last executing test programs:

8.369626683s ago: executing program 0 (id=257):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x88, 0x24, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2, 0x9}, {0xd, 0x3}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xc377}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x9}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c805}, 0x21) (async)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x400, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000240)=0x1000812, 0x4) (async)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000280)={0x3, [0x6, 0x1, 0x6]}, &(0x7f00000002c0)=0xa) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4f79}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4041) (async)
openat$cgroup_type(r0, &(0x7f0000000480), 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x20, 0x9, 0x0, 0x1000, 0x300, r1, 0x8, '\x00', 0x0, r1, 0x0, 0x4, 0x3}, 0x50)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000540)="65e257a3ce513ca3171ca390a4a6d7c7", 0x10)
r5 = socket(0x8, 0x800, 0x7) (async)
getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000580)=""/48, &(0x7f00000005c0)=0x30)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r6, 0x20, 0x66, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x36bf}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9f7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40024}, 0x0) (async)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$fou(&(0x7f00000007c0), r1)
sendmsg$FOU_CMD_ADD(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x60}}, 0x80000) (async)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6}}, &(0x7f0000000a00)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@broadcast, @in6=@local, 0x4e23, 0x7, 0x4e22, 0x4, 0x2, 0x0, 0x80, 0x21, r2, r9}, {0x9, 0xfffffffffffffff7, 0x7, 0x1, 0x7, 0x1, 0x3ff, 0x8}, {0xefbf, 0xc5d, 0xa, 0xfffffffffffffff8}, 0x9, 0x0, 0x1, 0x1, 0x1, 0x7}, {{@in=@rand_addr=0x64010100, 0x4d5, 0x33}, 0x2, @in=@multicast1, 0x3503, 0x4, 0x1, 0x9, 0x3, 0x2, 0x2}}, 0xe8)
r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
setsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000b40)=0x1, 0x4) (async)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) (async)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000c00)=0x8, 0x4) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000c40)={0x0, 'ip6tnl0\x00', {0x4}}) (async, rerun: 32)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r11, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x6c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\''}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '\\@}.'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/{{}@^'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '\\+:#*:+'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'ip6tnl0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

8.369011925s ago: executing program 0 (id=258):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x20, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10)
sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x16, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6b3}, {}, {}, [@func, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, @alu={0x4, 0x1, 0xd, 0xb, 0x0, 0x30, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x0, 0xa, 0x9, 0x1, 0xfffffffffffffff8, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5403, 0xb0, &(0x7f0000000100)=""/176, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x9, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x4, 0x5, 0xa}, {0x1, 0x5, 0x8, 0xa}, {0x1, 0x2, 0xd}], 0x10, 0x5}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x20, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) (async)
sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x16, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6b3}, {}, {}, [@func, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, @alu={0x4, 0x1, 0xd, 0xb, 0x0, 0x30, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x0, 0xa, 0x9, 0x1, 0xfffffffffffffff8, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5403, 0xb0, &(0x7f0000000100)=""/176, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x9, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x4, 0x5, 0xa}, {0x1, 0x5, 0x8, 0xa}, {0x1, 0x2, 0xd}], 0x10, 0x5}, 0x94) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4) (async)

8.319628367s ago: executing program 0 (id=259):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0xe23, 0x3, @empty}, 0xff56)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000560005dfe400"/32], 0x48)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @log={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz1\x00'}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0xec, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc8, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb3, 0x6, 0x1, 0x0, "eba4a23a411278ee720741e4160d4367bb0ff8909bf9adf4434ee4d99968545d93ca45ff0eb07d5e4ad343b561b9ba99d812a07ae989b62084f1e6d20d1662852058d4fb93d744945d7e51b17e0529977c7fed60292e820fac19f93558855b42ee5895cfcf3e3fb9ac86acf550140574eda7ef7ce17a18203ce59f92e0cc7f0d836236f209f087a9a5b719bd9fd24b5abe3a4f7ec25e85628ebc932231fd61028c8e689d40524599d2f41861bb58a0"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x188}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200000002"], 0x10)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8)
close(r10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="0200d70fe9ab1500000600000000400000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c, r13, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

8.317984965s ago: executing program 0 (id=260):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}]}, 0x30}}, 0x0)

8.250028807s ago: executing program 0 (id=261):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180))
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r4=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18ed5409972c5ea4965af9b0027a0000000000000000003b"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000c457001100000000010000000018", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000029c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x2f, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000700000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000006900030500000000000000000000000000000000080001000200000091d1f98734964e90abe04c7a006a46e958b9b57debdd8f1f56f92b3a43422ec81afb0b6f52aeabdec4bb4289d8c3d53b4a4457efdde65233f085a352d5af02d2d48d488f195f8ca32495ea0e618ed188f78105fee59801dc3c7e3b225422095d7443b6532f5651e08957c473d1cbe7ffffffff0000000063191f04778eb18f8e20abae260356127543c5a4b374397994"], 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r10, 0x8008743f, 0xf0ff1f00000000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0x38)
bind$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

4.554682866s ago: executing program 0 (id=261):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180))
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r4=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18ed5409972c5ea4965af9b0027a0000000000000000003b"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000c457001100000000010000000018", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000029c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x2f, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000700000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000006900030500000000000000000000000000000000080001000200000091d1f98734964e90abe04c7a006a46e958b9b57debdd8f1f56f92b3a43422ec81afb0b6f52aeabdec4bb4289d8c3d53b4a4457efdde65233f085a352d5af02d2d48d488f195f8ca32495ea0e618ed188f78105fee59801dc3c7e3b225422095d7443b6532f5651e08957c473d1cbe7ffffffff0000000063191f04778eb18f8e20abae260356127543c5a4b374397994"], 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r10, 0x8008743f, 0xf0ff1f00000000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0x38)
bind$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.720131241s ago: executing program 1 (id=341):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540063766c616e004400028006000200010000000800010001000000080003000000000000000000", @ANYRESOCT=r1], 0x84}}, 0x20008040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001180)=ANY=[@ANYBLOB="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"/1810, @ANYRES8=r0, @ANYBLOB="94321fa9b5d4f7c9f7123dd0850391cd788d0bd439b285721a84af67adc714e7f7bf4be5d55c3e9905b1c7bf60c9bee86e07adb40fb372247ba973347689cb87170b635badaa0f44d97f5a3c8fbe5a6bc71c2cb38d5f5916cdc9ccb938fa64a35eaae2ca700d8adee5779e2cf9e2485e61b5b9c9302fa4259002738469ce968fd7a6abace2dedfae741afc009aa2c0a9923b0035f102352aaa3d8a35a0b4dbe90f5328b40794d19121daa2dbb7a1db6b253104748fa0e0a54cb908c2203afd8d8a50b87b178f13a74c54ac2d62758603e971d06f681b92a85b970288e19dc99305266300e655eba8eabad01ef19e9474fdb09fbcd4a5ca8fa421b9801a5851d53a09af70a71ac7d7b3c76a1f34b02f06774f9620e26aaff5a67153c33ffc1e341f9fe901db9553bdb44ca9ea7a7ba6f3fd8fcc0afa4b7ffff9faef07e9338a2fc9c3c0c24de0141ae6e5cf265e28331410f4c1a3cb6c5e47aad55ed7866820f0912a2beaaac4c88dd6d5f2a608ad7c6daaf6ec1571382e99ecd493af8f3be815537fc3b38ac4b774e6e8d2d0bfbc4e2e5c29116dbc5cd9b3d7d7fbda6e67d3931a592e3a49f5343a8b6863c66254a45d999d6ecf98297d2b1487a0f5c8dc6fb9f37fa7cca12d73a3d0bf25ae23351f7b503b7887fa54b22d3e87115caf5ab1e9d91200b56da73428f9445e94fb49149f7f4986935738dc769b0eae510f9df81a6091feaac60a062c771a430c956ebeb0ef2d5eb22ef74eded84da3d930122ea06ab3c49d120f36cf0434ec27abdb72184b61c050336ed18443a29d28ce2966a26c69554961024ebd492ad66bdae567f83da37d685ca1fb23e680e39e8733cbc7472f9d7678c236565ae7a5e4db1735997d9cff649d3037e211863ca06e1c94732cf6dbc172b0d2334ab393f3784e23571c0034d267fce9321d5a1d48598b44653ac085bf18cba1b33232138a98c9d29aaf470dbb99a20b020358219bc1c7f802077c68dedc220763a2b3b399d7113bd06fac48d8fb455304a643448f7cbac5f721fce75b65d90227483b88acfe70044324d947f2b8a2d1de65837aff49d63224f2a7fe8d2828c9fd513de965f2ea081d4b65058d4aa6af52e57fdc644692fb4900a7a97541429f9a33857a054fb71617113b222db9a5b8926707bccdc5746f783faf62a7a51e17bb3f13c18fc7629d63530b252aee2b92f2de02aaf1c42cbba102ed1424822378afea51a0174fb6394317dd4f80e127b8dcc7aeabe5e1fa4c5438669ddafaf0edeb2ebb71b61b14109103f900d60df1b0cb2e39ba7c27027ded1addc381b37c17d018ed807b718da0545afc63502b76134b88910a9af3b9b963c5da32b8806130e2d7f6ff2a493d34a3f9f491da170abbf337356243d4c0278f503260d39cb3ba39ed7914034ccbe821203269a4b83f8ddafe4415f713d2031f9c521491e7ecdd5d47c94add54ed34ccc1607697b7a654de84f132b24262a4fb9df331a7bbbe4a7f110b2d009a650e4c84792fa3caf470dd2244e12a6000a0ef2912f18fd4edcdb1d6c69cb717d913eec2c542b9e08295b2c9ee65d12cbf7dfef451b6eb34f458090d210f3f5f82ddaacf609f421cd00251fc8e2ad12a7d56a4f6db7a628f18f7bd10b4d556c0531298b6f9b6d149cb74308ecce33fe081b77cfb584261d95baef9f504a595628efbbb9097451f23ae9ffe51fb8c08af3c55e783f773dc1362cd6d332e75e5b129533600c53fcfe8b744416914966d46deb16199d5b5038ae93e06a7cb29db91f81843908405c8cf85e5d8940ac16e8f903123e2a5f2816f59f2bf0c12cfaec0e66db267aa0ead34f2efe0b668650ba44df03c48293e52babe09f692388b0ac47e3214a8e5cb2ded0ec3f1c3559aaaba5f5d30486bd5957dcc1bb819aaf0e09a6543c5c97104a932a6cc333551c5e58e4afd0695c0536ae2a97fe6f0b35358bb34ddc863fadf0092e3473d89ea8656d25bcbdd5279d6e185bb6b35d676947988409568e01908330748aa5ec4cd819acb30cb524719a15cf06086b4444f5baaa27de40a872082318d6b4e8dfba0f669c11d30fea8a4bcc8429c5d8a4ff113dbbee8806cc4d2775403cc3e941bde1356dffe7e8b9d9e9f39bfd5a373fddacab1825670b45b99acc3f43ab56c3f614750de0ee532215305b844e755fec5158632fb2fe48b1f45f61df883a47b5017acc2687a4a338d99628e0f64d5c6d7b593ae49d9f0ea30da04565d75b2412cf47b60cbeb0d834708b867e0a848b06ad759e675a2817d63b20f8dd50ba71afc2fa204b29e84e017dd03eb950f0313fc7f2f1ad3c216bf660c570a10368804d8226696ba60307abb94a19abfdd635949b6ea20bce0a75057811da0d5f5988d7ab7a0f47a292fbf7ad1a8dc21d4fa812561849974df1f8d178ad281de851350a2a920876a1f7bd95c3d0cb626e5745baf0bdf55ec9ec7ff5e48e7d89844ed59187ac23d59158d77483f34076dfb894f48f134d4aaf29635855470e9053405313fe11aaa323ad36b0d9efb851fa333aa71e5f7aadedac975ca66722966e4e5a6fa511d356f5116678392210a80c5f1d8a9c6fd5eecbbb14bf8cc684b4553a63edb6d22d98dfa3b89bfe5dd8e3f9b7c590c55d00c58e32e9d074dd088edc681dcba2b46e876a6c5632355337fe7c7cab42dcbdd63eb2050eb8b258b37dd85f0b97c618bd367c3fe5fe9a55f12c81a2d1a3c632d2a14ed75d86087c28fa983ce27aee361a47f1911f0bb2c179a6df0adb2386b973b5abeeef8307f7bdb82ed082fd3ea4613e372e5b54e6af5b52a5e6c0304f602dcbc47e8ded33b3e9e9a6d23fd453561b2b0b77c1a7835296c93047ac4cfacf44b7dee7e6d9050733c50185a4e1dca8c00047644dd4e26b1604a8be94a819b8cbc2817455b8c90cf89f16d302f4b674fb8c70ed8721a862fb5c5c46e35980d2ddc1ef0bedb3afbe725d6be5a0cb6bc1ddd5d6a474fea98062820e9c7a319a51fa530feae96236ca9d2c9f408bcbb54a5af1b3e1650f00d05156f43c546f2405e41175b32e4a919732c038c421bcbda8e46dd3653de85eeb49a9cb34cc76f0f10d4ad57ad2e39edfbbc887b5c590fb8c4f8152170bce119efa237f13338ff08cad746019674a2cbbaeca5150baae1da704ad9de9e05d6346a10eb860004af020519d5fa314bc1a67406ecb26244266b8dbc3dedc1a47375d6fe7cfec66cb42f551d935808d49b95d6fe612c91f47b70a16e74adadf93f392d94104b997fafa16300df23035c6721a790e65ddc8bf4a223f6dca4f1a1999847f56e65c9df3b2bbd3b578f0e36ba025ec8fab31d87af5b4b86f2ab68061b6f035421600ea2feea90c7cff39fcda35a810b5c261b0685335052df0369bc341ff2c875fc9f7aa1b2fe8489e5b4e0b662366cf955eabf980f76ce932ec2b576cb23f3f2f464ece1c8387a018f824caaed39faee42f1273591e89dcfe8e16d14177b3b5804d569afdfc51ddb44bf7709b1a1dc69b8ceee6445f1407e0c64bac9d64ba1b370c93876bf3d5b6b2aca2a2b616c4896db407c663bd66cddd4591bf120b83d2019cd9fa85395a1a9b2c5212b36047f814a26754f16d4d536a448c301b33043ef0fdec95f13abfb2c62a6de78ba14b081197a6c6af6b44773c4d852c75dd6d2ee5261e182f67fdf3dc482c5ddd837e26391630f149cdd6ef3d4a9866ce46ff2cc7477ed34a3a7c9747019f9578eab536c7bae2b6d8aea953d14d1edf355bacc9646719ca211ef7869245ef64c04a8e336a62ceae2f06bc6926158cf67e617fc30688a83cdc5eb94be5109fdb05df1f9b14c011aa8fea696e549de6ce5b01659e3b5e60acc5437199c7d7f04dabeea442f61c090bd558ee15bf294af850fc611202effc02ec387099bb0f10ed33c024f2df68b951205061b92be084f18e0fb08fbe2a3af8c760f83c38a039308ecdd40b97d73dc576d4cabc3196fa73a1ad93c71b583257e19ed1bd6cd18ea8fbb9fd658fabac0a4cf5e85dacb687c12e2cb0037821d2a6f6f0f8a41a40f9af83b63c2855197874c0fb3bccdff68f63ab3d6b3e02afd183f6aba71c7fba9451c42e3d11e5d68f35ed6111b76226a58328423bc9e06fb5ecdd18bc9b94171390e9be5a02973d1653fc507cc1c5bc6f78f93f9174900856716a02cc355a09813d1c6ae11af4eef39df184cdd402657246cb3b2125ac0efff0539c67689841682c666bc7380febc6c3d1ca6161c053ab423cc866041cfdb6242bcd918c60fd34b11bc7cc0670aee97d0a5911a375e6568daf72ff54391e26d5e4b7f07aa140bb33d51dae94bed09d9417414df6ca5f818ab842735458ee622bc1d8a28ef82917958dcf742f440a3e86a6f5a6b273b87e2c1db5c534722333080e22bc9afa4f593de7f2b61dc77ff846545dbec5f9bbf00bab17984dc52f140dbe2b15c6f9321942c3f3358fe06a04d2f133ff1150fbfaaf84d86d2e1fc27c8070ad13e7d1d00e2134735a5d5197365558219fe8e92933896e56ed4f38a54535cbea545909f20a3d0c6755da8ac109a04f30e1f97ff2704f741b87a86273c24dd86e1c14e5920afb317071e8e09ec5d8aefcf038a5b720ad7813253b9f19b5e7d2d95103b7bfc86b8ccafbd066ebabd53ae826c791fde3a3129b8ad28f18ebb5dbc394f6b415b16c6cbf1e14144ab8b6b04e264518981f06453abbe9f32f7d62d788eb05deca9d2d695c95796051ea3784bfee51a843217891fee1771f300d2abf178f61c19495b1fc42a8a49d2b7463686fdbe88b7f30d73d988264380278bfa75c99f77632fc8ed98f23201502f48ad288d7476df3a5cae057ba40d812b1e671c2e16be2efa4f659724dfcd9bbdcb98658fac09e69a13c5df486c27f344e2d5640c5ba39e2c8c74f9a8f3258a12a1620f7b7244f9965b57a67a5687a6c54f05be65d51a40444446da12d7d8ee1a9afaefa158e3b8b25334d6d3a6258a67b92e15b98845fb9481a6bd225cc68b57da2384fab26b02738b1ab2e3f8bd8cd5d05e7f71d80d1132b001df3b68fb172b6dd4aa9a7976c366c8ca78de4ba23144b0c5327a6be9670b485720c62bbd5b9e35f3d48fabb697a0cd9e5df50a26726861605263c5f5edd044d305df55225f8bd1773c0bb055818123524eb96e1b2c3f1592b58ea8d2936b305e4ec3d4134d5969000f543544707bda4c15cd37c1e773eb6637507df708599238a54870e4b16a968dc28856514611bc2ac2ea6b0101cc3dadc32e3e50ff797893f14024e42777aa27b1516cf7639ee73eed7d844616cbee84146bea05658dc39b8aff795d27f4f46345af7ae5d9eb3d92ccadf4d4ffb721a5cb2d1f75e49bc59b697ba8c098f0bc3b4714481bd9332b66149115e71bdeb399c9c98b518ca643518f108ca5cd27dac46c9e09d835152af1ba5ac190383b09f3b56be9d2977219dfd1976d548e8ecea0943604c75c72e3c98a73801d58ba1c6388e4cb26b21d599a4e1afc79e130bb10e3bedce4d428026d8cb30747b11be98db08c77f1b19847ef4330fbb2c7b7ab19741adf315484cf840a0c63060b2387e28ec0b221ee435270156c643cdf8beb37641d6b022a1fe2b127bdb964e583158706b8a46f9ba13080554d343eb94702c4ab81b7f6440ced521b1784a40cb27120f051c9cf262b8c7f30207fd5765f78161188e2ca3fc13cc8172f0dfb89455b11925b6ea9e02950d5b6ac7a9091cb4f87347737050ff861a5e3d6a39c057ac52148a3b8e64766a8250f08b6a0f9bd41c2143b0e84e8e7fd", @ANYRES16, @ANYRESOCT=r3], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000240)=r5, 0x4)
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="aba7"], 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x2, 0x80805, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
socket$inet6(0xa, 0x6, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800000}}, {{0xa, 0x0, 0xf5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}}}, 0x108)
sendmmsg$inet(r6, &(0x7f0000001040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r8, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8)
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x50)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)

1.32012024s ago: executing program 1 (id=342):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r4}, 0x8)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000080)={0x9, 0xa3}, 0x2) (async)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000080)={0x9, 0xa3}, 0x2)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x20004040) (async)
sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x20004040)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf254f000006000003006344f41d46cf337235da7c7c9ef39d9a329b0a34fc384eba7926af5c758e009faff6475163f300"/70, @ANYRES32=r11, @ANYBLOB="10007a800c0003004d0246c370db626d"], 0x2c}, 0x1, 0x0, 0x0, 0x4070}, 0x4000080)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022cbd7000fddbdf255c0000000c0099000000e3a1ca9d000008006b006e00000008006b00b400000008006b001c02000008fc63a45bbb08730b6c19a1006b003700000008006b00e001000008006b00b400000008006b000000000008006b00b400000008006b0014"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040810)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000013000300686173683a6e65742c6966f200000000"], 0x60}}, 0x0)

1.180300334s ago: executing program 1 (id=343):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)="00e9b72f", 0x4}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000840000000500000000000000030000002000000000000000840000000200000007000000040000002e000000d58109a280f0c6f89be4e5d3bcc558c817c9", @ANYRES32=0x0], 0x38, 0x800}], 0x1, 0x4008080) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9000911", 0x19}, {&(0x7f0000002580)="09c69e16e1536fcff84a6c972f929bd77111f8ed22e8b95278dba0549bed73bf9af7deee6b05e3387473", 0xfffffffffffffe50}], 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000003a40)={'veth1_macvtap\x00', &(0x7f0000003a00)=@ethtool_cmd={0x4e, 0x99, 0xfffffffd, 0x8, 0xff, 0x2, 0x8, 0x2, 0xcb, 0x3, 0x5, 0x0, 0x5, 0x3, 0x2, 0x5a, [0x4, 0x400]}}) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x9, 0x0, 0x0, 0x4040841}, 0x44800)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e000505000000000000000005"], 0x24}], 0x1}, 0x0)

639.953687ms ago: executing program 1 (id=344):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120004000000000000000000000006000000000000000000000000000000fc02000000000000000000000000000000000000000000000000000000000000030005000000000002004e20ac1414aa0000000000000000070019"], 0xc8}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x3ffff, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180000007a00010620080000000000000700000007000000a88e38c1d675631abbc0aea98eafe744a7e9322cdf57253ac637e27cf249cc3afa1f6dac353aa0c5697ba13881e98c8f962426a2efb12ca50000cd42"], 0x18}], 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200041, 0x0)

559.419423ms ago: executing program 1 (id=345):
r0 = socket(0x2a, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000008c0)=""/110, &(0x7f0000000940)=0x6e)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f031c00eee8120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

557.41621ms ago: executing program 2 (id=346):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, &(0x7f00000001c0)=0xb0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000700)="0800364b3a3bad78e61001", 0xb)
r2 = accept4(r1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2)

488.852612ms ago: executing program 1 (id=347):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@newqdisc={0x188, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7, 0x6, 0x3e, 0x1, 0x6, 0xb, 0x8}}, {0x14, 0x2, [0x174f, 0x0, 0x0, 0x8001, 0x4, 0x1, 0x5, 0x200]}}, {{0x1c, 0x1, {0x3, 0x5, 0x3, 0x2, 0x0, 0x8, 0x3, 0x5}}, {0xe, 0x2, [0xa, 0x8, 0x5, 0xc52, 0xf]}}, {{0x1c, 0x1, {0x40, 0x5, 0x4, 0x6, 0x1, 0x0, 0x57e, 0xa}}, {0x18, 0x2, [0x7fff, 0xe, 0x8001, 0x2, 0x8, 0x950, 0x401, 0x1, 0xfffa, 0x217b]}}, {{0x1c, 0x1, {0x0, 0x80, 0xe, 0x6, 0x0, 0x9, 0x0, 0x2}}, {0x8, 0x2, [0x7, 0x3c90]}}, {{0x1c, 0x1, {0xf8, 0xf7, 0x200, 0x3, 0x1, 0x800, 0x7, 0x7}}, {0x12, 0x2, [0x8001, 0x8, 0x5, 0xbf, 0x0, 0x101, 0x1]}}, {{0x1c, 0x1, {0x8, 0xa, 0x400, 0xffffffff, 0x1, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x5, 0x1, 0x7c5, 0x3, 0x0, 0x4, 0x9, 0x8}}, {0x14, 0x2, [0x1ff, 0x1, 0x5, 0x2, 0x200, 0x0, 0x733e, 0xe]}}, {{0x1c, 0x1, {0x3, 0x8, 0x6, 0x4, 0x1, 0x8, 0x3, 0x4}}, {0xc, 0x2, [0x4, 0x1, 0x101, 0x1000]}}]}]}, 0x188}}, 0x4000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a20fe00000000b6090800000000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001500000076000040bf98000000000000560801000000000085000000bf000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001040000000000000000000071120f000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f00000001c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r12, &(0x7f0000000700)='\x00\x00', 0x2)
splice(r12, &(0x7f0000000040), r11, 0x0, 0x800000000ff, 0x5)
vmsplice(r10, &(0x7f0000000100)=[{&(0x7f0000000340)="6af2a8", 0x3}], 0x1, 0x8)
sendfile(r7, r7, 0x0, 0x9)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r14}, 0x99)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000280)="aa", &(0x7f0000000400)=@udp=r13}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000340)=@udp=r13, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x1b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8001}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @alu={0x7, 0x3, 0x5, 0x3, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x4, 0x0, 0xc, 0x8, 0x7, 0x81}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x410}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x7, 0x1, 0x7, 0x4, 0x5, 0xffffffffffffffe0, 0xfffffffffffffffc}]}, &(0x7f00000006c0)='syzkaller\x00', 0x9f9, 0x67, &(0x7f0000000540)=""/103, 0x41100, 0x64, '\x00', r2, 0x0, r8, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x8, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600)=[r4, r5, r9, 0xffffffffffffffff, 0xffffffffffffffff, r8], &(0x7f0000000640)=[{0x5, 0x1, 0x9, 0x4}, {0x0, 0x4, 0x9, 0xb}, {0x1, 0x2, 0xb, 0x5}, {0x3, 0x1, 0x9, 0x4}, {0x1, 0x5, 0xe, 0x8}, {0x4, 0x5, 0x10, 0x8}], 0x10, 0x80000000}, 0x94)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

269.98936ms ago: executing program 2 (id=348):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x800, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x81)
r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @default, 0x0, [@default, @default, @remote, @default, @bcast, @rose]}, &(0x7f00000000c0)=0x40, 0x800)
getsockopt$rose(r2, 0x104, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={<r4=>0x0, 0x4, 0x30}, &(0x7f00000001c0)=0xc)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={r4, 0x4, 0x1ff}, &(0x7f0000000240)=0x8)
ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000300)=0x6, &(0x7f0000000340)=0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x5dee181bd10cd989}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80)
epoll_pwait(r3, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, 0xc2db, &(0x7f0000000540)={[0x6]}, 0x8)
accept$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f00000005c0)=0x1c)
accept4$rose(r2, &(0x7f0000000600)=@full={0xb, @dev, @rose, 0x0, [@netrom, @default, @null, @null, @netrom, @bcast]}, &(0x7f0000000640)=0x40, 0x800)
setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000680)=@int=0xa50, 0x4)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f00000006c0)={{<r10=>0x0, 0x4, 0x6, 0x100000000, 0x1, 0x2, 0x800, 0x6, 0x4a42, 0x5, 0xffffff00, 0xf202, 0x7, 0x6b9, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000000780)={{r10, 0x6, 0x8, 0x5, 0x7, 0x0, 0x9, 0x0, 0x7, 0x9, 0x1, 0x2, 0x9, 0x0, 0x9}})
socket$inet6(0xa, 0x6, 0x8000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000017c0), r11)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000001800)={'wpan4\x00', <r13=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000001900)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x48, r12, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000080)
r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c00)={0x6, 0x1d, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd910, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0x5, 0x4, 0xb, 0x9, 0x7}, @ldst={0x2, 0x3, 0x1, 0x3, 0xb, 0x18, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a40)='syzkaller\x00', 0x40, 0xba, &(0x7f0000001a80)=""/186, 0x41100, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b40)={0x0, 0x1, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001b80)=[0xffffffffffffffff, 0xffffffffffffffff, r9, 0x1], &(0x7f0000001bc0)=[{0x1, 0x5, 0x8, 0xb}, {0x1, 0x2, 0x4, 0x3}, {0x4, 0x4, 0x2, 0x8}, {0x0, 0x5, 0x8, 0x8}], 0x10, 0xcc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={r14, 0x0, 0x21, 0xc3, &(0x7f0000001cc0)="ea12be9137b16352689bbc3f69744a5a5519fb7e4cc2b16faa9df1e1edbd6fa9a6", &(0x7f0000001d00)=""/195, 0x1ff, 0x0, 0x77, 0x8f, &(0x7f0000001e00)="48f4099b0383254bb0359e38a44ce0973ae9041f6d03363fe1ca2e867e11b69154e14e46126c50e3f122c05be089e6a9bf80cdeaa3fdd20b81b8be903440e9f20c2d14a88b862fcc0f8daddc783c1a095768f38ad0cf05a5cfa21b132449558d71dff5a1efa5e9677cbc744ebda0e84f65501d9c3bc530", &(0x7f0000001e80)="510674452b1006596b63638333f4f6b60dc8ea516fee36ac980422c2cbb043cea075c21ed688d8ef2358dc6fea639e46033ffe066b833dd6da1e6fb1062948872670aabc788d82680a1cef9956c625ad9fb9484f0df0e3184e727980926420dfbac001ebc9203237450e46a484ce6f805914770ebc0fcc6c34a0a54276c4e62815cfc3b8b512bceddb5bfbf8bbdccc", 0x1}, 0x50)

213.654129ms ago: executing program 2 (id=349):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clock_gettime(0x0, &(0x7f0000000180)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000100)=[{r0, 0x44}, {r1, 0x431}, {r2, 0x80}, {r3}, {r4, 0x180}, {r5, 0x380}, {0xffffffffffffffff, 0x5014}, {r6, 0x20}, {r7, 0x22}], 0x9, &(0x7f00000001c0)={r8, r9+60000000}, &(0x7f0000000200)={[0x2]}, 0x8)
r10 = epoll_create1(0x80000)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r11, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1405, 0x8, 0x70bd29, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x801)
r12 = accept4$tipc(r6, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10, 0xc00)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f00000003c0)={0x2})
pipe(&(0x7f0000000400)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$nl_generic(r13, &(0x7f0000001780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001740)={&(0x7f0000000480)={0x1290, 0x11, 0x800, 0x70bd25, 0x25dfdbfd, {0x9}, [@typed={0xc, 0xff, 0x0, 0x0, @u64=0x2}, @nested={0x70, 0xc0, 0x0, 0x1, [@typed={0x63, 0x12b, 0x0, 0x0, @binary="38492d8f8a9ca613fa4b62cad4e5ef27ddfe0b78ca93be00e186c6bd88e4b8519e394e4254cb5d92e0765f4d2ce2b13f7b4145c9c1f139cb089bffa9653333868667c79e818035c5c2c90c3cecd377598c133522b1916ffec457795f258170"}, @typed={0x8, 0x3b, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x1180, 0xef, 0x0, 0x1, [@nested={0x4, 0x52}, @generic="bd13111dc0660911f8bf838abc1a67a7e73315b3e7dac0ad07bbee3933e601270e4439ec900ff5c5af9b73eb8c862195ba87bdd4dd89f9f141a5cdb8dc7ecac381f2fdf6c2b2b3d0ae3fda53e75d91d42c24366d30766b", @generic="ce20ba36d011946fa2ec2c35cc17d61eef855a6f1e38197ccdaf1f02b638e95616a67788311ad93de5acadefdc8eac2e9443a1a9feec16", @generic="d2bf9bc13dc638c8c3c7419d8d4b54b4bcee3a5e9ff2d0e500fcf3db90d96271aa5ffb8c706dae4f5befa931cab13e1160f29b7a4c07f3675ddb05a295c92e1fff3ad55069a742edadd165ae88d6f8f2ab828bd07aa3be2f9d4d54d21b76b97eb5a8c18095fbfede09619d08edc3dbf981e642cf5ac4caa2f346db3aba820c0d7f6f9309f9fcf9f4689517cafd3c4f28fc60c17c03b266c80d3b5b9ab3a71d2f7ababa8a89d46d6678b8d36bbbc2902a2904ebd6e8020ca894fdbd7777856fa26ff4895ea5a6ab2cd409f9186bca1bf9c466db6b5c14cd3e45fdf8b115a08c1c39b6", @typed={0x8, 0xa8, 0x0, 0x0, @u32=0x4}, @generic="664ed8d1a116fe610d187b40aae76508df3ca3775ea7b2f70640415a82b830558bf1bbb8420b4fe69cdd86614067de2d23bff7897fe3abd2b4c9d0e3a9281cfb095462563a0cfc9f972d393ef0a7f2169ab2683e62cb601eaee7719d732393bd739f808d47c4fbb5b9a93126c4d1993b95f8fba5e9547c81a9ed043c0f881f167b33a3cc2aa945da9652520df977f10c5639a1b89d5599e0047ca6a206f2bc42abb8469c231eceb02d3899bd0360d5043282781a554fbf8b0b65e5b865a806410689391458c329078833ec9b9e41c99a55faca16547a8b88a330087806821e293067473cb1e04b817e03d48514e3274a4e0025472506f64f8c1c2b2e7ce7b9a898e21ed912ddd3de080b0723fb564674aa43cca3952209fb58d0ca2f1059273f5cc699344b8bcce86537b6ad1ddfefff7545288ccad67af1d2c81353781785cdb27d2e16c199607881d3cc871b927f33a180dd9470134ae14b451d15cc9dd6875a3b5c662a7874b90081a60d5fb0eacc863767c22bd510506a75986c8563c4692095f5ee81792ddef2544d00c880f6cd66d7234dfdf55a83ebf744ee88457ee574b315a75a331ec8ff03b67cf3709afe2f5989ab4bacf4c7a2d8bb248d7d049434cfd0cded71c67809c10da639fba405200febd71c458704000a1a2e6af906933c4940a6510ffd9796229f9c81ff7e181d98fc5f06ae1c9ba97b63950118968d135b3b80e2d9ad147e07d7e6b906bb270f119af244ce9f63093210f2f9e359531d3e408a1a0ca7789dc7c5548db6ffd26c30d0924db756e8e1299e92197af3bc3dbb43203edf76070e0c7e4a71aec4db656bfb5061e2cd8ef6abdde028c284e58179527eab6e7458fac785c8fd31a5b5c4fdb3ba0edc707af942db29c5900675be42f0aace7abcac2ef0d7d9d36391e729181f74d22c4be2a7c237f628e57bff21c92d5d5afa94f1b1253535967b5c1898dcf27772ba51cdb070a12a9f872d0e9eb0e7d1704661ad71d4ff80f527b9998d2f75b92169f26f660efd1c2f58111f38c3dc1581621f1e56531713a65c055cccde01defbebef02143dc5a58f3d412ad06435207dd45f4ad4433967f6d71cc8108b7691cfa165b97964c03c8ebf48c1b14926f2b56ed52897f5ceae33c27daf4ee8559505a5954aa9a640cbd7abdf3039b46c81739838d4ebb5afb27640c541bd62026926342e03233a3afa312b565dbe84440e2e35c1d69afeced8376f362e284e1de7a0b469cd28c4f796212471017b5e32fe45dbc5d5b2b0eff908b58f7cbbe6ceba80496c8f74424350f059314465572ee10d32a5cdb6744a5388a7181d7fff5d9d70a4dce036cf3b01d26c02b654f4431cf0e773524e577d01da8a53b446067212a78097cb23094084e4b991d92f821ef6334f47e4c4b30ec59d252578f65c11da0bdce50b159b42a05925427a0fe2855c111ab4ef05cab9b8162a3c7183591080cc729c01238f67c6e4fa6c5098e0596403951a6e7a860af93832c468d19c2043383d72d632b12439a73956baf88f8ea7a5023d2c6c4942c1cb56c4fdc9361373309034e2504f4bb0ca0ccdd89df8e3e442d448ad0bfa20f301ed52666f587689dcce99ca09aaf0c8bc90c2536c69d937f3482d0794ee19844c21f6dd314cf07fb69bc3a6ff50420874fb72cd37ff060c9af7507b9bf38cb5feb43597af60a890c4dbc09c78935572150c8d9a97d17e090ce5fcd6a8bc9738337721c7b408ae51f960626d942a804391e10011f637b0418d632dc6bcfae214e875a1baf24ef6f0237f31efa7fba937ab1924474124b96bd49fcd96314bd1d91bb63eda560259f81662e7645fa7f559404439db216a2a80c72e1f0dd5230f5dee9d94f9800e9a7bcdf605817d77a23a524952fd2cadb2a1a5575bc92a4ac5ca95ad962299fa6d89929404516a32efd2ff0c809461fe56914790da082689b64188e7d5de64148ab286a78dc111cb37afb349ae04af954b2cf7b2f631c0d759248b3a40113bc1ffdedd8993d7aed4b9f1302c5130929ece6418ee70af5cae02b848393d2f3039682d40c9fb74b6d5eebee05512f31bf46ed6c685b15a9a476c8ce24b3ab5e8b4b91ebe76b2259b9f53b95ca5789d25e606f42dbe35141d832388f8205dbbf8c4f2318afaf2a108004bd36d19b9061220300422c84ce763f14e32dec336a4479ec12a10b08004666c4da3451e6d93ce991e4adf8ab435bcdda8d0e393f87fe2947dd1015ffa431616a7f3177f77c47b9e04cdca15dac9348c3d406078c149593d87bd7d8b6371656dea1eefd827a6041f567ea447840a1c23ea05fc3c7e04ed727f2303e491fe988d509b3cf4376ebfbd788e47a01607471cc56fe277b17fa1d0d983696a8929e2e410015ee1f438a0ca68a4e11ab50020f1968447f4291b66a511fff44cd1c0fea75fcdc51612da28131eaa018976066fd7c8efab33bb814b927d4ba45f50ba058b10281da59fa71fc2ecac67eb7d4714b5249fdb5383aae91666bc90f1653464608c98846aed94bafed18c29db758e9495b64988a2b16967bab1f4dfe365c57bb864643f6b5dcd76c5a8cd0f0d8728c1fda5811b67e5219b7deb18aa42f8495f3c2139b1e3a5eeb693d60a352e25b63ef92a8f69b83a6912728e274cfc0582c5dec3e85985c0036d13a95b5d4b2294bc364605d52eb27ea85e176de08bace3b2117c2a493518a06f18f2475123f16721a8eb3e38d1edb77c593846844d21947fea5717b93575dd2c54717edbc434b373a8aea6aef4038e320d53fb38e66b1f320fc39591c8888b1abd36598fcf55f74ab5e9e8b49af576efb2c5a4528f4a88d1a6867b3859376b1797be74fd9b9010915eb09b625db6da691ea0c936fac32b1ccda654cc2d831549b77a7eab00a0c1e36719d4d1c29a1dce232c1155244f2c638353969e9a96cc5dd6917779903eff0de74546af792146812fe46643c23222c814b7012693040a08a27119d7e05615cd83c51a5a0e9f9db2a8c5600428d02eb789cc98a923be4c8a4376b1f099e468741411a2ab8f2907a22f3db90cde50880109da8c2342c18018c6a8f7f795c168c15be160be41b5fa34eceaf4a64b66077dc99c02bdb09569558126035b5f165620bc2ab7907b7ecf1bb312ef093f3699215dc79e7ed69a08ad898bf743bcf087431c14bfd20fcc76fd99e03a3d20cded859a5026dcec08b43468410d45689792a4961669f3ead9d83bf01a27df86c473f4a25f0f7c579656a4d2c281e3ebfae31db252ed49f648eaba5bb66ecb7dc19f694335deebe39cc230eccd2d9bcc2abe032c72ffc95a1ce15eda2135d6c94a438b1d1063eb4e2141086ddc4b52c10a47d8ecb49254a93eed206e5f010a3d15bb76591b4a8447a35a9c8435ee3b7ab665c36dd2553b5a8c25063b375595555e5f21d878500e095da0cc4afd4dc793071185a68af5f309635dfd04df5339f0de20a4e3949244642f6c8e0bf62022cc02a501a75805baf81aa8dbe4a873ff60e1dc35e4a4843c507eece2c40f6f3b2cd4f2d067639ccc30554267c5f66c83efa0a398c0475df5eaaf3b8ff0e0325d2e87ee9670d989f7caa4850d6daec55a67fc167dfbaed09e69c7062dad6ff6ec133a371ba3480e0480e5c864f8cefb684f0b2cf2e048e3b5d28162a7f1b4453d20750c54532bea79e05a8c75f69020bde554fc658aa8ab5901c534781d4f1fd167dadca23cb873c1a2298a60a837124515ed26147e4180bfd8be88a59aec0b02abfff8238f2eed0c1e65717ec8968b128ba61ae8170371efd127eafb97b3b0e6d3556c47671f28ca304fdecfb0b0410ffab6cf263da8b189f7136bff6f1db7339006aca46afdefa1e402e215536bfb48f3fab92ece4002287944a5eb5195990ce3c955f0468750136657201b1f7e1c4d8bb4d5fcaaf487de8eb16e0910bcee02445762fe7a20069faae4e4287ae5877dc43605b8327397398c33fa0634700a2471bd1dd2a7b33f4c1d38e2ba3f9d793522ad5b95e241c7e59e889351eff011b859d64e4907a01af382497ffb882bf2660b0efaa6a57907d782948ef4b603d5885478f9937cf39c9532da012493452ea595dace7e014b34ca57f8ce5d222a1afe40f80ad8676c8a7607c279e35c09b788c34a683b596e19d1a9e1965d4bf631573d49a9465b16cdcc0cb386c41dcd8a7a3117e18957ca0b76eb72574cacfc020219418ebcdacffc5ac7e533d95e7027f4494c7c05bfb48236453f9f664a41a775fe58be2701237b5db59f4ae122a72aee6b43eb2e699696597006246b196d45af549d3a7c87a0e79042ebaf72e963f6dee165fc45930d656acf1672ef1f9a07547f6937ad10372e8f54350fdeafa7706a054df302772bef90ca0a1ba7c9afd8a50a157dc3f97e0ef73ae1ef58485c740059fc6f0f90649504a3bed970dcba8921eefaa46b7f2e70d27c07a2fca27b5e3c856af5f5424c92055c3807ae948a3142e0cdf571c7104fb4b0205dc72b1e926a096cebeb204b225cf869696b98a146d8fecf9fbb6643e8fa2b35568cee6cb317ab39ae34ef066fce91402ca3143c9ef1550dba1d42cb8cada076d20084be4218f040550dfd5b8ed5194f8acec66973d2f3416f0c33acc0a19cb6bd68fcd554321c1940d52b73134d849f9be294d38dfe44d78a524d9160c7a94fd6d51b5a7d3f6624c477243829dfa3adeb1f90a09787e48d09664382ae496cb12bc55b1ae3fa4f399805ed1360a7d3f920617448b454345b3e398ac83f55e7eb263b25e5fc6459df1128b8805d9da9a8eb0015365fb857bcfae92f97043fe887e6535564374d58f3b2d6df1667fd06760dd66cac9fcffaa33d9da88198b03e3ff3464b0dc054ef3c62d8b38ef5ee3d43724cb73cd6eb4058b5f28b3a3ea4a67865f1978a0852e6f87644356e1b6a8eba290c90c4f4088fa5cc2a288c9ba1a99365c0e843e234cb238cbc697795e3a66ed4f42a9ebc8210fb18bd7987d196979333e6d77ef2361d5c7dc97b4d7d69823214095e2e2c917cc5609bebf83f1f000b64b8af1e4dbe162561e21d59084c39009c82d11e5d9780f5e09e462192f1c4d7874990b794e0d36193c81bc5b9f4890b1876070290e1530d609a29697016461dda43089f361f971f8aa7d02122b05c0c573fa86b955101945c98c89f119f89591bd4630b15401d54028ef69501d3565b7706ee5db8b7b790a1c30e0da5bb321555bc7ddd17a51deda6b4c9981163bb5ae7bdf524b3ca6a6c005c57c28630d02d9cbaa92b3c30e8b0674657203ee1627fe942ac20acf74c8b64f672a541977130b6cc87ee017a72859a0e77bb92f8dab041f94a1a85c301c19554ccb82b46030335ff13bd09c6effbe638089be4ca0000fecb881e56f006bd18e40c6347a99ed8bf03751245d8ca2afa4fa15ac7d15f2caf79f54e0fa3ccd042a3ada906a8c20b00204013364dd7d602ddf9d5f6ac414fa54eb3038a8822436dc675db6655aa4673154b5b35acfa93e38b0d3cb7f4b6e1ff6e16969d7af62172d73930e8cb0032e1729925abfc76c60b80d0f17fb54d7478ab75fb92facd26bb4510a5df6e848221d221d15807f14f968ed66fb479b45376ca0431314c015c27307d08edf94fe1950da3f2880daa7b95b8dcb45f2fd8bb2db1f108e494ece39a97dd5b60276949d23ea6e36e04eafe62430ddaa3470d7e07237927befb1eaf2242900f6bd038cef78d060b6f74ff649949e2c2a7698a7550ed3ce9a94a1fa4ee717346408a4265f2965691703de97d024d5327cdd664c8e4"]}, @generic="975522db3dfc7064c4ec97bcd782dac7598cab1a438dac1796002bbffd964748ef937b65cb6b8d3f74367dcca53aa8e49f0ce914f345e888bf4fd24378edb1725b2fce844c5bb7001b9aaf8d6455b3a057049030417d22cb9cb4b291f6bc2cf1566451a163e3448cd5bd08630adc655b61efd60ac999687a9df828d5b1"]}, 0x1290}, 0x1, 0x0, 0x0, 0x4004815}, 0x34000081)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002900)={r13, 0x0, 0x25, 0x1000, &(0x7f00000017c0)="958cc17051b396d65d633b850091ccdce9c464ebdaa173272a1f8becb1bad5d9e1ffc0f00b", &(0x7f0000001800)=""/4096, 0x0, 0x0, 0x19, 0x95, &(0x7f0000002800)="92fa86eb4592b228a20a2ba89eb60388bcc84e7475f394bf3e", &(0x7f0000002840)="6b3ec8e48d5a18a6cddd6e36d721a6bd37b2419a839b5cad5964468a90b04c9613e9c8c485432e289b174a956b8e3e40bf9c23954066fd84184c5c9ce3c048c2c5e58951b8dc6caad0294c1dbae4af948ffe9c072284e2fbb23a37e9402dccbdf5c6c8449302f3345e27981024933224710bee92fea8c92764b2701f44aeeeb344840b5ead3ff8ddf6fbaf3b3cdc96fdac1507b648", 0x0, 0x0, 0x4}, 0x50)
r15 = accept$ax25(r14, 0x0, &(0x7f0000002980))
setsockopt$sock_int(r15, 0x1, 0x4, &(0x7f00000029c0)=0xffff0001, 0x4)
connect$ax25(r13, &(0x7f0000002a00)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null]}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000002a80)={<r16=>0x0, 0x400}, &(0x7f0000002ac0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f0000002b00)={r16, @in6={{0xa, 0x4e21, 0x3, @remote, 0x1}}, 0x9, 0x4, 0x9, 0x80000001, 0x82, 0x588}, 0x9c)
socket$netlink(0x10, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0xe)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r14, 0x84, 0x1, &(0x7f0000002bc0)={r16, 0x2, 0x0, 0x28f5, 0x4, 0x7}, 0x14)
ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000002f40)={0x4, &(0x7f0000002ec0)=[{0x40e, 0x89, &(0x7f0000002c00)="2245a07bdf5eea13de6600c3dac053977c08fa49593d084781ae12a06828fda56723c4688769d40f8bf95322bfc45694284bfff7f4e7264ba8ceaa5c733c9d06ae1e4a9dff7c9be334e66d3830f8933e9f5fdaadc8a16835d85070698e3105e57f18fb9799a825b1f90d83473a37fb534b17240d691576324d0bfadf047a1f8b99d9c929cd32de3d6b", 0x1}, {0xffffffff, 0xf4, &(0x7f0000002cc0)="45fede283d09f9920104132b2969f25b8058954d6d42e045b7e153bbab3187e4c0feb38ed98a4c14ad86fc7422cdff98f4db19f0c7c4a6800f2a993db33ff1ae61114bebec064427188d3e399ba1a9cb68e68a0213256073f5b4521a451325c15957ae639b8b15f1a2675e259f7d2cae6b1523b50477519580f3df74bc55e5c219a3dd59d76d699e3250e428bc7a3182eb678e8881e361c99cde14150e4e23e62f9baf235fc9e3e32962289b28695d57f581e40027ac2ffb14abbfc81a147be86031970c5e394a707d2d13bebd835dfe73127829ba5fe41f4699500e5045cb1c92d8b60c1259fd50591d9aa288de1725279de6bc", 0x0, 0x1}, {0x6, 0x16, &(0x7f0000002dc0)="475950a4d51617ca36422cdcb533b4a4f75c024b1b49", 0x1, 0x1}, {0x8, 0x9a, &(0x7f0000002e00)="0b845c4714deb998d0346370db58752c4465bef90e19caf587be8951f3a6dfde79cbcc3a4d176ce3911d323d6dc59fe7084fc8b19770b069bdb9fa9018bd838237e88adf3eb8e6a9f179138ca25a871a0513d8dcd42406131a2276fb35c35251fc4d3b1f983c2a55fb55a0627ed45989f0d39750f9d7de21bdbf222c948119c2f0c913379756015f13ca2d62da4d9985da411665b52ecbbdd217"}]})
bind$tipc(r13, &(0x7f0000002f80)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x2}}, 0x10)
connect$bt_l2cap(r13, &(0x7f0000002fc0)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x2}, 0xe)

127.386029ms ago: executing program 2 (id=350):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket(0x40000000015, 0x805, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}, @TCA_STAB={0x2e, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0xf3, 0x3, 0x1, 0x2, 0xfffffff7, 0x6}}, {0x10, 0x2, [0xdc02, 0x5, 0xc, 0x2, 0x6, 0x7b2]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockopt(r1, 0x114, 0x2714, 0x0, &(0x7f00000000c0))
recvfrom$inet(r0, &(0x7f0000000200)=""/247, 0xf7, 0x10000, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000008c0)=""/110, &(0x7f0000000940)=0x6e)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020)
connect$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x1, @private2, 0xfffffffd}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', <r7=>0x0})
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r5, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

69.932207ms ago: executing program 2 (id=351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000800), r5)
sendmsg$NFC_CMD_SE_IO(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r6, 0x9aa3b648c2ef6989, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x4040000)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1f00}, 0x48)
setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r6, 0xd1cee461d544b06e, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3ff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x40)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3c}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @empty}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x818977360ee8bc63}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xe1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x0)

0s ago: executing program 2 (id=352):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$unix(0x1, 0x1, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x7fff, 0x9, 0x4, 0x81}, 0x5, 0x1, 0x9, 0x2, 0x744, 0x4, 0x1b, 0xb, 0x3, 0x2, {0x8000, 0x4, 0x9, 0x8, 0x2, 0x1400}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18141' (ED25519) to the list of known hosts.
syzkaller login: [   41.215985][ T5761] cgroup: Unknown subsys name 'net'
[   41.316415][ T5761] cgroup: Unknown subsys name 'cpuset'
[   41.320142][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.642644][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.715044][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.719195][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.722379][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.725819][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.728624][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.745922][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.749184][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.751807][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.755334][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.758640][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.809201][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.812577][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.816168][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.819830][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.823716][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.929247][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   46.027121][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.029989][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.032473][ T5827] bridge_slave_0: entered allmulticast mode
[   46.035376][ T5827] bridge_slave_0: entered promiscuous mode
[   46.039251][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.041572][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.044478][ T5827] bridge_slave_1: entered allmulticast mode
[   46.047523][ T5827] bridge_slave_1: entered promiscuous mode
[   46.069992][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   46.077094][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.083653][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.087020][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   46.131647][ T5827] team0: Port device team_slave_0 added
[   46.135636][ T5827] team0: Port device team_slave_1 added
[   46.188095][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.190548][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.200015][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.218898][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.221326][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.223547][ T5831] bridge_slave_0: entered allmulticast mode
[   46.227052][ T5831] bridge_slave_0: entered promiscuous mode
[   46.230297][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.232529][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.240882][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.259828][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.262222][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.265648][ T5831] bridge_slave_1: entered allmulticast mode
[   46.268415][ T5831] bridge_slave_1: entered promiscuous mode
[   46.281144][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.283546][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.286387][ T5834] bridge_slave_0: entered allmulticast mode
[   46.289053][ T5834] bridge_slave_0: entered promiscuous mode
[   46.300986][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.305464][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.307854][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.310238][ T5834] bridge_slave_1: entered allmulticast mode
[   46.312854][ T5834] bridge_slave_1: entered promiscuous mode
[   46.323261][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.350023][ T5827] hsr_slave_0: entered promiscuous mode
[   46.352376][ T5827] hsr_slave_1: entered promiscuous mode
[   46.370950][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.375863][ T5831] team0: Port device team_slave_0 added
[   46.378989][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.382704][ T5831] team0: Port device team_slave_1 added
[   46.414952][ T5834] team0: Port device team_slave_0 added
[   46.429119][ T5834] team0: Port device team_slave_1 added
[   46.438940][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.441271][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.450956][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.469364][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.471621][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.480796][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.502074][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.505326][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.513523][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.520930][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.523114][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.532433][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.582376][ T5831] hsr_slave_0: entered promiscuous mode
[   46.584964][ T5831] hsr_slave_1: entered promiscuous mode
[   46.587637][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.590214][ T5831] Cannot create hsr debugfs directory
[   46.605547][ T5834] hsr_slave_0: entered promiscuous mode
[   46.607936][ T5834] hsr_slave_1: entered promiscuous mode
[   46.610778][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.614874][ T5834] Cannot create hsr debugfs directory
[   46.730761][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.753074][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.766251][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.781066][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.833934][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.836294][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.839025][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.841324][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.855035][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.865867][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.871240][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.887096][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.927051][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.940120][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.948079][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.950494][ T5831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.953031][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.955892][ T5831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.960940][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.967942][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.973018][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.977435][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.982267][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.986073][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.995316][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.019062][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   47.032203][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.034945][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.049340][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.051983][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.099002][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.111063][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.129517][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   47.141927][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.144242][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.153718][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.156076][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.167441][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.196893][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.212560][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   47.227192][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.229511][ T5106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.233176][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.235463][ T5106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.266603][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.270000][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.299801][ T5827] veth0_vlan: entered promiscuous mode
[   47.326348][ T5827] veth1_vlan: entered promiscuous mode
[   47.334475][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.367310][ T5827] veth0_macvtap: entered promiscuous mode
[   47.371123][ T5827] veth1_macvtap: entered promiscuous mode
[   47.378017][ T5831] veth0_vlan: entered promiscuous mode
[   47.391576][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.397249][ T5831] veth1_vlan: entered promiscuous mode
[   47.401389][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.411355][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.416096][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.419100][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.421938][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.425147][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.449379][ T5831] veth0_macvtap: entered promiscuous mode
[   47.456628][ T5831] veth1_macvtap: entered promiscuous mode
[   47.483720][ T5834] veth0_vlan: entered promiscuous mode
[   47.495897][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.503714][ T5834] veth1_vlan: entered promiscuous mode
[   47.510403][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.517292][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.525557][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.537917][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.540777][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.543604][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.547014][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.555374][ T5834] veth0_macvtap: entered promiscuous mode
[   47.555451][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.560753][ T5834] veth1_macvtap: entered promiscuous mode
[   47.560788][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.583729][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.592143][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.599023][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.601273][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.608717][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.611417][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.615942][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.675515][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.685291][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.704547][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.707980][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.737151][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.739707][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.770141][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.773050][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.775615][ T5830] Bluetooth: hci0: command tx timeout
[   47.797282][ T5896] batadv1: entered promiscuous mode
[   47.799867][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv1
[   47.843933][ T5219] Bluetooth: hci1: command tx timeout
[   47.845954][ T5830] Bluetooth: hci2: command tx timeout
[   47.933090][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'.
[   47.949923][ T5906] netlink: 'syz.1.4': attribute type 19 has an invalid length.
[   48.563300][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'.
[   48.651786][ T5921] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9'.
[   48.733161][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.815566][ T5930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   48.911202][ T5947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.016398][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   49.028861][ T5962] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   49.031272][ T5962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   49.091334][ T5969] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.18'.
[   49.316258][ T5989] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.20'.
[   49.319799][ T5990] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   49.322251][ T5990] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   49.336207][ T5989] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   49.339474][ T5989] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   49.678274][ T6015] nftables ruleset with unbound chain
[   49.730437][ T6015] Zero length message leads to an empty skb
[   49.779978][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'.
[   49.782907][ T6027] bridge_slave_1: left allmulticast mode
[   49.789085][ T6027] bridge_slave_1: left promiscuous mode
[   49.791089][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.798423][ T6027] bridge_slave_0: left allmulticast mode
[   49.800381][ T6027] bridge_slave_0: left promiscuous mode
[   49.802300][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.816360][ T6030] netlink: 44 bytes leftover after parsing attributes in process `syz.2.30'.
[   49.844860][ T5830] Bluetooth: hci0: command tx timeout
[   49.850200][ T6030] netlink: 68 bytes leftover after parsing attributes in process `syz.2.30'.
[   49.878908][ T6034] netlink: 'syz.1.32': attribute type 11 has an invalid length.
[   49.881527][ T6034] netlink: 224 bytes leftover after parsing attributes in process `syz.1.32'.
[   49.926809][ T5219] Bluetooth: hci1: command tx timeout
[   49.928610][ T5830] Bluetooth: hci2: command tx timeout
[   49.937501][ T6037] netlink: 'syz.2.33': attribute type 4 has an invalid length.
[   49.947142][ T6037] netlink: 'syz.2.33': attribute type 4 has an invalid length.
[   50.073932][ T6039] nbd2: detected capacity change from 0 to 63
[   50.078821][ T6041] block nbd2: NBD_DISCONNECT
[   50.080831][ T6041] block nbd2: Disconnected due to user request.
[   50.083323][ T6041] block nbd2: shutting down sockets
[   50.087915][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.091006][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[   50.093535][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.096415][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[   50.098739][ T6039] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   50.098928][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.098939][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[   50.098960][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.102765][ T6039] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   50.105552][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[   50.106262][ T5838] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.118610][ T5838] Buffer I/O error on dev nbd2, logical block 0, async page read
[   50.121408][ T5838] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.125041][ T5838] Buffer I/O error on dev nbd2, logical block 1, async page read
[   50.128090][ T5838] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.131205][ T5838] Buffer I/O error on dev nbd2, logical block 2, async page read
[   50.134168][ T5838] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.141003][ T5838] Buffer I/O error on dev nbd2, logical block 3, async page read
[   50.144999][ T5838] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.147940][ T5838] Buffer I/O error on dev nbd2, logical block 0, async page read
[   50.150497][ T5838] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   50.153512][ T5838] Buffer I/O error on dev nbd2, logical block 1, async page read
[   50.157685][ T5838] ldm_validate_partition_table(): Disk read failed.
[   50.161053][ T5838] Dev nbd2: unable to read RDB block 0
[   50.163688][ T5838]  nbd2: unable to read partition table
[   50.172049][ T5838] ldm_validate_partition_table(): Disk read failed.
[   50.175409][ T5838] Dev nbd2: unable to read RDB block 0
[   50.178167][ T5838]  nbd2: unable to read partition table
[   50.271759][ T6049] tipc: Started in network mode
[   50.273418][ T6049] tipc: Node identity d61cfbe315d2, cluster identity 4711
[   50.277665][ T6049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.283443][ T6051] tipc: Resetting bearer <eth:syzkaller0>
[   50.290841][ T6048] tipc: Disabling bearer <eth:syzkaller0>
[   50.444961][ T6057] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   51.272842][ T6162] bridge_slave_1: left allmulticast mode
[   51.279712][ T6162] bridge_slave_1: left promiscuous mode
[   51.286170][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.291073][ T6162] bridge_slave_0: left allmulticast mode
[   51.310743][ T6162] bridge_slave_0: left promiscuous mode
[   51.312800][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.526542][ T6174] netlink: 'syz.2.54': attribute type 1 has an invalid length.
[   51.529064][ T6174] netlink: 'syz.2.54': attribute type 4 has an invalid length.
[   51.774069][ T6193] nbd0: detected capacity change from 0 to 63
[   51.788716][   T56] block nbd0: Receive control failed (result -104)
[   51.936822][ T5830] Bluetooth: hci0: command tx timeout
[   52.005616][ T5219] Bluetooth: hci1: command tx timeout
[   52.007431][ T5830] Bluetooth: hci2: command tx timeout
[   52.029972][ T6222] IPv6: NLM_F_CREATE should be specified when creating new route
[   52.117986][ T6226] syz.2.70 uses obsolete (PF_INET,SOCK_PACKET)
[   52.132257][ T6228] gretap1: entered promiscuous mode
[   52.184830][ T6225] macvlan2: entered promiscuous mode
[   52.187079][ T6225] macvlan2: entered allmulticast mode
[   52.270836][ T6233] team0: Cannot enslave team device to itself
[   52.291699][ T6234] team0: Cannot enslave team device to itself
[   52.488360][ T6246] syzkaller0: entered promiscuous mode
[   52.502329][ T6246] syzkaller0: entered allmulticast mode
[   52.765863][ T6260] bond0: (slave bond_slave_0): Releasing backup interface
[   52.776107][ T6260] bond0: (slave bond_slave_1): Releasing backup interface
[   52.802976][ T6260] team0: Port device team_slave_0 removed
[   52.815878][ T6260] team0: Port device team_slave_1 removed
[   52.818143][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.820569][ T6260] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.830180][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.832521][ T6260] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.954131][ T6279] bond0: (slave bond_slave_0): Releasing backup interface
[   52.961352][ T6279] bond0: (slave bond_slave_1): Releasing backup interface
[   52.989904][ T6279] team0: Port device team_slave_0 removed
[   52.996338][ T6279] team0: Port device team_slave_1 removed
[   52.998716][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.001168][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.004973][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.007407][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.018707][ T6278] __nla_validate_parse: 16 callbacks suppressed
[   53.018716][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'.
[   53.022056][ T6276] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   53.027761][ T6276] netlink: 592 bytes leftover after parsing attributes in process `syz.0.82'.
[   53.074603][ T6288] x9: renamed from bridge_slave_0 (while UP)
[   53.161119][ T6299] netlink: 452 bytes leftover after parsing attributes in process `syz.2.90'.
[   53.448476][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'.
[   53.618244][ T6317] team0: Port device gtp0 added
[   53.649454][ T6318] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.97'.
[   53.652930][ T6316] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.97'.
[   53.662482][ T6316] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[   53.689557][ T6316] Cannot find add_set index 3 as target
[   53.710250][ T6316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   53.745936][ T6324] tap0: tun_chr_ioctl cmd 1074025677
[   53.747701][ T6324] tap0: linktype set to 769
[   53.757061][ T6324] validate_nla: 5 callbacks suppressed
[   53.757069][ T6324] netlink: 'syz.1.100': attribute type 83 has an invalid length.
[   53.841200][ T5862] hid-generic 0005:16C0:0003.0001: unknown main item tag 0x0
[   53.844553][ T5862] hid-generic 0005:16C0:0003.0001: unknown main item tag 0x0
[   53.846876][ T5862] hid-generic 0005:16C0:0003.0001: unknown main item tag 0x0
[   53.849289][ T5862] hid-generic 0005:16C0:0003.0001: unknown main item tag 0x0
[   53.851793][ T5862] hid-generic 0005:16C0:0003.0001: unknown main item tag 0x0
[   53.855069][ T5862] hid-generic 0005:16C0:0003.0001: unknown main item tag 0x0
[   53.862412][ T5862] hid-generic 0005:16C0:0003.0001: unknown main item tag 0x3
[   53.867241][ T5862] hid-generic 0005:16C0:0003.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   53.881067][ T6342] netlink: 14 bytes leftover after parsing attributes in process `syz.0.105'.
[   53.911065][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.106'.
[   53.914207][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.106'.
[   54.084619][ T5219] Bluetooth: hci1: command tx timeout
[   54.085622][ T5830] Bluetooth: hci2: command tx timeout
[   54.288566][ T6356] IPv6: Can't replace route, no match found
[   54.317702][ T6358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.109'.
[   55.177283][ T6368] netlink: 'syz.1.111': attribute type 11 has an invalid length.
[   55.240446][ T6380] netlink: 'syz.2.115': attribute type 1 has an invalid length.
[   55.450212][ T6397] bond0: Unable to set up delay as MII monitoring is disabled
[   55.506477][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.495223][ T6449] bridge_slave_1: left allmulticast mode
[   56.498139][ T6449] bridge_slave_1: left promiscuous mode
[   56.499965][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.503993][ T6449] x9: left allmulticast mode
[   56.505527][ T6449] x9: left promiscuous mode
[   56.507153][ T6449] bridge0: port 1(1x9) entered disabled state
[   56.578781][ T6443] tc_dump_action: action bad kind
[   56.637319][ T6460] geneve2: entered promiscuous mode
[   56.651416][ T6456] warning: `syz.1.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.802280][ T6481] sch_fq: defrate 0 ignored.
[   56.874157][ T6485] netlink: 'syz.0.144': attribute type 2 has an invalid length.
[   57.030655][ T6509] netlink: 'syz.0.151': attribute type 12 has an invalid length.
[   57.078097][ T6513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.080856][ T6513] batadv_slave_0: entered promiscuous mode
[   57.479869][ T6556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.577263][ T6564] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   57.790152][ T6595] netlink: 'syz.0.174': attribute type 9 has an invalid length.
[   57.795587][ T6589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.802756][ T6595] openvswitch: netlink: Message has 5 unknown bytes.
[   57.862004][ T6589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.897272][ T6589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.945093][ T6589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.985318][ T6603] netlink: 'syz.2.177': attribute type 180 has an invalid length.
[   58.038022][ T6607] __nla_validate_parse: 22 callbacks suppressed
[   58.038032][ T6607] netlink: 56 bytes leftover after parsing attributes in process `syz.0.178'.
[   58.038659][ T6589] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.084236][ T6608] netlink: 52 bytes leftover after parsing attributes in process `syz.2.179'.
[   58.087153][ T6608] netlink: 52 bytes leftover after parsing attributes in process `syz.2.179'.
[   58.092644][ T6608] netlink: 52 bytes leftover after parsing attributes in process `syz.2.179'.
[   58.100856][ T6610] netlink: 56 bytes leftover after parsing attributes in process `syz.0.178'.
[   58.128665][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.163661][ T6605] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.171097][ T6605] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.174063][ T6605] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.176970][ T6605] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.200688][ T6589] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.229068][ T6589] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.237586][ T6589] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.339219][ T6619] netlink: 72 bytes leftover after parsing attributes in process `syz.1.182'.
[   58.345675][ T6625] netlink: 'syz.0.184': attribute type 1 has an invalid length.
[   58.348325][ T6619] netlink: 72 bytes leftover after parsing attributes in process `syz.1.182'.
[   58.382181][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'.
[   58.448021][ T6625] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.497803][ T6638] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   58.502669][ T6638] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   58.511730][ T6638] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   58.517741][ T6638] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   58.524162][ T6638] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   58.529143][ T6638] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   58.535325][ T6638] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   58.540227][ T6638] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   58.547428][ T6641] netlink: 280 bytes leftover after parsing attributes in process `syz.0.187'.
[   58.563049][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'.
[   58.703106][ T6659] netlink: 'syz.1.194': attribute type 2 has an invalid length.
[   58.729512][ T6662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.731924][ T6662] syzkaller0: entered promiscuous mode
[   58.733649][ T6662] syzkaller0: entered allmulticast mode
[   58.738897][ T6662] tipc: Resetting bearer <eth:syzkaller0>
[   58.751872][ T6661] tipc: Resetting bearer <eth:syzkaller0>
[   58.761162][ T6661] tipc: Disabling bearer <eth:syzkaller0>
[   58.883124][ T6679] tipc: Started in network mode
[   58.886499][ T6679] tipc: Node identity 7f000001, cluster identity 4711
[   58.889223][ T6679] tipc: Enabled bearer <udp:syz2>, priority 10
[   59.643223][ T6728] tipc: Started in network mode
[   59.648214][ T6728] tipc: Node identity 8e20c6b2946b, cluster identity 4711
[   59.651939][ T6728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.656309][ T6728] syzkaller0: entered promiscuous mode
[   59.658082][ T6728] syzkaller0: entered allmulticast mode
[   59.668031][ T6726] tipc: Resetting bearer <eth:syzkaller0>
[   59.675829][ T6726] tipc: Disabling bearer <eth:syzkaller0>
[   59.925245][ T6753] raw_sendmsg: syz.0.224 forgot to set AF_INET. Fix it!
[   59.930062][ T6741] netlink: 'syz.2.220': attribute type 1 has an invalid length.
[   60.006216][   T10] tipc: Node number set to 2130706433
[   60.039815][ T6758] netlink: 'syz.2.225': attribute type 3 has an invalid length.
[   60.042453][ T6758] netlink: 'syz.2.225': attribute type 2 has an invalid length.
[   60.047282][ T6758] netlink: 'syz.2.225': attribute type 2 has an invalid length.
[   60.056843][ T6760] netlink: 'syz.2.225': attribute type 3 has an invalid length.
[   60.060612][ T6760] netlink: 'syz.2.225': attribute type 2 has an invalid length.
[   60.063422][ T6760] netlink: 'syz.2.225': attribute type 2 has an invalid length.
[   60.116306][ T6763] syz.2.226 (6763) used greatest stack depth: 20192 bytes left
[   60.325244][ T6767] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20002
[   60.330707][ T6767] netlink: 'syz.2.228': attribute type 12 has an invalid length.
[   60.333083][ T6767] netlink: 'syz.2.228': attribute type 11 has an invalid length.
[   61.807275][ T6790] netlink: 'syz.1.233': attribute type 11 has an invalid length.
[   61.857457][ T6792] tls_set_device_offload: netdev not found
[   62.089440][ T6809] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   62.125531][ T6809] team0: Port device gtp0 removed
[   62.138919][ T6809] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   62.166908][ T6809] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.173699][ T6809] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.177854][ T6824] ieee802154 phy0 wpan0: encryption failed: -22
[   62.187700][ T6825] bridge0: port 1(erspan0) entered blocking state
[   62.189922][ T6825] bridge0: port 1(erspan0) entered disabled state
[   62.200378][ T6825] erspan0: entered allmulticast mode
[   62.208915][ T6825] erspan0: entered promiscuous mode
[   62.215927][ T6825] erspan0: left allmulticast mode
[   62.217552][ T6825] erspan0: left promiscuous mode
[   62.219540][ T6825] bridge0: port 1(erspan0) entered disabled state
[   62.568134][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880238d2400: rx timeout, send abort
[   62.572728][ T6854] x_tables: duplicate underflow at hook 1
[   62.616721][ T6856] net_ratelimit: 26 callbacks suppressed
[   62.616732][ T6856] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   62.622469][ T6856] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.700438][ T6860] 8021q: VLANs not supported on ip6tnl0
[   62.798049][ T5827] syz-executor (5827) used greatest stack depth: 19720 bytes left
[   62.894494][   T95] cfg80211: failed to load regulatory.db
[   63.033718][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.040477][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.043647][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.048659][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.051744][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.071385][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880238d2400: abort rx timeout. Force session deactivation
[   63.093528][ T6881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.096876][ T6881] syzkaller0: entered promiscuous mode
[   63.098564][ T6881] syzkaller0: entered allmulticast mode
[   63.112562][ T6881] tipc: Resetting bearer <eth:syzkaller0>
[   63.121474][ T6881] tipc: Resetting bearer <eth:syzkaller0>
[   63.128360][ T6881] tipc: Disabling bearer <eth:syzkaller0>
[   63.160049][ T6883] __nla_validate_parse: 29 callbacks suppressed
[   63.160059][ T6883] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.266'.
[   63.325707][ T6873] chnl_net:caif_netlink_parms(): no params data found
[   63.332633][ T6897] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   63.397787][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'.
[   63.429173][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.432112][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.438523][ T6873] bridge_slave_0: entered allmulticast mode
[   63.443058][ T6873] bridge_slave_0: entered promiscuous mode
[   63.450003][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.452887][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.457014][ T6873] bridge_slave_1: entered allmulticast mode
[   63.459659][ T6873] bridge_slave_1: entered promiscuous mode
[   63.482036][ T6873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.486634][ T6873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.508671][ T6873] team0: Port device team_slave_0 added
[   63.512515][ T6873] team0: Port device team_slave_1 added
[   63.535777][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.538172][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.547471][ T6873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.559693][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.562047][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.570069][ T6873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.621855][ T6873] hsr_slave_0: entered promiscuous mode
[   63.626442][ T6873] hsr_slave_1: entered promiscuous mode
[   63.630131][ T6873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.632957][ T6873] Cannot create hsr debugfs directory
[   63.840238][ T6923] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.843499][ T6923] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.847312][ T6923] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.850007][ T6923] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.876016][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'.
[   63.926882][ T6932] syzkaller1: entered promiscuous mode
[   63.928781][ T6932] syzkaller1: entered allmulticast mode
[   63.982396][ T6873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.023891][ T6873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.074848][ T6873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.162070][ T6873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.286448][ T6873] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.291923][ T6873] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.298112][ T6873] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.302989][ T6873] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.321129][ T6935] tipc: Cannot configure node identity twice
[   64.323310][ T6935] openvswitch: netlink: Message has 80 unknown bytes.
[   64.367819][ T6873] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.379418][ T6873] 8021q: adding VLAN 0 to HW filter on device team0
[   64.387971][ T2347] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.390195][ T2347] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.405784][ T2347] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.408019][ T2347] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.446145][ T6956] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.276'.
[   64.508548][ T6873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.532772][ T6873] veth0_vlan: entered promiscuous mode
[   64.540643][ T6873] veth1_vlan: entered promiscuous mode
[   64.559127][ T6873] veth0_macvtap: entered promiscuous mode
[   64.566795][ T6873] veth1_macvtap: entered promiscuous mode
[   64.579265][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.586213][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.591173][ T6873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.594647][ T6873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.598371][ T6873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.601073][ T6873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.649948][ T6117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.658805][ T6117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.672479][ T2347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.676493][ T2347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.599851][ T6989] netlink: 732 bytes leftover after parsing attributes in process `syz.2.283'.
[   65.602784][ T6989] netlink: 732 bytes leftover after parsing attributes in process `syz.2.283'.
[   65.690021][ T6994] validate_nla: 8 callbacks suppressed
[   65.690030][ T6994] netlink: 'syz.2.285': attribute type 2 has an invalid length.
[   65.698331][ T6994] netlink: 'syz.2.285': attribute type 39 has an invalid length.
[   66.323468][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.286'.
[   66.352295][ T6999] bridge1: entered allmulticast mode
[   66.387796][ T7001] netlink: 'syz.1.288': attribute type 21 has an invalid length.
[   66.390203][ T7001] netlink: 128 bytes leftover after parsing attributes in process `syz.1.288'.
[   66.393024][ T7001] netlink: 'syz.1.288': attribute type 4 has an invalid length.
[   66.396443][ T7001] netlink: 'syz.1.288': attribute type 5 has an invalid length.
[   66.398908][ T7001] netlink: 3 bytes leftover after parsing attributes in process `syz.1.288'.
[   66.407680][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'.
[   66.449544][ T7005] delete_channel: no stack
[   66.502855][ T7009] xt_l2tp: missing protocol rule (udp|l2tpip)
[   66.602429][ T5856] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.692502][ T7029] bridge0: failed insert local address into bridge forwarding table
[   66.815003][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.818064][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.820453][ T7031] geneve2: entered promiscuous mode
[   66.822481][ T7031] geneve2: entered allmulticast mode
[   66.822797][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.827989][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.834644][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.957790][ T7034] chnl_net:caif_netlink_parms(): no params data found
[   67.014653][ T7048] lo speed is unknown, defaulting to 1000
[   67.025023][ T7048] lo speed is unknown, defaulting to 1000
[   67.039485][ T7048] lo speed is unknown, defaulting to 1000
[   67.044884][ T7048] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.051367][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.054142][ T7048] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   67.064407][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.071459][ T7034] bridge_slave_0: entered allmulticast mode
[   67.078172][ T7034] bridge_slave_0: entered promiscuous mode
[   67.086337][ T7048] lo speed is unknown, defaulting to 1000
[   67.086684][ T7034] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.090705][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.093497][ T7034] bridge_slave_1: entered allmulticast mode
[   67.098647][ T7034] bridge_slave_1: entered promiscuous mode
[   67.101328][ T7048] lo speed is unknown, defaulting to 1000
[   67.109079][ T7048] lo speed is unknown, defaulting to 1000
[   67.112623][ T7048] lo speed is unknown, defaulting to 1000
[   67.129983][ T7048] lo speed is unknown, defaulting to 1000
[   67.131625][ T7034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.157553][ T7034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.196678][ T7034] team0: Port device team_slave_0 added
[   67.223531][ T7034] team0: Port device team_slave_1 added
[   67.254687][ T7078] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   67.283115][ T7078] bond4: entered promiscuous mode
[   67.289193][ T7078] 8021q: adding VLAN 0 to HW filter on device bond4
[   67.292349][ T7034] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.296640][ T7034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.305029][ T7034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.317446][ T7071] bond4: (slave bridge3): making interface the new active one
[   67.320039][ T7071] bridge3: entered promiscuous mode
[   67.322358][ T7071] bond4: (slave bridge3): Enslaving as an active interface with an up link
[   67.328219][ T7034] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.330504][ T7034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.354128][ T7034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.403097][ T7034] hsr_slave_0: entered promiscuous mode
[   67.406358][ T7034] hsr_slave_1: entered promiscuous mode
[   67.408516][ T7034] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.410990][ T7034] Cannot create hsr debugfs directory
[   67.493232][ T7094] netlink: 'syz.2.311': attribute type 25 has an invalid length.
[   67.591918][ T7103] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (4095)
[   67.595442][ T7103] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   67.725934][ T7113] team0 (unregistering): Port device team_slave_0 removed
[   67.729975][ T7113] team0 (unregistering): Port device team_slave_1 removed
[   67.947498][ T7135] bond0: (slave wlan1): Releasing backup interface
[   67.950453][ T7135] bond0: Destroying bond
[   67.999249][ T7135] bond0 (unregistering): Released all slaves
[   68.109470][ T7147] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   68.351696][ T5856] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.418554][ T5856] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.468205][ T5856] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.478366][ T7177] netlink: 'syz.2.336': attribute type 1 has an invalid length.
[   68.492583][ T7177] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.505170][ T7177] bond1: (slave bridge0): making interface the new active one
[   68.509070][ T7177] bond1: (slave bridge0): Enslaving as an active interface with an up link
[   68.526509][ T7177] gretap1: entered promiscuous mode
[   68.530429][ T7177] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   68.678918][ T5856] bridge_slave_1: left allmulticast mode
[   68.680801][ T5856] bridge_slave_1: left promiscuous mode
[   68.683200][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.728239][ T5856] bridge_slave_0: left allmulticast mode
[   68.730052][ T5856] bridge_slave_0: left promiscuous mode
[   68.731968][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.189069][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.193364][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.197831][ T5856] bond0 (unregistering): Released all slaves
[   69.389890][ T7203] __nla_validate_parse: 11 callbacks suppressed
[   69.389901][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'.
[   69.688199][ T5856] hsr_slave_0: left promiscuous mode
[   69.690673][ T5856] hsr_slave_1: left promiscuous mode
[   69.693182][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.700882][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.725023][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.727483][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.757636][ T5856] veth1_macvtap: left promiscuous mode
[   69.759614][ T5856] veth0_macvtap: left promiscuous mode
[   69.761378][ T5856] veth1_vlan: left promiscuous mode
[   69.775827][ T5856] veth0_vlan: left promiscuous mode
[   70.108657][ T5856] team0 (unregistering): Port device team_slave_1 removed
[   70.129157][ T5856] team0 (unregistering): Port device team_slave_0 removed
[   70.410277][ T7034] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.417345][ T7034] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.429547][ T7034] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.440845][ T7034] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.449520][ T7235] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[   70.585672][ T7034] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.593378][ T7034] 8021q: adding VLAN 0 to HW filter on device team0
[   70.617529][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.619854][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.627470][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.629743][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.807374][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.809577][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.822052][ T7275] sctp: [Deprecated]: syz.2.348 (pid 7275) Use of int in max_burst socket option deprecated.
[   70.822052][ T7275] Use struct sctp_assoc_value instead
[   70.828866][ T7034] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.858879][ T7034] veth0_vlan: entered promiscuous mode
[   70.863682][ T7034] veth1_vlan: entered promiscuous mode
[   70.894896][ T7034] veth0_macvtap: entered promiscuous mode
[   70.901061][ T7034] veth1_macvtap: entered promiscuous mode
[   70.911158][ T7034] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.917376][ T7034] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.925167][ T7034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.928033][ T7034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.933941][ T7034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.936787][ T7034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.962256][ T7282] netlink: 14 bytes leftover after parsing attributes in process `syz.2.350'.
[   70.990359][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.998142][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.016985][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.019962][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.030031][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'.
[   71.129707][ T7292] ------------[ cut here ]------------
[   71.131732][ T7292] WARNING: CPU: 0 PID: 7292 at fs/exec.c:119 path_noexec+0x1af/0x200
[   71.134446][ T7292] Modules linked in:
[   71.135952][ T7292] CPU: 0 UID: 0 PID: 7292 Comm: syz.2.353 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   71.140576][ T7292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.144148][ T7292] RIP: 0010:path_noexec+0x1af/0x200
[   71.145820][ T7292] Code: 02 31 ff 48 89 de e8 d0 3d 8a ff d1 eb eb 07 e8 e7 38 8a ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 15 3c 09 cc e8 d2 38 8a ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[   71.151795][ T7292] RSP: 0018:ffffc9000308fbd8 EFLAGS: 00010287
[   71.153892][ T7292] RAX: ffffffff8235fd9e RBX: ffff8881228a3a80 RCX: 0000000000080000
[   71.156505][ T7292] RDX: ffffc900075ca000 RSI: 000000000000032d RDI: 000000000000032e
[   71.158970][ T7292] RBP: 0000000000080000 R08: ffff888109c10000 R09: 0000000000000003
[   71.161436][ T7292] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000008053
[   71.164151][ T7292] R13: 1ffff92000611f90 R14: 0000000000000000 R15: dffffc0000000000
[   71.167035][ T7292] FS:  00007fcf002506c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[   71.169969][ T7292] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   71.172110][ T7292] CR2: 0000200000000680 CR3: 000000011bdb4000 CR4: 00000000000006f0
[   71.174981][ T7292] Call Trace:
[   71.176107][ T7292]  <TASK>
[   71.177117][ T7292]  do_mmap+0xa43/0x10d0
[   71.178417][ T7292]  ? __pfx_do_mmap+0x10/0x10
[   71.179842][ T7292]  ? down_write_killable+0x178/0x230
[   71.181542][ T7292]  ? end_current_label_crit_section+0x152/0x180
[   71.183610][ T7292]  ? __pfx_down_write_killable+0x10/0x10
[   71.185433][ T7292]  vm_mmap_pgoff+0x31b/0x4c0
[   71.186952][ T7292]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   71.188540][ T7292]  ? __fget_files+0x2a/0x420
[   71.190073][ T7292]  ? __fget_files+0x3a0/0x420
[   71.191606][ T7292]  ? __fget_files+0x2a/0x420
[   71.193112][ T7292]  ksys_mmap_pgoff+0x51f/0x760
[   71.194837][ T7292]  do_syscall_64+0xfa/0x3b0
[   71.196335][ T7292]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.197967][ T7292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.199942][ T7292]  ? exc_page_fault+0x9f/0xf0
[   71.201501][ T7292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.203451][ T7292] RIP: 0033:0x7fceff38e929
[   71.205103][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.211268][ T7292] RSP: 002b:00007fcf00250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   71.214160][ T7292] RAX: ffffffffffffffda RBX: 00007fceff5b5fa0 RCX: 00007fceff38e929
[   71.217099][ T7292] RDX: 000000000100000c RSI: 0000000000001000 RDI: 0000200000ffe000
[   71.219698][ T7292] RBP: 00007fceff410b39 R08: 0000000000000006 R09: 00000000ffffe000
[   71.222270][ T7292] R10: 0000000000008053 R11: 0000000000000246 R12: 0000000000000000
[   71.225190][ T7292] R13: 0000000000000000 R14: 00007fceff5b5fa0 R15: 00007fff41f61098
[   71.227964][ T7292]  </TASK>
[   71.229013][ T7292] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   71.231384][ T7292] CPU: 0 UID: 0 PID: 7292 Comm: syz.2.353 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   71.235393][ T7292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.238697][ T7292] Call Trace:
[   71.239824][ T7292]  <TASK>
[   71.241082][ T7292]  dump_stack_lvl+0x99/0x250
[   71.242679][ T7292]  ? __asan_memcpy+0x40/0x70
[   71.244309][ T7292]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.246371][ T7292]  ? __pfx__printk+0x10/0x10
[   71.248286][ T7292]  panic+0x2db/0x790
[   71.250048][ T7292]  ? __pfx_panic+0x10/0x10
[   71.252020][ T7292]  __warn+0x31b/0x4b0
[   71.253699][ T7292]  ? path_noexec+0x1af/0x200
[   71.255756][ T7292]  ? path_noexec+0x1af/0x200
[   71.257783][ T7292]  report_bug+0x2be/0x4f0
[   71.259671][ T7292]  ? path_noexec+0x1af/0x200
[   71.261714][ T7292]  ? path_noexec+0x1af/0x200
[   71.263688][ T7292]  ? path_noexec+0x1b1/0x200
[   71.265664][ T7292]  handle_bug+0x84/0x160
[   71.267495][ T7292]  exc_invalid_op+0x1a/0x50
[   71.269471][ T7292]  asm_exc_invalid_op+0x1a/0x20
[   71.271181][ T7292] RIP: 0010:path_noexec+0x1af/0x200
[   71.272838][ T7292] Code: 02 31 ff 48 89 de e8 d0 3d 8a ff d1 eb eb 07 e8 e7 38 8a ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 15 3c 09 cc e8 d2 38 8a ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[   71.279484][ T7292] RSP: 0018:ffffc9000308fbd8 EFLAGS: 00010287
[   71.282049][ T7292] RAX: ffffffff8235fd9e RBX: ffff8881228a3a80 RCX: 0000000000080000
[   71.285164][ T7292] RDX: ffffc900075ca000 RSI: 000000000000032d RDI: 000000000000032e
[   71.288378][ T7292] RBP: 0000000000080000 R08: ffff888109c10000 R09: 0000000000000003
[   71.291704][ T7292] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000008053
[   71.295047][ T7292] R13: 1ffff92000611f90 R14: 0000000000000000 R15: dffffc0000000000
[   71.298398][ T7292]  ? path_noexec+0x1ae/0x200
[   71.300239][ T7292]  ? path_noexec+0x1ae/0x200
[   71.301718][ T7292]  do_mmap+0xa43/0x10d0
[   71.303077][ T7292]  ? __pfx_do_mmap+0x10/0x10
[   71.304555][ T7292]  ? down_write_killable+0x178/0x230
[   71.306258][ T7292]  ? end_current_label_crit_section+0x152/0x180
[   71.308272][ T7292]  ? __pfx_down_write_killable+0x10/0x10
[   71.310151][ T7292]  vm_mmap_pgoff+0x31b/0x4c0
[   71.311616][ T7292]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   71.313289][ T7292]  ? __fget_files+0x2a/0x420
[   71.314860][ T7292]  ? __fget_files+0x3a0/0x420
[   71.316478][ T7292]  ? __fget_files+0x2a/0x420
[   71.318061][ T7292]  ksys_mmap_pgoff+0x51f/0x760
[   71.319680][ T7292]  do_syscall_64+0xfa/0x3b0
[   71.321196][ T7292]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.322954][ T7292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.324960][ T7292]  ? exc_page_fault+0x9f/0xf0
[   71.326517][ T7292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.328475][ T7292] RIP: 0033:0x7fceff38e929
[   71.329980][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.336309][ T7292] RSP: 002b:00007fcf00250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   71.339088][ T7292] RAX: ffffffffffffffda RBX: 00007fceff5b5fa0 RCX: 00007fceff38e929
[   71.341698][ T7292] RDX: 000000000100000c RSI: 0000000000001000 RDI: 0000200000ffe000
[   71.344311][ T7292] RBP: 00007fceff410b39 R08: 0000000000000006 R09: 00000000ffffe000
[   71.346960][ T7292] R10: 0000000000008053 R11: 0000000000000246 R12: 0000000000000000
[   71.349565][ T7292] R13: 0000000000000000 R14: 00007fceff5b5fa0 R15: 00007fff41f61098
[   71.352181][ T7292]  </TASK>
[   71.353884][ T7292] Kernel Offset: disabled
[   71.355334][ T7292] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:20:10  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000004e66 RDI=0000000000004e67 RBP=00000000000003f8 RSP=ffffc9000308f370
R8 =ffff8881074f0237 R9 =1ffff11020e9e046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af989c R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcf002506c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000680 CR3=000000011bdb4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fceff585478 00007fceff585450 XMM03=00007fceff585488 00007fceff585480
XMM04=00007fcf000ed100 00007fceff585440 XMM05=00007fceff585458 00007fceff5854a0
XMM06=00007fceff585498 00007fceff585490 XMM07=00007fceff585488 00007fceff585480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fceff411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1791df9d5250ea00 RBX=ffffffff81976c78 RCX=1791df9d5250ea00 RDX=0000000000000001
RSI=ffffffff8d998b14 RDI=ffffffff8be29dc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f3f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c24a77d CR3=00000001173ee000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fceff411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
