last executing test programs:

2m33.264278262s ago: executing program 2 (id=1484):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000040)={0x3a}, 0x8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000003c0)='@', 0x34000}], 0x1)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x3c, 0x0, 0x801, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "521e04b77a"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x44000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_IFNAME={0x14}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r8, 0x0, 0x1}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000011c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf253000000008000300", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x4805}, 0x24040000)

2m17.540845761s ago: executing program 32 (id=1484):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000040)={0x3a}, 0x8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000003c0)='@', 0x34000}], 0x1)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x3c, 0x0, 0x801, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "521e04b77a"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x44000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_IFNAME={0x14}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r8, 0x0, 0x1}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000011c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf253000000008000300", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x4805}, 0x24040000)

2m16.442617214s ago: executing program 33 (id=1528):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x94)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1m50.086748226s ago: executing program 34 (id=1792):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
unshare(0x22020600)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="03000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x60, &(0x7f0000001400)}, 0xf)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r3, 0x0, 0x1}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004)
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000019c0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/170, 0xaa}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000640)=""/11, 0xb}], 0x8}, 0x100)
r5 = socket$inet(0x2, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)
r6 = socket$unix(0x1, 0x1, 0x0)
accept$unix(r6, &(0x7f0000000500), &(0x7f0000000580)=0x6e)

1m39.81466648s ago: executing program 35 (id=1930):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x38, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008881}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x7f}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x7f}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
r5 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r6}, &(0x7f00000001c0), &(0x7f0000000400)='%pI4   \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r6}, &(0x7f00000001c0), &(0x7f0000000400)='%pI4   \x00'}, 0x20)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1m19.594342823s ago: executing program 36 (id=2103):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7f}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}]}, @NFT_MSG_DELRULE={0x104, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0xe8, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xc}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x97}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6b0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc5e7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x218}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001500190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1m15.146576159s ago: executing program 6 (id=2430):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a0002"], 0x394}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r2, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10)
sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x12, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000ff7f000000000000fbff000085100000f9ffffff9876040008000000851000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000001000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000e77b328d9ca9766f8a0400000034330000850000008600000070560c00100001e1ffff94000000000012"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000640)=""/212, 0x41100, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0xffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0xf, 0x1}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0x7}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340", @ANYRES32], 0xc0}}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12)
sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e22, 0x9, @empty, 0x6}}, 0x0, 0x0, 0x2a, 0x0, "955b94b19a44f02aa23c6a4a3c6ec11144bdee5d5ac0d8cb63051a062ed1c96567b1db8c7c21607784474bf11312bf3fcd5722a45429b214a097963a1a5644d190193a1ceb23ed9bb6d25ad252bd381d"}, 0xd8)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
sendto$inet6(r10, &(0x7f0000001040)="a4", 0x1, 0x2000c851, &(0x7f0000001080)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000004c0)=r8, 0x4)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffe22, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000000f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

1m15.055550562s ago: executing program 6 (id=2431):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x54, r6, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r5, 0x852dd6c070cd7e4d, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x50}, 0x4, 0x700000000000000}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x4)

1m15.054333085s ago: executing program 6 (id=2432):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a010400000000000000000a0000050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580090001006d657461000000000c00028008000140000000090800034000000000080002400000008408000140000000000900020073797a32000000000900010073797a31000000001d0007"], 0xd4}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a0000000ffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008"], 0x124}}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)

1m14.996243788s ago: executing program 6 (id=2434):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xe8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}, 0x1, 0x0, 0x0, 0x4094}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xe8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}, 0x1, 0x0, 0x0, 0x4094}, 0x0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000be3c2fcfaef54f6e3fdf0f22527300", @ANYRES16=r1, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000bf6dbe4d6168000000000000000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250f0000001c0007800c00040007000000000000000c0003000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000bf6dbe4d6168000000000000000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250f0000001c0007800c00040007000000000000000c0003000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
pipe(&(0x7f0000000580)) (async)
pipe(&(0x7f0000000580)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000440)=[{&(0x7f0000000600)="3b256c0600ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x2)
r8 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async)
setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r6, 0x0, r8, 0x0, 0x8000, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff0000}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x40010)

1m14.947663394s ago: executing program 6 (id=2436):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c0800034000000000080002400000000d080001400000000808000240000000090800014000000009080002400000001808000140000000a4"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r0, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000442f00fe80000000000001000000000000001100000000000000000000ffff000000002421880b0000000000000057000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008006558000000003e74ddc300b10e9caa3495878f7a0d4b43cc1bedf5e165c2405374f26ede9e6df85f07d150ac5e53fae10257711b7e3294719fad7116bdf43aa305d3cece5db6bb51ef83e7ad9e5962b0968a5cb4ee74ff9534f0d913184e81a3579e26119c"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4f, &(0x7f0000000380)={&(0x7f00000000c0)={0x44, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000)

1m14.944028454s ago: executing program 6 (id=2438):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = accept(r1, &(0x7f00000000c0)=@sco={0x1f, @fixed}, &(0x7f0000000140)=0x80) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={<r3=>0x0, 0x5d, "5113e9e509e3b348944ef39e7c352881418ff314d27479851f5760618e80cd042fa0cca764162025fc3cc359624641a19cfcaf3026012062108af09f882bc2fd9870a49518310fb9d49af5df6eccb5bc994f073e8e4a1f910cc55c8bb4"}, &(0x7f0000000240)=0x65)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e22, 0xc2, @private1, 0x101}}, 0xd, 0x4a13, 0xb10d, 0x1, 0x7, 0x9, 0x5}, 0x9c) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1m10.116558368s ago: executing program 0 (id=2539):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001dc0), r0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0)
recvmmsg(r4, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="10002dbd7000fcdbdf256300000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x40010)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012cbd7000fcdbdf250300000008000b00", @ANYRES32=0x0, @ANYBLOB="050002000a0000001400070000000000000000000000000000000008060001004e"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x48020)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000001c0)={0x2a03, 0x8, 0x9, 0xaba}, 0x10)

1m10.116099449s ago: executing program 0 (id=2540):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0)
recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000004c0)=""/15, 0xf}], 0x1, 0x0, 0x0, 0x10000000}, 0x8}], 0x1, 0x2000, 0x0)

1m10.056470203s ago: executing program 0 (id=2541):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x3e, 0x107, 0xfffdfffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x12a}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x3e, 0x107, 0xfffdfffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x12a}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000) (async)

1m10.056018943s ago: executing program 0 (id=2542):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async)
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0)
r11 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x2, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

1m9.977138413s ago: executing program 0 (id=2543):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2b6e65745f57dc3632636c73202d7069647320"], 0xf)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8000000}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r6, 0x6}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r9 = socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r9}, 0x20)
close(r8)
close(r9)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084)
r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r11, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x400})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

1m9.827534275s ago: executing program 0 (id=2544):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x5}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340", @ANYRES32], 0xc0}}, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)

1m7.27144006s ago: executing program 7 (id=2556):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="2800d80300000000bbdccf41473361d8e91652340b9bbd34d5d19ab9345c69a0dd3f4e8a7be1d557a10cf029a7692fc68ec1b9b5a3c834c9c2965b4025fe0f16b6b467c37c4892e687207d257629bb9625a1e20043172c30725c001a95dbfa4056acdd01aef0619303d8f89228a5658916b93ff6b184e38382d6f05605da", @ANYRES16=r0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4}], 0x1, 0x40800)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r5=>0x0})
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x48, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x48}}, 0x4)

1m7.197628094s ago: executing program 7 (id=2557):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x4}}, 0x1c}}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1m7.197209222s ago: executing program 7 (id=2558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c00018006000600800a00000c00028006000a"], 0x30}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000)

1m7.146773431s ago: executing program 7 (id=2559):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001340)={0x8, 0x3, {0x3ff, @usage=0xf65, 0x0, 0x3, 0xe, 0x40, 0x2, 0x7, 0x40, @struct={0x1, 0x9}, 0x3, 0x101, [0x8, 0x4, 0x5, 0x8, 0xff, 0x2]}, {0x9, @usage=0x3, 0x0, 0x6, 0x395, 0x6, 0xf7, 0x2, 0x0, @struct={0x800, 0x8}, 0xffff0800, 0x8, [0x7ff, 0x7fffffff, 0x1, 0x7fffffffffffffff, 0x1, 0x4]}, {0x6, @usage=0x1, 0x0, 0x39, 0x80000000, 0x3, 0x10001, 0x5, 0x0, @struct={0x2, 0xd}, 0x2, 0x2, [0x7fffffff, 0x0, 0x100000001, 0x1, 0x2, 0x2]}, {0x394, 0xfffffffffffffbb0, 0x5}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="020000000000010000003f000000080003000000000053ee5482f552c9020922f0487044581a7a0e042a007adc9bfd9c3808489d26520b1dac722c2213ba73efdfd8a28b88d671764bad7d4c22abe9a8702adc761fa0af48999f625dd5585cec0f6b5ca1b004bd4c166c5115b03fd0f82a2b3ea383f8ccc21f2230d8ddf31a3cde9914dddd5b180d"], 0x1c}}, 0x40845)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
socket(0x10, 0x80003, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400)
socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01760ee3eceeca7be38273583f640e0001006e657464657673696d0000000ff36615bdb31637a504d9177cf39dfd00a46aae7797c8d94ffd5595cffcf01613ede74e75c5562e13af0c8330c1f30af1de222612c8be14bae42b3790fed65c3c2b52ff3338479898c6858d542278f137b65d2874db7293061efe95a8ac713a42851eeb0e8bda9379e2a50a0b2128bdc033dae6ccc63b3352ff4352585e0f383ae6019efd7e"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000340)=0x4)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={<r9=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000840)={r9, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c)

1m6.321751876s ago: executing program 7 (id=2560):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async)
connect$inet(r8, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) (async)
sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x800)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0x16, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054) (async)
r10 = socket$pptp(0x18, 0x1, 0x2)
recvmsg(r10, &(0x7f0000002540)={&(0x7f0000000040)=@ll, 0x80, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/219, 0xdb}, {&(0x7f0000002580)=""/4107, 0x100b}, {&(0x7f00000023c0)=""/238, 0xee}, {&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000100)=""/57, 0x39}], 0x10000000000001e3, &(0x7f00000024c0)=""/95, 0x5f}, 0x40010140) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001900010025bdf000fbcbdf250a801400ff01fe040036000008001f00"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x240408d4) (async)
r13 = socket$rds(0x15, 0x5, 0x0)
getsockopt$sock_int(r13, 0x1, 0x10, 0x0, &(0x7f0000000040)) (async)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

1m6.237302118s ago: executing program 7 (id=2561):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000f5ffffff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000f5ffffff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
writev(r1, &(0x7f0000004d40)=[{&(0x7f00000039c0)}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet(0x2, 0x2, 0x0) (async)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000280), &(0x7f0000000100)=@udp6=r4, 0x1}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x18}, 0xc) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x18}, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'ip6gretap0\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r0, 0x0, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000001400010000000000cb609ae97fecaeff"], 0x14}], 0x1}, 0x0) (async)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000001400010000000000cb609ae97fecaeff"], 0x14}], 0x1}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r11, 0x0, 0x1}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r12=>0x0})
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x40, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r13 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r14=>0x0})
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, r14}, 0x10)
bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1}, 0x60)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf25020000004000018008000700", @ANYRES32=r12, @ANYBLOB="060005004e200000050002000900000008000700", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="14000400fe8000000000000000000000000000aa050005004600000008000200050000004800068008000700", @ANYRES32=r12, @ANYBLOB="060009004e230000060001000a00fbff0800d2e6b0a700", @ANYRES32=0x0, @ANYBLOB="14000400fe80000000000000000000000000003b080006000900000008000700", @ANYRES32=r12, @ANYBLOB="0800020004000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={r12, @multicast2, @multicast2}, 0xfffffffffffffcd0)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) (async)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)

59.216981876s ago: executing program 37 (id=2438):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = accept(r1, &(0x7f00000000c0)=@sco={0x1f, @fixed}, &(0x7f0000000140)=0x80) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={<r3=>0x0, 0x5d, "5113e9e509e3b348944ef39e7c352881418ff314d27479851f5760618e80cd042fa0cca764162025fc3cc359624641a19cfcaf3026012062108af09f882bc2fd9870a49518310fb9d49af5df6eccb5bc994f073e8e4a1f910cc55c8bb4"}, &(0x7f0000000240)=0x65)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e22, 0xc2, @private1, 0x101}}, 0xd, 0x4a13, 0xb10d, 0x1, 0x7, 0x9, 0x5}, 0x9c) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

54.388537358s ago: executing program 38 (id=2544):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x5}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340", @ANYRES32], 0xc0}}, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)

51.257331157s ago: executing program 39 (id=2561):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000f5ffffff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000f5ffffff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
writev(r1, &(0x7f0000004d40)=[{&(0x7f00000039c0)}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet(0x2, 0x2, 0x0) (async)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000280), &(0x7f0000000100)=@udp6=r4, 0x1}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x18}, 0xc) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x18}, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'ip6gretap0\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r0, 0x0, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000001400010000000000cb609ae97fecaeff"], 0x14}], 0x1}, 0x0) (async)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000001400010000000000cb609ae97fecaeff"], 0x14}], 0x1}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r11, 0x0, 0x1}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r12=>0x0})
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x40, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r13 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r14=>0x0})
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, r14}, 0x10)
bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1}, 0x60)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf25020000004000018008000700", @ANYRES32=r12, @ANYBLOB="060005004e200000050002000900000008000700", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="14000400fe8000000000000000000000000000aa050005004600000008000200050000004800068008000700", @ANYRES32=r12, @ANYBLOB="060009004e230000060001000a00fbff0800d2e6b0a700", @ANYRES32=0x0, @ANYBLOB="14000400fe80000000000000000000000000003b080006000900000008000700", @ANYRES32=r12, @ANYBLOB="0800020004000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={r12, @multicast2, @multicast2}, 0xfffffffffffffcd0)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) (async)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)

50.216613868s ago: executing program 2 (id=2614):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) (async)
socket$kcm(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8)
sendto$inet6(r1, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) (async)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0) (async)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000180)={<r6=>0x0, 0x4, 0x8, 0x1, 0x2, 0xfffc, 0x1000, 0x0, {0x0, @in={{0x2, 0x4e21, @loopback}}, 0x6, 0x5, 0x7, 0x9, 0x3}}, &(0x7f0000000240)=0xb0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)={r6, 0x7ff, 0x20, 0xf, 0x5}, &(0x7f0000000340)=0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r8 = socket$unix(0x1, 0x2, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'})

50.156346153s ago: executing program 2 (id=2620):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010003704000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100767469000c00028008000300050000db00"], 0x38}}, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @empty}, 0x1c)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000280)=0x400, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400881c)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x14c, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000004b80))
r9 = socket(0xf, 0x4, 0x4)
setsockopt$inet6_tcp_int(r9, 0x6, 0x2, &(0x7f0000000100)=0x3, 0x4)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r10)
sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r11, @ANYBLOB="0100000300000000000003008000800001800d0001007564703a73797a300000000038000400200001f409004e200000008000000000000012000000000000000001820000001400020002004e227f00000100000000020000002c000400140001"], 0x94}}, 0x0)

50.154726461s ago: executing program 2 (id=2621):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r0 = socket$netlink(0x10, 0x3, 0xb)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x378, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8000}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71cf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5fc6c83d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff9672}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x16e3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40f8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3751dbb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbf4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9cb5a6cbfe85e5d19254bda19687fa8ddbb890831052fa8772"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "2d093d6e17b7c491d51d213d1bc6386196481614a02c6dfec423da2b53de6c00fcca8276b71acf1e6d3241ca9377511055f2008bc407b0fd90416c7c2a2cecf8ef62578bbe2a61cc8fec8f3db752f8f5a04d6759938979292bdd721ccc5de6811120a3f3ab045846e4b7e3e1350da67d4de7b6f619dac33a3471246e24e6d9a23fcc25184d82d610e48897f4176de6ccb6bf22f13a82576749219efebf071b245da6cd49fea12b0fa44e62971b55e6c7e307b010e24602b0b23115443ebfb2b81b8998ce54d2dc575f0632cec4099598aba91e69bbf52033d181f8c1accf52ea3bed98ac04c1e58fbfe4127101c2"}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c00018006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x0)

50.086945514s ago: executing program 2 (id=2622):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)={0x1e8, 0x40, 0x200, 0x70bd27, 0x25dfdbff, {0x16}, [@generic="5c4a1b1cdebb37405d58f3f3ac55b7982beff709c13693d3d4f813c68ce412a0d08014b31bf30b15b75f674a56fca60240cfcedf9a55c2a4c7cda65fa96505d3f40846347d2163e9d2bc67cb95feae09f37aeaaead612e8270385f9d1720888c072a0d7e41ef483c76421c9dc246d5774d4875a400902cd56558df9348e1e3b30c8b8b8582cbd268fdb03644bc27062af91a052abb615068900a84202820d0aed99cc9a1613e917834387bb558e2028113552255ee1dba31d41911f1a900374a35026225", @nested={0x10a, 0xcd, 0x0, 0x1, [@nested={0x4, 0x33}, @generic, @typed={0xd2, 0x120, 0x0, 0x0, @binary="6ca2a74856a4d7a0f2c733909ec1929153ad2cb9623994cb2a1587ad4bf59a8eafc9236dfebe23d8a0659aa8a5fd8bcd880f20770c2aff93c759ac6139eb2d24d630ba56fd6442e4cec433fd238a4209aec1cb72ca08891e7eef0885c4dfb09796c79d478db7f5891ddcf83add07b8a2abb7761e0f857f137c89c34d6c70ae3c7256cd1f7ec2a87a82a9adadbd9a9608be43ef909b0f9deb00e5e4b55f0478240b51f383cbd4de4d37244892e08f264f31c34aa2a786042982c7ba164e4aca0ed27acd49d446773b4a33c9e5c16a"}, @generic="c95b771d0c98f85d3694dbff2fe8be0027490ed8d5bfb27c31923bc9830236253489883006e342d53584ac6205f0"]}, @typed={0x4, 0xf2}]}, 0x1e8}}, 0x4000)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000180))
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fffe0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b16b6e000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000003000000ac1414aa000000000000000000000000fe8000000000120000000000000000aa3c0400000200000002000200"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x300, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0xd4}], 0x2}}, {{0x0, 0x34, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000005740)=""/4083, 0xff3}], 0x3}, 0x8}], 0x3, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x300, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0xd4}], 0x2}}, {{0x0, 0x34, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000005740)=""/4083, 0xff3}], 0x3}, 0x8}], 0x3, 0x2, 0x0)

50.083673725s ago: executing program 2 (id=2624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x800)
accept4$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x84, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{}, {0xdde}, @broadcast, @device_a, @initial, {0x0, 0x8}}, 0x101, @random=0x10, 0x4502, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x5, 0x99}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x80, 0x2c, 0x1c}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x3, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x5, 0x5, 0x21, 0xb}}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)

49.965904043s ago: executing program 8 (id=2626):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r4 = epoll_create1(0x80000)
nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180))
unshare(0x6a040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280)={<r7=>0x0, 0x1d}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000006c0)={<r8=>0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000440)=0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000780)={r7, 0x9, 0x3, 0x1, 0xfffc, 0x7fff, 0x9f3, 0x5, {r8, @in6={{0xa, 0x4e22, 0x7, @remote, 0x200}}, 0x10001, 0x5, 0x5, 0x1, 0x4}}, &(0x7f0000000500)=0xb0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r6}, &(0x7f0000000040), &(0x7f0000000940)=r5}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="600000002000370410000000ffdbdf250000b57d825d1d115351ab958df63bbf45c1", @ANYRES32=0x0, @ANYBLOB="83450500010000004000128008000100736974003400028008000300ffffffff0600100006000000050004000100000006000f0000000000060012004e23000008000100", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000380001070000ef067c6c580e08"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000000})
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0)
r13 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r13, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r13, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000000010103f2ff00"/20], 0x14}}, 0x0)

49.787117361s ago: executing program 9 (id=2630):
syz_emit_ethernet(0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001aaaaaaaaaa0aac1414bbaaaaaaaaaa00ac1414bb9daaf6f9e39c92b1aea0fb0882301ae72cac08f79fb4a7a249969b1fcf0a61ef8527ef2d8d875dcb2aad3caf04efde763620a50edc619a6e9fbe7b3c59a54b8025eebd195be405b420f2bcce75c9b47d413ad3e8035cb2aa4bb6452e8f45c9b4ad5a7e1dbb9a5dd636a6d59914"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000880)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x156000, 0x80, 0x1b6b, 0x100, 0x6, 0x1000a, r4})
bind$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x3}}, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000100)=0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5)
sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x21, 0x1, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x1)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080))
write(r7, &(0x7f0000000540)="ede55ce7e0868cb3eeadd2af140d77078ee29ac849b952ed9ca9a7f1331dd7a98cc6536bc97293bdb0e45f583ef99da2fc3784644cd5b6198b5acc43218093157304a8bc5d3e14972720e90780b5644745c2acfe80ba9d34ddbb096384fb89e4b8135a60e8003727c0e6447721d07343441cdf8432d4a3fde4c7f5d0842fbb2fb02df446336c81327b6d584a6001de33c6c342ba3af58cbb94f9bda2cb0212ee0d11a788ce9ccac2f97b8a3fce7cfb60603012dcd4d01dd317256955a2d165407d57613e2612b441883593fa84f3877cdb", 0xd1)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
sendmmsg$sock(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0xfffffe12}}], 0x1, 0x4c015)
r8 = accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r8, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1)
socket(0x2, 0x1, 0x1)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x3, 0x10}, 0xc)
getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48)
unshare(0x60600)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)=r10}, 0x20)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000900)=0x2)

49.727345771s ago: executing program 9 (id=2631):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
socket$igmp6(0xa, 0x3, 0x2)
unshare(0x20000400)
epoll_create1(0x0) (async)
r2 = epoll_create1(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0x59, 0x4, 0xfffffc00, 0x61ed}, 0x10)
epoll_pwait(r2, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="fd012bbd7000fddbdf250e00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x400c8c0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

49.724382417s ago: executing program 9 (id=2632):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, &(0x7f0000000840)={0x2}, 0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x60, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x74}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27b}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x8040)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000003d80)=""/4100, 0x1004}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x12002, 0x0)

49.66139503s ago: executing program 9 (id=2633):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES8=r0, @ANYBLOB="0800091039d572"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

49.660082368s ago: executing program 9 (id=2634):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

49.659697976s ago: executing program 8 (id=2635):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x2c, 0x3, 0xe7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={<r1=>0x0, 0x4, 0x401}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r1, 0x7f, 0x6, 0xd, 0xc}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x800000000000d}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003900010324bd7002fadfdf9b000000b5554908f12b0696124e696efebd405a3ee982dfa8656ed31a246dcb19901f26cf17792cf22412b82bcc1a4467665faca17c74b424ff6c60383dc3b7de70a914fa5acf74ee556edc6eb1023ead9dd2641709"], 0x14}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00000c00000000000000000000000400080088856d00f92fb75e907b22b4d70848507ea830038a000000000000e80300efff0000000002010000ac1414aa00001c00000000000300060000000000020000000a0101010000000000000000"], 0x60}}, 0x0) (async)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00000c00000000000000000000000400080088856d00f92fb75e907b22b4d70848507ea830038a000000000000e80300efff0000000002010000ac1414aa00001c00000000000300060000000000020000000a0101010000000000000000"], 0x60}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x31, 0xa, 0x5a, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
unshare(0x24040400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x5d28}, 0x18) (async)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x5d28}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0xfffffffffffffd20}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0xfffffffffffffd20}, 0x10)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_int(r9, 0x6, 0x1d, &(0x7f0000000000)=0xfff, 0x4)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket(0x18, 0x800, 0xfffffff4)

49.606490436s ago: executing program 9 (id=2636):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x94}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r1}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x94)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SIOCGSKNS(r6, 0x894c, 0x0)
openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r7, 0x29, 0x1c, 0x0, 0x14)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

49.546998311s ago: executing program 8 (id=2637):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}, [0x1, 0x51, 0x8, 0x3, 0x3, 0x1, 0xf45, 0x7, 0x2, 0x8, 0xd, 0x0, 0x0, 0x10000, 0x10b]}, &(0x7f0000000000)=0x100)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0, 0x7}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x42, 0x2f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0xffffff01, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) (async)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000700)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfb73}}], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x37, &(0x7f00000007c0)=""/55, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x7ad, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x0, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000008c0)=[{0x1, 0x4, 0x5, 0x7}, {0x0, 0x3, 0x10, 0x8}, {0x5, 0x4, 0x9, 0x2}, {0x4, 0x4, 0x7, 0x2}, {0x0, 0x3, 0x3, 0x4}, {0x4, 0x1, 0x6, 0x6}, {0x2, 0x4, 0x2, 0xb}], 0x10, 0xfff}, 0x94) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x16}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x2, &(0x7f0000000680)=""/2, 0x41000, 0x12, '\x00', r6, @fallback=0x2a, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x0, 0xa, 0x4, 0x1}, 0x10, 0x0, r8, 0x2, &(0x7f0000000a80)=[r9, r10], &(0x7f0000000ac0)=[{0x2, 0x3, 0x1, 0x5}, {0x0, 0x5, 0xe, 0x4}], 0x10, 0x8}, 0x94) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r2, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) (async)
r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$PTP_SYS_OFFSET(r11, 0x43403d05, &(0x7f00000001c0)={0x4}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)

49.544778093s ago: executing program 8 (id=2638):
socketpair(0x15, 0xa, 0x5, &(0x7f0000001040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x63, 0x5, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240060c4}, 0x48000)
r1 = socket(0x2, 0x3, 0xff)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r3, 0x3}, 0xc)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18)
recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r4, 0xd3)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r6, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r5, 0xe0, &(0x7f0000000f00)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map=0x1, r5, 0x7, 0x34, 0x0, @void, @void, @void, @value=r8, r7}, 0x20)
shutdown(r1, 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x44881}, 0xc4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe8)
r12 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r12, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r12, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)
sendmsg$802154_raw(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000400)={&(0x7f0000000300)="dcad37f62253e725418ad1ccb91690023f3532a76348ae4b7fe730e57f30dfeeb080c6efdfe339f67e19fdc2d55e506d19e6a222f217db61531e438774a438254163e52638c23f3a9a12aeb52a0e21a21f25f477ac290071adf2ce6d51c0f09282061c3adee16d0b1e7ff8193e3bf6c91b586bccdd7ca31c7c596f82d645844bf9ff78f7b079691cd06dad92ce", 0x8d}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r10}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9)

49.437087421s ago: executing program 8 (id=2639):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x40800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x1000}, 0x1c)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r11 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r11, 0xbdd94000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r12, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e6663100800010080"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840)

49.356470308s ago: executing program 8 (id=2640):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000002640)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e4be2ebe", 0x4}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x8080)
sendmsg$alg(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r5, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

34.297818381s ago: executing program 40 (id=2636):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x94}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r1}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x94)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SIOCGSKNS(r6, 0x894c, 0x0)
openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r7, 0x29, 0x1c, 0x0, 0x14)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

34.257086442s ago: executing program 41 (id=2640):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000002640)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e4be2ebe", 0x4}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x8080)
sendmsg$alg(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r5, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

34.257000449s ago: executing program 42 (id=2624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x800)
accept4$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x84, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{}, {0xdde}, @broadcast, @device_a, @initial, {0x0, 0x8}}, 0x101, @random=0x10, 0x4502, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x5, 0x99}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x80, 0x2c, 0x1c}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x3, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x5, 0x5, 0x21, 0xb}}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)

27.976490323s ago: executing program 1 (id=2729):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b70500000000000061108a0000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9805837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8afef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb246ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4030b34c27a2f7fcd66ddde687c1255d0779ffec72ada8598e222d66bc90dacf240fe12755f780048804400f49d77b81534a8f1b0de80c49c7d9c87888801d819daaddb0c57513fdf7d0e942a799143dccc213cac7e8092d691a7894678472ba1970b4d6e393158dafeebae0a9d89e6e639115ddc7b54139b5b47f3d583c16b4d2da0a5c7b5ea751d03cc71fdd61140d66ff1ccfcbe83e40156854900"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0xfffffffffffffe32, &(0x7f0000002740)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2b, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4000040)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0xba01}, 0x810)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0)

27.967784829s ago: executing program 1 (id=2732):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c"], 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000ffffffffffffff8300000001000000000000000000000000000033"], 0xfdef)

27.895793601s ago: executing program 1 (id=2734):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
unshare(0x2020600)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00')
ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r6, @ANYRES16=r7, @ANYBLOB="00062cbd7000fbdbdf25070000000c009900070000007a0000007372000000000500530000000000080005000600000005005300000000000a00180003030303030300001c00e700ad1e8a115a3625b7d7ac45a86bcbabc6b641cbed365ce96a"], 0x74}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4008000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r11 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a2b0300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

27.796228403s ago: executing program 1 (id=2736):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000006db3c303b79534e6dc5ffdbf2f61100000630afcff000000009500040000000000043d40d424"], &(0x7f0000000100)='GPL\x00'}, 0x90)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRESDEC=r3, @ANYRES32=r3], 0xfd45}}, 0x54)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1b}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e00008004ffffe34114c0997edaa9000000000078e82538f1f7bc490a4f67c21fed9b405ca1750f2f146cb29490002a1b7204be32a5aa7a53b65a24f902df9491970c8d431da21d8c2721c1bb0d93ed042e86b1925dc105b7bb00843695932b6f163bcbf26005dfa53a46852887757a1842e4d5232e", @ANYRES32=r4, @ANYBLOB="0600000000000000000000000000000000000000f685c9b52837ba79a5b8110e39b26c5e9fa8337f2b0bf805f0bec335d101ca335860567411c35da1b1f80c2a1cd22459560d4fd04455add643a6e3f4aa376040bee9b819ea50", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r11}, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010023010000340200000200000808000100", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r14, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000880)=ANY=[@ANYBLOB="bb8de91dbd4c9ded69688d5ec99e2166b7250ab996b48aaeafb56ce2e35ac452150e8f35bec8b5895c9ad5791499bc63a86363ff29b713c79c7e29938fe674440cb5313562c00324d73f14ce5727a6dfb81a881a5c2c6d46575f0424c0b8336ea324901984004f", @ANYRES16=r15, @ANYBLOB="0100ffffffff00000000010000000c00060003000000000000000400078008000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000)
sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r15, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000017a49b1b3ca9b4ade1956ccfed020b5c8766a0cb816a26fb9c5c708479895f18c7a0c96c8de4aeca1b73245cc2b09c6f4ab6000d46ae0653dd7d091b35b749a71ba3e8c610fa334507c4", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000a00000008000c000b000000"], 0x30}, 0x1, 0x0, 0x0, 0x20009850}, 0x0)
write$nci(r6, &(0x7f0000001140)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4)
listen(0xffffffffffffffff, 0x80)

27.596008793s ago: executing program 1 (id=2738):
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0xf4, 0x0, 0xf20d11b754d7f5cf, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x33}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x63e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff0b48}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x43e}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x64}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x17c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7, 0x4, 0x5, 0x9, 0x162]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3f3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}, @NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1000}, @NL80211_ATTR_CQM_RSSI_THOLD={0xff1f}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040}, 0x20004005)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b00000019000100007f0000000094bc2d"], 0x1c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x53, &(0x7f00000001c0)=""/83, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0x4, 0xa}, {0x3, 0x4, 0xb}, {0x1, 0x5, 0x2, 0x3}, {0x2, 0x1, 0xe, 0x2}, {0x5, 0x2}, {0x3, 0x1, 0x1, 0xb}, {0x2, 0x4, 0x3, 0x6}, {0x3, 0x3, 0xb, 0x2}], 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='fscache_acquire\x00', r3, 0x0, 0x4}, 0x18)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0xf4, 0x0, 0xf20d11b754d7f5cf, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x33}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x63e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff0b48}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x43e}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x64}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x17c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7, 0x4, 0x5, 0x9, 0x162]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3f3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}, @NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1000}, @NL80211_ATTR_CQM_RSSI_THOLD={0xff1f}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040}, 0x20004005) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b00000019000100007f0000000094bc2d"], 0x1c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x53, &(0x7f00000001c0)=""/83, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0x4, 0xa}, {0x3, 0x4, 0xb}, {0x1, 0x5, 0x2, 0x3}, {0x2, 0x1, 0xe, 0x2}, {0x5, 0x2}, {0x3, 0x1, 0x1, 0xb}, {0x2, 0x4, 0x3, 0x6}, {0x3, 0x3, 0xb, 0x2}], 0x10, 0x5}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='fscache_acquire\x00', r3, 0x0, 0x4}, 0x18) (async)

27.591352582s ago: executing program 1 (id=2739):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040))
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req={0x2, 0x6, 0x10000, 0x8}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r3, 0x0, 0x1}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)

16.0563423s ago: executing program 4 (id=2881):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'dvmrp1\x00', {}, 0x7})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x9, 0xb}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x28}}, 0x0)

16.055186554s ago: executing program 4 (id=2882):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000980)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1, 0x0, 0xffffffd0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000000c0)="8dba34c8", 0x4}], 0x1}}], 0x3, 0x20)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r3=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000500)={r3, 0x7}, 0xc)
r4 = socket$inet_sctp(0x2, 0x0, 0x84)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000075a003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001009364703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000040)=0x1c70, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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", @ANYRESDEC=r4], 0x1c8}}, 0x0)

16.006887746s ago: executing program 4 (id=2883):
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX, @ANYRES64=r0, @ANYBLOB="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"], 0x14}, 0x1, 0x40030000000000, 0x0, 0x4040}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x24000005}, 0x810)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'})
socket$inet6(0xa, 0x4, 0x20007)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180))
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
socket$xdp(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, <r5=>0x41424344}, 0x4, 0xffffffff)
syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0c08004aba003c00650000020690780a010102ac1414bb440c9d91ffffffff0000089894040100440491114e244e23", @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB="a7adfffd90780057"], 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0xf03a0005)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x18, 0x0, 0x1)
getsockopt$nfc_llcp(r7, 0x111, 0x0, 0x0, 0xffffffffffffff40)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000002c0)=@in6={0xa, 0x4e21, 0xf, @empty, 0x40}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="30003d07f800000000050000000000010000002010f0ef8fb5c9e1c913b2439512ea940000002c00000000992ab6b6e2ec7c89da62e6c51ece3f809e8e864e0100000000000000000000800000", @ANYRES32=0x0], 0x30}], 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

16.006455333s ago: executing program 4 (id=2884):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf251b00000008009a000210"], 0x20}}, 0x40090)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcffffff000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211"], 0x3c}}, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c7fea104d131044d40000000000000000000", @ANYRES32=r6, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf2501000000"], 0x14}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r8], &(0x7f0000000300)='syzkaller\x00', 0x4}, 0xfffffffffffffff8)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={<r9=>0x0, @rand_addr, @broadcast}, &(0x7f0000000440)=0xc)
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{0x7, 0x478c1c16, 0x3, 0x3, 0x2, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x4, 0x79, 0xffffffc0, 0x8, 0x8}}, @TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x9, 0x9190, 0x7e34}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xfffffffa, 0xfffffffa}}]}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x2404c050)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042abd7000fbdbdf25010000000800030003000000080002000100000008000300000000000c00068008000700", @ANYRES32=r9, @ANYBLOB='$\x00\a\x00'/16, @ANYRES32=r12, @ANYBLOB="060005004e2000000600010002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000040)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000ff0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.887033839s ago: executing program 4 (id=2885):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYBLOB="d2e10a5e", @ANYRES32=r2, @ANYRES8=r0, @ANYRESOCT=r2], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = getpid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180)=r4)
sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)}, 0x11)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15.88588417s ago: executing program 4 (id=2886):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@private2, @in=@private}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000023c0)=0xe8)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

13.846628004s ago: executing program 3 (id=2917):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_ax25_SIOCADDRT(r0, 0x891e, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000600)='sample\x10', 0xfdee)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x300, 0x70bd23, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
preadv(r6, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/236, 0xec}], 0x1, 0x2, 0x1)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000f8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94)
setsockopt$sock_attach_bpf(r10, 0x1, 0x43, &(0x7f0000000040), 0x3b)
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x2e54cfd8aff934d)
syz_emit_ethernet(0x80, &(0x7f00000005c0)={@multicast, @random="28feee412b8f", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x2d, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x301)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='pimreg1\x00', 0x10)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r11}, 0x4)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12, r11}, 0xc)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180001ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

13.63546509s ago: executing program 3 (id=2918):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x10001, 0x9, 0x1}, 0x50)
socket$netlink(0x10, 0x3, 0x11)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
epoll_create1(0x80000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket(0x2, 0x80805, 0x0)
socket$inet(0x2, 0x80001, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071108c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000040)=0x3ff, 0x4)
connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000280)=0x4, 0x4)

13.585394525s ago: executing program 3 (id=2919):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x16]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

13.584882592s ago: executing program 3 (id=2920):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c"], 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000002b00000000000000000001000000000000000000000000000033"], 0xfdef)

13.486726296s ago: executing program 3 (id=2921):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x41, 0x107, 0x0, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf9, 0x0, 0x0, @u32=0xfffffff8}]}]}, 0x24}}, 0x4010)

13.403113801s ago: executing program 3 (id=2922):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="0a000300010000", 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4)
recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

12.391419625s ago: executing program 43 (id=2739):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040))
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req={0x2, 0x6, 0x10000, 0x8}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r3, 0x0, 0x1}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)

1.096282536s ago: executing program 5 (id=2957):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r2, &(0x7f0000000700)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000280)=""/158, 0x9e}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f00000004c0)=""/132, 0x84}], 0x8, &(0x7f0000000680)=""/123, 0x7b}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x50, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500cb00"/20, @ANYRES32=r4, @ANYBLOB="080004006401010108000200ac1414aa08000400ac1414bb08000200ffffffff08000900310000000800090003010000"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x70bd2c, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5, 0x2}}}}]}]}, 0x68}}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r5, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29)

1.025828379s ago: executing program 5 (id=2958):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c"], 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000033000000000000000001000000000000000000000000000033"], 0xfdef)

935.1688ms ago: executing program 5 (id=2959):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000200000085000000b2000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="7bd4afb0ac32f6ba8375f92663abfc8c3fdc7fc9fc3b231c14cf7f57a7c027d4050fdc784dfa9ed0cc97477b0d4ea3d4494353dfc17101e02ee7a5b03a19f559fc18", 0x42) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x3c, 0x3c, 0x107, 0x0, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x15}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0xd}, @nested={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x48}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

934.050661ms ago: executing program 5 (id=2960):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000001"], 0x18, 0x48d1}, 0x41)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000240)={r9}, &(0x7f0000000280)=0x8)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=@bridge_delneigh={0x4c, 0x1d, 0x400, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x8, 0x40, 0x1}, [@NDA_IFINDEX={0x8}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_NH_ID={0x8, 0xd, 0x7}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001084}, 0x44400)

2.019764ms ago: executing program 5 (id=2961):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$kcm(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) (async)
shutdown(r1, 0x1) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x7}, 0x8) (rerun: 32)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r3=>0x0}) (async)
bind$can_raw(r2, &(0x7f00000005c0), 0x10)
read(r2, &(0x7f0000000800)=""/4069, 0xfe5) (async)
sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000040)
socket$unix(0x1, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff}) (rerun: 32)
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=<r6=>0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), r7) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)) (async, rerun: 32)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000380)={0x8, 'veth1_to_team\x00', {'macsec0\x00'}, 0x3})
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYRESDEC=r6, @ANYRESOCT=r2, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff00070000000000000005f60000009e0c0907"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)
socket$nl_route(0x10, 0x3, 0x0)

59.946µs ago: executing program 44 (id=2886):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@private2, @in=@private}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000023c0)=0xe8)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

0s ago: executing program 5 (id=2963):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a010400000000000000000a0000050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580090001006d657461000000000c00028008000140000000090800034000000000080002400000008408000140000000000900020073797a32000000000900010073797a31000000001d0007"], 0xd4}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000006000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008"], 0x124}}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)

kernel console output (not intermixed with test programs):

][T13772] team0: entered promiscuous mode
[  192.024414][T13772] team_slave_0: entered promiscuous mode
[  192.026784][T13772] team_slave_1: entered promiscuous mode
[  192.029103][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2104'.
[  192.036293][T13772] team0 (unregistering): left promiscuous mode
[  192.038344][T13772] team_slave_0: left promiscuous mode
[  192.040149][T13772] team_slave_1: left promiscuous mode
[  192.043664][T13772] team0 (unregistering): Port device team_slave_0 removed
[  192.048665][T13772] team0 (unregistering): Port device team_slave_1 removed
[  192.063321][T13778] netlink: 'syz.0.2106': attribute type 8 has an invalid length.
[  192.139307][T13789] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2110'.
[  192.160523][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2111'.
[  192.164116][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2111'.
[  192.174200][T13793] netlink: 'syz.0.2112': attribute type 6 has an invalid length.
[  192.177543][T13794] netlink: 'syz.0.2112': attribute type 6 has an invalid length.
[  192.375126][T13810] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2116'.
[  192.403128][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2117'.
[  192.447394][T13820] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2119'.
[  192.508731][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2119'.
[  192.695203][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  192.722553][T13841] net_ratelimit: 4 callbacks suppressed
[  192.722601][T13841] openvswitch: netlink: Missing valid actions attribute.
[  192.729411][T13841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.763804][T13844] tipc: Started in network mode
[  192.765996][T13844] tipc: Node identity ac1414aa, cluster identity 4711
[  192.769035][T13844] tipc: Enabled bearer <udp:syz2>, priority 6
[  192.845336][T13850] rdma_op ffff88812bf101f0 conn xmit_rdma 0000000000000000
[  192.868620][T13849] netlink: del zone limit has 4 unknown bytes
[  192.954953][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  193.000986][T13863] netlink: 'syz.6.2133': attribute type 1 has an invalid length.
[  193.003854][T13863] NCSI netlink: No device for ifindex 0
[  193.030455][T13867] netlink: zone id is out of range
[  193.032617][T13867] netlink: zone id is out of range
[  193.035156][T13867] netlink: zone id is out of range
[  193.037212][T13867] netlink: zone id is out of range
[  193.039399][T13867] netlink: zone id is out of range
[  193.041611][T13867] netlink: zone id is out of range
[  193.043941][T13867] netlink: zone id is out of range
[  193.046590][   T55] Bluetooth: hci6: command tx timeout
[  193.576760][T13882] netlink: 'syz.0.2140': attribute type 9 has an invalid length.
[  193.774816][  T791] tipc: Node number set to 2886997162
[  194.062357][T13907] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.089905][T13907] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.138891][T13907] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.168451][T13907] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.218751][ T5911] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.224638][ T5911] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.230340][ T5911] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.235656][ T5911] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.707495][T13948] netlink: 'syz.0.2162': attribute type 4 has an invalid length.
[  194.716007][T13948] tipc: Resetting bearer <eth:syzkaller0>
[  194.887353][T13964] netlink: 'syz.6.2165': attribute type 142 has an invalid length.
[  195.125073][ T5847] Bluetooth: hci6: command tx timeout
[  195.920041][T14055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.923457][T14055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.942374][T14056] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  195.952476][T14056] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  195.962487][T14055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.970966][T14055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.078911][T14079] netlink: 'syz.0.2177': attribute type 1 has an invalid length.
[  196.113034][T14079] veth17: entered promiscuous mode
[  196.181166][T14094] netlink: 'syz.0.2179': attribute type 7 has an invalid length.
[  196.308995][T14108] syzkaller1: entered promiscuous mode
[  196.311216][T14108] syzkaller1: entered allmulticast mode
[  196.742491][T14163] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.787738][T14169] __nla_validate_parse: 13 callbacks suppressed
[  196.787754][T14169] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2191'.
[  196.854159][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'.
[  196.857711][T14174] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2191'.
[  197.038447][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2192'.
[  197.096692][T14181] netlink: 20824 bytes leftover after parsing attributes in process `syz.6.2194'.
[  197.110071][T14181] validate_nla: 1 callbacks suppressed
[  197.110087][T14181] netlink: 'syz.6.2194': attribute type 10 has an invalid length.
[  197.119656][T14181] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  197.214896][ T5847] Bluetooth: hci6: command 0x0405 tx timeout
[  197.256378][T14193] syzkaller1: entered promiscuous mode
[  197.258616][T14193] syzkaller1: entered allmulticast mode
[  197.262581][T14193] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  198.219187][T14199] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2200'.
[  198.277874][T14199] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2200'.
[  198.308451][T14202] netlink: 'syz.6.2201': attribute type 1 has an invalid length.
[  198.311074][T14202] netlink: 'syz.6.2201': attribute type 2 has an invalid length.
[  198.391829][T14208] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2203'.
[  198.413789][T14210] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2204'.
[  198.473789][T14217] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5
[  199.349145][T14231] netlink: 'syz.6.2209': attribute type 10 has an invalid length.
[  199.353437][T14231] bond0: (slave wlan1): Opening slave failed
[  199.432905][T14241] netlink: 'syz.6.2210': attribute type 1 has an invalid length.
[  200.234342][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2213'.
[  200.283638][T14253] netlink: 'syz.6.2215': attribute type 9 has an invalid length.
[  200.302828][T14257] netlink: 'syz.6.2215': attribute type 9 has an invalid length.
[  200.357222][T14262] netlink: 'syz.6.2217': attribute type 2 has an invalid length.
[  200.359701][T14262] netlink: 'syz.6.2217': attribute type 1 has an invalid length.
[  200.679206][T14306] netlink: 'syz.6.2227': attribute type 21 has an invalid length.
[  201.331818][T14309] syz.6.2228 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  201.345913][T14309] CPU: 0 UID: 0 PID: 14309 Comm: syz.6.2228 Not tainted syzkaller #0 PREEMPT(full) 
[  201.345927][T14309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.345931][T14309] Call Trace:
[  201.345934][T14309]  <TASK>
[  201.345937][T14309]  dump_stack_lvl+0x189/0x250
[  201.345950][T14309]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.345958][T14309]  ? __pfx__printk+0x10/0x10
[  201.345969][T14309]  ? rcu_is_watching+0x15/0xb0
[  201.345977][T14309]  dump_header+0xd3/0x480
[  201.345988][T14309]  oom_kill_process+0x387/0x920
[  201.345996][T14309]  out_of_memory+0xf09/0x12a0
[  201.346003][T14309]  ? mem_cgroup_iter+0x3b/0x460
[  201.346011][T14309]  ? __pfx_out_of_memory+0x10/0x10
[  201.346018][T14309]  mem_cgroup_out_of_memory+0x145/0x240
[  201.346026][T14309]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  201.346034][T14309]  ? _raw_spin_unlock+0x28/0x50
[  201.346042][T14309]  ? memcg1_oom_prepare+0x37f/0x450
[  201.346051][T14309]  try_charge_memcg+0xdff/0x1290
[  201.346060][T14309]  ? rcu_is_watching+0x15/0xb0
[  201.346069][T14309]  ? __pfx_try_charge_memcg+0x10/0x10
[  201.346078][T14309]  ? rcu_needs_cpu+0xa1/0xb0
[  201.346084][T14309]  ? xa_load+0x60/0x210
[  201.346090][T14309]  ? rcu_is_watching+0x15/0xb0
[  201.346096][T14309]  ? rcu_is_watching+0x15/0xb0
[  201.346103][T14309]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  201.346112][T14309]  charge_memcg+0x9f/0x180
[  201.346120][T14309]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  201.346129][T14309]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  201.346139][T14309]  __read_swap_cache_async+0x28c/0x510
[  201.346148][T14309]  swap_cluster_readahead+0x305/0x5f0
[  201.346156][T14309]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  201.346164][T14309]  ? rcu_is_watching+0x15/0xb0
[  201.346170][T14309]  ? filemap_get_entry+0xad/0x2f0
[  201.346177][T14309]  ? get_vma_policy+0x27c/0x3c0
[  201.346187][T14309]  swapin_readahead+0x17d/0xb50
[  201.346194][T14309]  ? __pfx_filemap_get_entry+0x10/0x10
[  201.346201][T14309]  ? get_swap_device_info+0x1c/0x2b0
[  201.346208][T14309]  ? rcu_is_watching+0x15/0xb0
[  201.346214][T14309]  ? __pfx_swapin_readahead+0x10/0x10
[  201.346221][T14309]  ? __filemap_get_folio+0x9a6/0xaf0
[  201.346229][T14309]  ? swap_cache_get_folio+0xae/0x3b0
[  201.346236][T14309]  do_swap_page+0x525/0x5ac0
[  201.346246][T14309]  ? ___pte_offset_map+0x29/0x250
[  201.346255][T14309]  ? lock_acquire+0x5f/0x360
[  201.346264][T14309]  ? do_swap_page+0x184/0x5ac0
[  201.346271][T14309]  ? __pfx_do_swap_page+0x10/0x10
[  201.346279][T14309]  ? rcu_is_watching+0x15/0xb0
[  201.346285][T14309]  ? __pfx_default_wake_function+0x10/0x10
[  201.346295][T14309]  ? ___pte_offset_map+0x45/0x250
[  201.346303][T14309]  ? ___pte_offset_map+0x1cf/0x250
[  201.346312][T14309]  ? pte_offset_map_rw_nolock+0xea/0x160
[  201.346321][T14309]  __handle_mm_fault+0xe55/0x5440
[  201.346332][T14309]  ? __pfx___handle_mm_fault+0x10/0x10
[  201.346340][T14309]  ? lock_release+0x4b/0x3e0
[  201.346351][T14309]  ? rcu_is_watching+0x15/0xb0
[  201.346357][T14309]  ? lock_vma_under_rcu+0xdf/0x3d0
[  201.346366][T14309]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  201.346377][T14309]  handle_mm_fault+0x40a/0x8e0
[  201.346387][T14309]  do_user_addr_fault+0xa81/0x1390
[  201.346399][T14309]  ? rcu_is_watching+0x15/0xb0
[  201.346405][T14309]  ? trace_page_fault_user+0x84/0x1e0
[  201.346415][T14309]  exc_page_fault+0x76/0xf0
[  201.346426][T14309]  asm_exc_page_fault+0x26/0x30
[  201.346432][T14309] RIP: 0033:0x7f17988655e8
[  201.346440][T14309] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d da 27 36 00 00 0f 8e 09 fe ff ff e8 73 9e fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d a6 00 e9 00 e8 03 00 00 48 8d 1d a7 09 36 00 e8 42 95 12 00
[  201.346446][T14309] RSP: 002b:00007ffe18beef70 EFLAGS: 00010216
[  201.346454][T14309] RAX: 00000000000311ec RBX: 00007f1798bc7da0 RCX: 0000000000031128
[  201.346459][T14309] RDX: 00000000000000c4 RSI: 00007ffe18beef50 RDI: 0000000000000001
[  201.346464][T14309] RBP: 00007f1798bc7da0 R08: 000000000bbcf722 R09: 7fffffffffffffff
[  201.346469][T14309] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000000312e1
[  201.346473][T14309] R13: 00007f1798bc6090 R14: ffffffffffffffff R15: 00007ffe18bef080
[  201.346481][T14309]  </TASK>
[  201.346484][T14309] memory: usage 307200kB, limit 307200kB, failcnt 202
[  201.512223][T14309] memory+swap: usage 284768kB, limit 9007199254740988kB, failcnt 0
[  201.525142][T14309] kmem: usage 282016kB, limit 9007199254740988kB, failcnt 0
[  201.528023][T14309] Memory cgroup stats for /syz6:
[  201.528150][T14309] cache 0
[  201.531453][T14309] rss 0
[  201.532643][T14309] rss_huge 0
[  201.534049][T14309] shmem 0
[  201.537007][T14309] mapped_file 0
[  201.545400][T14309] dirty 0
[  201.552405][T14309] writeback 0
[  201.557428][T14309] workingset_refault_anon 9
[  201.558964][T14309] workingset_refault_file 0
[  201.566819][T14309] swap 192512
[  201.568040][T14309] swapcached 4096
[  201.569268][T14309] pgpgin 8900
[  201.570671][T14309] pgpgout 8899
[  201.572068][T14309] pgfault 18646
[  201.573407][T14309] pgmajfault 10
[  201.574613][T14309] inactive_anon 0
[  201.585676][T14309] active_anon 4096
[  201.589168][T14309] inactive_file 0
[  201.591386][T14309] active_file 0
[  201.593700][T14309] unevictable 0
[  201.596062][T14309] hierarchical_memory_limit 314572800
[  201.600133][T14309] hierarchical_memsw_limit 9223372036854771712
[  201.604656][T14309] total_cache 0
[  201.608788][T14309] total_rss 0
[  201.611254][T14309] total_rss_huge 0
[  201.614994][T14309] total_shmem 0
[  201.617325][T14309] total_mapped_file 0
[  201.619890][T14309] total_dirty 0
[  201.622850][T14309] total_writeback 0
[  201.625446][T14309] total_workingset_refault_anon 9
[  201.627142][T14309] total_workingset_refault_file 0
[  201.628881][T14309] total_swap 192512
[  201.630339][T14309] total_swapcached 4096
[  201.631760][T14309] total_pgpgin 8900
[  201.633172][T14309] total_pgpgout 8899
[  201.634446][T14309] total_pgfault 18646
[  201.642249][T14309] total_pgmajfault 10
[  201.643596][T14309] total_inactive_anon 0
[  201.646327][T14309] total_active_anon 4096
[  201.648089][T14309] total_inactive_file 0
[  201.649809][T14309] total_active_file 0
[  201.651445][T14309] total_unevictable 0
[  201.653096][T14309] anon_cost 0
[  201.654455][T14309] file_cost 0
[  201.656247][T14309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2228,pid=14309,uid=0
[  201.662634][T14309] Memory cgroup out of memory: Killed process 14309 (syz.6.2228) total-vm:101952kB, anon-rss:1012kB, file-rss:23124kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  202.016437][T14374] __nla_validate_parse: 10 callbacks suppressed
[  202.016447][T14374] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2231'.
[  202.061149][T14383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2233'.
[  202.063996][T14383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2233'.
[  202.116688][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'.
[  202.149697][T14405] IPVS: Scheduler module ip_vs_ not found
[  202.275282][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2244'.
[  202.278984][T14422] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  202.283018][T14422] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2244'.
[  202.311992][T14424] syzkaller1: entered promiscuous mode
[  202.313839][T14424] syzkaller1: entered allmulticast mode
[  202.461088][T14429] netlink: 'syz.6.2246': attribute type 5 has an invalid length.
[  202.487682][T14433] netlink: 'syz.6.2247': attribute type 1 has an invalid length.
[  202.534344][T14435] erspan0: entered promiscuous mode
[  202.536860][T14435] erspan0: left promiscuous mode
[  202.653440][T14442] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2251'.
[  202.702121][T14449] net_ratelimit: 22 callbacks suppressed
[  202.702132][T14449] Set syz0 is full, maxelem 0 reached
[  202.724140][T14452] netlink: 'syz.6.2254': attribute type 10 has an invalid length.
[  202.728536][T14452] bond0: (slave dummy0): Releasing backup interface
[  202.732352][T14452] netlink: 'syz.6.2254': attribute type 10 has an invalid length.
[  202.738443][T14452] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  203.139323][T14468] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2259'.
[  203.211267][T14474] smc: net device bond0 erased user defined pnetid SYZ2
[  203.216659][T14474] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2261'.
[  203.219987][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'.
[  203.277762][T14480] netlink: 'syz.0.2262': attribute type 21 has an invalid length.
[  203.532420][T14509] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  203.626528][T14524] ip6tnl3: entered promiscuous mode
[  203.628292][T14524] ip6tnl3: entered allmulticast mode
[  203.754614][T14543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.760996][T14543] mac80211_hwsim hwsim80 syzkaller0: entered promiscuous mode
[  203.763423][T14543] mac80211_hwsim hwsim80 syzkaller0: entered allmulticast mode
[  203.767801][T14543] tipc: Resetting bearer <eth:syzkaller0>
[  203.876435][T14559] openvswitch: netlink: Flow actions attr not present in new flow.
[  203.905318][T14561] netlink: 'syz.6.2281': attribute type 1 has an invalid length.
[  203.924629][T14561] 8021q: adding VLAN 0 to HW filter on device bond1
[  203.931618][T14561] bond1: (slave geneve2): making interface the new active one
[  203.935303][T14561] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  203.942447][T14561] bond1: entered promiscuous mode
[  203.944135][T14561] geneve2: entered promiscuous mode
[  203.998424][T14570] netlink: 'syz.0.2283': attribute type 1 has an invalid length.
[  204.014221][T14570] 8021q: adding VLAN 0 to HW filter on device bond22
[  204.222261][T14589] 8021q: adding VLAN 0 to HW filter on device bond2
[  204.548444][T14602] netlink: 'syz.6.2291': attribute type 12 has an invalid length.
[  204.902494][T14624] can: request_module (can-proto-0) failed.
[  204.913587][T14624] openvswitch: netlink: IP tunnel dst address not specified
[  204.972074][T14627] netlink: 'syz.0.2297': attribute type 1 has an invalid length.
[  204.977666][T14627] netlink: 'syz.0.2297': attribute type 4 has an invalid length.
[  205.880150][T14653] netlink: 'syz.6.2301': attribute type 11 has an invalid length.
[  206.117839][T14666] lo: entered allmulticast mode
[  206.124063][T14666] dvmrp8: entered allmulticast mode
[  206.164602][T14665] lo: left allmulticast mode
[  206.167805][T14665] dvmrp8: left allmulticast mode
[  206.331530][T14677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.564887][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  207.082476][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  207.088200][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  207.090768][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  207.093554][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  207.096514][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  207.166679][T14714] chnl_net:caif_netlink_parms(): no params data found
[  207.189846][T14714] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.192190][T14714] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.194639][T14714] bridge_slave_0: entered allmulticast mode
[  207.197096][T14714] bridge_slave_0: entered promiscuous mode
[  207.199832][T14714] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.202193][T14714] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.204530][T14714] bridge_slave_1: entered allmulticast mode
[  207.207474][T14714] bridge_slave_1: entered promiscuous mode
[  207.219077][T14714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.223410][T14714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.236800][T14714] team0: Port device team_slave_0 added
[  207.239771][T14714] team0: Port device team_slave_1 added
[  207.255407][T14714] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.257817][T14714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.266886][T14714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.271714][T14714] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.274105][T14714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.284667][T14714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.306679][T14714] hsr_slave_0: entered promiscuous mode
[  207.309466][T14714] hsr_slave_1: entered promiscuous mode
[  207.312188][T14714] debugfs: 'hsr0' already exists in 'hsr'
[  207.314263][T14714] Cannot create hsr debugfs directory
[  207.364344][T14714] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  207.368246][T14714] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  207.372634][T14714] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  207.377301][T14732] __nla_validate_parse: 27 callbacks suppressed
[  207.377309][T14732] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2324'.
[  207.377665][T14714] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  207.394268][T14714] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.396664][T14714] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.399711][T14714] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.402171][T14714] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.423071][T14714] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.429050][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.431653][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.439965][T14714] 8021q: adding VLAN 0 to HW filter on device team0
[  207.445909][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.448276][ T8462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.460458][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.462864][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.515540][T11383] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  207.521944][T14742] validate_nla: 1 callbacks suppressed
[  207.521953][T14742] netlink: 'syz.0.2325': attribute type 10 has an invalid length.
[  207.538668][T14714] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.555153][T11383] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  207.611546][T14714] veth0_vlan: entered promiscuous mode
[  207.615573][T14714] veth1_vlan: entered promiscuous mode
[  207.633260][T14714] veth0_macvtap: entered promiscuous mode
[  207.638023][T14714] veth1_macvtap: entered promiscuous mode
[  207.646896][T14714] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.652614][T14714] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.658854][ T5877] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.661960][ T5877] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.665982][ T5877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.669343][ T5877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.713974][T12818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.721015][T12818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.737298][T12820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.741239][T12820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.796625][T14771] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  207.828631][T14774] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2328'.
[  207.840485][T14774] geneve2: entered promiscuous mode
[  207.842290][T14774] geneve2: entered allmulticast mode
[  207.990289][T14779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.073704][T14787] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2333'.
[  208.283806][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2337'.
[  208.288304][T14801] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2337'.
[  208.296117][T14801] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  208.300976][T14801] gretap1: entered promiscuous mode
[  208.353306][T14808] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2339'.
[  208.408243][T14810] netlink: 'syz.7.2340': attribute type 10 has an invalid length.
[  208.412478][T14810] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  208.458658][T14810] mac80211_hwsim hwsim89 wlan1: entered allmulticast mode
[  208.482368][T14814] nbd: couldn't find device at index 536870912
[  208.513333][T14818] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  208.561074][T14823] netlink: 'syz.0.2345': attribute type 2 has an invalid length.
[  208.577871][T14823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2345'.
[  208.585301][T14823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2345'.
[  208.595088][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'.
[  208.615121][T14825] netlink: 'syz.7.2346': attribute type 1 has an invalid length.
[  208.617806][T14825] netlink: 216 bytes leftover after parsing attributes in process `syz.7.2346'.
[  208.766606][T14844] netlink: 'syz.7.2352': attribute type 10 has an invalid length.
[  208.773266][T14844] 8021q: adding VLAN 0 to HW filter on device team0
[  208.780176][T14844] bond0: (slave team0): Enslaving as an active interface with an up link
[  208.789313][T14844] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  208.837373][T14853] openvswitch: netlink: IP tunnel TTL not specified.
[  208.894228][T14840] netlink: 'syz.0.2351': attribute type 10 has an invalid length.
[  208.921566][T14860] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  208.954436][T14864] tipc: Started in network mode
[  208.959188][T14864] tipc: Node identity 7f000001, cluster identity 4711
[  208.962148][T14864] tipc: Enabled bearer <udp:syz2>, priority 6
[  208.970688][T14864] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  208.973774][T14864] tipc: Enabled bearer <udp:syz0>, priority 6
[  208.984543][T14871] tipc: Resetting bearer <eth:syzkaller0>
[  209.127331][   T55] Bluetooth: hci7: command tx timeout
[  209.209829][ T5740] IPVS: starting estimator thread 0...
[  209.234936][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  209.295579][T14900] IPVS: using max 66 ests per chain, 158400 per kthread
[  209.374840][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  209.474240][T14932] sock: sock_timestamping_bind_phc: sock not bind to device
[  209.506598][T14935] netlink: 'syz.0.2370': attribute type 9 has an invalid length.
[  209.514854][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  209.654821][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  209.795040][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  209.965811][ T5740] tipc: Node number set to 2130706433
[  210.018015][T14991] netlink: 'syz.7.2387': attribute type 1 has an invalid length.
[  210.095481][T14999] mac80211_hwsim hwsim88 wlan0: entered promiscuous mode
[  210.097952][T14999] macsec1: entered promiscuous mode
[  210.099845][T14999] macsec1: entered allmulticast mode
[  210.101774][T14999] mac80211_hwsim hwsim88 wlan0: entered allmulticast mode
[  210.319994][T15038] bond0: (slave dummy0): Releasing backup interface
[  210.326365][T15038] bridge_slave_0: left allmulticast mode
[  210.328747][T15038] bridge_slave_0: left promiscuous mode
[  210.331552][T15038] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.336551][T15038] bridge_slave_1: left allmulticast mode
[  210.338843][T15038] bridge_slave_1: left promiscuous mode
[  210.341201][T15038] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.348501][T15038] bond0: (slave bond_slave_0): Releasing backup interface
[  210.352516][T15038] bond0: (slave bond_slave_1): Releasing backup interface
[  210.358192][T15038] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.360797][T15038] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.363800][T15038] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.367477][T15038] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.379859][T15038] bond1: (slave geneve2): Releasing active interface
[  210.382682][T15038] geneve2: left promiscuous mode
[  210.683630][T15092] netlink: 'syz.6.2414': attribute type 2 has an invalid length.
[  210.686967][T15092] netlink: 'syz.6.2414': attribute type 8 has an invalid length.
[  211.217294][ T5847] Bluetooth: hci7: command tx timeout
[  211.370034][T15145] sctp: [Deprecated]: syz.6.2429 (pid 15145) Use of struct sctp_assoc_value in delayed_ack socket option.
[  211.370034][T15145] Use struct sctp_sack_info instead
[  211.718914][T15187] 8021q: adding VLAN 0 to HW filter on device bond23
[  211.745303][T15193] syzkaller1: entered promiscuous mode
[  211.747416][T15193] syzkaller1: entered allmulticast mode
[  211.939577][T15215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.942780][T15215] syzkaller0: entered promiscuous mode
[  211.944632][T15215] syzkaller0: entered allmulticast mode
[  211.948490][T15214] tipc: Resetting bearer <eth:syzkaller0>
[  211.954118][T15214] tipc: Disabling bearer <eth:syzkaller0>
[  212.568606][T15297] validate_nla: 2 callbacks suppressed
[  212.568654][T15297] netlink: 'syz.7.2467': attribute type 1 has an invalid length.
[  212.603230][T15309] __nla_validate_parse: 76 callbacks suppressed
[  212.603244][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2469'.
[  212.650365][T15312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2470'.
[  212.655189][T15309] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6
[  212.667037][T15313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2470'.
[  212.760568][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2473'.
[  212.792255][T15338] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2475'.
[  212.889654][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2479'.
[  212.967301][    C1] net_ratelimit: 36 callbacks suppressed
[  212.967313][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  213.053988][T15372] openvswitch: netlink: Key type 29 is not supported
[  213.087149][T15374] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2485'.
[  213.138764][T15378] netlink: 'syz.7.2487': attribute type 1 has an invalid length.
[  213.285253][ T5847] Bluetooth: hci7: command tx timeout
[  213.315834][T10529] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  213.318576][T15390] netlink: 4388 bytes leftover after parsing attributes in process `syz.7.2490'.
[  214.005042][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  214.081062][T15403] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2492'.
[  214.143155][   T33] audit: type=1107 audit(1756672249.152:4): pid=15406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  214.193584][T15413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  214.225339][T15413] IPv6: NLM_F_CREATE should be set when creating new route
[  214.228159][T15413] IPv6: NLM_F_CREATE should be set when creating new route
[  214.231598][T15413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  214.247166][T15415] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2494'.
[  214.425964][T15418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.427229][T15417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.654040][T15437] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  215.044926][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  215.364843][ T5847] Bluetooth: hci7: command tx timeout
[  215.743766][T15511] openvswitch: netlink: Missing valid actions attribute.
[  215.746268][T15511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.776377][T15513] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  215.928133][T15523] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  215.969262][T15540] netlink: 'syz.7.2524': attribute type 2 has an invalid length.
[  215.972541][T15536] netlink: 'syz.0.2522': attribute type 1 has an invalid length.
[  215.979469][T15540] k*]: entered promiscuous mode
[  215.998634][T15536] 8021q: adding VLAN 0 to HW filter on device bond24
[  216.016465][T15536] bond24: (slave veth19): Enslaving as an active interface with a down link
[  216.022475][T15540] veth0_to_team: entered promiscuous mode
[  216.025016][T15540] veth0_to_team: entered allmulticast mode
[  216.191768][T15558] netlink: 'syz.7.2530': attribute type 178 has an invalid length.
[  216.211673][T15561] netlink: 'syz.0.2532': attribute type 1 has an invalid length.
[  216.214327][T15561] NCSI netlink: No device for ifindex 0
[  216.288599][T15569] netlink: 'syz.0.2535': attribute type 10 has an invalid length.
[  216.350619][T15569] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  216.353760][T15569] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  216.512056][T15592] veth21: entered promiscuous mode
[  216.521299][T15594] bond24: (slave veth19): Releasing active interface
[  216.547149][ T1272] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  216.567694][T15596] sctp: [Deprecated]: syz.0.2543 (pid 15596) Use of struct sctp_assoc_value in delayed_ack socket option.
[  216.567694][T15596] Use struct sctp_sack_info instead
[  216.575233][T15596] netlink: 'syz.0.2543': attribute type 10 has an invalid length.
[  216.634904][ T1272] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  217.080860][T15603] bpq0: left promiscuous mode
[  217.150646][T15610] netlink: 'syz.7.2547': attribute type 89 has an invalid length.
[  217.153764][T15610] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  217.157791][T15610] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  218.097323][T15616] __nla_validate_parse: 18 callbacks suppressed
[  218.097361][T15616] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2549'.
[  218.132779][T15618] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2550'.
[  218.175092][    C1] net_ratelimit: 6 callbacks suppressed
[  218.175109][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  219.095619][T15631] vxcan1: entered allmulticast mode
[  219.098094][T15631] vxcan1: left allmulticast mode
[  219.185041][T15635] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2554'.
[  219.191505][T15635] syz_tun: entered allmulticast mode
[  219.195864][T15635] dvmrp8: entered allmulticast mode
[  219.214998][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  219.226149][T15634] syz_tun: left allmulticast mode
[  219.228124][T15634] dvmrp8: left allmulticast mode
[  219.377499][T15645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.245001][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  220.262738][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2560'.
[  220.266008][T15652] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  221.295057][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  222.325083][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  223.364980][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  224.405025][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  225.445001][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  226.485107][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  227.466061][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  227.468784][   T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  227.471445][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  227.474894][   T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  227.478916][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  227.524897][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  227.559079][T15671] chnl_net:caif_netlink_parms(): no params data found
[  227.582215][T15671] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.584600][T15671] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.587286][T15671] bridge_slave_0: entered allmulticast mode
[  227.589713][T15671] bridge_slave_0: entered promiscuous mode
[  227.592561][T15671] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.595089][T15671] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.597637][T15671] bridge_slave_1: entered allmulticast mode
[  227.600114][T15671] bridge_slave_1: entered promiscuous mode
[  227.610790][T15671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.615625][T15671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.626761][T15671] team0: Port device team_slave_0 added
[  227.629604][T15671] team0: Port device team_slave_1 added
[  227.639360][T15671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.641750][T15671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.650417][T15671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.654629][T15671] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.657229][T15671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.666220][T15671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.681936][T15671] hsr_slave_0: entered promiscuous mode
[  227.684335][T15671] hsr_slave_1: entered promiscuous mode
[  227.686906][T15671] debugfs: 'hsr0' already exists in 'hsr'
[  227.688870][T15671] Cannot create hsr debugfs directory
[  227.735217][T15671] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  227.738640][T15671] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  227.742179][T15671] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  227.746026][T15671] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  227.758174][T15671] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.760556][T15671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.763108][T15671] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.765894][T15671] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.786294][T15671] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.792856][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.796847][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.801972][T15671] 8021q: adding VLAN 0 to HW filter on device team0
[  227.806306][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.808670][ T8462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.815577][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.817894][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.877432][T15671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.947470][T15671] veth0_vlan: entered promiscuous mode
[  227.951267][T15671] veth1_vlan: entered promiscuous mode
[  227.966338][T15671] veth0_macvtap: entered promiscuous mode
[  227.969551][T15671] veth1_macvtap: entered promiscuous mode
[  227.978488][T15671] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.984295][T15671] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.990049][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.993837][ T5721] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.999354][ T5721] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.004196][ T5721] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.031358][ T8464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.033989][ T8464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.049471][T12820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.052634][T12820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.260681][T15712] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2566'.
[  228.349209][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2568'.
[  228.355697][T15719] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2568'.
[  228.564935][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  228.720753][T15743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.755615][T15743] netlink: 'syz.8.2571': attribute type 1 has an invalid length.
[  228.759114][T15743] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2571'.
[  228.895865][T15756] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2576'.
[  228.899146][T15756] nbd: socks must be embedded in a SOCK_ITEM attr
[  228.901818][T15756] block nbd4: shutting down sockets
[  228.974620][T15760] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  228.997639][T15769] netlink: 'syz.8.2578': attribute type 1 has an invalid length.
[  229.003959][T15769] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2578'.
[  229.008796][T15769] NCSI netlink: No device for ifindex 0
[  229.029340][T15772] tipc: Started in network mode
[  229.031381][T15772] tipc: Node identity , cluster identity 4711
[  229.033863][T15772] tipc: Failed to obtain node identity
[  229.037836][T15772] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  229.086932][T15779] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  229.288782][T15789] sctp: [Deprecated]: syz.8.2584 (pid 15789) Use of struct sctp_assoc_value in delayed_ack socket option.
[  229.288782][T15789] Use struct sctp_sack_info instead
[  229.317860][T15796] netlink: 'syz.8.2585': attribute type 11 has an invalid length.
[  229.351345][T15799] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2586'.
[  229.399663][T15806] netlink: 'syz.8.2588': attribute type 1 has an invalid length.
[  229.402902][T15806] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2588'.
[  229.412489][T15806] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.524921][ T5847] Bluetooth: hci8: command tx timeout
[  229.614874][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  230.655111][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  231.250475][T15806] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.604911][ T5847] Bluetooth: hci8: command tx timeout
[  231.684978][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  232.069143][T15806] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.108358][T15806] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.152693][   T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.160959][   T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.167563][ T5721] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.173398][ T5721] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.247857][T15815] netlink: 'syz.8.2591': attribute type 3 has an invalid length.
[  232.251000][T15815] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2591'.
[  232.276994][   T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  232.279885][   T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  232.282688][   T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  232.286638][   T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  232.289353][   T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  232.359948][T15817] chnl_net:caif_netlink_parms(): no params data found
[  232.381366][T15830] openvswitch: netlink: Flow key attr not present in new flow.
[  232.392116][T15830] netlink: 'syz.8.2594': attribute type 9 has an invalid length.
[  232.396736][T15830] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2594'.
[  232.438933][T15817] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.442052][T15817] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.448872][T15817] bridge_slave_0: entered allmulticast mode
[  232.452152][T15817] bridge_slave_0: entered promiscuous mode
[  232.459787][T15817] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.462820][T15817] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.466937][T15817] bridge_slave_1: entered allmulticast mode
[  232.469528][T15817] bridge_slave_1: entered promiscuous mode
[  232.480541][T15817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.485340][T15817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.497452][T15817] team0: Port device team_slave_0 added
[  232.501302][T15817] team0: Port device team_slave_1 added
[  232.515637][T15835] netlink: 'syz.8.2595': attribute type 2 has an invalid length.
[  232.530152][T15835] k*]: entered promiscuous mode
[  232.532908][T15817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.536164][T15817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.546872][T15817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.551999][T15817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.556765][T15817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.567381][T15817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.581513][T15836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  232.601808][T15835] veth0_to_team: entered promiscuous mode
[  232.604168][T15835] veth0_to_team: entered allmulticast mode
[  232.611782][T15817] hsr_slave_0: entered promiscuous mode
[  232.615996][T15817] hsr_slave_1: entered promiscuous mode
[  232.618535][T15817] debugfs: 'hsr0' already exists in 'hsr'
[  232.624916][T15817] Cannot create hsr debugfs directory
[  232.689433][T15817] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  232.694623][T15817] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  232.703542][T15817] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  232.711759][T15817] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  232.724997][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  232.759337][T15817] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.769459][T15817] 8021q: adding VLAN 0 to HW filter on device team0
[  232.774465][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.776833][ T8462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.793113][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.795523][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.804116][T15817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  232.809332][T15817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  232.903169][T15817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.983242][T15879] netlink: 'syz.8.2602': attribute type 3 has an invalid length.
[  233.041395][T15817] veth0_vlan: entered promiscuous mode
[  233.053401][T15817] veth1_vlan: entered promiscuous mode
[  233.070717][T15817] veth0_macvtap: entered promiscuous mode
[  233.075905][T15817] veth1_macvtap: entered promiscuous mode
[  233.088759][T15817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.097133][T15817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.104253][ T5721] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.109401][ T5721] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.113065][ T5721] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.117156][ T5721] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.159908][ T8462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.162613][ T8462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.187029][T12820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.190048][T12820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.286782][T15894] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  233.685077][ T5847] Bluetooth: hci8: command tx timeout
[  233.765078][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  233.977284][ T8463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.980802][ T8463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.149013][T15909] __nla_validate_parse: 5 callbacks suppressed
[  234.149027][T15909] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2606'.
[  234.174042][T15911] netlink: 'syz.9.2607': attribute type 1 has an invalid length.
[  234.204603][T15913] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  234.325293][ T5847] Bluetooth: hci9: command tx timeout
[  234.342959][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2611'.
[  234.398066][T15926] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.456000][T15927] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  234.815050][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  235.371029][T15926] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.415800][   T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  235.418347][   T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  235.421078][   T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  235.423986][   T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  235.427120][   T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  235.443014][T15940] bridge_slave_0: left allmulticast mode
[  235.447317][T15940] bridge_slave_0: left promiscuous mode
[  235.449384][T15940] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.453041][T15940] bridge_slave_1: left allmulticast mode
[  235.455266][T15940] bridge_slave_1: left promiscuous mode
[  235.457246][T15940] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.461473][T15940] bond0: (slave bond_slave_0): Releasing backup interface
[  235.467378][T15940] bond0: (slave bond_slave_1): Releasing backup interface
[  235.472658][T15940] team0: Port device team_slave_0 removed
[  235.477126][T15940] team0: Port device team_slave_1 removed
[  235.479396][T15940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.481912][T15940] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.485440][T15940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.487845][T15940] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.556285][T15943] netlink: 'syz.8.2616': attribute type 10 has an invalid length.
[  235.573599][T15943] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  235.596516][T15938] chnl_net:caif_netlink_parms(): no params data found
[  235.622313][T15938] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.624988][T15938] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.627378][T15938] bridge_slave_0: entered allmulticast mode
[  235.629698][T15938] bridge_slave_0: entered promiscuous mode
[  235.632652][T15938] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.636499][T15938] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.639205][T15938] bridge_slave_1: entered allmulticast mode
[  235.641873][T15938] bridge_slave_1: entered promiscuous mode
[  235.652778][T15938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.657820][T15938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.668511][T15938] team0: Port device team_slave_0 added
[  235.671363][T15938] team0: Port device team_slave_1 added
[  235.680592][T15938] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.682869][T15938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.691683][T15938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.696486][T15938] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.698838][T15938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.707547][T15938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.723209][T15938] hsr_slave_0: entered promiscuous mode
[  235.725782][T15938] hsr_slave_1: entered promiscuous mode
[  235.727953][T15938] debugfs: 'hsr0' already exists in 'hsr'
[  235.729928][T15938] Cannot create hsr debugfs directory
[  235.765097][   T55] Bluetooth: hci8: command tx timeout
[  235.844894][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  235.971099][T15938] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  235.975123][T15938] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  235.979140][T15938] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  235.982662][T15938] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  235.998853][T15938] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.001723][T15938] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.004234][T15938] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.007021][T15938] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.038883][T15938] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.045550][T12820] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.048124][T12820] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.053612][T15938] 8021q: adding VLAN 0 to HW filter on device team0
[  236.059331][T12820] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.061621][T12820] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.075413][T12820] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.077966][T12820] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.161537][T15938] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.177836][T15938] veth0_vlan: entered promiscuous mode
[  236.182047][T15938] veth1_vlan: entered promiscuous mode
[  236.193020][T15938] veth0_macvtap: entered promiscuous mode
[  236.196390][T15938] veth1_macvtap: entered promiscuous mode
[  236.203776][T15938] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.208382][T15938] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.215129][ T5721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.219020][ T5721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.233089][ T5721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.237895][ T5721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.281690][T12818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.284298][T12818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.303184][T12818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.306280][T12818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.323971][T15964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.332600][T15968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.368700][T15974] tipc: Started in network mode
[  236.370922][T15974] tipc: Node identity a6445e6d1e89, cluster identity 4711
[  236.374059][T15974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.381473][T15974] syzkaller0: entered promiscuous mode
[  236.384066][T15974] syzkaller0: entered allmulticast mode
[  236.393886][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'.
[  236.399405][T15976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2620'.
[  236.402777][T15976] tipc: Invalid UDP bearer configuration
[  236.402802][T15976] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  236.403484][T15974] netlink: 'syz.8.2619': attribute type 1 has an invalid length.
[  236.405609][   T55] Bluetooth: hci9: command tx timeout
[  236.416069][T15974] tipc: Resetting bearer <eth:syzkaller0>
[  236.419137][T15973] tipc: Resetting bearer <eth:syzkaller0>
[  236.422775][T15973] tipc: Disabling bearer <eth:syzkaller0>
[  236.430373][T15979] netlink: 'syz.2.2621': attribute type 2 has an invalid length.
[  236.434068][T15926] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.441696][T15979] ave_0: entered promiscuous mode
[  236.499798][T15926] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.572528][T10529] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.580817][T10529] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.589937][ T5721] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.598471][ T5721] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.643696][T15997] openvswitch: netlink: Key type 1799 is out of range max 32
[  236.709692][T16002] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2629'.
[  236.720322][T16003] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2629'.
[  236.721769][T16002] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2629'.
[  236.736912][T15996] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2626'.
[  236.885124][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  236.923430][T16019] netlink: 'syz.8.2635': attribute type 1 has an invalid length.
[  236.929836][T16019] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2635'.
[  237.023480][T16031] vxcan1: entered allmulticast mode
[  237.025729][T16031] vxcan1: left allmulticast mode
[  237.444883][   T55] Bluetooth: hci10: command tx timeout
[  237.935238][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  238.484933][   T55] Bluetooth: hci9: command tx timeout
[  238.975004][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  239.524867][   T55] Bluetooth: hci10: command tx timeout
[  240.004842][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  240.574802][   T55] Bluetooth: hci9: command tx timeout
[  241.045061][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  241.126017][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  241.605763][   T55] Bluetooth: hci10: command tx timeout
[  242.094841][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  243.125044][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  243.685425][   T55] Bluetooth: hci10: command tx timeout
[  244.174979][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  245.215043][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  246.245861][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  247.285014][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  248.324965][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  249.365214][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  250.404958][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  251.445372][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  252.412829][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  252.416516][ T5847] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  252.419498][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  252.422689][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  252.425745][ T5847] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  252.484882][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  252.492451][   T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  252.495222][   T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  252.497623][   T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  252.500358][   T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  252.502897][   T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  252.507132][T16057] chnl_net:caif_netlink_parms(): no params data found
[  252.513217][ T5236] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  252.516132][ T5236] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  252.518819][ T5236] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  252.521690][ T5236] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  252.524439][ T5236] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  252.599507][T16057] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.602140][T16057] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.605167][T16057] bridge_slave_0: entered allmulticast mode
[  252.607958][T16057] bridge_slave_0: entered promiscuous mode
[  252.620052][T16057] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.622657][T16057] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.627805][T16057] bridge_slave_1: entered allmulticast mode
[  252.630660][T16057] bridge_slave_1: entered promiscuous mode
[  252.666483][T16057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.682280][T16057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.720948][T16057] team0: Port device team_slave_0 added
[  252.726930][T16057] team0: Port device team_slave_1 added
[  252.733366][T16063] chnl_net:caif_netlink_parms(): no params data found
[  252.750483][T16057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.752769][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.761597][T16057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.767453][T16057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.770028][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.780069][T16057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.786597][T16064] chnl_net:caif_netlink_parms(): no params data found
[  252.852339][T16057] hsr_slave_0: entered promiscuous mode
[  252.854536][T16057] hsr_slave_1: entered promiscuous mode
[  252.856863][T16057] debugfs: 'hsr0' already exists in 'hsr'
[  252.858658][T16057] Cannot create hsr debugfs directory
[  252.864438][T16063] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.867517][T16063] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.869933][T16063] bridge_slave_0: entered allmulticast mode
[  252.872312][T16063] bridge_slave_0: entered promiscuous mode
[  252.875676][T16064] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.878222][T16064] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.880598][T16064] bridge_slave_0: entered allmulticast mode
[  252.883244][T16064] bridge_slave_0: entered promiscuous mode
[  252.886361][T16063] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.888764][T16063] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.891168][T16063] bridge_slave_1: entered allmulticast mode
[  252.893619][T16063] bridge_slave_1: entered promiscuous mode
[  252.902190][T16064] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.904671][T16064] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.907386][T16064] bridge_slave_1: entered allmulticast mode
[  252.909818][T16064] bridge_slave_1: entered promiscuous mode
[  252.935373][T16063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.941104][T16064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.946428][T16063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.964323][T16064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.013676][T16064] team0: Port device team_slave_0 added
[  253.017395][T16063] team0: Port device team_slave_0 added
[  253.020843][T16064] team0: Port device team_slave_1 added
[  253.029127][T16063] team0: Port device team_slave_1 added
[  253.066135][T16064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.069063][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.079510][T16064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.084101][T16057] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.089263][T16063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.091625][T16063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.100657][T16063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.105438][T16064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.107665][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.117310][T16064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.122429][T16063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.125451][T16063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.135245][T16063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.139906][T16057] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.177148][T16063] hsr_slave_0: entered promiscuous mode
[  253.180157][T16063] hsr_slave_1: entered promiscuous mode
[  253.182859][T16063] debugfs: 'hsr0' already exists in 'hsr'
[  253.185448][T16063] Cannot create hsr debugfs directory
[  253.188974][T16064] hsr_slave_0: entered promiscuous mode
[  253.191225][T16064] hsr_slave_1: entered promiscuous mode
[  253.193465][T16064] debugfs: 'hsr0' already exists in 'hsr'
[  253.197304][T16064] Cannot create hsr debugfs directory
[  253.200929][T16057] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.246443][T16057] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.307522][T16057] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  253.311109][T16057] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  253.314633][T16057] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  253.318554][T16057] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  253.332891][T16057] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.335408][T16057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.337960][T16057] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.340219][T16057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.363856][T16057] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.373191][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.377931][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.388829][T16057] 8021q: adding VLAN 0 to HW filter on device team0
[  253.393483][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.395975][ T8463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.400922][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.403540][ T8463] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.475128][T16057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.506536][T16064] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.525108][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  253.536541][T16064] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.579133][T16064] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.592893][T16057] veth0_vlan: entered promiscuous mode
[  253.600105][T16057] veth1_vlan: entered promiscuous mode
[  253.611649][T16057] veth0_macvtap: entered promiscuous mode
[  253.619627][T16064] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.626336][T16057] veth1_macvtap: entered promiscuous mode
[  253.636366][T16057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.642296][T16057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.647259][T16046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.650310][T16038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.653900][T16038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.657664][T16038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.700631][T12819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.703291][T12819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.722560][T16063] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  253.730552][T12819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.732553][T16063] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  253.733096][T12819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.740043][T16063] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  253.748210][T16063] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  253.752314][T16064] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  253.762665][T16064] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  253.768704][T16064] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  253.774909][T16064] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  253.819194][T16063] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.836781][T16063] 8021q: adding VLAN 0 to HW filter on device team0
[  253.841791][T16064] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.848407][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.850701][ T8463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.854254][T16113] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2643'.
[  253.860820][T16064] 8021q: adding VLAN 0 to HW filter on device team0
[  253.863630][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.865970][ T8464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.871359][T12819] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.873873][T12819] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.881544][T12819] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.883786][T12819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.888352][T16113] tipc: Started in network mode
[  253.889929][T16113] tipc: Node identity ac14140f, cluster identity 4711
[  253.895289][T16113] tipc: New replicast peer: 255.255.255.255
[  253.898198][T16113] tipc: Enabled bearer <udp:syz2>, priority 6
[  253.919535][T16063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  253.922945][T16063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  254.005824][T16063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.029428][T16064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.060813][T16063] veth0_vlan: entered promiscuous mode
[  254.074214][T16123] netlink: 'syz.4.2644': attribute type 2 has an invalid length.
[  254.075610][T16063] veth1_vlan: entered promiscuous mode
[  254.080599][T16064] veth0_vlan: entered promiscuous mode
[  254.086462][T16064] veth1_vlan: entered promiscuous mode
[  254.097743][T16123] : entered promiscuous mode
[  254.100329][T16064] veth0_macvtap: entered promiscuous mode
[  254.105572][T16123] netlink: 'syz.4.2644': attribute type 2 has an invalid length.
[  254.108456][T16063] veth0_macvtap: entered promiscuous mode
[  254.111399][T16064] veth1_macvtap: entered promiscuous mode
[  254.114154][T16063] veth1_macvtap: entered promiscuous mode
[  254.118411][T16123] netlink: 'syz.4.2644': attribute type 2 has an invalid length.
[  254.122402][T16063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.128790][T16123] netlink: 'syz.4.2644': attribute type 2 has an invalid length.
[  254.129926][T16063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.135652][T16123] netlink: 'syz.4.2644': attribute type 2 has an invalid length.
[  254.138672][T16064] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.142491][T16123] netlink: 'syz.4.2644': attribute type 2 has an invalid length.
[  254.143272][T16046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.149848][T16046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.154159][T16064] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.158070][T16123] netlink: 'syz.4.2644': attribute type 2 has an invalid length.
[  254.159877][T16046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.168314][T16046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.174154][T16046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.174394][T16123] netlink: 'syz.4.2644': attribute type 2 has an invalid length.
[  254.179103][T16046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.183358][T16046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.189846][T16123] netlink: 'syz.4.2644': attribute type 2 has an invalid length.
[  254.193026][T16123] netlink: 'syz.4.2644': attribute type 2 has an invalid length.
[  254.199588][T16046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.252404][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.260649][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.277704][ T8463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.280200][ T8463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.291184][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.294242][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.328665][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.331901][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.339737][T16133] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2642'.
[  254.379887][T16135] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.382315][T16135] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.411950][T16135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.419550][T16135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.479935][T16046] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.484943][ T5236] Bluetooth: hci11: command tx timeout
[  254.489217][T16046] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.494270][T16046] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.503173][T16046] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.525976][ T5975] IPVS: starting estimator thread 0...
[  254.527787][ T5885] IPVS: starting estimator thread 0...
[  254.563890][T16147] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2648'.
[  254.571482][ T5236] Bluetooth: hci13: command tx timeout
[  254.575017][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  254.577539][ T5236] Bluetooth: hci12: command tx timeout
[  254.603492][T16149] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2648'.
[  254.620854][T16144] IPVS: using max 139 ests per chain, 333600 per kthread
[  254.627672][T16143] IPVS: using max 137 ests per chain, 328800 per kthread
[  254.702671][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2650'.
[  254.819617][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'.
[  254.845601][T16176] netlink: 'syz.4.2653': attribute type 11 has an invalid length.
[  254.885499][T16183] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  254.889189][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2656'.
[  255.014898][    T9] tipc: Node number set to 2886997007
[  255.059234][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2662'.
[  255.066174][T16211] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  255.148402][T16223] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2664'.
[  255.243229][T16241] 8021q: adding VLAN 0 to HW filter on device bond1
[  255.605124][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  256.027603][T16306] tipc: Failed to obtain node identity
[  256.030291][T16306] tipc: Enabling of bearer <ib:wlan0> rejected, failed to enable media
[  256.042529][T16311] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2678'.
[  256.101227][T16319] : entered promiscuous mode
[  256.142735][T16326] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  256.341334][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  256.564912][ T5847] Bluetooth: hci11: command tx timeout
[  256.645066][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  256.647746][ T5847] Bluetooth: hci12: command tx timeout
[  256.647850][   T55] Bluetooth: hci13: command tx timeout
[  257.191462][T16346] tipc: Can't bind to reserved service type 1
[  257.216358][T16359] nbd: must specify an index to disconnect
[  257.285062][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  257.293189][T16371] mac80211_hwsim hwsim107 wlan1: entered allmulticast mode
[  257.306076][T16371] bond0: (slave dummy0): Releasing backup interface
[  257.313672][T16371] bridge_slave_0: left allmulticast mode
[  257.317757][T16371] bridge_slave_0: left promiscuous mode
[  257.320253][T16371] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.326920][T16371] bridge_slave_1: left allmulticast mode
[  257.329081][T16371] bridge_slave_1: left promiscuous mode
[  257.330947][T16371] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.337230][T16371] bond0: (slave bond_slave_0): Releasing backup interface
[  257.341169][T16371] bond0: (slave bond_slave_1): Releasing backup interface
[  257.348074][T16371] team0: Port device team_slave_0 removed
[  257.352755][T16371] team0: Port device team_slave_1 removed
[  257.357900][T16371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.360878][T16371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.368630][T16371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.371615][T16371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.390883][T16371] mac80211_hwsim hwsim107 wlan1: left allmulticast mode
[  257.395641][T16371] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  257.431151][T16379] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  257.674146][T16399] tap0: tun_chr_ioctl cmd 1074025681
[  257.685083][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  257.690012][T16399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.842585][T16418] : entered promiscuous mode
[  257.897736][T16431] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  257.902109][T16431] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  257.910816][T16431] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  257.911327][T16399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.958848][T16399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.987838][T16399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.003577][T16439] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  258.053271][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.060369][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.069256][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.072244][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.447732][T16485] ip6tnl2: entered promiscuous mode
[  258.535556][T16499] 8021q: adding VLAN 0 to HW filter on device bond1
[  258.543626][T16500] bond1: (slave geneve2): making interface the new active one
[  258.552275][T16500] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  258.565238][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.571116][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.578842][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.581587][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.587736][T16504] ipvlan2: entered promiscuous mode
[  258.590523][T16504] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  258.610358][    T9] IPVS: starting estimator thread 0...
[  258.646401][ T5236] Bluetooth: hci11: command tx timeout
[  258.695378][T16510] IPVS: using max 137 ests per chain, 328800 per kthread
[  258.702208][T16524] tipc: Started in network mode
[  258.703848][T16524] tipc: Node identity 1ad186036c9f, cluster identity 4711
[  258.707488][T16524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.710937][T16524] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  258.717768][T16524] tipc: Resetting bearer <eth:syzkaller0>
[  258.724990][ T5236] Bluetooth: hci12: command tx timeout
[  258.734831][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  258.737572][ T5236] Bluetooth: hci13: command tx timeout
[  258.744489][T16524] tipc: Disabling bearer <eth:syzkaller0>
[  258.754028][T16531] mac80211_hwsim hwsim105 wlan0: entered promiscuous mode
[  258.757712][T16531] macsec1: entered promiscuous mode
[  258.759482][T16531] macsec1: entered allmulticast mode
[  258.761654][T16531] mac80211_hwsim hwsim105 wlan0: entered allmulticast mode
[  258.802853][T16542] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  258.807867][T16542] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  258.991614][T16553] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  259.634702][T16561] validate_nla: 37 callbacks suppressed
[  259.636882][T16561] netlink: 'syz.3.2742': attribute type 1 has an invalid length.
[  259.639591][T16561] netlink: 'syz.3.2742': attribute type 1 has an invalid length.
[  259.649088][T16561] wg2: entered promiscuous mode
[  259.651215][T16561] wg2: entered allmulticast mode
[  259.692477][T16561] netlink: 'syz.3.2742': attribute type 1 has an invalid length.
[  259.701919][T16561] 8021q: adding VLAN 0 to HW filter on device bond2
[  259.764890][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  259.829628][T16564] netlink: 'syz.3.2743': attribute type 2 has an invalid length.
[  259.934521][T16569] __nla_validate_parse: 21 callbacks suppressed
[  259.934531][T16569] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2744'.
[  259.953186][T16569] IPVS: Scheduler module ip_vs_sip not found
[  259.971818][T16572] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2745'.
[  260.113489][T16581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.204295][T16586] wg1 speed is unknown, defaulting to 1000
[  260.208203][T16586] wg1 speed is unknown, defaulting to 1000
[  260.210336][T16586] wg1 speed is unknown, defaulting to 1000
[  260.214562][T16586] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  260.221902][T16586] wg1 speed is unknown, defaulting to 1000
[  260.224429][T16586] wg1 speed is unknown, defaulting to 1000
[  260.227228][T16586] wg1 speed is unknown, defaulting to 1000
[  260.229528][T16586] wg1 speed is unknown, defaulting to 1000
[  260.231789][T16586] wg1 speed is unknown, defaulting to 1000
[  260.234024][T16586] wg1 speed is unknown, defaulting to 1000
[  260.236394][T16586] wg1 speed is unknown, defaulting to 1000
[  260.238646][T16586] wg1 speed is unknown, defaulting to 1000
[  260.240848][T16586] wg1 speed is unknown, defaulting to 1000
[  260.243126][T16586] wg1 speed is unknown, defaulting to 1000
[  260.245657][T16586] wg1 speed is unknown, defaulting to 1000
[  260.247865][T16586] wg1 speed is unknown, defaulting to 1000
[  260.250041][T16586] wg1 speed is unknown, defaulting to 1000
[  260.252293][T16586] wg1 speed is unknown, defaulting to 1000
[  260.260549][T16585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2750'.
[  260.523566][T16606] syzkaller0: entered promiscuous mode
[  260.525878][T16606] syzkaller0: entered allmulticast mode
[  260.577931][T16609] netlink: 'syz.4.2754': attribute type 2 has an invalid length.
[  260.600779][T16612] openvswitch: netlink: Missing valid actions attribute.
[  260.603807][T16612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.725213][ T5236] Bluetooth: hci11: command tx timeout
[  260.804889][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  260.808304][ T5236] Bluetooth: hci13: command tx timeout
[  260.808797][   T55] Bluetooth: hci12: command tx timeout
[  261.146783][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2758'.
[  261.157743][T16622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2758'.
[  261.198681][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2759'.
[  261.205840][T16626] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  261.208618][T16626] CPU: 0 UID: 0 PID: 16626 Comm: syz.3.2759 Not tainted syzkaller #0 PREEMPT(full) 
[  261.208629][T16626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  261.208634][T16626] Call Trace:
[  261.208638][T16626]  <TASK>
[  261.208641][T16626]  dump_stack_lvl+0x189/0x250
[  261.208655][T16626]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.208669][T16626]  ? __pfx__printk+0x10/0x10
[  261.208679][T16626]  ? kernfs_root+0x1c/0x230
[  261.208688][T16626]  ? kernfs_path_from_node+0x2f/0x290
[  261.208696][T16626]  ? kernfs_path_from_node+0x250/0x290
[  261.208703][T16626]  ? kernfs_path_from_node+0x2f/0x290
[  261.208712][T16626]  sysfs_warn_dup+0x8e/0xa0
[  261.208721][T16626]  sysfs_do_create_link_sd+0xc0/0x110
[  261.208729][T16626]  device_add_class_symlinks+0x1cf/0x240
[  261.208738][T16626]  device_add+0x475/0xb50
[  261.208745][T16626]  wiphy_register+0x1ba6/0x28d0
[  261.208758][T16626]  ? __pfx_wiphy_register+0x10/0x10
[  261.208767][T16626]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  261.208776][T16626]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  261.208785][T16626]  ieee80211_register_hw+0x3425/0x4080
[  261.208797][T16626]  ? ieee80211_register_hw+0x1461/0x4080
[  261.208806][T16626]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  261.208814][T16626]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  261.208825][T16626]  ? __hrtimer_setup+0x187/0x210
[  261.208832][T16626]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  261.208843][T16626]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  261.208856][T16626]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  261.208865][T16626]  ? trace_kmalloc+0x1f/0xd0
[  261.208873][T16626]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  261.208883][T16626]  ? kstrndup+0xbf/0x160
[  261.208892][T16626]  hwsim_new_radio_nl+0xea4/0x1b10
[  261.208901][T16626]  ? __pfx___nla_validate_parse+0x10/0x10
[  261.208917][T16626]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  261.208949][T16626]  ? __nla_parse+0x40/0x60
[  261.208962][T16626]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  261.208972][T16626]  genl_family_rcv_msg_doit+0x215/0x300
[  261.208983][T16626]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  261.208993][T16626]  ? bpf_lsm_capable+0x9/0x20
[  261.209003][T16626]  ? security_capable+0x7e/0x2e0
[  261.209015][T16626]  genl_rcv_msg+0x60e/0x790
[  261.209024][T16626]  ? __pfx_genl_rcv_msg+0x10/0x10
[  261.209032][T16626]  ? __kasan_slab_alloc+0x6c/0x80
[  261.209041][T16626]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  261.209049][T16626]  ? __netlink_lookup+0xbd/0x810
[  261.209055][T16626]  ? rcu_is_watching+0x15/0xb0
[  261.209063][T16626]  netlink_rcv_skb+0x208/0x470
[  261.209073][T16626]  ? __pfx_genl_rcv_msg+0x10/0x10
[  261.209081][T16626]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  261.209092][T16626]  ? lock_release+0x4b/0x3e0
[  261.209103][T16626]  ? down_read+0x1ad/0x2e0
[  261.209109][T16626]  genl_rcv+0x28/0x40
[  261.209116][T16626]  netlink_unicast+0x82f/0x9e0
[  261.209126][T16626]  ? __pfx_netlink_unicast+0x10/0x10
[  261.209135][T16626]  ? netlink_sendmsg+0x642/0xb30
[  261.209144][T16626]  ? skb_put+0x11b/0x210
[  261.209151][T16626]  netlink_sendmsg+0x805/0xb30
[  261.209163][T16626]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.209172][T16626]  ? futex_unqueue+0x22/0x240
[  261.209180][T16626]  ? aa_sock_msg_perm+0xf1/0x1d0
[  261.209186][T16626]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  261.209194][T16626]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.209203][T16626]  __sock_sendmsg+0x21c/0x270
[  261.209213][T16626]  ____sys_sendmsg+0x505/0x830
[  261.209221][T16626]  ? __pfx_____sys_sendmsg+0x10/0x10
[  261.209229][T16626]  ? import_iovec+0x74/0xa0
[  261.209237][T16626]  ___sys_sendmsg+0x21f/0x2a0
[  261.209244][T16626]  ? __pfx____sys_sendmsg+0x10/0x10
[  261.209252][T16626]  ? futex_wait+0x285/0x360
[  261.209265][T16626]  ? __fget_files+0x2a/0x420
[  261.209275][T16626]  ? __fget_files+0x3a0/0x420
[  261.209287][T16626]  __x64_sys_sendmsg+0x19b/0x260
[  261.209294][T16626]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  261.209304][T16626]  ? rcu_is_watching+0x15/0xb0
[  261.209311][T16626]  do_syscall_64+0xfa/0x3b0
[  261.209321][T16626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.209328][T16626]  ? exc_page_fault+0x9f/0xf0
[  261.209338][T16626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.209344][T16626] RIP: 0033:0x7f1ad678ebe9
[  261.209352][T16626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.209358][T16626] RSP: 002b:00007f1ad7524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  261.209367][T16626] RAX: ffffffffffffffda RBX: 00007f1ad69c5fa0 RCX: 00007f1ad678ebe9
[  261.209372][T16626] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  261.209377][T16626] RBP: 00007f1ad6811e19 R08: 0000000000000000 R09: 0000000000000000
[  261.209381][T16626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.209386][T16626] R13: 00007f1ad69c6038 R14: 00007f1ad69c5fa0 R15: 00007fffd3acdac8
[  261.209393][T16626]  </TASK>
[  261.498911][T16643] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  261.538396][T16648] netlink: 'syz.3.2767': attribute type 12 has an invalid length.
[  261.542197][T16650] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2768'.
[  261.617442][T16659] netlink: 'syz.4.2771': attribute type 4 has an invalid length.
[  261.703519][T16666] netlink: zone id is out of range
[  261.708616][T16666] netlink: zone id is out of range
[  261.711804][T16666] netlink: zone id is out of range
[  261.713766][T16666] netlink: zone id is out of range
[  261.764536][T16670] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2776'.
[  261.803018][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2778'.
[  261.809781][T16674] netlink: 'syz.4.2778': attribute type 1 has an invalid length.
[  261.812277][T16674] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2778'.
[  261.962740][T16699] netlink: 'syz.4.2786': attribute type 1 has an invalid length.
[  262.682654][T16702] netlink: 'syz.3.2787': attribute type 10 has an invalid length.
[  262.792270][T16707] wg1 speed is unknown, defaulting to 1000
[  263.319473][T16744] bond0: (slave wlan1): Releasing backup interface
[  263.323635][    T9] wg1 speed is unknown, defaulting to 1000
[  264.483841][T16806] bond3: entered promiscuous mode
[  264.488421][T16806] 8021q: adding VLAN 0 to HW filter on device bond3
[  264.512809][T16812] bond0: (slave wlan1): Opening slave failed
[  264.974876][    C1] net_ratelimit: 8 callbacks suppressed
[  264.974886][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  265.167845][T16836] bridge_slave_0: left allmulticast mode
[  265.170264][T16836] bridge_slave_0: left promiscuous mode
[  265.172713][T16836] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.177164][T16836] bridge_slave_1: left allmulticast mode
[  265.179001][T16836] bridge_slave_1: left promiscuous mode
[  265.180925][T16836] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.184810][T16836] bond0: (slave bond_slave_0): Releasing backup interface
[  265.188032][T16836] bond0: (slave bond_slave_1): Releasing backup interface
[  265.191487][T16836] team0: Port device team_slave_0 removed
[  265.194117][T16836] team0: Port device team_slave_1 removed
[  265.196429][T16836] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.199094][T16836] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.202244][T16836] bond1: (slave geneve2): Releasing active interface
[  265.209734][T16046] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.213485][T16046] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.216871][T16046] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.220193][T16046] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.263699][T16837] validate_nla: 4 callbacks suppressed
[  265.263714][T16837] netlink: 'syz.4.2824': attribute type 10 has an invalid length.
[  265.271654][T16837] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  265.278221][T16837] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  265.282045][T16837] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  266.004960][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  266.042267][T16857] __nla_validate_parse: 9 callbacks suppressed
[  266.042281][T16857] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2828'.
[  266.387853][T16877] netlink: 'syz.3.2830': attribute type 21 has an invalid length.
[  266.391380][T16877] mac80211_hwsim hwsim107 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  266.892214][T16881] netlink: 'syz.4.2831': attribute type 1 has an invalid length.
[  266.893050][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'.
[  266.899004][T16880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2832'.
[  266.920924][T16883] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  266.956441][T16890] netlink: 'syz.3.2835': attribute type 13 has an invalid length.
[  266.959705][T16890] netlink: 'syz.3.2835': attribute type 17 has an invalid length.
[  266.976238][T16890] syz.3.2835: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  267.005473][T16890] CPU: 0 UID: 0 PID: 16890 Comm: syz.3.2835 Not tainted syzkaller #0 PREEMPT(full) 
[  267.005493][T16890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  267.005500][T16890] Call Trace:
[  267.005504][T16890]  <TASK>
[  267.005509][T16890]  dump_stack_lvl+0x189/0x250
[  267.005523][T16890]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.005534][T16890]  ? __pfx__printk+0x10/0x10
[  267.005548][T16890]  ? lock_release+0x4b/0x3e0
[  267.005564][T16890]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  267.005577][T16890]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  267.005590][T16890]  warn_alloc+0x214/0x310
[  267.005603][T16890]  ? __pfx_warn_alloc+0x10/0x10
[  267.005616][T16890]  ? __get_vm_area_node+0x28f/0x300
[  267.005626][T16890]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  267.005637][T16890]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  267.005651][T16890]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  267.005662][T16890]  ? rcu_is_watching+0x15/0xb0
[  267.005669][T16890]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  267.005679][T16890]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  267.005688][T16890]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  267.005697][T16890]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  267.005707][T16890]  ? pfifo_fast_change_tx_queue_len+0xa2/0xa30
[  267.005717][T16890]  pfifo_fast_change_tx_queue_len+0x110/0xa30
[  267.005729][T16890]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  267.005741][T16890]  ? do_raw_spin_unlock+0x4d/0x240
[  267.005754][T16890]  ? dev_deactivate_many+0xb82/0xd40
[  267.005769][T16890]  ? dev_deactivate_many+0xd03/0xd40
[  267.005785][T16890]  ? dev_deactivate_many+0x258/0xd40
[  267.005800][T16890]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  267.005816][T16890]  dev_qdisc_change_tx_queue_len+0x3a6/0x510
[  267.005833][T16890]  ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10
[  267.005849][T16890]  ? notifier_call_chain+0x3bf/0x3e0
[  267.005869][T16890]  netif_change_tx_queue_len+0x162/0x270
[  267.005909][T16890]  ? __pfx_netif_change_tx_queue_len+0x10/0x10
[  267.005917][T16890]  ? netif_change_flags+0xe8/0x1a0
[  267.005924][T16890]  do_setlink+0xdfb/0x41c0
[  267.005932][T16890]  ? __kernel_text_address+0xd/0x40
[  267.005943][T16890]  ? __pfx_do_setlink+0x10/0x10
[  267.005949][T16890]  ? _printk+0xcf/0x120
[  267.005962][T16890]  ? __pfx____ratelimit+0x10/0x10
[  267.005982][T16890]  ? __mutex_trylock_common+0x153/0x260
[  267.005994][T16890]  ? __pfx___mutex_trylock_common+0x10/0x10
[  267.006006][T16890]  ? rcu_is_watching+0x15/0xb0
[  267.006016][T16890]  ? trace_contention_end+0x39/0x120
[  267.006027][T16890]  ? __mutex_lock+0x335/0x1350
[  267.006046][T16890]  ? rtnl_newlink+0x8db/0x1c70
[  267.006062][T16890]  ? __pfx___mutex_lock+0x10/0x10
[  267.006079][T16890]  ? ns_capable+0x8a/0xf0
[  267.006090][T16890]  ? rtnl_link_get_net_capable+0x16a/0x350
[  267.006101][T16890]  rtnl_newlink+0x149f/0x1c70
[  267.006120][T16890]  ? __pfx_rtnl_newlink+0x10/0x10
[  267.006135][T16890]  ? __pfx___schedule+0x10/0x10
[  267.006152][T16890]  ? preempt_schedule+0xae/0xc0
[  267.006164][T16890]  ? __dev_queue_xmit+0x27b/0x3b50
[  267.006177][T16890]  ? preempt_schedule_common+0x83/0xd0
[  267.006190][T16890]  ? preempt_schedule+0xae/0xc0
[  267.006203][T16890]  ? __pfx_preempt_schedule+0x10/0x10
[  267.006217][T16890]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  267.006228][T16890]  ? preempt_schedule_thunk+0x16/0x30
[  267.006245][T16890]  ? __local_bh_enable_ip+0x12d/0x1c0
[  267.006255][T16890]  ? __local_bh_enable_ip+0x13e/0x1c0
[  267.006264][T16890]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  267.006273][T16890]  ? __dev_queue_xmit+0x27b/0x3b50
[  267.006285][T16890]  ? lock_release+0x4b/0x3e0
[  267.006301][T16890]  ? __dev_queue_xmit+0x27b/0x3b50
[  267.006312][T16890]  ? __dev_queue_xmit+0x27b/0x3b50
[  267.006324][T16890]  ? __dev_queue_xmit+0x1d79/0x3b50
[  267.006340][T16890]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  267.006354][T16890]  ? rcu_is_watching+0x15/0xb0
[  267.006365][T16890]  ? lock_release+0x4b/0x3e0
[  267.006400][T16890]  ? bpf_lsm_capable+0x9/0x20
[  267.006414][T16890]  ? security_capable+0x7e/0x2e0
[  267.006431][T16890]  ? __pfx_rtnl_newlink+0x10/0x10
[  267.006446][T16890]  rtnetlink_rcv_msg+0x7cf/0xb70
[  267.006462][T16890]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  267.006476][T16890]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  267.006493][T16890]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  267.006511][T16890]  netlink_rcv_skb+0x208/0x470
[  267.006525][T16890]  ? rcu_is_watching+0x15/0xb0
[  267.006536][T16890]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  267.006551][T16890]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  267.006571][T16890]  netlink_unicast+0x82f/0x9e0
[  267.006587][T16890]  ? __pfx_netlink_unicast+0x10/0x10
[  267.006602][T16890]  ? netlink_sendmsg+0x642/0xb30
[  267.006616][T16890]  ? skb_put+0x11b/0x210
[  267.006627][T16890]  netlink_sendmsg+0x805/0xb30
[  267.006644][T16890]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.006661][T16890]  ? futex_unqueue+0x22/0x240
[  267.006672][T16890]  ? aa_sock_msg_perm+0xf1/0x1d0
[  267.006683][T16890]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  267.006694][T16890]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.006710][T16890]  __sock_sendmsg+0x21c/0x270
[  267.006724][T16890]  ____sys_sendmsg+0x505/0x830
[  267.006736][T16890]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.006749][T16890]  ? import_iovec+0x74/0xa0
[  267.006763][T16890]  ___sys_sendmsg+0x21f/0x2a0
[  267.006774][T16890]  ? __pfx____sys_sendmsg+0x10/0x10
[  267.006785][T16890]  ? futex_wait+0x285/0x360
[  267.006805][T16890]  ? __fget_files+0x2a/0x420
[  267.006820][T16890]  ? __fget_files+0x3a0/0x420
[  267.006838][T16890]  __x64_sys_sendmsg+0x19b/0x260
[  267.006848][T16890]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  267.006868][T16890]  ? rcu_is_watching+0x15/0xb0
[  267.006903][T16890]  ? rcu_is_watching+0x15/0xb0
[  267.006913][T16890]  do_syscall_64+0xfa/0x3b0
[  267.006927][T16890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.006937][T16890]  ? exc_page_fault+0x9f/0xf0
[  267.006950][T16890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.006960][T16890] RIP: 0033:0x7f1ad678ebe9
[  267.006970][T16890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.006980][T16890] RSP: 002b:00007f1ad49f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.006994][T16890] RAX: ffffffffffffffda RBX: 00007f1ad69c6090 RCX: 00007f1ad678ebe9
[  267.007002][T16890] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000026
[  267.007009][T16890] RBP: 00007f1ad6811e19 R08: 0000000000000000 R09: 0000000000000000
[  267.007017][T16890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.007023][T16890] R13: 00007f1ad69c6128 R14: 00007f1ad69c6090 R15: 00007fffd3acdac8
[  267.007036][T16890]  </TASK>
[  267.007763][T16890] Mem-Info:
[  267.044845][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  267.085045][T16890] active_anon:5743 inactive_anon:1404 isolated_anon:0
[  267.085045][T16890]  active_file:2419 inactive_file:19883 isolated_file:0
[  267.085045][T16890]  unevictable:1768 dirty:55 writeback:0
[  267.085045][T16890]  slab_reclaimable:10449 slab_unreclaimable:135180
[  267.085045][T16890]  mapped:74072 shmem:2201 pagetables:2047
[  267.085045][T16890]  sec_pagetables:0 bounce:0
[  267.085045][T16890]  kernel_misc_reclaimable:0
[  267.085045][T16890]  free:91971 free_pcp:14854 free_cma:0
[  267.256003][T16890] Node 0 active_anon:5188kB inactive_anon:4664kB active_file:3224kB inactive_file:500kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:152656kB dirty:116kB writeback:0kB shmem:3792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11112kB pagetables:3512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  267.266656][T16890] Node 1 active_anon:17920kB inactive_anon:204kB active_file:6452kB inactive_file:79032kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:143632kB dirty:104kB writeback:0kB shmem:5012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7796kB pagetables:4812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  267.276988][T16890] Node 0 DMA free:4020kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:148kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:680kB local_pcp:324kB free_cma:0kB
[  267.288695][T16890] lowmem_reserve[]: 0 811 811 811 811
[  267.290649][T16890] Node 0 DMA32 free:63648kB boost:2048kB min:35708kB low:44120kB high:52532kB reserved_highatomic:4096KB free_highatomic:2340KB active_anon:5040kB inactive_anon:4664kB active_file:3224kB inactive_file:496kB unevictable:3536kB writepending:112kB present:1556484kB managed:830936kB mlocked:0kB bounce:0kB free_pcp:1088kB local_pcp:744kB free_cma:0kB
[  267.302549][T16890] lowmem_reserve[]: 0 0 0 0 0
[  267.304354][T16890] Node 1 DMA32 free:233904kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2376kB inactive_anon:0kB active_file:392kB inactive_file:36kB unevictable:0kB writepending:12kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:25044kB local_pcp:292kB free_cma:0kB
[  267.314972][T16890] lowmem_reserve[]: 0 0 854 854 854
[  267.317082][T16890] Node 1 Normal free:74856kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15508kB inactive_anon:204kB active_file:6060kB inactive_file:78996kB unevictable:3536kB writepending:92kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:23752kB local_pcp:22836kB free_cma:0kB
[  267.328715][T16890] lowmem_reserve[]: 0 0 0 0 0
[  267.330577][T16890] Node 0 DMA: 33*4kB (UME) 4*8kB (UME) 5*16kB (ME) 14*32kB (UME) 6*64kB (UME) 3*128kB (ME) 4*256kB (UME) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 4020kB
[  267.336651][T16890] Node 0 DMA32: 240*4kB (UMEH) 178*8kB (UMEH) 158*16kB (UMEH) 280*32kB (UMEH) 79*64kB (UMEH) 50*128kB (UMEH) 38*256kB (MEH) 20*512kB (UME) 10*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 63728kB
[  267.343444][T16890] Node 1 DMA32: 247*4kB (UM) 129*8kB (UM) 90*16kB (UME) 94*32kB (UME) 18*64kB (ME) 10*128kB (ME) 11*256kB (UM) 20*512kB (UM) 147*1024kB (UM) 30*2048kB (UM) 0*4096kB = 233924kB
[  267.349806][T16890] Node 1 Normal: 40*4kB (UME) 179*8kB (UME) 143*16kB (UME) 292*32kB (UME) 64*64kB (UME) 27*128kB (UM) 25*256kB (UME) 11*512kB (UME) 29*1024kB (UME) 4*2048kB (UM) 1*4096kB (M) = 74792kB
[  267.356833][T16890] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  267.360319][T16890] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  267.364548][T16890] 24906 total pagecache pages
[  267.372120][T16890] 401 pages in swap cache
[  267.373892][T16890] Free swap  = 80920kB
[  267.375463][T16890] Total swap = 124996kB
[  267.376794][T16890] 786301 pages RAM
[  267.377999][T16890] 0 pages HighMem/MovableOnly
[  267.379746][T16890] 241335 pages reserved
[  267.381284][T16890] 0 pages cma reserved
[  267.384479][T16890] gretap0: refused to change device tx_queue_len
[  267.387084][T16890] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  267.420119][T16902] _Z`Ԁ@S: entered promiscuous mode
[  267.461386][T16913] openvswitch: netlink: IPv4 tun info is not correct
[  268.084846][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  268.537670][T16947] netlink: 'syz.3.2849': attribute type 1 has an invalid length.
[  268.552017][T16947] bond4: (slave gretap1): making interface the new active one
[  268.556218][T16947] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  268.563971][T16947] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  268.597544][T16950] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2850'.
[  268.601953][T16950] tipc: Started in network mode
[  268.603519][T16950] tipc: Node identity 080211000001, cluster identity 4711
[  268.606315][T16950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.608753][T16950] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode
[  268.611132][T16950] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode
[  268.880746][T16971] netlink: 'syz.3.2856': attribute type 2 has an invalid length.
[  268.888134][T16971] ave_0: entered promiscuous mode
[  268.998466][T16983] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2859'.
[  269.001921][T16983] openvswitch: netlink: Flow key attr not present in new flow.
[  269.096847][T16989] netlink: 'syz.3.2861': attribute type 5 has an invalid length.
[  269.099458][T16989] netlink: 'syz.3.2861': attribute type 7 has an invalid length.
[  269.124817][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  269.168181][T16996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2863'.
[  269.171890][T16997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2863'.
[  269.255806][T17006] wg1 speed is unknown, defaulting to 1000
[  269.330749][T17001] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2864'.
[  269.724815][   T10] tipc: Node number set to 134418688
[  270.088579][T17036] sit0: entered promiscuous mode
[  270.094193][T17036] netlink: 'syz.3.2873': attribute type 1 has an invalid length.
[  270.098184][T17036] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2873'.
[  270.164818][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  270.521128][T17061] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  270.632387][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2884'.
[  270.947374][T17082] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  271.078010][T17092] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  271.081743][T17091] IPVS: stopping master sync thread 17092 ...
[  271.084128][T17091] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  271.140005][T17102] netlink: 'syz.3.2895': attribute type 11 has an invalid length.
[  271.159248][T17104] openvswitch: netlink: IP tunnel dst address not specified
[  271.204799][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  271.221429][T17107] __nla_validate_parse: 3 callbacks suppressed
[  271.221444][T17107] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2897'.
[  271.477951][T17130] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2903'.
[  271.512471][T17134] sctp: [Deprecated]: syz.3.2905 (pid 17134) Use of struct sctp_assoc_value in delayed_ack socket option.
[  271.512471][T17134] Use struct sctp_sack_info instead
[  271.520857][T17134] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2905'.
[  271.590896][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2907'.
[  271.593987][T17140] netlink: 'syz.3.2907': attribute type 1 has an invalid length.
[  271.598311][T17140] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2907'.
[  271.601223][T17140] netlink: 'syz.3.2907': attribute type 1 has an invalid length.
[  271.627509][T17144] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2908'.
[  272.254895][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  272.526059][T17171] bridge0: port 1(batadv1) entered blocking state
[  272.528900][T17171] bridge0: port 1(batadv1) entered disabled state
[  272.531808][T17171] batadv1: entered allmulticast mode
[  272.534890][T17171] batadv1: entered promiscuous mode
[  272.538514][T17171] tipc: New replicast peer: 255.255.255.255
[  272.541061][T17171] tipc: Enabled bearer <udp:syz2>, priority 6
[  272.593416][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'.
[  272.616223][T17177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2912'.
[  272.645864][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  272.663581][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2914'.
[  272.817399][T17190] dvmrp1: tun_chr_ioctl cmd 1074025677
[  272.819921][T17190] dvmrp1: linktype set to 769
[  272.823794][T17190] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2917'.
[  273.024937][ T5911] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  273.027910][ T5911] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  273.117416][T17214] netlink: get zone limit has 8 unknown bytes
[  273.284795][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  274.262763][   T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  274.265604][   T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  274.268241][   T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  274.271548][   T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  274.274582][   T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  274.287951][T17225] wg1 speed is unknown, defaulting to 1000
[  274.324888][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  274.332466][T17225] chnl_net:caif_netlink_parms(): no params data found
[  274.360090][T17225] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.362433][T17225] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.364920][T17225] bridge_slave_0: entered allmulticast mode
[  274.367774][T17225] bridge_slave_0: entered promiscuous mode
[  274.371258][T17225] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.374002][T17225] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.376607][T17225] bridge_slave_1: entered allmulticast mode
[  274.379068][T17225] bridge_slave_1: entered promiscuous mode
[  274.391207][T17225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.396251][T17225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.410719][T17225] team0: Port device team_slave_0 added
[  274.415584][T17225] team0: Port device team_slave_1 added
[  274.428006][T17225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.430752][T17225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.441069][T17225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.446109][T17225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.448596][T17225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.457045][T17225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.474530][T17225] hsr_slave_0: entered promiscuous mode
[  274.477176][T17225] hsr_slave_1: entered promiscuous mode
[  274.479550][T17225] debugfs: 'hsr0' already exists in 'hsr'
[  274.481553][T17225] Cannot create hsr debugfs directory
[  274.690365][T17225] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  274.697720][T17225] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  274.702713][T17225] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  274.708079][T17225] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  274.731367][T17225] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.734394][T17225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.737219][T17225] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.739659][T17225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.762725][T17225] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.769663][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.772376][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.780514][T17225] 8021q: adding VLAN 0 to HW filter on device team0
[  274.785689][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.788179][ T8464] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.793669][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.796305][ T8464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.867131][T17225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.961521][T17225] veth0_vlan: entered promiscuous mode
[  274.965925][T17225] veth1_vlan: entered promiscuous mode
[  274.985426][T17225] veth0_macvtap: entered promiscuous mode
[  274.990069][T17225] veth1_macvtap: entered promiscuous mode
[  275.002163][T17225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.010731][T17225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.019723][T16046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.023923][T16046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.027966][T16046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.032138][T16046] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.078606][ T8464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.081222][ T8464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.104480][ T8460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.108562][ T8460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.374884][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  276.048964][T17256] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.109035][T17256] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.139894][T17256] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.326761][ T5236] Bluetooth: hci14: command tx timeout
[  276.404852][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  277.071403][T17256] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.454986][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  278.405199][ T5236] Bluetooth: hci14: command tx timeout
[  278.482273][T16038] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.491090][T10529] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.494817][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  278.501064][T10529] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.508471][T10529] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.537480][T17263] __nla_validate_parse: 2 callbacks suppressed
[  278.537489][T17263] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2926'.
[  278.543850][T17263] netlink: 'syz.5.2926': attribute type 1 has an invalid length.
[  278.547304][T17263] syz_tun: entered promiscuous mode
[  278.549105][T17263] syz_tun: entered allmulticast mode
[  278.556441][T17263] bond1 (unregistering): Released all slaves
[  278.668248][T17266] IPv6: addrconf: prefix option has invalid lifetime
[  278.722318][T17271] wg1 speed is unknown, defaulting to 1000
[  278.938396][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2931'.
[  278.941783][T17279] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  278.944249][T17279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.964549][T17281] netlink: 'syz.5.2932': attribute type 8 has an invalid length.
[  279.534842][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  280.485372][ T5236] Bluetooth: hci14: command tx timeout
[  280.564930][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  281.614840][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  282.565113][   T55] Bluetooth: hci14: command tx timeout
[  282.654880][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  282.711222][ T5880] IPVS: starting estimator thread 0...
[  282.765210][T17302] netlink: 'syz.5.2937': attribute type 1 has an invalid length.
[  282.771799][T17302] ipvlan2: entered allmulticast mode
[  282.773626][T17302] veth0_to_batadv: entered allmulticast mode
[  282.805963][T17295] IPVS: using max 139 ests per chain, 333600 per kthread
[  282.809693][T17303] netlink: 'syz.5.2937': attribute type 1 has an invalid length.
[  282.885405][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[  282.890160][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2940'.
[  282.952248][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2941'.
[  283.005598][T17318] vlan2: entered allmulticast mode
[  283.007315][T17318] veth1: entered allmulticast mode
[  283.092132][T17322] tun0: tun_chr_ioctl cmd 1074812118
[  283.096175][T17322] netlink: 212316 bytes leftover after parsing attributes in process `syz.5.2943'.
[  283.684955][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  283.993641][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2945'.
[  284.049781][T17335] netlink: 'syz.5.2946': attribute type 1 has an invalid length.
[  284.117044][T17344] dvmrp8: entered allmulticast mode
[  284.128796][T17344] wg1 speed is unknown, defaulting to 1000
[  284.147300][T17343] dvmrp8: left allmulticast mode
[  284.255776][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2950'.
[  284.261508][T17347] bond0: (slave rose0): Error: Device can not be enslaved while up
[  284.303686][T17353] netlink: 20824 bytes leftover after parsing attributes in process `syz.5.2951'.
[  284.313078][T17353] netlink: 'syz.5.2951': attribute type 10 has an invalid length.
[  284.321329][T17353] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  284.398625][T17356] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  284.428404][T17359] netlink: 'syz.5.2953': attribute type 10 has an invalid length.
[  284.433529][T17359] bond0: (slave dummy0): Releasing backup interface
[  284.440163][T17359] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  284.443153][T17359] team0: Failed to send options change via netlink (err -105)
[  284.446001][T17359] team0: Port device dummy0 added
[  284.449038][T17359] netlink: 'syz.5.2953': attribute type 1 has an invalid length.
[  284.451580][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2953'.
[  284.734816][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  285.426326][T17373] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  285.617612][T17384] : entered promiscuous mode
[  285.642004][T17386] dvmrp8: entered allmulticast mode
[  285.707131][T17387] wg1 speed is unknown, defaulting to 1000
[  285.764862][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  286.468150][T17385] dvmrp8: left allmulticast mode
[  286.580582][T17398] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2963'.
[  286.583831][   T34] INFO: task syz.1.1528:11591 blocked for more than 143 seconds.
[  286.583847][   T34]       Not tainted syzkaller #0
[  286.583853][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  286.605380][   T34] task:syz.1.1528      state:D stack:26664 pid:11591 tgid:11590 ppid:5848   task_flags:0x400140 flags:0x00004004
[  286.610258][   T34] Call Trace:
[  286.611370][   T34]  <TASK>
[  286.612356][   T34]  __schedule+0x1798/0x4cc0
[  286.618041][   T34]  ? rcu_is_watching+0x15/0xb0
[  286.619578][   T34]  ? is_bpf_text_address+0x26/0x2b0
[  286.621408][   T34]  ? rcu_is_watching+0x15/0xb0
[  286.623178][   T34]  ? __pfx___schedule+0x10/0x10
[  286.624917][   T34]  ? schedule+0x91/0x360
[  286.626420][   T34]  ? rcu_is_watching+0x15/0xb0
[  286.628008][   T34]  ? lock_release+0x4b/0x3e0
[  286.629620][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  286.631560][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  286.633900][   T34]  schedule+0x165/0x360
[  286.641567][   T34]  schedule_preempt_disabled+0x13/0x30
[  286.643318][   T34]  __mutex_lock+0x7e6/0x1350
[  286.647217][   T34]  ? __mutex_lock+0x5bb/0x1350
[  286.653218][   T34]  ? nfsd_nl_listener_set_doit+0x137/0x1690
[  286.656751][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  286.658409][   T34]  ? __asan_memset+0x22/0x50
[  286.659882][   T34]  ? ____sys_sendmsg+0x505/0x830
[  286.661462][   T34]  ? ___sys_sendmsg+0x21f/0x2a0
[  286.663015][   T34]  ? __x64_sys_sendmsg+0x19b/0x260
[  286.664628][   T34]  nfsd_nl_listener_set_doit+0x137/0x1690
[  286.666591][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  286.668473][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  286.670381][   T34]  ? __nla_parse+0x40/0x60
[  286.671832][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  286.673812][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  286.676962][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  286.678930][   T34]  ? bpf_lsm_capable+0x9/0x20
[  286.680533][   T34]  ? security_capable+0x7e/0x2e0
[  286.682295][   T34]  genl_rcv_msg+0x60e/0x790
[  286.683898][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.686942][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  286.688566][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  286.690923][   T34]  ? __netlink_lookup+0xbd/0x810
[  286.692721][   T34]  ? rcu_is_watching+0x15/0xb0
[  286.694610][   T34]  netlink_rcv_skb+0x208/0x470
[  286.697740][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.699338][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  286.701012][   T34]  ? lock_release+0x4b/0x3e0
[  286.702502][   T34]  ? down_read+0x1ad/0x2e0
[  286.703935][   T34]  genl_rcv+0x28/0x40
[  286.705434][   T34]  netlink_unicast+0x82f/0x9e0
[  286.707185][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  286.709221][   T34]  ? netlink_sendmsg+0x642/0xb30
[  286.711096][   T34]  ? skb_put+0x11b/0x210
[  286.712470][   T34]  netlink_sendmsg+0x805/0xb30
[  286.714128][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.717936][   T34]  ? futex_unqueue+0x22/0x240
[  286.719711][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  286.721677][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  286.723798][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.726044][   T34]  __sock_sendmsg+0x21c/0x270
[  286.727877][   T34]  ____sys_sendmsg+0x505/0x830
[  286.729816][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  286.731883][   T34]  ? import_iovec+0x74/0xa0
[  286.733757][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  286.735751][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  286.737823][   T34]  ? futex_wait+0x285/0x360
[  286.739678][   T34]  ? __fget_files+0x2a/0x420
[  286.741582][   T34]  ? __fget_files+0x3a0/0x420
[  286.743522][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  286.745620][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  286.747805][   T34]  ? rcu_is_watching+0x15/0xb0
[  286.749769][   T34]  ? rcu_is_watching+0x15/0xb0
[  286.751323][   T34]  do_syscall_64+0xfa/0x3b0
[  286.752913][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.755470][   T34]  ? exc_page_fault+0x9f/0xf0
[  286.757409][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.759814][   T34] RIP: 0033:0x7fe7b938ebe9
[  286.761574][   T34] RSP: 002b:00007fe7ba1cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.765027][   T34] RAX: ffffffffffffffda RBX: 00007fe7b95c5fa0 RCX: 00007fe7b938ebe9
[  286.767882][   T34] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  286.770413][   T34] RBP: 00007fe7b9411e19 R08: 0000000000000000 R09: 0000000000000000
[  286.773021][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.775672][   T34] R13: 00007fe7b95c6038 R14: 00007fe7b95c5fa0 R15: 00007ffdff17a728
[  286.778215][   T34]  </TASK>
[  286.779328][   T34] INFO: lockdep is turned off.
[  286.780926][   T34] NMI backtrace for cpu 1
[  286.780933][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  286.780958][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.780963][   T34] Call Trace:
[  286.780966][   T34]  <TASK>
[  286.780969][   T34]  dump_stack_lvl+0x189/0x250
[  286.780981][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.780989][   T34]  ? __pfx__printk+0x10/0x10
[  286.781000][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  286.781009][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  286.781017][   T34]  ? __pfx__printk+0x10/0x10
[  286.781027][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  286.781039][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  286.781048][   T34]  watchdog+0xf93/0xfe0
[  286.781058][   T34]  ? watchdog+0x1de/0xfe0
[  286.781068][   T34]  kthread+0x711/0x8a0
[  286.781077][   T34]  ? __pfx_watchdog+0x10/0x10
[  286.781086][   T34]  ? __pfx_kthread+0x10/0x10
[  286.781094][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  286.781103][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.781112][   T34]  ? __pfx_kthread+0x10/0x10
[  286.781120][   T34]  ret_from_fork+0x3fc/0x770
[  286.781128][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  286.781136][   T34]  ? __switch_to_asm+0x39/0x70
[  286.781145][   T34]  ? __switch_to_asm+0x33/0x70
[  286.781153][   T34]  ? __pfx_kthread+0x10/0x10
[  286.781161][   T34]  ret_from_fork_asm+0x1a/0x30
[  286.781173][   T34]  </TASK>
[  286.781191][   T34] Sending NMI from CPU 1 to CPUs 0:
[  286.806779][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  286.837305][    C0] NMI backtrace for cpu 0
[  286.837316][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  286.837323][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.837328][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  286.837341][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  286.837347][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  286.837353][    C0] RAX: aab498a9f4c97c00 RBX: ffffffff819683b8 RCX: aab498a9f4c97c00
[  286.837358][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  286.837363][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  286.837367][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38430
[  286.837372][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  286.837376][    C0] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  286.837381][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  286.837386][    C0] CR2: 00007ff0608384a0 CR3: 000000000df36000 CR4: 00000000000006f0
[  286.837415][    C0] Call Trace:
[  286.837420][    C0]  <TASK>
[  286.837423][    C0]  default_idle+0x13/0x20
[  286.837430][    C0]  default_idle_call+0x74/0xb0
[  286.837436][    C0]  do_idle+0x1e8/0x510
[  286.837444][    C0]  ? __pfx_do_idle+0x10/0x10
[  286.837452][    C0]  cpu_startup_entry+0x44/0x60
[  286.837457][    C0]  rest_init+0x2de/0x300
[  286.837464][    C0]  start_kernel+0x3a9/0x410
[  286.837473][    C0]  x86_64_start_reservations+0x24/0x30
[  286.837483][    C0]  x86_64_start_kernel+0x143/0x1c0
[  286.837491][    C0]  common_startup_64+0x13e/0x147
[  286.837503][    C0]  </TASK>
[  286.841855][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  286.905884][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  286.908804][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.912844][   T34] Call Trace:
[  286.913987][   T34]  <TASK>
[  286.914988][   T34]  dump_stack_lvl+0x99/0x250
[  286.916600][   T34]  ? __asan_memcpy+0x40/0x70
[  286.918151][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.919868][   T34]  ? __pfx__printk+0x10/0x10
[  286.921504][   T34]  vpanic+0x281/0x750
[  286.923076][   T34]  ? __pfx_vpanic+0x10/0x10
[  286.924598][   T34]  ? preempt_schedule+0xae/0xc0
[  286.926224][   T34]  ? preempt_schedule_common+0x83/0xd0
[  286.928036][   T34]  panic+0xb9/0xc0
[  286.929292][   T34]  ? __pfx_panic+0x10/0x10
[  286.930778][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  286.932896][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  286.935242][   T34]  watchdog+0xfd2/0xfe0
[  286.936959][   T34]  ? watchdog+0x1de/0xfe0
[  286.938745][   T34]  kthread+0x711/0x8a0
[  286.940316][   T34]  ? __pfx_watchdog+0x10/0x10
[  286.942264][   T34]  ? __pfx_kthread+0x10/0x10
[  286.944165][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  286.946295][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.948418][   T34]  ? __pfx_kthread+0x10/0x10
[  286.950256][   T34]  ret_from_fork+0x3fc/0x770
[  286.952024][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  286.954030][   T34]  ? __switch_to_asm+0x39/0x70
[  286.955870][   T34]  ? __switch_to_asm+0x33/0x70
[  286.957614][   T34]  ? __pfx_kthread+0x10/0x10
[  286.959338][   T34]  ret_from_fork_asm+0x1a/0x30
[  286.960962][   T34]  </TASK>
[  286.962596][   T34] Kernel Offset: disabled
[  286.964030][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:32:01  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bde05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffc9000068f890 RSP=ffffc9000068f6b8
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854f1db0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1e27 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7cbb29e440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 000000000000ff00 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 000000000000ff00 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888109645118 RBP=ffffffff8b7822f1 RSP=ffffc90002e6f358
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffed102137641e
R12=0000000000000000 R13=ffff888109645118 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff819d5ab8 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff5d14f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007ff5d09976c3 00007ff5d09976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055557cdd053a 000055557cdd0310
XMM06=0000000000000000 0000000000000000 XMM07=0292d00300100002 92c0030210000292
XMM08=b003381000029190 03020800028fb003 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
