.119434][T12001] : entered promiscuous mode
[  167.211718][T12013] syzkaller1: entered promiscuous mode
[  167.213350][T12013] syzkaller1: entered allmulticast mode
[  167.313633][T12022] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1841'.
[  167.405328][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'.
[  167.408243][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'.
[  168.757313][T12101] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  168.906015][T12108] netlink: 'syz.4.1866': attribute type 15 has an invalid length.
[  169.449352][T12110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.583851][T12122] netlink: del zone limit has 4 unknown bytes
[  170.064501][T12156] x_tables: unsorted entry at hook 3
[  170.150434][T12159] netlink: 'syz.5.1886': attribute type 11 has an invalid length.
[  170.150434][T12165] netlink: 'syz.5.1886': attribute type 11 has an invalid length.
[  170.229648][   T33] audit: type=1800 audit(1752849911.145:11): pid=12166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1887" name="memory.events" dev="tmpfs" ino=1687 res=0 errno=0
[  170.497956][T12189] validate_nla: 1 callbacks suppressed
[  170.497967][T12189] netlink: 'syz.4.1895': attribute type 1 has an invalid length.
[  170.522991][T12189] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  170.594798][T12198] netlink: 'syz.4.1897': attribute type 21 has an invalid length.
[  170.697204][T12211] xt_CT: You must specify a L4 protocol and not use inversions on it
[  170.697938][T12211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.704599][T12211] syzkaller0: entered promiscuous mode
[  170.706332][T12211] syzkaller0: entered allmulticast mode
[  170.724256][T12213] tipc: Resetting bearer <eth:syzkaller0>
[  170.738068][T12213] tipc: Disabling bearer <eth:syzkaller0>
[  171.372550][T12230] netlink: 'syz.5.1906': attribute type 10 has an invalid length.
[  171.390832][T12230] veth0_vlan: left promiscuous mode
[  171.395158][T12230] veth0_vlan: entered promiscuous mode
[  171.399286][T12230] team0: Device veth0_vlan failed to register rx_handler
[  171.506974][T12235] __nla_validate_parse: 22 callbacks suppressed
[  171.506985][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1908'.
[  172.047148][T12267] netlink: 'syz.5.1915': attribute type 1 has an invalid length.
[  172.058706][T12269] syzkaller1: entered promiscuous mode
[  172.064400][T12269] syzkaller1: entered allmulticast mode
[  172.073154][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1917'.
[  172.263803][T12273] netlink: 'syz.4.1919': attribute type 9 has an invalid length.
[  172.323659][T12274] Cannot find add_set index 3 as target
[  172.326037][T12275] Cannot find add_set index 3 as target
[  173.376055][T12284] x_tables: duplicate entry at hook 2
[  173.546143][T12299] netlink: 'syz.5.1928': attribute type 1 has an invalid length.
[  173.613783][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1929'.
[  173.631569][T12303] vlan2: entered allmulticast mode
[  173.662567][T12307] netlink: 308 bytes leftover after parsing attributes in process `syz.5.1931'.
[  173.665402][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1931'.
[  173.668054][T12307] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  173.711215][T12305] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  173.771518][T12309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1930'.
[  173.888710][T12322] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1935'.
[  174.182118][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1945'.
[  174.192926][T12352] veth0: entered promiscuous mode
[  174.200285][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1943'.
[  174.269075][T12354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1946'.
[  174.787455][T12390] xt_l2tp: wrong L2TP version: 0
[  174.887150][T12395] netlink: 'syz.4.1958': attribute type 1 has an invalid length.
[  175.195107][T12427] netlink: 'syz.4.1969': attribute type 1 has an invalid length.
[  175.237106][T12429] trusted_key: syz.4.1970 sent an empty control message without MSG_MORE.
[  175.244201][T12429] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  175.255476][T12429] bridge5: entered promiscuous mode
[  175.257315][T12429] bridge5: entered allmulticast mode
[  175.263883][T12429] team0: Port device bridge5 added
[  175.445355][T12440] sctp: [Deprecated]: syz.4.1975 (pid 12440) Use of int in max_burst socket option.
[  175.445355][T12440] Use struct sctp_assoc_value instead
[  175.538888][T12435] nbd: must specify a device to reconfigure
[  175.641879][T12461] bond3: entered promiscuous mode
[  175.643520][T12461] bond3: entered allmulticast mode
[  175.754418][T12471] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  176.037974][T12485] syzkaller1: entered promiscuous mode
[  176.039778][T12485] syzkaller1: entered allmulticast mode
[  176.158447][T12489] netlink: 'syz.4.1994': attribute type 1 has an invalid length.
[  176.409848][T12514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.613397][T12526] netlink: 'syz.4.2005': attribute type 4 has an invalid length.
[  176.615811][T12526] __nla_validate_parse: 9 callbacks suppressed
[  176.615820][T12526] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2005'.
[  176.826510][T12542] syzkaller1: entered promiscuous mode
[  176.828818][T12542] syzkaller1: entered allmulticast mode
[  176.942739][T12546] sctp: [Deprecated]: syz.4.2011 (pid 12546) Use of int in maxseg socket option.
[  176.942739][T12546] Use struct sctp_assoc_value instead
[  177.353559][T12578] netlink: 'syz.4.2023': attribute type 5 has an invalid length.
[  177.409373][T12581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.412089][T12581] syzkaller0: entered promiscuous mode
[  177.413925][T12581] syzkaller0: entered allmulticast mode
[  177.427817][T12581] tipc: Resetting bearer <eth:syzkaller0>
[  177.435206][T12580] tipc: Resetting bearer <eth:syzkaller0>
[  177.450584][T12580] tipc: Disabling bearer <eth:syzkaller0>
[  177.552475][T12589] sctp: [Deprecated]: syz.4.2026 (pid 12589) Use of int in max_burst socket option.
[  177.552475][T12589] Use struct sctp_assoc_value instead
[  177.595421][T12594] IPv4: Oversized IP packet from 127.202.26.0
[  177.773552][T12608] netlink: 'syz.5.2031': attribute type 8 has an invalid length.
[  177.777110][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2031'.
[  177.862006][T12617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2032'.
[  178.023794][T12635] netlink: 'syz.4.2039': attribute type 12 has an invalid length.
[  178.045731][T12637] xt_l2tp: missing protocol rule (udp|l2tpip)
[  178.048977][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'.
[  178.252944][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'.
[  178.279810][T12659] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  178.331127][T12662] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  178.782460][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2055'.
[  178.785239][T12681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2055'.
[  178.789021][T12681] netlink: 'syz.5.2055': attribute type 1 has an invalid length.
[  178.805534][T12681] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2055'.
[  178.814217][T12681] 8021q: adding VLAN 0 to HW filter on device bond2
[  178.824851][T12681] bond0: (slave bond_slave_1): Releasing backup interface
[  178.829784][T12681] team_slave_0: left promiscuous mode
[  178.831766][T12681] team_slave_0: left allmulticast mode
[  178.839650][T12681] team0: Port device team_slave_0 removed
[  178.843323][T12681] team_slave_1: left promiscuous mode
[  178.845240][T12681] team_slave_1: left allmulticast mode
[  178.851619][T12681] team0: Port device team_slave_1 removed
[  178.854288][T12681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.856706][T12681] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.861065][T12681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.863397][T12681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.868769][T12681] bond0: (slave netdevsim0): Releasing backup interface
[  178.876101][T12681] batman_adv: batadv0: Interface deactivated: macvlan2
[  178.878307][T12681] batman_adv: batadv0: Removing interface: macvlan2
[  179.551466][T12727] netlink: 'syz.2.2070': attribute type 9 has an invalid length.
[  179.556250][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'.
[  179.686891][T12735] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  179.764574][T12746] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2074'.
[  179.826319][T12755] netlink: 'syz.4.2077': attribute type 11 has an invalid length.
[  179.828796][T12755] netlink: 'syz.4.2077': attribute type 11 has an invalid length.
[  179.889350][T12762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.903269][T12762] syzkaller0: entered promiscuous mode
[  179.904970][T12762] syzkaller0: entered allmulticast mode
[  179.920188][T12761] tipc: Resetting bearer <eth:syzkaller0>
[  179.947742][T12761] tipc: Disabling bearer <eth:syzkaller0>
[  180.109640][T12789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.205037][T12798] !: renamed from dummy0 (while UP)
[  180.265976][T12808] netlink: 'syz.5.2092': attribute type 21 has an invalid length.
[  180.455320][T12826] netlink: 'syz.4.2096': attribute type 1 has an invalid length.
[  180.457777][T12826] netlink: 'syz.4.2096': attribute type 1 has an invalid length.
[  180.470401][ T5834] Bluetooth: hci1: command 0x080f tx timeout
[  180.960169][T12859] pim6reg0: tun_chr_ioctl cmd 2148553947
[  181.201363][T12887] netlink: 'syz.5.2112': attribute type 39 has an invalid length.
[  181.337818][T12905] block nbd4: not configured, cannot reconfigure
[  181.540847][T12925] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  181.579381][T12930] netlink: 'syz.4.2126': attribute type 1 has an invalid length.
[  181.607182][T12930] 8021q: adding VLAN 0 to HW filter on device bond5
[  181.762722][T12955] __nla_validate_parse: 27 callbacks suppressed
[  181.762732][T12955] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2129'.
[  182.067461][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'.
[  182.085872][T12978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2140'.
[  182.123970][T12983] wg1: left promiscuous mode
[  182.125564][T12983] wg1: left allmulticast mode
[  182.127533][T12983] veth1_to_team: left allmulticast mode
[  182.131971][T12983] vlan2: left promiscuous mode
[  182.133791][T12983] batadv0: left promiscuous mode
[  182.136515][T12983] bond3: left promiscuous mode
[  182.138482][T12983] bond3: left allmulticast mode
[  182.140545][T12983] ip6gre2: left allmulticast mode
[  182.142605][T12983] geneve2: left promiscuous mode
[  182.144540][T12983] hsr2: left promiscuous mode
[  182.146561][T12983] veth0: left allmulticast mode
[  182.148870][T12983] veth1: left promiscuous mode
[  182.186458][T12989] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2145'.
[  182.189451][T12989] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2145'.
[  182.311452][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2148'.
[  182.695127][T13037] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2165'.
[  182.696348][T13039] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2164'.
[  182.735303][T13043] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2167'.
[  182.806381][T13048] netlink: 'syz.5.2168': attribute type 1 has an invalid length.
[  182.847683][T13048] netlink: 'syz.5.2168': attribute type 11 has an invalid length.
[  183.260041][ T5835] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  183.606981][T13053] block nbd4: not configured, cannot reconfigure
[  184.137115][T13062] netlink: 'syz.5.2171': attribute type 12 has an invalid length.
[  184.139623][T13062] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.2171'.
[  184.353016][T13078] syzkaller0: entered promiscuous mode
[  184.354862][T13078] syzkaller0: entered allmulticast mode
[  184.728029][T13106] netlink: 'syz.4.2183': attribute type 1 has an invalid length.
[  184.773449][T13106] openvswitch: netlink: Unknown key attributes 2
[  184.777849][T13106] netlink: 'syz.4.2183': attribute type 11 has an invalid length.
[  185.966209][T13117] netlink: 'syz.5.2187': attribute type 12 has an invalid length.
[  186.036047][T13122] netlink: 'syz.4.2189': attribute type 3 has an invalid length.
[  186.038700][T13122] netlink: 'syz.4.2189': attribute type 1 has an invalid length.
[  186.619988][ T5834] Bluetooth: hci5: command 0x0405 tx timeout
[  186.875211][T13140] __nla_validate_parse: 2 callbacks suppressed
[  186.875223][T13140] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2195'.
[  186.939514][T13149] netlink: 'syz.5.2197': attribute type 3 has an invalid length.
[  186.949141][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2197'.
[  187.074943][T13155] netlink: 'syz.4.2199': attribute type 1 has an invalid length.
[  187.091609][T13155] 8021q: adding VLAN 0 to HW filter on device bond6
[  187.106247][T13155] 8021q: adding VLAN 0 to HW filter on device bond6
[  187.108546][T13155] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  187.113174][T13155] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  187.155262][T13159] bond6: (slave bridge6): Enslaving as an active interface with a down link
[  187.159299][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2199'.
[  187.210380][T13161] netlink: 'syz.4.2200': attribute type 2 has an invalid length.
[  187.215133][T13161] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2200'.
[  187.218640][T13161] nbd: must specify a device to reconfigure
[  187.434677][T13172] netlink: 'syz.4.2203': attribute type 6 has an invalid length.
[  187.621866][T13182] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2205'.
[  187.625088][T13182] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2205'.
[  187.627877][T13182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2205'.
[  188.078199][T13212] netlink: del zone limit has 4 unknown bytes
[  188.224761][T13225] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2215'.
[  189.353790][T13239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2219'.
[  190.246550][T13255] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2224'.
[  190.449997][T13270] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  190.455773][T13268] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  190.691479][T13297] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  190.916615][T13321] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  192.014699][T13359] __nla_validate_parse: 14 callbacks suppressed
[  192.014709][T13359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2251'.
[  192.047046][T13361] wg1 speed is unknown, defaulting to 1000
[  192.048952][T13361] wg1 speed is unknown, defaulting to 1000
[  192.053189][T13361] wg1 speed is unknown, defaulting to 1000
[  192.063998][T13361] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  192.081744][T13361] wg1 speed is unknown, defaulting to 1000
[  192.084631][T13361] wg1 speed is unknown, defaulting to 1000
[  192.094073][T13361] wg1 speed is unknown, defaulting to 1000
[  192.096714][T13361] wg1 speed is unknown, defaulting to 1000
[  192.101270][T13361] wg1 speed is unknown, defaulting to 1000
[  192.105190][T13361] wg1 speed is unknown, defaulting to 1000
[  192.352234][T13387] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2259'.
[  192.408599][T13391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2261'.
[  192.472846][T13396] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6
[  192.661669][T13408] netlink: 'syz.5.2267': attribute type 11 has an invalid length.
[  192.699120][T13410] netlink: 'syz.5.2268': attribute type 1 has an invalid length.
[  192.716071][T13410] 8021q: adding VLAN 0 to HW filter on device bond3
[  192.720221][T13410] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2268'.
[  192.723877][T13410] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2268'.
[  192.726530][T13410] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2268'.
[  192.734502][T13410] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2268'.
[  192.763232][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2269'.
[  192.765795][T13413] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2269'.
[  192.801770][T13415] netlink: 'syz.5.2270': attribute type 21 has an invalid length.
[  192.804030][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2270'.
[  192.958712][T13430] netlink: 'syz.5.2274': attribute type 11 has an invalid length.
[  193.224105][ T5835] Bluetooth: hci5: link tx timeout
[  193.226137][ T5835] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  193.229262][ T5835] Bluetooth: hci5: link tx timeout
[  193.231975][ T5835] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  193.541809][T13464] netlink: 'syz.5.2286': attribute type 1 has an invalid length.
[  193.558579][T13464] 8021q: adding VLAN 0 to HW filter on device bond4
[  193.578322][T13464] 8021q: adding VLAN 0 to HW filter on device bond4
[  193.580756][T13464] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  193.584755][T13464] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  193.627174][T13466] veth5: entered promiscuous mode
[  193.631694][T13466] bond4: (slave veth5): Enslaving as an active interface with a down link
[  193.636368][T13466] erspan0: entered allmulticast mode
[  193.676112][T13468] netlink: 'syz.5.2287': attribute type 11 has an invalid length.
[  193.904688][T13483] bond4: (slave veth5): Releasing active interface
[  193.942708][T13483] team0: Mode changed to "broadcast"
[  193.945353][T13483] vlan0: entered promiscuous mode
[  194.813245][T13493] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  194.848478][T13495] netlink: 'syz.5.2296': attribute type 1 has an invalid length.
[  194.885534][T13495] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  195.260135][ T5835] Bluetooth: hci5: command 0x0405 tx timeout
[  195.499444][T13547] nbd: illegal input index 65508
[  195.563998][T13552] wg1 speed is unknown, defaulting to 1000
[  195.572304][T13553] wg1 speed is unknown, defaulting to 1000
[  195.923412][T13576] syz_tun: entered allmulticast mode
[  195.932155][T13574] syz_tun: left allmulticast mode
[  196.077340][T13589] wg1 speed is unknown, defaulting to 1000
[  196.140179][T13589] netlink: 'syz.5.2322': attribute type 4 has an invalid length.
[  196.208721][T13601] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  196.335460][T13609] xt_nfacct: accounting object `syz1' does not exists
[  196.337949][T13609] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  196.341230][T13609] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  196.407975][T13616] netlink: 'syz.4.2329': attribute type 11 has an invalid length.
[  196.476927][T13620] erspan0: left allmulticast mode
[  196.478600][T13620] ip_vti0: left promiscuous mode
[  196.480968][T13620] syz_tun: left allmulticast mode
[  196.484399][T13620] wg1: left promiscuous mode
[  196.485815][T13620] wg1: left allmulticast mode
[  196.491616][T13620] bond0: (slave bond_slave_0): Releasing backup interface
[  196.497150][T13620] bond0: (slave bond_slave_1): Releasing backup interface
[  196.514498][T13620] team0: Port device team_slave_0 removed
[  196.524023][T13620] team0: Port device team_slave_1 removed
[  196.526384][T13620] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.528822][T13620] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.534748][T13620] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.537166][T13620] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.544857][T13620] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  196.547570][T13620] batman_adv: batadv0: Removing interface: virt_wifi0
[  196.563798][T13620] team0: Port device geneve0 removed
[  196.568424][T13620] bond2: (slave ip6gretap1): Releasing backup interface
[  196.576892][T13620] bridge5: left promiscuous mode
[  196.578580][T13620] bridge5: left allmulticast mode
[  196.587341][T13620] team0: Port device bridge5 removed
[  196.589592][T13620] bond3: left promiscuous mode
[  196.592898][T13620] bond3: left allmulticast mode
[  196.596358][T13620] bond6: (slave bridge6): Releasing active interface
[  196.604572][   T51] wg1 speed is unknown, defaulting to 1000
[  196.687654][T13624] netlink: 'syz.4.2332': attribute type 1 has an invalid length.
[  196.851223][T13631] netlink: 'syz.4.2333': attribute type 11 has an invalid length.
[  197.212607][T13638] netlink: 'syz.5.2336': attribute type 11 has an invalid length.
[  197.350464][ T5835] Bluetooth: hci5: command 0x0405 tx timeout
[  197.448057][T13646] netlink: 'syz.5.2338': attribute type 16 has an invalid length.
[  197.452632][T13646] netlink: 'syz.5.2338': attribute type 17 has an invalid length.
[  197.464408][T13646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  197.675119][T13649] __nla_validate_parse: 15 callbacks suppressed
[  197.675134][T13649] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2339'.
[  197.835173][T13658] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  197.835661][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  197.845462][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  197.849041][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  197.853817][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  197.857140][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  197.912251][T13661] wg1 speed is unknown, defaulting to 1000
[  198.119323][T13661] chnl_net:caif_netlink_parms(): no params data found
[  198.229348][T13661] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.233490][T13661] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.235686][T13661] bridge_slave_0: entered allmulticast mode
[  198.239818][T13661] bridge_slave_0: entered promiscuous mode
[  198.246311][T13661] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.248618][T13661] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.252055][T13661] bridge_slave_1: entered allmulticast mode
[  198.254932][T13661] bridge_slave_1: entered promiscuous mode
[  198.257997][T13682] erspan0: left allmulticast mode
[  198.264877][T13682] team0: left promiscuous mode
[  198.271308][T13682] vlan0: left promiscuous mode
[  198.276238][T13682] macsec0: left promiscuous mode
[  198.277780][T13682] macsec0: left allmulticast mode
[  198.289562][T13682] geneve2: left promiscuous mode
[  198.292301][T13682] gretap1: left promiscuous mode
[  198.293830][T13682] gretap1: left allmulticast mode
[  198.295552][T13682] vxlan0: left promiscuous mode
[  198.297003][T13682] vxlan0: left allmulticast mode
[  198.298634][T13682] vlan2: left allmulticast mode
[  198.300452][T13682] team0: left allmulticast mode
[  198.302568][T13682] veth5: left promiscuous mode
[  198.355689][T13661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.364954][T13661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.393003][T13661] team0: Port device team_slave_0 added
[  198.396691][T13661] team0: Port device team_slave_1 added
[  198.423958][T13693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2351'.
[  198.427084][T13693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2351'.
[  198.427150][T13661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.434659][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.442860][T13661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.447382][T13661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.449579][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.460201][T13661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.546946][T13661] hsr_slave_0: entered promiscuous mode
[  198.549205][T13661] hsr_slave_1: entered promiscuous mode
[  198.556049][T13661] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.558633][T13661] Cannot create hsr debugfs directory
[  198.630232][T13700] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2353'.
[  198.716326][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2358'.
[  198.734389][T13716] 8021q: adding VLAN 0 to HW filter on device bond6
[  198.739504][T13661] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  198.750515][T13661] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  198.764939][T13716] 8021q: adding VLAN 0 to HW filter on device bond6
[  198.767109][T13716] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  198.772693][T13716] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  198.788722][T13718] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  198.792603][T13718] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  198.804639][T13661] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  198.811292][T13715] wg1 speed is unknown, defaulting to 1000
[  198.824402][T13661] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  198.887832][T13715] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2359'.
[  198.894178][T13715] netlink: 'syz.4.2359': attribute type 4 has an invalid length.
[  198.978333][T13661] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.014081][T13736] delete_channel: no stack
[  199.023350][T13661] 8021q: adding VLAN 0 to HW filter on device team0
[  199.028767][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.031138][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.045467][T13738] ip6gretap0: entered promiscuous mode
[  199.052124][T13738] ip6gretap0: left promiscuous mode
[  199.089172][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.091500][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.127596][T13661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  199.140692][T13661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  199.199201][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2364'.
[  199.203082][T13736] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2362'.
[  199.216073][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2364'.
[  199.288531][T13661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.432951][T13765] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2367'.
[  199.453457][T13661] veth0_vlan: entered promiscuous mode
[  199.464409][T13661] veth1_vlan: entered promiscuous mode
[  199.492726][T13661] veth0_macvtap: entered promiscuous mode
[  199.497156][T13661] veth1_macvtap: entered promiscuous mode
[  199.509815][T13661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.523511][T13661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.532396][T13661] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.535300][T13661] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.538052][T13661] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.543821][T13661] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.900076][ T5835] Bluetooth: hci6: command tx timeout
[  201.980022][ T5835] Bluetooth: hci6: command tx timeout
[  202.405328][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.407726][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.458470][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.468581][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.786530][T13804] __nla_validate_parse: 2 callbacks suppressed
[  202.786542][T13804] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2380'.
[  202.792917][T13804] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  202.795659][T13804] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  202.806196][T13806] xt_bpf: check failed: parse error
[  202.902674][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2383'.
[  203.454361][T13819] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode
[  203.487220][T13819] netlink: 'syz.5.2384': attribute type 10 has an invalid length.
[  203.487317][T13820] netlink: 'syz.5.2384': attribute type 10 has an invalid length.
[  203.489699][T13819] mac80211_hwsim hwsim18 wlan1: left allmulticast mode
[  203.507803][T13819] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  203.523288][T13819] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2384'.
[  203.783332][T13837] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2390'.
[  203.909302][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2393'.
[  203.918396][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2393'.
[  203.927212][T13850] netlink: 'syz.4.2394': attribute type 13 has an invalid length.
[  203.930895][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2394'.
[  204.070067][ T5834] Bluetooth: hci6: command tx timeout
[  204.107886][T13867] netlink: 'syz.6.2399': attribute type 6 has an invalid length.
[  204.153668][T13869] ip6gre1: entered promiscuous mode
[  204.256307][T13876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2401'.
[  204.397954][T13881] netlink: 'syz.4.2405': attribute type 13 has an invalid length.
[  204.400787][T13881] netlink: 'syz.4.2405': attribute type 17 has an invalid length.
[  204.438429][T13881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.459111][T13880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.514943][T13880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.572498][T13880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.587188][T13884] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2406'.
[  205.122976][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2417'.
[  205.172696][T13925] delete_channel: no stack
[  205.203824][T13931] Cannot find set identified by id 0 to match
[  205.216715][T13933] netlink: 'syz.4.2422': attribute type 14 has an invalid length.
[  205.219449][T13933] netlink: 'syz.4.2422': attribute type 14 has an invalid length.
[  205.267810][T13935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.271804][T13935] syzkaller0: entered promiscuous mode
[  205.274132][T13935] syzkaller0: entered allmulticast mode
[  205.314066][T13935] sch_fq: defrate 257 ignored.
[  205.317944][T13935] tipc: Resetting bearer <eth:syzkaller0>
[  205.322200][T13944] !: renamed from dummy0 (while UP)
[  205.476654][T13952] wg1 speed is unknown, defaulting to 1000
[  205.529226][T13934] tipc: Resetting bearer <eth:syzkaller0>
[  205.557452][T13934] tipc: Disabling bearer <eth:syzkaller0>
[  205.755609][T13969] netlink: 'syz.4.2426': attribute type 11 has an invalid length.
[  206.060482][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[  206.097921][T13985] netlink: 'syz.6.2431': attribute type 1 has an invalid length.
[  206.144172][ T5835] Bluetooth: hci6: command tx timeout
[  206.252765][T13997] netlink: 'syz.4.2435': attribute type 10 has an invalid length.
[  206.252876][T13996] netlink: 'syz.4.2435': attribute type 10 has an invalid length.
[  206.268772][T13996] 8021q: adding VLAN 0 to HW filter on device team0
[  206.276209][T13997] 8021q: adding VLAN 0 to HW filter on device team0
[  206.508458][T14010] netlink: 'syz.6.2441': attribute type 11 has an invalid length.
[  206.651203][ T5859] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  206.911900][T14030] wg1 speed is unknown, defaulting to 1000
[  207.595247][T14054] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  207.637780][T14056] macvlan1: entered promiscuous mode
[  207.640414][T14056] ipvlan0: entered promiscuous mode
[  207.642791][T14056] ipvlan0: left promiscuous mode
[  207.644568][T14056] macvlan1: left promiscuous mode
[  207.939051][T14073] netdevsim netdevsim5: Direct firmware load for .
[  207.939051][T14073]  failed with error -2
[  207.945002][T14073] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  207.945002][T14073] 
[  208.131542][T14085] sctp: [Deprecated]: syz.4.2466 (pid 14085) Use of int in max_burst socket option.
[  208.131542][T14085] Use struct sctp_assoc_value instead
[  208.266809][T14089] netlink: 'syz.4.2467': attribute type 11 has an invalid length.
[  208.299100][T14092] __nla_validate_parse: 6 callbacks suppressed
[  208.299111][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2468'.
[  208.305572][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2468'.
[  208.348555][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'.
[  208.493649][T14096] bridge0: entered promiscuous mode
[  208.988205][T14125] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  208.991006][T14124] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  209.211513][T14136] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2482'.
[  209.243501][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2482'.
[  209.246325][T14136] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  209.248653][T14136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.372525][T14144] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2485'.
[  209.469252][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2488'.
[  209.839001][T14183] batman_adv: batadv0: Adding interface: ip6gretap2
[  209.841705][T14183] batman_adv: batadv0: Interface activated: ip6gretap2
[  209.847878][T14182] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  209.850082][  T788] IPVS: starting estimator thread 0...
[  209.952580][T14186] IPVS: using max 62 ests per chain, 148800 per kthread
[  210.655123][T14198] validate_nla: 1 callbacks suppressed
[  210.655135][T14198] netlink: 'syz.6.2501': attribute type 1 has an invalid length.
[  210.657202][T14196] bridge3: entered allmulticast mode
[  210.662633][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'.
[  210.665345][T14201] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2502'.
[  210.707546][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2505'.
[  210.903682][T14221] openvswitch: netlink: IP tunnel dst address not specified
[  210.906909][T14222] @: renamed from bond_slave_0
[  211.781507][T14238] netlink: 'syz.5.2515': attribute type 29 has an invalid length.
[  211.785543][T14239] netlink: 'syz.5.2515': attribute type 29 has an invalid length.
[  211.789163][T14238] netlink: 'syz.5.2515': attribute type 29 has an invalid length.
[  212.066882][T14261] netlink: 'syz.5.2524': attribute type 32 has an invalid length.
[  212.476479][T14302] netlink: 'syz.4.2535': attribute type 13 has an invalid length.
[  213.068809][T14318] sctp_setsockopt_delayed_ack: 23 callbacks suppressed
[  213.068825][T14318] sctp: [Deprecated]: syz.5.2539 (pid 14318) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.068825][T14318] Use struct sctp_sack_info instead
[  213.180072][ T5835] Bluetooth: hci6: command tx timeout
[  213.356548][T14321] bond0: (slave rose0): Enslaving as an active interface with an up link
[  213.473252][T14331] netlink: 'syz.4.2543': attribute type 11 has an invalid length.
[  213.509265][T14333] __nla_validate_parse: 5 callbacks suppressed
[  213.509278][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2544'.
[  213.608523][T14344] 8021q: adding VLAN 0 to HW filter on device batadv1
[  213.616047][T14344] team0: Failed to send options change via netlink (err -105)
[  213.618606][T14344] team0: Port device batadv1 added
[  213.663956][T14344] 8021q: adding VLAN 0 to HW filter on device batadv2
[  213.667471][T14344] team0: Failed to send port change of device batadv2 via netlink (err -105)
[  213.670542][T14344] team0: Failed to send options change via netlink (err -105)
[  213.672868][T14344] team0: Port device batadv2 added
[  213.705727][T14351] netlink: 'syz.6.2550': attribute type 11 has an invalid length.
[  214.005969][T14370] netlink: 'syz.6.2558': attribute type 83 has an invalid length.
[  214.015321][T14371] netlink: 'syz.6.2558': attribute type 83 has an invalid length.
[  214.099751][T14377] netlink: 'syz.6.2559': attribute type 11 has an invalid length.
[  214.386613][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2566'.
[  214.537067][T14404] netlink: 'syz.5.2568': attribute type 11 has an invalid length.
[  215.077350][T14431] team0: No ports can be present during mode change
[  215.080700][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2576'.
[  215.083368][T14431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2576'.
[  215.092202][T14431] Unsupported ieee802154 address type: 0
[  215.094273][T14431] syzkaller1: entered promiscuous mode
[  215.095936][T14431] syzkaller1: entered allmulticast mode
[  215.133654][T14433] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2577'.
[  215.208512][T14437] netlink: 'syz.4.2579': attribute type 1 has an invalid length.
[  215.238867][T14437] 8021q: adding VLAN 0 to HW filter on device bond7
[  215.264668][T14437] bond7: (slave bridge7): making interface the new active one
[  215.278556][T14437] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  215.292449][T14442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2581'.
[  215.310971][T14437] gretap2: entered promiscuous mode
[  215.323963][T14437] macvlan2: entered promiscuous mode
[  215.325587][T14437] macvlan2: entered allmulticast mode
[  215.328448][T14442] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2581'.
[  215.330263][T14437] bond7: entered promiscuous mode
[  215.340839][T14437] bridge7: entered promiscuous mode
[  215.345030][T14437] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  215.349265][T14437] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  215.356421][T14437] bond7: left promiscuous mode
[  215.358104][T14437] bridge7: left promiscuous mode
[  215.403855][T14444] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  215.464325][T14446] netlink: 'syz.4.2583': attribute type 11 has an invalid length.
[  215.651882][T14455] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2587'.
[  215.709008][T14456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2587'.
[  216.039770][ T5280] udevd[5280]: worker [13533] terminated by signal 33 (Unknown signal 33)
[  216.050832][ T5280] udevd[5280]: worker [13167] terminated by signal 33 (Unknown signal 33)
[  216.054628][ T5280] udevd[5280]: worker [13364] terminated by signal 33 (Unknown signal 33)
[  216.064413][ T5280] udevd[5280]: worker [13365] terminated by signal 33 (Unknown signal 33)
[  216.286708][T14458] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2588'.
[  216.295951][T14458] netlink: 'syz.6.2588': attribute type 3 has an invalid length.
[  216.728361][T14500] bridge0: left promiscuous mode
[  216.732362][T14500] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  216.735590][T14500] batman_adv: batadv0: Removing interface: ip6gretap2
[  216.750854][T14500] team0: Port device batadv1 removed
[  216.771268][T14500] team0: Port device batadv2 removed
[  216.775309][T14500] bond7: (slave bridge7): Releasing active interface
[  216.791232][T14500] gretap2: left promiscuous mode
[  216.885551][T14514] syzkaller1: entered promiscuous mode
[  216.887821][T14514] syzkaller1: entered allmulticast mode
[  216.896331][T14514] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  217.012981][T14516] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  217.102667][T14525] IPVS: set_ctl: invalid protocol: 150 10.1.1.2:20003
[  217.151534][T14528] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  217.286542][T14532] netlink: 'syz.6.2611': attribute type 11 has an invalid length.
[  217.434521][T14539] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode
[  217.436869][T14539] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode
[  217.500218][T14545] netlink: 'syz.4.2617': attribute type 1 has an invalid length.
[  217.502787][T14545] netlink: 'syz.4.2617': attribute type 2 has an invalid length.
[  217.530436][T14545] wg1 speed is unknown, defaulting to 1000
[  217.573626][T14545] netlink: 'syz.4.2617': attribute type 4 has an invalid length.
[  217.667965][T14550] netlink: 'syz.4.2619': attribute type 1 has an invalid length.
[  217.821102][T14553] bond0: Unable to set up delay as MII monitoring is disabled
[  217.897142][T14558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.281524][T14577] netlink: 'syz.6.2628': attribute type 11 has an invalid length.
[  218.512578][T14600] __nla_validate_parse: 9 callbacks suppressed
[  218.512911][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2635'.
[  218.518674][T14603] netlink: 'syz.4.2636': attribute type 4 has an invalid length.
[  218.524093][T14603] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2636'.
[  218.566772][T14610] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  218.583104][T14610] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  218.636116][T14618] netlink: 'syz.6.2641': attribute type 11 has an invalid length.
[  218.667426][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2643'.
[  218.896495][T14631] macvlan0: entered allmulticast mode
[  218.901575][T14631] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2645'.
[  219.609016][T14635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2647'.
[  219.628046][T14635] 8021q: adding VLAN 0 to HW filter on device bond8
[  219.769348][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2653'.
[  219.799455][T14653] netlink: 'syz.6.2654': attribute type 1 has an invalid length.
[  219.843672][T14653] bond1: (slave bridge3): making interface the new active one
[  219.847113][T14653] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  219.906883][T14660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2656'.
[  219.928537][T14662] ipt_REJECT: ECHOREPLY no longer supported.
[  220.085935][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2660'.
[  220.254991][T14680] ip6t_REJECT: ECHOREPLY is not supported
[  220.286149][T14682] netlink: 404 bytes leftover after parsing attributes in process `syz.6.2665'.
[  220.293387][T14682] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2665'.
[  220.299507][T14682] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  220.827099][T14713] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  220.956744][T14722] dvmrp0: entered allmulticast mode
[  221.016778][T14730] netlink: 'syz.4.2680': attribute type 1 has an invalid length.
[  221.063665][T14734] netlink: 'syz.4.2682': attribute type 1 has an invalid length.
[  221.064257][T14735] netlink: 'syz.4.2682': attribute type 1 has an invalid length.
[  221.086865][T14734] 8021q: adding VLAN 0 to HW filter on device bond9
[  221.099456][T14734] bond9: (slave bridge8): making interface the new active one
[  221.105485][T14734] bond9: (slave bridge8): Enslaving as an active interface with an up link
[  221.128250][T14735] macvlan2: entered promiscuous mode
[  221.130127][T14735] macvlan2: entered allmulticast mode
[  221.132334][T14735] bond9: entered promiscuous mode
[  221.134014][T14735] bridge8: entered promiscuous mode
[  221.136008][T14735] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  221.138444][T14735] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  221.146766][T14735] bond9: left promiscuous mode
[  221.148219][T14735] bridge8: left promiscuous mode
[  221.947396][T14793] netlink: 'syz.4.2701': attribute type 21 has an invalid length.
[  221.950199][T14793] netlink: 'syz.4.2701': attribute type 5 has an invalid length.
[  221.952624][T14793] netlink: 'syz.4.2701': attribute type 6 has an invalid length.
[  221.963276][T14795] netlink: 'syz.4.2701': attribute type 21 has an invalid length.
[  221.965988][T14795] netlink: 'syz.4.2701': attribute type 5 has an invalid length.
[  221.968567][T14795] netlink: 'syz.4.2701': attribute type 6 has an invalid length.
[  222.525408][T14803] netem: change failed
[  222.600416][T14805] bridge_slave_1: left allmulticast mode
[  222.602655][T14805] bridge_slave_1: left promiscuous mode
[  222.604677][T14805] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.609056][T14805] bridge_slave_0: left allmulticast mode
[  222.614558][T14805] bridge_slave_0: left promiscuous mode
[  222.616475][T14805] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.652926][T14806] netlink: 'syz.6.2704': attribute type 10 has an invalid length.
[  222.682927][T14806] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  222.777518][T14810] netlink: 'syz.6.2706': attribute type 11 has an invalid length.
[  222.934776][T14823] sctp: [Deprecated]: syz.6.2712 (pid 14823) Use of int in max_burst socket option.
[  222.934776][T14823] Use struct sctp_assoc_value instead
[  223.056915][T14828] netlink: 'syz.4.2714': attribute type 11 has an invalid length.
[  223.098128][T14830] Unsupported ieee802154 address type: 0
[  223.189328][T14838] netlink: 'syz.4.2717': attribute type 1 has an invalid length.
[  223.494574][T14851] 8021q: adding VLAN 0 to HW filter on device batadv3
[  223.498004][T14851] team0: Failed to send options change via netlink (err -105)
[  223.504394][T14851] team0: Port device batadv3 added
[  224.099129][T14879] netlink: 'syz.6.2732': attribute type 11 has an invalid length.
[  224.220949][T14885] team0: Device gtp0 is of different type
[  224.359568][T14894] sctp: [Deprecated]: syz.6.2738 (pid 14894) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.359568][T14894] Use struct sctp_sack_info instead
[  224.366511][T14894] __nla_validate_parse: 28 callbacks suppressed
[  224.366523][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2738'.
[  225.411846][T14929] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.414435][T14929] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.416947][T14929] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.419492][T14929] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.457709][ T5867] wg1 speed is unknown, defaulting to 1000
[  225.459580][ T5867] syz0: Port: 1 Link DOWN
[  225.515210][T14940] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2754'.
[  225.544974][T14944] netlink: 'syz.6.2756': attribute type 5 has an invalid length.
[  225.592691][T14946] netlink: 'syz.4.2758': attribute type 3 has an invalid length.
[  225.595089][T14946] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2758'.
[  225.707182][T14959] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  225.754531][T14964] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2764'.
[  225.764152][T14964] batadv1: entered promiscuous mode
[  225.765840][T14964] batadv1: entered allmulticast mode
[  225.913525][T14964] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2764'.
[  226.102111][T14981] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2771'.
[  226.340767][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'.
[  226.377560][T14999] Cannot find set identified by id 1 to match
[  226.537732][T15007] 8021q: adding VLAN 0 to HW filter on device bond2
[  226.585950][T14965] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  226.643318][T15015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2782'.
[  226.646034][T15015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2782'.
[  226.820161][   T51] tipc: Node number set to 3529307772
[  226.907648][T15035] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  226.916715][T15036] bond9: (slave bridge8): Releasing active interface
[  226.924249][T15036] team0: Port device batadv3 removed
[  226.926177][T15035] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  227.422488][T15042] openvswitch: netlink: Message has 8 unknown bytes.
[  227.503739][T15050] syzkaller1: entered promiscuous mode
[  227.505463][T15050] syzkaller1: entered allmulticast mode
[  227.509023][T15050] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2790'.
[  228.018695][T15086] sctp: [Deprecated]: syz.6.2805 (pid 15086) Use of int in max_burst socket option deprecated.
[  228.018695][T15086] Use struct sctp_assoc_value instead
[  228.662611][T15093] validate_nla: 3 callbacks suppressed
[  228.662629][T15093] netlink: 'syz.4.2808': attribute type 21 has an invalid length.
[  228.757668][T15098] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  229.242347][T15132] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  229.261436][T15132] bond3: entered promiscuous mode
[  229.263056][T15132] bond3: entered allmulticast mode
[  229.264955][T15132] 8021q: adding VLAN 0 to HW filter on device bond3
[  229.384762][T15141] tipc: Started in network mode
[  229.386476][T15141] tipc: Node identity 080211, cluster identity 4711
[  229.389032][T15141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.428224][T15143] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  229.465779][T15145] netlink: 'syz.6.2820': attribute type 4 has an invalid length.
[  230.137269][T15176] netlink: 'syz.4.2829': attribute type 11 has an invalid length.
[  230.137360][T15177] netlink: 'syz.4.2829': attribute type 11 has an invalid length.
[  230.499986][ T5868] tipc: Node number set to 134353152
[  231.005586][T15197] pim6reg1: entered promiscuous mode
[  231.007449][T15197] pim6reg1: entered allmulticast mode
[  231.073067][T15205] __nla_validate_parse: 37 callbacks suppressed
[  231.073081][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2839'.
[  231.215453][T15220] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  231.302738][T15229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2847'.
[  231.305652][T15228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2847'.
[  231.387595][T15234] wg1 speed is unknown, defaulting to 1000
[  231.660101][ T5831] Bluetooth: hci3: command 0x0406 tx timeout
[  232.363486][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2853'.
[  232.395318][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2853'.
[  232.470884][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  232.474959][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  232.478416][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  232.486173][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  232.489447][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  232.537434][T15253] wg1 speed is unknown, defaulting to 1000
[  232.652837][T15253] chnl_net:caif_netlink_parms(): no params data found
[  232.694797][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'.
[  232.733543][T15253] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.736610][T15253] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.738889][T15253] bridge_slave_0: entered allmulticast mode
[  232.742334][T15253] bridge_slave_0: entered promiscuous mode
[  232.745581][T15253] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.747857][T15253] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.750276][T15253] bridge_slave_1: entered allmulticast mode
[  232.753064][T15253] bridge_slave_1: entered promiscuous mode
[  232.779765][T15279] xt_hashlimit: max too large, truncated to 1048576
[  232.785372][T15253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.794393][T15253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.846672][T15253] team0: Port device team_slave_0 added
[  232.855653][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2863'.
[  232.861346][T15253] team0: Port device team_slave_1 added
[  232.898468][T15253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.901581][T15253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.909461][T15253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.916228][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'.
[  232.919039][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'.
[  232.923247][T15253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.925338][T15253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.937347][T15253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.974564][T15253] hsr_slave_0: entered promiscuous mode
[  232.977039][T15253] hsr_slave_1: entered promiscuous mode
[  232.983002][T15253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  232.995298][T15253] Cannot create hsr debugfs directory
[  233.110668][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  233.169416][T15253] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  233.187571][T15253] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  233.193949][T15253] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  233.202585][T15253] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  233.227842][T15308] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7
[  233.244372][T15253] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.246723][T15253] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.249127][T15253] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.251438][T15253] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.316946][T15253] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.346403][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2872'.
[  233.440525][T15318] netlink: 'syz.4.2873': attribute type 4 has an invalid length.
[  233.450115][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.457440][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.485799][T15253] 8021q: adding VLAN 0 to HW filter on device team0
[  233.489728][T15317] wg1 speed is unknown, defaulting to 1000
[  233.500649][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.502808][ T7203] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.512674][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.515180][ T7203] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.550741][T15322] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode
[  233.553141][T15322] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode
[  233.555765][T15322] tipc: Resetting bearer <eth:syzkaller0>
[  233.578983][T15253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  233.788513][T15253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.969165][T15253] veth0_vlan: entered promiscuous mode
[  233.981016][T15253] veth1_vlan: entered promiscuous mode
[  234.003843][T15253] veth0_macvtap: entered promiscuous mode
[  234.008938][T15253] veth1_macvtap: entered promiscuous mode
[  234.041976][T15253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.054290][T15253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.060022][T15253] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.062623][T15253] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.065201][T15253] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.068932][T15253] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.135488][ T7198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.137917][ T7198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.158230][ T7198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.162168][ T7198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.423054][T15374] x_tables: unsorted underflow at hook 4
[  234.550372][ T5834] Bluetooth: hci7: command tx timeout
[  234.678181][T15386] netlink: 'syz.7.2891': attribute type 2 has an invalid length.
[  234.696123][T15388] netlink: 'syz.6.2892': attribute type 15 has an invalid length.
[  234.763079][T15393] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  234.766262][ T5724] bond0: (slave bond_slave_0): interface is now down
[  234.775880][ T5724] bond0: (slave bond_slave_1): interface is now down
[  234.788404][ T5724] bond0: (slave wlan1): interface is now down
[  234.798889][ T5724] bond0: now running without any active interface!
[  234.882622][T15400] netlink: 'syz.7.2897': attribute type 1 has an invalid length.
[  234.912250][T15403] pim6reg0: tun_chr_ioctl cmd 1074025673
[  234.914145][T15402] pim6reg0: tun_chr_ioctl cmd 1074025694
[  234.988517][T15409] siw: device registration error -23
[  235.107532][T15419] tipc: Started in network mode
[  235.110506][T15419] tipc: Node identity aeba402140eb, cluster identity 4711
[  235.117695][T15419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.119699][T15417] wg1 speed is unknown, defaulting to 1000
[  235.134670][T15419] syzkaller0: entered promiscuous mode
[  235.136344][T15419] syzkaller0: entered allmulticast mode
[  235.193639][T15414] tipc: Resetting bearer <eth:syzkaller0>
[  235.213992][T15414] tipc: Disabling bearer <eth:syzkaller0>
[  235.707581][T15469] netlink: 'syz.6.2916': attribute type 1 has an invalid length.
[  236.026556][T15489] Cannot find add_set index 0 as target
[  236.057599][T15493] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.064738][T15492] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode
[  236.067012][T15492] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode
[  236.069544][T15492] tipc: Resetting bearer <eth:syzkaller0>
[  236.084376][T15492] tipc: Resetting bearer <eth:syzkaller0>
[  236.472330][T15510] netlink: 'syz.4.2932': attribute type 1 has an invalid length.
[  236.506821][T15510] 8021q: adding VLAN 0 to HW filter on device bond10
[  236.526918][T15510] vxcan3: entered promiscuous mode
[  236.533970][T15510] 8021q: adding VLAN 0 to HW filter on device bond10
[  236.539354][T15510] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  236.545955][T15510] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  236.549340][T15513] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  236.549667][  T788] IPVS: starting estimator thread 0...
[  236.620401][ T5834] Bluetooth: hci7: command tx timeout
[  236.650250][T15515] IPVS: using max 61 ests per chain, 146400 per kthread
[  236.681764][T15527] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  236.694181][T15527] __nla_validate_parse: 78 callbacks suppressed
[  236.694195][T15527] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2936'.
[  236.700119][T15527] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  236.720425][T15529] netlink: 'syz.4.2937': attribute type 21 has an invalid length.
[  236.723019][T15529] IPv6: NLM_F_CREATE should be specified when creating new route
[  236.775312][T15535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.777946][T15535] syzkaller0: entered promiscuous mode
[  236.781666][ T5834] Bluetooth: hci4: command 0x0406 tx timeout
[  236.784537][T15535] syzkaller0: entered allmulticast mode
[  236.799206][T15538] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2941'.
[  236.803134][T15538] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2941'.
[  236.804220][T15535] tipc: Resetting bearer <eth:syzkaller0>
[  236.809137][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2939'.
[  236.813218][T15533] tipc: Resetting bearer <eth:syzkaller0>
[  236.826807][T15533] tipc: Disabling bearer <eth:syzkaller0>
[  236.926547][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'.
[  237.145461][T15566] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2951'.
[  237.193063][T15571] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2951'.
[  237.357728][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2956'.
[  237.383856][T15587] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  237.444455][T15593] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2958'.
[  237.521383][T15600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2960'.
[  237.528625][T15601] netlink: 'syz.7.2959': attribute type 2 has an invalid length.
[  237.531347][T15601] netlink: 'syz.7.2959': attribute type 1 has an invalid length.
[  237.641145][T15609] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.662473][T15610] wg1 speed is unknown, defaulting to 1000
[  237.710463][T15609] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.773671][T15609] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.829429][T15609] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.018409][T15609] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.027952][T15609] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.036953][T15609] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.061743][T15609] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.253666][T15630] pim6reg1: entered allmulticast mode
[  238.388916][T15636] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  238.464819][T15647] netlink: 'syz.7.2975': attribute type 1 has an invalid length.
[  238.508751][T15647] veth3: entered promiscuous mode
[  238.555794][T15648] erspan0: entered allmulticast mode
[  238.700215][ T5835] Bluetooth: hci7: command tx timeout
[  238.808864][T15660] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.811451][T15660] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.881418][T15660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.887799][T15660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.935502][T15660] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.938218][T15660] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.941951][T15660] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.944581][T15660] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.168921][T15673] xt_l2tp: unknown flags: 10
[  239.286581][T15681] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  240.561465][T15706] Cannot find add_set index 3 as target
[  240.567919][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.570778][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.576134][T15706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.790302][ T5835] Bluetooth: hci7: command tx timeout
[  241.132297][  T788] hid-generic 0005:16C0:5505.0001: collection stack underflow
[  241.134681][  T788] hid-generic 0005:16C0:5505.0001: item 0 1 0 12 parsing failed
[  241.137286][  T788] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22
[  241.585188][T15759] Cannot find set identified by id 1 to match
[  241.665186][T15763] netlink: zone id is out of range
[  241.666752][T15763] netlink: zone id is out of range
[  241.668549][T15763] netlink: zone id is out of range
[  241.670758][T15763] netlink: zone id is out of range
[  241.672328][T15763] netlink: zone id is out of range
[  241.673837][T15763] netlink: zone id is out of range
[  241.678038][T15763] netlink: zone id is out of range
[  241.679673][T15763] netlink: zone id is out of range
[  241.683614][T15763] netlink: zone id is out of range
[  241.686309][T15763] netlink: zone id is out of range
[  241.720651][T15768] tun0: tun_chr_ioctl cmd 2147767507
[  241.797511][T15771] x_tables: ip6_tables: ipcomp match: only valid for protocol 108
[  241.829490][T15773] netlink: 'syz.4.3018': attribute type 8 has an invalid length.
[  242.258612][T15809] __nla_validate_parse: 9 callbacks suppressed
[  242.258623][T15809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3029'.
[  242.264726][T15809] syzkaller0: refused to change device tx_queue_len
[  242.374272][T15813] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3031'.
[  242.656602][T15829] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode
[  242.659203][T15829] tipc: Resetting bearer <eth:syzkaller0>
[  242.761886][T15848] netlink: 14568 bytes leftover after parsing attributes in process `syz.7.3039'.
[  242.766957][T15846] netlink: 'syz.7.3039': attribute type 23 has an invalid length.
[  242.816516][T15852] netlink: 'syz.7.3043': attribute type 9 has an invalid length.
[  242.818974][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3043'.
[  242.827435][T15852] macvlan2: entered promiscuous mode
[  242.829143][T15852] hsr0: entered promiscuous mode
[  242.835210][T15852] macvlan2: entered allmulticast mode
[  242.836911][T15852] hsr0: entered allmulticast mode
[  242.838464][T15852] hsr_slave_0: entered allmulticast mode
[  242.842369][T15852] hsr_slave_1: entered allmulticast mode
[  242.935610][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3044'.
[  242.945733][T15861] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3044'.
[  243.016063][T15863] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3045'.
[  243.018863][T15863] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3045'.
[  243.026391][T15863] Cannot find add_set index 0 as target
[  243.105834][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3047'.
[  243.745397][T15887] wg1 speed is unknown, defaulting to 1000
[  243.892400][T15887] netlink: 'syz.7.3052': attribute type 2 has an invalid length.
[  244.197862][T15911] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  244.233398][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3061'.
[  244.249167][T15915] veth0: entered promiscuous mode
[  244.256160][T15914] veth0: left promiscuous mode
[  244.362626][T15931] netlink: 'syz.4.3066': attribute type 10 has an invalid length.
[  244.437720][T15939] xt_TCPMSS: Only works on TCP SYN packets
[  244.514813][T15946] tc_dump_action: action bad kind
[  244.574663][T15953] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  244.733396][T15963] wg1 speed is unknown, defaulting to 1000
[  244.871738][T15977] netlink: 'syz.6.3082': attribute type 18 has an invalid length.
[  244.884379][T15979] 8021q: VLANs not supported on vxcan1
[  245.045603][T15993] x_tables: duplicate underflow at hook 2
[  245.114769][T15997] 8021q: adding VLAN 0 to HW filter on device bond11
[  245.186061][T16007] tipc: Enabled bearer <udp:syz0>, priority 10
[  245.201503][T16007] vlan1: entered allmulticast mode
[  245.204448][T16007] bridge_slave_0: entered allmulticast mode
[  245.213569][T16005] netlink: 'syz.4.3093': attribute type 4 has an invalid length.
[  245.616791][T16051] 8021q: VLANs not supported on vxcan0
[  245.763048][T16053] veth0_macvtap: left promiscuous mode
[  245.836864][T16069] netlink: 'syz.7.3111': attribute type 3 has an invalid length.
[  245.947939][T16082] batman_adv: batadv0: Adding interface: dummy0
[  245.955776][T16082] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem.
[  245.965646][T16082] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  246.038989][T16092] netlink: 'syz.6.3117': attribute type 13 has an invalid length.
[  246.681451][T16118] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  247.062573][T16151] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  247.121702][T16155] netlink: 'syz.7.3139': attribute type 1 has an invalid length.
[  247.124150][T16155] netlink: 'syz.7.3139': attribute type 2 has an invalid length.
[  247.126534][T16155] netlink: 'syz.7.3139': attribute type 8 has an invalid length.
[  247.689818][T16183] __nla_validate_parse: 15 callbacks suppressed
[  247.689844][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3147'.
[  247.696146][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3147'.
[  247.698888][T16183] netlink: 'syz.7.3147': attribute type 18 has an invalid length.
[  247.706629][T16183] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3147'.
[  247.898978][T16195] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3152'.
[  247.903790][T16195] netlink: 'syz.4.3152': attribute type 21 has an invalid length.
[  247.906646][T16195] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3152'.
[  247.909945][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'.
[  248.046379][T16203] xt_hashlimit: size too large, truncated to 1048576
[  248.317930][T16227] xt_l2tp: wrong L2TP version: 0
[  249.009826][T16273] syzkaller1: entered promiscuous mode
[  249.011927][T16273] syzkaller1: entered allmulticast mode
[  249.095688][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3179'.
[  249.099798][T16278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3179'.
[  249.149286][T16282] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3180'.
[  249.382127][T16298] netlink: 'syz.4.3183': attribute type 15 has an invalid length.
[  249.384622][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3183'.
[  250.508188][T16349] xt_CT: You must specify a L4 protocol and not use inversions on it
[  250.529693][T16347] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) !
[  250.689572][T16363] gtp2: entered promiscuous mode
[  250.698344][T16363] netlink: 'syz.4.3202': attribute type 11 has an invalid length.
[  251.033167][T16393] bridge0: port 3(syz_tun) entered blocking state
[  251.041961][T16393] bridge0: port 3(syz_tun) entered disabled state
[  251.047388][T16393] syz_tun: entered allmulticast mode
[  251.052155][T16393] syz_tun: entered promiscuous mode
[  251.187216][T16403] xt_CT: You must specify a L4 protocol and not use inversions on it
[  251.324641][T16418] vlan1: entered promiscuous mode
[  251.328626][T16418] veth0_to_bridge: entered promiscuous mode
[  251.364493][T16420] bridge0: port 4(macvlan3) entered blocking state
[  251.366604][T16420] bridge0: port 4(macvlan3) entered disabled state
[  251.369088][T16420] macvlan3: entered allmulticast mode
[  251.373583][T16420] bridge0: entered allmulticast mode
[  251.377289][T16420] macvlan3: left allmulticast mode
[  251.379302][T16420] bridge0: left allmulticast mode
[  251.637609][T16450] netlink: 'syz.7.3231': attribute type 3 has an invalid length.
[  251.744811][T16462] netlink: 'syz.6.3235': attribute type 10 has an invalid length.
[  251.895508][T16474] xt_time: unknown flags 0x4
[  252.387038][T16502] wg1 speed is unknown, defaulting to 1000
[  252.796716][T16519] netlink: 'syz.7.3256': attribute type 11 has an invalid length.
[  252.836920][T16523] IPVS: Error connecting to the multicast addr
[  252.949759][T16530] __nla_validate_parse: 19 callbacks suppressed
[  252.949770][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'.
[  253.005051][T16537] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3261'.
[  253.025227][T16521] netlink: 'syz.6.3257': attribute type 4 has an invalid length.
[  253.136625][T16558] netlink: 'syz.7.3265': attribute type 11 has an invalid length.
[  253.210511][T16565] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3268'.
[  253.247873][T16568] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3264'.
[  253.323075][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3273'.
[  253.326192][T16577] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3273'.
[  253.332746][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3273'.
[  253.335609][T16577] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3273'.
[  253.396659][T16584] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3275'.
[  253.578491][T16601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3280'.
[  253.698474][T16616] netlink: 'syz.4.3283': attribute type 11 has an invalid length.
[  253.773283][T16621] bridge_slave_1: entered promiscuous mode
[  253.775451][T16621] bridge_slave_1: entered allmulticast mode
[  253.905348][   T34] INFO: task syz.1.723:8377 blocked for more than 143 seconds.
[  253.908214][   T34]       Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  253.914812][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  253.917303][   T34] task:syz.1.723       state:D stack:25352 pid:8377  tgid:8376  ppid:5836   task_flags:0x400140 flags:0x00004004
[  253.930021][   T34] Call Trace:
[  253.931104][   T34]  <TASK>
[  253.932028][   T34]  __schedule+0x16f5/0x4d00
[  253.949983][   T34]  ? __lock_acquire+0xab9/0xd20
[  253.959704][   T34]  ? schedule+0x165/0x360
[  253.973141][   T34]  ? __pfx___schedule+0x10/0x10
[  253.974712][   T34]  ? schedule+0x91/0x360
[  253.975961][   T34]  schedule+0x165/0x360
[  253.977193][   T34]  schedule_preempt_disabled+0x13/0x30
[  253.978851][   T34]  __mutex_lock+0x724/0xe80
[  253.982537][   T34]  ? __mutex_lock+0x51b/0xe80
[  253.984026][   T34]  ? nfsd_nl_listener_set_doit+0x12a/0x1650
[  253.998917][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  254.004716][   T34]  ? __asan_memset+0x22/0x50
[  254.006121][   T34]  ? ____sys_sendmsg+0x505/0x830
[  254.007586][   T34]  ? ___sys_sendmsg+0x21f/0x2a0
[  254.009100][   T34]  ? __x64_sys_sendmsg+0x19b/0x260
[  254.015064][   T34]  nfsd_nl_listener_set_doit+0x12a/0x1650
[  254.016846][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  254.018583][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  254.024780][   T34]  ? __nla_parse+0x40/0x60
[  254.026236][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  254.028128][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  254.029781][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  254.031944][   T34]  ? bpf_lsm_capable+0x9/0x20
[  254.033361][   T34]  ? security_capable+0x7e/0x2e0
[  254.034885][   T34]  genl_rcv_msg+0x60e/0x790
[  254.036242][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  254.037742][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  254.039573][   T34]  netlink_rcv_skb+0x208/0x470
[  254.044657][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  254.046197][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  254.047775][   T34]  ? down_read+0x1ad/0x2e0
[  254.049112][   T34]  genl_rcv+0x28/0x40
[  254.050612][   T34]  netlink_unicast+0x75c/0x8e0
[  254.052063][   T34]  netlink_sendmsg+0x805/0xb30
[  254.053466][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.055073][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  254.056505][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  254.058074][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.059664][   T34]  __sock_sendmsg+0x21c/0x270
[  254.067895][   T34]  ____sys_sendmsg+0x505/0x830
[  254.069398][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.071089][   T34]  ? import_iovec+0x74/0xa0
[  254.072495][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  254.073934][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.075476][   T34]  ? __fget_files+0x2a/0x420
[  254.076867][   T34]  ? __fget_files+0x3a0/0x420
[  254.078225][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  254.079662][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.082680][   T34]  ? do_syscall_64+0xbe/0x3b0
[  254.084245][   T34]  do_syscall_64+0xfa/0x3b0
[  254.085732][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.087408][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.089324][   T34]  ? exc_page_fault+0x9f/0xf0
[  254.090983][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.092820][   T34] RIP: 0033:0x7fec1fd8e9a9
[  254.094327][   T34] RSP: 002b:00007fec20c2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.096874][   T34] RAX: ffffffffffffffda RBX: 00007fec1ffb5fa0 RCX: 00007fec1fd8e9a9
[  254.099293][   T34] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e
[  254.101841][   T34] RBP: 00007fec1fe10d69 R08: 0000000000000000 R09: 0000000000000000
[  254.104190][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.106561][   T34] R13: 0000000000000000 R14: 00007fec1ffb5fa0 R15: 00007ffd90d7e308
[  254.108936][   T34]  </TASK>
[  254.110147][   T34] 
[  254.110147][   T34] Showing all locks held in the system:
[  254.112531][   T34] 1 lock held by khungtaskd/34:
[  254.113997][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  254.116987][   T34] 2 locks held by getty/5658:
[  254.118398][   T34]  #0: ffff88801cb990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  254.121459][   T34]  #1: ffffc900029132f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  254.124708][   T34] 3 locks held by kworker/0:3/5866:
[  254.126244][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  254.129488][   T34]  #1: ffffc9000400fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  254.132710][   T34]  #2: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  254.136022][   T34] 2 locks held by syz.0.653/8094:
[  254.137499][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  254.151444][   T34]  #1: ffffffff8e41ba48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  254.154631][   T34] 2 locks held by syz.1.723/8377:
[  254.156119][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  254.158594][   T34]  #1: ffffffff8e41ba48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  254.161836][   T34] 2 locks held by syz.3.888/8892:
[  254.163356][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  254.165830][   T34]  #1: ffffffff8e41ba48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  254.168910][   T34] 2 locks held by syz.2.2155/13014:
[  254.170810][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  254.173281][   T34]  #1: ffffffff8e41ba48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  254.176371][   T34] 1 lock held by syz-executor/13661:
[  254.178015][   T34]  #0: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  254.181346][   T34] 2 locks held by syz.5.2603/14508:
[  254.182908][   T34]  #0: ffffffff8f581e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  254.185476][   T34]  #1: ffffffff8e41ba48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650
[  254.188669][   T34] 
[  254.189454][   T34] =============================================
[  254.189454][   T34] 
[  254.210014][   T34] NMI backtrace for cpu 1
[  254.210032][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  254.210043][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.210049][   T34] Call Trace:
[  254.210054][   T34]  <TASK>
[  254.210059][   T34]  dump_stack_lvl+0x189/0x250
[  254.210076][   T34]  ? __wake_up_klogd+0xd9/0x110
[  254.210090][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.210100][   T34]  ? __pfx__printk+0x10/0x10
[  254.210117][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  254.210133][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  254.210143][   T34]  ? _printk+0xcf/0x120
[  254.210155][   T34]  ? __pfx__printk+0x10/0x10
[  254.210167][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  254.210177][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  254.210190][   T34]  watchdog+0xfee/0x1030
[  254.210199][   T34]  ? watchdog+0x1de/0x1030
[  254.210210][   T34]  kthread+0x711/0x8a0
[  254.210225][   T34]  ? __pfx_watchdog+0x10/0x10
[  254.210232][   T34]  ? __pfx_kthread+0x10/0x10
[  254.210244][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.210258][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.210266][   T34]  ? __pfx_kthread+0x10/0x10
[  254.210278][   T34]  ret_from_fork+0x3fc/0x770
[  254.210289][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  254.210300][   T34]  ? __switch_to_asm+0x39/0x70
[  254.210310][   T34]  ? __switch_to_asm+0x33/0x70
[  254.210320][   T34]  ? __pfx_kthread+0x10/0x10
[  254.210331][   T34]  ret_from_fork_asm+0x1a/0x30
[  254.210348][   T34]  </TASK>
[  254.210352][   T34] Sending NMI from CPU 1 to CPUs 0:
[  254.258520][    C0] NMI backtrace for cpu 0
[  254.258535][    C0] CPU: 0 UID: 0 PID: 5866 Comm: kworker/0:3 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  254.258547][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.258553][    C0] Workqueue: events drain_vmap_area_work
[  254.258568][    C0] RIP: 0010:debug_check_no_obj_freed+0x23e/0x470
[  254.258584][    C0] Code: 44 24 18 4d 8d 67 18 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 26 b8 5b fd 49 8b 2c 24 <48> 3b 6c 24 50 0f 92 c0 49 39 ed 0f 96 c1 08 c1 75 8c 4d 8d 67 10
[  254.258591][    C0] RSP: 0018:ffffc9000400f5c8 EFLAGS: 00000046
[  254.258620][    C0] RAX: 1ffff110044489a0 RBX: 0000000000000003 RCX: dffffc0000000000
[  254.258626][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc9000400f4a0
[  254.258631][    C0] RBP: ffff888022682168 R08: 0000000000000003 R09: 0000000000000004
[  254.258636][    C0] R10: dffffc0000000000 R11: fffff52000801e94 R12: ffff888022244d00
[  254.258641][    C0] R13: ffff8881247de000 R14: 1ffff1100444899d R15: ffff888022244ce8
[  254.258647][    C0] FS:  0000000000000000(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[  254.258653][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  254.258658][    C0] CR2: 00005652ec6eb5c8 CR3: 000000010d390000 CR4: 00000000000006f0
[  254.258681][    C0] Call Trace:
[  254.258686][    C0]  <TASK>
[  254.258693][    C0]  ? __page_table_check_zero+0xba/0x530
[  254.258708][    C0]  __free_frozen_pages+0x509/0xe70
[  254.258722][    C0]  kasan_depopulate_vmalloc_pte+0x74/0xa0
[  254.258732][    C0]  __apply_to_page_range+0xb92/0x1380
[  254.258745][    C0]  ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10
[  254.258756][    C0]  ? __pfx___apply_to_page_range+0x10/0x10
[  254.258767][    C0]  kasan_release_vmalloc+0xa2/0xd0
[  254.258776][    C0]  purge_vmap_node+0x214/0x8f0
[  254.258787][    C0]  ? __pfx_purge_vmap_node+0x10/0x10
[  254.258795][    C0]  ? flush_tlb_kernel_range+0x37c/0x470
[  254.258808][    C0]  __purge_vmap_area_lazy+0x7a4/0xb40
[  254.258817][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  254.258826][    C0]  drain_vmap_area_work+0x27/0x40
[  254.258833][    C0]  process_scheduled_works+0xae1/0x17b0
[  254.258853][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  254.258865][    C0]  worker_thread+0x8a0/0xda0
[  254.258880][    C0]  kthread+0x711/0x8a0
[  254.258893][    C0]  ? __pfx_worker_thread+0x10/0x10
[  254.258901][    C0]  ? __pfx_kthread+0x10/0x10
[  254.258912][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.258926][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.258935][    C0]  ? __pfx_kthread+0x10/0x10
[  254.258945][    C0]  ret_from_fork+0x3fc/0x770
[  254.258955][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  254.258963][    C0]  ? __switch_to_asm+0x39/0x70
[  254.258975][    C0]  ? __switch_to_asm+0x33/0x70
[  254.258984][    C0]  ? __pfx_kthread+0x10/0x10
[  254.258994][    C0]  ret_from_fork_asm+0x1a/0x30
[  254.259007][    C0]  </TASK>
[  254.360087][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  254.362104][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  254.365535][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.368450][   T34] Call Trace:
[  254.369443][   T34]  <TASK>
[  254.370368][   T34]  dump_stack_lvl+0x99/0x250
[  254.371773][   T34]  ? __asan_memcpy+0x40/0x70
[  254.373201][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.374740][   T34]  ? __pfx__printk+0x10/0x10
[  254.376124][   T34]  panic+0x2db/0x790
[  254.377334][   T34]  ? __pfx_panic+0x10/0x10
[  254.378662][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  254.380369][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  254.381978][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  254.383778][   T34]  watchdog+0x102d/0x1030
[  254.385096][   T34]  ? watchdog+0x1de/0x1030
[  254.386460][   T34]  kthread+0x711/0x8a0
[  254.387669][   T34]  ? __pfx_watchdog+0x10/0x10
[  254.389034][   T34]  ? __pfx_kthread+0x10/0x10
[  254.390402][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.391947][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.393488][   T34]  ? __pfx_kthread+0x10/0x10
[  254.394924][   T34]  ret_from_fork+0x3fc/0x770
[  254.396303][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  254.397823][   T34]  ? __switch_to_asm+0x39/0x70
[  254.399255][   T34]  ? __switch_to_asm+0x33/0x70
[  254.400692][   T34]  ? __pfx_kthread+0x10/0x10
[  254.402044][   T34]  ret_from_fork_asm+0x1a/0x30
[  254.403501][   T34]  </TASK>
[  254.405036][   T34] Kernel Offset: disabled
[  254.406366][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:46:34  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11008053903 RBX=1ffff9200088af40 RCX=ffff888100e9d640 RDX=0000000000000100
RSI=ffffffff8be28c20 RDI=ffffffff8be28be0 RBP=dffffc0000000000 RSP=ffffc90000007c58
R8 =ffffffff8fa1d5f7 R9 =1ffffffff1f43abe R10=dffffc0000000000 R11=fffffbfff1f43abf
R12=ffffc90000007d60 R13=ffffc90004457a08 R14=1ffff9200088af41 R15=ffff88804029c818
RIP=ffffffff81ae2814 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2382b74a00 CR3=000000012d29e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffff00000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f23838ed100 00007f2382d86440 XMM05=00007f2382d86458 00007f2382d864a0
XMM06=00007f2382d86498 00007f2382d86490 XMM07=00007f2382d86488 00007f2382d86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2382c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=fffffffffffffffd RCX=ffffffff82140f3b RDX=0000000000000001
RSI=0000000000000080 RDI=ffffc90007df7660 RBP=0000000000000000 RSP=ffffc90007df7588
R8 =ffffc90007df76df R9 =1ffff92000fbeedb R10=dffffc0000000000 R11=fffff52000fbeed9
R12=0000000000000010 R13=ffffc90007df7a10 R14=fffff52000fbeedc R15=1ffff92000fbeecc
RIP=ffffffff8222285b RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f919d2933b0 CR3=000000012d2de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffff0000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
