last executing test programs:

2m11.011992945s ago: executing program 0 (id=291):
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x88, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1fff}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x401}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x48080)

2m11.011483097s ago: executing program 0 (id=292):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
unshare(0x6a040000)
r2 = socket(0x8, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280))
syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "ca153ab28b0804d6"}}}}}, 0x0)
r3 = epoll_create1(0x0)
clock_gettime(0x8, &(0x7f0000000280))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r4, 0x1)
listen(r4, 0xfff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000df2501000000000000000c4100000014001462726f61647e94975b320d9cd8607654"], 0x30}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000000c0), 0x0, 0x4040804)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000200)={'HL\x00'}, &(0x7f0000000240)=0x1e)
epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000100)={0x20000014})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

2m10.111598689s ago: executing program 0 (id=293):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbbbbbbbbbbbbb86dd6d0000000000000000000000000000ff0200000000000000000000000000014f194e2000119078012c02"], 0x4b)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m9.892950975s ago: executing program 0 (id=294):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r1 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x48, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40914)
recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0x30}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xa)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m9.890961786s ago: executing program 0 (id=295):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

2m9.889606087s ago: executing program 0 (id=296):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async)
unshare(0x68040200) (async)
r1 = socket(0x2a, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=@getpolicy={0x2b4, 0x15, 0x100, 0x70bd2d, 0x25dfdbfb, {{@in6=@mcast1, @in=@multicast1, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0xc0, 0xa0, 0xff}, 0x6e6bbe, 0x2}, [@algo_auth_trunc={0x75, 0x14, {{'cbcmac(aes-arm64)\x00'}, 0x148, 0x0, "62e58b8897d9b59fb7c4bea28996208296af5a62eadbf0505d0f3a0d05b770b41b3de4611192627bce"}}, @algo_crypt={0x121, 0x2, {{'ctr-camellia-aesni-avx2\x00'}, 0x6c8, "7887988aec1cb9b35e40e85b0f7508bae078c88abcd65d88bb25b9cfb3102d3acab9351d21554f5184b96ac826598ee05beb7f58a63ab59f2b69d4280217587a4be0f65bde3e73f89d3fc11c54136bedb0381f6d150c29d0ad4c7e2ac2d12f7d9dced22f89d90dbb5438999955bfbb91e9279ed3d0f9462da21ca80d70041cc9b8b2fb48b887bbe300120c7fae67d80abb214d6b1d6f6edf241a1fecf6a1717849fe1b311947beec184303922994e8aafaebecbcec834cb1dce4814ecf84d975a0e6e26173b248f5e10c49eaf03466c3de79d3ebef1d633702"}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2a}}, @sec_ctx={0x5d, 0x8, {0x59, 0x8, 0x1, 0x5b, 0x51, "61ce99fa3c28369511a6b4034f31e350f4475cc487fce6f8f0dacc336761f2a229d000202af1596dcb5ff8c9a9b03ecffdaaf51022db83165e31a29ec6e52989edd6692c9d2fe24523b8ef7438d3feed5d"}}, @proto={0x5, 0x19, 0x33}, @srcaddr={0x14, 0xd, @in=@empty}, @srcaddr={0x14, 0xd, @in=@remote}, @offload={0xc, 0x1c, {0x0, 0x1}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e21, @in=@multicast2}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) (async)
sendto$inet6(r4, &(0x7f0000000040)='n\"', 0x2, 0x24004055, &(0x7f0000000140)={0xa, 0x4e21, 0x9e11, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r6, 0x3f38e000) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r7, &(0x7f0000000140)="24000000010006", 0x7) (async)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="000227bd7000fddbdf250600000008000a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r9, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) (async)
shutdown(r9, 0x1)

2m5.231340126s ago: executing program 32 (id=234):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x4)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0x64010101}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0xffffffffffffffff, 0x4)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f00006dbffc)=0xffe, 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0)
sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='afs_volume\x00', r4, 0x0, 0x200}, 0x18)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000001640)={0xe3f0, 0x9, 0x9, 0x3, 0x200, 0x7, 0x8, 0x800}, &(0x7f0000000040)={0x95fc, 0x2, 0x1b4, 0x4, 0x8004, 0xf9, 0x1000, 0x381d930a}, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000002a00ffff6d6c383032313100"], 0x20}}, 0x0)
recvmmsg(r8, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000016c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}, {&(0x7f0000001700)="90363bfb11731eb484bde6a0eab8bb9a4e8ebcb6a016901d1b862716f0a79cde2078b994f1c4c155453e1c5d226067d22cf8053808becb674dc2b4437ade373aeac1232b6329742587d81eef866b9b87b9c5f08eaeea127202bbc7784298015f4bd7ccfda37151a85963b83c0dffa6c3b912d8528bc58c9314fd93fdf30c5fdf5c18499f7d8ac30201d011ccdea40a4e03dc206937bdfea9ab65490bda9d4ae3fe1a53ae132b73e2aaf4efb8d8c876b4e0485e8793ebf956795132c35688bdea866edbbe3da44a7ea3e61e16dfbab18540a08aaba1b7a81eec6d2d7b725b0edf64fa5f7bf1e0378a5e21d1", 0xeb}, {&(0x7f0000001840)="a093f4a0328614736de38b5f284300a5aaf6ff334a9e5f20e9b19ca90a0eb32c02801bdcc9b56322526c98c5f8d728e821b67c5d9f5b9c64b93bff260867676accb8222783dd442ffe5787a2825e7825eaee7058eec753d342bc82819e1ea198999f51b40135", 0x66}, {&(0x7f00000018c0)="09f24c7824859cff7072819d6df76d5d266af2bb085a5db2cc6fb30ebf12574ae8bfecc9fe12dca72f503496937caff531fa2bd7444d7cbb4720010aafc70217c634bfff802d2c621a3206d7457248c9155aeb311012fc326a0f23207c030498177f426e2e5fbf4935a427e1bd291e128ffbc6e5c21ea4268a1ea9aae34f0b2ee0ddf787eb59f570e431d70b136b7a5803614d04e07598b3964036f084ba42e223671e5216928865492b7a772e49a02aad6977a3a45df1ec6a2e97bebc5694da51c53d2c682f0bb6900bb2da6dcd0d6636efdb2378eb276d74294b7f6629146d03620e3fd6e86c66d0cd53b40d511ffb327ee5f0adc4d7", 0xf7}, {&(0x7f0000000200)="56c89b1f73bed2f2bd7cb091bf4d1e5c3754ecede2694597af03193a16ba1af79a988e14944c7d9f2386adcd1bb2f70a8b11301f7a29", 0x36}], 0x5}, 0xc044)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x4}, 0x80, 0x0}, 0x20000001)
recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002200)=""/4094, 0xffe}], 0x10000000000000f9}, 0x40)

1m54.73635004s ago: executing program 33 (id=296):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async)
unshare(0x68040200) (async)
r1 = socket(0x2a, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=@getpolicy={0x2b4, 0x15, 0x100, 0x70bd2d, 0x25dfdbfb, {{@in6=@mcast1, @in=@multicast1, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0xc0, 0xa0, 0xff}, 0x6e6bbe, 0x2}, [@algo_auth_trunc={0x75, 0x14, {{'cbcmac(aes-arm64)\x00'}, 0x148, 0x0, "62e58b8897d9b59fb7c4bea28996208296af5a62eadbf0505d0f3a0d05b770b41b3de4611192627bce"}}, @algo_crypt={0x121, 0x2, {{'ctr-camellia-aesni-avx2\x00'}, 0x6c8, "7887988aec1cb9b35e40e85b0f7508bae078c88abcd65d88bb25b9cfb3102d3acab9351d21554f5184b96ac826598ee05beb7f58a63ab59f2b69d4280217587a4be0f65bde3e73f89d3fc11c54136bedb0381f6d150c29d0ad4c7e2ac2d12f7d9dced22f89d90dbb5438999955bfbb91e9279ed3d0f9462da21ca80d70041cc9b8b2fb48b887bbe300120c7fae67d80abb214d6b1d6f6edf241a1fecf6a1717849fe1b311947beec184303922994e8aafaebecbcec834cb1dce4814ecf84d975a0e6e26173b248f5e10c49eaf03466c3de79d3ebef1d633702"}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2a}}, @sec_ctx={0x5d, 0x8, {0x59, 0x8, 0x1, 0x5b, 0x51, "61ce99fa3c28369511a6b4034f31e350f4475cc487fce6f8f0dacc336761f2a229d000202af1596dcb5ff8c9a9b03ecffdaaf51022db83165e31a29ec6e52989edd6692c9d2fe24523b8ef7438d3feed5d"}}, @proto={0x5, 0x19, 0x33}, @srcaddr={0x14, 0xd, @in=@empty}, @srcaddr={0x14, 0xd, @in=@remote}, @offload={0xc, 0x1c, {0x0, 0x1}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e21, @in=@multicast2}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) (async)
sendto$inet6(r4, &(0x7f0000000040)='n\"', 0x2, 0x24004055, &(0x7f0000000140)={0xa, 0x4e21, 0x9e11, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r6, 0x3f38e000) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r7, &(0x7f0000000140)="24000000010006", 0x7) (async)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="000227bd7000fddbdf250600000008000a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r9, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) (async)
shutdown(r9, 0x1)

1m16.562282254s ago: executing program 4 (id=973):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r0}, 0x2a, 0x80000007ff, 0x2})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r0}, 0x2a, 0x80000007ff, 0x2}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

1m16.50261702s ago: executing program 4 (id=974):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x6}, 0x50)
socket(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000140)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r6], 0x90}}, 0x0)

1m16.382298048s ago: executing program 4 (id=975):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newchain={0x1288, 0x64, 0x101, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xd}, {0xfff2, 0x5}, {0x9, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0xa3fe}, @filter_kind_options=@f_flower={{0xb}, {0x728, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x1}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_ACT={0x6e8, 0x3, [@m_bpf={0x10c, 0x6, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xd7, 0x6, "7c5f278990e4aac0f09d36c48ea211fd3a774cb67a3d56a6087aa8c14b6426b8746e1a02a7efba3200c6c721364d5f89a711d6e0478f60681f5b187026e1709eedf690bdeeee174b7d001508331a3ffd1b702ccf8cbeb752df93efb5671329bc7013477bdccc5881a846b10618ceb42a5f68be52c0e4dfc8feec1aea67606b1136d71e25cb9401c6c962f636656366b5a4bac8d72be83484bebab4085409527a1a7deb34ca9915188e9ffe1a396816cc72aee19a2b6eb55042b8e17833d85e64229790a37fc5778cda7b431f58178b74b602c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x148, 0x20, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80, 0x7, 0x2, 0x6}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x6, 0x0, 0x6, 0x899}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xbe, 0x10000000, 0x1, 0xab5}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3, 0x3, 0xc949, 0x6}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x10000000, 0x9, 0x2}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x5, 0x8, 0x9, 0x4}, 0x3, r2}}]}, {0x5c, 0x6, "72daba895ca500b59f78a39c33f12baa5c8e0eb4af8d8616f43baea4603cd183eed39fad5964a66dd65c11184beb68e2a623f1c1b1e93004517d9a72b7c2825e472f8685b47d1b4ca184eab81205333448a3dc2bdadea059"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xec, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0xc0, 0x6, "37247905e2d83f28cfcbe9610272a0e99cd8118c04667b3fe1dae19676847998a58df799743e64fa09071a92218868bbc5bf751cadb2cac6ef2cc0ad5c86fb673f393f16578ed1987fcb3b7fa8a8ee6a2d5933fe6d04d142478fc5349c39edfaee4aa2dd3e3a3836e10a65610187b08325165bec58588932dd74a00aa3ef06a931ecbbd8d4cacd465b1a58f79b3f16f53f402eaef3a05fe0b086a4eac9c5d2c37b02e8f6a32b808c5ae44f259c8337372d401353a11419aa20efb16a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x10c, 0x12, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xbc, 0x8, 0x0, 0x4}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x20000000, 0x6ed119ad, 0x81}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x2, 0xd}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x0, 0x10000000, 0xffffffff, 0x6}, 0x76}}]}, {0x6f, 0x6, "dfc18a98058c683239713a1cb82b704286a7f89b6331f060dcd163322e2117a28b48310bab886eab2146cd2ddfce0838a1b66c80d11d3f2e7fb5724471372e4464c68e01b67a3a008a58992161b93216bf463960514f81fda6e6f9583909f7b95cce084759bd708361976c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x168, 0x20, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x7fff, 0x10000000, 0x8, 0x7ff}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="054fa29bd364"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="ecd08afdae78"}]}, {0xd2, 0x6, "cce7c67fcb664701c3d71be4f703d2f1065837d41831f0d552cf619ff4311e18f3f762bd509086377cad88c7a8e35828d89340cf8fe925dc83dbbd7597b8b193e6e57bda1e4b0df87bbc8e4f05ced0b4b3795855722db585798fff42215c879780fd24d3bd8b1f4a0b304f609b03edf15060a257c9efe7a46191bb4231fde7a11bcb9a91a7ef3994dadfe52d343e6584660561bc8f7df7e66d82aaac786aca006becd6f17dc5e2705ee642444850fd9187b5d9b6dc66509ae216d9f586c82726761ae4a9279252c540337126023e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x98, 0x12, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x3c, 0x6, "c746d6f30082d9c2ace3d12e818695d5c243430590a7eb595a7758d8ab092ae7b9e0d5a6fd0724c0887708ed6ddfea9bdb192650e9ab7f60"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x98, 0xd, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x81, 0x8, 0x1, 0x9, 0x480}, 0xd}}]}, {0x3b, 0x6, "1f05db9cfdf65caff9728b16360704fb43c0f38044419bc7d0b6f302dde2d436e7e6ac4c04ec5bbe71224a1daf509e19be207806971c99"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xfa}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @filter_kind_options=@f_fw={{0x7}, {0xb18, 0x2, [@TCA_FW_ACT={0x690, 0x4, [@m_skbedit={0xfc, 0x6, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x2, 0x3, 0x4, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x400}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x80, 0x6, "f1c994d10d6db19ac5814ff6e85fbec564ba1aa80e0ef12ad59e5885820b733109c797d59e2467972b7aed421d7c1d378ea0d204662f96e4fe09230b25b6f9384a2ddf66bd9cc063286a3cf5a187fc3fa37778c58fd804212d2a6f5e062b40587147e2e162c935e348e66d93f89983a8a38bffd7e9a30a52d8015030"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x210, 0x6, 0x0, 0x0, {{0x7}, {0x144, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x114, 0x6, {0xb7ba, 'mangle\x00', 0x1, 0x5, "07cb5ef22a6127aa2dd93dbcb2400729b0098c2f44e6b03c0824ed862f8c4ee0fb4c25603d75e5f900aa63001b9a2c96bd75ae6aebda51c4cb8145da67971f18c593bb873423a8a6d9988c6cf813fed49aafa22bd68d9345ddb76b6730a8874a2b47bb6008d020431c93d0d7255ae9979f1fbbbe5cdf130131457ada80c58aec05f53ddc1325314ad74dd5400dbede2aeaed74009752cb7af20bf824baba72ab6bba1c2806b2401ed29bec0b00c98ac17f01e63d6532daa496660684afb9b0a8874397dc244e9373c821e7999e6cf0583c83104334fdd6f5c24071ee5c31b27bbc31b5d3c425391b6d20"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xa8, 0x6, "4e510050c18dffd326d42d38ac0314a298e258dff81411559dc49da681f3a9ea918cd730a1b8f6a092517728fa8663b920f866804d00dd4c5626200b97e833c3e6db98287cec375f87feccbb531deea71db344a28f25dc295e247944e4e6997a8ee313700ac83ef2d8de435eb419ce51b2a3bcfb9e5b994bfbc48259498c21fb24a8158aaa7b440f71d92a20fa340685445d612db2daa5cb64e2ea169a25b4419ee1b1a7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x100, 0xb, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0xcb, 0x6, "6e2d00a92a414b09b9f5f24fa87a744ba3b19bd483771f6f93cc65fe11e24a99d46a318bd2fdbed143fedc15f3c988f46e059817f0c65a869f6c8dadb9e03016b20295991328ad35b517080be1b3202203ebd0a9bfb0a0db55104acfb74605237c1dd5485a2503d9e72a6bbb6b8f690b357f56c63029826b6f460e44a86721d0234bcf68a2e16a73a29aca0a5ad690432b2aaa794647e9e296bf721bfbce0c16a545a7dacde688950bd585ca51c6a23c954afabe91f79e724bbecd5a1a366e1d9f01bbd222239e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x14c, 0x16, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x134, 0x1e, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xfff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d2c1c04c738ddf52a04e9776ec2af99d"}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x6}]}, {0xbb, 0x6, "5dc5b9e5556f70edc5ea7f01974bc41eb3ff8a674ebf7d0211359e23e25ac914b236b14042a89215983a9efcb872a6d825ff55dc7489061eb5e732e7a09db2b738a4816676acc96628e1c45ffecbc4b54695761cda24ec070b5fb6d6b0f7a548aef1b31804c418d90ed665d4985b644fea987e02ee6d21955405f3937cd05e63c845a1abbdd943bd95afc7bcff4b43a7b74a47ad9e4b0dc3b7a65e267724f9e10b3f030e687f4b380c29f929a4b783e2f62c9e464d2ddb"}, {0xc}, {0xc}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xfffffffe}, @TCA_FW_POLICE={0x454, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x10000, 0x7, 0x1, {0x1, 0x1, 0xfffb, 0x3, 0x8, 0x4}, {0x0, 0x1, 0x365f, 0x1, 0x200, 0xfffffffb}, 0x5, 0x3, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x9, 0x8, 0x0, 0x2, 0x200, 0x7, 0xa69c, 0x7, 0x2, 0x6, 0x4, 0x23, 0x60, 0xfff, 0x7, 0x3, 0xa, 0x10001, 0x3, 0x12000, 0x9, 0x6, 0x3, 0x0, 0x39bb35c1, 0x2, 0x6381, 0x8, 0xaf, 0x6, 0x7, 0xfffffffa, 0x4, 0x6, 0x1, 0xcc, 0x2, 0xf, 0x1, 0x860, 0x8000, 0x8001, 0x240000, 0x40000000, 0xffffff02, 0x5, 0x0, 0xfffffffa, 0x400, 0x4, 0xffffffff, 0xffff, 0x80, 0x3, 0x400, 0xe, 0x3, 0x5, 0x400, 0x1, 0xfffffffb, 0x3bdb, 0x9, 0x7ff, 0xffffffff, 0x9, 0xc04c, 0xfffffbff, 0x8, 0x9, 0x3, 0xffffd37d, 0x0, 0x7, 0xc09, 0x7, 0x4a11, 0x5, 0x4, 0x8001, 0xab, 0xffffff1e, 0xfffffffc, 0xfffffff7, 0x4, 0x400, 0x25, 0xdc1, 0xe1a3, 0xfff, 0x40, 0xfffffff7, 0x9, 0x1, 0x9, 0xf, 0xfffffffb, 0x7fffffff, 0xd65, 0x5, 0x2, 0x4, 0x8, 0x5, 0xb787, 0x1, 0x5, 0x4a80, 0xee, 0xfffffffe, 0xfffffffe, 0x9, 0x6de, 0x3, 0x9, 0x8, 0x7ff, 0x9, 0xfffffff5, 0x8001, 0xfffffffe, 0x7, 0x400, 0x1, 0x8, 0xffff7fff, 0x0, 0x1, 0x2, 0xffffffff, 0x0, 0x6, 0x81, 0xc, 0x7fff, 0x7, 0x2, 0x3, 0x3, 0x6, 0x6, 0x2, 0xf96, 0x7, 0x9, 0xff, 0x0, 0x7, 0x2, 0x9, 0xa, 0x8, 0xffffffff, 0x47d0, 0x1000, 0x2, 0x8d, 0xc246, 0xbd, 0x4, 0x7, 0x2, 0x7, 0x4, 0x3, 0x3, 0x7, 0xb006, 0x80000000, 0xfff, 0xb1c, 0xfffffffc, 0x1ae, 0x5, 0x1200, 0x8662, 0x0, 0x7, 0x0, 0x3ff, 0x7fffffff, 0x39c, 0x10001, 0x9, 0x47bd322f, 0x6, 0xfff00, 0x9, 0x1, 0x80000000, 0x7, 0x7, 0x4, 0x4, 0x7, 0x3, 0x8, 0x5, 0x400, 0x4, 0x6, 0xbf, 0x1668, 0x7, 0x7, 0x40000000, 0x3, 0x10, 0xe, 0x6, 0x6, 0x10, 0xf66, 0x80000001, 0x4, 0x100, 0x46, 0xf, 0x5, 0xb, 0xc4fb, 0x8, 0x6, 0x4, 0x6, 0x2, 0x8, 0xe, 0xfff, 0x100, 0x80, 0x3, 0x3038, 0xb, 0x91, 0x8, 0x89, 0x2, 0xfffffffd, 0x401, 0x8, 0x81, 0x5, 0x7, 0x617, 0x8, 0xffff, 0x6, 0x703, 0x7, 0x9, 0xf1bf, 0x7, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5d}]}, @TCA_FW_INDEV={0x14, 0x3, 'erspan0\x00'}]}}]}, 0x1288}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x40480c0)

1m16.261252536s ago: executing program 4 (id=977):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x260, 0x228, 0x25a, 0x260, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_macvtap\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0x108, 0x150, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xffff, {0x8}}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [0xff], [0xff, 0x0, 0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4003, @broadcast, 'gre0\x00'}}, 0x1e) (async)
sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="c9e1", 0x2}, {0x0}], 0x2}}], 0x1, 0x4000041)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000611134000000000093ee2443bdb23e207da2598090b70e0000000000000000000000000000000041cc4a618c251fed91f53dedb40e2a0b3d3d00217a0f2cc32e1e25ff626d600ff8658002a13517d2d7c1b3413ea871473af388cdae69f3ada319cb2a366693675afce2c2b5f3e15f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94)

1m16.261013458s ago: executing program 4 (id=978):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r3, 0x0)
listen(r4, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5ea000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0)

1m16.042236362s ago: executing program 4 (id=982):
unshare(0x68040200)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000) (async, rerun: 32)
r0 = socket(0x14, 0x2, 0x4) (rerun: 32)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async, rerun: 64)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="ac1414bbac1414bb0100000020000000"], 0x10) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

1m0.902559014s ago: executing program 34 (id=982):
unshare(0x68040200)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000) (async, rerun: 32)
r0 = socket(0x14, 0x2, 0x4) (rerun: 32)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async, rerun: 64)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="ac1414bbac1414bb0100000020000000"], 0x10) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

54.200703823s ago: executing program 3 (id=1222):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000db1154b5f1000000070100000700ffff9702000008000000b703000000000028850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94)
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000000)={0x80})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10000000, {0x1fed, 0x1ff, 0x200, 0x5}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000800)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

54.132226475s ago: executing program 3 (id=1223):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xe4}, {0x0, 0xc, 0x7f, 0x11000}, {0x9, 0xb, 0x9, 0x60000}, {0xfffa, 0x3, 0x6, 0x6}, {0x9, 0x3, 0x7, 0xc}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)='t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1c2789bd018bf77308ae7ed990e4b63b8cf1cf4ae822f1f84abd5420339c722aa7f6d87f5926c484455c67b7a9259ac3f36154b6526320d83fe72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245dce1a721576750f3f592ce4ac96010bf3ce1d9", 0x70}, {&(0x7f0000000640)="52f8380baae8e668551434e8e52993134696bf3c1070a44f8ceb3f19887414681b93293f0d2708000000a3d8cd2f44c13665c2b7b19ccc306f2564a04b723aca127f75146ebd099961bb5e6fbbd1b0565354e7a8f7", 0x55}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a312f4cb0194c4f28ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89bc4cf0b791013cff43bf314e11a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162860a3c3389ee366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8e6b3450e545fc070644bd06a36106cdb63f9e8ad7ae50b5b44e47f377961f5e29392330fb40d63c911ffd13e094f0452cc5c77b0731b56211b2d8a7554f6077ae593626a54f56d6dea49058fd1d48db02a7b33d50474b58a7e14e6a4d935bfaf4865f00074d59ece4b2d5f5e768e952733ee2c34b3e4b0be230f792f8b16f872afbbd155fe5314d4f54ea7b747eb2cd2410db7464c73ecd4815cda0bcc839fb603bb3f0c04b2d233b54a78b7aa3db974e469c8788e155cc2ef39bcf8491101058093", 0x2e3}], 0x1}}], 0x3, 0x4)

53.209208842s ago: executing program 3 (id=1235):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000014c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r6, 0x0)
mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x15015000)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e37040201", 0x27}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001880)=ANY=[@ANYBLOB="54000000e3239d180fe3bf59ef3ef02cf3ce236c15328dba542bfc6f3f09435480a1abb549bf7acfae84d2265cde42ce3fa2b217b539c6bcdafd1dcc9844eff1a31866be677443eff70c81aee7cab974b1d3414d567f8246cba05d3e9d9030f2da75cd41ab6af4eb3f85dbcaf55935400e6a192d40d43765bf045c2aa1042d961bd0438fec74dcb627a35f405c3ea700000000000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000098fd0b008700000006001100040000000800150009000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000)
socket$alg(0x26, 0x5, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
syz_emit_ethernet(0xbf, &(0x7f0000000480)={@remote, @remote, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@generic={0x80f3, "f15cad05f033e42ade0ced0f0d05bf4461c20ab7011303580380a0c9c2dfc1441cbf2fba645eec5f25f11d26563dd0f959a1a54d8bbe654f648ecd4ec1f2065c0cd19bee9427c9566fed342284d51e186f414f2013c86a006af99fc7cb3a1b3a5edbabca3d48bf49e8ce8b255ce29088982984e90c1ca6850042ccde56894370b549946b368a9040fd0307a910c9b523ca476e92de42bebec3dc487f40e39fca23419173fa3c1488837a42624f"}}}, &(0x7f0000000540)={0x1, 0x4, [0x103, 0xe7e, 0x93, 0xd45]})
syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df006111700000000000850000004c00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2be0}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000880)=""/4096, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x1, 0x7, 0x100}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f00000002c0)=[{0x5, 0x3, 0x6, 0x3}, {0x4, 0x2, 0x1, 0x3}, {0x1, 0x2, 0x7, 0x4}], 0x10, 0x1}, 0x94)

53.165552348s ago: executing program 3 (id=1236):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000a91200010022bd7000ffdbdf25fe880000040000000000fe75000401010000055e62003200fd104a04518990080c001500"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r2, 0x0)
recvfrom(r2, 0x0, 0x0, 0x42, 0x0, 0x0)
syz_emit_ethernet(0xe5, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00', 0xaf, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local, [{0xe, 0x12, "51b1ebcc4bbefb1724d123e2718d0283c0cdb28371709cb770e427257d6e34740774d2ff54998e67a11a2143a3922d00d49f6e305d8db8cbc81897adc25412db3a74e95bff46721037be787441f5c4fd1be1c78457fce3b881f151dd0f4eec66da6afdcb619b8297bdd3aa046ac139d9c2abdbd901381f2fce987fe2e40acd6ccc0b0b87ad189b738b36eea158bedd0c8c66cce85e"}]}}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000a91200010022bd7000ffdbdf25fe880000040000000000fe75000401010000055e62003200fd104a04518990080c001500"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) (async)
socket$rxrpc(0x21, 0x2, 0xa) (async)
bind$rxrpc(r2, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async)
listen(r2, 0x0) (async)
recvfrom(r2, 0x0, 0x0, 0x42, 0x0, 0x0) (async)
syz_emit_ethernet(0xe5, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00', 0xaf, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local, [{0xe, 0x12, "51b1ebcc4bbefb1724d123e2718d0283c0cdb28371709cb770e427257d6e34740774d2ff54998e67a11a2143a3922d00d49f6e305d8db8cbc81897adc25412db3a74e95bff46721037be787441f5c4fd1be1c78457fce3b881f151dd0f4eec66da6afdcb619b8297bdd3aa046ac139d9c2abdbd901381f2fce987fe2e40acd6ccc0b0b87ad189b738b36eea158bedd0c8c66cce85e"}]}}}}}}, 0x0) (async)

53.09258428s ago: executing program 3 (id=1237):
pipe(&(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000009c0)={{r1}, 0x100000000, 0x418b, 0x8}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
writev(r2, 0x0, 0x0) (async)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0xf9, "5f01348a5df5a9b385eed999061cb1affb472678467dbd7e4d065ab68103e11fc1f2d591c744f32f84e94bb849ba2b6cdcac82ba84e6fdd1941401b238b4be42d6d4f170f132898784e71a7dfe981a5fed8a6bfd5d81eef6834794c90be220d4848eb92ca3893bdf09d7e81822a83065f5cfdf8075490f52d2392ef3f42dd03283908b414acceb7ddef485adbef927b30393b54d41286fef4963c27c76f057c66028ef4879a696dd67b240647ea0a0ee97c58ceb6c86efac990da507ac3ff508e6c0d0bd4960bbfd58f2f14edfa435a6938e974f687e8718e1174a84753aaa7dafecadbea8c686e40d27abfb0189241b354df63f76acbd213f"}, &(0x7f0000000080)=0x11d) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', <r9=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x57, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0)

53.091185771s ago: executing program 3 (id=1238):
unshare(0x62040200) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8010, 0xffffffffffffffff, 0x0) (async)
gettid()
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10)
unshare(0x10000000) (async)
gettid() (async)
r1 = socket$key(0xf, 0x3, 0x2) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb4aa468739b8508060001080006040001aaaaaabe23c68b7c245225330377ba25ac1414ff"], 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = socket$key(0xf, 0x3, 0x2) (async)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) (async)
sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02070000100000000000000000000000e2d8ab912b03000500000000c1638ce371928cc30c6c0002000000ac1e00010000000000000000080012000000010000000000020000000600000020000000000000000000000000000000000000000000000000000000fc02000000000000000000000003000600000000000200"/135], 0x80}}, 0x0) (async)
unshare(0x68040200) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
close(0x3)

50.472274786s ago: executing program 2 (id=1251):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004410}, 0x1)

50.411116714s ago: executing program 2 (id=1252):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7a0927bd7000fcdbe380a2d8459edf96e39942684ea7df2552f7a271f6b9b9c6ebe39eedc04fb143a19759f8350a", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x2044840)
r3 = accept(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x80)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x12)
close(0x4)
r4 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[], 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='scsi_dispatch_cmd_error\x00', r5}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2)
recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60000123)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_int(r7, &(0x7f0000000200), 0x12)
setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000240)=0xc, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000001000)="e4", 0x1}], 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

49.541662661s ago: executing program 2 (id=1255):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffffb}]}}]}, 0x38}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}, @IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x44}}, 0x0)

49.402290054s ago: executing program 2 (id=1258):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r1, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x1, 0x0) (async)
splice(r4, 0x0, r6, 0x0, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0)
write(r3, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000380)=0x5, 0x4) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000380)=0x5, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x25}, 0x1f20)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) (async)
setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080) (async)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)

49.151180185s ago: executing program 2 (id=1263):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @remote}, 0x2, 0x3}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0x3}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0xc}, {&(0x7f0000000800)="c8ea972e8fbc521800f8ffffffffffff186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0x26}], 0x3}, 0x200ce0c0)

49.061600278s ago: executing program 2 (id=1264):
unshare(0x62040200) (async)
mmap(&(0x7f000006e000/0x3000)=nil, 0x3000, 0x300000a, 0x110, 0xffffffffffffffff, 0x2104b000) (async)
gettid() (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) (async)
unshare(0x10000000) (async)
gettid() (async)
r1 = socket$key(0xf, 0x3, 0x2) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x14, r3, 0x1, 0x400000}, 0x14}}, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = accept$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@null, @netrom, @netrom, @remote, @bcast, @default, @null, @netrom]}, &(0x7f00000001c0)=0xffffff3b)
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb4aa468739b8508060001080006040001aaaaaabe23c68b7c245225330377ba25ac1414ff"], 0x0) (async)
sendmsg$inet(r4, 0x0, 0x40045) (async)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfffffffffffffe93}}, 0x0) (async)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)

39.779817934s ago: executing program 5 (id=1314):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async)
r1 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sendto$packet(r1, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async, rerun: 32)
r9 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) (async)
write$nci(r5, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x1, {0x5, 0x2}}, 0x5) (async, rerun: 64)
sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) (rerun: 64)
recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x8, 0x0}, 0x60000121) (async)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet6_mreq(r10, 0x29, 0x0, &(0x7f0000000440)={@dev, <r11=>0x0}, &(0x7f0000000480)=0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xbe, 0x0, r4, 0x4, '\x00', r11, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
shutdown(r12, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x74, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @IPSET_ATTR_ETHER={0x0, 0x11, @remote}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0xf7}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc081) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

39.713830453s ago: executing program 5 (id=1315):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="9be50bc17286da16cc0349187c4d", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x40)

39.652056851s ago: executing program 5 (id=1316):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xfffffffc, 0x1, 0x1000, 0x1, 0x4, 0x9, 0xa1, 0xfff, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x80000000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x401, 0x6, 0x9, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x1, 0x0, 0xe, 0x2b11, 0x104, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x100, 0x3, 0x0, 0xfffe, 0x8, 0x7, 0x79c, 0x2, 0x1, 0x7f, 0x3ff, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x5, 0x180000, 0x80007, 0x80bf44, 0x5, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xba2a, 0x4, 0x5, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xffffffff, 0x0, 0x6, 0x8, 0x8, 0xffffffff, 0x2, 0x2, 0x81, 0x100, 0x5, 0x68, 0x81, 0xb, 0x5, 0x6, 0x5, 0x2, 0x1, 0x12, 0xd9a, 0x9, 0x2a2, 0x0, 0xffff, 0x9, 0x5, 0x8, 0x0, 0x98fa, 0x2, 0x0, 0x7, 0x4, 0x5, 0x401, 0xd, 0x0, 0x8, 0x1, 0x200, 0xc5e, 0xffffffff]}})
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x110, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x14}, @broadcast, 0xffffff00, 0xffffffff, 0xe, 0x3, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x6cab, 0x1, 0xffff, 0x743, 0x7, 0x533a, 'veth0_vlan\x00', 'caif0\x00', {0xff}, {0xff}, 0x0, 0x220}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@arp={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffff00, 0xff000000, 0x4, 0xe, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x3, 0x4, 0x9, 0x3, 0x3, 0x2, 'gre0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x2c}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4, {0x3}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000))

39.651488777s ago: executing program 5 (id=1317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) (rerun: 32)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) (async)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) (async)
connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @private}}, 0x1e) (async, rerun: 32)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async, rerun: 64)
sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) (rerun: 64)

39.581944575s ago: executing program 5 (id=1318):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7ff, 0x30}, &(0x7f00000000c0)=0xc) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) (async)
r4 = socket(0x2a, 0x800, 0xfffffffc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x0) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000) (async, rerun: 32)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x408, 0x200, 0x0, 0xffffffff, 0x0, 0x130, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x8]}}, @common=@inet=@esp={{0x30}, {[0x4d5, 0x4d2]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x2, 0x6, 0x4, 0x7, 0x4], 0x4, 0x6}, {0x1, [0x5, 0x0, 0x4, 0x2, 0x84117e15e7136e41, 0x3], 0x2, 0x6}}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 'pim6reg1\x00', 'bond0\x00', {}, {0xff}, 0x88, 0x1}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port=0x4e23, @gre_key=0x90b}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, 0xff, 0x0, 'pim6reg0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x32, 0x2, 0x2a}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010101, @multicast2, @port=0x4e23, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0xffffff7f}})

39.580600175s ago: executing program 5 (id=1319):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcd, 0x12d5f, 0x3}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcd, 0x12d5f, 0x3}}, 0x44)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000031637f00"/16], 0x48)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000002c0))
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)

37.705513889s ago: executing program 35 (id=1238):
unshare(0x62040200) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8010, 0xffffffffffffffff, 0x0) (async)
gettid()
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10)
unshare(0x10000000) (async)
gettid() (async)
r1 = socket$key(0xf, 0x3, 0x2) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb4aa468739b8508060001080006040001aaaaaabe23c68b7c245225330377ba25ac1414ff"], 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = socket$key(0xf, 0x3, 0x2) (async)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) (async)
sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02070000100000000000000000000000e2d8ab912b03000500000000c1638ce371928cc30c6c0002000000ac1e00010000000000000000080012000000010000000000020000000600000020000000000000000000000000000000000000000000000000000000fc02000000000000000000000003000600000000000200"/135], 0x80}}, 0x0) (async)
unshare(0x68040200) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
close(0x3)

35.141130755s ago: executing program 6 (id=1339):
r0 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0}) (rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async)
ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000000)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (rerun: 32)
ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000100)={0x3, 0xc}) (async, rerun: 64)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000140)='veth1_to_team\x00'}) (async, rerun: 64)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
unshare(0x8040600)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "104000", 0x8, 0x0, 0x0, @ipv4, @local, {[], "1ce302d74f6ae54b"}}}}}, 0x0) (async, rerun: 32)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r10, r9, 0x2, 0x6, 0x4000}, 0x10) (async, rerun: 32)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000900010073797a32000000000900030073797a3200000000"], 0x2c}}, 0xc800) (async, rerun: 64)
sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0900000000000000000000070200"], 0x14}, 0x1, 0x40030000000000}, 0x0) (async, rerun: 64)
r11 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3e8, 0x4, 0x70bd2c, 0x25dfdbfe, {0x2, 0x2, 0x3c, [0x0, 0x1, 0x3, 0x2, 0x6, 0x8000, 0xdb2, 0x22ef, 0x1ff, 0x10001, 0x5, 0x401, 0x1, 0x6, 0x141e16d, 0x8, 0xb, 0x8, 0x25ed8f50, 0x4, 0x6, 0x6, 0xaa32, 0x2, 0x7, 0xfffff9e7, 0x2, 0x8, 0x1000, 0x7, 0x4, 0x9, 0xe, 0x89f4, 0x40, 0x401, 0x81, 0x5, 0x6, 0x7fff, 0x9, 0x7, 0x6, 0x40, 0xd64e, 0x2, 0x1, 0x7, 0x6, 0xe7f, 0x8, 0x7, 0x92b0, 0xd, 0x2, 0x8001, 0x5, 0x6, 0x4, 0xaf, 0x0, 0x73396a94, 0x3, 0x4], [0x3, 0x80000006, 0xfffffffe, 0x3, 0xfffffff9, 0xcd, 0xfffffffd, 0xffff, 0xaa, 0x5, 0x9, 0x5, 0xc, 0x0, 0x2000000, 0x81, 0x4, 0x7900, 0x782, 0x100, 0xffff0001, 0x0, 0x1, 0x0, 0x3, 0x9, 0x4000001, 0x3, 0x0, 0x4, 0x6, 0x10, 0x5, 0x0, 0x1, 0x4, 0xac, 0x3, 0x10, 0x3, 0x6, 0x8, 0x9, 0x8, 0x2, 0x0, 0xb195, 0xffffdd80, 0x3, 0x100001, 0x3, 0x6, 0x8, 0xb, 0x5, 0xac, 0x2009, 0x0, 0x6, 0xc, 0x1, 0x2, 0x0, 0xfffffffc], [0x7, 0xe, 0xce, 0x1, 0x1, 0xd, 0x0, 0x8, 0x3, 0x7ff, 0x1, 0x4, 0xee1e, 0x5, 0x6, 0x2, 0x8, 0x5, 0x3, 0x7, 0x758, 0x9, 0x1, 0x6, 0x0, 0x77cc, 0x9, 0x2, 0x6, 0x8, 0x3, 0xf64, 0x8, 0x1, 0x4, 0x10000, 0x2, 0x5, 0xee8, 0x7fff, 0x15e18422, 0x10000, 0x5, 0x7ff, 0x1, 0x2, 0x6, 0x8, 0x8, 0x2, 0x4, 0x1000, 0x3ff, 0x3, 0x7b6f0000, 0x2, 0x4000003, 0x9, 0x68ec, 0x4, 0x9, 0x7, 0xffff8f0d, 0x3], [0x9, 0x8, 0x1, 0x200, 0xfffffff8, 0x400, 0x3, 0xa, 0x90, 0x6, 0x8, 0x4e6b, 0xc, 0x0, 0xc8, 0xad, 0x3, 0x5, 0x4, 0x6, 0xfffffff1, 0x1, 0x1, 0x4, 0x8, 0x6, 0x9, 0xff, 0x400, 0x9, 0xfff, 0x6, 0x651, 0x8001, 0x1, 0xee83, 0x7, 0x4, 0xe, 0xa, 0xffff, 0x4, 0x9, 0x20000000, 0x7, 0x74, 0x0, 0x6, 0x5, 0x101, 0x9, 0x2, 0x2, 0x0, 0x5, 0x6, 0x2, 0x4, 0x6, 0x4, 0x7, 0x6, 0x8]}}, 0x420}}, 0x40040) (async)
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8001) (async)
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0x4) (async)
getsockopt$packet_int(r12, 0x107, 0x12, 0x0, &(0x7f0000000080))
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x0, 0x1a0, 0x98, 0x358, 0x0, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'batadv_slave_0\x00', {}, {}, 0x90, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @multicast1, 0xffffffff, 0x0, 'veth1_to_bond\x00', 'dummy0\x00', {0xff}, {0xff}, 0x62, 0x1, 0x48}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x8, 0x142}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1, 0x1], 0x0, 0x6}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0x3}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x0, 0x0, 0x5, 0x4, 0x2], 0x5}, {0x4, [0x4, 0xc, 0x7, 0x7, 0x4, 0x3], 0x6}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510)

35.068917009s ago: executing program 6 (id=1340):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x83, 0x83, 0x9, [@restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0xc, 0x4}, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}, @datasec={0xd, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x3, 0xfffffffa}, {0x2, 0x2, 0x10000}, {0x1, 0xa0, 0xfff}, {0x4, 0x4, 0x8}], 'xh]'}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61, 0x5f, 0x30, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000640)=""/189, 0xa5, 0xbd, 0x0, 0xde, 0x10000}, 0x28)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3ff0000a10000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r5, 0x5, 0x4000, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]]}, 0x30}}, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x14, 0x0, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x20000000)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000005c0)=<r12=>0x0, &(0x7f0000000600)=0x4)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={<r13=>0x0, @broadcast, @private}, &(0x7f0000000840)=0xc)
getpeername$packet(r0, &(0x7f0000000880)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000008c0)=0x14)
sendmsg$ETHTOOL_MSG_WOL_SET(r10, &(0x7f0000001100)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f00000009c0)={0x6d8, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x230, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_MASK={0xfe, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfe, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'f\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x75, 0x3, "8f632288a0100b44816a821dc476b93127017be86ca637917d306ae30883ecf58b0836568cb4ae7b94626ce652602b5a7e29467d9df7a77cd95c7b3d1d8a17dc2e1d4a02cac2e9a796b64bba9248eb6ca6f9363b0f34ee4fc6e664f0429218e86749b4404c93eba4c78b1f6b4905267510"}, @ETHTOOL_A_WOL_SOPASS={0xd, 0x3, "cfbb06b42399ce45ed"}, @ETHTOOL_A_WOL_MODES={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x10, 0x5, "69a122af21a63d16f3e35fe3"}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "9e9e5f96342083457ac3f91148cd8529eeb5847d5efd531ab4e8a729cf6148f4bf2f4eed0277ecdb3291e577886716d686aee1d747971555ebcf481b11b2836918e4336a5efbe705573fe6a94f1cfac0379145fc3b026eff5a56ecf2af2b28c96fbefa4d7d6e62449cdc4889a2669e1e77a9de0c1553d6f62042206ce0f71c598f9b03be92dcd704f19dd1fc40a5924456cc145d47f146a35d94482280fe63b1968202d52af573b85519a07b6407964273bda4020588b721ccdb46f00eaeff24dfc1c41d17fa7c3119b2d87c63bf9fcc48a7a82f269ee60ae2c929ee6f71356f3b"}, @ETHTOOL_A_BITSET_VALUE={0x6a, 0x4, "b50d3942c2589bac12e7c2273dcb50649f68023e2c4346b5fe060c766065bbd1f1ab6f15352ceb99f67590b4a163244d5084265ab07516fb5998a6d202e24e8a2ea639592f8407feb9f883ef97f617e2a86c49cbd17fb20b45fd52f05dbc2bcdebdd0bbff871"}]}, @ETHTOOL_A_WOL_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x39, 0x3, "295448ee9a7cecd9915c3be2cfe1f22ac45a9e87b9f715b28510e46207af59fb4a2999ea3feb39154165af2ca236e2ee012d1e9335"}, @ETHTOOL_A_WOL_SOPASS={0x49, 0x3, "2aaf6cbccd2b812586f424299318dcd19e553f5140079f1c2e2e42aee67ae2e26a6514b38c1054dee8542df51ff82d74af0e2cce6d62c54e10f605ab17878705e616f8f1f3"}, @ETHTOOL_A_WOL_SOPASS={0xf, 0x3, "a5970a09221dce6c43ed35"}, @ETHTOOL_A_WOL_MODES={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb, 0x4, "d8c7a70f0a608e"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "e4ffa2a1c09b746cf8732c990f3551ecb2a7333e1c0f3c31084aeff83aa67432da7769c7909a09304bcaf0dfafd3f02078e4353f208b3b8b13e362a91fe2021d7d137b5efc31f73d903f160f0afbd886991c83e51e766b04331ea33732a448f15e5ee73957aa53aba031feeeaebb52af9b24fb92a6296135c92cb4b9b58a989b83d38b9feb59d7980e1eadfe3359602c5dbbe8bb6a64edbd607df5dff24a3e2c349236e5bb9bf25bf52fbede52214f385363799402603ac9411605d52446334609ce17f1b8539a93e65a3a6b805ee946a1ba9be3a28eb1e7066c965fb9eaac52369a1f4ca380ef"}, @ETHTOOL_A_BITSET_MASK={0x9e, 0x5, "ec58ad4b74a69d1dbac8e842ec69c7e3fef0a94f7b532c60ec54d94fd5c08cc5ec9e1fd2c20b619a32b0da79b1647f7d7205cf1baca0c348d92e5a201ad79a1d045a2d8d20835a50d19a2fd849e4c62f6a07c7ee21d94ea5148c2178983c8e64f27117f0d6b90620e6c05286f5e4ed650fa8287af190430555bd7d63e65c0ea9f67f650439fcd3175f2baddd859354706bef9a0892bbe367931d"}]}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x4048091}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000001000370401000000ffdbdf2500000000", @ANYRES32=r15, @ANYBLOB="890cf8ffffffffff0400100005000000240012800b000100677265746170000014000280080004000300000006000300800000000a506f496ce9ce649b785ef3669cfb37592e5aad6a1409bc3d60004588c2c8cde0a7c0ac956ec54a8551503039853ee12387c35355e27530af5f00b840c8669f78a16a55afc4cd593a84879e553882728f75bb3580f396eb339270e39a351477075d09e4dfd6342af7c46cbab66f6249fddcf45db6519b07556e1c6d40e1822e535c3e8f4bc623631ed26b5d909a6f613a31a317827b671a239616c849c3"], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r4, <r16=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000340)='%pI4   \x00'}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r4, r16}, 0xc)
r17 = socket$inet(0x2, 0x2, 0x0)
r18 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r18, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)
sendmmsg$inet(r17, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)

35.019778925s ago: executing program 6 (id=1341):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x5, @mcast2, 0x91}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000}, @in={0x2, 0x4e20, @empty}], 0x48)

35.019368479s ago: executing program 6 (id=1342):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c6c25000000000e0020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280), 0x0)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3a39}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x91}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1c02ff8e}]}]}, 0xc0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

34.96239392s ago: executing program 6 (id=1343):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$llc(r1, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'devices'}, {0x2b, 'hugetlb'}, {0x2d, 'net_cls'}, {0x2d, 'freezer'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2b, 'net_prio'}]}, 0x3c)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
getsockname$llc(r1, 0x0, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'devices'}, {0x2b, 'hugetlb'}, {0x2d, 'net_cls'}, {0x2d, 'freezer'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2b, 'net_prio'}]}, 0x3c) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) (async)

34.852107649s ago: executing program 6 (id=1344):
unshare(0x68040200) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$isdn(0x22, 0x3, 0x21)
poll(&(0x7f0000000000)=[{r1, 0x2040}, {0xffffffffffffffff, 0x8000}, {r0, 0x141}, {r0, 0x2084}], 0x4, 0x4000) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000) (async)
r2 = socket(0x14, 0x2, 0x4)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0xc00, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0) (async)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @remote, 0x1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

33.703945423s ago: executing program 36 (id=1264):
unshare(0x62040200) (async)
mmap(&(0x7f000006e000/0x3000)=nil, 0x3000, 0x300000a, 0x110, 0xffffffffffffffff, 0x2104b000) (async)
gettid() (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) (async)
unshare(0x10000000) (async)
gettid() (async)
r1 = socket$key(0xf, 0x3, 0x2) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x14, r3, 0x1, 0x400000}, 0x14}}, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = accept$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@null, @netrom, @netrom, @remote, @bcast, @default, @null, @netrom]}, &(0x7f00000001c0)=0xffffff3b)
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb4aa468739b8508060001080006040001aaaaaabe23c68b7c245225330377ba25ac1414ff"], 0x0) (async)
sendmsg$inet(r4, 0x0, 0x40045) (async)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfffffffffffffe93}}, 0x0) (async)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)

32.608654305s ago: executing program 7 (id=1345):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
epoll_create1(0x80000) (async)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff)
syz_emit_ethernet(0x166, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x130, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3"}]}}}}}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040850}, 0x4000)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
listen(r4, 0x0) (async)
listen(r4, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x38, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xec}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x80)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x8040)
socket$unix(0x1, 0x1, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r9, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
connect$unix(r9, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8020}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b000008"], 0x104}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b000008"], 0x104}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0)

32.461937991s ago: executing program 7 (id=1346):
unshare(0x68040200) (async)
write(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32)
getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f00000001c0)) (async, rerun: 32)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) (async, rerun: 64)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x3, 0xc)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050988d2cccb413e056700060005000100079a0000000000000000000114020880100007800a00110000000000e57323f342f94883ec856fde3cb07084453eaf2f11737c56e9e17d14f3c4f96dcd959b8f7170ce9d272385028f71fdbe68958109894c1e0bb4cf277665067e9dd65d3154227e88107021d1777b85c6135fafa0d0ca782eef7b1f93c2fff88fe362"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) (async, rerun: 32)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e00000000000000ae62ecfbdfbf671d6e186ca4612c742ab7e53db864cc029ae5d4", @ANYRES32, @ANYBLOB='#\r\x00'/15, @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB='\x00\x00'], 0x50) (async)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1b, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="184900000700000000910000000000001848000001000000000000000000000085000000ac0000001939000005000000000000000000008a"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xc1, &(0x7f0000000080)=""/193, 0x41100, 0x3, '\x00', 0x0, @fallback=0xe, r1, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0xce85, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x0, 0x10, 0x545}, 0x94) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x38}}, 0x20040810)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRES16=r9, @ANYBLOB="01002bbd70eafedbdf25180000000c0006000100000001000000100030790c00018008000100020000"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0xc080)
sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000023bda39dd07000fbdbdf2519230000"], 0x14}}, 0x48800) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x2f8, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000100))

23.696059146s ago: executing program 37 (id=1319):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcd, 0x12d5f, 0x3}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcd, 0x12d5f, 0x3}}, 0x44)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000031637f00"/16], 0x48)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000002c0))
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)

19.69396786s ago: executing program 38 (id=1344):
unshare(0x68040200) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$isdn(0x22, 0x3, 0x21)
poll(&(0x7f0000000000)=[{r1, 0x2040}, {0xffffffffffffffff, 0x8000}, {r0, 0x141}, {r0, 0x2084}], 0x4, 0x4000) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000) (async)
r2 = socket(0x14, 0x2, 0x4)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0xc00, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0) (async)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @remote, 0x1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

17.366158944s ago: executing program 39 (id=1346):
unshare(0x68040200) (async)
write(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32)
getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f00000001c0)) (async, rerun: 32)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) (async, rerun: 64)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x3, 0xc)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050988d2cccb413e056700060005000100079a0000000000000000000114020880100007800a00110000000000e57323f342f94883ec856fde3cb07084453eaf2f11737c56e9e17d14f3c4f96dcd959b8f7170ce9d272385028f71fdbe68958109894c1e0bb4cf277665067e9dd65d3154227e88107021d1777b85c6135fafa0d0ca782eef7b1f93c2fff88fe362"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) (async, rerun: 32)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e00000000000000ae62ecfbdfbf671d6e186ca4612c742ab7e53db864cc029ae5d4", @ANYRES32, @ANYBLOB='#\r\x00'/15, @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB='\x00\x00'], 0x50) (async)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1b, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="184900000700000000910000000000001848000001000000000000000000000085000000ac0000001939000005000000000000000000008a"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xc1, &(0x7f0000000080)=""/193, 0x41100, 0x3, '\x00', 0x0, @fallback=0xe, r1, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0xce85, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x0, 0x10, 0x545}, 0x94) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x38}}, 0x20040810)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5, @ANYRES16=r9, @ANYBLOB="01002bbd70eafedbdf25180000000c0006000100000001000000100030790c00018008000100020000"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0xc080)
sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000023bda39dd07000fbdbdf2519230000"], 0x14}}, 0x48800) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x2f8, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000100))

15.649982277s ago: executing program 9 (id=1398):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000007, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@default, @bcast, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffa}, 0x18) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a8010002d800c000180080016000600000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d93df0600000000000000000000002369e0ac", 0x15}, {&(0x7f0000000140)="7c0004", 0x3}], 0x2) (async)
connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r10)
socket$netlink(0x10, 0x3, 0x0)

15.542147623s ago: executing program 9 (id=1399):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f0000000200)={'bond0\x00', 0x10000})
syz_emit_ethernet(0xcd, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x3, 0x5, 0xbf, 0x66, 0x0, 0x67, 0x1, 0x0, @private=0xa010102, @local, {[@generic={0x94, 0x4, "7dbb"}, @ra={0x94, 0x4, 0x1}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x6, 0x0, {0x26, 0x4, 0x0, 0x3, 0x6, 0x65, 0x5, 0x4, 0xc, 0x400, @rand_addr=0x64010100, @loopback, {[@ssrr={0x89, 0x1f, 0xe5, [@loopback, @local, @empty, @loopback, @rand_addr=0x64010102, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x4d, 0x3, 0x9, [{@rand_addr=0x64010102, 0x6}]}, @ssrr={0x89, 0xb, 0x5, [@rand_addr=0x64010100, @empty]}, @cipso={0x86, 0x3b, 0x1, [{0x6, 0x2}, {0x0, 0x3, 'K'}, {0x5, 0x7, "2351daba6c"}, {0x6, 0xc, "32590a112f58e8179b91"}, {0x6, 0x3, 'V'}, {0x7, 0xb, "0da53affca23b032d2"}, {0x5, 0x8, "d56ec24d3b10"}, {0x1, 0x5, "8905e4"}, {0x7, 0x2}]}, @generic={0x7, 0x2}, @ssrr={0x89, 0xb, 0xfe, [@local, @multicast2]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, 'L@f'}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0x3f00, 0x88be, 0x10, 0x0, @opaque="944523b357010700"}}}}}, 0x0)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000380)="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")

15.541902313s ago: executing program 9 (id=1400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x400) (async)
close(r3) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r3, r3, 0x7, 0x0, 0x4, @void, @value=r4}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000040)=@srh={0x67, 0x0, 0x4, 0x0, 0x7, 0x0, 0x81}, 0x8) (async)
getsockopt$inet6_opts(r5, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f0000000840)=0x7)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})

15.44192695s ago: executing program 9 (id=1401):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000001080)={@local, @link_local, @val, {@ipv4={0x88a8, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "7fe77f731db8aba73f3509d6e7118104224a45fe99a8fbc5252b1170535ac6fb", "c196168f72696bf9ad5b6dc51a703690", {"aa72f4bd15c2580cdc3d66fdf23cb5a3", "a02ad2bc4f0c9415f88c3599baddc6ee"}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x5, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0xa0, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x28}, 0x1, 0x7}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@ipmr_newroute={0x3c, 0x18, 0x100, 0x70bd27, 0x25dfdbff, {0x80, 0xb7b69e100df4a509, 0x0, 0x67, 0xfd, 0x0, 0x0, 0x4be492ff859765f4, 0x800}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x6}}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010102}, @RTA_FLOW={0x8, 0xb, 0x7}, @RTA_DPORT={0x6, 0x1d, 0x4e23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10040010}, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

15.199713036s ago: executing program 9 (id=1402):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) (async)
sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0xa0eaa2cceae0a789, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) (async)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) (async)
r2 = epoll_create(0x3ff)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)={0x4}) (async)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
socket(0x27, 0x8000e, 0x9)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
r4 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket(0x2, 0x6, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

15.041935822s ago: executing program 9 (id=1404):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010058000000000000000c00000000190400000000000000000127c3fe79b875645ef0f6cc5b"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500))

7.592152934s ago: executing program 1 (id=1471):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}]}, 0x38}}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x3c, r1, 0x1, 0xffffffff, 0x0, {0x1, 0x0, 0xe4}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000)

7.48849792s ago: executing program 1 (id=1472):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async, rerun: 32)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) (rerun: 32)
r1 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}]}, 0x48}}, 0x0)
r4 = socket$isdn_base(0x22, 0x3, 0x0)
splice(r1, &(0x7f0000000040)=0x1, r4, &(0x7f00000000c0)=0x9, 0x2, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000fc18ffff73010800000000009500"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)

7.485810707s ago: executing program 1 (id=1474):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x6}, 0x50)
socket(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000140)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="900000ff", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r6], 0x90}}, 0x0)

7.390236564s ago: executing program 1 (id=1476):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

7.161667588s ago: executing program 1 (id=1477):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet(0xa, 0x801, 0x84) (async)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8)
close(r1) (async)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x3, 0x2)
socket(0x1, 0x803, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f00000004c0)="3ce2de4d8d", 0x5, 0x805, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0, 0x12}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/161, 0xa1}], 0x4}, 0x100}], 0x1, 0x10022, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000001780)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a4d7ca314f8852df8f05000f02b5258ec56ec5fd", 0x41}], 0x1, 0x8) (async)
vmsplice(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000001780)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a4d7ca314f8852df8f05000f02b5258ec56ec5fd", 0x41}], 0x1, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="09000000170000000a0000004000000042000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000ed"], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)

7.097916664s ago: executing program 1 (id=1478):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) (async, rerun: 32)
r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0xffffffff, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) (async, rerun: 64)
r2 = socket(0x2, 0x80805, 0x0) (async, rerun: 64)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000031637f00"/16], 0x48)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) (async)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000002c0)) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) (async, rerun: 32)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (rerun: 32)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)

1.211069202s ago: executing program 8 (id=1505):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64)
socket$inet(0x2, 0x4, 0xcac) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4) (async, rerun: 64)
r5 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffff0c, 0x3, 0x80000001, 0xfffffff6}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 64)

1.04185691s ago: executing program 8 (id=1506):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08004d010010"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4)
shutdown(r0, 0x1)

921.277187ms ago: executing program 8 (id=1507):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffdfc, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x91}}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000003400048005000300010000000500030001000000050003e300000000050003000200000005000300050000000500030007000000080002"], 0x58}}, 0x0)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000427bd7000fddbdf251b0000000400cc0008009a00020000000600210061000000940022805400008008000400f3ffffff0800020001010000080002003fab000008000400060000000800020009000000080004000200000008000700020000000800030007000000080007000200000008000200020000003c000080080001000100ffff0800040010000000080001000d000000080005000400000008000700030000000800030000000000080003000700000008009a0002000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x810)

62.057236ms ago: executing program 8 (id=1508):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x101, @rand_addr=' \x01\x00', 0x5}, 0x20)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
unshare(0x24020400)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f00000001c0)="111927248c", 0x5}, {&(0x7f0000004d00)="129f8e036c1808a28c6db37483f9f3c9b4b4030b9e4a055c89c022064231474850d122caeae9503fb545d15a3d9f767cf023a279bea02b1dab7686a846cffa7f35be35210667fe796d7205d9579032198e854b5048518f8c983b01ec72c436b778da82bbaaed73c34693c87c55b8b061bbdc563c99b7633faab9c33d88c96ec51c0c1e983b0e7e39db1edce51da58ebafd93e42a867df372d556cc55865276e9d49194d5bd5b4c82efdfaf75547ae1", 0xaf}, {&(0x7f0000000380)="447d0d3a055946223643ea00ade14e638c39c837eb2e9f84ab374d91ebaa86df2c082af1d78be69a207519b6067cac31eca7fdc5d82d0b4f3d3d8d6ac56981c7330578715963b55cf44f4fd9a97468d493ad901c67a8183ab3dd833a6c14fcbae58a9cf078352090e7805c48cf16a9ab9e99bb704f4576d0429a378d8fae2562fa9fc588568f0882c47e61f6dcd2a23436150440b9884b63ea8ec0198c614df9847cbe6110655aa9f93c8d26", 0xac}, {&(0x7f0000000440)="49d6d6de3eaa86187694af96b29dc8e021b8fefad6a91d18cf8f8f050e382ddf19bb3bd2f6e077e63d5e24a12ca94e0b43d81e24e2658acc03436bd9aaf7e2e3315c2ea0bf203f7f5ed6679fe71e685e7f1371723008497930028c4b6de78f8bb11da4a4720af655631c0334a36a6661", 0x70}, {&(0x7f0000005100)="1ecc9c6e456a6b67d841b40a3268d892cd28a2f1297ac8aa1404cf2938d0ab64e85e0fbbfd780ef3840a9620a3dce5131550a9ad5e9e5fdaa7bb1c4948f2facdfe2f5c656c785c5b35e4dc07dcb74411a7d1d3afaf4d8afd3221905a379964e15d25b50b2b2446076a3fa236fae22bc69354092106de91f8918bebc1f4e700d79281707e284fc87fff9ef3d3fe6444a2878e3e0c1449e1ff02620c8b033377979ee26e79f46f5ec6db093204f13349595d2fdf7ea533a1ae65b58664ec232a20de73107558ad05272eb31ce42cada8e56fb13ff54620d69e0cb66cb1d30dd57d2f9923eb0256", 0xe6}, {&(0x7f0000005200)="fa7175aea96bde390728530941c91352d8e2684c38f2c86ce903c026b9b6f2e1834c43deb710f5c02b5e4e9bfc5909947966c4b7b4172ac7cf720952d4153a4dcaa74270ad7d73d9db2ca212524ac844eed6666ee038c44ac74a4edaef685b293cf8230e5e0b1ff30844d25b249f54338d85233d3a925709f761ebb6335b6a3c124158ee7375a97f06294a7017b03b51191691483bba7fd54ffd148a7859a092943da1e359e9d01c170920559012", 0xae}, {&(0x7f00000052c0)="83246c7a28eed718c9054a9547db989c94fa52a5e7c449a77335aaf105e220bc9fd3ae847586d071f1a51c28648534b850b628b3376c57faffa2bb6f62ccd97fea150820fae1aa4a435fe84e4887733b146b7ba2c8bb7e5a56e7cff36360799c6c38aa66894d0df8c1d19514e426fcc15b9e82b1c45689e2d140b9957f8f1899947bff3cddcbed79c29edd1f11730651e2e2101e14a4fd8e18eb315a3a1469019290839708ae022f733ccddeaf567d937c2f6016860b0c218b310ec70281", 0xbe}, {&(0x7f0000003640)="9845ce452aeb8f778a3dc68b7896e898b78c15cd6080abe98a657fde6f6e0c3b7a2999d85d088fc227c27f0b3445e73ab96e2d4ed0cf7ffd5bb3ea53005caedd8594de27e700787c7698b1eb48a72dc560dbb08ccfc0aac7", 0x58}, {&(0x7f0000005380)="8745e9feb39f5af0f97021c3f299b6da4a08dad992f783ad20f610207a449e298acaedc77927f283ee616a", 0x2b}], 0x9}}], 0x1, 0x4000000)
shutdown(r1, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111520000000000850000008900000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x18, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @empty}], 0x30)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getqdisc={0x30, 0x26, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x9, 0xa}, {0xfffd, 0x1}}, [{0x4}, {0x4}, {0xfffffffffffffee3}]}, 0x30}}, 0x0)

37.292667ms ago: executing program 40 (id=1404):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010058000000000000000c00000000190400000000000000000127c3fe79b875645ef0f6cc5b"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500))

2.009389ms ago: executing program 8 (id=1510):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYRES16=r0], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2711, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c)
connect$inet6(r2, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)

0s ago: executing program 8 (id=1511):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x6}, 0x50)
socket(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000140)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r6], 0x90}}, 0x0)

kernel console output (not intermixed with test programs):

in process `syz.2.311'.
[   78.935578][ T7141] DRBG: could not allocate digest TFM handle: hmac(sha512)
[   78.968171][ T7154] siw: device registration error -23
[   79.202717][ T7162] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   79.962516][ T7164] netlink: 'syz.2.316': attribute type 4 has an invalid length.
[   80.059505][ T7170] netlink: 'syz.2.318': attribute type 58 has an invalid length.
[   80.091340][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'.
[   80.096222][ T7172] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[   80.118170][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'.
[   80.221650][ T7184] netlink: 'syz.2.323': attribute type 3 has an invalid length.
[   80.224172][ T7184] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.323'.
[   80.230385][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'.
[   80.333659][ T7195] openvswitch: netlink: Message has 20 unknown bytes.
[   80.336881][ T7195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.340512][ T7195] netlink: 788 bytes leftover after parsing attributes in process `syz.2.326'.
[   80.403963][ T7200] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[   80.503254][ T7204] netlink: 'syz.2.329': attribute type 21 has an invalid length.
[   80.506003][ T7204] netlink: 'syz.2.329': attribute type 6 has an invalid length.
[   80.508533][ T7204] netlink: 64 bytes leftover after parsing attributes in process `syz.2.329'.
[   80.513007][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'.
[   80.519355][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'.
[   80.544558][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'.
[   80.557711][ T7207] 8021q: adding VLAN 0 to HW filter on device bond5
[   80.714367][ T7218] Cannot find add_set index 2 as target
[   81.077469][ T1871] cfg80211: failed to load regulatory.db
[   81.506926][ T7221] bond0: option mode: unable to set because the bond device has slaves
[   81.626801][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.630258][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.632887][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.635894][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.638456][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.727006][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.336'.
[   81.759124][ T7228] chnl_net:caif_netlink_parms(): no params data found
[   81.798655][ T7239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.812001][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.815300][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.818336][ T7228] bridge_slave_0: entered allmulticast mode
[   81.821593][ T7228] bridge_slave_0: entered promiscuous mode
[   81.829241][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.832141][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.835330][ T7228] bridge_slave_1: entered allmulticast mode
[   81.838486][ T7228] bridge_slave_1: entered promiscuous mode
[   81.857191][ T7228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.862329][ T7228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.883934][ T7228] team0: Port device team_slave_0 added
[   81.889345][ T7228] team0: Port device team_slave_1 added
[   81.914120][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.918250][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.928685][ T7228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.937607][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.940293][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.951390][ T7228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.987867][ T7228] hsr_slave_0: entered promiscuous mode
[   81.991310][ T7228] hsr_slave_1: entered promiscuous mode
[   81.994059][ T7228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.997142][ T7228] Cannot create hsr debugfs directory
[   82.034197][ T7256] syzkaller0: entered promiscuous mode
[   82.036392][ T7256] syzkaller0: entered allmulticast mode
[   82.123745][ T7228] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.130157][ T7228] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.135540][ T7228] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.139732][ T7228] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.158195][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.160626][ T7228] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.163148][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.165590][ T7228] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.199779][ T7228] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.999583][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.003193][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.013914][ T7228] 8021q: adding VLAN 0 to HW filter on device team0
[   83.026477][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.028880][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.045875][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.048325][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.137550][ T7228] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.163736][ T7228] veth0_vlan: entered promiscuous mode
[   83.169568][ T7228] veth1_vlan: entered promiscuous mode
[   83.185870][ T7228] veth0_macvtap: entered promiscuous mode
[   83.189866][ T7228] veth1_macvtap: entered promiscuous mode
[   83.200403][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.206675][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.211382][ T7228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.214229][ T7228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.217679][ T7228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.220604][ T7228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.261636][ T6433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.266571][ T6433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.286384][ T6433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.288958][ T6433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.335951][ T7278] Bluetooth: MGMT ver 1.23
[   83.385082][ T7278] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.715043][ T5832] Bluetooth: hci3: command tx timeout
[   84.438416][ T7278] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.960385][ T7292] netlink: 'syz.2.349': attribute type 1 has an invalid length.
[   84.997973][ T7278] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.115986][ T7293] block nbd1: Receive control failed (result -32)
[   85.677465][ T7278] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.805033][ T5832] Bluetooth: hci3: command tx timeout
[   86.031543][ T7303] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   86.058572][ T7278] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.070573][ T7278] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.079756][ T7278] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.088413][ T7278] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.156189][ T7307] x_tables: duplicate underflow at hook 1
[   86.260964][ T7322] tap0: tun_chr_ioctl cmd 1074025680
[   86.320927][ T7326] __nla_validate_parse: 6 callbacks suppressed
[   86.320937][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.362'.
[   86.330214][ T7328] netlink: 48 bytes leftover after parsing attributes in process `syz.2.363'.
[   87.369644][ T7337] netlink: 'syz.2.365': attribute type 2 has an invalid length.
[   87.372201][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'.
[   87.383719][ T7337] netlink: 'syz.2.365': attribute type 2 has an invalid length.
[   87.386622][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'.
[   87.389596][ T7337] netlink: 'syz.2.365': attribute type 2 has an invalid length.
[   87.392007][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'.
[   87.517898][ T7351] netlink: 'syz.2.369': attribute type 1 has an invalid length.
[   87.520582][ T7351] netlink: 204 bytes leftover after parsing attributes in process `syz.2.369'.
[   87.578586][ T7357] tipc: Started in network mode
[   87.580529][ T7357] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   87.583457][ T7357] tipc: Enabled bearer <eth:team0>, priority 0
[   87.662059][ T7359] bridge0: entered promiscuous mode
[   87.664797][ T7359] bridge0: port 1(macvlan2) entered blocking state
[   87.667047][ T7359] bridge0: port 1(macvlan2) entered disabled state
[   87.669338][ T7359] macvlan2: entered allmulticast mode
[   87.671113][ T7359] bridge0: entered allmulticast mode
[   87.673883][ T7359] macvlan2: left allmulticast mode
[   87.676786][ T7359] bridge0: left allmulticast mode
[   87.679277][ T7359] bridge0: left promiscuous mode
[   87.767631][ T7361] netlink: 44 bytes leftover after parsing attributes in process `syz.2.373'.
[   87.875663][ T5832] Bluetooth: hci3: command tx timeout
[   88.661815][ T7371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.376'.
[   88.667060][ T7371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.376'.
[   88.695799][  T789] tipc: Node number set to 11578026
[   89.965320][ T5832] Bluetooth: hci3: command tx timeout
[   90.148050][ T7396] syzkaller0: entered promiscuous mode
[   90.156263][ T7396] syzkaller0: entered allmulticast mode
[   91.204030][ T7404] xt_recent: Unsupported userspace flags (00000048)
[   91.405896][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'.
[   91.408685][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'.
[   91.444338][ T7423] Cannot find add_set index 0 as target
[   91.446543][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.394'.
[   91.659569][ T7441] netlink: 80 bytes leftover after parsing attributes in process `syz.3.400'.
[   92.108533][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.111970][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.115237][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.118733][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.121619][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.237086][ T7449] chnl_net:caif_netlink_parms(): no params data found
[   92.286386][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.288818][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.291203][ T7449] bridge_slave_0: entered allmulticast mode
[   92.293903][ T7449] bridge_slave_0: entered promiscuous mode
[   92.298473][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.300857][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.303239][ T7449] bridge_slave_1: entered allmulticast mode
[   92.306396][ T7449] bridge_slave_1: entered promiscuous mode
[   92.329316][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.333677][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.355828][ T7449] team0: Port device team_slave_0 added
[   92.359628][ T7449] team0: Port device team_slave_1 added
[   92.377084][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.379469][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.387769][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.392175][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.394337][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.402396][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.437420][ T7449] hsr_slave_0: entered promiscuous mode
[   92.440458][ T7449] hsr_slave_1: entered promiscuous mode
[   92.442640][ T7449] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.446083][ T7449] Cannot create hsr debugfs directory
[   92.478874][ T7460] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   92.556795][ T7449] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.577294][ T7449] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.588913][ T7449] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.593044][ T7449] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.596878][ T7463] netlink: 84 bytes leftover after parsing attributes in process `syz.3.405'.
[   92.603836][ T7463] xt_SECMARK: invalid mode: 0
[   92.609327][ T7464] xt_SECMARK: invalid mode: 0
[   92.627642][ T7463] netlink: 'syz.3.405': attribute type 1 has an invalid length.
[   92.630105][ T7463] netlink: 'syz.3.405': attribute type 2 has an invalid length.
[   92.635218][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.637475][ T7449] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.639899][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.642135][ T7449] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.683565][ T7473] netlink: 'syz.3.406': attribute type 32 has an invalid length.
[   92.686457][ T7473] netlink: 88 bytes leftover after parsing attributes in process `syz.3.406'.
[   92.710769][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.721019][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.727528][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.743159][ T7449] 8021q: adding VLAN 0 to HW filter on device team0
[   92.749744][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.752096][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.766443][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.768816][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.888101][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.992976][ T7449] veth0_vlan: entered promiscuous mode
[   92.998373][ T7449] veth1_vlan: entered promiscuous mode
[   93.013836][ T7449] veth0_macvtap: entered promiscuous mode
[   93.019079][ T7449] veth1_macvtap: entered promiscuous mode
[   93.028018][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.034208][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.039925][ T7449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.042816][ T7449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.045817][ T7449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.048562][ T7449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.086818][ T6435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.089314][ T6435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.103557][ T6433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.107355][ T6433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.911602][ T7535] bridge0: port 3(erspan0) entered blocking state
[   93.914029][ T7535] bridge0: port 3(erspan0) entered disabled state
[   93.917128][ T7535] erspan0: entered allmulticast mode
[   93.919787][ T7535] erspan0: entered promiscuous mode
[   93.922074][ T7535] bridge0: port 3(erspan0) entered blocking state
[   93.925087][ T7535] bridge0: port 3(erspan0) entered forwarding state
[   93.930132][ T7535] erspan0: left allmulticast mode
[   93.931894][ T7535] erspan0: left promiscuous mode
[   93.934176][ T7535] bridge0: port 3(erspan0) entered disabled state
[   94.194764][ T5832] Bluetooth: hci4: command tx timeout
[   94.311942][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.426'.
[   94.319131][ T7561] netlink: 76 bytes leftover after parsing attributes in process `syz.3.426'.
[   94.341778][ T7561] netlink: 76 bytes leftover after parsing attributes in process `syz.3.426'.
[   94.347028][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'.
[   94.521733][ T7570] netlink: 'syz.3.430': attribute type 58 has an invalid length.
[   94.531048][ T7570] dummy0: entered allmulticast mode
[   94.542501][ T7569] dummy0: left allmulticast mode
[   94.621912][ T7583] !: renamed from dummy0 (while UP)
[   94.639123][ T7581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.642163][ T7581] syzkaller0: entered promiscuous mode
[   94.643943][ T7581] syzkaller0: entered allmulticast mode
[   94.658620][ T7581] tipc: Resetting bearer <eth:syzkaller0>
[   94.662026][ T7580] tipc: Resetting bearer <eth:syzkaller0>
[   94.670653][ T7580] tipc: Disabling bearer <eth:syzkaller0>
[   94.991743][ T7632] 8021q: VLANs not supported on syzkaller1
[   96.274831][ T5832] Bluetooth: hci4: command 0x041b tx timeout
[   96.593843][ T7674] __nla_validate_parse: 7 callbacks suppressed
[   96.593853][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.448'.
[   96.658517][ T7678] netlink: 68 bytes leftover after parsing attributes in process `syz.4.450'.
[   96.750741][ T7682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.452'.
[   97.544012][ T7729] netlink: 'syz.2.466': attribute type 1 has an invalid length.
[   97.551942][ T7729] sctp: [Deprecated]: syz.2.466 (pid 7729) Use of int in maxseg socket option.
[   97.551942][ T7729] Use struct sctp_assoc_value instead
[   97.560352][ T7730] sctp: [Deprecated]: syz.2.466 (pid 7730) Use of int in maxseg socket option.
[   97.560352][ T7730] Use struct sctp_assoc_value instead
[   97.639001][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'.
[   97.642823][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.467'.
[   97.649933][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'.
[   97.733536][ T7738] netlink: 32 bytes leftover after parsing attributes in process `syz.2.469'.
[   97.816721][ T7744] bridge0: port 1(erspan0) entered blocking state
[   97.824664][ T7744] bridge0: port 1(erspan0) entered disabled state
[   97.828364][ T7744] erspan0: entered allmulticast mode
[   97.837248][ T7744] erspan0: left allmulticast mode
[   97.888057][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'.
[   97.902460][ T7751] netlink: 'syz.3.473': attribute type 15 has an invalid length.
[   98.030399][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'.
[   98.118562][ T7768] netlink: 'syz.4.479': attribute type 1 has an invalid length.
[   98.121478][ T7768] netlink: 228 bytes leftover after parsing attributes in process `syz.4.479'.
[   98.141957][ T7768] xt_CT: No such helper "snmp"
[   98.307381][ T7785] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   98.355274][ T5828] Bluetooth: hci4: command 0x041b tx timeout
[   98.451233][ T7793] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.505414][ T7793] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.572046][ T7793] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.642118][ T7793] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.735870][ T7793] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.758187][ T7793] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.773031][ T7793] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.793122][ T7793] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.151760][ T7835] netlink: 'syz.4.494': attribute type 1 has an invalid length.
[   99.321640][ T7859] netlink: 'syz.3.500': attribute type 3 has an invalid length.
[   99.589745][ T7894] SET target dimension over the limit!
[   99.593590][ T7894] SET target dimension over the limit!
[   99.631772][ T7899] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.710718][ T7903] netlink: 'syz.3.512': attribute type 1 has an invalid length.
[   99.778673][   T56] block nbd2: Receive control failed (result -32)
[   99.828936][ T5891] IPVS: starting estimator thread 0...
[   99.915078][ T7913] IPVS: using max 79 ests per chain, 189600 per kthread
[  100.242197][ T7955] netlink: 'syz.4.524': attribute type 14 has an invalid length.
[  100.336585][ T7959] netlink: 'syz.4.525': attribute type 303 has an invalid length.
[  100.343763][ T7959] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  100.349052][ T7959] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  100.434626][ T5828] Bluetooth: hci4: command 0x041b tx timeout
[  100.746808][ T7970] netlink: 'syz.2.530': attribute type 1 has an invalid length.
[  101.088944][ T7982] pim6reg1: entered promiscuous mode
[  101.090856][ T7982] pim6reg1: entered allmulticast mode
[  101.352808][ T8007] netlink: 'syz.4.538': attribute type 20 has an invalid length.
[  101.362782][ T8007] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.366103][ T8007] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.369630][ T8007] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.373110][ T8007] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.380813][ T8007] netlink: 'syz.4.538': attribute type 20 has an invalid length.
[  101.596476][ T8022] __nla_validate_parse: 29 callbacks suppressed
[  101.596487][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'.
[  101.758064][ T8033] netlink: 56 bytes leftover after parsing attributes in process `syz.4.546'.
[  102.204450][ T8045] netlink: 132 bytes leftover after parsing attributes in process `syz.3.552'.
[  102.417058][ T8062] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  102.497627][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'.
[  102.501048][ T8067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.514739][ T5828] Bluetooth: hci4: command 0x041b tx timeout
[  102.621987][ T8074] xt_CT: No such helper "snmp"
[  102.679661][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'.
[  102.683117][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'.
[  102.687610][ T8083] netlink: 10 bytes leftover after parsing attributes in process `syz.3.565'.
[  102.737012][ T8087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.566'.
[  102.740070][ T8087] Bluetooth: MGMT ver 1.23
[  102.744377][ T8087] geneve2: entered promiscuous mode
[  102.748586][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'.
[  102.754126][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'.
[  102.800221][ T8091] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.029033][ T8115] validate_nla: 4 callbacks suppressed
[  103.029044][ T8115] netlink: 'syz.3.574': attribute type 1 has an invalid length.
[  103.071484][ T8119] netlink: 'syz.4.576': attribute type 3 has an invalid length.
[  103.074045][ T8119] netlink: 'syz.4.576': attribute type 3 has an invalid length.
[  103.107735][ T8122] netlink: 'syz.2.577': attribute type 1 has an invalid length.
[  103.158632][ T8126] netlink: 'syz.4.578': attribute type 10 has an invalid length.
[  103.161501][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.164886][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.172010][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.174381][ T8126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.177042][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.179382][ T8126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.187100][ T8126] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  103.326803][ T8147] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  103.329493][ T8136] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  103.639390][    C1] vcan0: j1939_xtp_rx_rts: failed to create TP BAM session
[  104.251087][ T8179] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  104.362144][ T8189] netlink: 'syz.3.597': attribute type 1 has an invalid length.
[  104.418988][ T8193] netlink: 'syz.3.599': attribute type 1 has an invalid length.
[  104.699141][ T8201] sctp: [Deprecated]: syz.2.601 (pid 8201) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.699141][ T8201] Use struct sctp_sack_info instead
[  105.137857][ T8211] netlink: 'syz.4.604': attribute type 1 has an invalid length.
[  105.239613][ T8217] Bluetooth: MGMT ver 1.23
[  105.364915][ T8225] netlink: 'syz.3.609': attribute type 5 has an invalid length.
[  105.469632][ T8244] syzkaller0: entered promiscuous mode
[  105.472746][ T8244] syzkaller0: entered allmulticast mode
[  105.635707][ T5828] Bluetooth: hci4: command 0x041b tx timeout
[  105.780538][ T8261] team0: Mode changed to "activebackup"
[  105.822135][ T8265] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[  106.546959][ T8323] xt_SECMARK: invalid mode: 0
[  106.715721][ T8336] __nla_validate_parse: 34 callbacks suppressed
[  106.715732][ T8336] netlink: 224 bytes leftover after parsing attributes in process `syz.4.649'.
[  107.074566][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'.
[  107.187585][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'.
[  107.190415][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'.
[  107.193252][ T8364] netlink: 10 bytes leftover after parsing attributes in process `syz.4.657'.
[  107.437536][ T8385] syzkaller0: entered promiscuous mode
[  107.439471][ T8385] syzkaller0: entered allmulticast mode
[  108.319995][ T8399] validate_nla: 6 callbacks suppressed
[  108.320012][ T8399] netlink: 'syz.4.667': attribute type 14 has an invalid length.
[  108.466323][ T8412] syzkaller1: entered promiscuous mode
[  108.468217][ T8412] syzkaller1: entered allmulticast mode
[  108.479721][ T8412] netlink: 'syz.4.671': attribute type 10 has an invalid length.
[  108.483611][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'.
[  108.488777][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'.
[  108.491778][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'.
[  108.495881][ T8417] netlink: 10 bytes leftover after parsing attributes in process `syz.2.672'.
[  108.511606][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'.
[  108.541362][ T8419] netlink: 'syz.2.674': attribute type 1 has an invalid length.
[  108.576238][ T8421] syzkaller0: entered promiscuous mode
[  108.578098][ T8421] syzkaller0: entered allmulticast mode
[  108.906449][ T8441] block nbd3: server does not support multiple connections per device.
[  108.910519][ T8441] block nbd3: shutting down sockets
[  109.526999][ T8492] netlink: 'syz.2.695': attribute type 1 has an invalid length.
[  109.545706][ T8492] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  109.548547][ T8492] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  109.551347][ T8492] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  109.558637][ T8492] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  109.563954][ T8492] bond6: (slave geneve2): making interface the new active one
[  109.566893][ T8492] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  109.667502][ T8500] delete_channel: no stack
[  109.774412][ T8512] netlink: 'syz.2.701': attribute type 1 has an invalid length.
[  109.803365][ T8512] xt_CT: No such helper "snmp"
[  110.180152][ T8562] tun0: tun_chr_ioctl cmd 1074025677
[  110.182058][ T8562] tun0: linktype set to 804
[  110.238445][ T8564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.243491][ T8564] netlink: 'syz.3.712': attribute type 4 has an invalid length.
[  110.572639][ T8570] netlink: 'syz.4.717': attribute type 13 has an invalid length.
[  110.575465][ T8570] netlink: 'syz.4.717': attribute type 17 has an invalid length.
[  110.601159][ T8570] gretap0: refused to change device tx_queue_len
[  110.603414][ T8570] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  110.949447][ T8600] syz_tun: entered allmulticast mode
[  110.966108][ T8599] syz_tun: left allmulticast mode
[  110.998232][ T8603] syzkaller0: entered allmulticast mode
[  111.015926][ T8603] syzkaller0 (unregistering): left allmulticast mode
[  111.078422][ T8610] netlink: 'syz.4.728': attribute type 13 has an invalid length.
[  111.081018][ T8610] netlink: 'syz.4.728': attribute type 17 has an invalid length.
[  111.131384][ T8610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.220050][ T8610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.274909][ T8610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.329276][ T8612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.247972][ T8649] wlan1: mtu greater than device maximum
[  112.881180][ T8658] __nla_validate_parse: 22 callbacks suppressed
[  112.881193][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'.
[  112.970618][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'.
[  112.973576][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'.
[  112.994844][ T8666] netlink: 10 bytes leftover after parsing attributes in process `syz.3.748'.
[  113.058118][ T8668] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.231749][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'.
[  113.235218][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'.
[  113.238231][ T8687] netlink: 10 bytes leftover after parsing attributes in process `syz.4.755'.
[  113.435532][ T8697] netlink: 164 bytes leftover after parsing attributes in process `syz.4.758'.
[  113.439669][ T8697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.758'.
[  114.083721][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'.
[  114.112650][ T8712] validate_nla: 3 callbacks suppressed
[  114.112661][ T8712] netlink: 'syz.2.764': attribute type 5 has an invalid length.
[  114.627238][ T8755] netlink: 'syz.2.776': attribute type 22 has an invalid length.
[  115.008020][ T8767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.544105][ T8774] x_tables: duplicate underflow at hook 2
[  115.569205][ T8776] xt_hashlimit: size too large, truncated to 1048576
[  115.663640][ T8781] xt_hashlimit: size too large, truncated to 1048576
[  115.669077][ T8781] syz.2.784: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  115.681179][ T8781] CPU: 0 UID: 0 PID: 8781 Comm: syz.2.784 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  115.681190][ T8781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.681195][ T8781] Call Trace:
[  115.681198][ T8781]  <TASK>
[  115.681202][ T8781]  dump_stack_lvl+0x189/0x250
[  115.681218][ T8781]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.681227][ T8781]  ? __pfx__printk+0x10/0x10
[  115.681238][ T8781]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  115.681268][ T8781]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  115.681279][ T8781]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  115.681289][ T8781]  warn_alloc+0x214/0x310
[  115.681300][ T8781]  ? __pfx_warn_alloc+0x10/0x10
[  115.681310][ T8781]  ? __get_vm_area_node+0x28f/0x300
[  115.681321][ T8781]  ? htable_create+0xfc/0x7a0
[  115.681332][ T8781]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  115.681356][ T8781]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  115.681370][ T8781]  ? rcu_is_watching+0x15/0xb0
[  115.681379][ T8781]  ? htable_create+0xfc/0x7a0
[  115.681386][ T8781]  ? htable_create+0xfc/0x7a0
[  115.681391][ T8781]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  115.681404][ T8781]  ? htable_create+0xfc/0x7a0
[  115.681409][ T8781]  ? hashlimit_pernet+0x23/0x240
[  115.681419][ T8781]  htable_create+0xfc/0x7a0
[  115.681429][ T8781]  hashlimit_mt_check_common+0x719/0xa10
[  115.681440][ T8781]  xt_check_match+0x3d1/0xab0
[  115.681452][ T8781]  ? __pfx___mutex_lock+0x10/0x10
[  115.681464][ T8781]  ? __pfx_xt_check_match+0x10/0x10
[  115.681476][ T8781]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  115.681492][ T8781]  ? xt_find_match+0x1f7/0x250
[  115.681506][ T8781]  translate_table+0x1553/0x2040
[  115.681527][ T8781]  ? __pfx_translate_table+0x10/0x10
[  115.681538][ T8781]  ? __might_fault+0xb0/0x130
[  115.681557][ T8781]  ? _copy_from_user+0x94/0xb0
[  115.681571][ T8781]  do_ip6t_set_ctl+0x970/0xce0
[  115.681584][ T8781]  ? rcu_is_watching+0x15/0xb0
[  115.681592][ T8781]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  115.681611][ T8781]  ? __pfx___mutex_lock+0x10/0x10
[  115.681618][ T8781]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  115.681630][ T8781]  ? __lock_acquire+0xab9/0xd20
[  115.681641][ T8781]  nf_setsockopt+0x26f/0x290
[  115.681655][ T8781]  rawv6_setsockopt+0x23b/0x5b0
[  115.681665][ T8781]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  115.681671][ T8781]  ? aa_sock_opt_perm+0x74/0x110
[  115.681680][ T8781]  ? sock_common_setsockopt+0x36/0xc0
[  115.681689][ T8781]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  115.681699][ T8781]  do_sock_setsockopt+0x17c/0x1b0
[  115.681712][ T8781]  __x64_sys_setsockopt+0x13f/0x1b0
[  115.681724][ T8781]  do_syscall_64+0xfa/0x3b0
[  115.681733][ T8781]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.681740][ T8781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.681768][ T8781]  ? exc_page_fault+0x9f/0xf0
[  115.681777][ T8781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.681784][ T8781] RIP: 0033:0x7fbb9718e9a9
[  115.681791][ T8781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.681798][ T8781] RSP: 002b:00007fbb94ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  115.681806][ T8781] RAX: ffffffffffffffda RBX: 00007fbb973b6160 RCX: 00007fbb9718e9a9
[  115.681811][ T8781] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  115.681816][ T8781] RBP: 00007fbb97210ca1 R08: 00000000000005c0 R09: 0000000000000000
[  115.681820][ T8781] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[  115.681825][ T8781] R13: 0000000000000001 R14: 00007fbb973b6160 R15: 00007fff0f442288
[  115.681836][ T8781]  </TASK>
[  115.681866][ T8781] Mem-Info:
[  115.699048][ T8784] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  115.705875][ T8781] active_anon:22089 inactive_anon:0 isolated_anon:0
[  115.705875][ T8781]  active_file:1147 inactive_file:38238 isolated_file:0
[  115.705875][ T8781]  unevictable:1768 dirty:116 writeback:0
[  115.705875][ T8781]  slab_reclaimable:9816 slab_unreclaimable:83411
[  115.705875][ T8781]  mapped:29493 shmem:2535 pagetables:1120
[  115.705875][ T8781]  sec_pagetables:0 bounce:0
[  115.705875][ T8781]  kernel_misc_reclaimable:0
[  115.705875][ T8781]  free:226570 free_pcp:20816 free_cma:0
[  115.712270][ T8784] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  115.714366][ T8781] Node 0 active_anon:60696kB inactive_anon:0kB active_file:2576kB inactive_file:59816kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20176kB dirty:188kB writeback:0kB shmem:5300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5392kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  115.833000][ T8781] Node 1 active_anon:27660kB inactive_anon:0kB active_file:2012kB inactive_file:93136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97796kB dirty:276kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8972kB pagetables:2284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  115.843557][ T8781] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  115.853043][ T8781] lowmem_reserve[]: 0 812 812 812 812
[  115.855217][ T8781] Node 0 DMA32 free:255696kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60696kB inactive_anon:0kB active_file:2576kB inactive_file:59816kB unevictable:3536kB writepending:188kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:39384kB local_pcp:19252kB free_cma:0kB
[  115.865721][ T8781] lowmem_reserve[]: 0 0 0 0 0
[  115.867341][ T8781] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  115.877058][ T8781] lowmem_reserve[]: 0 0 854 854 854
[  115.878847][ T8781] Node 1 Normal free:176732kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27660kB inactive_anon:0kB active_file:2012kB inactive_file:93136kB unevictable:3536kB writepending:276kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:43652kB local_pcp:19220kB free_cma:0kB
[  115.889652][ T8781] lowmem_reserve[]: 0 0 0 0 0
[  115.891383][ T8781] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  115.895897][ T8781] Node 0 DMA32: 1004*4kB (UME) 216*8kB (UME) 46*16kB (UME) 38*32kB (UME) 27*64kB (UME) 22*128kB (UM) 13*256kB (UME) 5*512kB (UM) 20*1024kB (UME) 6*2048kB (UME) 50*4096kB (M) = 255696kB
[  115.902779][ T8781] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  115.908243][ T8781] Node 1 Normal: 1175*4kB (UME) 312*8kB (UME) 364*16kB (UME) 
[  115.908320][ T8786] trusted_key: syz.3.785 sent an empty control message without MSG_MORE.
[  115.913582][ T8781] 274*32kB (UME) 34*64kB (UM) 12*128kB (UME) 13*256kB (UME) 11*512kB (UME) 11*1024kB (UME) 2*2048kB (UE) 31*4096kB (UM) = 176796kB
[  115.918223][ T8781] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  115.921326][ T8781] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  115.924423][ T8781] 41920 total pagecache pages
[  115.926645][ T8781] 0 pages in swap cache
[  115.928114][ T8781] Free swap  = 124996kB
[  115.929445][ T8781] Total swap = 124996kB
[  115.930775][ T8781] 786301 pages RAM
[  115.931987][ T8781] 0 pages HighMem/MovableOnly
[  115.933503][ T8781] 241056 pages reserved
[  115.935111][ T8781] 0 pages cma reserved
[  116.019320][ T8794] netlink: 'syz.4.789': attribute type 30 has an invalid length.
[  116.029060][ T8794] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  116.031996][ T8794] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  116.056783][ T8794] netlink: 'syz.4.789': attribute type 22 has an invalid length.
[  116.550349][ T8843] tipc: Started in network mode
[  116.552023][ T8843] tipc: Node identity 0a740b90a78f, cluster identity 4711
[  116.556096][ T8843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.572059][ T8843] tipc: Resetting bearer <eth:syzkaller0>
[  117.554858][ T5891] tipc: Node number set to 2918910864
[  117.558088][ T8930] netlink: 'syz.4.803': attribute type 15 has an invalid length.
[  117.661194][ T8936] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  117.664393][ T8936] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  117.834386][ T8940] netlink: 'syz.3.808': attribute type 1 has an invalid length.
[  118.211885][ T8952] delete_channel: no stack
[  118.283152][ T8960] netlink: 'syz.2.814': attribute type 21 has an invalid length.
[  118.306791][ T8960] __nla_validate_parse: 14 callbacks suppressed
[  118.306802][ T8960] netlink: 156 bytes leftover after parsing attributes in process `syz.2.814'.
[  118.686258][ T8975] ip6t_srh: unknown srh invflags 4449
[  119.384378][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'.
[  119.395570][ T8981] IPVS: Error joining to the multicast group
[  119.536990][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.539663][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.691584][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.823'.
[  119.802104][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'.
[  119.811816][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'.
[  119.893370][ T9005] netlink: 224 bytes leftover after parsing attributes in process `syz.4.826'.
[  120.110197][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'.
[  120.113142][ T9013] netlink: 108 bytes leftover after parsing attributes in process `syz.4.828'.
[  120.124089][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'.
[  120.124598][ T9013] vlan2: entered allmulticast mode
[  120.128778][ T9013] veth1: entered allmulticast mode
[  120.129363][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'.
[  120.232811][ T9025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.265238][ T9013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.671955][ T9054] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.732082][ T9054] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.808930][ T9054] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.872620][ T9054] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.900446][ T9062] netlink: 'syz.4.844': attribute type 1 has an invalid length.
[  120.930537][ T9054] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.938116][ T9054] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.945734][ T9054] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.953465][ T9054] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.970479][ T7293] block nbd3: Receive control failed (result -32)
[  121.262991][ T9086] syzkaller0: entered promiscuous mode
[  121.265171][ T9086] syzkaller0: entered allmulticast mode
[  121.340888][ T9089] netlink: 'syz.4.853': attribute type 1 has an invalid length.
[  121.439134][   T56] block nbd4: Receive control failed (result -32)
[  122.327990][ T9116] bond0: entered promiscuous mode
[  122.329667][ T9116] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  122.332069][ T9116] bond4: entered promiscuous mode
[  122.384371][ T9128] netlink: 'syz.4.864': attribute type 1 has an invalid length.
[  122.450284][ T7293] block nbd5: Receive control failed (result -32)
[  122.559951][ T9136] netlink: 'syz.4.867': attribute type 1 has an invalid length.
[  122.579785][ T9136] xt_CT: No such helper "snmp"
[  122.782159][ T9152] netlink: 'syz.4.871': attribute type 1 has an invalid length.
[  122.887660][ T7293] block nbd6: Receive control failed (result -32)
[  123.466680][ T9173] __nla_validate_parse: 21 callbacks suppressed
[  123.466713][ T9173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.877'.
[  123.473505][ T9173] Cannot find add_set index 2 as target
[  124.348267][ T9183] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.352280][ T9182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.360187][ T9185] syz.2.880 uses old SIOCAX25GETINFO
[  124.372218][ T9182] netlink: 276 bytes leftover after parsing attributes in process `syz.4.879'.
[  124.372227][ T9183] netlink: 276 bytes leftover after parsing attributes in process `syz.4.879'.
[  124.379124][ T9182] netlink: 'syz.4.879': attribute type 9 has an invalid length.
[  124.381652][ T9182] netlink: 'syz.4.879': attribute type 7 has an invalid length.
[  124.384236][ T9182] netlink: 'syz.4.879': attribute type 8 has an invalid length.
[  124.389905][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'.
[  124.397850][ T9188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4
[  124.430400][ T9191] ip6t_srh: unknown srh invflags 4449
[  124.512906][ T9201] netlink: 'syz.3.884': attribute type 1 has an invalid length.
[  124.516879][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'.
[  124.519863][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'.
[  124.522755][ T9204] netlink: 'syz.4.885': attribute type 1 has an invalid length.
[  124.529576][ T9204] netlink: 10 bytes leftover after parsing attributes in process `syz.4.885'.
[  124.543033][ T9201] bond4 (unregistering): Released all slaves
[  124.598060][ T7293] block nbd7: Receive control failed (result -32)
[  124.621810][ T9214] syzkaller0: entered promiscuous mode
[  124.623641][ T9214] syzkaller0: entered allmulticast mode
[  124.648316][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'.
[  124.651261][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'.
[  124.654180][ T9217] netlink: 26 bytes leftover after parsing attributes in process `syz.4.889'.
[  125.564440][ T9234] can: request_module (can-proto-5) failed.
[  125.652908][ T9239] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  125.919946][ T9256] geneve2: entered promiscuous mode
[  125.921858][ T9256] geneve2: entered allmulticast mode
[  126.163594][ T9275] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.272761][ T9286] rdma_op ffff8881126839f0 conn xmit_rdma 0000000000000000
[  126.638151][ T9309] IPVS: set_ctl: invalid protocol: 50 172.20.20.59:20003
[  126.644254][ T9309] IPVS: set_ctl: invalid protocol: 50 172.20.20.59:20003
[  126.686117][ T9318] netlink: 'syz.2.918': attribute type 1 has an invalid length.
[  127.101558][ T9356] netlink: 'syz.3.929': attribute type 1 has an invalid length.
[  127.132432][ T9356] bond4: (slave gretap1): making interface the new active one
[  127.136142][ T9356] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  127.150898][ T9356] 8021q: adding VLAN 0 to HW filter on device bond4
[  127.206148][ T9368] netlink: 'syz.4.933': attribute type 21 has an invalid length.
[  127.231248][ T9370] netlink: 'syz.4.934': attribute type 1 has an invalid length.
[  127.245938][ T9370] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.256166][ T9370] bond1: (slave bridge3): making interface the new active one
[  127.259447][ T9370] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  127.724736][ T5828] Bluetooth: hci0: command tx timeout
[  128.491299][ T9407] __nla_validate_parse: 16 callbacks suppressed
[  128.491309][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.943'.
[  128.561511][ T9412] syzkaller1: entered promiscuous mode
[  128.563467][ T9412] syzkaller1: entered allmulticast mode
[  128.566745][ T9412] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  128.605220][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'.
[  128.608144][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'.
[  128.610994][ T9415] netlink: 'syz.4.946': attribute type 1 has an invalid length.
[  128.614465][ T9415] netlink: 10 bytes leftover after parsing attributes in process `syz.4.946'.
[  128.694640][ T7293] block nbd8: Receive control failed (result -32)
[  128.761920][ T6403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.765146][ T6403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.802121][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'.
[  128.853294][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'.
[  128.877444][ T9436] 8021q: adding VLAN 0 to HW filter on device bond6
[  128.888144][ T9436] macvlan0: entered promiscuous mode
[  128.890291][ T9436] macvlan0: entered allmulticast mode
[  128.893447][ T9436] bond6: (slave macvlan0): Opening slave failed
[  129.176160][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'.
[  129.356281][ T9453] infiniband syz!: set active
[  129.358113][ T9453] infiniband syz!: added team_slave_0
[  129.387896][ T9453] RDS/IB: syz!: added
[  129.396012][ T9453] smc: adding ib device syz! with port count 1
[  129.404746][ T9461] netlink: 'syz.2.960': attribute type 2 has an invalid length.
[  129.405153][ T9453] smc:    ib device syz! port 1 has pnetid 
[  129.574110][ T9472] netlink: 'syz.4.964': attribute type 25 has an invalid length.
[  129.579909][ T9472] netlink: 'syz.4.964': attribute type 7 has an invalid length.
[  129.898185][ T9487] xt_hashlimit: size too large, truncated to 1048576
[  129.953713][ T9489] netlink: 'syz.4.968': attribute type 30 has an invalid length.
[  130.066353][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'.
[  130.069286][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'.
[  130.193429][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'.
[  130.197477][ T9507] netlink: 'syz.4.974': attribute type 1 has an invalid length.
[  130.278386][   T56] block nbd9: Receive control failed (result -32)
[  130.436736][ T9515] xt_CT: No such helper "snmp"
[  130.613117][ T9525] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  130.785000][ T9545] tipc: Resetting bearer <eth:team0>
[  130.797188][ T9545] bond0: (slave wlan1): Releasing backup interface
[  130.799814][ T9545] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  130.803790][ T9545] bond0: (slave bond4): Releasing backup interface
[  130.807397][ T9545] bond4: left promiscuous mode
[  130.812092][ T9545] bond6: (slave geneve2): Releasing active interface
[  130.817445][ T9545] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  130.823487][ T9545] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  130.830750][ T9545] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  130.838872][ T9545] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  130.855557][ T9546] tipc: Resetting bearer <eth:team0>
[  130.873535][ T9546] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  131.042835][ T9554] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  131.081258][ T9557] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  131.084145][ T9557] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  131.115200][ T9557] 8021q: adding VLAN 0 to HW filter on device bond7
[  131.134849][ T9557] bond7: (slave bridge3): making interface the new active one
[  131.137860][ T9557] bond7: (slave bridge3): Enslaving as an active interface with an up link
[  131.157943][ T9557] gretap2: entered promiscuous mode
[  131.162073][ T9557] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  131.169157][ T9557] macvlan2: entered promiscuous mode
[  131.170882][ T9557] macvlan2: entered allmulticast mode
[  131.172985][ T9557] bond7: entered promiscuous mode
[  131.176905][ T9557] bridge3: entered promiscuous mode
[  131.179059][ T9557] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  131.181663][ T9557] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  131.187546][ T9557] bond7: left promiscuous mode
[  131.189238][ T9557] bridge3: left promiscuous mode
[  132.277312][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  132.373227][ T9584] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  132.486157][ T9595] delete_channel: no stack
[  133.074677][ T5828] Bluetooth: hci0: command tx timeout
[  134.229150][   T33] audit: type=1800 audit(1753025138.367:2): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1006" name="memory.events" dev="tmpfs" ino=1000 res=0 errno=0
[  135.200547][ T9645] syzkaller1: entered promiscuous mode
[  135.202381][ T9645] syzkaller1: entered allmulticast mode
[  135.259769][ T9638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.346168][ T6444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.350785][ T6444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.373820][ T9647] syzkaller0: entered promiscuous mode
[  135.377156][ T9647] syzkaller0: entered allmulticast mode
[  135.388118][ T9647] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  135.483907][ T9661] __nla_validate_parse: 13 callbacks suppressed
[  135.483919][ T9661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1018'.
[  135.489041][ T9661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1018'.
[  135.514968][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'.
[  135.517882][ T9664] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  135.520259][ T9664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.619345][ T9671] validate_nla: 1 callbacks suppressed
[  135.619361][ T9671] netlink: 'syz.2.1021': attribute type 2 has an invalid length.
[  135.624096][ T9671] netlink: 'syz.2.1021': attribute type 1 has an invalid length.
[  135.629289][ T9671] netlink: 'syz.2.1021': attribute type 1 has an invalid length.
[  136.424014][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'.
[  136.547467][ T9685] vlan1: entered promiscuous mode
[  136.549565][ T9685] vlan0: entered promiscuous mode
[  136.551789][ T9685] gretap0: entered promiscuous mode
[  136.630311][ T9688] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1027'.
[  136.633729][ T9688] batadv_slave_1: entered promiscuous mode
[  136.669514][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'.
[  136.952377][ T9705] tipc: Started in network mode
[  136.954149][ T9705] tipc: Node identity 56f9e6959579, cluster identity 4711
[  136.958307][ T9705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.960964][ T9705] syzkaller0: entered promiscuous mode
[  136.962768][ T9705] syzkaller0: entered allmulticast mode
[  136.968481][ T9705] tipc: Resetting bearer <eth:syzkaller0>
[  136.971391][ T9704] tipc: Resetting bearer <eth:syzkaller0>
[  136.981925][ T9704] tipc: Disabling bearer <eth:syzkaller0>
[  137.058695][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1032'.
[  137.062219][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1032'.
[  137.093153][ T9711] xt_hashlimit: size too large, truncated to 1048576
[  137.236175][ T9717] pim6reg0: tun_chr_ioctl cmd 2148553947
[  137.239150][ T9718] pim6reg0: tun_chr_ioctl cmd 1074025673
[  137.500861][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1039'.
[  137.504204][ T9736] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1039'.
[  137.596779][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.599440][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.660761][ T9742] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  138.300104][ T9773] x_tables: duplicate underflow at hook 1
[  138.345563][ T9775] netlink: 'syz.2.1049': attribute type 11 has an invalid length.
[  138.785530][ T9800] netlink: 'syz.3.1058': attribute type 1 has an invalid length.
[  138.788233][ T9800] netlink: 'syz.3.1058': attribute type 2 has an invalid length.
[  138.791302][ T9799] netlink: 'syz.3.1058': attribute type 1 has an invalid length.
[  138.793958][ T9799] netlink: 'syz.3.1058': attribute type 2 has an invalid length.
[  139.186100][ T9805] dvmrp8: entered allmulticast mode
[  139.188900][ T9804] dvmrp8: left allmulticast mode
[  139.516915][ T9817] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  139.581718][ T9824] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  139.692360][ T9828] syzkaller1: entered promiscuous mode
[  139.694436][ T9828] syzkaller1: entered allmulticast mode
[  139.704295][ T9828] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  139.707146][ T9828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.230236][ T9858] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  141.239647][ T9856] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  141.370600][ T9862] sctp: [Deprecated]: syz.3.1076 (pid 9862) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.370600][ T9862] Use struct sctp_sack_info instead
[  141.567028][ T9874] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.593515][ T9878] netlink: 'syz.3.1081': attribute type 10 has an invalid length.
[  141.601859][ T9874] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.636585][ T5828] Bluetooth: hci0: command tx timeout
[  141.657384][ T9874] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.699459][ T9874] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.765042][ T9874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.772198][ T9874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.780594][ T9874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.789930][ T9874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.903290][ T9895] __nla_validate_parse: 11 callbacks suppressed
[  141.903300][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1086'.
[  142.117858][ T9907] syzkaller0: Caught tx_queue_len zero misconfig
[  142.121841][ T9907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.868561][ T9916] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  142.891820][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'.
[  142.914075][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'.
[  144.101010][ T9965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.103664][ T9965] syzkaller0: entered promiscuous mode
[  144.107148][ T9965] syzkaller0: entered allmulticast mode
[  144.118476][ T9965] tipc: Resetting bearer <eth:syzkaller0>
[  144.122057][ T9964] tipc: Resetting bearer <eth:syzkaller0>
[  144.133291][ T9964] tipc: Disabling bearer <eth:syzkaller0>
[  144.200426][   T33] audit: type=1804 audit(1753025148.337:3): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1110" name="/newroot/254/cgroup.controllers" dev="tmpfs" ino=1328 res=1 errno=0
[  144.209253][   T33] audit: type=1800 audit(1753025148.347:4): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1110" name="cgroup.controllers" dev="tmpfs" ino=1328 res=0 errno=0
[  144.217466][   T33] audit: type=1800 audit(1753025148.347:5): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1110" name="cgroup.controllers" dev="tmpfs" ino=1328 res=0 errno=0
[  144.456546][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'.
[  144.462706][ T9988] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1114'.
[  144.485925][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'.
[  144.561420][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'.
[  144.798706][ T9999] bond0: (slave rose0): Error: Device can not be enslaved while up
[  144.914723][ T5828] Bluetooth: hci0: command tx timeout
[  145.457633][   T33] audit: type=1800 audit(1753025149.597:6): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1118" name="memory.events" dev="tmpfs" ino=2235 res=0 errno=0
[  145.467770][   T33] audit: type=1804 audit(1753025149.607:7): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1118" name="/newroot/428/memory.events" dev="tmpfs" ino=2235 res=1 errno=0
[  145.508797][T10007] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  145.926942][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  145.930557][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  145.933347][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  145.938240][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  145.941886][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  146.119190][T10017] chnl_net:caif_netlink_parms(): no params data found
[  146.166302][T10017] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.168997][T10017] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.171496][T10017] bridge_slave_0: entered allmulticast mode
[  146.174333][T10017] bridge_slave_0: entered promiscuous mode
[  146.179560][T10017] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.182077][T10017] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.185010][T10017] bridge_slave_1: entered allmulticast mode
[  146.187918][T10017] bridge_slave_1: entered promiscuous mode
[  146.207769][T10017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.212447][T10017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.233325][T10017] team0: Port device team_slave_0 added
[  146.237726][T10017] team0: Port device team_slave_1 added
[  146.255680][T10017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.257954][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.267752][T10017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.271991][T10017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.274271][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.282938][T10017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.312613][T10017] hsr_slave_0: entered promiscuous mode
[  146.315719][T10017] hsr_slave_1: entered promiscuous mode
[  146.317957][T10017] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.320446][T10017] Cannot create hsr debugfs directory
[  146.482052][T10017] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  146.488739][T10017] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  146.498593][T10017] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  146.513460][T10017] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  146.555765][T10017] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.558232][T10017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.560767][T10017] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.563143][T10017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.609165][T10049] netlink: 'syz.3.1128': attribute type 11 has an invalid length.
[  146.640768][T10017] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.651596][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.654453][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.663791][T10017] 8021q: adding VLAN 0 to HW filter on device team0
[  146.671832][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.674204][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.693087][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.695465][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.752149][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'.
[  146.799587][T10061] netlink: 'syz.3.1132': attribute type 1 has an invalid length.
[  146.808419][T10063] tipc: Resetting bearer <eth:team0>
[  146.810397][T10063] tipc: Resetting bearer <eth:team0>
[  146.826140][T10061] bond7: entered promiscuous mode
[  146.828804][T10061] 8021q: adding VLAN 0 to HW filter on device bond7
[  146.846951][T10061] 8021q: adding VLAN 0 to HW filter on device bond7
[  146.849439][T10061] bond7: (slave vcan1): The slave device specified does not support setting the MAC address
[  146.852713][T10061] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  146.861872][T10061] bond7: (slave vcan1): making interface the new active one
[  146.865118][T10061] vcan1: entered promiscuous mode
[  146.867753][T10061] bond7: (slave vcan1): Enslaving as an active interface with an up link
[  146.881707][T10017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.957489][T10079] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1135'.
[  146.960486][T10079] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1135'.
[  147.001486][T10017] veth0_vlan: entered promiscuous mode
[  147.007359][T10017] veth1_vlan: entered promiscuous mode
[  147.022850][T10017] veth0_macvtap: entered promiscuous mode
[  147.027631][T10017] veth1_macvtap: entered promiscuous mode
[  147.041102][T10017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.052326][T10017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.057586][T10017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.060372][T10017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.063175][T10017] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.070894][T10017] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.129940][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.132521][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.150688][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.153251][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.212989][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1123'.
[  147.219892][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1123'.
[  147.298825][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'.
[  147.312548][T10095] TCP: TCP_TX_DELAY enabled
[  147.752539][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'.
[  147.755922][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'.
[  147.934872][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'.
[  147.954905][ T5828] Bluetooth: hci5: command tx timeout
[  148.201961][T10104] netlink: 'syz.3.1141': attribute type 5 has an invalid length.
[  148.207773][T10104] netlink: 'syz.3.1141': attribute type 7 has an invalid length.
[  148.219364][T10104] : entered promiscuous mode
[  148.542098][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'.
[  148.618660][T10112] netlink: 'syz.2.1144': attribute type 2 has an invalid length.
[  148.752676][T10118] xt_CT: No such helper "syz0"
[  148.809978][T10114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  149.149740][T10137] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  149.153395][T10137] syzkaller0: entered promiscuous mode
[  149.156612][T10137] syzkaller0: entered allmulticast mode
[  149.161712][T10137] tipc: Resetting bearer <eth:syzkaller0>
[  149.427348][T10154] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1159'.
[  149.560089][T10164] pimreg: entered allmulticast mode
[  149.572468][T10164] pimreg: left allmulticast mode
[  149.753921][T10184] netlink: 'syz.3.1164': attribute type 3 has an invalid length.
[  149.788844][T10193] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  149.821577][T10196] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
[  150.104574][ T5828] Bluetooth: hci5: command tx timeout
[  150.199994][T10206] netlink: 'syz.5.1169': attribute type 11 has an invalid length.
[  150.257243][T10211] IPv6: syztnl1: Disabled Multicast RS
[  150.465465][T10227] netlink: 'syz.2.1174': attribute type 4 has an invalid length.
[  150.475662][T10227] netlink: 'syz.2.1174': attribute type 4 has an invalid length.
[  150.708454][T10235] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.711283][T10235] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.714149][T10235] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.717354][T10235] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.735733][T10235] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.738731][T10235] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.741648][T10235] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.745141][T10235] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.850575][T10248] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.853234][T10248] syzkaller0: entered promiscuous mode
[  150.855241][T10248] syzkaller0: entered allmulticast mode
[  150.862083][T10248] tipc: Resetting bearer <eth:syzkaller0>
[  150.950766][T10253] netlink: 'syz.5.1180': attribute type 3 has an invalid length.
[  151.041583][T10259] IPVS: Scheduler module ip_vs_sip not found
[  151.284066][T10276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  151.286560][T10276] IPv6: NLM_F_CREATE should be set when creating new route
[  151.603392][T10245] tipc: Resetting bearer <eth:syzkaller0>
[  151.619513][T10245] tipc: Disabling bearer <eth:syzkaller0>
[  151.629406][T10298] pim6reg1: entered promiscuous mode
[  151.631233][T10298] pim6reg1: entered allmulticast mode
[  152.086562][T10347] __nla_validate_parse: 9 callbacks suppressed
[  152.086573][T10347] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1211'.
[  152.091452][T10347] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1211'.
[  152.094276][T10347] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1211'.
[  152.100779][T10349] sctp: [Deprecated]: syz.3.1212 (pid 10349) Use of int in max_burst socket option.
[  152.100779][T10349] Use struct sctp_assoc_value instead
[  152.106164][T10350] sctp: [Deprecated]: syz.3.1212 (pid 10350) Use of int in max_burst socket option.
[  152.106164][T10350] Use struct sctp_assoc_value instead
[  152.106340][T10347] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1211'.
[  152.117315][ T5828] Bluetooth: hci5: command tx timeout
[  152.138499][T10352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1213'.
[  152.300048][T10362] bond0: entered promiscuous mode
[  152.304132][T10362] bond_slave_0: entered promiscuous mode
[  152.307432][T10362] bond_slave_1: entered promiscuous mode
[  152.318506][T10364] pim6reg1: entered promiscuous mode
[  152.320308][T10364] pim6reg1: entered allmulticast mode
[  152.441054][T10378] netlink: 'syz.3.1220': attribute type 2 has an invalid length.
[  152.448948][T10378] : entered promiscuous mode
[  152.724080][T10398] netlink: 996 bytes leftover after parsing attributes in process `syz.2.1225'.
[  153.028203][T10417] tipc: Resetting bearer <eth:team0>
[  153.227164][T10421] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1233'.
[  153.230208][T10421] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1233'.
[  153.233227][T10421] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1233'.
[  153.247475][T10421] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1233'.
[  153.919475][T10451] xt_limit: Overflow, try lower: 0/0
[  154.130252][T10459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.135072][T10459] ip6gretap0: entered promiscuous mode
[  154.136904][T10459] ip6gretap0: entered allmulticast mode
[  154.204684][ T5828] Bluetooth: hci5: command tx timeout
[  154.234301][T10464] netlink: 'syz.2.1244': attribute type 1 has an invalid length.
[  154.238403][T10464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.093084][T10467] tipc: Resetting bearer <eth:team0>
[  156.003471][T10474] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  156.013487][T10474] tipc: Resetting bearer <eth:team0>
[  156.026895][T10474] bond7: (slave bridge3): Releasing active interface
[  156.029372][T10474] bond7: (slave bridge3): the permanent HWaddr of slave - 66:d7:22:9e:d9:36 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  156.036015][T10474] bond7: (slave gretap2): making interface the new active one
[  156.041591][T10474] bond7: (slave gretap2): Releasing active interface
[  156.069099][T10474] netlink: 'syz.2.1247': attribute type 10 has an invalid length.
[  156.071836][T10474] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  156.075016][T10474] wlan1: mtu greater than device maximum
[  156.076882][T10474] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  156.216249][T10483] netlink: 'syz.2.1251': attribute type 30 has an invalid length.
[  156.222460][T10483] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  156.226005][T10483] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  156.229471][T10483] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  156.232980][T10483] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  156.240795][T10483] netlink: 'syz.2.1251': attribute type 30 has an invalid length.
[  157.262951][T10501] netlink: 'syz.5.1257': attribute type 1 has an invalid length.
[  157.266624][T10501] __nla_validate_parse: 8 callbacks suppressed
[  157.266632][T10501] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1257'.
[  157.279999][T10501] netlink: 'syz.5.1257': attribute type 14 has an invalid length.
[  157.298109][T10501] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.684109][T10542] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1269'.
[  158.742079][T10542] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.744759][T10542] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.753467][T10542] bond0: left promiscuous mode
[  158.756476][T10542] bond_slave_0: left promiscuous mode
[  158.758314][T10542] bond_slave_1: left promiscuous mode
[  158.839445][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.849957][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.924849][T10542] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.927913][T10542] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.930874][T10542] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.127060][ T5893] IPVS: starting estimator thread 0...
[  159.181260][T10551] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1271'.
[  159.186484][T10549] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1271'.
[  159.223378][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1272'.
[  159.224576][T10550] IPVS: using max 78 ests per chain, 187200 per kthread
[  159.228043][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1272'.
[  159.231639][T10553] netlink: 'syz.5.1272': attribute type 1 has an invalid length.
[  159.234159][T10553] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1272'.
[  159.328113][   T56] block nbd10: Receive control failed (result -32)
[  159.762767][T10564] syzkaller0: entered promiscuous mode
[  159.765206][T10564] syzkaller0: entered allmulticast mode
[  159.803857][T10564] syzkaller0: mtu less than device minimum
[  160.753243][T10576] netlink: 'syz.5.1280': attribute type 2 has an invalid length.
[  160.881001][T10587] tipc: Started in network mode
[  160.882660][T10587] tipc: Node identity cef92d0e0cbd, cluster identity 4711
[  160.885360][T10587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.887745][T10586] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.891149][T10586] syzkaller0: entered promiscuous mode
[  160.892959][T10586] syzkaller0: entered allmulticast mode
[  160.903617][T10586] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  160.910149][T10586] tipc: Resetting bearer <eth:syzkaller0>
[  160.913181][T10585] tipc: Resetting bearer <eth:syzkaller0>
[  160.923627][T10585] tipc: Disabling bearer <eth:syzkaller0>
[  161.028050][T10595] xt_CT: You must specify a L4 protocol and not use inversions on it
[  161.967591][T10603] netlink: 'syz.5.1288': attribute type 1 has an invalid length.
[  161.994096][T10603] 8021q: adding VLAN 0 to HW filter on device bond2
[  161.999883][T10603] bond1: (slave bond2): making interface the new active one
[  162.002542][T10603] bond1: (slave bond2): Enslaving as an active interface with an up link
[  162.010299][T10604] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  162.013529][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1288'.
[  162.098147][T10609] xt_l2tp: missing protocol rule (udp|l2tpip)
[  162.304248][T10612] syzkaller0: entered promiscuous mode
[  162.307058][T10612] syzkaller0: entered allmulticast mode
[  162.313361][T10612] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  163.530725][T10630] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1298'.
[  163.534050][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'.
[  163.537908][T10631] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1298'.
[  163.540898][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'.
[  163.659748][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'.
[  163.662797][T10636] IPVS: Error joining to the multicast group
[  164.561210][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1311'.
[  165.599547][T10694] netlink: 'syz.5.1313': attribute type 13 has an invalid length.
[  165.602386][T10694] netlink: 'syz.5.1313': attribute type 17 has an invalid length.
[  165.639749][T10694] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.643038][T10694] 8021q: adding VLAN 0 to HW filter on device team0
[  165.649456][T10694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  165.723811][T10695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.778911][T10695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.836123][T10694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.916375][T10699] netlink: 'syz.5.1314': attribute type 12 has an invalid length.
[  166.918994][T10699] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1314'.
[  166.933973][T10699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  166.989576][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1315'.
[  167.005681][T10707] ip6gretap0: entered promiscuous mode
[  167.007633][T10707] macsec1: entered allmulticast mode
[  167.009411][T10707] ip6gretap0: entered allmulticast mode
[  169.167786][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  169.172255][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  169.176781][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  169.179827][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  169.182586][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  169.363591][T10727] chnl_net:caif_netlink_parms(): no params data found
[  169.409487][T10727] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.411898][T10727] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.414229][T10727] bridge_slave_0: entered allmulticast mode
[  169.417381][T10727] bridge_slave_0: entered promiscuous mode
[  169.420554][T10727] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.422837][T10727] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.425563][T10727] bridge_slave_1: entered allmulticast mode
[  169.428360][T10727] bridge_slave_1: entered promiscuous mode
[  169.446660][T10727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.451469][T10727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.472664][T10727] team0: Port device team_slave_0 added
[  169.476359][T10727] team0: Port device team_slave_1 added
[  169.493312][T10727] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.496183][T10727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.504404][T10727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.509197][T10727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.511510][T10727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.519820][T10727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.544969][T10727] hsr_slave_0: entered promiscuous mode
[  169.547275][T10727] hsr_slave_1: entered promiscuous mode
[  169.549425][T10727] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.551922][T10727] Cannot create hsr debugfs directory
[  169.648160][T10727] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  169.652634][T10727] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  169.657065][T10727] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  169.661605][T10727] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  169.684095][T10727] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.686520][T10727] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.688902][T10727] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.691204][T10727] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.722915][T10727] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.732867][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.737418][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.750037][T10727] 8021q: adding VLAN 0 to HW filter on device team0
[  169.757879][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.760351][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.768381][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.770703][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.868157][T10727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.017903][T10727] veth0_vlan: entered promiscuous mode
[  170.022527][T10727] veth1_vlan: entered promiscuous mode
[  170.040911][T10727] veth0_macvtap: entered promiscuous mode
[  170.048778][T10727] veth1_macvtap: entered promiscuous mode
[  170.057745][T10727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.066689][T10727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.071648][T10727] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.074723][T10727] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.077483][T10727] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.080227][T10727] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.126004][ T6422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.128583][ T6422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.149899][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.152422][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.194813][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  170.448803][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1324'.
[  170.627451][T10775] netlink: 308 bytes leftover after parsing attributes in process `syz.6.1327'.
[  170.630562][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1327'.
[  170.740490][T10784] gre0: entered allmulticast mode
[  170.779824][T10786] x_tables: duplicate underflow at hook 1
[  170.803507][T10788] netlink: 'syz.6.1332': attribute type 4 has an invalid length.
[  170.813605][T10788] netlink: 'syz.6.1332': attribute type 4 has an invalid length.
[  170.813725][T10789] netlink: 'syz.6.1332': attribute type 4 has an invalid length.
[  170.821690][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'.
[  170.826512][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'.
[  170.894160][T10796] siw: device registration error -23
[  171.000232][T10798] netlink: 'syz.6.1335': attribute type 21 has an invalid length.
[  171.018719][T10798] netlink: 'syz.6.1335': attribute type 21 has an invalid length.
[  171.036792][T10798] netlink: 'syz.6.1335': attribute type 21 has an invalid length.
[  171.235055][ T5828] Bluetooth: hci6: command tx timeout
[  171.426156][T10811] netlink: 'syz.6.1337': attribute type 1 has an invalid length.
[  171.429416][T10811] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1337'.
[  171.450993][T10811] xt_CT: No such helper "snmp"
[  171.619097][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1340'.
[  171.630284][T10824] netlink: 'syz.6.1340': attribute type 16 has an invalid length.
[  171.728251][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1343'.
[  171.731269][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1343'.
[  171.738588][T10830] bridge0: port 3(vlan2) entered blocking state
[  171.740723][T10830] bridge0: port 3(vlan2) entered disabled state
[  171.742918][T10830] vlan2: entered allmulticast mode
[  171.746901][T10830] bridge0: entered allmulticast mode
[  171.749610][T10830] vlan2: left allmulticast mode
[  171.751187][T10830] bridge0: left allmulticast mode
[  173.127815][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  173.131506][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  173.134406][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.139528][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  173.142062][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  173.314930][ T5828] Bluetooth: hci6: command tx timeout
[  173.321801][T10842] chnl_net:caif_netlink_parms(): no params data found
[  173.369988][T10842] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.372465][T10842] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.375189][T10842] bridge_slave_0: entered allmulticast mode
[  173.378237][T10842] bridge_slave_0: entered promiscuous mode
[  173.381373][T10842] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.383657][T10842] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.386933][T10842] bridge_slave_1: entered allmulticast mode
[  173.389679][T10842] bridge_slave_1: entered promiscuous mode
[  173.408164][T10842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.412767][T10842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.433614][T10842] team0: Port device team_slave_0 added
[  173.437202][T10842] team0: Port device team_slave_1 added
[  173.455363][T10842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.457584][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.466014][T10842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.470390][T10842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.472601][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.481132][T10842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.507038][T10842] hsr_slave_0: entered promiscuous mode
[  173.509428][T10842] hsr_slave_1: entered promiscuous mode
[  173.511578][T10842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.513934][T10842] Cannot create hsr debugfs directory
[  173.605726][T10842] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  173.610032][T10842] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  173.614176][T10842] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  173.619706][T10842] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  173.639269][T10842] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.641658][T10842] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.644024][T10842] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.646451][T10842] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.677826][T10842] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.687449][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.690481][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.701032][T10842] 8021q: adding VLAN 0 to HW filter on device team0
[  173.708961][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.711375][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.717947][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.720303][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.830028][T10842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.943381][T10842] veth0_vlan: entered promiscuous mode
[  173.949618][T10842] veth1_vlan: entered promiscuous mode
[  173.967195][T10842] veth0_macvtap: entered promiscuous mode
[  173.971164][T10842] veth1_macvtap: entered promiscuous mode
[  173.983126][T10842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.991261][T10842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.996597][T10842] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.999613][T10842] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.002598][T10842] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.006142][T10842] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.050011][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.052732][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.071755][ T6420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.074843][ T6420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.138726][T10867] IPv6: addrconf: prefix option has invalid lifetime
[  175.156061][ T5834] Bluetooth: hci7: command tx timeout
[  175.394901][ T5828] Bluetooth: hci6: command tx timeout
[  177.234720][ T5828] Bluetooth: hci7: command tx timeout
[  177.474930][ T5828] Bluetooth: hci6: command tx timeout
[  179.315269][ T5828] Bluetooth: hci7: command tx timeout
[  181.394915][ T5828] Bluetooth: hci7: command tx timeout
[  183.137669][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  183.141322][ T5834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  183.144074][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  183.147350][ T5834] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  183.149922][ T5834] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  183.327729][T10877] chnl_net:caif_netlink_parms(): no params data found
[  183.370537][T10877] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.372885][T10877] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.375553][T10877] bridge_slave_0: entered allmulticast mode
[  183.378357][T10877] bridge_slave_0: entered promiscuous mode
[  183.381409][T10877] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.383716][T10877] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.387451][T10877] bridge_slave_1: entered allmulticast mode
[  183.390205][T10877] bridge_slave_1: entered promiscuous mode
[  183.409181][T10877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.414367][T10877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.435104][T10877] team0: Port device team_slave_0 added
[  183.438630][T10877] team0: Port device team_slave_1 added
[  183.454998][T10877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.457297][T10877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.466556][T10877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.470864][T10877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.473081][T10877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.484183][T10877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.510465][T10877] hsr_slave_0: entered promiscuous mode
[  183.512854][T10877] hsr_slave_1: entered promiscuous mode
[  183.515584][T10877] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.518065][T10877] Cannot create hsr debugfs directory
[  183.608662][T10877] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  183.613007][T10877] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  183.619541][T10877] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  183.623687][T10877] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  183.641041][T10877] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.643429][T10877] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.645991][T10877] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.648287][T10877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.678481][T10877] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.688745][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.692654][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.703842][T10877] 8021q: adding VLAN 0 to HW filter on device team0
[  183.710812][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.713232][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.719390][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.721743][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.823438][T10877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.926832][T10877] veth0_vlan: entered promiscuous mode
[  183.931704][T10877] veth1_vlan: entered promiscuous mode
[  183.948245][T10877] veth0_macvtap: entered promiscuous mode
[  183.953001][T10877] veth1_macvtap: entered promiscuous mode
[  183.971838][T10877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.979368][T10877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.983941][T10877] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.987432][T10877] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.990239][T10877] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.993007][T10877] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.038744][ T6403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.041354][ T6403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.068003][ T6403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.070574][ T6403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.144168][T10903] netlink: 'syz.8.1347': attribute type 1 has an invalid length.
[  184.302060][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1349'.
[  184.360920][T10914] delete_channel: no stack
[  184.738772][T10925] vlan0: entered promiscuous mode
[  184.748358][T10925] team0: Port device vlan0 added
[  184.823380][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1354'.
[  184.984778][T10944] netlink: 'syz.8.1358': attribute type 15 has an invalid length.
[  184.987485][T10944] netlink: 'syz.8.1358': attribute type 15 has an invalid length.
[  184.990102][T10944] netlink: 'syz.8.1358': attribute type 15 has an invalid length.
[  184.992736][T10944] netlink: 'syz.8.1358': attribute type 15 has an invalid length.
[  184.997239][T10944] netlink: 'syz.8.1358': attribute type 15 has an invalid length.
[  184.999836][T10944] netlink: 'syz.8.1358': attribute type 15 has an invalid length.
[  185.002474][T10944] netlink: 'syz.8.1358': attribute type 15 has an invalid length.
[  185.005979][T10944] netlink: 'syz.8.1358': attribute type 15 has an invalid length.
[  185.051096][T10948] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  185.122418][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1359'.
[  185.127969][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1359'.
[  185.130861][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1359'.
[  185.133639][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1359'.
[  185.139531][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1359'.
[  185.142386][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1359'.
[  185.145716][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1359'.
[  185.148612][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1359'.
[  185.235236][ T5828] Bluetooth: hci8: command tx timeout
[  185.362015][T10958] netlink: 'syz.8.1362': attribute type 32 has an invalid length.
[  185.365283][T10958] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  187.141635][ T5832] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  187.145220][ T5832] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  187.148210][ T5832] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  187.151231][ T5832] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  187.153774][ T5832] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  187.315853][ T5832] Bluetooth: hci8: command 0x041b tx timeout
[  187.342409][T10981] chnl_net:caif_netlink_parms(): no params data found
[  187.388865][T10981] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.392019][T10981] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.404394][T10981] bridge_slave_0: entered allmulticast mode
[  187.417369][T10981] bridge_slave_0: entered promiscuous mode
[  187.423372][T10981] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.427833][T10981] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.430455][T10981] bridge_slave_1: entered allmulticast mode
[  187.433409][T10981] bridge_slave_1: entered promiscuous mode
[  187.463357][T10981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.469955][T10981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.495760][T10981] team0: Port device team_slave_0 added
[  187.499847][T10981] team0: Port device team_slave_1 added
[  187.517791][T10981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.520254][T10981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.531314][T10981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.538333][T10981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.541314][T10981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.552304][T10981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.598103][T10991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.634021][T10990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.641509][T10981] hsr_slave_0: entered promiscuous mode
[  187.645663][T10981] hsr_slave_1: entered promiscuous mode
[  187.647864][T10981] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.649308][T10990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.650405][T10981] Cannot create hsr debugfs directory
[  187.743838][T10981] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  187.750392][T10981] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  187.754597][T10981] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  187.758916][T10981] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  187.781553][T10981] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.783925][T10981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.786486][T10981] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.788853][T10981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.820782][T10981] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.831344][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.834365][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.845559][T10981] 8021q: adding VLAN 0 to HW filter on device team0
[  187.853814][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.856290][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.861981][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.864365][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.993147][T10981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.100700][T10981] veth0_vlan: entered promiscuous mode
[  188.106121][T10981] veth1_vlan: entered promiscuous mode
[  188.124839][T10981] veth0_macvtap: entered promiscuous mode
[  188.129264][T10981] veth1_macvtap: entered promiscuous mode
[  188.140583][T10981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.147997][T10981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.152778][T10981] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.157665][T10981] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.160548][T10981] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.164885][T10981] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.242810][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.245496][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.270455][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.272851][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.504918][T11021] pim6reg: entered allmulticast mode
[  189.237412][ T5834] Bluetooth: hci9: command tx timeout
[  189.252424][  T789] IPVS: starting estimator thread 0...
[  189.354738][T11031] IPVS: using max 79 ests per chain, 189600 per kthread
[  189.395605][ T5832] Bluetooth: hci8: command 0x041b tx timeout
[  189.408615][T11035] __nla_validate_parse: 52 callbacks suppressed
[  189.408626][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1374'.
[  189.436278][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1374'.
[  189.439106][T11035] validate_nla: 2 callbacks suppressed
[  189.439114][T11035] netlink: 'syz.9.1374': attribute type 1 has an invalid length.
[  189.443304][T11035] netlink: 10 bytes leftover after parsing attributes in process `syz.9.1374'.
[  189.519802][   T56] block nbd11: Receive control failed (result -32)
[  189.529400][ T5834] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  189.534114][ T5834] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  189.538271][ T5834] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  189.544153][ T5834] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  189.548699][ T5834] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  189.629617][T11048] tipc: Started in network mode
[  189.642906][T11048] tipc: Node identity 164dd44b6305, cluster identity 4711
[  189.646383][T11048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.673731][T11048] tipc: Disabling bearer <eth:syzkaller0>
[  189.744139][T11057] netlink: 45 bytes leftover after parsing attributes in process `syz.9.1380'.
[  189.849370][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1382'.
[  189.853269][T11041] chnl_net:caif_netlink_parms(): no params data found
[  189.890335][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1383'.
[  189.893369][T11070] netlink: 312 bytes leftover after parsing attributes in process `syz.9.1383'.
[  189.901391][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1383'.
[  189.939281][T11041] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.941720][T11041] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.944105][T11041] bridge_slave_0: entered allmulticast mode
[  189.956010][T11041] bridge_slave_0: entered promiscuous mode
[  189.959867][T11041] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.962191][T11041] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.965375][T11041] bridge_slave_1: entered allmulticast mode
[  189.968240][T11041] bridge_slave_1: entered promiscuous mode
[  189.999831][T11041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.008548][T11041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.028047][T11078] netlink: 'syz.9.1384': attribute type 13 has an invalid length.
[  190.033884][T11041] team0: Port device team_slave_0 added
[  190.043693][T11041] team0: Port device team_slave_1 added
[  190.046485][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1384'.
[  190.069545][T11041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.071829][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.090433][T11041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.097740][T11041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.100037][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.116238][T11041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.177595][T11041] hsr_slave_0: entered promiscuous mode
[  190.180024][T11041] hsr_slave_1: entered promiscuous mode
[  190.182350][T11041] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.189128][T11041] Cannot create hsr debugfs directory
[  190.333944][T11083] IPv6: syztnl1: Disabled Multicast RS
[  190.381321][T11041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.395228][T11089] netlink: 'syz.9.1386': attribute type 4 has an invalid length.
[  190.429955][T11041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.521140][T11041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.598680][T11041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.651493][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1392'.
[  190.775885][T11041] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  190.788777][T11041] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  190.810846][T11041] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  190.827940][T11041] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  190.855905][T11121] veth3: entered promiscuous mode
[  190.897938][T11041] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.911674][T11041] 8021q: adding VLAN 0 to HW filter on device team0
[  190.918930][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.921430][ T6444] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.941600][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.943978][ T6444] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.075235][T11041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.081467][T11141] netlink: 'syz.9.1398': attribute type 1 has an invalid length.
[  191.084435][T11141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.119353][T11041] veth0_vlan: entered promiscuous mode
[  191.128454][T11041] veth1_vlan: entered promiscuous mode
[  191.155475][T11041] veth0_macvtap: entered promiscuous mode
[  191.159771][T11041] veth1_macvtap: entered promiscuous mode
[  191.194776][T11041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.201585][T11041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.206573][T11041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.209456][T11041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.212349][T11041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.216567][T11041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.282111][T11151] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  191.289248][ T6392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.293040][ T6392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.310304][T11151] bridge_slave_0: left allmulticast mode
[  191.312417][T11151] bridge_slave_0: left promiscuous mode
[  191.314363][T11151] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.315380][ T5832] Bluetooth: hci9: command tx timeout
[  191.326171][T11151] bridge_slave_1: left allmulticast mode
[  191.328062][T11151] bridge_slave_1: left promiscuous mode
[  191.330008][T11151] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.337849][T11151] bond0: (slave bond_slave_0): Releasing backup interface
[  191.343265][T11151] bond0: (slave bond_slave_1): Releasing backup interface
[  191.357983][T11152] netlink: 'syz.9.1401': attribute type 10 has an invalid length.
[  191.361570][T11151] team0: Port device team_slave_0 removed
[  191.369606][T11151] team0: Port device team_slave_1 removed
[  191.373494][T11151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.377183][T11151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.381093][T11151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.383565][T11151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.410539][T11152] mac80211_hwsim hwsim28 wlan1: left allmulticast mode
[  191.415839][T11152] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  191.432315][ T6403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.435269][ T6403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.475081][ T5832] Bluetooth: hci8: command 0x041b tx timeout
[  191.634946][ T5832] Bluetooth: hci10: command tx timeout
[  191.738345][ T2213] IPVS: starting estimator thread 0...
[  191.826624][T11176] syzkaller0: entered promiscuous mode
[  191.828504][T11176] syzkaller0: entered allmulticast mode
[  191.844724][T11173] IPVS: using max 79 ests per chain, 189600 per kthread
[  193.166486][T11197] netlink: 'syz.1.1413': attribute type 13 has an invalid length.
[  193.169028][T11197] netlink: 'syz.1.1413': attribute type 17 has an invalid length.
[  193.212428][T11197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.325177][T11203] block nbd12: server does not support multiple connections per device.
[  193.329187][T11203] block nbd12: shutting down sockets
[  193.395068][ T5832] Bluetooth: hci9: command tx timeout
[  193.415591][T11207] netlink: 'syz.1.1415': attribute type 4 has an invalid length.
[  193.553216][T11214] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.556459][ T5832] Bluetooth: hci8: command 0x041b tx timeout
[  193.590590][T11214] bridge_slave_1 (unregistering): left allmulticast mode
[  193.592942][T11214] bridge_slave_1 (unregistering): left promiscuous mode
[  193.596411][T11214] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.729190][ T5834] Bluetooth: hci10: command tx timeout
[  194.268255][T11225] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  194.273616][T11225] netlink: 'syz.8.1422': attribute type 4 has an invalid length.
[  194.352297][T11225] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.354990][T11225] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.529909][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.543481][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.642979][T11225] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.650666][T11225] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.653587][T11225] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.657888][T11225] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.779380][T11245] __nla_validate_parse: 10 callbacks suppressed
[  194.779631][T11245] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1427'.
[  195.474773][ T5832] Bluetooth: hci9: command tx timeout
[  195.663712][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1432'.
[  195.668007][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1432'.
[  195.671176][T11264] netlink: 'syz.8.1432': attribute type 1 has an invalid length.
[  195.674773][T11264] netlink: 10 bytes leftover after parsing attributes in process `syz.8.1432'.
[  195.749607][ T7293] block nbd12: Receive control failed (result -32)
[  195.780204][T11271] bridge_slave_0: left allmulticast mode
[  195.782135][T11271] bridge_slave_0: left promiscuous mode
[  195.794788][ T5834] Bluetooth: hci10: command tx timeout
[  195.796736][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  195.801719][T11271] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.813667][T11271] bridge_slave_1: left allmulticast mode
[  195.821713][T11271] bridge_slave_1: left promiscuous mode
[  195.823694][T11271] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.830841][T11271] bond0: (slave bond_slave_0): Releasing backup interface
[  195.836485][T11274] ksmbd: Unknown IPC event: 3, ignore.
[  195.844048][T11271] bond0: (slave bond_slave_1): Releasing backup interface
[  195.851244][T11271] team0: Port device team_slave_0 removed
[  195.857991][T11271] team0: Port device team_slave_1 removed
[  195.860163][T11271] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.878401][T11271] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.882611][T11271] team0: Port device vlan0 removed
[  195.991575][T11290] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1441'.
[  196.141074][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1444'.
[  197.834379][T11320] netlink: 'syz.1.1448': attribute type 9 has an invalid length.
[  197.874718][ T5828] Bluetooth: hci10: command tx timeout
[  197.887404][T11322] can: request_module (can-proto-4) failed.
[  197.980134][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'.
[  198.053409][T11329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1452'.
[  198.068759][T11329] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  198.073275][T11329] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  198.128028][T11333] erspan0: entered promiscuous mode
[  198.132686][T11333] erspan0: left promiscuous mode
[  198.242976][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'.
[  198.246478][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'.
[  198.264631][T11347] netlink: 'syz.1.1458': attribute type 20 has an invalid length.
[  198.267519][T11347] netlink: 'syz.1.1458': attribute type 20 has an invalid length.
[  198.672282][T11370] netlink: 'syz.1.1464': attribute type 1 has an invalid length.
[  198.796734][T11379] pim6reg1: entered promiscuous mode
[  198.798564][T11379] pim6reg1: entered allmulticast mode
[  198.902305][T11386] tipc: Started in network mode
[  198.904139][T11386] tipc: Node identity 5e85c549285c, cluster identity 4711
[  198.911129][T11386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.914021][T11386] syzkaller0: entered promiscuous mode
[  198.916268][T11386] syzkaller0: entered allmulticast mode
[  198.927964][T11386] tipc: Resetting bearer <eth:syzkaller0>
[  198.931188][T11385] tipc: Resetting bearer <eth:syzkaller0>
[  198.943397][T11385] tipc: Disabling bearer <eth:syzkaller0>
[  199.020814][T11388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.144566][T11391] nbd13: detected capacity change from 0 to 63
[  199.147891][ T7293] block nbd13: Receive control failed (result -32)
[  199.148796][T10879] block nbd13: Send control failed (result -32)
[  199.155974][T10879] block nbd13: Request send failed, requeueing
[  199.159894][   T60] block nbd13: Dead connection, failed to find a fallback
[  199.162353][   T60] block nbd13: shutting down sockets
[  199.164231][   T60] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  199.171648][   T60] Buffer I/O error on dev nbd13, logical block 0, async page read
[  199.174350][T10879] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  199.178058][T10879] Buffer I/O error on dev nbd13, logical block 1, async page read
[  199.180825][T10879] I/O error, dev nbd13, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  199.183715][T10879] Buffer I/O error on dev nbd13, logical block 2, async page read
[  199.199336][T10879] I/O error, dev nbd13, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  199.202365][T10879] Buffer I/O error on dev nbd13, logical block 3, async page read
[  199.206254][T10879] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  199.209282][T10879] Buffer I/O error on dev nbd13, logical block 0, async page read
[  199.211912][T10879] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  199.215131][T10879] Buffer I/O error on dev nbd13, logical block 1, async page read
[  199.217775][T10879] I/O error, dev nbd13, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  199.220775][T10879] Buffer I/O error on dev nbd13, logical block 2, async page read
[  199.223282][T10879] I/O error, dev nbd13, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  199.226438][T10879] Buffer I/O error on dev nbd13, logical block 3, async page read
[  199.229975][T10879] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  199.234262][T10879] Buffer I/O error on dev nbd13, logical block 0, async page read
[  199.237142][T10879] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  199.240168][T10879] Buffer I/O error on dev nbd13, logical block 1, async page read
[  199.245739][T10879] ldm_validate_partition_table(): Disk read failed.
[  199.248842][T10879] Dev nbd13: unable to read RDB block 0
[  199.252926][T10879]  nbd13: unable to read partition table
[  199.261952][T10879] ldm_validate_partition_table(): Disk read failed.
[  199.266233][T10879] Dev nbd13: unable to read RDB block 0
[  199.268883][T10879]  nbd13: unable to read partition table
[  200.150192][T11418] __nla_validate_parse: 10 callbacks suppressed
[  200.150202][T11418] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1479'.
[  202.228798][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1489'.
[  202.232426][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1489'.
[  202.237012][T11453] netlink: 'syz.8.1489': attribute type 1 has an invalid length.
[  202.240247][T11453] netlink: 10 bytes leftover after parsing attributes in process `syz.8.1489'.
[  202.323868][ T7293] block nbd14: Receive control failed (result -32)
[  202.352407][T11456] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1490'.
[  202.708826][T11480] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1497'.
[  202.712487][T11480] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1497'.
[  205.480555][T11500] netlink: 'syz.8.1504': attribute type 2 has an invalid length.
[  205.483136][T11500] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1504'.
[  205.524368][T11503] syzkaller0: entered promiscuous mode
[  205.526505][T11503] syzkaller0: entered allmulticast mode
[  205.529067][T11502] tipc: Started in network mode
[  205.530709][T11502] tipc: Node identity 866e90537b95, cluster identity 4711
[  205.533343][T11502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.543946][T11502] tipc: Resetting bearer <eth:syzkaller0>
[  205.553903][T11502] tipc: Disabling bearer <eth:syzkaller0>
[  206.034675][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[  206.691465][T11520] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1510'.
[  206.715612][ T6881] unregister_netdevice: waiting for bond0 to become free. Usage count = 3
[  206.721988][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1511'.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  206.725666][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1511'.
[  206.728733][T11522] netlink: 'syz.8.1511': attribute type 1 has an invalid length.
[  206.731839][T11522] netlink: 10 bytes leftover after parsing attributes in process `syz.8.1511'.
[  206.735994][ T6881] ref_tracker: bond0@ffff888029d30610 has 1/1 users at
[  206.735994][ T6881]      ib_device_set_netdev+0x31f/0x6d0
[  206.735994][ T6881]      siw_newlink+0x405/0xd70
[  206.735994][ T6881]      nldev_newlink+0x4a5/0x5a0
[  206.735994][ T6881]      rdma_nl_rcv+0x6ae/0x980
[  206.735994][ T6881]      netlink_unicast+0x75c/0x8e0
[  206.735994][ T6881]      netlink_sendmsg+0x805/0xb30
[  206.735994][ T6881]      __sock_sendmsg+0x21c/0x270
[  206.735994][ T6881]      ____sys_sendmsg+0x505/0x830
[  206.735994][ T6881]      ___sys_sendmsg+0x21f/0x2a0
[  206.735994][ T6881]      __x64_sys_sendmsg+0x19b/0x260
[  206.735994][ T6881]      do_syscall_64+0xfa/0x3b0
[  206.735994][ T6881]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.735994][ T6881] 
[  206.835913][ T5832] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  206.839230][ T7293] block nbd15: Receive control failed (result -32)
[  206.850405][ T5832] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  206.854105][ T5832] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  206.857520][ T5832] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  206.860874][ T5832] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  208.924870][ T5828] Bluetooth: hci11: command tx timeout
[  210.994826][ T5828] Bluetooth: hci11: command tx timeout
[  213.084759][ T5828] Bluetooth: hci11: command tx timeout
[  215.154746][ T5828] Bluetooth: hci11: command tx timeout

VM DIAGNOSIS:
15:26:50  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff1100c46d09f RBX=ffff8880218e3b80 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888062378000 RBP=dffffc0000000000 RSP=ffffc900071c7d20
R8 =ffff8880218e4337 R9 =0000000000000000 R10=ffff8880218e4328 R11=ffffed100431c867
R12=1ffff1100431c771 R13=ffff888062368000 R14=ffff8880623684f8 R15=ffff8880218e3b80
RIP=ffffffff8a1b882e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f212157d6c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c27a5f2 CR3=00000000742ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2120986478 00007f2120986450 XMM03=00007f2120986488 00007f2120986480
XMM04=00007f21214ed100 00007f2120986440 XMM05=00007f2120986458 00007f21209864a0
XMM06=00007f2120986498 00007f2120986490 XMM07=00007f2120986488 00007f2120986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2120811df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffd40008e4d18 RBX=ffffea00047268c0 RCX=ffffffff82102d87 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffea00047268c0 RBP=0000000000000001 RSP=ffffc900030df550
R8 =ffffea00047268c7 R9 =1ffffd40008e4d18 R10=dffffc0000000000 R11=fffff940008e4d19
R12=ffffea00047268c0 R13=ffff888110a39e00 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff82102d93 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffa5d8e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007ffa5cd866a3 00007ffa5cd866a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055558e6bdb31 000055558e6bc8e0
XMM06=0000000000000000 0000000000000000 XMM07=0bc0030210000bb0 0302a010000a9003
XMM08=0100000c080604a8 0300010032080804 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
